Hacker News new | ask | show | jobs
by junto 449 days ago
Agreed. A SPA without some backend for front end is always going to push you to store authentication tokens in local storage.

It feels like a shortcoming in browsers that we need a BFF to resort to cookies that JS can’t access.

I like React, but I feel that we primarily use Next.js just for session cookie management.