Recently we started working on a mobile payment app.
We are not looking for a way to implement a "Remember me" function. We wondered if we should use session cookies, JWT or maybe other method of remembering user. Our questions are
- Is it safe to implement a functionality to remember user in payment apps
- How would you go about it? How long should be the expiration time