Next js and django restframework

Unanswered

Masai Lion posted this in #help-forum

Masai LionOP

2023-12-20T00:08:56.000Z

Hello, I would like to shed some light on APIs and authentication. I have an endpoint in django restframework for authentication, it returns a JWT token if the user is logged in, I wonder where I can keep this token when the user does CRUD actions, is this a good thing to do this also for authentication?

7 Replies

Masai LionOP

2023-12-20T00:11:31.000Z

I also emphasize that for each page navigation, if the user wishes for example to add something, in the post request I must have their access token

@Masai Lion I also emphasize that for each page navigation, if the user wishes for example to add something, in the post request I must have their access token

Ray

2023-12-20T00:24:59.000Z

httponly cookie is good for that

Masai LionOP

2023-12-20T02:56:51.000Z

it is safe and secure ?

I saw this https://mahieyin-rahmun.medium.com/how-to-configure-social-authentication-in-a-next-js-next-auth-django-rest-framework-application-cb4c82be137

Ray

2023-12-20T02:59:19.000Z

yeah, you could use next-auth which also store the token in a httponly cookies

@Masai Lion it is safe and secure ?

aardani

2023-12-20T03:07:35.000Z

httpOnly cookie are secure only in Application layer because they can't be accessed by client-side javascript browser.

JWT are also making sure that the content can't be tampered even if the cookies are somehow snipped in the browser.

Masai LionOP

2023-12-20T22:12:37.000Z

okay super, im trying