build
fun buildRefreshCookie(name: String, value: String, expiresAt: Instant, secure: Boolean = true, sameSite: String = "Strict"): ResponseCookie
Build a refresh cookie with optional environment-specific flags.
Return
a ResponseCookie ready to be added to Set-Cookie
Parameters
name
cookie name (e.g., __Host-rt)
value
opaque token id value
expires
absolute expiry used to compute Max-Age
secure
whether to mark Secure (default true)
same
SameSite policy (default Strict)