I am having literally this exact same problem... json web token cookie is definitely being sent and appears in the response body, but when i check devtools the cookie is not there but i can clearly see the user is logged in in my app. did you ever find an answer for this?