title: Share JWT between an app and a browser on multiple subdomains
body: <p>Here is what I'm trying to achieve:</p>
  <p><a href="https://i.stack.imgur.com/lrHkx.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/lrHkx.png" alt="schema" /></a></p>
  <p>Right now, the Desktop App, Auth server and API are working correctly, I can get my JWT and use it to call the API.</p>
  <p>Both web apps are already in use, subdomain1.domain.com use NGINX auth_request, cookie and sessions on an old auth server to get access.</p>
  <p>Web app in subdomain2.domain.com use session, and connect to the API with an app token.</p>
  <p>And, all these servers are part of the same domain.</p>
  <p>So, is it possible to share the JWT from my Desktop app with browsers? We generally use Chrome.
  The desktop app use Python 3, and most of the user will be using Windows.</p>
  <p>If I can't, and I'm pretty too stupid to do this working, my other concern is, can my browser use that JWT on all web app once it connected get it from auth server? All servers shares the same main domain.</p>
  <p>Our web server can be using Apache2, Nginx, Nodejs or Flask (python), which is kind of annoying when trying to make things like that works.</p>
  <p>I could use cookie for <code>.domain.com</code>, and store the jwt inside, am I right?
  If yes, is this really the best idea?</p>
  <p>The idea behind it is:</p>
  <ul>
  <li>User log in the app or browser</li>
  <li>JWT is generated</li>
  <li>JWT is shared between app and browser (not sure about this one)</li>
  <li>JWT is used on all subdomain by the browser</li>
  </ul>
  <p>What is your advice on this?</p>