Security issue

[feastivan]

Hello! Sorry for the translation, not selenium in English. The question is: I am writing an online store quasar + backend (Django Rest Framework). After authorization, I receive a token for further use. Where can I safely store it? He is currently in LocalStorage. Thanks in advance

[dobbel]

@feastivan said in Security issue:

Here are 2 threads that could help:
https://mannharleen.github.io/2020-03-19-handling-jwt-securely-part-1/
https://stackoverflow.com/questions/27067251/where-to-store-jwt-in-browser-how-to-protect-against-csrf