And the Cookie header isn't sent? (using it on Firefox 106.1).

I'm using the fetch API for making requests and fetch sadly forbids the Cookie header from getting passed. Will be looking into how I can bypass this.

~~I think axios can. Its API is similar to fetch, except for the return status. You could also manipulate the cookies before and after transmission, but that might be messy when you hit the browser's cookie limits.~~

Scratch that. I wasn't thinking clearly. I ran the call from restfox.dev, and it's another domain, of course. You'd need to write your own http client to get around it.