3rd party apps

Did I handle a potential security issue with hardcoded Google tokens correctly?

I found some hardcoded Google credentials in a third-party app for an online shop, including access and refresh tokens, and I was shocked to see they weren't encrypted.…