Question: can i store jwt in cookie?
Answer: Don't store it in local storage (or session storage). The JWT needs to be stored inside an httpOnly cookie, a special kind of cookie that's only sent in HTTP requests to the server, and it's never accessible (both for reading or writing) from JavaScript running in the browser.