Published onNovember 8, 2023Securing SPA React app with Duende BFFauthenticationoidcsecurityspabffduendereactRather than having access tokens in the browser, we'll use the BFF architecture to store only HttpOnly cookies in the browser and use a server based backend to manage our access tokens.