spring: jpa: show-sql: true # spring.session.cookie.secure is no longer a supported Boot 4.x property. # DefaultCookieSerializer auto-detects Secure from request.isSecure(). # Direct HTTP in dev → isSecure()=false → cookie sent without Secure attribute. springdoc: api-docs: enabled: true swagger-ui: enabled: true path: /swagger-ui.html