ADR-002: The runner sends every request

Status: Accepted

Decision: Every call to fetch() happens in the runner (the content script on patreon.com), with credentials: 'include'. The calls must not move to the service worker.

Why: a context in the extension origin does not reliably send the session cookies of a different origin. The runner uses the session of the page because it has the same origin. Gopher therefore has no cookie permission, no call to chrome.cookies, and no OAuth.

Read the runner and permissions and configuration.