Tracy Hall

Researching a canvas approach that might help, based on: https://developer.mozilla.org/en-US/docs/Web/HTML/CORS_enabled_image

## Using ```crossorigin="user-credentials"``` with attr ```crossorigin="user-credentials"``` in an authenticated context. Not only Failed; never got a proper status response ### HTML ``` ``` ### HEADERS ``` GENERAL: Request URL: https://firebasestorage.googleapis.com/v0/b/tickets-unlimited-fast.appspot.com/o/Artists%2Frecq5cURMyJsRKFbO%2Fimage%2Fimage.jpg?alt=media...

## Using ```crossorigin="anonymous"``` When using the following HTML ``` ``` ...we receive a ```403``` status.

## Using ```background-image-crossorigin: "use-credentials"``` with the following HTML ``` ``` we get a ```403``` status, with headers: ``` GENERAL: Request URL: https://firebasestorage.googleapis.com/v0/b/tickets-unlimited-fast.appspot.com/o/Artists%2Frecq5cURMyJsRKFbO%2Fimage%2Fimage.jpg?alt=media Request Method: GET Status Code: 403 Remote Address:...

## What Should Work But Doesn't Adding ``` crossOrigin:"use-credentials" ``` to an `````` should work. Also ``` background-image-crossOrigin: "use-credentials" ```. They don't. They get: ``` Access to image at 'https://firebasestorage.googleapis.com/v0/b/tickets-unlimited-fast.appspot.com/o/Artists%2Frecq5cURMyJsRKFbO%2Fimage%2Fimage.jpg?alt=media'...

## What Have I Observed "working"? One of my routines programatically generates a URL, and successfully fetches an image, using the below: ``` export const setDefaultImage = () => {...

## Hacky Code that fetched Image within Security Rules ``` const authorization = "{Big long string I copied from a different image fetched via above-mentioned code}" const aspectRatioBorderedImage = {...

## Probably related to this: Google Cloud Storage https://cloud.google.com/storage/docs/authentication/signatures

Yes, that *is* the reason I want to have the Rules apply - but FIRST the rules have to be enforced *at all*. I have gone into the code to...

## A proposed Browser/Node-side solution Not the most straight forward, due to browser limitations. It is NOT possible to add custom headers directly to `````` tags, but it IS possible...