VSCode Extension Authoring - Storage for app secrets?

Question

I am working on an extension that needs to authenticate using OAuth. Is there a storage space in vscode namespace where app secret and access tokens can be stored securely? If not, any suggestions? Thanks!

Answer 1

Yes, the SecretStorage utility is provided for that. Secrets are persisted across reloads and are independent of the current opened workspace.

API documentation

Answer 2

TL;DR. No, as of November 2017.

There are some discussions on the credential API for Visual Studio Code extensions(#15414, #31131), but as of November 2017, this feature is stalled and not planned in the near future.

As a workround, you can check globalState and workspaceState in vscode.ExtensionContext as the solution to store data, but you might need to handle encryption/decryption yourself.