One doc tagged with "tokens"

Engineering guide for storing authentication tokens safely — why LocalStorage is forbidden and how to configure secure HttpOnly cookies correctly.