0👍
Figured it out. Brain fart, everything is working as expected (I hadn’t actually tried to make an API call yet). The cookies just appeared to disappear upon a refresh because in the SPA I would be a localhost:8080/ while the cookies were set to work for calls at localhost:<port>/api/, making a call to an endpoint at /api/something the cookies were passed correctly.
Source:stackexchange.com