mardi 20 décembre 2016

SSO: Can app1.site.com access session of app2.site.com

Use case: User logs in to app1.site.com and then gets redirected to app2.site.com. I want to maintain the state without sending user information in a get request because thats insecure.

If the state persists, I will be able to do a get request and then that new webpage will still have access to the session information and I will then be able to do a post request and identify them. Is the session accessible between apps?




Aucun commentaire:

Enregistrer un commentaire