title: Is there a workaround for Safari iOS "Prevent Cross Site Tracking" option, when issuing cookies from API on different domain?
body: <p>Is there any workarounds that allows me to keep the "Prevent Cross Site Trackng" option enabled (as it is by default, so every user will have it on), and issue CORS cookies from my back-end api that is on a different domain than my angular app?</p>
  
  <p>My application flow is as follow:
  1. User Logs in
  2. The server authenticates, issues a JWT and stores the JWT inside of an HttpOnly cookie
  3. All angular requests have the <code>{withCredentials: true}</code></p>
  
  <p>This works perfectly fine on....windows desktop browsers. However when I try to login on Safari iOS, and mac Safari the cookie is not saved nor is it sent with subsequent requests.</p>
  
  <p>I found that disabling "Prevent Cross Site Tracking" option works, but I cannot expect all of my users to disabled this option to use the my app.</p>
  
  <p>Are there any workarounds for this right now?</p>