0

I have: websocket secure connection (wss) through the whole app. + Backbone.js on client side if it's significant.

I want: automatically log in user on new tab opening, if he's already logged in another tab.

Question: what is better either use cookies or localStorage?

VB_
  • 45,112
  • 42
  • 145
  • 293

1 Answers1

1

If you use localStorage, the user's credentials will be stored (presumable unencrypted unless you implement this yourself) on the user's local machine. These records will not expire unless you write your application to do this. As such your user would be logged in forever, not just if they have another tab open, unless you also wrote logic for that. But there is no reason to do all this additional work.

Cookies are already frequently used to accomplish this functionality. Inside the cookie you should store a session token, which identifies the user's session uniquely. Cookies have the advantage of automatic expiration, and are automatically passed to the server with each HTTP request. For more information about the differences between cookies and localStorage, take a look at this thread.

Community
  • 1
  • 1
Jonathan Pullano
  • 322
  • 2
  • 13