Hi, I am quite new to Okta and authentication.
And I can’t find enough information to answere this questions ( or I don’t understand them 
): where does okta store my tokens? how does okta protect me from XSS and XSRF? and what do i have to do to enable this?
Thank you very much for your help.