title: Are API tokens safe inside a Flux (Redux) store?
body: <p>Would it be safe to store an API token returned by an authentication call in a Flux (specifically, Redux) store? I've used Webpack to compile all assets in the project, which I believe means the store is scoped out of reach from third-party scripts looking to read the store and extract the token.</p>
  
  <p>And, for what it's worth, the token is sent over HTTPS in an <code>Authorization: bearer ...</code> header.</p>