Hello,
I have a
java standalone application in witch user is required to login .
my application needs to store user username & password , so if user run application later he is automatically authenticated with his previous stored username & password.
I stored user infos using java serialization : used a class User which i serialize to a file & save it to user hard disk. this class is each time deserialized to try authenticating user automatically.
I don't believe this serialization solution is elegant . because the serialized file could be changed or deleted by user. it is also difficult to make it a hidden file because i want my app to be cross-platform and hiding files is different across different platforms.
so i'm looking for a better & elegant way to store user login infos .
using database is not appropriate in my case.and i want these private data to be hidden andnot accessible to malicious users.
Any good ideas how to do that ?
thanks.