I’m trying to build a chrome extension that is authenticated through my website. When a user logs into the website the website should send the jwt to the chrome extension. The chrome extension needs the jwt to then call the backend to update data. I was thinking about using window.postMessage() and storing my jwt there and then in the chrome extension using that. Also, I’m trying to stay away from Oauth. Will this work?

I’ve tried the window.postMessage but I don’t know how to debug this, further I’ve heard people mention cookies but not sure how that would help here