Express Session no funciona en producción en modo incógnito, pero todo funciona bien localmente

 const expressSession = require("express-session"); const MongoStore = require('connect-mongo'); app.use(cookieParser("my-secret")); app.set("trust proxy", 1); const session = expressSession({ name: "session", secret: process.env.sessions_key, resave: true, store: store, saveUninitialized: false, cookie: { maxAge : 1000 * 60 * 60 * 48, sameSite: process.env.ENV==='dev'?'lax':'none', secure: process.env.ENV==='dev'?false:true } }); app.use(session);

Encabezados

 app.use((req, res, next) => { res.setHeader('Access-Control-Allow-Origin', process.env.CLIENT_URL); res.setHeader('Access-Control-Allow-Headers', 'content-type,Authorization'); res.setHeader('Access-Control-Allow-Credentials', true); next(); });