laravel 5.3 passport and angular storing access tokens

I am authenticating users to consume my own API (so a trusted source). What I am struggling to identify is where is the best place to store the return access_token on the client side? Do I create a cookie, or save the data in localstorage?

Also should I only store the access_token, I should I record the refresh_token? What is the refresh token used for?

via Chebli Mohamed