SSO with an AngularJS App/ Javascript

Oh right, I forgot that Discourse will also sign the request.

Since the token is the only thing that your Angular app retains as authentication, the PHP script will have to validate that token.