jwt is saved in localstorage. How to set http only?
jwt is saved in localstorage. How to set http only?
localstorage does not have the permission of http only
localstorage is the same origin policy, you should not be able to make it "not http only".