Glossary: Next.js Beyond the Basics

Cookie options (httpOnly, sameSite, secure)

Also written: httpOnly, sameSite, secure

Settings that protect a cookie. httpOnly hides it from page scripts, sameSite: "lax" stops other sites' forms sending it, and secure sends it only over HTTPS.