Is there any built-in safe storage api for securely storing secrets?

[HuakunShen]

Electron has a safe storage API for "protecting data stored on disk from being accessed by other applications or users with full disk access".

I need to store a encryption key used to encrypt data on disk. Is there a Tauri or Rust way of doing this on all platforms?

Mac has a security-framework for keychain.

It would be nice if we can have a similar cross-platform plugin for tauri.

[FabianLars]

Right now, we generally recommend the stronghold plugin (or stronghold itself for rust since the plugin doesn't expose a rust api yet) but that does not use the keychain. If you want/need that, there should be rust crates available.

[JonasKruckenberg]

It's also worth noting that stronghold is a way more specialized crate and really only makes sense when you're storing cryptographic key material, for other uses like oauth tokens (which you actually want to be able to retrieve) using the os keychains provides stronger security guarantees

Edit: And yes there's the keyring crate which I've used before, we can consider building a secure storage solution using it, but Tauri focus is on getting version 2 done and after that cleaning up tech debt/refactoring to help make contributions easier.

I think in the meantime this would be a great opportunity for a community maintained plugin

[HuakunShen]

@JonasKruckenberg An off-topic question: when will V2 be released? I saw a few features in alpha that I really need like the deep linking.

[FabianLars]

https://beta.tauri.app/blog/roadmap-to-tauri-2-0/

[archcorsair]

Is integrating with keyring still the recommended approach for storing oauth tokens/session information?

[NoelJacob]

What about android? keyring doesn't support android