DEV Community

loading...

Discussion on: How to securely store JWT tokens.

lt0mm profile image
Tom • Edited

hm not exactly authentication happened exactly on keycloak server and then backend made request to keycloak just to validate the token, so user received token from keycloak server and there for I suppose just cookies solution would not work. As I understand that solution could be migrated from local storate to cookies only if we moved keycloak to some subdomain and used subdomain cookies sharing. But definitely I can confuse something

Thread Thread
gkoniaris profile image
George Koniaris Author

If it follows the oauth2 flow, you could redirect to the backend of your web application instead of the browser, so then the backend would set the cookie and would redirect back to the frontend page.

Thread Thread
lt0mm profile image
Tom

yeah it would work I think thank you for the answer!!