Client-side jwt token storage

Question

I need advice, what is the best way to store a JWT token? Should we store in cookies or storages? But with the CSRF flaw and xss attacks I have a doubt. I'm still in training and working on a year-end project. Or the best is to store the jwt token in a variable in a store. I developed the application in nodejs express js for the back and in react for the frontend. Thanks in advance for your advice.

You could store the token in a http only cookie. That way it cannot be accessed through javascript at least. — chris coerdes, May 13 '22 at 12:38

score 0 · Accepted Answer · answered May 13 '22 at 12:41

0

I use cookies, they are easily able to be accessed server side and can have an expiration date.

Take a look at this post: Local Storage vs Cookies

answered May 13 '22 at 12:41

Jack Lankford

108
7

thank you so much i will follow this solution – tony May 13 '22 at 12:43

Client-side jwt token storage

1 Answers1