SecKeychainSetUserInteractionAllowed deprecated

Question

Created Oct ’21

Replies 2

Boosts 0

Views 1.1k

Participants 3

SecKeychainSetUserInteractionAllowed has been deprecated on macOS 12, however I find that it is important for my application to be able to disable Keychain interactions.

What is the alternative?

My use case: I all purpose web browser, using WebKit, focused on privacy. Some websites try to request access to the keychain to store/retrieve passwords or certificates, the problem is that when this happens there is an alert prompting the users to grant access "to my app to use the keychain", when in reality is the website that wants to do this. This is not the kind of experience I want my users to have and for a long time I have been just disabling the keychain.

Boost

Answer 1

DTS Engineer OP

Apple

Oct ’21

Is it your code making the keychain requests? If so, you can control user interaction via kSecUseAuthenticationUI.

If it’s not your code making these keychain requests then you should continue using SecKeychainSetUserInteractionAllowed for the moment but also file an enhancement request against the Security framework with details about your specific use case.

Hmmm, it might also make sense to file an enhancement request against WebKit requesting some sort of delegate mechanism so that you can control how the web view uses the keychain.

Please post any bug numbers you get, just for the record.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 2

TyngJJ OP

Aug ’22

kSecUseAuthenticationUIFail(deprecated) and kSecUseAuthenticationUISkip don't actually seem to work with passwords (probably other secrets too) in Monterey 12.5 FB11153260 The old API still works though.

0