title: JWT authentication - Prevent JWT token from being stolen
body: <p>I'm making a full stack web application. My frontend consists of angular-cli and my backend is built from node + express.</p>
  
  <p>I managed to get authentication (read: register and login) working by using a JWT token. At this moment this token is stored in localStorage. This makes it possible that users can share their token, or the token can be stolen by malicious users.</p>
  
  <p>I use the token to prevent/allow users to follow certain routes in my frontend and also to authorise certain api calls.</p>
  
  <p>Is there a way this JWT token can be made more secure or should I follow a different route for authentication/authorisation?</p>
  
  <p>Thanks in advance.</p>