add example of keeping secret when auth is done via an OAuth token

[sckott]

i'm not sure i know exactly what you mean - can you give an example?

[maelle]

related to #2 (i.e. how do you perform tests and keep cassettes secure when there is an OAuth token)

[sckott]

Are you talking about an interactive OAuth flow where a browser tab opens, etc.? Or where a user sets their token using R options or an env var?

[maelle]

The package author would keep their token secure after generating it interactively, but one should make sure there's no secret in the stored cassettes (I am not sure it'd be very different from the API key stuff, but I want to write an example to see how things go).

[sckott]

good idea

[maelle]

things will be easier after https://github.com/ropensci/vcr/issues/58