Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

fix(macos): Keychain secrets fail without keychain-access-groups; use the login keychain

Abierto
  • ¿Algo no está bien?
#1,586 0 comentarios 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
4/5
Tiempo estimado
3-5 días
Aptitud para principiantes
43/100
Tipo de issue
Error
Claridad
Bastante claro
Estado de actividad
Activo
Stack tecnológico
dart, flutter
Área
databases, desktop, security

Línea de trabajo

Start with lib/core/storage/connection_secrets_store.dart and the flutter_secure_storage_darwin default at FlutterSecureStorageDarwinPlugin.swift:180; reproduce the reported read and write failure on macOS. Check the entitlements files named in the issue and test debug, unsigned release, signed and notarized, and ad-hoc builds. Done means credentials can be read and written using the login keychain, with existing data protection keychain items still readable or migrated.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

bug connections P1 stability

Problem

flutter_secure_storage_darwin defaults to usesDataProtectionKeychain: true (FlutterSecureStorageDarwinPlugin.swift:180), which needs the keychain-access-groups entitlement. None of DebugProfile.entitlements, Release.entitlements, ReleaseSigned.entitlements declare it, and lib/core/storage/connection_secrets_store.dart uses const FlutterSecureStorage() with no macOS options.

Expected on macOS: errSecMissingEntitlement (-34018) on write/read, surfaced as SecretsStoreUnavailableException ("Could not read the saved credentials from the system keyring").

Fix

Do not add keychain-access-groups to ReleaseSigned.entitlements: it is a restricted entitlement that needs a provisioning profile for Developer ID, and the app would fail to launch. Instead pass MacOsOptions(usesDataProtectionKeychain: false) (mOptions) so the file-based login keychain is used.

Tasks

  • Reproduce on a real Mac (debug, unsigned release, signed release).
  • Set mOptions: MacOsOptions(usesDataProtectionKeychain: false).
  • Check existing installs: items written with the data protection keychain (if any) must still be readable, or migrated.
  • Test on signed + notarized and on ad-hoc builds.

Found in the macOS review; confirm on device first.

Lenguaje dominante
Dart
Estrellas
23
Forks
1
Merge medio
31 min
PR fusionados (30 d)
570

Preparar el entorno

Abrir en Codespaces

Inicia el contenedor de desarrollo del proyecto en tu navegador, con tu propia cuenta de GitHub.

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de QueryaHub/Querya-Desktop

Todos los issues de QueryaHub/Querya-Desktop

Issues similares

Más issues de Dart

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.