feat: add accessGroup support for get credentials (#722)

Co-authored-by: Dorian Mazur <46839236+DorianMazur@users.noreply.github.com>

Author: SamuelScheit

ios/RNKeychainManager/RNKeychainManager.m

@@ -273,11 +273,16 @@ - (void)hasCredentialsWithSecClass:(CFTypeRef)secClass
                            rejecter:(RCTPromiseRejectBlock)reject
 {
   CFBooleanRef cloudSync = cloudSyncValue(options);
+  NSString *accessGroup = accessGroupValue(options);
   NSMutableDictionary *queryParts = [[NSMutableDictionary alloc] init];
   queryParts[(__bridge NSString *)kSecClass] = (__bridge id)(secClass),
   queryParts[(__bridge NSString *)kSecMatchLimit] = (__bridge NSString *)kSecMatchLimitOne;
   queryParts[(__bridge NSString *)kSecAttrSynchronizable] = (__bridge id)(cloudSync);
 
+  if (accessGroup != nil) {
+    queryParts[(__bridge NSString *)kSecAttrAccessGroup] = accessGroup;
+  }
+
   if (secClass == kSecClassInternetPassword) {
     queryParts[(__bridge NSString *)kSecAttrServer] = serverValue(options);
   } else {
@@ -310,13 +315,19 @@ - (OSStatus)deletePasswordsForOptions:(NSDictionary *)options
 {
   NSString *service = serviceValue(options);
   CFBooleanRef cloudSync = cloudSyncValue(options);
-  NSDictionary *query = @{
+  NSString *accessGroup = accessGroupValue(options);
+
+  NSMutableDictionary *query = [@{
     (__bridge NSString *)kSecClass: (__bridge id)(kSecClassGenericPassword),
     (__bridge NSString *)kSecAttrService: service,
     (__bridge NSString *)kSecAttrSynchronizable: (__bridge id)cloudSync,
     (__bridge NSString *)kSecReturnAttributes: (__bridge id)kCFBooleanTrue,
     (__bridge NSString *)kSecReturnData: (__bridge id)kCFBooleanFalse
-  };
+  } mutableCopy];
+
+  if (accessGroup != nil) {
+    query[(__bridge NSString *)kSecAttrAccessGroup] = accessGroup;
+  }
 
   return SecItemDelete((__bridge CFDictionaryRef) query);
 }
@@ -443,16 +454,21 @@ - (OSStatus)deleteCredentialsForServer:(NSString *)server withOptions:(NSDiction
   NSString *service = serviceValue(options);
   NSString *authenticationPrompt = authenticationPromptValue(options);
   CFBooleanRef cloudSync = cloudSyncValue(options);
+  NSString *accessGroup = accessGroupValue(options);
 
-  NSDictionary *query = @{
+  NSMutableDictionary *query = [@{
     (__bridge NSString *)kSecClass: (__bridge id)(kSecClassGenericPassword),
     (__bridge NSString *)kSecAttrService: service,
     (__bridge NSString *)kSecAttrSynchronizable: (__bridge id)(cloudSync),
     (__bridge NSString *)kSecReturnAttributes: (__bridge id)kCFBooleanTrue,
     (__bridge NSString *)kSecReturnData: (__bridge id)kCFBooleanTrue,
     (__bridge NSString *)kSecMatchLimit: (__bridge NSString *)kSecMatchLimitOne,
     (__bridge NSString *)kSecUseOperationPrompt: authenticationPrompt
-  };
+  } mutableCopy];
+
+  if (accessGroup != nil) {
+    query[(__bridge NSString *)kSecAttrAccessGroup] = accessGroup;
+  }
 
   // Look up service in the keychain
   NSDictionary *found = nil;
@@ -550,15 +566,21 @@ - (OSStatus)deleteCredentialsForServer:(NSString *)server withOptions:(NSDiction
 {
   CFBooleanRef cloudSync = cloudSyncValue(options);
   NSString *authenticationPrompt = authenticationPromptValue(options);
-  NSDictionary *query = @{
+  NSString *accessGroup = accessGroupValue(options);
+  
+  NSMutableDictionary *query = [@{
     (__bridge NSString *)kSecClass: (__bridge id)(kSecClassInternetPassword),
     (__bridge NSString *)kSecAttrServer: server,
     (__bridge NSString *)kSecReturnAttributes: (__bridge id)kCFBooleanTrue,
     (__bridge NSString *)kSecAttrSynchronizable: (__bridge id)(cloudSync),
     (__bridge NSString *)kSecReturnData: (__bridge id)kCFBooleanTrue,
     (__bridge NSString *)kSecMatchLimit: (__bridge NSString *)kSecMatchLimitOne,
     (__bridge NSString *)kSecUseOperationPrompt: authenticationPrompt
-  };
+  } mutableCopy];
+
+  if (accessGroup != nil) {
+    query[(__bridge NSString *)kSecAttrAccessGroup] = accessGroup;
+  }
 
   // Look up server in the keychain
   NSDictionary *found = nil;

src/types.ts

@@ -37,13 +37,14 @@ export type BaseOptions = {
    * @platform iOS
    */
   cloudSync?: boolean;
-};
-
-export type SetOptions = {
   /** The access group to share keychain items between apps.
    * @platform iOS, visionOS
    */
   accessGroup?: string;
+};
+
+/** Base options for keychain functions. */
+export type SetOptions = {
   /** Specifies when a keychain item is accessible.
    * @platform iOS, visionOS
    * @default ACCESSIBLE.AFTER_FIRST_UNLOCK