Is it correct approach to store access_token in cookie and refresh

N

Nikita2020-07-15 22:53:25

User identification

Nikita, 2020-07-15 22:53:25

Is it correct approach to store access_token in cookie and refresh_token in session?

Is the session the most secure place to store the token and inaccessible to an attacker? What other combination can you choose?

Reply

Answer the question

In order to leave comments, you need to log in

0 answer(s)

Similar questions

I

ilitaexperta2018-12-25 18:06:50

K

Konstantin Kanaev2014-07-05 04:23:33

D

devel7872014-08-01 16:39:25

F

flashnik2014-08-08 14:14:47

R

ReactiveSnaile2019-01-25 00:28:49

Didn't find what you were looking for?