User info are saved in local storage which is vulnerable to user about freshcomm

[s-vamshi]

@roopeshsn i would like to work on this issue. Can you assign this to me?
My approach is in the backend we need to only send token after login or sign in

[roopeshsn]

So It won't save the credentials in local storage, right?

[s-vamshi]

Yes it won't get stored except jwt.

[roopeshsn]

Can't we store jwt in a cookie?

[s-vamshi]

local storage does the same thing as cookie right?
Just curious, is there any specific reason for storing jwt in cookie?

[roopeshsn]

local storage does the same thing as cookie right? Just curious, is there any specific reason for storing jwt in cookie?

https://coolgk.medium.com/localstorage-vs-cookie-for-jwt-access-token-war-in-short-943fb23239ca

[ozair-dev]

@s-vamshi localStorage can be accessed by the browser but the cookies are 'set and read' only by the backend and client doesn't have any control over it.

[ozair-dev]

@roopeshsn u can assign it to me if @s-vamshi is not available.

[s-vamshi]

@roopeshsn I caught up with some other work so you can assign it to @ozair-dev.

[roopeshsn]

You can work on this issue @ozair-dev!