title: Safari not include COOKIE to second CORS request
body: <p>I have frontend on <code>https://somedomain.dev</code> (angular) and api on <code>https://api.somedomain.dev</code> (so I have same domain but different subdomain - this is important because for different whole domains Safari will <a href="https://elixirforum.com/t/set-cookie-header-works-on-google-chrome-and-ff-but-no-safari/20867" rel="nofollow noreferrer">block</a> all <a href="https://stackoverflow.com/a/53157622/860099">cookies</a>). I send 3 requests to API in following order</p>
  
  <ul>
  <li><code>POST /api/user/login</code> - in response server set <strong>HttpOnly</strong> COOKIE (with authorisation token: JWT</li>
  <li><code>GET /api/user/profile</code> - to get user profile (browser should add COOKIE to request)</li>
  <li><code>GET /api/buildings</code> - to get buildings (browser should add COOKIE to request)</li>
  </ul>
  
  <p><strong>Problem</strong>: Safari add cookie only for <code>GET profile</code> and NOT add cookie to <code>GET buildings</code> (Chrome, Firefox and Edge add COOKIE to each GET request) </p>
  
  <p>All requests details (headers etc.):</p>
  
  <ul>
  <li>Chrome v.81.0 : <a href="https://i.imgur.com/OXuZZmF.png" rel="nofollow noreferrer">login</a>, <a href="https://i.imgur.com/NQYbFVE.png" rel="nofollow noreferrer">profile</a> and <a href="https://i.imgur.com/NBQrr98.png" rel="nofollow noreferrer">building</a></li>
  <li>Safari v. 13.1 : <a href="https://i.imgur.com/Uam3Zvg.png" rel="nofollow noreferrer">login</a>, <a href="https://i.imgur.com/QJn9yUy.png" rel="nofollow noreferrer">profile</a> and <a href="https://i.imgur.com/D4nWUEz.png" rel="nofollow noreferrer">building</a></li>
  <li>angular: each get request is send with <code>withCredential: true</code> flag (and of course this works in Chrome)</li>
  </ul>
  
  <p><strong>Question</strong>: Why Safari not add cookie to <code>buildings</code> request and what to do to force Safari (using javascript or server code) to add cookie to all requests (after login) ?</p>