Helps you define secure storages for your properties using Swift property wrappers.
All keys are hashed using SHA512 and all values are encrypted using AES-GCM to keep user information safe, automagically. Symmetric key is stored in Keychain in a totally secure way.
This property wrapper will store your property in UserDefaults using StoreKey (any String but i recommend you a String typed enum).
Optionally, you can assign a default value to the property that will be secure stored at initialization.
@UserDefault(<#StoreKey#>)
var yourProperty: YourType? = yourDefaultValueIfNeededUserDefaultsStorage is also available, a subclass of UserDefaults with all the security provided by this library, where you can customize suite name.
This property wrapper will store your property in Keychain using StoreKey.
@Keychain(<#StoreKey#>)
var yourProperty: YourType? = yourDefaultValueIfNeededAs UserDefaultsStorage, KeychainStorage is also available, where you can customize access, group and synchronize it with iCloud.
This property wrapper will store your property in a memory singleton, every property with the same wrapper and key can access or modify the value from wherever it is.
@Singleton(<#StoreKey#>)
var yourProperty: YourType? = yourDefaultValueIfNeededAs KeychainStorage, SingletonStorage is also available.
This property wrapper is similar to @Singleton but, together with @Register, will inject your dependencies. More details in Dependency Injection usage guide.
@Inject
var yourDependency: YourProtocol?As SingletonStorage, InjectStorage is also available.
This is a custom wrapper, you can define your own Storage protocol implementation.
@Store(<#YourStorage#>, <#StoreKey#>)
var yourProperty: YourType? = yourDefaultValueIfNeededAs InjectStorage, DelegatedStorage is also available with all the magic of this library.
If your property conforms Codable protocol, just add Codable keyword as prefix of your property wrapper.
- @CodableUserDefault
- @CodableKeychain
- @CodableSingleton
- @CodableStore
To avoid continually unwrapping your property, just add Unwrapped keyword as prefix of your property wrapper, assign a default value (mandatory except for @UnwrappedInject), and it will return stored value or default value, but your property will always be there for you.
- @UnwrappedUserDefault
- @UnwrappedKeychain
- @UnwrappedSingleton
- @UnwrappedInject
- @UnwrappedStore
You can also combine previous cases in case you need it, unwrapped first please.
- @UnwrappedCodableUserDefault
- @UnwrappedCodableKeychain
- @UnwrappedCodableSingleton
- @UnwrappedCodableStore
@Register (click to expand)
This property wrapper will register the implementations of your dependencies.
Register them wherever you want before inject it, but be sure to do it only once (except if you use qualifiers), for example, in an Injector class.
You can register through a protocol or directly using your class implementation.
@Register
var yourDependency: YourProtocol = YourImplementation()
@Register
var yourDependency = YourImplementation()You can also define a closure that builds your dependency. Just remember cast your dependency if you are going to inject it through a protocol.
@Register
var yourDependency = {
YourImplementation() as YourProtocol
}
@Register
var yourDependency = {
YourImplementation()
}You can also register your dependencies only after the moment someone tries to inject them and you haven't registered them yet, for this you can use the error closure.
InjectStorage.standard.errorClosure = { error in
if case InjectError.notFound = error {
YourImplementation.register()
}
}You can get this syntactic sugar because you can now use property wrappers in function parameters.
static func register(@Register yourDependency: YourProtocol = YourImplementation()) {}@Inject and @UnwrappedInject (click to expand)
These property wrappers injects your dependencies @Register implementations.
@Inject
var yourDependency: YourProtocol?
@Inject
var yourDependency: YourImplementation?
@UnwrappedInject
var yourUnwrappedDependency: YourProtocol
@UnwrappedInject
var yourUnwrappedDependency: YourImplementationBecause these property wrappers works similarly to @Singleton, the default scope is .singleton, but if you use builder closures on @Register, you can modify them to inject a single instance.
@Inject(.instance)
var yourDependency: YourProtocol?
@UnwrappedInject(.instance)
var yourUnwrappedDependency: YourProtocol@InjectWith and @UnwrappedInjectWith (click to expand)
Your dependency may need parameters when injecting, you can pass them with these property wrappers. Simply define a model with your dependency parameters and pass it. It will inject a new instance built with these parameters.
@Register
var yourDependency = { parameters in
YourImplementation(parameters) as YourProtocol
}
@Inject(YourParameters())
var yourDependency: YourProtocol?
@UnwrappedInject(YourParameters())
var yourUnwrappedDependency: YourProtocolQualifiers (click to expand)
You can use qualifiers to provide various implementations of a particular dependency. A qualifier is just a @objc protocol that you apply to a class.
For example, you could declare Dog and Cat qualifier protocols and apply it to another class that conforms Animal protocol. To declare this qualifier, use the following code:
protocol Animal {
func sound()
}
@objc protocol Dog {}
@objc protocol Cat {}You can then define multiple classes that conforms Animal protocol and uses this qualifiers:
class DogImplementation: Animal, Dog {
func sound() { print("Woof!") }
}
class CatImplementation: Animal, Cat {
func sound() { print("Meow!") }
}Both implementations of the class can now be @Register:
@Register
var registerDog: Animal = DogImplementation()
@Register
var registerCat: Animal = CatImplementation()To inject one or the other implementation, simply add the qualifier(s) to your @Inject:
@UnwrappedInject(Dog.self)
var dog: Animal
@UnwrappedInject(Cat.self)
var cat: Animal
dog.sound() // prints Woof!
cat.sound() // prints Meow!Testing (click to expand)
One of the advantages of dependency injection is that the code can be easily testable with mock implementation.
That is why there is a Mock qualifier that has priority over all, so you can have your dependencies defined in the app and create your mock in the test target simply by adding this qualifier.
// App target
class YourImplementation: YourProtocol {}
@Register
var yourDependency: YourProtocol = YourImplementation()
@Inject
var yourDependency: YourProtocol?// Test target
class YourMock: YourProtocol, Mock {}
@Register
var yourDependency: YourProtocol = YourMock()Groups (click to expand)
When you have a lot of dependencies in your app, you may want to optimize dependency resolution.
You can group them using @Register(group:) and a DependencyGroupKey:
@Register(group: <#DependencyGroupKey#>)
var yourDependency: YourProtocol = YourImplementation()@Inject(group:) will look for those dependencies only in that group:
@Inject(group: <#DependencyGroupKey#>)
var yourDependency: YourProtocol?This library is designed with Swift's modern concurrency features in mind. Access to the underlying storage mechanisms (UserDefaults, Keychain, etc.) is serialized through a global actor (StorageActor), preventing data races during read and write operations performed by the library itself.
However, for your application to be fully concurrency-safe when using this library, it is crucial that the types you store and retrieve are Sendable.
- Generic Types: When using generic property wrappers or methods like
@Store var item: MyType?,storage.value(forKey: "key") as? MyType, orstorage.decodable(forKey: "key") as? MyDecodableType, ensure thatMyTypeandMyDecodableTypeconform to theSendableprotocol. - Object Archiving: If you use methods that rely on
NSKeyedArchiver(such asstorage.set(object: myNSObject, forKey: "key")), the classmyNSObjectshould conform toNSSecureCodingfor security and also beSendablefor concurrency safety. - Why is
Sendableimportant?: While the library ensures that the act of storing or retrieving data is safe, if the data itself (e.g., a class instance) is notSendable, then passing it across different concurrent tasks or actors after retrieval can lead to data races if the data is mutable. Conforming toSendablehelps Swift enforce that such types can be safely shared.
Enabling strict concurrency checking in your project's build settings (e.g., "Strict Concurrency Checking" set to "Complete" in Xcode) is highly recommended to help identify potential concurrency issues at compile time.
Talk is cheap. Show me the code.
// Securely stored in UserDefaults.
@UserDefault("username")
var username: String?
// Securely stored in Keychain.
@Keychain("password")
var password: String?
// Securely stored in a Singleton storage.
@Singleton("sessionToken")
var sessionToken: String?
// Securely stored in a Singleton storage.
// Always has a value, the stored or the default.
@UnwrappedSingleton("refreshToken")
var refreshToken: String = "B0610306-A33F"
struct User: Codable {
let username: String
let password: String?
let sessionToken: String?
}
// Codable model securely stored in UserDefaults.
@CodableUserDefault("user")
var user: User?- macOS 11.5+
- iOS 13.0+
- iPadOS 13.0+
- tvOS 13.0+
- watchOS 6.0+
- visionOS 1.0+
You can use the Swift Package Manager by declaring SecurePropertyStorage as a dependency in your Package.swift file:
.package(url: "https://github.com/alexruperez/SecurePropertyStorage", from: "0.7.1")By default, all property wrappers are installed and you can import them, but if you want, you can install only some of them:
- UserDefault: @*UserDefault property wrappers.
- Keychain: @*Keychain property wrappers.
- Singleton: @*Singleton property wrappers.
- Storage: @*Store property wrappers.
- Inject: @*Inject property wrappers.
For more information, see the Swift Package Manager documentation.
Or you can use Carthage:
github "alexruperez/SecurePropertyStorage"
- Featured in Dave Verwer's iOS Dev Weekly - Issue 450, thanks Dave!
- Contributions are very welcome. Thanks Alberto Garcia, Manu and Chen!
- Attribution is appreciated (let's spread the word!), but not mandatory.
Alex Rupรฉrez โ @alexruperez โ [email protected]
SecurePropertyStorage is available under the MIT license. See the LICENSE file for more info.