Where to store React js + Rest api php tokens?

Question

PHP

The project was divided into 2 separate projects Spa shop on react js and back on php (rest api). For authorization, etc., I use 2 jwt tokens and a resfresh token. Refresh can store localstorage, but jwt needs to be in a cookie with the http only flag, then I can’t take it from js to fetch it in the back, then where to store it?

Answer 1

fetch won't send cookies, unless you set the credentials init option. (

use the credentials option and fetch will send whatever cookies you have.
https://developer.mozilla.org/en-US/docs/Web/API/W...

Answer 2

jwt can be stored in sessionStorage