3 ms·

If you do not have a server side session store, only option is to use a nonce of some sort though.

• ben-schaaf 8y ago
  Or use a access/refresh token pair