feat: private key without biometrics

Signed-off-by: Timo Glastra <[email protected]>
animo · Aug 25, 2024 · 9d0e46b · 9d0e46b
1 parent 323d66d
commit 9d0e46b
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 11 deletions.
diff --git a/example/app.json b/example/app.json
@@ -13,7 +13,10 @@
     },
     "ios": {
       "supportsTablet": true,
-      "bundleIdentifier": "id.animo.secure.environment.example"
+      "bundleIdentifier": "id.animo.secure.environment.example",
+      "infoPlist": {
+        "NSFaceIDUsageDescription": "FaceID is used to securely sign data"
+      }
     },
     "android": {
       "adaptiveIcon": {
@@ -26,4 +29,4 @@
       "favicon": "./assets/favicon.png"
     }
   }
-}
+}
diff --git a/ios/SecureEnvironment.swift b/ios/SecureEnvironment.swift
@@ -15,18 +15,19 @@ struct SecureEnvironment {
           kSecAttrApplicationTag as String: Bundle.main.bundleIdentifier.unsafelyUnwrapped,
         ],
     ]
-
+
+    var flags: SecAccessControlCreateFlags = [.privateKeyUsage]
     if biometricsBacked {
-      let accessControl = SecAccessControlCreateWithFlags(
-        kCFAllocatorDefault,
-        kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
-        [.privateKeyUsage, .biometryCurrentSet],
-        nil
-      )
-
-      attributes[kSecAttrAccessControl as String] = accessControl
+      flags.insert(.biometryCurrentSet)
     }
 
+    attributes[kSecAttrAccessControl as String] = SecAccessControlCreateWithFlags(
+      kCFAllocatorDefault,
+      kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
+      flags,
+      nil
+    )
+
     var error: Unmanaged<CFError>?
     guard SecKeyCreateRandomKey(attributes as CFDictionary, &error) != nil else {
       throw error!.takeRetainedValue() as Error