使用KeyChain来保存用户名和密码

KeyChain（钥匙串）是苹果提供的一种安全的保存用户名、密码、证书的方式，将敏感信息保存在keychain中后，这些信息不会随着app的卸载而丢失，除非开发人员在app中手动删除敏感信息，否则，这些信息将会一直保存在keychain中。
在使用keychain时，我们首先要将security.framework引入到工程中。
首先，我们构造一个工具类，通过这个类来操作keychain。

（1）.h文件

#import <Foundation/Foundation.h>
#import <Security/Security.h>

@interface BXKeyChainManager : NSObject
/**
 *  使用keychain请不要忘记引入Security包，引入文件 #import <Security/Security.h>。
*/
// 存
+ (void)save:(NSString *)service data:(id)data;
// 取
+ (id)load:(NSString *)service;
// 删
+ (void)delete:(NSString *)service;

@end

（2）.m文件

#import "BXKeyChainManager.h"

@implementation BXKeyChainManager

+ (NSMutableDictionary *)getKeychainQuery:(NSString *)service {
    return [NSMutableDictionary dictionaryWithObjectsAndKeys:
            (__bridge_transfer id)kSecClassGenericPassword,(__bridge_transfer id)kSecClass,
            service, (__bridge_transfer id)kSecAttrService,
            service, (__bridge_transfer id)kSecAttrAccount,
            (__bridge_transfer id)kSecAttrAccessibleAfterFirstUnlock,(__bridge_transfer id)kSecAttrAccessible,
            nil];
}

+ (void)save:(NSString *)service data:(id)data {
    //Get search dictionary
    NSMutableDictionary *keychainQuery = [self getKeychainQuery:service];
    //Delete old item before add new item
    SecItemDelete((__bridge_retained CFDictionaryRef)keychainQuery);
    //Add new object to search dictionary(Attention:the data format)
    [keychainQuery setObject:[NSKeyedArchiver archivedDataWithRootObject:data] forKey:(__bridge_transfer id)kSecValueData];
    //Add item to keychain with the search dictionary
    SecItemAdd((__bridge_retained CFDictionaryRef)keychainQuery, NULL);

}

+ (id)load:(NSString *)service {
    id ret = nil;
    NSMutableDictionary *keychainQuery = [self getKeychainQuery:service];
    //Configure the search setting
    //Since in our simple case we are expecting only a single attribute to be returned (the password) we can set the attribute kSecReturnData to kCFBooleanTrue
    [keychainQuery setObject:(id)kCFBooleanTrue forKey:(__bridge_transfer id)kSecReturnData];
    [keychainQuery setObject:(__bridge_transfer id)kSecMatchLimitOne forKey:(__bridge_transfer id)kSecMatchLimit];
    CFDataRef keyData = NULL;
    if (SecItemCopyMatching((__bridge_retained CFDictionaryRef)keychainQuery, (CFTypeRef *)&keyData) == noErr) {
        @try {
            ret = [NSKeyedUnarchiver unarchiveObjectWithData:(__bridge_transfer NSData *)keyData];
        } @catch (NSException *e) {
            NSLog(@"Unarchive of %@ failed: %@", service, e);
        } @finally {
        }
    }
    if (keyData)
        CFRelease(keyData);
    return ret;
}

+ (void)delete:(NSString *)service {
    NSMutableDictionary *keychainQuery = [self getKeychainQuery:service];
    SecItemDelete((__bridge_retained CFDictionaryRef)keychainQuery);
}
@end

下边是使用这个类
首先，我们定义几个字符串类型的标识符

NSString * const KEY_USERNAME_PASSWORD = @"com.company.app.usernamepassword";
NSString * const KEY_USERNAME = @"com.company.app.username";
NSString * const KEY_PASSWORD = @"com.company.app.password";

之后，我们创建一个字典，并将用户名和密码放入字典中

NSMutableDictionary *userNamePasswordKVPairs = [NSMutableDictionary dictionary];
[userNamePasswordKVPairs setObject:@"userName" forKey:KEY_USERNAME];
[userNamePasswordKVPairs setObject:@"password" forKey:KEY_PASSWORD];

下边引用工具类的各个方法，分别进行用户名和密码的添加、读取、删除操作

   // A、将用户名和密码写入keychain
   [KeyChain save:KEY_USERNAME_PASSWORD data:userNamePasswordKVPairs];

   // B、从keychain中读取用户名和密码
   NSMutableDictionary *readUsernamePassword = (NSMutableDictionary *)[KeyChain load:KEY_USERNAME_PASSWORD];
   NSString *userName = [readUsernamePassword objectForKey:KEY_USERNAME];
   NSString *password = [readUsernamePassword objectForKey:KEY_PASSWORD];
   NSLog(@"username = %@", userName);
   NSLog(@"password = %@", password);

   // C、将用户名和密码从keychain中删除
   [KeyChain delete:KEY_USERNAME_PASSWORD];

keychain的用法还有很多，在这里只是简单的将用户名和密码保存在keychain，而不是数据库或NSUserdefaults中，以增加安全性。