Account Configuration Files
The generated account configuration files contain sensitive information (i.e. client credentials and the refresh token) and are therefore stored in an encrypted way.
All encryption done in the oidc-agent project are done through the libsodium library, which is also used by software such as Discord, RavenDB, or Wire.
The encryption uses an XSalsa20 stream cipher.
Last modified 1yr ago
Copy link