I am beginner in Strapi and I don't know how to handle jwt and user object returned by oauth on my frontend

[Twistedseed]

This thread talks about it in detail.

Use of JWT in httpOnly cookie #4632

This discussion has been migrated from our Github Discussion #4632 luwes1y ago I have created an RFC on the Strapi RFC Repo I have checked for existing RFCs before creating this discussion topic Describe the topic This is a duplicate of the Strapi JS SDK issue strapi/strapi-sdk-javascript#31 by @sedubois but since the sdk is not maintained I like to open a discussion here. JWTs are stored in localStorage, but according to this article (Randall Degges - Please Stop Using Local Storage), …

I recommend you read the article above but short answer is
JWTs are stored in localStorage, but according to this article (Randall Degges - Please Stop Using Local Storage ), this is subject to XSS attacks so instead they should be stored in cookies.

instead they should be stored in cookies.