At login's screen password field value is been saved on LocalStorage (text plain)

[devdesignerstudio]

i've sent you an e-mail about coinOS security breach
subject: field password at Login screen
since you are saving it on Local Storage
besides you are saving non encrypted password on it
and you do not clean it after user logging in
so imagine a possible use case: a staff who receives payment for his employer
a malicious unsatisfied staff
could take a look at "password" storage key in Local Storage without problems and steal it occasionally
today your app is only cleanning it up after user logging out
i believe it is a security breach
but its up to you
you're welcome
best regards

[devdesignerstudio]

in my poor opinion
i believe
Since you are using JWT after user loggin in
requesting field "token" on Session Cookie
to authenticate user through your app
you should have cleaned password value input on local storage
or should have never set it there