Fix Mac Catalyst reconnect race by updating keychain password in place instead of delete-then-add

Author: kp-diego-trevisan

LocalPackages/PIALibrary/Sources/PIALibrary/Util/Keychain.swift

@@ -82,17 +82,33 @@ public class Keychain {
 
     /// :nodoc:
     public func set(password: String, for username: String) throws {
-        removePassword(for: username)
+        guard let data = password.data(using: .utf8) else {
+            throw KeychainError.add
+        }
 
         var query = [String: Any]()
         setScope(query: &query)
         query[kSecClass as String] = kSecClassGenericPassword
         query[kSecAttrAccount as String] = username
-        query[kSecAttrAccessible as String] = kSecAttrAccessibleAfterFirstUnlock
-        query[kSecValueData as String] = password.data(using: .utf8)
 
-        let status = SecItemAdd(query as CFDictionary, nil)
-        guard (status == errSecSuccess) else {
+        let attributesToUpdate: [String: Any] = [
+            kSecValueData as String: data,
+            kSecAttrAccessible as String: kSecAttrAccessibleAfterFirstUnlock
+        ]
+        let updateStatus = SecItemUpdate(query as CFDictionary, attributesToUpdate as CFDictionary)
+
+        switch updateStatus {
+        case errSecSuccess:
+            return
+        case errSecItemNotFound:
+            // No existing item — add a fresh one.
+            query[kSecAttrAccessible as String] = kSecAttrAccessibleAfterFirstUnlock
+            query[kSecValueData as String] = data
+            let addStatus = SecItemAdd(query as CFDictionary, nil)
+            guard addStatus == errSecSuccess else {
+                throw KeychainError.add
+            }
+        default:
             throw KeychainError.add
         }
     }