Added wipe function allowing deleting all keychain items (#73)

Co-authored-by: Michael Neuwert <mn@neuwert-media.com>
owncloud · Nov 17, 2020 · 3c40553 · 3c40553
1 parent 732c63e
commit 3c40553
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/ownCloudSDK/Security/OCKeychain.h b/ownCloudSDK/Security/OCKeychain.h
@@ -32,6 +32,7 @@ NS_ASSUME_NONNULL_BEGIN
 - (nullable NSData *)readDataFromKeychainItemForAccount:(NSString *)account path:(NSString *)path;
 - (nullable NSError *)writeData:(nullable NSData *)data toKeychainItemForAccount:(NSString *)account path:(NSString *)path;
 - (nullable NSError *)removeKeychainItemForAccount:(NSString *)account path:(NSString *)path;
+- (BOOL)wipe;
 
 #pragma mark - Object interface
 - (nullable id)readObjectFromKeychainItemForAccount:(NSString *)account path:(NSString *)path allowedClasses:(NSSet<Class> *)allowedClasses rootClass:(Class)rootClass error:(NSError * _Nullable * _Nullable)outError;

diff --git a/ownCloudSDK/Security/OCKeychain.m b/ownCloudSDK/Security/OCKeychain.m
@@ -172,6 +172,21 @@ - (NSError *)removeKeychainItemForAccount:(NSString *)account path:(NSString *)p
 	return ([self writeData:nil toKeychainItemForAccount:account path:path]);
 }
 
+- (BOOL)wipe
+{
+	OSStatus status = errSecSuccess;
+	NSMutableDictionary <NSString *, id> *queryDict;
+
+	if ((queryDict = [self _queryType:NULL dictForAccount:nil path:nil]) != nil)
+	{
+		status = SecItemDelete((CFDictionaryRef)queryDict);
+
+		OCTLogDebug(@[@"Delete"], @"Delete all items, status=%d", status);
+	}
+
+	return (status == errSecSuccess);
+}
+
 - (id)readObjectFromKeychainItemForAccount:(NSString *)account path:(NSString *)path allowedClasses:(NSSet<Class> *)allowedClasses rootClass:(Class)rootClass error:(NSError **)outError
 {
 	NSData *data;