Never mind the issue was the with the cookie length limit set by browsers to 4096 byte length, so it keeps retrying , after the refresh the cookie is not set due to the limit.

Hey! I see. What accessTokenPayload content are you storing in the cookie?

I ended up adding user profile info in JWT and kind of was not needed, On thing to note is that since we are using RSA for signing may be if signing algo like EdDSA is used the JWT size can be reduced

Ahh I see. We are working on optimising the session so that the overall size is reduced significantly.