[Vuejs]-Seperate Front and Back-End – Persistent Authentication with Vue/Webpack/Hapi

as I know, HTTPOnly cookies can be set only on https protocol

source : https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#Secure_and_HttpOnly_cookies

and I think it is safe to store jwt token in localstorage as long as you use https

another related thread about jwt storing in reactjs : https://stackoverflow.com/a/44209185/10661914