feat: allow requesting Photos access

Author: codebytere

README.md

@@ -141,7 +141,7 @@ Your app must provide an explanation for its use of capture devices using the `N
 
 **Note:**
 
-- `status` will be resolved back as `authorized` prior to macOS 10.14 High Sierra, as access to the camera and microphone was unilaterally allowed until that version.
+- `status` will be resolved back as `authorized` prior to macOS 10.14, as access to the camera and microphone was unilaterally allowed until that version.
 
 Example:
 
@@ -170,14 +170,47 @@ Your app must provide an explanation for its use of capture devices using the `N
 
 **Note:**
 
-- `status` will be resolved back as `authorized` prior to macOS 10.14 High Sierra, as access to the camera and microphone was unilaterally allowed until that version.
+- `status` will be resolved back as `authorized` prior to macOS 10.14, as access to the camera and microphone was unilaterally allowed until that version.
 
 Example:
 
 ```js
 const { askForMicrophoneAccess } = require("node-mac-permissions");
 
-const status = await askForMicrophoneAccess();
+askForMicrophoneAccess().then(status => {
+  console.log(`Access to Microphone is ${status}`)
+});
+```
+
+## `permissions.askForPhotosAccess()`
+
+Returns `Promise<String>` - Current permission status; can be `authorized`, `denied`, or `restricted`.
+
+Checks the authorization status for Photos access. If the status check returns:
+
+* `not determined` - The Photos access authorization will prompt the user to authorize or deny. The Promise is resolved after the user selection with either `authorized` or `denied`.
+* `denied` - The `Security & Privacy` System Preferences window is opened with the Photos privacy key highlighted. On open of the `Security & Privacy` window, the Promise is resolved as `denied`.
+* `restricted` - The Promise is resolved as `restricted`.
+
+Your app must provide an explanation for its use of the photo library using the `NSPhotoLibraryUsageDescription` `Info.plist` key.
+
+```
+<key>NSPhotoLibraryUsageDescription</key>
+<string>Your reason for wanting to access Photos</string>
+```
+
+**Note:**
+
+- `status` will be resolved back as `authorized` prior to macOS 10.13, as access to Photos was unilaterally allowed until that version.
+
+Example:
+
+```js
+const { askForPhotosAccess } = require("node-mac-permissions");
+
+askForPhotosAccess().then(status => {
+  console.log(`Access to Photos is ${status}`)
+});
 ```
 
 ## `permissions.askForScreenCaptureAccess()`

index.js

@@ -28,6 +28,7 @@ module.exports = {
   askForRemindersAccess: permissions.askForRemindersAccess,
   askForCameraAccess: permissions.askForCameraAccess,
   askForMicrophoneAccess: permissions.askForMicrophoneAccess,
+  askForPhotosAccess: permissions.askForPhotosAccess,
   askForScreenCaptureAccess: permissions.askForScreenCaptureAccess,
   askForAccessibilityAccess: permissions.askForAccessibilityAccess,
   getAuthStatus,

permissions.mm

@@ -6,8 +6,8 @@
 #import <Contacts/Contacts.h>
 #import <CoreLocation/CoreLocation.h>
 #import <EventKit/EventKit.h>
-#import <Photos/Photos.h>
 #import <Foundation/Foundation.h>
+#import <Photos/Photos.h>
 #import <pwd.h>
 
 /***** HELPER FUNCTIONS *****/
@@ -249,8 +249,8 @@
   Napi::ThreadSafeFunction ts_fn = Napi::ThreadSafeFunction::New(
       env, Napi::Function::New(env, NoOp), "contactsCallback", 0, 1);
 
-  __block Napi::ThreadSafeFunction tsfn = ts_fn;
   if (@available(macOS 10.11, *)) {
+    __block Napi::ThreadSafeFunction tsfn = ts_fn;
     CNContactStore *store = [CNContactStore new];
     [store requestAccessForEntityType:CNEntityTypeContacts
                     completionHandler:^(BOOL granted, NSError *error) {
@@ -263,6 +263,7 @@
                       tsfn.Release();
                     }];
   } else {
+    ts_fn.Release();
     deferred.Resolve(Napi::String::New(env, "authorized"));
   }
 
@@ -355,11 +356,57 @@ void AskForFullDiskAccess(const Napi::CallbackInfo &info) {
 
       [workspace openURL:[NSURL URLWithString:pref_string]];
 
+      ts_fn.Release();
+      deferred.Resolve(Napi::String::New(env, "denied"));
+    } else {
+      ts_fn.Release();
+      deferred.Resolve(Napi::String::New(env, auth_status));
+    }
+  } else {
+    ts_fn.Release();
+    deferred.Resolve(Napi::String::New(env, "authorized"));
+  }
+
+  return deferred.Promise();
+}
+
+// Request Photos access.
+Napi::Promise AskForPhotosAccess(const Napi::CallbackInfo &info) {
+  Napi::Env env = info.Env();
+  Napi::Promise::Deferred deferred = Napi::Promise::Deferred::New(env);
+  Napi::ThreadSafeFunction ts_fn = Napi::ThreadSafeFunction::New(
+      env, Napi::Function::New(env, NoOp), "photosCallback", 0, 1);
+
+  if (@available(macOS 10.13, *)) {
+    std::string auth_status = PhotosAuthStatus();
+
+    if (auth_status == "not determined") {
+      __block Napi::ThreadSafeFunction tsfn = ts_fn;
+      [PHPhotoLibrary requestAuthorization:^(PHAuthorizationStatus status) {
+        auto callback = [=](Napi::Env env, Napi::Function js_cb,
+                            const char *granted) {
+          deferred.Resolve(Napi::String::New(env, granted));
+        };
+        tsfn.BlockingCall(
+            status == PHAuthorizationStatusAuthorized ? "authorized" : "denied",
+            callback);
+        tsfn.Release();
+      }];
+    } else if (auth_status == "denied") {
+      NSWorkspace *workspace = [[NSWorkspace alloc] init];
+      NSString *pref_string = @"x-apple.systempreferences:com.apple.preference."
+                              @"security?Privacy_Photos";
+
+      [workspace openURL:[NSURL URLWithString:pref_string]];
+
+      ts_fn.Release();
       deferred.Resolve(Napi::String::New(env, "denied"));
     } else {
+      ts_fn.Release();
       deferred.Resolve(Napi::String::New(env, auth_status));
     }
   } else {
+    ts_fn.Release();
     deferred.Resolve(Napi::String::New(env, "authorized"));
   }
 
@@ -397,11 +444,14 @@ void AskForFullDiskAccess(const Napi::CallbackInfo &info) {
 
       [workspace openURL:[NSURL URLWithString:pref_string]];
 
+      ts_fn.Release();
       deferred.Resolve(Napi::String::New(env, "denied"));
     } else {
+      ts_fn.Release();
       deferred.Resolve(Napi::String::New(env, auth_status));
     }
   } else {
+    ts_fn.Release();
     deferred.Resolve(Napi::String::New(env, "authorized"));
   }
 
@@ -459,6 +509,8 @@ void AskForAccessibilityAccess(const Napi::CallbackInfo &info) {
               Napi::Function::New(env, AskForCameraAccess));
   exports.Set(Napi::String::New(env, "askForMicrophoneAccess"),
               Napi::Function::New(env, AskForMicrophoneAccess));
+  exports.Set(Napi::String::New(env, "askForPhotosAccess"),
+              Napi::Function::New(env, AskForPhotosAccess));
   exports.Set(Napi::String::New(env, "askForScreenCaptureAccess"),
               Napi::Function::New(env, AskForScreenCaptureAccess));
   exports.Set(Napi::String::New(env, "askForAccessibilityAccess"),