Laravel 5.5 HTTP->HTTPS?

Question

Nginx

Hello!
There is an application on two domains app.ru and api.app.ru.
All connections were http. We decided to change everything to https.
https://app.ru works correctly.
But when I try to send data from the form from app.ru to api.app.ru I get:

Request URL: https://api.app.ru/test
Request Method: POST
Status Code: 401

{"message":"Unauthenticated."}

When comparing requests, I noticed that the
Cookie header is sent via http: app_session=...; laravel_token=...; XSRF-TOKEN=...

It is not sent over https.

Here are sample requests:

HTTP:

HTTPS:


What could be the problem?

Answer 1

The problem was that the cookies with tokens were set to the wrong domain.
Solution: fix in session.php config
'domain' => '.app.ru',

Answer 2

in .env what is the APP_URL ?
http or https?