httpOnly? |
boolean |
Mark the cookie httpOnly so it is not readable from client JS. Default true |
maxAge? |
number |
Max age in seconds. Default undefined (session cookie) |
path? |
string |
Cookie path. Default "/" |
sameSite? |
"lax" | "strict" | "none" |
SameSite attribute. Default "lax" |
secure? |
boolean |
Require HTTPS. Defaults to true in production. Default process.env.NODE_ENV === 'production' |
