I would like to use a node server to authenticate users on behalf of apps (on sub domains) running on different node servers. and then authorize the routes using stateless sessions/ JWT.
Scenario: consider A1 and A2 are apps on servers S1 and S2 respectively. S be the authentication server
- user accesses A1 and gets authenticated from S.
- user performs only authorized operations on A1.
- user accesses A2 (could be from a different device) and gets authenticated from S.
- user performs only authorized operations on A2.
Note: authentication should be done only by S (validation in one place).
Also, any improvements in the design that fits within cansecurity?
Thanks in advance for the help