I am using Frontend right in Chrome Extension and Backend on VPS When I am trying to access my backend-API: http://backend/api/papi - I get a response, but my Set-Cookie headers doesn't work

If Frontend was on some fixed domain, I could fix it by writing 'Domain=fixedDomain', but I can't, because the frontend in Chrome Extension and it don't have a fixed domain, it's different for every user

How can I solve this problem and make Set-Cookie work with a VPS backend and google chrome extension frontend

If there's only one solution - change HTTP VPS to HTTPS ? And set - cookie with Secure=true && SameSite=none?