GAM insecurely stored sensitive credentials
Open
enhancement
help wanted
- Dominant language
- Python
- Stars
- 4.3k
- Forks
- 537
- Avg merge
- 2h 34m
- Merged PRs (30d)
- 9
Description
GAM makes use of the local filesystem to store refresh tokens, which is are sensitive credentials, especially considering that the credential typically grants administrative access to messaging environments.
Proposal: make use of [keyring](https://pypi.org/project/keyring) so that the tokens are saved into Mac Keychain, Windows credential locker, etc, encrypted with user account control.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.