DEV Community

Discussion on: PKCE authenticaton for Nuxt SPA with Laravel as backend

Collapse
 
stefant123 profile image
StefanT123

You can use the cookies to persist the state or use some package that does that. Don't worry about security, because the user name is not something that should not be publicly visible.

Collapse
 
thorbn profile image
Thor

Can other users not just change the userId in the local cookie to something else and then get other users info from the api? In my case todos

Thread Thread
 
stefant123 profile image
StefanT123 • Edited

Well, if you've set up your back-end properly, they won't be able to do that