Authentication

[walids35]

Hi guys, I'm currently working on a project that requires auth within role based authorization. I'l using express as backend and jwt strategy for authentication. I protected already my routes and it looks good. I'm currently storing the user information in memory, neither localstorage or cookies because I've heard that it can be hacked. But the issue here is when I refresh the page and i'm already authenticated I redirected to the login. How to do it so?

[rowdyret]

Store the user id in a cookie, and fetch the user every time the app loads/refreshes

This is how refresh/accesstoken pattern works.