3 ms·
It has to come as cookie from the server if you don't want to save it with Javascript.
by thdrdt 7y ago
It has to come as cookie from the server if you don't want to save it with Javascript.
- shantly 7y agoIs there a problem with that? So long as your CORS headers aren't screwed up for your use case, passing JWTs around via cookie headers should be fine, right?