httponly cookies

export const action: ActionFunction = async ({ request, context }) => {
  const formData = await request.formData();
  const loginEmail = formData.get('email');
  const loginPassword = formData.get('password');

  const response = new Response();
  const supabaseClient = createServerClient(
    context.SUPABASE_URL as string,
    context.SUPABASE_ANON_KEY as string,
    { request, response }
  );

  const { data, error } = await supabaseClient.auth.signInWithPassword({
    email: String(loginEmail),
    password: String(loginPassword),
  });

  const cookieHeader = response.headers.get('set-cookie')!;
  response.headers.set('set-cookie', cookieHeader + '; Secure; HttpOnly');
  console.log(response.headers.get('set-cookie')!);

  return json(
    { data, error },
    {
      headers: response.headers,
    }
  );
};

export const action: ActionFunction = async ({ request, context }) => {
  const formData = await request.formData();
  const loginEmail = formData.get('email');
  const loginPassword = formData.get('password');

  const response = new Response();
  const supabaseClient = createServerClient(
    context.SUPABASE_URL as string,
    context.SUPABASE_ANON_KEY as string,
    { request, response }
  );

  const { data, error } = await supabaseClient.auth.signInWithPassword({
    email: String(loginEmail),
    password: String(loginPassword),
  });

  const cookieHeader = response.headers.get('set-cookie')!;
  response.headers.set('set-cookie', cookieHeader + '; Secure; HttpOnly');
  console.log(response.headers.get('set-cookie')!);

  return json(
    { data, error },
    {
      headers: response.headers,
    }
  );
};