Open Radar

 
When access control is specified (with biometrics), iOS13 Simulator fails to read data from the Keychain.

    // If run on iOS12 Simulator, status2 will be 0
    // If run on iOS13 Simulator, status2 will be -25300
    func testKeychain() {
        let tag = "com.flockoffiles.testkeychain.value"
        let savedData = "testString".data(using: .utf8)!
        var aclError: Unmanaged<CFError>?
        let accessControl =
            SecAccessControlCreateWithFlags(kCFAllocatorDefault,
                                            kSecAttrAccessibleWhenPasscodeSetThisDeviceOnly,
                                            SecAccessControlCreateFlags.biometryCurrentSet,
                                            &aclError)!
        
        let query: [String : Any] = [kSecClass as String: kSecClassGenericPassword,
                                     kSecAttrAccount as String: tag,
                                     kSecAttrService as String: tag,
                                     kSecAttrAccessControl as String: accessControl,
                                     kSecValueData as String: savedData]
        
        var status = SecItemAdd(query as CFDictionary, nil)
        if status == errSecDuplicateItem {
            let updateQuery: [String: Any] = [kSecValueData as String: savedData]
            status = SecItemUpdate(query as CFDictionary, updateQuery as CFDictionary)
        }
        
        let query2: [String : Any] = [kSecClass as String: kSecClassGenericPassword,
                                      kSecAttrAccount as String: tag,
                                      kSecAttrService as String: tag,
                                      kSecReturnData as String: kCFBooleanFalse!,
                                      kSecUseAuthenticationUI as String: kSecUseAuthenticationUIFail]
        
        var result: CFTypeRef?
        let status2 = SecItemCopyMatching(query2 as CFDictionary, &result)
        
        // If run on iOS12 Simulator, status2 will be 0
        // If run on iOS13 Simulator, status2 will be -25300
        print("Query2 status: \(status2)")
        
    }