JWT Security Best Practices



Do Not Store Tokens in localStorage

Source: The Complete Guide to React User Authentication with Auth0

Excellent talk on JWT Security!



Additional Resources:

• https://auth0.com/blog/refresh-tokens-what-are-they-and-when-to-use-them/
• https://twitter.com/sec_r0/status/1353353299689238529
• https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/
• https://cloudsecuritylabs.io/blog/jwt-token-security-best-practices/
• https://fusionauth.io/learn/expert-advice/tokens/revoking-jwts/