ChromePromise instance doesn't update when optional permissions are requested

The ChromePromise constructor wraps whatever Chrome extension APIs are available when the library is first loaded. But it’s also possible to request optional permissions after the extension first loads. If the user gives that permission, though, any existing ChromePromise instances aren’t updated to provide the newly available API.

One way to solve this might be wrap the chrome.permissions.request() method and intercept the request and the response. If the response is true, then the instance could look at the requested permissions and update itself with those APIs.

[tfoxy]

Thanks for all the research. I didn’t add the alias for webRequestBlocking because the webRequest permission is also needed. So I added a condition to check if the api exists or not. You are right about clipboardRead and clipboardWrite, so I didn’t do anything with those. Finally, for enterprise.deviceAttributes, it will add the enterprise api.

When permissions are removed, the api still exists in chrome, but calling a method throws an error. When using chromep, the promise is rejected. So I think the current behaviour is correct.

[fwextensions]

Nice!

One thing to note is that there’s at least one optional permission where this won’t work correctly. The webRequestBlocking permission gives access to the webRequest API, not a webRequestBlocking API. So requesting just the blocking permission would fail.

Also, the clipboardRead and clipboardWrite permissions don’t seem to map to an API (it’s not clear they’re even necessary, given the description).

I haven’t done a thorough comparison of the list of optional permissions and the objects they give access to on these two pages, but did note the above discrepancies:

https://developer.chrome.com/extensions/permissions https://developer.chrome.com/extensions/declare_permissions

This wouldn’t work for the clipboard permissions or for ones like enterprise.deviceAttributes (not sure if those can be optional), but one quick way of handling permissions like webRequestBlocking would be using an object to map the permission string to a different object name:

const permAliases = { webRequestBlocking: "webRequest" };
...
  perms.permissions.forEach(function(permission) {
    permission = permAliases[permission] || permission;
    approvedPerms[permission] = chrome[permission];
  });

I decided not to use optional permissions in the extension I’m working on, so I haven’t gotten back to testing this out, but just wanted to call out these edge cases.

Also, it might be nice to support removing permissions as well.