Yes, that’s it 
kokolegorille
jhefreyzz
kokolegorille
Some prefers to persists it in cookies instead. And storage is different when using mobile (eg. React Native).
But I use localstorage…
1
jhefreyzz
danschultzer
Pow Core Team
It’s generally a bad idea to store sensitive data in LocalStorage. If you use the same domain then I would let the backend set a httpOnly cookie, otherwise I would only keep the token in memory, and use something like OAuth2 auth code flow with PKCE.
1
kokolegorille
acrolink
Some prefer to store it in cookie since it can be protected there from unauthorized access by JS libraries.
0
acrolink
kokolegorille
jhefreyzz
Any idea how do I maintain an authenticated user with storing token in a cookie rather than localStorage?
0