I'm pretty sure it's some way flutter is encoding it sense curling my backend to login to get the headers and then curling to refresh with that cookie works.
But I can't figure out what's wrong with this cookie :/
SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).