[profile] Enable token cache encryption on MacOS and Linux - #33849

Draft

Yeming Liu (isra-fel) wants to merge 15 commits into

devfrom

shared/token-cache-encryption

Commits on Aug 30, 2026

enabled encryption of token cache by default for macos and linux

Yeming Liu (isra-fel)
authored and
xuming-ms
committed
41f98c4
refactor: token cache file extension

Yeming Liu (isra-fel)
authored and
xuming-ms
committed
5322b0d
use different types for token cache and secret store

Yeming Liu (isra-fel)
authored and
xuming-ms
committed
eff9948
fix az logout failure by using list values instead of dictionary values
xuming-ms
committed
488cf96
Warning only login and debug when build persistence
xuming-ms
committed
f561597
erase os secret persistence when logout or account clear
xuming-ms
committed
1ef3cbc
Lock to prevent concurrent write to corrupt the file
xuming-ms
committed
c9473ae
Modify comment
xuming-ms
committed
50c13bc
Delete previous os encryption store when current encrypt config is false
xuming-ms
committed
8339279
Fix pylint warnings in persistence.py
xuming-ms
committed
be25f8e
Suppress the plaintext fallback warning on managed environments
xuming-ms
committed
4f0c1cc
encrypt config = false as escape hatch only which do not delete the os secret store since it may have user interactive for unlock keyring
xuming-ms
committed
ac81221

Commits on Aug 31, 2026

Wrap the credential store comment under the line limit
xuming-ms
committed
011b9d5
Add keyring label for token and sp secret item
xuming-ms
committed
be7855f

Commits on Sep 1, 2026

Only cloudshell will suppress the encryption fallback warning
xuming-ms
committed
ea63a95