GAM-team / GAM-team/GAM

GAM insecurely stored sensitive credentials

Open
#867 11 comments 0 reactions 0 assignees View on GitHub
enhancement help wanted
Dominant language
Python
Stars
4.3k
Forks
537
Avg merge
2h 34m
Merged PRs (30d)
9

Description

GAM makes use of the local filesystem to store refresh tokens, which is are sensitive credentials, especially considering that the credential typically grants administrative access to messaging environments.

Proposal: make use of [keyring](https://pypi.org/project/keyring) so that the tokens are saved into Mac Keychain, Windows credential locker, etc, encrypted with user account control.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.