mirror of
https://github.com/firebase/firebase-ios-sdk
synced 2026-11-10 22:45:59 +05:45
ec670ae0bb
* Add initial code hash generation implementation * Adding auth state to iOS keychain * Cleanup logging and error handling for initial auth persistence implementation (#5413) * Cleanup logging and error handling for initial auth persistence implementation * Update Nullability of error fields and reformat * Move the error domain and enum into the AuthPersistence file * Format Mach files * Externalize handling of nullable error and greedily return on error * Add initial code hash generation implementation * Adding auth state to iOS keychain * Cleanup logging and error handling for initial auth persistence implementation (#5413) * Cleanup logging and error handling for initial auth persistence implementation * Update Nullability of error fields and reformat * Move the error domain and enum into the AuthPersistence file * Format Mach files * Externalize handling of nullable error and greedily return on error * Add unittests for AppDistribution auth persistence * Split out the keychain calls from control flow and error handling * Add mocking and tests for auth persistence tests * Remove debug logging * Update styling * Re-add resources to podspec and break out block for readability Co-authored-by: Jeremy Durham <jeremydurham@google.com> Co-authored-by: Pranav Rajgopal <pranavrajgopal@google.com>
123 lines
4.8 KiB
Objective-C
123 lines
4.8 KiB
Objective-C
// Copyright 2020 Google LLC
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
#import "FIRAppDistributionAuthPersistence+Private.h"
|
|
|
|
NS_ASSUME_NONNULL_BEGIN
|
|
|
|
NSString *const kFIRAppDistributionAuthPersistenceErrorDomain =
|
|
@"com.firebase.app_distribution.auth_persistence";
|
|
|
|
@implementation FIRAppDistributionAuthPersistence
|
|
|
|
+ (void)handleAuthStateError:(NSError **_Nullable)error
|
|
description:(NSString *)description
|
|
code:(FIRAppDistributionKeychainError)code {
|
|
if (error) {
|
|
NSDictionary *userInfo = @{NSLocalizedDescriptionKey : description};
|
|
*error = [NSError errorWithDomain:kFIRAppDistributionAuthPersistenceErrorDomain
|
|
code:code
|
|
userInfo:userInfo];
|
|
}
|
|
}
|
|
|
|
+ (BOOL)clearAuthState:(NSError **_Nullable)error {
|
|
NSMutableDictionary *keychainQuery = [self getKeyChainQuery];
|
|
BOOL success = [FIRAppDistributionKeychainUtility deleteKeychainItem:keychainQuery];
|
|
|
|
if (!success) {
|
|
NSString *description = NSLocalizedString(
|
|
@"Failed to clear auth state from keychain. Tester will overwrite data on sign in.",
|
|
@"Error message for failure to retrieve auth state from keychain");
|
|
[self handleAuthStateError:error
|
|
description:description
|
|
code:FIRAppDistributionErrorTokenDeletionFailure];
|
|
return NO;
|
|
}
|
|
|
|
return YES;
|
|
}
|
|
|
|
+ (OIDAuthState *)retrieveAuthState:(NSError **_Nullable)error {
|
|
NSMutableDictionary *keychainQuery = [self getKeyChainQuery];
|
|
[keychainQuery setObject:(id)kCFBooleanTrue forKey:(id)kSecReturnData];
|
|
[keychainQuery setObject:(id)kSecMatchLimitOne forKey:(id)kSecMatchLimit];
|
|
NSData *passwordData = [FIRAppDistributionKeychainUtility fetchKeychainItemMatching:keychainQuery
|
|
error:NULL];
|
|
NSData *result = nil;
|
|
|
|
if (!passwordData) {
|
|
NSString *description = NSLocalizedString(
|
|
@"Failed to retrieve auth state from keychain. Tester will have to sign in again.",
|
|
@"Error message for failure to retrieve auth state from keychain");
|
|
[self handleAuthStateError:error
|
|
description:description
|
|
code:FIRAppDistributionErrorTokenRetrievalFailure];
|
|
return nil;
|
|
}
|
|
|
|
result = [passwordData copy];
|
|
|
|
if (!result) {
|
|
NSString *description =
|
|
NSLocalizedString(@"Failed to unarchive auth state. Tester will have to sign in again.",
|
|
@"Error message for failure to retrieve auth state from keychain");
|
|
[self handleAuthStateError:error
|
|
description:description
|
|
code:FIRAppDistributionErrorTokenRetrievalFailure];
|
|
return nil;
|
|
}
|
|
|
|
OIDAuthState *authState = [FIRAppDistributionKeychainUtility unarchiveKeychainResult:result];
|
|
|
|
return authState;
|
|
}
|
|
|
|
+ (BOOL)persistAuthState:(OIDAuthState *)authState error:(NSError **_Nullable)error {
|
|
NSData *authorizationData = [FIRAppDistributionKeychainUtility archiveDataForKeychain:authState];
|
|
NSMutableDictionary *keychainQuery = [self getKeyChainQuery];
|
|
BOOL success = NO;
|
|
BOOL hasAuthState = [self retrieveAuthState:NULL];
|
|
if (hasAuthState) {
|
|
success = [FIRAppDistributionKeychainUtility updateKeychainItem:keychainQuery
|
|
withDataDictionary:authorizationData];
|
|
} else {
|
|
success = [FIRAppDistributionKeychainUtility addKeychainItem:keychainQuery
|
|
withDataDictionary:authorizationData];
|
|
}
|
|
|
|
if (!success) {
|
|
NSString *description = NSLocalizedString(
|
|
@"Failed to persist auth state. Tester will have to sign in again after app close.",
|
|
@"Error message for failure to persist auth state to keychain");
|
|
[self handleAuthStateError:error
|
|
description:description
|
|
code:FIRAppDistributionErrorTokenPersistenceFailure];
|
|
return NO;
|
|
}
|
|
|
|
return YES;
|
|
}
|
|
|
|
+ (NSMutableDictionary *)getKeyChainQuery {
|
|
NSMutableDictionary *keychainQuery = [NSMutableDictionary
|
|
dictionaryWithObjectsAndKeys:(id)kSecClassGenericPassword, (id)kSecClass, @"OAuth",
|
|
(id)kSecAttrGeneric, @"OAuth", (id)kSecAttrAccount,
|
|
@"fire-fad-auth", (id)kSecAttrService, nil];
|
|
return keychainQuery;
|
|
}
|
|
|
|
@end
|
|
|
|
NS_ASSUME_NONNULL_END
|