🏠 Overview › 🧩 Components ›🧩 Secure Credential Store

Secure Credential Store

Component Detail

Data Layer low complexity mobile
1
Dependencies
1
Dependents
2
Entities
0
Integrations

Description

Manages persistent storage of the refresh token in the device's secure enclave using Flutter Secure Storage with AES-256 encryption at rest. Credentials never leave the device; the store only exposes the token to the Biometric Auth Service after a successful biometric verification.

Feature: Biometric Authentication (Face ID / Fingerprint)

secure-credential-store

Responsibilities

  • Persist refresh token to device secure storage (Keychain on iOS, Keystore on Android)
  • Read refresh token for session resumption after successful biometric authentication
  • Delete stored credentials on explicit logout or session invalidation
  • Report whether a stored credential exists for app-launch routing decisions

Interfaces

saveRefreshToken(token: String) -> Future<void>
readRefreshToken() -> Future<String?>
deleteRefreshToken() -> Future<void>
hasStoredCredentials() -> Future<bool>
clearAllCredentials() -> Future<void>

Relationships

Dependencies (1)

Components this component depends on

infrastructure Biometric Infrastructure

Dependents (1)

Components that depend on this component

service Biometric Auth Service

Related Data Entities (2)

Data entities managed by this component

Auth Token 15 fields core Session 15 fields core