ep-cc

[HttpPost("login")]
    public async Task<IActionResult> Login([FromBody] LoginRquest login)
    {
        try
        {
            var user = await _userService.AuthenticateUser(login);
            
            var token = GenerateToken(user);
            // This is the extra step
            HttpContext.Response.Cookies.Append("access_token", token, new CookieOptions{HttpOnly = true});