How to properly organize a session when authorizing on Backbone.js with a backend on Yii2?

Question

JavaScript

Hello!
There is a frontend on backbone.js + a backend on yii2. Upon authorization, yii2 returns an access_token. As I understand it, this access_token is further used in requests for authorization checks. Can anyone tell me how to store it correctly on the client, write it to cookies, or in some other way? How can I check when loading the page that the user is authorized, maybe there is some example?

Answer 1

The user session is stored in cookies; when making requests from the client, you can see the session marker you need in the request headers. Thus, you will understand whether the user is authorized or not.