Token-Based Authentication:?

• Use JWT tokens (which are included in the Authorization header, not cookies)

to avoid reliance on cookies for authentication, making CSRF attacks less

likely.