Authorization on React?

Question

User identification

Hello everyone,
please tell me how best to do authorization on the front, what is now:
- the user enters data in the authorization form, sends
- if successful, a session for this user is opened on the back for 168 hours and the back returns the user ID and token

How better store "authorized" state on the front? I went in the direction of localStorage, I save the id and the token, when I open some pages I check the localStorage if the given user is authorized, but how to clear the localStorage after 168 hours?

Or is there another way, more correct and convenient than localStorage?

Answer 1

how to clear localStorage after 168 hours?

Together with the token, you need to store its decay time and, when reading and using it, check if it has expired. Well, the backend, of course, should respond with an error if the token is rotten - in this case, also clean the old value.

Or is there another way, more correct and convenient than localStorage?

There are other client storages, but more supported than LS - no.