search

shieldfy / API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API
MIT License
22.39k stars 2.6k forks source link

JWT token should be stored securely if they are used as auth for browser users. #153

Open h4cker39 opened 3 years ago

h4cker39 commented 3 years ago

If an application are using JWT in browsers it should be stored securely in a cookie which requires: