feat: support 'notifications' auth status

Author: codebytere

README.md

@@ -47,6 +47,7 @@ This native Node.js module allows you to manage an app's access to:
 - Reminders
 - Screen Capture
 - Speech Recognition
+- Notifications
 
 If you need to ask for permissions, your app must be allowed to ask for permission :
 
@@ -59,9 +60,9 @@ If you're using macOS 12.3 or newer, you'll need to ensure you have Python insta
 
 ### `permissions.getAuthStatus(type)`
 
-- `type` String - The type of system component to which you are requesting access. Can be one of `accessibility`, `bluetooth`, `calendar`, `camera`, `contacts`, `full-disk-access`, `input-monitoring`, `location`, `microphone`,`photos`, `reminders`, `screen`, or `speech-recognition`.
+- `type` String - The type of system component to which you are requesting access. Can be one of `accessibility`, `bluetooth`, `calendar`, `camera`, `contacts`, `full-disk-access`, `input-monitoring`, `location`, `microphone`,`notifications`, `photos`, `reminders`, `screen`, or `speech-recognition`.
 
-Returns `String` - Can be one of `not determined`, `denied`, `authorized`, or `restricted`.
+Returns `String` - Can be one of `not determined`, `denied`, `authorized`, `limited`, `provisional`, or `restricted`.
 
 Checks the authorization status of the application to access `type` on macOS.
 
@@ -72,6 +73,7 @@ Return Value Descriptions:
 - `denied` - The user explicitly denied access to `type` data for the application.
 - `authorized` - The application is authorized to access `type` data.
 - `limited` - The application is authorized for limited access to `type` data. Currently only applicable to the `photos` type.
+- 'provisional' - The application is provisionally authorized to access `type` data. Currently only applicable to the `notifications` type.
 
 **Notes:**
 
@@ -96,6 +98,7 @@ const types = [
   'location',
   'microphone',
   'music-library',
+  'notifications',
   'photos-add-only',
   'photos-read-write',
   'reminders',

binding.gyp

@@ -33,7 +33,8 @@
         "-framework IOKit",
         "-framework Photos",
         "-framework Speech",
-        "-framework StoreKit"
+        "-framework StoreKit",
+        "-framework UserNotifications",
       ]
     }
   }]

index.d.ts

@@ -15,7 +15,7 @@ export function askForPhotosAccess(accessType?: 'add-only' | 'read-write'): Prom
 export function askForRemindersAccess(): Promise<Omit<PermissionType, 'restricted'>>
 export function askForSpeechRecognitionAccess(): Promise<Omit<PermissionType, 'restricted'>>
 export function askForScreenCaptureAccess(openPreferences?: boolean): undefined
-export function getAuthStatus(authType: AuthType): PermissionType | 'not determined'
+export function getAuthStatus(authType: AuthType): PermissionType | 'not determined' | 'provisional' | 'limited'
 
 export type AuthType =
   | 'accessibility'
@@ -28,6 +28,7 @@ export type AuthType =
   | 'location'
   | 'microphone'
   | 'music-library'
+  | 'notifications'
   | 'photos-add-only'
   | 'photos-read-write'
   | 'reminders'

index.js

@@ -13,6 +13,7 @@ function getAuthStatus(type) {
     'location',
     'microphone',
     'music-library',
+    'notifications',
     'photos-add-only',
     'photos-read-write',
     'reminders',

permissions.mm

@@ -13,6 +13,7 @@
 #import <Photos/Photos.h>
 #import <Speech/Speech.h>
 #import <StoreKit/StoreKit.h>
+#import <UserNotifications/UserNotifications.h>
 #import <pwd.h>
 
 /***** HELPER FUNCTIONS *****/
@@ -22,6 +23,7 @@
 const std::string kRestricted{"restricted"};
 const std::string kNotDetermined{"not determined"};
 const std::string kLimited{"limited"};
+const std::string kProvisional{"provisional"};
 
 // Check if a bundle ID is valid (i.e., corresponds to an installed app)
 bool IsValidBundleID(NSString *bundleID) {
@@ -104,6 +106,19 @@ IOHIDRequestType GetInputMonitoringAccessType(const std::string &type) {
   }
 }
 
+const std::string &StringFromNotificationStatus(UNAuthorizationStatus status) {
+  switch (status) {
+  case UNAuthorizationStatusAuthorized:
+    return kAuthorized;
+  case UNAuthorizationStatusDenied:
+    return kDenied;
+  case UNAuthorizationStatusProvisional:
+    return kProvisional;
+  default:
+    return kNotDetermined;
+  }
+}
+
 std::string StringFromSpeechRecognitionStatus(
     SFSpeechRecognizerAuthorizationStatus status) {
   switch (status) {
@@ -376,6 +391,30 @@ bool HasOpenSystemPreferencesDialog() {
   return StringFromSpeechRecognitionStatus(status);
 }
 
+// Returns a status indicating whether the user has authorized
+// Notifications access.
+std::string NotificationAuthStatus() {
+  NSURL *bundle_url = [[NSBundle mainBundle] bundleURL];
+  if (!IsValidBundleID([bundle_url path])) {
+    return kNotDetermined;
+  }
+
+  __block std::string ret = "not determined";
+  dispatch_group_t g = dispatch_group_create();
+  dispatch_group_enter(g);
+
+  UNUserNotificationCenter *center =
+      [UNUserNotificationCenter currentNotificationCenter];
+  [center getNotificationSettingsWithCompletionHandler:^(
+              UNNotificationSettings *settings) {
+    ret = StringFromNotificationStatus(settings.authorizationStatus);
+    dispatch_group_leave(g);
+  }];
+
+  dispatch_group_wait(g, DISPATCH_TIME_FOREVER);
+  return ret;
+}
+
 // Returns a status indicating whether the user has authorized location
 // access.
 std::string LocationAuthStatus() {
@@ -444,6 +483,8 @@ bool HasOpenSystemPreferencesDialog() {
     auth_status = MusicLibraryAuthStatus();
   } else if (type == "input-monitoring") {
     auth_status = InputMonitoringAuthStatus();
+  } else if (type == "notifications") {
+    auth_status = NotificationAuthStatus();
   }
 
   return Napi::Value::From(env, auth_status);

test/module.spec.js

@@ -29,14 +29,15 @@ describe('node-mac-permissions', () => {
         'location',
         'microphone',
         'music-library',
+        'notifications',
         'photos-add-only',
         'photos-read-write',
         'reminders',
         'speech-recognition',
         'screen',
       ]
 
-      const statuses = ['not determined', 'denied', 'authorized', 'restricted']
+      const statuses = ['not determined', 'denied', 'authorized', 'restricted', 'provisional']
       for (const type of types) {
         const status = getAuthStatus(type)
         expect(statuses).to.contain(status)