Highly sensitive information stored as String/NSString

[jonigkeit]

Access tokens are stored as String

TIM-iOS/Sources/TIM/Extensions/JWT+Extensions.swift

Lines 7 to 8 in bf529f7

	/// Type alias for tokens - just a string.
	public typealias JWTString = String

• make sure that highly sensitive data is overwritten as soon as it is no longer needed
• do not pass such data via immutable data types, such as String and NSString

See OWASP MAS - Testing Memory for Sensitive Data