<![CDATA[Can you store JWTs in session cookies]]>Do you provide a way to store JWT's in session cookies, to prevent XSS?

]]>https://fusionauth.io/community/forum/topic/678/can-you-store-jwts-in-session-cookiesRSS for NodeMon, 17 Aug 2026 04:52:54 GMTThu, 17 Dec 2020 23:02:41 GMT60<![CDATA[Reply to Can you store JWTs in session cookies on Thu, 17 Dec 2020 23:02:55 GMT]]>Yes. You can use the Authorization Code grant with cookies. Here is a workflow diagram of this: https://fusionauth.io/learn/expert-advice/authentication/webapp/oauth-authorization-code-grant-jwts-refresh-tokens-cookies/

]]>https://fusionauth.io/community/forum/post/1994https://fusionauth.io/community/forum/post/1994Thu, 17 Dec 2020 23:02:55 GMT