title: SubDomain Authentication Mechanism & Session Maintainance
body: <p><strong>SCENARIO</strong></p>
  
  <p>There are 3 Domains (2 of which is sub Domain) </p>
  
  <ul>
  <li><a href="https://site1.thatsme.org" rel="nofollow noreferrer">https://site1.thatsme.org</a>  - Main web site (.NET)</li>
  <li><a href="https://site2.thatsme.org" rel="nofollow noreferrer">https://site2.thatsme.org</a>  - Sub Domain web site (NODE)</li>
  <li><a href="https://api.thatsnotme.org" rel="nofollow noreferrer">https://api.thatsnotme.org</a> - REST Api Server (NODE)</li>
  </ul>
  
  <hr>
  
  <p><em>Site1</em> </p>
  
  <ul>
  <li>Independent site</li>
  </ul>
  
  <p><em>Site2</em>   </p>
  
  <ul>
  <li>Completely Depends on api for all operation </li>
  </ul>
  
  <p><em>api</em></p>
  
  <ul>
  <li>Depend on site1 only for authentication</li>
  </ul>
  
  <hr>
  
  <p><strong>ISSUE</strong></p>
  
  <p>Site1 only has a login Page </p>
  
  <p>A user Logs in to Site1 and has to be able to go to site2 as logged in user Where site2 uses the REST api server for all its operation including the authentication (Has to be Provided by site1).</p>
  
  <p>What will be the Best Approach For this ?</p>
  
  <hr>