link between 2 app
Quote from Phil78 on January 19, 2022, 7:31 pmHi All,
I have 2 app for which the user must log in to access. But app1 can call directly app2, in this case I would like to avoid login again when entering in app2.
What do you suggest to do to keep the app2 secure, because a parameter in the url is not enough safe ?
Hi All,
I have 2 app for which the user must log in to access. But app1 can call directly app2, in this case I would like to avoid login again when entering in app2.
What do you suggest to do to keep the app2 secure, because a parameter in the url is not enough safe ?
Quote from luishp on January 19, 2022, 8:35 pm@phil78 are both apps under the same domain? If so, you can save and load data using Local Storage.
@phil78 are both apps under the same domain? If so, you can save and load data using Local Storage.
Quote from Phil78 on January 20, 2022, 4:34 pmHi Luis, they are on the same server but not on the same domain. My idea was to send a parameter, in this case I could check the PHP session key created in the app1 cookies. But I don't know how to read the cookies of another application?
Hi Luis, they are on the same server but not on the same domain. My idea was to send a parameter, in this case I could check the PHP session key created in the app1 cookies. But I don't know how to read the cookies of another application?
Quote from luishp on January 20, 2022, 6:41 pm@phil78 you can't share cookies between different domains. It's a basic security measure all web browsers include.
Check this:
https://stackoverflow.com/questions/12370495/share-a-cookie-between-two-websitesRegards.
@phil78 you can't share cookies between different domains. It's a basic security measure all web browsers include.
Check this:
https://stackoverflow.com/questions/12370495/share-a-cookie-between-two-websites
Regards.
Quote from Phil78 on January 26, 2022, 7:08 pmThank you @luishp, finally I will manage with the parameters of the url with encrypted data.
Regards
Thank you @luishp, finally I will manage with the parameters of the url with encrypted data.
Regards