When calling the sign-in API, set the

st-auth-mode

header in Postman to

cookie

. This will advise the backend that you prefer cookie-based sessions. This can be overridden by backend settings, but it's respected by default. Once you have successfully signed in, Postman will handle the cookies on its own. You can view the session tokens set by the response by switching to the cookies tab in Postman. These cookies are

sAccessToken

and

sRefreshToken

.

st-bot-test-case