Authentication setup with mobile app

Our mobile app and chrome extension doesn’t have a secure backend so we opted for PKCE. PKCE is good and our mobile app and chrome extension that makes requests to our company API using access tokens granted via PKCE. And, we check validity of these tokens and decode them for information on the user.

But, we are wondering if its possible to create session based authentication between our main API and our other apps?

Hi @j8735852

Welcome to the Auth0 Community!

Since you are using PKCEs for your applications, you will be able to create a session based authentication between the API and other apps.

You can read more about PKCEs in our documentation.

If you have any other questions on the matter, feel free to leave a reply.

Kind Regards,
Nik