QUESTION: XSS Attack Protection and other attacks

[Alexlamafia2]

It seems as though cognito tokens are store either in the local storage or session storage. Although these places work they seem vulnerabble to XSS or CRSF attacks, is there a way to protect against these types of attacks using this package. Thanks!

[zach-betz-hln]

When creating a new UserManager, you can set the userStore to InMemoryWebStorage if you like. For example:

const userManager = new UserManager({
  userStore: new WebStorageStateStore({ store: new InMemoryWebStorage() })
  // other props...
});

Also see the docs.

[Alexlamafia2]

Thanks for your help! @zach-betz-hln