Dùng plugin pinia-plugin-persistedstate:
javascript
// main.ts
import piniaPluginPersistedstate from 'pinia-plugin-persistedstate'
const pinia = createPinia()
pinia.use(piniaPluginPersistedstate)
// store
export const useAuthStore = defineStore('auth', () => {
const token = ref('')
return { token }
}, {
persist: {
storage: localStorage,
pick: ['token'], // chỉ persist token
}
})Pitfall: không persist sensitive data trong localStorage (dễ bị XSS đọc).
Dùng sessionStorage hoặc HTTP-only cookies cho auth tokens.