TokenStore

class TokenStore(tokenFile: Path, encryptionKeyHex: String)

Persists OAuth Tokens as AES-256-GCM encrypted JSON on disk.

The token file is written with owner-only POSIX permissions when supported.

tokenFile

path where the encrypted token blob is stored

encryptionKeyHex

64-character hex string representing a 256-bit AES key

Constructors

constructor(tokenFile: Path, encryptionKeyHex: String)

constructor(tokenFile: Path, encryptionKey: SecretKey)

Alternative constructor accepting a pre-built SecretKey.

fun clear()

Deletes the token file from disk.

Loads and decrypts tokens from disk, or returns null if the file is missing or corrupt.

fun save(tokens: Tokens)

Encrypts and writes tokens to disk. Creates parent directories if needed.