Is it safe to store the token in the browser's Session Storage?

E

Evgeny Zalivadny2022-01-27 19:49:13

JSON Web Token

Evgeny Zalivadny, 2022-01-27 19:49:13

Is it safe to store JWT Token in Session Storage and not HttpOnly Cookie?

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

D

Dmitry Belyaev, 2022-01-27
@Nordihan

The HttpOnly Cookie is available only to the server that is accessible by the domain that is registered in this cookie and no one else.
Storage is available to any script on the page. Accordingly, the contents of Storage can steal any script connected from the outside.