Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Can you store JWTs in session cookies

Q&A

0

2

1.1k

Log in to reply

D

dan
last edited by 17 Dec 2020, 23:02

Do you provide a way to store JWT's in session cookies, to prevent XSS?
--
FusionAuth - Auth for devs, built by devs.
https://fusionauth.io
1 Reply Last reply
Reply Quote 0
D

dan
last edited by 17 Dec 2020, 23:02

Yes. You can use the Authorization Code grant with cookies. Here is a workflow diagram of this: https://fusionauth.io/learn/expert-advice/authentication/webapp/oauth-authorization-code-grant-jwts-refresh-tokens-cookies/
--
FusionAuth - Auth for devs, built by devs.
https://fusionauth.io
1 Reply Last reply
Reply Quote 0

1 / 1