All right.
And before we set up the Http only cookie, let's also add two more values to our dot env.
And first one is going to be this secret one.
And second, we'll add this expires in.
Now normally you want also something more complex than just the string of secret, but since in my case
you can see all the values that I'm typing anyway, of course I'll just keep it as secret.
But again, normally you want something that's more complex, so come up with some kind of random string
or whatever, and essentially you will just keep it here on the server and you'll use that value to
decode the JWT that we're creating over here.
Hopefully that is clear.
Also, make sure that you restart the server.
That's very, very important.
So first let's navigate to.
Don't envy.
We're looking for JWT.
And in my case, I'm going to call this secret again.
I'm not going to repeat the same speech, but I'm going to go with secret.
And also we're going to go with JWT underscore.
Spires underscore in and we'll set it equal to one day.
Then we want to navigate to token utils.
We have access to the environment variables since we have the package.
So we'll simply go here with process dot env and then dot and then JWT underscore secret.
And the same of course works for this one as well.
So we're going to go with process dot env dot and then JWT expires.
In, make sure you restart the server.
So let me stop it over here.
NPM run dev and with this in place we are ready to move on to the next step.