I am implementing PKCE where I am redirecting to SAS (Spring Authorization Server) with my code challenge. I am storing my code_verifier in encrypted form in the cookie during the redirect. I can see the cookie in the Chrome browser in the Cookies tab.

However, the cookie disappears when I sign-in to SAS after the redirect with my client-id and other information. I tried the

spring:
  authorization-server:
    forward-cookies: true

but it I still don’t see my cookies when I am trying to send back my code_verifier to get the token.