
ethans.00380 (Customer) asked a question.
We have a react (frontend) application that communicates to a java application (backend) through a websocket. We will be hosting this all under 1 subdomain in production. our goal is to have an okta application (sign on) that masks both applications. the backend will be a reverse proxy at route domain/, and the frontend a file server at route domain/ui. I have already tried masking the frontend and backend separately in each project, so that the same okta application covers the frontend and the backend individually, but it seems like the cookies from logging onto the ui dont transfer, and i cannot connect to the websocket.

Have you tried using Okta custom sign-in widget? It has method where you can check if user session is still ACTIVE. use this in react and java and see if it works.
Alos let me know how you masked the frontend and backend separately if possible.
async componentDidMount() {
const res = await this.widget.authClient.session.get()
if (res.status !== 'INACTIVE') {
this.setState({ user: res.login.replace('@abc.com', '') })
} else {
this.showLogin()
}
}