Building a Secure Authentication System with React.js and Express.js: In-Memory Access Tokens and HTTP-Only Cookies for Refresh Tokens

Feb 10, 2024 · 14 min read · Introduction Let's discuss a common worry related to storing access tokens. Storing them in local storage or cookies can make your system vulnerable to Cross-Site Scripting (XSS) attacks, which is a significant security risk. However, in this article...