title: Safari 13+ blocks third-party cookies if API is on different subdomain
body: <p>I have Web application and API application.</p>
  <p>These applications are hosted on different domains.</p>
  <p>Eg.</p>
  <p>WebApp:  app.product.com</p>
  <p>API: api.product.com</p>
  <p>Cookies are set in Set-Cookie header in response to API call:</p>
  <p>api.product.com/SetCookie -&gt; response header Set-Cookie: cookie_name=cookie_value; path=/; secure; HttpOnly; SameSite=None</p>
  <p>Than I'm making request to API again and I need this cookie to be attached to request headers.</p>
  <p>Everything works fine on most of popular browsers, but on Safari (version 13.1+) this cookie is not set (it's not visible in dev tools even).</p>
  <p>Cookie is visible in response
  <a href="https://i.stack.imgur.com/0GK9A.png" rel="nofollow noreferrer">response with cookie</a></p>
  <p>But its not stored in browser cookies
  <a href="https://i.stack.imgur.com/hekVw.png" rel="nofollow noreferrer">enter image description here</a></p>
  <p>I was trying to set domain attribute of cookie to 'product.com' but it didn't resolve problem.</p>
  <p>Is there any way to set cross domain cookies in that case? Maybe by changing set cookie attributes.</p>
  <p>Or hosting all applications from same domain will solve the problem?</p>