Auth UI not allowing to set cookie as httpOnly?

With the release of the v2 JS client and the depreciation of setAuth, I'm currently trying to use the auth-ui-react UI component coupled with supabase-js@RC and I noticed that the cookie created is only secure and not httpOnly.

Should I be worried about that?
Is the only other solution to manually create the cookie server-side with the flag on and send it to the client? Given that setAuth is no longer available, how would I check if user is valid?
Capture_decran_2022-09-26_a_15.59.30.jpg
Was this page helpful?