in app.js, I shouldn't set cookie without protect. It will cause WebSec-Over Permission. User will modify cookie by himself fake someone else Sol: use JWT
in app.js, I shouldn't set cookie without protect. It will cause WebSec-Over Permission. User will modify cookie by himself fake someone else
Sol:
use JWT