HIIT / dime-ui

User Interface build for DiMe sever
MIT License
23 stars 2 forks source link

Security issue? #5

Closed chenhunghan closed 8 years ago

chenhunghan commented 8 years ago

Currently dime-ui stores username and password in browser's localstorage after user login. This might have security issue. However, currently we don't have OAuth so the only way to achieve stateless on UI side (without asking username/password on every requests) is to store secrets in localstorage. Once we have OAuth the username and password will be replaced with JSON Token. Any suggestions?