Request permissions API

Author: rgantzos

api/feature.js

@@ -6,6 +6,9 @@ class Feature {
         finalFeature = el;
       }
     });
+    this.requestPermissions = async function(...permissions) {
+      return await ScratchTools.sendMessage("request-perms", permissions)
+    }
     this.data = finalFeature;
     this.msg = function (string) {
       return this.data.localesData[`${this.data.id}/`+string] || `ScratchTools.${this.data.id}.${string}`;

api/main.js

@@ -101,6 +101,23 @@ if (
   ScratchTools.type = "Website";
 }
 
+ScratchTools.MESSAGES = []
+ScratchTools.sendMessage = function(id, content) {
+  let uuid = UUID()
+  chrome.runtime.sendMessage(ScratchTools.id, { message: id, content, source: "message-api", uuid });
+  return new Promise((resolve, reject) => {
+    ScratchTools.MESSAGES.push({ message: id, source: "message-api", uuid, resolve });
+  });
+}
+
+function UUID() {
+  return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function (char) {
+      const random = Math.random() * 16 | 0;
+      const value = char === 'x' ? random : (random & 0x3 | 0x8);
+      return value.toString(16);
+  });
+}
+
 var storagePromises = [];
 ScratchTools.storage = {
   get: async function (key) {

build/index.js

@@ -0,0 +1 @@
+require("./write-permissions")

build/write-permissions.js

@@ -0,0 +1,26 @@
+const fs = require("fs")
+let features = JSON.parse(fs.readFileSync("./features/features.json"))
+let manifest = JSON.parse(fs.readFileSync("./manifest.json"))
+let permissions = ["https://api.scratch.mit.edu"]
+
+for (var i in features) {
+    if (features[i].version === 2) {
+        let feature = JSON.parse(fs.readFileSync(`./features/${features[i].id}/data.json`))
+        if (feature.permissions) {
+            permissions.push(...feature.permissions.filter((perm) => !permissions.includes(perm)))
+        }
+    }
+}
+
+manifest.optional_permissions = permissions.filter((perm) => !checkUrl(perm))
+manifest.optional_host_permissions = permissions.filter((perm) => checkUrl(perm))
+fs.writeFileSync("./manifest.json", JSON.stringify(manifest, null, 2), 'utf8');
+
+function checkUrl(perm) {
+    try {
+        new URL(perm);
+        return true;
+    } catch (_) {
+        return false;
+    }
+}

extras/background.js

@@ -692,7 +692,28 @@ chrome.runtime.onMessageExternal.addListener(async function (
     });
   }
   if (msg === "returnToTab") {
-    await chrome.tabs.update(sender.tab.id, {active: true})
+    await chrome.tabs.update(sender.tab.id, { active: true });
+  }
+  if (msg.source === "message-api") {
+    if (msg.message?.startsWith("request-perms")) {
+      let perms = msg.content;
+
+      chrome.permissions.request({ permissions: perms }, async (granted) => {
+        let isComplete = !!granted;
+
+        await chrome.scripting.executeScript({
+          args: [isComplete, msg.uuid],
+          target: { tabId: sender.tab.id },
+          func: sendPermsResponse,
+          world: "MAIN",
+        });
+        function sendPermsResponse(completed, uuid) {
+          ScratchTools.MESSAGES.find((el) => el.uuid === uuid).resolve(
+            completed
+          );
+        }
+      });
+    }
   }
   if (typeof msg === "object") {
     if (msg.message === "storageSet") {