Comment on API Security Checklist for developersparentComments−DiThi9yWorks for users that block cookies: you can very well put your session token in the LocalStorage and achieve the same effectAFAIK LocalStorage is disabled when cookies are disabled.
Comments
AFAIK LocalStorage is disabled when cookies are disabled.