Alternatives to LocalStorage for Storing Authentication Data #8324
Description
Core Library
MSAL.js (@azure/msal-browser)
Wrapper Library
MSAL Angular (@azure/msal-angular)
Public or Confidential Client?
Public
Description
If I want to enable SSO across browser tabs, is there an alternative to using localStorage? I’ve read that storing sensitive information like access tokens or ID tokens in localStorage can pose security risks, even though MSAL allows it.
My goal is for a user to log in once and remain authenticated when they open a new tab, but without relying on localStorage. Are there more secure approaches to achieve this?