DEV Community

Discussion on: Authorization and Authentication For Everyone

Collapse
 
poxrud profile image
Phil

If a token is stolen it can be used by someone else. Just like if a cookie is stolen it too can be used by someone else. It is up to the develop to make sure their application is secure against attacks.