private static boolean cookieMatches(Cookie cookie, String host, String path, boolean secure) {
        // if a cookie is host-only, host and domain have to be identical
        final boolean satisfiedHostOnly = !cookie.isHostOnly() || host.equalsIgnoreCase(cookie.domain());
        final boolean satisfiedSecure = secure || !cookie.isSecure();
        final String cookiePath = cookie.path();
        assert cookiePath != null;
        final boolean pathMatched = path.startsWith(cookiePath);
        return satisfiedHostOnly && satisfiedSecure && pathMatched;
    }
Ensures this cookie has domain and path attributes, otherwise sets them to default values. If domain
is absent, the default is the request host, with {@code host-only} flag set to {@code true}. If path is
absent, the default is computed from the request path. See RFC 6265
<a href="https://datatracker.ietf.org/doc/html/rfc6265#section-5.3">5.3</a> and
<a href="https://datatracker.ietf.org/doc/html/rfc6265#section-5.1.4">5.1.4</a>
core/src/main/java/com/linecorp/armeria/client/cookie/DefaultCookieJar.java