Stackoverflow使用localstorage进行授权似乎不安全。这是否正确，我们如何加强它？

I have been working on a Authentication and authorization module similar to how stackexchange is in place. Now I am sure they use a certain model of oAuth or a token generation server that authorizes uses to their various sites. I tried a little experiment. I have been working on a Authentication and aut