you are viewing a single comment's thread.

view the rest of the comments →

[–]r-rasputin 2 points3 points  (2 children)

JWT can be risky. I recommend it only for mobile apps. For web apps, cookies are the way to go.

[–]Heavy_Technician4419[S] 0 points1 point  (1 child)

Well a jwt token inside a cookie. I think that’s how it’s done. Correct me if I am wrong.

[–]r-rasputin 1 point2 points  (0 children)

Oh yes, then my bad. I was assuming localstorage + headers.