I have the following setup:

• My backend server running on https://backend.com/api
• My web app running on http://127.0.0.1/login
• The browser has a Cookie:
  • SameSite: none
  • Secure
  • Domain: backend.com
  • Path: /
  • And a value of course

When trying to make a request to the backend from my web app no cookies are sent.

let response = await fetch(url, {
    credentials: 'include',
    method: 'POST',
})

What am I missing?

The following thread has given me a hint, which I am not sure if is the problem: HTTP pages are removing my secure cookies

When the user tried to visit an HTTPS site from an HTTP one, their request would start as an HTTP