OAuth & credential security

OAuth-based — GROX never sees your passwords. Credentials encrypted in air-gapped HashiCorp Vault with mTLS transport. Short-lived tokens auto-rotated every 2 hours. Zero plaintext storage. Session logs track every API call.