Local strategy: ctx.state.user is undefined

I am trying to set up local authentication for my react app. Since I would like to handle the routing on the client side, I am not redirecting via passport. My flow would look like this:

• POST request from the client with email and password
• GET request from the client to fetch user data

I have set it up like this:

router.post('/login/local', passport.authenticate('local-login', function(err, user, info) {
    if (err) // handle error
    else if (!user && info) // handle no user
    else {
      // handle successful login
      ctx.login(user);
    }
  }));

That works fine and I send back the response to the client. But when I send another request from the client to access the user data, there is no user data attached to the request:

router.get('/profile', (ctx) => {
    // ctx.state.user is undefined
}

What am I missing here? Is this not how it should work?

[JonathanWbn]

Yes! That’s exactly it. I had to allow sending cookies on the fetch and in koa-cors. Thank you so much, really appreciate it.

[rkusa]

Since you are using the CORS middleware, does the GET request for fetching the user information come from another host? If so, you may need to adjust the credentials option of the fetch API.