Where to persist OAuth2 tokens?

I’m developing an integration for an API that issues OAuth2 tokens. Is there a preferred location where these can be persisted on disk?