We have an Expo application using the managed workflow that we distribute for Android. Looking at the files inside the application directory we found a json which seems to contain a specific authentication token. It seems to be created by Expo itself but we can't find anything about it on the documentation. We'd like to understand what the impact is if it is leaked and what is it used for.
File location on android:
data/data/(com.app.myapp)/files/PersistedInstallation.(XX-some-random-ID-XX).json
Contents:
{
"fid": "some ID different to the file",
"AuthToken": "A JWT token with 'fid', 'projectNumber', 'appId', 'exp' fields in the payload"
... (other fields for token validity)
}
Do you know what this file is for?
Thank you.