in storing api access token in SPA app. I'm using vue with pinia. I also read that storing in local storage is not a good practice. So using pinia as a state management and storing in env file is a wise option?
Localstorage or cookies are both fine. Storing it in a state manager won't work well because it's lost on refresh
You can store access,refresh tokens in http only cookies
Обсуждают сегодня