Upon installation on Tuesday evening, I wasn’t prompted for any keychain access and on Wednesday when poking around the local caches discovered that the ~//Library/Caches/com.openai.atlas/Cache.db file has 644 permissions and that SQLite database has my ChatGPT oAuth tokens in them unencrypted. I was able to query them from a Python script and use them to grab both my user profile and chat history.
When I didn’t see a fix in the update this morning or a formal place to file bugs, I thought I’d try here. If it matters, my ChatGPT login is thought Google, although others have a similar setup and were prompted for Keychain access while I was not. Unclear if the Keychain is related to the unencrypted oAuth tokens or not, but other browsers set that file to 600 and encrypt the tokens inside.
