@User > Does supertokens not add cookies/session to requests made to the subdomain of the apiDomain? You need to set the

cookieDomain

config in the backend's

Session.init()

to something like

".api.example.com"

. This will send the cookies to

api.example.com

and to

*.api.example.com

. I think there will be one more change required from our side for this to happen, which I can make today and release a new version... ------------- > No cookies getting attached to the request. - Is this the sub domain of your API's sub domain? Or is it a totally different API domain? - Have you correctly configured CORS for this domain? - Is this domain

https

, and is the

secure

flag in cookies

https

? - Is there any output on the browser console when querying this domain? - What is the status code output of the API when you query? 200? 401?