AngularJS - Handling refresh token? AngularJS - Handling refresh token? angularjs angularjs

AngularJS - Handling refresh token?


I would strongly advise against sending and storing refresh tokens on SPAs like Angular.

If you are using session storage or local storage, you are opening a window of opportunity for the this refreshToken to be captured, either by a XSS attack, or by the user leaving the computer unattended.

See this article or this question for more info.