All issues

Search results

Windows: a store for service "MyApp" enumerates, loads and deletes the credentials of service "MyApp:Dev", because target names are joined with ':' unescaped

bugSomething isn't workingSomething isn't working

Status: Open.

#176 In ktsu-dev/CredentialCache;

· matt-edmondson opened on Sep 29, 2026

Windows rejects a 2400-char base64 token as over the 2560-byte limit: JSON escaping writes every '+' and non-ASCII char as \uXXXX (6 bytes)

bugSomething isn't workingSomething isn't working

Status: Open.

#175 In ktsu-dev/CredentialCache;

· matt-edmondson opened on Sep 29, 2026

TryGet on Windows and macOS frees the OS-returned plaintext buffer without zeroing it, so every load leaves a copy of the secret in freed heap

bugSomething isn't workingSomething isn't working

Status: Open.

#173 In ktsu-dev/CredentialCache;

· matt-edmondson opened on Sep 29, 2026

Saving a consumer-defined Credential subclass throws raw NotSupportedException on every platform store, but succeeds on InMemoryCredentialStore

Status: Open.

#171 In ktsu-dev/CredentialCache;

· matt-edmondson opened on Sep 28, 2026

Linux store throws TypeInitializationException (not DllNotFoundException) on every call when libsecret is missing, so consumers can't detect it and fall back

readyFully specified; implement as writtenFully specified; implement as written

Status: Open.

#168 In ktsu-dev/CredentialCache;

· matt-edmondson opened on Sep 27, 2026

macOS Save and Remove decrypt the existing secret into process memory without using it, and free it unscrubbed

readyFully specified; implement as writtenFully specified; implement as written

Status: Open.

#166 In ktsu-dev/CredentialCache;

· matt-edmondson opened on Sep 26, 2026

Windows Save leaves the serialized plaintext credential unscrubbed when it exceeds the 2560-byte blob limit

readyFully specified; implement as writtenFully specified; implement as written

Status: Open.

#165 In ktsu-dev/CredentialCache;

· matt-edmondson opened on Sep 26, 2026