Issues arise when GSoC developers try authenticating requests with cookies - Chrome is blocking some of them for safety reasons.
Need to move toward "Bearer" token.
See also : https://swagger.io/docs/specification/v3_0/authentication/bearer-authentication/
Ask also : Wikimedia Hackathon group.