iOS Question how SecKeychainCreate ?

[naifnas]

Hi all
how I Creates an empty keychain ?
because I want save text file in device
i see this
thanks

func SecKeychainCreate(_ pathName: UnsafePointer<Int8>,
_ passwordLength: UInt32,
_ password: UnsafeRawPointer?,
_ promptUser: Bool,
_ initialAccess: SecAccess?,
_ keychain: UnsafeMutablePointer<SecKeychain?>) -> OSStatus

 

[Semen Matusovskiy]

SecKeychainCreate, SecKeychainDelete etc are available in macOS only.

 

[naifnas]

SecKeychainCreate, SecKeychainDelete etc are available in macOS only.

thanks
so how i save text
for when reinstall app not remove ???

 

[Semen Matusovskiy]

IOS offers KeyChain items https://developer.apple.com/documen...keychain_to_manage_user_secrets?language=objc
But I am not sure that this a good way to preserve files from uninstall.
IMO, the easiest solution is to keep data on own website (outside devices).

 

[naifnas]

IOS offers KeyChain items https://developer.apple.com/documen...keychain_to_manage_user_secrets?language=objc
But I am not sure that this a good way to preserve files from uninstall.
IMO, the easiest solution is to keep data on own website (outside devices).

thanks you for replay

IOS offers KeyChain items https://developer.apple.com/documen...keychain_to_manage_user_secrets?language=objc

I already check it ..but how in b4i ?

IMO, the easiest solution is to keep data on own website (outside devices).

I need to save the device sequence because i have app ( photo sharing )
So I need any user who breaks the agreement and a law that I save the sequence of his device in a file and website when he logs in again he cannot because I blacklisted it.

 

[Semen Matusovskiy]

How in B4i ?

#If OBJC
#import "Security/Security.h"
<-- add your subroutines here -->.
#End If

Looks easy, but very doubt that you will find good Objective-C samples.

Meanwhile, I don't understand your problem. Typically user is identified by phone number. When user starts your app first time, he types a phone number and you send him a SMS message with access code.

The "blacklist" can be a list of phone numbers, which you will keep on own website. Of course, bad guy can change a phone number. But with similar success he can change a smartphone.

 

[naifnas]

thanks very much for you..

#If OBJC
#import "Security/Security.h"
<-- add your subroutines here -->.
#End If

i already try

Meanwhile, I don't understand your problem. Typically user is identified by phone number. When user starts your app first time, he types a phone number and you send him a SMS message with access code.

many user not like register by number mobile.
then not good safety way .
easy he change sim
better save UUID his

 

[Semen Matusovskiy]

not good safety way

Take a look messengers. Viber, Whatsapp, Telegram etc. Using SMS garants that user typed valid phone number.
Of course, user can change a SIM. But how he will contact with friends ?

UUID ... As I remember, it's not fixed. After uninstall/install an app receives new UUID.

 

[naifnas]

These are communication apps
My application view and add only

 

[naifnas]

I already do it ....
thanks for
Semen

some mint i add it here

 

[naifnas]

this

'***************************************
Sub Panel2_Click
Dim noMe As NativeObject=Me
Dim UserTxt As String
Dim PassTxt As String
Dim SomeTxt As String
Dim dict As String
dict="nameplace"
UserTxt="user"
PassTxt="pass"
SomeTxt="xxxxxxxxxx"
' save data in dict
noMe.RunMethod("saveUsername:::::",Array(Me,UserTxt,SomeTxt,PassTxt,dict))
End Sub

Sub Panel3_Click
Dim dict As String
Dim noMe As NativeObject=Me
' get data save from dict
dict="nameplace"
noMe.RunMethod("getCredentialsForServer:::",Array(Me,"GetUserPassTxt",dict))
End Sub

Sub Panel4_Click
Dim dict As String
Dim noMe As NativeObject=Me
dict="nameplace"
' remove it
noMe.RunMethod("removeAllCredentialsForServer:::",Array(Me,"GetResult",dict))

End Sub
Sub GetUserPassTxt(user As String, pass As String)
Log(user & pass)
End Sub
Sub GetResult(Result As String)
Log(Result )
End Sub

'*************************************
#If OBJC

#import "Security/Security.h"


-(void) saveUsername :(NSObject*)Trget :(NSString*)user :(NSString*)SomeTxt :(NSString*)pass :(NSString*)server {

// Create dictionary of search parameters
NSDictionary* dict = [NSDictionary dictionaryWithObjectsAndKeys:(__bridge id)(kSecClassInternetPassword), kSecClass, server, kSecAttrServer, kCFBooleanTrue, kSecReturnAttributes, nil];

// Remove any old values from the keychain
OSStatus err = SecItemDelete((__bridge CFDictionaryRef) dict);

// Create dictionary of parameters to add
NSData* passwordData = [pass dataUsingEncoding:NSUTF8StringEncoding];
// dict = [NSDictionary dictionaryWithObjectsAndKeys:(__bridge id)(kSecClassInternetPassword), kSecClass, server, kSecAttrServer, passwordData, kSecValueData, user, kSecAttrAccount, nil];
dict = [NSDictionary dictionaryWithObjectsAndKeys:(__bridge id)(kSecClassInternetPassword), kSecClass, server, kSecAttrServer, passwordData, kSecValueData, user, kSecAttrAccount , SomeTxt, kSecAttrAccount, nil];

// Try to save to keychain
err = SecItemAdd((__bridge CFDictionaryRef) dict, NULL);

}



-(void) getCredentialsForServer :(NSObject*)Trget :(NSString*)GetUserPassTxt :(NSString*)server {

// Create dictionary of search parameters
NSDictionary* dict = [NSDictionary dictionaryWithObjectsAndKeys:(__bridge id)(kSecClassInternetPassword), kSecClass, server, kSecAttrServer, kCFBooleanTrue, kSecReturnAttributes, kCFBooleanTrue, kSecReturnData, nil];

// Look up server in the keychain
NSDictionary* found = nil;
CFDictionaryRef foundCF;
OSStatus err = SecItemCopyMatching((__bridge CFDictionaryRef) dict, (CFTypeRef*)&foundCF);

// Check if found
found = (__bridge NSDictionary*)(foundCF);
if (!found)
return;

// Found
NSString* user = (NSString*) [found objectForKey:(__bridge id)(kSecAttrAccount)];
// NSString* SomeTxt =(NSString*) [found objectForKey:(__bridge id)(kSecAttrAccountm)];
NSString* pass = [[NSString alloc] initWithData:[found objectForKey:(__bridge id)(kSecValueData)] encoding:NSUTF8StringEncoding];


[self.__c CallSubDelayed3:self.bi :Trget :(GetUserPassTxt) :(user) :(pass) ];
}

//----------------------------------
-(void) removeAllCredentialsForServer :(NSObject*)Trget :(NSString*)GetResult :(NSString*)server {


NSDictionary* dict = [NSDictionary dictionaryWithObjectsAndKeys:(__bridge id)(kSecClassInternetPassword), kSecClass, server, kSecAttrServer, kCFBooleanTrue, kSecReturnAttributes, kCFBooleanTrue, kSecReturnData, nil];

OSStatus err = SecItemDelete((__bridge CFDictionaryRef) dict);
[self.__c CallSubDelayed2:self.bi :Trget :(GetResult) :(@"Removeit") ];
}


#End If

 

[Semen Matusovskiy]

I tested under IOS 13. Works. Uninstall does not remove keychain items, what is very important.
As I understand, you used https://stackoverflow.com/questions...ing-password-like-generickeychain-sample-code as layout.

 

[naifnas]

up IOS 13 work

 

[naifnas]

I added Data app in list then save in keychain

    Dim l As List
    l.Initialize
    l.Add(DataApp)  <--------------- here
    noMe.RunMethod("addToKeychain:::" , Array(Me,l ,dict))

then to array then data then save

............



-(void) addToKeychain:(NSObject*)Trget  :(NSArray *)array :(NSString *)aKey {





    NSData *serializedDictionary = [NSKeyedArchiver archivedDataWithRootObject:array];

............

 

[Semen Matusovskiy]

Better to place whole sample in iOS Code Snippets.

 

[Erel]

These methods are available in iPhone library: Phone.KeyChainPut / Get / Remove.