Should I store access_token in cookies?

Question

Information Security

As I understand it, storing an access_token in cookies is the same as storing the session id there, from a security point of view? Can this become a bottleneck or am I worrying in vain?

Answer 1

whether you keep the key to the house in your pocket, or whether you keep the house in your pocket