There are several improvements:
OAuth2 Best Practices:
- The
access_token
should only be stored in memory (not inlocalStorage
). - The
refresh_token
should be stored inHttpOnly
cookies (not normal cookies).
Frontend Refactor:
Pinia
is recommended for Vue3 projects, notVueX
.- Use
composition API
instead ofoption API
in Vue3. - Use
data provider
pattern to improve maintenance.
TODO Feature:
kubernetes
deployment.