http requests and http only cookies

The only issue is the sites will be crossed domain

Hence possibilty of csrf attack

Would need to use some anti csrf token along with content policy to prevent xss

But i mean more on a how can i get the user on the frontend, like by creating some hook or contexts? And if it is possible to get the im server components