Signing in across subdomains

Signing in across subdomains A sequence diagram generated by Archify. open the app GET /auth/get-session no session redirect to /login?redirect=… email + password POST /auth/sign-in/email create session session Set-Cookie, Domain=.example.com back to redirect, if trusted get-session with the cookie session Session check Sign in Back in the app Person · browser · Sequence participant Person browser Client app · app.example.com · Sequence participant Client app app.example.com Auth app · auth.example.com · Sequence participant Auth app auth.example.com API · better-auth /auth · Sequence participant API better-auth /auth PostgreSQL · sessions · Sequence participant PostgreSQL sessions Legend request return security default message