OdyseeTeam / odysee-ios

The Odysee iOS app with wallet functionality.
MIT License
67 stars 22 forks source link

Livestream Token security leak #436

Open colemancda opened 10 months ago

colemancda commented 10 months ago

The auth session token for the livestream should not be stored in UserDefaults. Instead the storage should be abstracted to a protocol and use the Keychain on iOS devices.

https://github.com/OdyseeTeam/odysee-ios/blob/0f7dd413dc01dbd5ec2034c3afc3ede64d46d45d/Odysee/Utils/Lbryio.swift#L48