Hacker News new | ask | show | jobs
by vmasto 3293 days ago
It's not. If you think it is you probably store JWT unsafely instead of in an httpOnly secure cookie.
1 comments

Why do you think storing JWT in secure cookie is only secure solution?