login.js

async login({ response, auth, request }) {
	const { email, password } = request.all()
	const data = await auth.attempt(email, password)

	if (data.token) {
		return response.cookie('token', data.token, {
			domain: 'mydomain.com',
			httpOnly: true,
			secure: true,
			sameSite: 'Lax',
			path: '/'
		})
	}

	return data
}