title: Is is possible in Go to access JWT token stored in client localstorage?
body: <p>I've already implemented a SPA application on the backend and with angular it's easy to authorize the token stored in the browsers localstorage, but on the frontend I use the server for rendering the html.</p>
  
  <p>In go, on the HTTP request handler, from the server, how can I get hold of the browsers localstorage / sessionstorage to retrieve the token, validate it and render the allowed content in the response?</p>
  
  <p>Is this even possible or do I have to use session?</p>
  
  <p>I was thinking maybe somehow the http.client had some way I don't see, which could help get the job done?</p>
  
  <p><strong>edit</strong>
  If it's not possible I found this: <a href="http://www.gorillatoolkit.org/pkg/securecookie" rel="nofollow">http://www.gorillatoolkit.org/pkg/securecookie</a> - I tried googleing a bit but I want to be absolute certain this hmac verification makes this solution at least as secure as the JSON Web Tokens?</p>
  
  <p>And if there is indeed someone who can come up with good arguments why one should use server resources on session, please do share this with me (I don't care about old browsers btw - only performance and utilizing the clients where possible, as long as security is not compromised)</p>