3 ms·
"as long as you don't run untrusted JS" is a surprisingly tough hurdle to hit, even for very experienced developers. What is your reason for preferring JWT + l
by anthuswilliams 8y ago
"as long as you don't run untrusted JS" is a surprisingly tough hurdle to hit, even for very experienced developers.
What is your reason for preferring JWT + localStorage for authentication and session handling? I'm genuinely curious, as httpOnly cookies strike me as better in every meaningful way.