Question: Sorry no code here because I am looking for a better idea or if I am on the right track?

I have two websites, lets call them A and B.

A is a website exposed to the internet and only users with valid account can access.

B is a internal (intranet) website with (Windows authentication using Active directory). I want Application B (intranet) to create users for Application A.

Application A is using the inbuilt ASP.NET JWT token authentication.

My idea is to expose a Api on the extranet website (A) and let (B) access this API. I can use CORS to make sure only (B) has access to the end point but I am not sure if this is a good enough protection? We will perform security penetrations test from a third party company so this might fail the security test?

Or

I can use entity framework to a update the AspnetUsers table manually. Not idea if this is feasible or the right way or doing things.

Any other solution?

Answer: 
**SOLUTION**

Use Inbuilt JS event

There is event in JS **ondblclick** event which fires only on double clicked
check the snippet below

```js
function hide() {
  document.querySelector("label").style.display= "none";
}
```

```html
<button  ondblclick="hide()" id="btn">Button</button>
<label  id="lbl">Hide me after Double clicking on button</label>
```
The code you provided not hide or dissappear

There is a chance of your'e code is being overwrited by other css.