New answers tagged authentication
3
votes
Prevent unregistered users from accessing the system using JWT?
A scope is meant to be a collection of claims. For example, the profile scope could represent that a person's name, e-mail address, user Id, etc., are included as claims in the JWT. Curity.io actually ...
- 46.6k
1
vote
How dangerous is storing sensitive information in LocalStorage?
Just an example of why it isn't a good idea
Really well explained at the beginning, just want to add an example to keep in your pocket.
Indeed, LocalStorage is not a good place in order to store ...
- 104
5
votes
How dangerous is storing sensitive information in LocalStorage?
The attack would take the form of javascript loaded from another domain, but executed in the target domains page.
ie I load a script from compromised.advertiser.com/adverts.js and it runs "read ...
- 84.6k
Top 50 recent answers are included