-
Notifications
You must be signed in to change notification settings - Fork 1
Security
ardennguyen edited this page May 28, 2026
·
1 revision
- Credentials stored at
~/.zalo-agent-cli/credentials/with 0600 permissions (owner-only) - Proxy config stored separately from credentials
- Proxy passwords never shown in output — always masked
- QR HTTP server binds to
127.0.0.1only - Exported credential files created with 0600 permissions
~/.zalo-agent-cli/
├── accounts.json # Account registry
├── credentials/
│ ├── cred_<ownId1>.json # Per-account credentials (0600)
│ └── cred_<ownId2>.json
└── qr.png # Last generated QR