How does one do user authentication in Safari if it defaults to block cookies? (devise, angular-devise)
<p>I realize this is probably a stupid question but I have put in about 16 hours of googling and haven't even come close to figuring this out. </p>

<p>I have AngularJS running on top of Rails (4.2), consuming JSON.  Authentication is currently done with Devise and angular-devise.  There are no problems with authentication when in Chrome, Firefox, or Safari with cookies allowed.  The problem is Safari defaults to reject cookies and apparently 80% of my would-be-users are using Safari and rejecting all cookies.  A User can log into the app but the session is immediately lost and any further requests requiring authentication fail.</p>

<p>I initially thought it was an issue with the Heroku iframe but according to the 'support' message below it's not and I'm SOL.</p>

<blockquote>
  <p>This log entry Completed 401 Unauthorized in 1ms tells me that the
  session information that the browser is sending to your server is
  invalid or expired. Your API then rejects the request.</p>
  
  <p>This makes sense if Safari is set to reject any cookies from the
  website. Session information will not be stored and the API server
  will reject any requests.</p>
  
  <p>I'm afraid this isn't a Heroku issue and so there's not much we can do
  from our side on this. However, if I'm wrong on that, please let us
  know and we can investigate further.</p>
</blockquote>

<p>I played around with Safari and tried signing into a bunch of my accounts with cookies blocked and nothing worked, facebook was even kind enough to tell me to turn on cookies.  Follow up question: how in the world are all these people just now having trouble with a website because of blocked cookies?</p>