|
|
@@ -0,0 +1,69 @@
|
|
|
+
|
|
|
+
|
|
|
+import Foundation
|
|
|
+import Security
|
|
|
+
|
|
|
+public class KeychainManager {
|
|
|
+
|
|
|
+ enum KeychainError: Error {
|
|
|
+ case noPassword
|
|
|
+ case unexpectedPasswordData
|
|
|
+ case unhandledError(status: OSStatus)
|
|
|
+ }
|
|
|
+
|
|
|
+ public static func getDBSecret() throws -> String {
|
|
|
+ guard let secret = try? queryDBSecret() else {
|
|
|
+ return try addDBSecret()
|
|
|
+ }
|
|
|
+
|
|
|
+ return secret
|
|
|
+ }
|
|
|
+
|
|
|
+ private static func createRandomPassword() -> String {
|
|
|
+ let letters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXZY1234567890"
|
|
|
+ return String((0..<50).map { _ in letters.randomElement()! })
|
|
|
+ }
|
|
|
+
|
|
|
+ private static func addDBSecret() throws -> String {
|
|
|
+ let keychainItemQuery = [
|
|
|
+ kSecValueData: createRandomPassword().data(using: .utf8)!,
|
|
|
+ kSecAttrAccount as String: "dc_db",
|
|
|
+ kSecClass: kSecClassGenericPassword
|
|
|
+ ] as CFDictionary
|
|
|
+
|
|
|
+ var ref: AnyObject?
|
|
|
+
|
|
|
+ let status = SecItemAdd(keychainItemQuery, &ref)
|
|
|
+ guard status == errSecSuccess else { throw KeychainError.unhandledError(status: status) }
|
|
|
+
|
|
|
+ if let result = ref as? NSDictionary,
|
|
|
+ let password = result[kSecValueData] as? String {
|
|
|
+ return password
|
|
|
+ }
|
|
|
+
|
|
|
+ return try queryDBSecret()
|
|
|
+ }
|
|
|
+
|
|
|
+
|
|
|
+ private static func queryDBSecret() throws -> String {
|
|
|
+ let query: [String: Any] = [kSecClass as String: kSecClassGenericPassword,
|
|
|
+ kSecAttrAccount as String: "dc_db",
|
|
|
+ kSecMatchLimit as String: kSecMatchLimitOne,
|
|
|
+ kSecReturnAttributes as String: true,
|
|
|
+ kSecReturnData as String: true]
|
|
|
+
|
|
|
+ var item: CFTypeRef?
|
|
|
+ let status = SecItemCopyMatching(query as CFDictionary, &item)
|
|
|
+ guard status != errSecItemNotFound else { throw KeychainError.noPassword }
|
|
|
+ guard status == errSecSuccess else { throw KeychainError.unhandledError(status: status) }
|
|
|
+
|
|
|
+ guard let existingItem = item as? [String : Any],
|
|
|
+ let passwordData = existingItem[kSecValueData as String] as? Data,
|
|
|
+ let password = String(data: passwordData, encoding: String.Encoding.utf8)
|
|
|
+ else {
|
|
|
+ throw KeychainError.unexpectedPasswordData
|
|
|
+ }
|
|
|
+
|
|
|
+ return password
|
|
|
+ }
|
|
|
+}
|
cyberta