To some extent this sounds like Spotify. I have been told it's basically Iframes stitched together, and each frame is owned by a team [0] , I do think Spotify has some better auth communication though.
0: https://www.quora.com/How-is-JavaScript-used-within-the-Spot...