Create custom endpoint to authenticate token/session key

In our community we aren't using the SSO approach, I'm trying to access community pages(Controlled by role permission) from one of our product websites and want some ideas to authenticate the call th...