Hi Auth0
We are developing an SPA web application in Angular using Auth0 SDK and New Universal Login
We are implementing a feature where we need to allow users to login to the Web app on one device (e.g., laptop browser) and then move to another device (e.g., mobile phone) without entering the credentials again.
Its like the Device Authorisation Flow, but we need it in the SPA Web App. An identical example is how Whatsapp Web (web.whatsapp.com) inherits the session from the Whatsapp mobile app by scanning a QR code and signing in the user automatically.
I understand the security risks involved, but its a must-have feature. How should I approach it?
Thanks