Cannot create httpOnly cookies about cookies HOT 3 CLOSED

Where are you setting this? Is it in your Node.js code or in your client code?

from cookies.

This appears to occur with cookie.load as well, I am not able to read a cookie that has been set with httpOnly: true in the client. My cookie is set from a small Koa web app that is used for auth, the react client is then served by another koa app on a different subdomain (which also reads the cookie fine), and then finally the react app loads the cookie up to use as a bearer token for API access. The client only appears to work when disabling httpOnly, otherwise it returns undefined.

Edit: clarified that the read is in the client, and that the read also work via a different Koa app.

from cookies.

HTTP cookies are made to be only handled on the server. You cannot read them on the client. If you want to read them on the client, you have to use non-HTTP cookies.

from cookies.