How to securely share access token between Angular applications in the same domain?

I have two separate Angular applications, however, user might have privileges to both of them. I would like to implement autologin between them - so if user logs into App A, then clicks a redirect button to App B, then he would be automatically logged in.
After logging to any of the applications, the token (JWT) is stored in session storage. I was thinking about passing the token to the other application, which would automatically log the user in. Is there a secure way to achieve this?
The applications have the same domain, e.g.:

• app-a.example.com
• app-b.example.com

Continue reading...