We are using cookies to authenticate requests to a data store. GLTFLoader is used to load 3D models from this data store. We have been trying to set crossOrigin = 'use-credentials or setCrossOrigin('use-credentials');, however, cookies are not being sent to download the GLB/GLTF file.
From reviewing the code for GLTFLoader it appears that withCredentials is not being set on FileLoader when crossOrigin === 'use-credentials'. See these lines: https://github.com/mrdoob/three.js/blob/93e72ba7b24958ddb0652bd33171edd14ed2d693/examples/js/loaders/GLTFLoader.js#L66-L71
It appears that the solution is to check if crossOrigin === 'use-credentials and call loader.setWithCredentials(true) around line 70.
Should be taken care of by this PR:
Most helpful comment
Should be taken care of by this PR:
https://github.com/mrdoob/three.js/pull/16601