I understand that the best practices are to use Auth0 Single Page App SDK and not store tokens in local storage. I am currently trying to understand how secure auth0-spa-js is but I can not find any information on the architecture for that library. Internally, how does auth0-spa-js store both access…

Yes, that applies in the same way for this grant type, if the client is a SPA. It’s also the grant type that the auth0-spa-js uses.

How does auth0-spa-js store tokens

dan.woda Closed September 27, 2019, 1:20pm 9

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Securing access tokens in SPA + API Get Help spa , rest-api	4	5741	August 2, 2019
New auth0 spa js Get Help	4	3187	October 4, 2019
How to securly handle tokens in SPA Get Help	8	6363	January 9, 2020
How to persist auth0-spa-js tokens? Get Help	9	5695	March 14, 2020
If SPA's don't use refresh tokens, why is there a setting for them? Get Help	4	2982	August 12, 2020