By default the response cookie send with options:
You can configure this by providing a
cookieOptions object into the server constructor.
cookieOptions shares the same properties as the Express res.cookie options
If you wish to set
none, please make sure also set
secure option to
true. SameSite cookies
Allowing cookies be sent in all contexts, i.e in responses to both first-party and cross-origin requests.