Several apps from one company (the main app, a payments app, a cloud app) should share login state once the user signs in to any of them. How do you implement that on iOS?
Apps with the same Team ID declare a shared Keychain group through the keychain-access-groups entitlement and keep the refresh token there, and a change such as a logout goes to the other apps through a Darwin notification.
SecurityMultiple choiceBasics
Someone reported a bug where a user deletes the app, reinstalls it, and gets signed in…
#keychain #logout
SecurityMultiple choiceBasics
Two iOS apps want to read and write each other's Keychain data. What does that require?…
#keychain #access-group
PersistenceShort answerBasics
Two payment apps from the same team, the main app and a merchant app, have to share one…
#keychain #access-group
SecurityMultiple choiceIntro
You want a Keychain item that never moves to another device through a backup restore and…
#keychain