I'm a security newbie. I'm implementing oauth on my site and I want to ask where I should save my access token:
- session (will be fetch from the server via ajax request)
I have backend (restful) and frontend (SPA). Communication only between them.
By the way what is recommended expire time for oauth?