Access Token used in URL params

[wholesomewilson]

trafficstars

Hello Chainlit team

We realised that the JWT access token is appended into the callback URL params as a means to pass the access token to the frontend. https://github.com/Chainlit/chainlit/blob/d2fb2169b3e8bdf71a68e92bc07e76d3e6f7b266/backend/chainlit/server.py#L494

1. Is there a reason behind this implementation?

2. Is the team open to change the implementation to using cookies instead? We are willing to work on it and create a PR.