title: For Angular applications where should I store the JWT Tokens those are generated from Auth Server?
body: <p>I have an application that has a login page ( user name and password). Once authenticated successfully I receive the access_token, expiration, refresh token and other claims from the auth server. </p>
  
  <p>Where do I need to store those tokens in the browser so that for the other API request I can pull the access_token and attach to the header of the API?</p>
  
  <p>Is it good practice and safe to store those tokens in localStorage of the browser? </p>
  
  <p>Because those tokens are exposed when we look at them in Developer tools (chrome).</p>