TLDRJWT Tokens are awesome but how do you store them securely in your front-end? We’ll go over the pros and cons of localStorage and Cookies. Local storage is vulnerable because it’s easily accessible using JavaScript and an attacker can retrieve your access token and use it later.
Table of contents
Where should I store my tokens in the front-end?About XSS AttackCookies and CSRF AttackSo, how do I use cookies to persist my OAuth 2.0 tokens?Conclusion1 Comment
Sort: