Safari 13+ iframe blocks CORS cookies

I think I might have found the solution: Apple’s Storage Access API:
https://webkit.org/blog/8124/introducing-storage-access-api/