Set SameSite=strict for session cookies
Check this issue https://www.drupal.org/project/drupal/issues/3150614
You could set next parameters in you services.yml
parameters:
  session.storage.options:
    cookie_samesite: 'NONE'