edu-sync init routine cautiously suppresses echo when asking for access token, but then creates a settings file world-readable and saves the sensitive data there.
Please have the tool create the config file only user-readable, and consider have the tool check for access rights and emit a warning if access rights are loose.
edu-sync init routine cautiously suppresses echo when asking for access token, but then creates a settings file world-readable and saves the sensitive data there.
Please have the tool create the config file only user-readable, and consider have the tool check for access rights and emit a warning if access rights are loose.