I am very angry with the constant radical changes in Polymer. My team has written applications in Polymer 1 now we are still rewriting to Polymer 2, soon we need to rewrite to Polymer 3 (it should be easier) but is afraid that the scale (400+ components) can cause some problems. Now you can see that Polymer 3 is no longer alive and will be replaced by LitElement with a completely new templates system, which is practically unreadable in Polymer 3. Polymer will no longer be supported and you have left the big companies with nothing, because LitElement seems to be a completely new project, which is to replace Polymer and looks like an experiment, it ridiculous.

Polymer 3 future? It seems that the polymer is already dead and will be replaced by lit-html and lit-element.

@labsvisua We did not understand you wanted to store the token in a cookie without using headerów. In this case, the server will download the same token no front.

And what about the defense CSRF?

I would be grateful if you show such solution.

But how the server retrieves the token? Typically, the token is stored in localStorage. I have a middleware for the POST request, but I do not know what to do with the party asking to serving GET request when express serve pages.