: Cookies are sent on top-level cross-site navigations and first-party requests.
: In modern updates, Session State and Forms Authentication cookies default to SameSite=Lax . Property Values : Strict : Cookies are only sent in a first-party context.
Managing the persistence and expiration of cookies is critical for maintaining user sessions across application runs.