send credetnaisl with client side requests

amd/src/clientrender.js

@@ -48,6 +48,9 @@ define(['jquery', 'core/log'], function($, Log) {
             $.ajax({
                 url: oembedUrl,
                 dataType: 'json',
+                xhrFields: {
+                    withCredentials: true
+                },
                 success: function(data) {
                     if (data && data.html) {
                         var embed = data.html;

classes/forms/provider.php

@@ -74,6 +74,7 @@ public function definition() {
                     'client' => get_string('rendermode_client', 'filter_oembed'),
                 ];
                 $el = $mform->addElement($row->type, $fieldname, $fieldlabel, $options);
+                $mform->addHelpButton($fieldname, $fieldname, 'filter_oembed');
             } else {
                 $el = $mform->addElement($row->type, $fieldname, $fieldlabel);
             }

lang/en/filter_oembed.php

@@ -57,6 +57,7 @@
 $string['providersrestrict_desc'] = 'Restrict providers to a list of allowed providers';
 $string['providerurl'] = 'Provider URL';
 $string['rendermode'] = 'Render mode';
+$string['rendermode_help'] = 'Choose how oEmbed content is loaded. In client mode, the browser requests oEmbed content directly and sends credentials (such as cookies) with the request.';
 $string['rendermode_client'] = 'Client';
 $string['rendermode_server'] = 'Server';
 $string['requiredfield'] = 'The field "{$a}" must be completed';

version.php

@@ -26,8 +26,8 @@
 
 defined('MOODLE_INTERNAL') || die();
 
-$plugin->version   = 2026031300;
+$plugin->version   = 2026031301;
 $plugin->requires  = 2019111800;
 $plugin->component = 'filter_oembed';
 $plugin->maturity  = MATURITY_STABLE;
-$plugin->release   = '3.8.0 (Build - 2026031300)';
+$plugin->release   = '3.8.0 (Build - 2026031301)';