Hacker News new | ask | show | jobs
by totony 1864 days ago
Can't you just read document.cookies to get the token at that point?
1 comments
nerdkid93 1864 days ago
I believe refresh tokens are supposed to be HTTP Only
link