feat: Add httpOnly cookie attribute support

[maximehamou]

❓ Type of change

• 📖 Documentation (updates to the documentation, readme or JSdoc annotations)
• 🐞 Bug fix (a non-breaking change that fixes an issue)
• 👌 Enhancement (improving an existing functionality like performance)
• ✨ New feature (a non-breaking change that adds functionality)
• 🧹 Chore (updates to the build process or auxiliary tools and libraries)
• ⚠️ Breaking change (fix or feature that would cause existing functionality to change)

📚 Description

Added httpOnly attribute support for local and refresh providers + updated the docs accordingly

📝 Checklist

• I have linked an issue or discussion.
• I have added tests (if possible).
• I have updated the documentation accordingly.

[phoenix-ru]

@maximehamou Could you please fix lint issues? Aside from that, code lgtm

[maximehamou]

@maximehamou Could you please fix lint issues?

No problem, I will shortly.

However, I think it’s a little bit trickier than expected regarding how the update works. After further tests, the cookie is not saved. If I set httpOnlyCookieAttribute to false, and I force httpOnly with the checkbox in storage section, I couldn't log out anymore...