Sample for authentication inside of the Plugin

[karpikpl]

Is your feature request related to a problem? Please describe.
When opening an external plugin on IOS browser cookies are not shared with the plugin, breaking SSO experience for users that have to authenticate inside of the plugin.

Describe the solution you'd like
A sample on how to authenticate the user (using OAuth) inside of the plugin. What's the best practice?
Should OFS pass in token to the plugin?
How to achieve an SSO experience?

Describe alternatives you've considered
Tried using MSAL in external plugin SPA but silent login doesn't work since cookies are not shared.

Additional context
Scenario is as follows:

1. user opens OFS
2. logs in with Entra
3. opens external plugin (an SPA)
4. SPA need to make calls to backend with token
5. SPA tries to authenticate the user with Entra
6. Failure - silent flow fails