How to receive new token from devise_token_auth?
<p>Hi currently I'm using devise_token_auth gem gem for SPA (single page application). I'm using React-redux in front-end and rails at backend. The authentication would be done by sending token to the server on each request. till this every thing was running smoothly:</p>

<p>Problem statement:</p>

<p>The token has to be stored in the browser which makes my app vulnerable</p>

<p>Solution:</p>

<p>Change token on each request. good enough !!!</p>

<p>Problem statement:</p>

<p>But to receieve a new token I have to send user email-id as well as password. which means these two fields has to be stored somewhere in the browser. is it good practice to store user password in browser ??</p>

<p>Or there exist any better approach to do this.. any ideas ???</p>