From 4f3e5dac1efd6850926b910bf9f8aa8744fdc2c2 Mon Sep 17 00:00:00 2001
From: Mattermost Build <build@mattermost.com>
Date: Mon, 2 Dec 2019 16:26:54 +0100
Subject: [PATCH] MM-20789 Enforce SECURE_SOFTWARE (#3647)

---
 app/init/credentials.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/app/init/credentials.js b/app/init/credentials.js
index 5148a43be..77c73e92d 100644
--- a/app/init/credentials.js
+++ b/app/init/credentials.js
@@ -29,7 +29,11 @@ export const setAppCredentials = (deviceToken, currentUserId, token, url) => {
             EphemeralStore.deviceToken = deviceToken;
             EphemeralStore.currentServerUrl = url;
             AsyncStorage.setItem(CURRENT_SERVER, url);
-            KeyChain.setInternetCredentials(url, username, token, {accessGroup: mattermostManaged.appGroupIdentifier});
+            const options = {
+                accessGroup: mattermostManaged.appGroupIdentifier,
+                securityLevel: 'SECURE_SOFTWARE',
+            };
+            KeyChain.setInternetCredentials(url, username, token, options);
         } catch (e) {
             console.warn('could not set credentials', e); //eslint-disable-line no-console
         }