Issues

• Saving a credential leaves its plaintext JSON in ArrayPool<byte>.Shared: zeroing the byte[] from SerializeToUtf8Bytes misses System.Text.Json's pooled copy

  bug
  ktsu-dev/CredentialCache#185 · Filter by author matt-edmondson opened on Oct 6, 2026
  1

• macOS Save throws errSecDuplicateItem (-25299) when another writer creates the same item between find and add

  bug
  ktsu-dev/CredentialCache#183 · Filter by author matt-edmondson opened on Oct 6, 2026
  1

• A stored "Token":null or "Password":null loads as a found credential with a null non-nullable property, and the caller's first read throws NullReferenceException

  bug
  ktsu-dev/CredentialCache#180 · Filter by author matt-edmondson opened on Oct 5, 2026
  1

• Windows: a store for service "MyApp" enumerates, loads and deletes the credentials of service "MyApp:Dev", because target names are joined with ':' unescaped

  bug
  ktsu-dev/CredentialCache#176 · Filter by author matt-edmondson opened on Sep 29, 2026
  1

• Windows rejects a 2400-char base64 token as over the 2560-byte limit: JSON escaping writes every '+' and non-ASCII char as \uXXXX (6 bytes)

  bug
  ktsu-dev/CredentialCache#175 · Filter by author matt-edmondson opened on Sep 29, 2026
  1

• TryGet on Windows and macOS frees the OS-returned plaintext buffer without zeroing it, so every load leaves a copy of the secret in freed heap

  bug
  ktsu-dev/CredentialCache#173 · Filter by author matt-edmondson opened on Sep 29, 2026
  1

• Saving a consumer-defined Credential subclass throws raw NotSupportedException on every platform store, but succeeds on InMemoryCredentialStore

  ktsu-dev/CredentialCache#171 · Filter by author matt-edmondson opened on Sep 28, 2026
  1