Is safe to store an access token in a client cookie if the cookie is not send to the server
问题 I'm developing a backbone application with a REST api to a Laravel back end. It means that I authenticate on every request, using the access token that I receive from the social media (eg. Facebook, Google, etc). My plan was to store a client side cookie generated with Javascript to store the access token, so that I can send it to the back end to authenticate the user with my application, and so that it is possible to request resources on the server of the social medium (such as friends list,