I have my front-end and back-end both in different domains. I'm trying to make a put request with Axios to authenticate a user using express-session. The call works fine but it seems that the server does not set the cookie in the headers in the response. Here is my code:

This is the code in the front end:

Axios.post('/users/authenticate', {
            //DATA
        }, {withCredentials: true})
        .then((response) => {
            console.log(response);
        })
        .catch((error) =>{
            console.log(error);
        });

Then my code in the NodeJS server. This is for allowing cors:

app.use(cors({
    origin: ['http://localhost:3000'], 
    credentials: true, 
    methods: ['POST', 'PUT', 'GET', 'OPTIONS', 'HEAD', 'DELETE'],
    exposedHeaders: ["set-cookie"]
}));

Then for setting the cookie:

router.use(session({
    secret: 'the secret',
    cookie: {maxAge: 2000 * 60, sameSite: 'none', secure: true},
    store: store,
    resave: true,
    saveUninitialized: true,
}));

Finally my response header:

I've tried every solution I found in StackOverflow and other blogs and forums with the options in cors and still not working neither in Chrome, Edge nor Firefox but it does in Postman