Hi everyone.

I have setup a two-part system and I wish to use my NextAuth session token to validate on ExpressJS. I have everything setup such that I can validate and use a session from NextAuth on my ExpressJS app (I have got it working using Postman), but I have come to realize it is VERY hard to get ahold of the session token w/o introducing very bad security practices. I wondered if anyone can guide me in the right direction as to how I split up the API and frontend but keep a common authentication system.

Thank you so much in advance 🙂