It required us to build support for open ID protocol and issue JWTs "inside" our sessions. These JWTs can be sent to hasura for auth within hasura.