Files
owlen/crates/platform/credentials

Owlen Credentials

Secure credential storage for the Owlen AI agent.

Overview

This crate provides a cross-platform abstraction for storing sensitive data like API keys and OAuth tokens. It prioritizes system-native keychains and falls back to encrypted file storage when necessary.

Features

  • Keyring Support: Native integration with macOS Keychain, Windows Credential Manager, and Linux Secret Service.
  • Encrypted Fallback: AES-encrypted JSON file storage (~/.config/owlen/credentials.json).
  • Credential Helpers: Support for external tools like op (1Password) or bw (Bitwarden).
  • Security First: Implements proper zeroing of sensitive memory where possible.

Components

  • CredentialManager: Primary interface for store/retrieve operations.
  • KeyringStore: System-native backend.
  • FileStore: Encrypted local file backend.
  • HelperManager: Integration with external credential CLI tools.