All the cookies generated by the auth.controller.ts misses the Secure attribute (it is false by default).

[neilscallywag]

Set it to true to protect the cookie from man-in-the-middle attacks.

[EchoSkorJjj]

This is because the environment variable for NODE_ENV is development.