OptionaldomainOptional domain scope for the cookie.
Indicates whether the cookie is accessible only via HTTP requests. Helps mitigate XSS attacks by preventing client-side JavaScript access.
Always enforced as true for state cookies.
The cookie name. Defaults to "session" for session cookies and "state" for state cookies.
The URL path for which the cookie is valid.
Determines whether the cookie persists across browser restarts.
Defaults to true for session cookies and false for state cookies.
The SameSite policy applied to the cookie. Controls cross-site request behavior and CSRF protection.
Indicates whether the cookie should only be transmitted over HTTPS.
If not explicitly provided, this value is automatically inferred from the application URL scheme.
Configuration options for authentication cookies.
These settings control how MonoCloud session and state cookies are created, scoped, and transmitted by the browser.