I've been working on a express + react + react-router app that involves the spotfiy API, and I've set up the Authorization Code Flow and it works fine. Once I get the token however, I'm not sure where I should keep it to make additional calls to the API. This stackoverflow post (Link) suggests that I could keep it in localStorage since the client will be the one making the requests, but I feel like I've seen a lot of people suggest against storing things like the access token in easily accessible places like that. Any advice/suggestions would be greatly appreciated!
Submitted July 26, 2020 at 01:33AM by Granttank
No comments:
Post a Comment