inSessionOtpCode为null的问题

我前端上面加了xhrFields:{
     withCredentials:true
    },

后端也添加了

(allowCredentials = "true",allowedHeaders = "*")

为什么inSessionOtpCode的值还是null哪。

检查元素的时候 警告写着 A cookie associated with a cross-site resource at http://localhost/ was set without the `SameSite` attribute。

请问怎么解决那