Hello 👋 ,
We’re long time users of Ory Hydra that we use to:
1. Provide ways of external services to use our user identity on their platforms on theirs (ex. a Chrome extension in which users can login to get access to our services)
2. Manage our own services (SPAs frontends) login/auth
For the point 2., we’re wondering if using Oauth2 login flow for all our internal services is really the most effective ways of doing things.
Could ORY Kratos offer us a way to manage user session and authentication without the hassle of Oauth2 login flow?
Meaning, can we use its “Ory Kratos Session Token” to authorise users on ours APIs? Or should we stick with Hydra’s access token?