Hello,
I’m heading down a similar path and stumbled across this topic. I’m curious how this would work in conjunction with SSO (we are trying to embed messaging into our existing SPA). Is an approach (post authentication in our app):
- sso login the user (to ensure they are in discourse, though would using sso_sync, ahead of time or on-the-fly make sense instead?)
- call APIs where we “just specify
api_usernamewhen you make your API calls with the master id”
Apologies in advance if there are other, more up-to-date topics on this