@tokamakdev/plugin-local-authentication 0.1.0-beta.83 → 0.1.0-beta.85

package/README.md

@@ -27,8 +27,9 @@ falling back to the device passcode, PIN, pattern or password) or `biometrics`.
 
 `authenticate` resolves when the device owner authenticates. It rejects with
 `NotAllowedError` when the user cancels or fails, `InvalidStateError` when the
-authentication is not set up, and `NotSupportedError` when the device cannot
-perform it.
+authentication is not set up, `NotSupportedError` when the device cannot
+perform it, and `NeedsUIError` while the app is off screen on iOS or Android,
+where the system cannot show its prompt.
 
 `authenticate` checks the device owner when the app asks; it does not protect
 any data. To bind a stored value to authentication, use

package/apple/LocalAuthenticationPlugin.swift

@@ -4,7 +4,11 @@ import LocalAuthentication
 final class TokamakLocalAuthenticationPlugin: TokamakPlugin {
   let id = "local-authentication"
 
-  init(host: TokamakHost) {}
+  private let host: TokamakHost
+
+  init(host: TokamakHost) {
+    self.host = host
+  }
 
   func call(
     method: String,
@@ -39,12 +43,19 @@ final class TokamakLocalAuthenticationPlugin: TokamakPlugin {
     }
   }
 
+  /// Shows the system prompt, which needs the app able to show UI, unless the
+  /// authentication fails without one.
   private func authenticate(
     _ policy: LAPolicy,
     prompt: String,
     reply: @escaping TokamakPluginReply
-  ) {
+  ) throws(TokamakPluginError) {
     let context = LAContext()
+    var error: NSError?
+    guard context.canEvaluatePolicy(policy, error: &error) else {
+      throw Self.failure(error)
+    }
+    try host.requireUI()
     if policy == .deviceOwnerAuthenticationWithBiometrics {
       // Hides the passcode fallback button, which this policy cannot use.
       context.localizedFallbackTitle = ""

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokamakdev/plugin-local-authentication",
-  "version": "0.1.0-beta.83",
+  "version": "0.1.0-beta.85",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/mantty/tokamak.git",
@@ -11,7 +11,7 @@
     ".": "./src/index.ts"
   },
   "peerDependencies": {
-    "@tokamakdev/plugin": "0.1.0-beta.83"
+    "@tokamakdev/plugin": "0.1.0-beta.85"
   },
   "files": [
     "android",

package/src/index.ts

@@ -1,4 +1,4 @@
-import { FrontendPlugin } from "@tokamakdev/plugin";
+import { Plugin } from "@tokamakdev/plugin";
 
 /** The authentication the device owner performs. */
 export type Authentication = "biometricsOrPasscode" | "biometrics";
@@ -11,7 +11,7 @@ export interface AuthenticateOptions {
   readonly prompt: string;
 }
 
-class LocalAuthentication extends FrontendPlugin {
+class LocalAuthentication extends Plugin {
   constructor() {
     super("local-authentication");
   }