If this is a client-side app, you do not set the cookie. Your app does not have access to it, You set

credentials: include

in your fetch and the browser will add the cookies (assuming the domains are the same).