-
Notifications
You must be signed in to change notification settings - Fork 64
Security
phucmpham edited this page Mar 16, 2026
·
1 revision
- Credentials stored at
~/.zalo-agent-cli/credentials/with 0600 permissions (owner-only) - Proxy config stored separately from credentials
- Proxy passwords never shown in output — always masked
- QR HTTP server binds to
127.0.0.1only - Exported credential files created with 0600 permissions
~/.zalo-agent-cli/
├── accounts.json # Account registry
├── credentials/
│ ├── cred_<ownId1>.json # Per-account credentials (0600)
│ └── cred_<ownId2>.json
└── qr.png # Last generated QR