Welcome to vue3-realworld-example-app Discussions!

[mutoe]

👋 Welcome!

We’re using Discussions as a place to connect with other members of our community. We hope that you:

• Ask questions you’re wondering about.
• Share ideas.
• Engage with other community members.
• Welcome others and are open-minded. Remember that this is a community we
  build together 💪.

[ashish-banjare]

Hello there,

thanks for your contribution
i am new in Vuejs, for learning purpose i setuped this repo with laravel realworld backend
i am getting this error while update profile or create new article.
{"errors":{"message":"JWT error: Token is absent","status_code":401}}

[mutoe]

You should set Authorization header in your request.

Authorization: Token xxx

https://en.wikipedia.org/wiki/JSON_Web_Token

[Dmytro-Shved]

Hello Mr. mutoe

After analyzing the source code I still have some questions:

• Why is userStorage (localStorage) used to store Token if it makes the token vulnerable to XSS attacks?
• What is the point of moving the token to securityData in JS memory if it is still retrieved from localStorage beforehand?
• Is there any additional protection provided, or is this done to simplify the implementation of a RealWorld project?

I'd be grateful for your expert opinion, I just want to understand how I can structure my VueJS app and work with backend authorization