Handle refresh tokens more securely
未关闭
enhancement
- 主要语言
- Rust
- 星标
- 6
- 派生
- 0
- PR 合并指标
- 30 天内没有已合并 PR
描述
From Aidan's comments in #6...
> We may want to store refresh tokens more securely in the future. This was a quick-and-dirty way of doing it at the time, but I'm not sure saving the tokens in plain text on the hard drive is following good security practices...
贡献指南
调研方向
Look for where refresh tokens are currently stored, likely in a plain text file. Research secure storage options in Rust, such as using the OS keychain or encrypted files. Determine the project's authentication flow to integrate the new storage method safely.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- rust
- 领域
- security
- Issue 类型
- 功能
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 45/100