Secure Token Storage
Component Detail
Data Layer
medium complexity
mobile
0
Dependencies
1
Dependents
0
Entities
0
Integrations
Description
Hardware-backed secure enclave adapter wrapping flutter_secure_storage to persist and retrieve JWT refresh tokens. Ensures tokens are stored in iOS Keychain and Android Keystore, never in plain storage. Biometric data never passes through this layer.
secure-token-storage
Responsibilities
- Write JWT refresh token to platform secure enclave (Keychain/Keystore)
- Read stored refresh token for biometric-triggered session restoration
- Delete stored token on logout or biometric disable
- Abstract platform differences between iOS Keychain and Android Keystore
Interfaces
storeRefreshToken(token: String) → Future<void>
retrieveRefreshToken() → Future<String?>
deleteRefreshToken() → Future<void>
hasStoredToken() → Future<bool>