If this is the production deployment, the backend session cookie may be blocked by the browser due to a domain mismatch. Ask the platform team to verify CORS_ALLOWED_ORIGINS, COOKIE_DOMAIN, and COOKIE_SAMESITE on the backend service.