Open
Description
Describe the change
The Cookie by default is Secure and HttpOnly. (https://github.com/unjs/h3/blob/main/src/utils/internal/session.ts)
But there is no documentation for that. As the Types for the Cookie Object come from cookie-es (https://github.com/unjs/h3/blob/main/src/types/utils/session.ts) it specifies that the secure option is not set by default. even tho it is
URLs
https://h3.unjs.io/examples/handle-session
Additional information
- Would you be willing to help?
Activity