Hi (again), Is the default cookie bases authentication also working if i have my backing living at api.mysite.com and multiple frontends (app.mysite.com, whatever.mysite.com)?

yes it does work since they all have the same base domain. You need to set the

cookieDomain

value on the backend to

.mysite.com