title: Is is safe to store access token in session storage of client browser?
body: <p>I am using Token based authentication in web API to authenticate a user.I am using clients browser session storage to store access token.Is it safe to do so?
  Where should i store it make it safer.</p>
  
  <pre><code> $('#btnLogin').click(function () {
      $.ajax({
          // Post username, password &amp; the grant type to /token
          url: '/token',
          method: 'POST',
          contentType: 'application/json',
          data: {
              username: $('#txtUsername').val(),
              password: $('#txtPassword').val(),
              grant_type: 'password'
          },
          //response(Access Token) stores inside session storage of Client browser.
          success: function (response) {
              sessionStorage.setItem("accessToken", response.access_token);
  </code></pre>