Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JWT accessToken 저장 방식 변경 및 리프레시 토큰 적용 #37

Open
dididy opened this issue Apr 11, 2021 · 0 comments
Open

JWT accessToken 저장 방식 변경 및 리프레시 토큰 적용 #37

dididy opened this issue Apr 11, 2021 · 0 comments

Comments

@dididy
Copy link
Member

dididy commented Apr 11, 2021

Is your feature request related to a problem? Please describe.

현재 sessionStorage로 accessToken을 관리하고 있습니다. 이 경우 XSS 공격(JS로 토큰에 직접 접근)이 가능하기 때문에 보안에 매우 취약합니다.

보안 이슈를 해결하기 위해 백엔드에서 refreshToken 적용이 완료되는 시점에 기존의 토큰 저장 방식과 인증 프로세스를 변경해야 합니다.

Describe the solution you'd like

https://velog.io/@0307kwon/JWT%EB%8A%94-%EC%96%B4%EB%94%94%EC%97%90-%EC%A0%80%EC%9E%A5%ED%95%B4%EC%95%BC%ED%95%A0%EA%B9%8C-localStorage-vs-cookie

Describe alternatives you've considered

Additional context

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant