I have two webapps, App1 in PHP, and App2 in RoR. Each user as an account
The desidered use case is that user login in App1, then can go to App2 without using another set of credentials, but by following a link, available in App1, which contains an authentication method of App2.
I guess the simplest method would be to put user/pass in the url, but this is far from being safe.
Which approach would you suggest me, to ensure some kind of security?
