Enable secure cookies to stop cookies from being sent over HTTP.
This is not enabled by default as it makes the application unusable over HTTP. Before enabling ensure an upgrade from HTTP to HTTPS is enabled as the app will no longer function over HTTP.
Add the following property into the 3 appsettings.json files at the root of the web app, /api and /auth, and any other appsettings.json files (IE standalone portal sites).
"SecureCookies": true.
