bitwarden-mobile/src/iOS.Core/Services/KeyChainStorageService.cs

using System;
using System.Runtime.CompilerServices;
using System.Text;
using System.Threading.Tasks;
using Bit.Core.Abstractions;
using Foundation;
using Newtonsoft.Json;
using Newtonsoft.Json.Serialization;
using Security;

namespace Bit.iOS.Core.Services
{
    public class KeyChainStorageService : IStorageService
    {
        private readonly string _keyFormat = "bwKeyChainStorage:{0}:{1}";
        private readonly string _service;
        private readonly string _group;
        private readonly Func<Task<string>> _getAppId;
        private readonly JsonSerializerSettings _jsonSettings = new JsonSerializerSettings
        {
            ContractResolver = new CamelCasePropertyNamesContractResolver()
        };

        public KeyChainStorageService(string service, string group, Func<Task<string>> getAppId)
        {
            _service = service;
            _group = group;
            _getAppId = getAppId;
        }

        public async Task<T> GetAsync<T>(string key)
        {
            var appId = await _getAppId.Invoke();
            var formattedKey = string.Format(_keyFormat, appId, key);
            byte[] dataBytes = null;
            using(var existingRecord = GetKeyRecord(formattedKey))
            using(var record = SecKeyChain.QueryAsRecord(existingRecord, out var resultCode))
            {
                if(resultCode == SecStatusCode.ItemNotFound || resultCode == SecStatusCode.InteractionNotAllowed)
                {
                    return (T)(object)null;
                }

                CheckError(resultCode);
                dataBytes = record.Generic.ToArray();
            }

            var dataString = Encoding.UTF8.GetString(dataBytes);
            if(typeof(T) == typeof(string))
            {
                return (T)(object)dataString;
            }
            else
            {
                return JsonConvert.DeserializeObject<T>(dataString, _jsonSettings);
            }
        }

        public async Task SaveAsync<T>(string key, T obj)
        {
            if(obj == null)
            {
                await RemoveAsync(key);
                return;
            }

            string dataString = null;
            if(typeof(T) == typeof(string))
            {
                dataString = obj as string;
            }
            else
            {
                dataString = JsonConvert.SerializeObject(obj, _jsonSettings);
            }

            var appId = await _getAppId.Invoke();
            var formattedKey = string.Format(_keyFormat, appId, key);
            var dataBytes = Encoding.UTF8.GetBytes(dataString);
            using(var data = NSData.FromArray(dataBytes))
            using(var newRecord = GetKeyRecord(formattedKey, data))
            {
                await RemoveAsync(key);
                CheckError(SecKeyChain.Add(newRecord));
            }
        }

        public async Task RemoveAsync(string key)
        {
            var appId = await _getAppId.Invoke();
            var formattedKey = string.Format(_keyFormat, appId, key);
            using(var record = GetExistingRecord(formattedKey))
            {
                if(record != null)
                {
                    CheckError(SecKeyChain.Remove(record));
                }
            }
        }

        private SecRecord GetKeyRecord(string key, NSData data = null)
        {
            var record = new SecRecord(SecKind.GenericPassword)
            {
                Service = _service,
                Account = key,
                AccessGroup = _group
            };
            if(data != null)
            {
                record.Generic = data;
            }
            return record;
        }

        private SecRecord GetExistingRecord(string key)
        {
            var existingRecord = GetKeyRecord(key);
            SecKeyChain.QueryAsRecord(existingRecord, out var resultCode);
            return resultCode == SecStatusCode.Success ? existingRecord : null;
        }

        private void CheckError(SecStatusCode resultCode, [CallerMemberName] string caller = null)
        {
            if(resultCode != SecStatusCode.Success)
            {
                throw new Exception(string.Format("Failed to execute {0}. Result code: {1}", caller, resultCode));
            }
        }
    }
}