Implementation GuidesWeb applications

BFF requirements and best practices

Handling tokens in a backend-for-frontend

Report issue

Covers why a BFF keeps tokens server-side instead of exposing them to the browser, session handling between the BFF and the frontend it serves, and the requirements a BFF is expected to meet.