Feed
Is it possible to access a JWT token stored in an HttpOnly cookie using Nookies?
If the API base path and browser base path are the same, the HttpOnly cookie is automatically included in the request headers. In such a case, is it more secure to avoid explicitly passing the token in the Authorization header?
Sudipta Pradhan
Yes, i think directly passing cookies in header is a secure option. But it gets directly passed into a separate header called cookie and not Authorization as far as I am aware. I will try to explore if we can pass it directly into Authorization. Thank you for the suggestion.