In order to make an iframe's request send the domain's cookies. I had to set my cookies to SameSite=none and make sure that my cookies are Secure. Spent the last 2hrs learning that #webdev #http
Glad I had read Mozilla's announcement last month, so I could guess it may be something related to this when my site stopped working.
https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/