fix: include credentials in results logging

src/index.ts

@@ -795,6 +795,7 @@ class SpeedTestEngine extends MeasurementEngine {
     }
     logFinalResults(results, {
       apiUrl,
+      includeCredentials: this.config.includeCredentials,
       sessionId: this.config.sessionId,
       authorization: this.authorization
     }).then(response => {

src/logging/logFinalResults.ts

@@ -28,6 +28,8 @@ interface ScoreEntry {
 interface LogConfig {
   /** URL to POST the results to. */
   apiUrl: string;
+  /** Whether to include credentials in the request. */
+  includeCredentials: boolean;
   /** Session ID to include in the log payload. */
   sessionId: string | undefined;
   /** Token attributing this test, sent as an `Authorization` header. */
@@ -111,7 +113,7 @@ const scoreParser = (
  */
 const logAimResults = async (
   results: Results,
-  { apiUrl, sessionId, authorization }: LogConfig
+  { apiUrl, includeCredentials, sessionId, authorization }: LogConfig
 ): Promise<AimLogResponse> => {
   const logData: LogData = {
     sessionId
@@ -142,7 +144,8 @@ const logAimResults = async (
       withAuthorizationHeader(
         {
           method: 'POST',
-          body: JSON.stringify(logData)
+          body: JSON.stringify(logData),
+          credentials: includeCredentials ? 'include' : 'same-origin'
         },
         authorization,
         apiUrl

tests/unit/logging/logFinalResults.test.ts

@@ -17,6 +17,7 @@ const makeResults = (): Results =>
 
 const config = {
   apiUrl: 'https://aim.example.com/__results',
+  includeCredentials: false,
   sessionId: undefined,
   authorization: null
 };
@@ -42,11 +43,26 @@ describe('logAimResults', () => {
     const [url, init] = fetchMock.mock.calls[0];
     expect(url).toBe(config.apiUrl);
     expect(init.method).toBe('POST');
+    expect(init.credentials).toBe('same-origin');
     // The module's main job is formatting logData — assert it lands in the body.
     const body = JSON.parse(init.body);
     expect(body.totalDurationMs).toBe(1234);
   });
 
+  it('includes credentials when configured', async () => {
+    const fetchMock = vi
+      .fn()
+      .mockResolvedValue(new Response('{}', { status: 200 }));
+    vi.stubGlobal('fetch', fetchMock);
+
+    await logAimResults(makeResults(), {
+      ...config,
+      includeCredentials: true
+    });
+
+    expect(fetchMock.mock.calls[0][1].credentials).toBe('include');
+  });
+
   it('resolves with the parsed response body (e.g. requestId)', async () => {
     const requestId = '11111111-2222-3333-4444-555555555555';
     vi.stubGlobal(

tests/unit/resultsLogging.test.ts

@@ -0,0 +1,34 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import SpeedTest from '../../src';
+
+describe('final results logging', () => {
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it('propagates includeCredentials to the results request', async () => {
+    const fetchMock = vi.fn().mockResolvedValue(
+      new Response('{}', {
+        headers: { 'content-type': 'application/json' },
+        status: 200
+      })
+    );
+    vi.stubGlobal('fetch', fetchMock);
+
+    const engine = new SpeedTest({
+      autoStart: false,
+      includeCredentials: true,
+      logAimApiUrl: 'https://example.com/__results',
+      measurements: []
+    });
+    const logged = new Promise<void>(resolve => {
+      engine.onResultsLogged = () => resolve();
+    });
+
+    engine.play();
+    await logged;
+
+    expect(fetchMock).toHaveBeenCalledOnce();
+    expect(fetchMock.mock.calls[0][1].credentials).toBe('include');
+  });
+});