feat: store OAuth tokens securely

Add bounded token response parsing with refresh-token retention and a cancellable worker-thread libsecret adapter using versioned credential payloads. Verify CRUD, isolation, cancellation, corruption, unavailable service, redaction, and cleanup against an isolated D-Bus and gnome-keyring Secret Service in normal, warning-as-error, and sanitizer profiles.
2026-07-18 11:56:04 +01:00
parent 295acbc125
commit 3560a7d23d
13 changed files with 1405 additions and 27 deletions
--- a/shell.nix
+++ b/shell.nix
@@ -9,7 +9,11 @@ pkgs.mkShell {

  buildInputs = with pkgs; [
    curl
+    dbus
    gcc
+    gnome-keyring
+    libsecret
+    nlohmann_json
    openssl
    sqlite
    xdg-utils