Why cookies sent from backend aren't set correctly ?

[osadiki]

Hi,
i am having an issue with cookies, i have refresh and access token both sent as cookies.
However when i try to login in using credentials, only the access token is persisted and refresh_token somehow got removed:

/* eslint-disable @typescript-eslint/ban-ts-comment */
/* eslint-disable no-param-reassign */
import NextAuth, { DefaultSession, DefaultUser } from 'next-auth';
import CredentialsProvider from 'next-auth/providers/credentials';

declare module 'next-auth' {
  interface Session {
    user: {
      id: number;
      email: string;
      role_id: number;
      is_complete: boolean;
      countries: Array<number>;
      team_id?: number;
    } & DefaultSession['user'];
  }
  interface User extends DefaultUser {
    role_id: number; // Add role_id to the User type
    is_complete: boolean;
    id: number;
    countries: Array<number>;
    team_id?: number;
  }
}
declare module 'next-auth/jwt' {
  interface JWT {
    role_id: number; // Add role_id to the JWT type
    is_complete: boolean;
    id: number;
    countries: Array<number>;
    team_id?: number;
  }
}

export default NextAuth({
  providers: [
    CredentialsProvider({
      name: 'Credentials',
      credentials: {
        email: { label: 'Email', type: 'email' },
        password: { label: 'Password', type: 'password' },
      },
      async authorize(credentials) {
        const res = await fetch('http://127.0.0.1:9123/api/v1/auth/login', {
          method: 'POST',
          body: JSON.stringify(credentials),
          headers: { 'Content-Type': 'application/json' },
          credentials: 'include',
        });

        const user = await res.json();

        if (res.ok && user) {
          // Add isCompleted directly to the user object
          return {
            ...user.data,
            // isCompleted: false,
          };
        }
        return null;
      },
    }),
  ],
  secret: process.env.NEXTAUTH_SECRET!,
  pages: {
    signIn: '/auth/login',
  },
  session: {
    strategy: 'jwt',
  },
  callbacks: {
    async jwt({ token, user }) {
      // Ensure `isCompleted` is included in the JWT
      if (user) {
        token.role_id = user.role_id;
        token.is_complete = user.is_complete;
        token.id = user.id as number;
        token.countries = user.countries;
        token.team_id = user.team_id;
      }
      return token;
    },
    async session({ session, token }) {
      // Pass `isCompleted` to the session
      session.user.role_id = token.role_id;
      session.user.is_complete = token.is_complete;
      session.user.id = token.id;
      session.user.countries = token.countries;
      session.user.team_id = token.team_id;
      return session;
    },
  },
});

i tried using cookies().set() from 'nextauth/headers' and it didnt work :

`cookies` was called outside a request scope

Why this happens? normally all cookies should be persisted