puretears / KeychainWrapper

KeychainWrapper is a light weight swift wrapper for iOS keychain. Makes accessing keychain is exetremely simple as UserDefaults. It is motivated by creating the app of boxueio.com.

Features

• Fully tested.
• Simple interface.
• Support access group.
• Support accessibility.
• Updated to Swift 5.

KeychainWrapper 101

The simplest use case is using the default singleton. Then save and load data as the way of manipulating UserDefaults.

Add values to keychain. All these set methods return Bool to indicate if the data was saved successfully. If the key already exists, the data will be overritten.

/// Save data
KeychainWrapper.default.set(1, forKey: "key.int.value")
KeychainWrapper.default.set([1, 2, 3], forKey: "key.array.value")
KeychainWrapper.default.set("string value", forKey: "key.string.value")

Retrieve values from keychain. All kinds of getter methods return T?, if the data corresponding to forKey cannot decoded back to T, it returns nil.

/// Load data
KeychainWrapper.default.object(of: Int.self, forKey: "key.int.value")
KeychainWrapper.default.object(of: Array.self, forKey: "key.array.value")
KeychainWrapper.default.string(forKey: "key.string.value")

Remove data from keychain. Return Bool indicating if the delete was successful.

KeychainWrapper.default.removeObject(forKey: "key.to.be.deleted")

Customization

Specify service name

When you use the default KeychainWrapper object, all keys are linked to your main bundle identifier as the service name. Howerver, you could change it as follows:

let serviceName = "Custom.Service.Name"
let myWrapper = KeychainWrapper(serviceName: serviceName)

Specify access group

You may also share keychain items by a customized access group:

let serviceName = "Custom.Service.Name"
let accessGroup = "Shared.Access.Group"
let myWrapper = KeychainWrapper(serviceName: serviceName, accessGroup: accessGroup)

The default KeyChainWrapper object do not share any keychain item and its accessGroup is nil.

Accessibility

By default, all items saved by KeychainWrapper can only be access when the device is unlocked. The enum KeychainItemAccessibility gives you a customization point to specify another accessibility level.

KeychainWrapper.default.set(1, forKey: "key.int.value", withAccessibility: .afterFirstUnlock)

The kSecAttrAccessibleAlways and kSecAttrAccessibleAlwaysThisDeviceOnly are deprecated by iOS 12.0. So we do not include them in KeychainItemAccessibility.

Installation

To integrate KeychainWrapper into your Xcode project using Carthage, speicify the following line in your Cartfile:

github "puretears/KeychainWrapper" ~> 1.0

Video sessions

We also recorded some videos talking about keychain basic and KeychainWrapper implementation details (Chinese 🇨🇳, Subscription needed).

1. Keychain basics
2. Keychain implementation - I
3. Keychain implementation - II
4. Orgnize test cases for KeychainWrapper
5. Keychain implementation - III
6. Decorate your README.md

Requirements

• iOS 10.0+
• Swift 4.0+

Next Steps

• Cocoapods and SPM support;
• mac OS support;
• iCloud sharing support;
• More detailed granularity of exception heirarchy, instead of using just false or nil to indicate errors.

Release History

• 1.0
  • Initial release

License

KeychainWrapper is released under the MIT license. See LICENSE for details.