Azure
Investigate non-plaintext token cache
Email from Storage team
according to the Storage Team’s security experts, it’s best to store the tokens in a secret store rather than exposing them as plaintext. We also had the same conversation with them when we were implementing OAuth authentication, and they advised us to not follow the CLI’s example, as it’s always possible that a malicious agent is running when the user is logged in.
I came across your thread on Ars and did some preliminary work on allowing R to make use of DPAPI: https://github.com/qingchenl/DPAPIinterface. Hope this helps!
Hey thanks, this is awesome. I'm going to be talking to the team later this week, so I'll be able to pin down exactly what's needed.