CIAM: keep your tokens in memory
A successful CIAM login is only part of the story. What does your frontend keep afterwards? I explain the user and transaction stores in oidc-client-ts, implement a TypeScript memory store and cover the trade-offs around redirects, reloads and SSO. In-memory tokens reduce persistence; they do not make an application immune to malicious JavaScript.