JWT Tokens not passed securely to frontend

[v0eak]

Bug report

The JWT Token is not communicated securely between the backend and the storefront.

Describe the bug

After an actor_type logs in, the login has to be verified. This is done in the /auth/${actor}/${method}/callback route. However, if a succesRedirectUrl is provided, the token is appended as a query parameter, which is not secure.

Steps to reproduce the behavior

Authenticate with the provider options successRedirectURL

[Modules.AUTH]: {
      resolve: "@medusajs/auth",
      options: {
        providers: [
          {
            resolve: "@medusajs/auth-emailpass",
            id: "emailpass",
            options: {
              successRedirectURL: process.env.SUCCESS_REDIRECT_URL
            },
          },
        ]
      }
    }

Expected behavior

The Token is appended in the URL Parameter.

Code snippets

#8681 (comment)

Additional context

The solution is provided in this pull Request: #8681

[v0eak]

Issue was fixed in: #8980