XMLHttpRequest with the current user credentials

[Andrew Pishchul]

Looking for options how to execute XMLHttpRequest with the current (logged in) user's credentials.

Very simple code (UI script), same domain/origin, but it doesn't work - every time it asks for credentials:

var data = JSON.stringify({
   "short_description": "Hello"
});
var xhr = new XMLHttpRequest();
xhr.withCredentials = true;
xhr.open("POST", "https://XXXX.service-now.com/api/now/table/incident");
xhr.setRequestHeader("content-type", "application/json");
xhr.setRequestHeader("Access-Control-Allow-Credentials","true");
xhr.send(data);

Any ideas? josh.nerius?

[Andrew Pishchul · Accepted solution]

Found the solution: X-UserToken

[krishnaj22]

use the following in ui page

var userToken = document.getElementById('sysparm_ck').value;

oReq.setRequestHeader("X-UserToken", userToken);