well you can use JWT + Cookies... JWT request to https://api.somewhere.com/token-signin https://api.somewhere.com/token-signin to get cookies for https://api.so

well you can use JWT + Cookies... JWT request to https://api.somewhere.com/token-signin https://api.somewhere.com/token-signin to get cookies for https://api.somewhere.com https://api.somewhere.com (of course you 'can' but I'm not sure if this is recommended or not.)