You have multiple ways to store the token.
- Set it as a Cookie.
- Save it on vue storage AKA vuex.
- Save it on LocalStorage.
There is not a bettter way to handle the token inside the Front., but those options has pros and cons. For example, if vuex is not setted to be persistent, the moment you press F5, front lose the token. Local storage provide a persistent storage for that token, but needs to be cleared manually when users logs out (people often forget to delete things on local storage)
I think the linus issue related to cookie stealing is prevented using option 2 or 3, but the option you choose is up to you mostly.