I am new to the security section.
I want to write a cross-platform Java Desktop application which ask a user for their credentials and connects to their github account.What I want to do is If the credentials they provided are correct to store them in the disk.
What I would like to know is:
- Where to store their credentials
- Do I have to encrypt their credentials
- What kind of encryption do I have to do
- How do I decrypt their encrypted credentials
Also if possible I would like not to store user credentials into a database.
I would like a detailed answer with proper explanation if possible so I can learn and improve my knowledge