Password is stored in clear text in the config file

[bnjbvr]

This means that if you know that somebody uses cozy-clis, you can just cat ~/.cozy-config.json and get their password.

Possible solutions include:

• using encryption in both ends
• ask to store a hashed version (sha256) of the password and compare it distantly with the hashed version of the password.

[frankrousseau]

Thank you for the suggestions. We have similar problems with device synchronization. So it will take time before we solve this. Whatever you're right, the password shouldn't appear clearly in this file.