Thank you for the info. In that case is it also not allowed to store the jwt in the js file of the extension ?