Using Rails Session Cookies for API Authentication

No part of the web app is rendered by Rails. The Rails app is strictly a JSON API. And the web app is a standalone bundle of HTML, CSS, and JavaScript.Given that the API has protected resources that require authentication, I had a decision to make regarding how best to “log in” users of the web app.