Styjun

I have been attempting to get rack-cors and axios to work together with the setting withCredentials: true. I have tried a wildcard origin as well as the development origin app.lvh.me:3000. I am trying to hit the API on the subdomain api.lvh.me:3000. I feel like I am overlooking something from staring at the problem too long. It works fine in Safari but not in Chrome. Any ideas how to fix this? This is the rack-cors config:

config.middleware.insert_before 0, Rack::Cors, debug: true, logger: proc Rails.logger do
 allow do
 origins '*'
 resource '*', headers: :any, methods: [:get, :post, :put, :patch, :delete, :options, :head], expose: ['Content-Type', 'X-Alternative-Payment-Required'], credentials: true
 end
end

Axios client:

this.client = axios.create(
 baseURL: process.env.API_ROOT_URL,
 timeout: process.env.NODE_ENV === 'development' ? 0 : 35000,
 withCredentials: true,
 headers: 
 Accept: 'application/json',
 'Content-Type': 'application/json',
 ,
);

Request Details:

General:
Request URL: http://api.lvh.me:3000/v1/users/105/notifications
Request Method: GET
Status Code: 401 Unauthorized
Remote Address: 127.0.0.1:3000
Referrer Policy: strict-origin-when-cross-origin

Response Headers:
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD
Access-Control-Allow-Origin: http://app.lvh.me:3000
Access-Control-Expose-Headers: Content-Type, X-Alternative-Payment-Required
Access-Control-Max-Age: 1728000
Cache-Control: no-cache
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Vary: Origin
WWW-Authenticate: Bearer realm=Application
X-Rack-CORS: hit
X-Request-Id: 484a55cc-e4b8-49d3-b2fd-0e4ed7c7d0a6
X-Runtime: 0.268253

Request Headers:
Accept: application/json
Origin: http://app.lvh.me:3000
Referer: http://app.lvh.me:3000/
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36