Your app keeps the access and refresh tokens in the Keychain and refreshes when it gets a 401. How do you stop duplicate refreshes when several requests get a 401 at the same time?
Put the refresh logic in one actor and share the in-flight refresh Task, so concurrent 401s collapse into a single refresh while the other requests wait for its result and retry once with the new token.
SecurityMultiple choiceIntro
You want a Keychain item that never moves to another device through a backup restore and…
#keychain
SecurityMultiple choiceBasics
Someone reported a bug where a user deletes the app, reinstalls it, and gets signed in…
#keychain
SecurityShort answerAdvanced
Several apps from one company (the main app, a payments app, a cloud app) should share…
#keychain
SecurityMultiple choiceBasics
Two iOS apps want to read and write each other's Keychain data. What does that require?…
#keychain