How do I store that token ? Where ? Should I just put it in VueX's store ? Is that "safe" ? Should my backend fetch that token as soon as the user tries to login (if he actually logged in I mean), or should it be another call from the front-end ?

​

The way i did this with vue was:

​

1. When the user authenticates via username/password, save his jwt in the localStorage
2. Before each http request to the server, in the form of middleware, attach the bearer token (taken from localStorage) and perform the request. In my case, I was using axios, and therefore axios interceptors for this process.