Concerns about storing bearer tokens

[gamesaucer]

Thank you, that’s very helpful.

@Dist

So you are responsible for the keys, but if you take reasonable precautions to prevent misuse (such as not making displaying them to the user, or making them available outside of your app), and your app isn’t designed with malicious intent, then it is unlikely Twitch would take action against you (please keep in mind I’m not a legal expert, nor do I speak for Twitch).

It seems to me that the keys they’re talking about are specifically secret keys, as they’re issued upon completing registration and are supposed to be kept secret. So I’m not sure whether that would apply to a bearer token issued on behalf of a user. The phrasing of that section seems a little ambiguous in that regard.