Authentication across app extensions

If the main app requires sign-in, what’s the recommended pattern for sharing auth/session state with widget or watch extensions so users aren’t prompted to log in again when tapping a widget?

Authentication across app extensions
 
 
Q