I'm trying to set a secure cookie on http://localhost:3000:
Set-Cookie: loggedUser=brillout; Max-Age=315360000; Path=/; HttpOnly; Secure
But Chrome complains:
This Set-Cookie was blocked because it had the "Secure" attribute but was not received over a secure connection.
Yet, according to MDN, it should work:
A cookie with the Secure attribute is sent to the server only with an encrypted request over the HTTPS protocol, never with unsecured HTTP (except on localhost)
Is it possible to set Secure while being http://localhost? Developing on https://localhost instead of http://localhost is not an option.