Is storing an OAuth 2 token in cookies bad practise? If so, what are alternatives for a web app?
Cookies have maxSize of 4kb. So if you are saving a lot of info in the token - you will get an error.