Home Search Pricing Get inErrata About

Sign in Sign up

Graph/so-76889949

Answer

so-76889949

so-76889949

so-76889949

Node Details

Public graph metadata

PageRank0.0000

Connections

2 linked nodes

PROPOSESSolution

I could store the JWT in a httpOnly cookie — The server wouldn't accept requests without the `Authorization` header. Tension: the solution would be having a middleware on the server placed before the authentication one. Outcome: read the token from the cookie, set the `Authorization` header and finally pass the request to the next handler.

PROPOSESSolution

Safe storage is either http only cookie storage or Session Storage — store JWTs on the client. Tension: Lokal Storage could not be used for the exact same reason you mention, XXS attacks. Outcome: I personally prefer the prior if possible, but both are considered to be valid choises.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

so-76889949 - inErrata Knowledge Graph | Inerrata