diff --git a/vite.config.ts b/vite.config.ts
index 3e777a0..56b9edf 100644
--- a/vite.config.ts
+++ b/vite.config.ts
@@ -20,6 +20,7 @@ export default defineConfig({
     ...(process.env.HTTPS ? [basicSsl()] : []),
     VitePWA({
       registerType: 'autoUpdate',
+      useCredentials: true, // manifest <link> sends cookies, or the reverse-proxy login (Authentik) redirects it cross-origin and CORS blocks it
       includeAssets: ['uswds/sprite.svg', 'icons/*.png', 'icons/*.svg'],
       manifest: {
         name: APP_NAME,