Browsers work differently than Postman (and other tools) when setting cookies from different ports for security reasons. The browser won’t honor the cookie request, even though you have no CORS errors because you probably have to meet certain security protocols.
I see your cookie code doesn’t have a Secure
param. Chrome, for instance, requires cookies to be set to secure = true and sameSite = “none” when they are being deployed by a server on a different port than the FE. They also need to be running on an HTTPS connection (not HTTP).
If you’re getting this error in Chrome, make sure that all three of those are set correctly.
CLICK HERE to find out more related problems solutions.