iOS Keychain Integration

[openid]

iOS Keychain Integration

[WilliamDenniss]

When we architected AppAuth, we decided that the storage of tokens was out of scope – something that would be implemented either in a higher layer library, or in the application itself. Serialization is in scope though, all AppAuth models implement NSSecureCoding, so you can easily use AppAuth with the Keychain wrapper of your choice by serializing to and from NSData.

The benefit of this layer separation is that AppAuth operates hermetically. It can't accidentally modify state that your app depends on, since you are responsible for maintaining that state.

Google's iOS authentication library which is a layer above (and dependant on) AppAuth does exactly this, by providing a KeyChain wrapper. If you need a library which is more opinionated about token storage, you can potentially use that one (it's open source, and works with all providers, not just Google).

[arkuhn]

Thanks for the hasty response and nice recommendation. I understand that design choice. Thanks again for the help!