Support storing session token in keyring #407

New issue

Open

opened 2025-10-14 15:48:15 -06:00 by navan · 0 comments

navan commented

2025-10-14 15:48:15 -06:00

Owner

Originally created by @ulyssa on 7/8/2023

It was pointed out in #130 that the permissions on the session.json file were broad, and, depending on the permissions of the path to the directory, could be readable by other users on the system. Rather than handle storing this information in a file, iamb could possibly store it in the operating system's keyring, so that it lives with the user's other stored passwords. There's a keyring crate that supports multiple platforms and could possibly be a good fit here.

*Originally created by @ulyssa on 7/8/2023* It was pointed out in #130 that the permissions on the `session.json` file were broad, and, depending on the permissions of the path to the directory, could be readable by other users on the system. Rather than handle storing this information in a file, iamb could possibly store it in the operating system's keyring, so that it lives with the user's other stored passwords. There's a [keyring](https://docs.rs/keyring/latest/keyring/) crate that supports multiple platforms and could possibly be a good fit here.