在Controller层里加上

/**
 * 设置HttpOnly=true,SameSite=secure,Secure=true
 */
@ModelAttribute
public void setReqAndRes(HttpServletRequest request, HttpServletResponse response){
    response.setHeader("Set-Cookie", response.getHeader("Set-Cookie")+";SameSite=strict;HttpOnly;Secure=true");
}