Secure storage of sessions in localStorage using encryption

Hi, First, thank you for Supabase! This is a great, helpful service that I've been looking for years. I noticed that all data of the current user session saved in localStorage when using the Supabase JavaScript client. This is not secure for many reasons (_I think you all know them already, I won't repeat them_). > I'm not saying you have to use the libraries that I give as an example below! I'm advocating the very principle of introducing security into public areas. Our safety is in our hands. For example, [softvar/secure-ls]( library (the first result in a Google search for secure localStorage), which uses [these]( libraries to solve a problem: • • In our case, Supabase JS client could do the following (under the hood): But for users, the value of the supabase.auth.token in the localStorage is still encrypted. Another solution, but on the server side. Save important (secret) information about session in HttpOnly cooki…