feat: integrate tauri-plugin-ohos-permissions

crates/tauri-cli/src/helpers/plugins.rs

@@ -65,6 +65,7 @@ pub fn known_plugins() -> HashMap<&'static str, PluginMetadata> {
     "fs",
     "http",
     "notification",
+    "ohos-permissions",
     "os",
     "process",
     "shell",

crates/tauri-cli/src/mobile/open_harmony/plugins.rs

@@ -138,6 +138,11 @@ const BUILTIN_PLUGINS: &[(&str, &str, &str)] = &[
     "@tauri/plugin-global-shortcut",
     "GlobalShortcutPlugin",
   ),
+  (
+    "ohos-permissions",
+    "@tauri/plugin-ohos-permissions",
+    "OhosPermissionsPlugin",
+  ),
 ];
 
 pub fn detect_all_plugins(project_dir: &Path) -> Result<Vec<DetectedPlugin>> {

crates/tauri-cli/templates/mobile/open-harmony/ohos-permissions/build-profile.json5

@@ -0,0 +1,17 @@
+{
+  "apiType": "stageMode",
+  "buildOption": {
+    "arkOptions": {
+      "obfuscation": {
+        "ruleOptions": {
+          "enable": false
+        }
+      }
+    }
+  },
+  "targets": [
+    {
+      "name": "default"
+    }
+  ]
+}

crates/tauri-cli/templates/mobile/open-harmony/ohos-permissions/hvigorfile.ts

@@ -0,0 +1,6 @@
+import { harTasks } from '@ohos/hvigor-ohos-plugin';
+
+export default {
+  system: harTasks,
+  plugins: []
+}

crates/tauri-cli/templates/mobile/open-harmony/ohos-permissions/oh-package.json5

@@ -0,0 +1,12 @@
+{
+  "name": "@tauri/plugin-ohos-permissions",
+  "version": "0.1.0",
+  "description": "OHOS permissions plugin for Tauri on OpenHarmony",
+  "main": "src/main/ets/index.ets",
+  "author": "Tauri Programme within The Commons Conservancy",
+  "license": "Apache-2.0 OR MIT",
+  "dependencies": {
+    "@tauri/app": "file:../tauri"
+  },
+  "type": "module"
+}

crates/tauri-cli/templates/mobile/open-harmony/ohos-permissions/src/main/ets/Plugin.ets

@@ -0,0 +1,96 @@
+import { abilityAccessCtrl, bundleManager, common, Permissions } from '@kit.AbilityKit';
+import { BusinessError } from '@kit.BasicServicesKit';
+import { Plugin, Invoke } from '@tauri/app';
+
+// ─── Permission name mapping ───
+
+const PERMISSION_MAP: Record<string, Permissions> = {
+  'camera': 'ohos.permission.CAMERA',
+  'microphone': 'ohos.permission.MICROPHONE',
+};
+
+// ─── Plugin Implementation ───
+
+export class OhosPermissionsPlugin extends Plugin {
+
+  getCommands(): Map<string, (invoke: Invoke) => void> {
+    const commands: Map<string, (invoke: Invoke) => void> = new Map();
+    commands.set('checkCameraPermission', (invoke: Invoke): void => { this.handleCheck(invoke, 'camera'); });
+    commands.set('requestCameraPermission', (invoke: Invoke): void => { this.handleRequest(invoke, 'camera'); });
+    commands.set('checkMicrophonePermission', (invoke: Invoke): void => { this.handleCheck(invoke, 'microphone'); });
+    commands.set('requestMicrophonePermission', (invoke: Invoke): void => { this.handleRequest(invoke, 'microphone'); });
+    return commands;
+  }
+
+  // ─── Generic check handler ───
+
+  private handleCheck(invoke: Invoke, permissionKey: string): void {
+    this.checkPermission(permissionKey).then((granted: boolean) => {
+      invoke.resolve(JSON.stringify(granted));
+    }).catch((err: BusinessError) => {
+      console.error('[OhosPermissionsPlugin] checkPermission failed for ' + permissionKey + ': ' + err.message);
+      invoke.resolve(JSON.stringify(false));
+    });
+  }
+
+  // ─── Generic request handler ───
+
+  private handleRequest(invoke: Invoke, permissionKey: string): void {
+    const ohosPermission = PERMISSION_MAP[permissionKey];
+    if (ohosPermission === undefined) {
+      invoke.reject('Unknown permission: ' + permissionKey);
+      return;
+    }
+
+    const permissions: Array<Permissions> = [ohosPermission];
+    let atManager: abilityAccessCtrl.AtManager = abilityAccessCtrl.createAtManager();
+
+    if (this.context === undefined || this.context === null) {
+      console.error('[OhosPermissionsPlugin] UIAbilityContext not available');
+      invoke.reject('UIAbilityContext not available');
+      return;
+    }
+
+    atManager.requestPermissionsFromUser(this.context, permissions).then((data) => {
+      const authResults: number[] = data.authResults;
+      if (authResults.length > 0 && authResults[0] === 0) {
+        invoke.resolve('');
+      } else {
+        console.warn('[OhosPermissionsPlugin] Permission ' + permissionKey + ' denied by user.');
+        invoke.resolve('');
+      }
+    }).catch((err: BusinessError) => {
+      console.error('[OhosPermissionsPlugin] requestPermissionsFromUser failed: code=' + err.code + ', message=' + err.message);
+      invoke.resolve('');
+    });
+  }
+
+  // ─── Core: check if a permission is granted ───
+
+  private async checkPermission(permissionKey: string): Promise<boolean> {
+    const ohosPermission = PERMISSION_MAP[permissionKey];
+    if (ohosPermission === undefined) {
+      throw new Error('Unknown permission: ' + permissionKey);
+    }
+
+    const tokenId = await this.getAccessTokenId();
+    const atManager: abilityAccessCtrl.AtManager = abilityAccessCtrl.createAtManager();
+
+    const grantStatus: abilityAccessCtrl.GrantStatus =
+      await atManager.checkAccessToken(tokenId, ohosPermission);
+
+    return grantStatus === abilityAccessCtrl.GrantStatus.PERMISSION_GRANTED;
+  }
+
+  // ─── Core: get the app's access token ID ───
+
+  private async getAccessTokenId(): Promise<number> {
+    const bundleInfo: bundleManager.BundleInfo =
+      await bundleManager.getBundleInfoForSelf(
+        bundleManager.BundleFlag.GET_BUNDLE_INFO_WITH_APPLICATION
+      );
+    return bundleInfo.appInfo.accessTokenId;
+  }
+}
+
+export default OhosPermissionsPlugin;

crates/tauri-cli/templates/mobile/open-harmony/ohos-permissions/src/main/ets/index.ets

@@ -0,0 +1 @@
+export { OhosPermissionsPlugin as default } from './Plugin';

crates/tauri-cli/templates/mobile/open-harmony/ohos-permissions/src/main/module.json5

@@ -0,0 +1,34 @@
+{
+  "module": {
+    "name": "ohospermissions",
+    "type": "har",
+    "deviceTypes": [
+      "default",
+      "phone",
+      "tablet",
+      "2in1"
+    ],
+    "requestPermissions": [
+      {
+        "name": "ohos.permission.CAMERA",
+        "reason": "$string:ohos_permissions_camera_reason",
+        "usedScene": {
+          "abilities": [
+            "EntryAbility"
+          ],
+          "when": "inuse"
+        }
+      },
+      {
+        "name": "ohos.permission.MICROPHONE",
+        "reason": "$string:ohos_permissions_microphone_reason",
+        "usedScene": {
+          "abilities": [
+            "EntryAbility"
+          ],
+          "when": "inuse"
+        }
+      }
+    ]
+  }
+}

crates/tauri-cli/templates/mobile/open-harmony/ohos-permissions/src/main/resources/base/element/string.json

@@ -0,0 +1,12 @@
+{
+  "string": [
+    {
+      "name": "ohos_permissions_camera_reason",
+      "value": "This app needs camera access to take photos and record videos."
+    },
+    {
+      "name": "ohos_permissions_microphone_reason",
+      "value": "This app needs microphone access to record audio."
+    }
+  ]
+}

examples/api/package.json

@@ -22,7 +22,8 @@
     "@tauri-apps/plugin-os": "file:../../../plugins-workspace/plugins/os",
     "@tauri-apps/plugin-process": "file:../../../plugins-workspace/plugins/process",
     "@tauri-apps/plugin-shell": "file:../../../plugins-workspace/plugins/shell",
-    "@tauri-apps/plugin-updater": "file:../../../plugins-workspace/plugins/updater"
+    "@tauri-apps/plugin-updater": "file:../../../plugins-workspace/plugins/updater",
+    "@tauri-apps/plugin-ohos-permissions": "file:../../../plugins-workspace/plugins/ohos-permissions"
   },
   "devDependencies": {
     "@iconify-json/codicon": "^1.2.49",

examples/api/src-tauri/Cargo.toml

@@ -32,6 +32,7 @@ tauri-plugin-updater = { path = "../../../../plugins-workspace/plugins/updater"
 tauri-plugin-autostart = { path = "../../../../plugins-workspace/plugins/autostart" }
 tauri-plugin-log = { path = "../../../../plugins-workspace/plugins/log" }
 tauri-plugin-notification = { path = "../../../../plugins-workspace/plugins/notification" }
+tauri-plugin-ohos-permissions = { path = "../../../../plugins-workspace/plugins/ohos-permissions" }
 sentry = { version = "0.42", default-features = false, features = ["reqwest", "rustls", "backtrace", "contexts", "panic", "debug-images"] }
 tauri-plugin-sentry = { path = "../../../../sentry-tauri" }
 chrono = "0.4"

examples/api/src-tauri/capabilities/run-app.json

@@ -161,6 +161,7 @@
     "global-shortcut:allow-register",
     "global-shortcut:allow-unregister",
     "global-shortcut:allow-unregister-all",
-    "global-shortcut:allow-is-registered"
+    "global-shortcut:allow-is-registered",
+    "ohos-permissions:default"
   ]
 }

examples/api/src-tauri/src/lib.rs

@@ -143,7 +143,8 @@ pub fn run_app<R: Runtime, F: FnOnce(&App<R>) + Send + 'static>(
       tauri_plugin_autostart::MacosLauncher::LaunchAgent,
       None,
     ))
-    .plugin(tauri_plugin_global_shortcut::Builder::new().build());
+    .plugin(tauri_plugin_global_shortcut::Builder::new().build())
+    .plugin(tauri_plugin_ohos_permissions::init());
   }
 
   #[cfg(target_env = "ohos")]