Add docs about how to pass a session cookie

Hey @stubailo @jbaxleyiii

I checked out the Meteor demo and also @johnthepink PR for auth middleware. For SPA’s this would work well, because they would need some kind of middleware to authenticate with server to share context, but if the app works in the same environment as server it would be important to share session state with server through apollo client during requests (also it’s easier). You may have seen in Relay that they allow setting headers and passing session cookie: https://facebook.github.io/relay/docs/guides-network-layer.html directly through network layer.

This approach is super simple, what you think? Is am missing anything?

[gauravtiwari]

Thanks @jbaxleyiii that makes sense. So, it’s basically same thing as Relay. For anyone else using Rails or some other framework environment,

import ApolloClient, { createNetworkInterface } from 'apollo-client';

const networkInterface = createNetworkInterface('/graphql', {
  credentials: 'same-origin',
  headers: {
    'X-CSRF-Token': "xyz",
    token: 'supersecret'
  }
});

const client = new ApolloClient({ networkInterface });

[bkeating]

A bit late here, but as a Django / graphene-python user, I got things working only after renaming my CSRF header key from X-CSRF-Token to X-CSRFToken.