Best practice to persist Oauth token and credentials

Hi,

Our custom visual intends to perform a 'fetch' call that uses Oauth v2 + Open ID for authentication.

The credentials for the call (URL, user, secret) are given manually by the user.

We would like to:

• persist the token received (if authentication is successful) to be reused in subsequent 'fetch' calls
• persist the given credentials to automatically generate another token when the one received expires (the token expires in 10 minutes)

What are the best practices to achieve both persistences? (not necessarily the same way)

Thanks