What's the best practice for authorization in the plugin and auth tokens/data storage?

[amal.samally (Artyom Krivolapov)]

For the IDEA plugin with authorization, what would be the best way of storing the authorization tokens and account data?

If using the recommended approach from Persisting Sensitive Data the user on macOS has a system request everytime and the UX is far from ideal. If users choose to deny request - the functionality will be broken with no restoration possibility.

Are there any recommendations?

[yann.cebron]

a system request everytime

IIRC there’s option to grant access “forever” in the dialog

[amal.samally (Artyom Krivolapov)]

@yann.cebron

IIRC there’s option to grant access “forever” in the dialog

And some users don’t use it, which leads to awful UX. Others occasionally (or on purpose) hit deny request - the functionality will be broken with no restoration possibility.

Users don’t understand the reason for this request, and developers can’t get the state (allowed/allowed forever/denied).

So, any better solutions?