Restrict keychain access level

standardnotes · Oct 23, 2019 · 69cfb5c · 69cfb5c
1 parent 3da0675
commit 69cfb5c
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 5 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -22,7 +22,7 @@
     "react-native-file-viewer": "^1.0.10",
     "react-native-fs": "^2.13.3",
     "react-native-gesture-handler": "^1.0.12",
-    "react-native-keychain": "^1.2.1",
+    "react-native-keychain": "^3.1.3",
     "react-native-store-review": "^0.1.3",
     "react-native-vector-icons": "6.6.0",
     "react-native-webview": "5.8.1",

diff --git a/src/lib/keychain.js b/src/lib/keychain.js
@@ -3,7 +3,11 @@ import * as RCTKeychain from 'react-native-keychain';
 export default class Keychain {
 
   static async setKeys(keys) {
-    return RCTKeychain.setGenericPassword("sn", JSON.stringify(keys))
+    const options = {
+      /* iOS only */
+      accessible: RCTKeychain.ACCESSIBLE.WHEN_UNLOCKED_THIS_DEVICE_ONLY
+    };
+    return RCTKeychain.setGenericPassword("sn", JSON.stringify(keys), options)
           .then(function() {
             console.log('Credentials saved successfully!');
           });