Passport.js happens to share strategy between different vhosts.
Alice is an Artist
She visits artist_app at artist.aa
Bob is a Baker
He visits baker_app at baker.aa
They don't know about each other. But Alice finds herself logged in as Bob (a user from a site she is not even aware of).
Solution: use Passports.js to manage instances of Passport.js
npm install
define local hosts:
artist.aa
baker.aa
Run node server
Open artist.aa:9090 and baker.aa:9090
While the contents of artist_app and baker_app is identical in this example, it doesn't have to be in the real world. They are completely independend of each other.