2
1. User will do the login UserName and password.
2. If the login success then server will return JWT.
3. Now we will store the token.
4. Now for every request we will send the  JWT Token for authentication on server.

My question is that Where can we store the JWT token because Local storage,Session,Cookies is not safe.

Sharad kumar
  • 187
  • 2
  • 14
  • In a data structure that is "globally" accessible – curious student May 07 '20 at 14:14
  • this question has been asked a few times: here is one i answered a liittle while back https://stackoverflow.com/questions/61259117/standard-for-storing-session-key/61261079#61261079 – Joey May 07 '20 at 15:15

2 Answers2

1

"Only the server should know the "secret" that is used to generate the JWT. If someone modifies the data contained in the JWT, the server will fail to decode it. So the server can trust any JWT that it can decode."

You don't need to store JWT token where someone can't find. And if you think if hackers get token of someone, there is a expiration date option for this.

Check this: How safe is JWT?

Yagiz Turkmen
  • 73
  • 8
0

httpOnly cookie

It's a special kind of cookie that’s only sent in HTTP requests to the server, and it’s never accessible (both for reading or writing) from JavaScript running in the browser.

Check this: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies

You can use this Package to make your life easier if you want: https://www.npmjs.com/package/react-cookie

Johan Syah
  • 21
  • 4
  • Thanks Johan,Could you provide me Some Implementation details of storing jwt in httpOnly cookie in Node js backend? – Sharad kumar May 07 '20 at 14:39