@lily.wisecarver Not all cookies from /auth0.com/oauth/token have SameSite set to None in the response, the “did_compat” cookies value for SameSite is empty, while the others are None or Lax, maybe thats the one triggering the console spam in chrome?