Storing JWT token securely

Hi all,

I’m just getting started with Wappler - and honestly struggling quite a bit.

I have a background in programming and database management (though I admittedly haven’t written any code in many years), and run an app development agency, so I understand the concepts pretty well. I am really struggling with Wappler’s UX though - I personally don’t find it intuitive.

Anyway, clearly Wappler is a powerful product and I want to use it for a new business opportunity I’m exploring. After a few days of tinkering, I’m much more confident with how to use Wappler’s front end tools than the backend side of things. So, I’m thinking I’ll disable the backend and use Xano for that instead so that I can reduce the learning curve somewhat.

Which brings me to my question, how do I create a httpOnly cookie to securely store the JWT token I get back from my Xano signup/login endpoints? I have been able to create a secure cookie, but I can’t find the httpOnly option.

It’s my understanding that httpOnly is the best practice / only secure way of storing it on the client side.

Any help would be greatly appreciated. Thanks in advance!