Where and how to store client_secret?

Question

OAuth

There is a SPA application written in Nuxt. An API on Laravel is deployed under it. It's time to authorize the administrator and protect requests on behalf of the administrator. The choice fell on laravel passport. And the question arose, is it possible to store the secret key on the client side to get a bunch of tokens? If not, how to organize it on the backend. The option described in the documentation and an additional request from the route was tested, but I want to know if there is any other solution.

Answer 1

The normal option is a separate request from the back and transferring the access token to the front.
But you can also try personal access

Answer 2

It can be stored in a cookie. Just be sure to read up on how to do it safely.