mp
cookie<YourSessionType>("session", storage = yourStorageImplementation) { cookie.extensions["HttpOnly"] = "true" cookie.extensions["SameSite"] = "Strict" }