Not mentioned in the article, but critical for debugging and testing - Chrome has added a 2 minute grace period, where cookies set in that time period are still

Not mentioned in the article, but critical for debugging and testing - Chrome has added a 2 minute grace period, where cookies set in that time period are still allowed on non-get requests even without a samesite policy. This is considered temporary and will be removed some day in the future. If you test with Chrome 78, and your app works, you can't know if it'll work once the 2 minute grace period goes away. Please test your app using an old version of Chrome (76/77) with the flags for this enabled.