Currently I'm working on a React-Laravel stack application. Having already built an SPA using React and a backend in Laravel, the plan is to use the backend as a REST API to make requests from the frontend.
I am using JSON Web Tokens with Laravel Passport in order to achieve authentication. However, storing the auth token in a secure way cannot be done, as both localStorage and cookies are not secure.
My question is this: What alternative route can I take to secure my app (where its security is paramount), having already built out a fair bit of the frontend and backend?