Added a flag to support unlocking the database with the apple watch a…

…s well as TouchID
cathyjf · Feb 14, 2021 · 484b5e4 · 484b5e4
1 parent 8255893
commit 484b5e4
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/MacPass/MPPasswordInputController.m b/MacPass/MPPasswordInputController.m
@@ -175,9 +175,13 @@ - (void) _touchIdCreateAndAddRSAKeyPair {
   NSData* privateKeyTag = [@"com.hicknhacksoftware.macpass.privatekey" dataUsingEncoding:NSUTF8StringEncoding];
   SecAccessControlRef access = NULL;
   if (@available(macOS 10.13.4, *)) {
+    SecAccessControlCreateFlags flags = kSecAccessControlBiometryCurrentSet;
+    if (@available(macOS 10.15, *)) {
+      flags |= kSecAccessControlWatch | kSecAccessControlOr;
+    }
     access = SecAccessControlCreateWithFlags(kCFAllocatorDefault,
                                              kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
-                                             kSecAccessControlBiometryCurrentSet,
+                                             flags,
                                              &error);
     if(access == NULL) {
       NSError *err = CFBridgingRelease(error);