Released iOS SDK Version 5.7.0

Author: Giriraj1200

CHANGELOG.md

@@ -1,3 +1,10 @@
+5.7.0 Release notes (2022-12-27)
+=============================================================
+
+### Enhancements
+* Added Secure Enclave in the LoginRadius SDK to encrypt/decrypt sensitive data. For detailed information on Secure Enclave, please refer to the following document : https://support.apple.com/en-in/guide/security/sec59b0b31ff/web 
+
+
 5.6.2 Release notes (2022-08-29)
 =============================================================
 

LoginRadiusSDK.podspec

@@ -1,7 +1,7 @@
 Pod::Spec.new do |s|
 
 s.name         = 'LoginRadiusSDK'
-s.version      = '5.6.2'
+s.version      = '5.7.0'
 s.summary      = 'Official LoginRadius SDK for iOS to integrate User Registration Service or Social Login in your app.'
 
 s.description  = <<-DESC

README.md

@@ -48,7 +48,7 @@ target 'TargetName' do
 
 #Comment the next line if you don't want to use dynamic frameworks
 use_frameworks!
-pod 'LoginRadiusSDK', '~> 5.6.2'
+pod 'LoginRadiusSDK', '~> 5.7.0'
 end
 
 ```

Sources/LoginRadiusSDK.m

@@ -8,6 +8,8 @@
 #import "LoginRadiusSocialLoginManager.h"
 #import "LRTouchIDAuth.h"
 #import "LRSession.h"
+#import "LoginRadiusEncryptor.h"
+
 
 static NSString * const LoginRadiusPlistFileName = @"LoginRadius";
 static NSString * const LoginRadiusAPIKey = @"apiKey";
@@ -17,6 +19,8 @@
 static NSString * const LoginRadiusVerificationUrl = @"verificationUrl";
 static NSString * const LoginRadiusKeychain = @"useKeychain";
 static NSString * const LoginRadiusCustomDomain = @"customDomain";
+static NSString * const LoginRadiusSetEncryption = @"setEncryption";
+
 
 
 @interface LoginRadiusSDK ()
@@ -35,6 +39,10 @@ - (instancetype)init {
     NSString *siteName = values[LoginRadiusSiteName];
     NSString *verificationUrl = values[LoginRadiusVerificationUrl] ? values[LoginRadiusVerificationUrl] : @"https://auth.lrcontent.com/mobile/verification/index.html";
     BOOL useKeychain = values[LoginRadiusKeychain] ? [values[LoginRadiusKeychain] boolValue] : NO; // if nil set to false
+    
+    BOOL setEncryption = values[LoginRadiusSetEncryption] ? [values[LoginRadiusSetEncryption] boolValue] : NO; // if nil set to false
+    
+    
     NSString *customDomain = values[LoginRadiusCustomDomain] ? values[LoginRadiusCustomDomain] : @"";
 
     if([apiKey isEqualToString:@"<Your LoginRadius ApiKey>"] || [apiKey isEqualToString:@""]){
@@ -45,6 +53,16 @@ - (instancetype)init {
     NSAssert(apiKey, @"apiKey cannot be null in LoginRadius.plist");
     NSAssert(siteName, @"siteName cannot be null in LoginRadius.plist");
 
+    //apiKey is stored in secure enclave if setEncryption set to true in LoginRadius.plist .
+    if(setEncryption == true){
+        
+        NSData *key = [apiKey dataUsingEncoding:NSUTF8StringEncoding];
+        NSData *decr = [[LoginRadiusEncryptor sharedInstance]EncryptDecryptText:key];
+        
+        NSString *myString;
+        myString = [[NSString alloc] initWithData:decr encoding:NSASCIIStringEncoding];
+    }
+    
     if(!registrationSource){
         registrationSource = @"iOS";
     }
@@ -62,6 +80,7 @@ - (instancetype)init {
         _socialLoginManager = [[LoginRadiusSocialLoginManager alloc] init];
         _touchIDManager = [[LRTouchIDAuth alloc] init];
         _customHeaders = customHeaders;
+        _setEncryption = setEncryption;
     }
 
     return self;
@@ -82,6 +101,7 @@ + (instancetype)instance {
     return [[LoginRadiusSDK alloc] init];
 }
 
+
 + (BOOL) logout {
 
     BOOL is = [(LRSession *)[[self sharedInstance] session] logout];
@@ -115,16 +135,23 @@ + (NSString*) customDomain {
 + (BOOL) useKeychain {
     return [LoginRadiusSDK sharedInstance].useKeychain;
 }
+
+
+
 + (NSDictionary*) customHeaders {
     return [LoginRadiusSDK sharedInstance].customHeaders;
 }
 
++ (BOOL) setEncryption {
+    return [LoginRadiusSDK sharedInstance].setEncryption;
+}
 
 #pragma mark Application Delegate methods
 
 - (void)applicationLaunchedWithOptions:(NSDictionary *)launchOptions {
     [self.socialLoginManager applicationLaunchedWithOptions:launchOptions];
 
+    
 }
 
 - (BOOL)application:(UIApplication *)application openURL:(NSURL *)url sourceApplication:(NSString *)sourceApplication annotation:(id)annotation {
@@ -135,4 +162,5 @@ - (BOOL)application:(UIApplication *)application openURL:(NSURL *)url sourceAppl
 - (void)applicationDidBecomeActive:(UIApplication *)application {
 }
 
+
 @end

Sources/SecureEnclave/LoginRadiusEncryptor.h

@@ -0,0 +1,23 @@
+//
+//  LoginRadiusEncryptor.h
+//  Pods
+//
+//  Created by Megha Agarwal on 01/12/22.
+//
+
+
+#import <Foundation/Foundation.h>
+#import "SecEnclaveWrapper.h"
+
+@interface LoginRadiusEncryptor : NSObject 
+
+#pragma mark - LoginRadiusEncryptor Initilizers
+
++ (instancetype)sharedInstance;
+/**
+ *  Initializer
+ *  @return singleton instance
+ */
+-(NSData *_Nonnull)EncryptDecryptText:(NSData *_Nonnull)data ;
+
+@end

Sources/SecureEnclave/LoginRadiusEncryptor.m

@@ -0,0 +1,55 @@
+//
+//  LoginRadiusEncrcyptor.m
+//  Pods
+//
+//  Created by Megha Agarwal on 01/12/22.
+//
+
+//
+//  LoginRadiusEncryptor.m
+
+#import "LoginRadiusEncryptor.h"
+#import "LoginRadiusSDK.h"
+
+@implementation LoginRadiusEncryptor 
+
++ (instancetype)sharedInstance {
+    static dispatch_once_t onceToken;
+    static LoginRadiusEncryptor *instance;
+    
+    dispatch_once(&onceToken, ^{
+        instance = [[LoginRadiusEncryptor alloc] init];
+    });
+    
+    return instance;
+}
+
+- (NSData *)EncryptDecryptText:(NSData *)data {
+    
+    //Encrypt the string.
+    NSString *apikey = [[NSString alloc] initWithData:data encoding:NSASCIIStringEncoding];
+   
+   
+    
+    NSString *bundleIdentifier = [[NSBundle mainBundle] bundleIdentifier];
+    NSString *strGroupID = [NSString stringWithFormat:@"group.%@",bundleIdentifier];
+    
+    SecEnclaveWrapper *keychainItem = [[SecEnclaveWrapper alloc] init];
+    
+    NSData *encrypted = [keychainItem encryptData:[apikey dataUsingEncoding:NSUTF8StringEncoding]];
+    
+    NSString *strEncrypted = [[NSString alloc] initWithData:encrypted encoding:NSASCIIStringEncoding];
+   
+    
+    
+    //Decrypt the string.
+    NSData *decrypted =[keychainItem decryptData:encrypted];
+    NSString *strDecrypted = [[NSString alloc] initWithData:decrypted encoding:NSUTF8StringEncoding];
+    
+    NSData *stringData = [strDecrypted dataUsingEncoding:NSUTF8StringEncoding];
+    return stringData;
+    
+}
+
+@end
+

Sources/SecureEnclave/SecEnclaveWrapper.h

@@ -0,0 +1,39 @@
+//
+//  SecEnclaveWrapper.h
+//  Pods
+//
+//  Created by Megha Agarwal on 01/12/22.
+//
+
+#import <Foundation/Foundation.h>
+
+
+/**
+ The SecEnclaveWrapper class is using SecureEnclave to generate keys and use them to encrypt/decrypt sensitive data.
+ It is an abstraction layer for the iPhone Keychain communication and Secure Enclave.
+ The SecureEnclave support is only available for iOS 10+.
+ 
+ */
+
+@interface SecEnclaveWrapper : NSObject
+//Return encrypted form of data
+- (NSData *_Nonnull)encryptData:(NSData *_Nonnull)data ;
+//Return decryrpted value of encrypted data
+- (NSData *_Nonnull)decryptData:(NSData *_Nonnull)data ;
+
+
+//  @return an initialised instance.
+
+- (instancetype _Nonnull )init;
+
+/**
+ Delete public key in the Keychain
+ */
+- (void) deletePubKey ;
+/**
+ Delete prrivate key in the SecureEnclave
+ */
+- (void) deletePrivateKey ;
+
+@end
+