How can Electron apps enforce least‑privilege authentication when using expired credentials in a persistent session?
When an Electron application uses a persistent session (e.g., session.fromPartition('persist:auth') ) to store authentication cookies or tokens, the framework will automatically send those credentials with outgoing requests unless a custom handler intervenes. If the stored credentials have expired, the app may still leak them to servers, violating least‑priv