Elm Jwt handling and potential security threats!

[rupert]

Take a look at this thread, as many of your questions were discussed there previously:

Security question - auth tokens in local storage?

Do you ever put auth tokens in local-storage - so that auth can flow accross multiple tabs or page refreshes? Are there alternative approaches that are more secure, and have you used them in Elm? Having some discussions on slack around improving the auth packages I have published, but I’d love to get some more input.