The goa-daemon program stores configuration in the $XDG_CONFIG_HOME/goa-1.0/accounts.conf (typically ~/.config/goa-1.0/accounts.conf) file. The format of this file is private and 3rd party programs or libraries should never read it. This file does not contain any passwords or secrets.
The goa-daemon program stores secrets (such as OAuth tokens) in m[blue]GNOME Keyringm. The format of the stored secrets is private and 3rd party programs or libraries should never read, modify or delete these secrets.
Written by David Zeuthen <email@example.com> with a lot of help from many others.
Please send bug reports to either the distribution bug tracker or the upstream bug tracker at m[blue]https://gitlab.gnome.org/GNOME/gnome-online-accounts/issuesm. There are some debugging tips at m[blue]https://wiki.gnome.org/Projects/GnomeOnlineAccounts/Debuggingm