Implement UseUserAccessGroup for Firebase Auth C++ SDK

This commit introduces the UseUserAccessGroup method to the Firebase
Authentication C++ SDK.

On iOS, this method wraps the [FIRAuth useUserAccessGroup:error:]
Objective-C call, allowing developers to specify an iCloud keychain
access group.

On other platforms (desktop, Android), this method is a no-op and
returns kAuthErrorNone, as the functionality is specific to iOS.

Author: google-labs-jules[bot]

auth/src/desktop/auth_desktop.cc

@@ -575,6 +575,11 @@ void Auth::UseEmulator(std::string host, uint32_t port) {
   auth_impl->assigned_emulator_url.append(std::to_string(port));
 }
 
+AuthError Auth::UseUserAccessGroup(const char* access_group) {
+  // This is an iOS-only feature. No-op on other platforms.
+  return kAuthErrorNone;
+}
+
 void InitializeTokenRefresher(AuthData* auth_data) {
   auto auth_impl = static_cast<AuthImpl*>(auth_data->auth_impl);
   auth_impl->token_refresh_thread.Initialize(auth_data);

auth/src/include/firebase/auth.h

@@ -517,6 +517,21 @@ class Auth {
   /// not available on the current device.
   static Auth* GetAuth(App* app, InitResult* init_result_out = nullptr);
 
+  /// @brief Specifies a user access group for iCloud keychain access.
+  ///
+  /// This method is only functional on iOS. On other platforms, it is a no-op
+  /// and will always return `kAuthErrorNone`.
+  ///
+  /// If you are using iCloud keychain synchronization, you will need to call
+  /// this method to set the user access group.
+  ///
+  /// @param[in] access_group The user access group to use. Set to `nullptr` or
+  /// an empty string to use the default access group.
+  ///
+  /// @return `kAuthErrorNone` on success, or an AuthError code if an error
+  /// occurred.
+  AuthError UseUserAccessGroup(const char* access_group);
+
  private:
   /// @cond FIREBASE_APP_INTERNAL
   friend class ::firebase::App;

auth/src/ios/auth_ios.mm

@@ -608,5 +608,23 @@ void DisableTokenAutoRefresh(AuthData *auth_data) {}
 void InitializeTokenRefresher(AuthData *auth_data) {}
 void DestroyTokenRefresher(AuthData *auth_data) {}
 
+AuthError Auth::UseUserAccessGroup(const char* access_group_str) {
+  if (!auth_data_) {
+    return kAuthErrorUninitialized;
+  }
+  NSString* access_group_ns_str = nil;
+  if (access_group_str != nullptr && strlen(access_group_str) > 0) {
+    access_group_ns_str = [NSString stringWithUTF8String:access_group_str];
+  }
+
+  NSError* error = nil;
+  BOOL success = [AuthImpl(auth_data_) useUserAccessGroup:access_group_ns_str error:&error];
+  if (success) {
+    return kAuthErrorNone;
+  } else {
+    return AuthErrorFromNSError(error);
+  }
+}
+
 }  // namespace auth
 }  // namespace firebase