Authentication fixes for the SDK

[br41nslug]

• Allow for cross-origin cookies to be sent with fetch (fixes SDK 11: It's impossible to include credentials with AuthenticationClient methods #19344 )
• Fixed non-logical parameter order for refresh request
• Moved helpers to their own folder and renamed asSearch to withSearch for consistency.

Same-origin cookies:

• This is what fetch does out of the box

Cross-origin cookies:

• You'll want to set credentials: 'include' on the appropriate composables to send cookies with all requests on that composable

  const client = createDirectus(URL)
    .with(authentication('json', { autoRefresh: false, credentials: 'include' }))
    .with(graphql({ credentials: 'include' }))
    .with(rest({ credentials: 'include' }))

• Or on specific REST requests using the withOptions helper

  const result = await client.request(withOptions(
    readItems('some-collection'),
    { credentials: 'include' }
  ))

Note: Make sure to double check your CORS and CSP settings when working with cross-origin cookies.

[changeset-bot]

🦋 Changeset detected

Latest commit: 30bad9d

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
docs	Patch
@directus/sdk	Major

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[paescuj]

Looks good , besides the little comment 👍

[azrikahar]

PR LGTM! Just a quick question regarding the breaking-changes.md, do we need to mention/include the renaming of asSearch to withSearch as well?

[br41nslug]

PR LGTM! Just a quick question regarding the breaking-changes.md, do we need to mention/include the renaming of asSearch to withSearch as well?

Yes we do, nice catch