I have two separately working Angular applications, however, user might have privileges to both of them. I would like to implement autologin between them - so if user logs into App A, then clicks a redirect button to App B, then he would be automatically logged in. After logging to any of the applications, the token (JWT) is stored in session storage. I was thinking about passing the token to the other application, which would automatically log the user in. Is there a secure way to achieve this? Note that the applications are under different domains and do not share any code. Continue reading...
