JWT: Where to store JWT in the browser frontend?

preview_player
Показать описание
JWT: Where to store JWT in the browser frontend?

JSON Web Token is a standard for sharing JSON data that are protected by a cryptographic signature. It is the most common method of authorization of services on the internet.

What method of storing JWT in the browser you use is super important because you want to make it very hard for anyone to hack your application.

Source codes

00:00 - JSON Web Token
00:35 - JWT in a cookie
01:25 - JWT in web storage
02:15 - JWT in memory
02:59 - JWT resources
Рекомендации по теме
Комментарии
Автор

whats the point of this then if cookies and web storage all can get XSS attacks and CSRF? i'm confused now

paulsnehasish
Автор

what if user refreshes the browser if we store jwt in memory

nallaparajuamareshvarma
Автор

so all can be xss, encrypt the jwt again in fronend might be good solution also...

leularia
Автор

one question, how I could maintain my app login if it's not secure to save token in the web browser ?

khoroshoigra
join shbcf.ru