Exposed Google OAuth Key

[AhiVT]

Potential security breach. See /posidrive/init.py

[arthuriantech]

Thanks for issue. Here's what the Google documentation has to say about this case:
The process results in a client ID and, in some cases, a client secret, which you embed in the source code of your application. (In this context, the client secret is obviously not treated as a secret.)
Do you have specific proposals about it?

[AhiVT]

@arthuriantech Ensure that the OAuth token in question was created for Installed Application. If it is, you can safely disregard this issue.

If this token is used outside of a user installed application (server API with large access scopes) you should immediately revoke the token and refrain from committing future tokens to GitHub. I recommend setting environment variables and git ignored .env files for this.

I was unable to report this as a security vulnerability since the repository has not set up a Security Policy. I highly recommend setting that up for this project.