bytelyst/learning_ai_clock
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): move PlatformSyncManager auth token from UserDefaults to Keychain

Browse Source
This commit is contained in:
saravanakumardb1 2026-03-01 16:37:39 -08:00
parent e0c7f24954
commit b7688b55d1
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ios/ChronoMind/Shared/Cloud/PlatformSyncManager.swift
View File

@ -36,7 +36,7 @@ final class PlatformSyncManager: ObservableObject {
static let syncEnabled = "chronomind-platform-sync-enabled" static let syncEnabled = "chronomind-platform-sync-enabled"
static let lastSync = "chronomind-platform-last-sync" static let lastSync = "chronomind-platform-last-sync"
static let offlineQueue = "chronomind-offline-queue" static let offlineQueue = "chronomind-offline-queue"
static let authToken = "chronomind-auth-token" static let authTokenKeychain = "chronomind-sync-auth-token"
} }
// MARK: - Init // MARK: - Init
@ -58,7 +58,7 @@ final class PlatformSyncManager: ObservableObject {
decoder.dateDecodingStrategy = .iso8601 decoder.dateDecodingStrategy = .iso8601
syncEnabled = UserDefaults.standard.bool(forKey: Keys.syncEnabled) syncEnabled = UserDefaults.standard.bool(forKey: Keys.syncEnabled)
authToken = UserDefaults.standard.string(forKey: Keys.authToken) authToken = KeychainHelper.read(key: Keys.authTokenKeychain)
if let date = UserDefaults.standard.object(forKey: Keys.lastSync) as? Date { if let date = UserDefaults.standard.object(forKey: Keys.lastSync) as? Date {
lastSyncDate = date lastSyncDate = date
@ -76,9 +76,9 @@ final class PlatformSyncManager: ObservableObject {
func setAuthToken(_ token: String?) { func setAuthToken(_ token: String?) {
authToken = token authToken = token
if let token = token { if let token = token {
UserDefaults.standard.set(token, forKey: Keys.authToken) KeychainHelper.save(key: Keys.authTokenKeychain, value: token)
} else { } else {
UserDefaults.standard.removeObject(forKey: Keys.authToken) KeychainHelper.delete(key: Keys.authTokenKeychain)
} }
} }