Implementing CORS

I found the cause of the cookies not being send to my logout service. I'm sending a GET request instead of a POST since no body data is needed. But I forgot to pass the credentials: 'include' option to the fetch function. After adding that, the cookies are being passed.

@Mark Volkmann you're jumping ahead i think =)

https://www.leveluptutorials.com/tutorials/level-2-node-authentication/fixing-logout

After making all the changes up to this point, my API service for logging out no longer receives any cookies. Since I don't get the refresh-token, I can't find the session and delete it. I do see the access-token and refresh-token in the browser DevTools. The both have the domain ".nodeauth.dev". Note the period at the beginning. Is that the expected domain value? Should it be "api.nodeauth.dev" instead? Do I need to change the value of ROOT_DOMAIN in my .env file from "nodeauth.dev" to "api.nodeauth.dev"?