DEV Community

Discussion on: Has anyone used Okta?

Collapse
 
lysofdev profile image
Esteban Hernández

tl;dr - LocalStorage is not encrypted or domain-restricted. Basically, any JS script can read your LocalStorage and compromise your authentication tokens. Use Cookies instead.