title: Best way to save authentication token?
body: <p>I've been working on implementing an api in c#. The implementation is going well, but I did come across a concern. </p>
  
  <p>When my library has authorized against the api I have a auth_token which I use for consequent queries to the webservice. </p>
  
  <p>The token needs to be kept between program runs as it stays the same for the user (although I do check if it is still valid when the application starts). </p>
  
  <p>For testing purposes I basically just save the token into a text file which is kept in the root directory of the app. </p>
  
  <p>This works fine, but is this the best way? </p>
  
  <p>Not sure the user will appreciate that it gets saved in a cleartext file (even if it is on his own pc). </p>
  
  <p>So, what is general practice for saving tokens like this? </p>