aadii104
In CSR we usually pass token with the request for backend verification, and we do this process by extracting the token from localStorage in the browser.
But in SSR we don’t have a browser or storage how can I pass a token to backend for verification?
If not tokens what are other possible solutions?
Thanks.
Where Next?
Trending in Questions
Other Trending Topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Producing high quality Elixir screencasts since 2017.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #ai
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #blog-post
- #elixirconf-us
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #elixirconf-eu
- #api
- #forms
- #security
- #metaprogramming
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Master modern tools, write cleaner code, and tackle real-world challenges.
Bringing learning, work and compliance together since 1987.
The deployment platform built for Elixir: PaaS ease, VPS control.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
First Post!- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
idi527
By SSR do you mean server side rendering? If so, why don’t you just pass the user info necessary for rendering without any authentication?
Most Liked
NobbZ
Do not do this!
You give away session hijacking for free with such a system.
Just explain your users why cookies are necessary. Even the most paranoid people will enable them if you assure them, that they are used for authentication only.
In Europe you are even allowed to do that without telling the user (as long as you do not write to the cookie before the user actually tries to log in), but most sites simply tell the user.
In general, you will store an encrypted and signed chunk of data in the cookie, perhaps using a
Phoenix.Token. In many cases its just the current users id, which you will use to retrieve the users details from the database as necessary (maybe in a plug that uses assigns then?).NobbZ
Using cookies is the most solid approach. You do not want to use anything else in the browser.
If you have other clients, feel free to otherwise sent the token from the client to the server in the request body, but do yourself a favor and never send it as part of the URL.
You’ll see only one IP shared for all workstations in my office, do you want to treat all of them the same? Do not do this, this is a very bad idea as long as IPv4 is still a thing.
idi527
Since it’s server-side, don’t you already have direct access to the user data needed for rendering? Just query the database …
Last Post!
NobbZ
Thats why I said, when you do not use a browser, but when you talk about Client and Server Side Rendering, then you probably do use a browser. So consider it a notabene.
So the cookie approach is the most clean thing for a pure Server Side solution.
But perhaps you could use a mixed approach.
Use JavaScript to send requests, authenticate them as you wish, render the full page on the server and when received from the JS client, just fully replace the page. But you need to do a lot to have a working browser history or to maintain UX during load times on small bandwiths or high latency connections. Well, to be honest, the very same problems you have with full client side renderings in general…