You can make a jsonp request with some credentials.

But the credentials should not be sent implicitly by the browser, else any untrusted website can do an authenticated request **without knowing the credentials**, since the browser sends them implicitly.