session tokens and not rely on 3rd party cookies to function properly.

Hi! we are developing an app and received this issue from the reviewer. Would appreciate any guidance on how to proceed:

Your embedded app must use session tokens and not rely on 3rd party cookies to function properly. Your embedded app must not use local storage. Your app must function in incognito mode in Chrome.

Hi @laurakh

Looks like it failed one or more of the three criteria of this requirement. Can you share more context? For example, how does the app authenticate?

Have you tested it with incognito mode and 3rd party cookies disabled on Chrome?