Hi, so I just wanted to know how security is provi...
# support-questions-legacyv
vigneshkumar5238
04/12/2023, 8:28 AMHi, so I just wanted to know how security is provided in the supertokens via the cookies, since accesstoken is accessible via cookies, it can be used to forge the identity right? Will the accesstoken be always readable on the frontend cookies?
r
rp_st
04/12/2023, 9:06 AMhey @vigneshkumar5238 we add the access token as httpOnly cookies which is not readable from the frontend
rp_st
04/12/2023, 9:06 AMst-bot-test-case
rp_st
04/12/2023, 10:57 AMits cookie based by default for web sites.
v
vigneshkumar5238
04/12/2023, 12:31 PMSo, httpOnly is set by the supertokens core right? Why do I see tokens in the cookie details after I login? Am I doing something wrong?
r
rp_st
04/12/2023, 12:56 PMit is set by supertokens. You can see httpOnly cookies in the network tab, but the JS can't read it
2 Views