I thought that httpOnly cookies were only available to read in a http request. However, when I open up Firefox dev tools, I can see the cookies' value. Is this normal?
Yes, that’s normal.you can access the cookies using the devtool.