HttpOnly Cookie as the storage of JWT token

Question

I am building a single page webapplication with Mongo, Express, React and Node. Users can register and login, so I am giving them a JWT. I know that localStorage isn\'t the safe