ConstReadonlyaccessToken: "__Host-cfx_session_access"ReadonlyidToken: "__Host-cfx_session_id"Readonlymethod: "__Host-cfx_session_method"The signed SignInMethod, for the SSO check on every refresh.
ReadonlyrefreshToken: "__Host-cfx_session_refresh"
__Host-: the browser refuses them without Secure and Path=/, or with a Domain.