feat(fe): add attribute consent screen for explicit user approval

src/frontend/src/lib/components/utils/AuthorizationChannel.svelte

@@ -8,6 +8,10 @@
     INVALID_PARAMS_ERROR_CODE,
   } from "$lib/utils/transport/utils";
   import { authorizationStore } from "$lib/stores/authorization.store";
+  import {
+    resetIdleTimeout,
+    startIdleTimeout,
+  } from "$lib/stores/authorize-flow.store";
   import { z } from "zod";
   import FeaturedIcon from "$lib/components/ui/FeaturedIcon.svelte";
   import Button from "$lib/components/ui/Button.svelte";
@@ -45,13 +49,29 @@
 
   const authorizeChannel = (channel: Channel): Promise<void> =>
     new Promise<void>((resolve, reject) => {
+      let resolved = false;
+
+      // When any recognized request arrives, reset the idle timeout
+      // so the flow stays active.
+      channel.addEventListener("request", (request) => {
+        if (request.id === undefined) {
+          return;
+        }
+        if (
+          request.method === "icrc34_delegation" ||
+          request.method === "ii-icrc3-attributes"
+        ) {
+          resetIdleTimeout();
+        }
+      });
+
+      // Handle delegation requests
       channel.addEventListener("request", async (request) => {
         if (
           request.id === undefined ||
           request.method !== "icrc34_delegation" ||
           $authorizationStore !== undefined
         ) {
-          // Ignore if it's a different method, or we're already processing
           return;
         }
         const result = DelegationParamsCodec.safeParse(request.params);
@@ -78,9 +98,12 @@
             request.id,
             result.data,
           );
-          resolve();
+          if (!resolved) {
+            resolved = true;
+            resolve();
+          }
         } catch (error) {
-          console.error(error); // Log error to console
+          console.error(error);
           reject(
             new AuthorizeChannelError(
               $t`Unverified origin`,
@@ -89,6 +112,21 @@
           );
         }
       });
+
+      // Handle standalone attribute requests (resolve auth UI if not already)
+      channel.addEventListener("request", (request) => {
+        if (
+          request.id === undefined ||
+          request.method !== "ii-icrc3-attributes"
+        ) {
+          return;
+        }
+        authorizationStore.setOrigin(channel.origin);
+        if (!resolved) {
+          resolved = true;
+          resolve();
+        }
+      });
     });
 
   let authorizePromise = $state(
@@ -112,6 +150,10 @@
           // Don't authorize if we're only doing an initial handshake
           return;
         }
+        // Start the idle timeout after each response is sent.
+        channel.addEventListener("response", () => {
+          startIdleTimeout();
+        });
         // Replace promise when channel closes after it was established
         channel.addEventListener("close", () => {
           authorizePromise = Promise.reject(

src/frontend/src/lib/locales/de.po

@@ -163,6 +163,9 @@ msgstr "Methode auswählen"
 msgid "Choose method to continue"
 msgstr "Methode wählen, um fortzufahren"
 
+msgid "Choose which details you'd like to share"
+msgstr ""
+
 msgid "Clear all"
 msgstr "Alle löschen"
 
@@ -256,6 +259,9 @@ msgstr "Es wurde bestätigt, dass Dashlane inkompatibel ist."
 msgid "Default"
 msgstr "Standard"
 
+msgid "Deny All"
+msgstr ""
+
 msgid "Discoverable passkeys"
 msgstr "Auffindbare Passkeys"
 
@@ -277,6 +283,9 @@ msgstr "{name} bearbeiten"
 msgid "Edit account"
 msgstr "Konto bearbeiten"
 
+msgid "Email address"
+msgstr ""
+
 msgid "Enable multiple accounts"
 msgstr "Mehrere Konten aktivieren"
 
@@ -590,6 +599,9 @@ msgstr "Meine Identität"
 msgid "n/a"
 msgstr "k. A."
 
+msgid "Name"
+msgstr ""
+
 msgid "Name account"
 msgstr "Konto benennen"
 
@@ -767,6 +779,9 @@ msgstr "Zurück zur App"
 msgid "Return to application"
 msgstr "Zur Anwendung zurückkehren"
 
+msgid "Review Permissions"
+msgstr ""
+
 msgid "Right now"
 msgstr "Jetzt gerade"
 
@@ -1066,6 +1081,9 @@ msgstr "Nutzen Sie ein Gerät mit Ihrer Identität, um die URL zu scannen oder z
 msgid "Use existing identity"
 msgstr "Bestehende Identität verwenden"
 
+msgid "Verified email"
+msgstr ""
+
 msgid "Verify"
 msgstr "Überprüfen"
 

src/frontend/src/lib/locales/en.po

@@ -163,6 +163,9 @@ msgstr "Choose method"
 msgid "Choose method to continue"
 msgstr "Choose method to continue"
 
+msgid "Choose which details you'd like to share"
+msgstr "Choose which details you'd like to share"
+
 msgid "Clear all"
 msgstr "Clear all"
 
@@ -256,6 +259,9 @@ msgstr "Dashlane has been confirmed to be incompatible."
 msgid "Default"
 msgstr "Default"
 
+msgid "Deny All"
+msgstr "Deny All"
+
 msgid "Discoverable passkeys"
 msgstr "Discoverable passkeys"
 
@@ -277,6 +283,9 @@ msgstr "Edit {name}"
 msgid "Edit account"
 msgstr "Edit account"
 
+msgid "Email address"
+msgstr "Email address"
+
 msgid "Enable multiple accounts"
 msgstr "Enable multiple accounts"
 
@@ -590,6 +599,9 @@ msgstr "My identity"
 msgid "n/a"
 msgstr "n/a"
 
+msgid "Name"
+msgstr "Name"
+
 msgid "Name account"
 msgstr "Name account"
 
@@ -767,6 +779,9 @@ msgstr "Return to app"
 msgid "Return to application"
 msgstr "Return to application"
 
+msgid "Review Permissions"
+msgstr "Review Permissions"
+
 msgid "Right now"
 msgstr "Right now"
 
@@ -1066,6 +1081,9 @@ msgstr "Use a device that already holds your identity to scan or open the URL. T
 msgid "Use existing identity"
 msgstr "Use existing identity"
 
+msgid "Verified email"
+msgstr "Verified email"
+
 msgid "Verify"
 msgstr "Verify"
 

src/frontend/src/lib/locales/es.po

@@ -163,6 +163,9 @@ msgstr "Elige un método"
 msgid "Choose method to continue"
 msgstr "Elige un método para continuar"
 
+msgid "Choose which details you'd like to share"
+msgstr ""
+
 msgid "Clear all"
 msgstr "Borrar todo"
 
@@ -256,6 +259,9 @@ msgstr "Se ha confirmado que Dashlane es incompatible."
 msgid "Default"
 msgstr "Predeterminada"
 
+msgid "Deny All"
+msgstr ""
+
 msgid "Discoverable passkeys"
 msgstr "Passkeys detectables"
 
@@ -277,6 +283,9 @@ msgstr "Editar {name}"
 msgid "Edit account"
 msgstr "Editar cuenta"
 
+msgid "Email address"
+msgstr ""
+
 msgid "Enable multiple accounts"
 msgstr "Activar cuentas múltiples"
 
@@ -590,6 +599,9 @@ msgstr "Mi identidad"
 msgid "n/a"
 msgstr "n/d"
 
+msgid "Name"
+msgstr ""
+
 msgid "Name account"
 msgstr "Añade una cuenta"
 
@@ -767,6 +779,9 @@ msgstr "Volver a la app"
 msgid "Return to application"
 msgstr "Volver a la aplicación"
 
+msgid "Review Permissions"
+msgstr ""
+
 msgid "Right now"
 msgstr "Ahora mismo"
 
@@ -1066,6 +1081,9 @@ msgstr "Usa un dispositivo que ya tenga tu identidad para escanear o abrir la UR
 msgid "Use existing identity"
 msgstr "Usar identidad existente"
 
+msgid "Verified email"
+msgstr ""
+
 msgid "Verify"
 msgstr "Verificar"
 

src/frontend/src/lib/locales/fr.po

@@ -163,6 +163,9 @@ msgstr "Choisissez une méthode"
 msgid "Choose method to continue"
 msgstr "Choisissez une méthode pour continuer"
 
+msgid "Choose which details you'd like to share"
+msgstr ""
+
 msgid "Clear all"
 msgstr "Tout effacer"
 
@@ -256,6 +259,9 @@ msgstr "Il a été confirmé que Dashlane est incompatible."
 msgid "Default"
 msgstr "Par défaut"
 
+msgid "Deny All"
+msgstr ""
+
 msgid "Discoverable passkeys"
 msgstr "Passkeys découvrables"
 
@@ -277,6 +283,9 @@ msgstr "Modifier {name}"
 msgid "Edit account"
 msgstr "Modifier le compte"
 
+msgid "Email address"
+msgstr ""
+
 msgid "Enable multiple accounts"
 msgstr "Activer plusieurs comptes"
 
@@ -590,6 +599,9 @@ msgstr "Mon identité"
 msgid "n/a"
 msgstr "n/d"
 
+msgid "Name"
+msgstr ""
+
 msgid "Name account"
 msgstr "Nommez le compte"
 
@@ -767,6 +779,9 @@ msgstr "Retour à l’application"
 msgid "Return to application"
 msgstr "Retour à l’application"
 
+msgid "Review Permissions"
+msgstr ""
+
 msgid "Right now"
 msgstr "À l’instant"
 
@@ -1066,6 +1081,9 @@ msgstr "Utilisez un appareil qui contient déjà votre identité pour scanner ou
 msgid "Use existing identity"
 msgstr "Utiliser une identité existante"
 
+msgid "Verified email"
+msgstr ""
+
 msgid "Verify"
 msgstr "Vérifier"
 

src/frontend/src/lib/locales/id.po

@@ -163,6 +163,9 @@ msgstr "Pilih metode"
 msgid "Choose method to continue"
 msgstr "Pilih metode untuk melanjutkan"
 
+msgid "Choose which details you'd like to share"
+msgstr ""
+
 msgid "Clear all"
 msgstr "Hapus semua"
 
@@ -256,6 +259,9 @@ msgstr "Dashlane telah dikonfirmasi tidak kompatibel."
 msgid "Default"
 msgstr "Default"
 
+msgid "Deny All"
+msgstr ""
+
 msgid "Discoverable passkeys"
 msgstr "Passkey yang dapat ditemukan"
 
@@ -277,6 +283,9 @@ msgstr "Edit {name}"
 msgid "Edit account"
 msgstr "Edit akun"
 
+msgid "Email address"
+msgstr ""
+
 msgid "Enable multiple accounts"
 msgstr "Aktifkan banyak akun"
 
@@ -590,6 +599,9 @@ msgstr "Identitas saya"
 msgid "n/a"
 msgstr "t/a"
 
+msgid "Name"
+msgstr ""
+
 msgid "Name account"
 msgstr "Beri nama akun"
 
@@ -767,6 +779,9 @@ msgstr "Kembali ke aplikasi"
 msgid "Return to application"
 msgstr "Kembali ke aplikasi"
 
+msgid "Review Permissions"
+msgstr ""
+
 msgid "Right now"
 msgstr "Saat ini"
 
@@ -1066,6 +1081,9 @@ msgstr "Gunakan perangkat yang sudah memiliki identitas Anda untuk memindai atau
 msgid "Use existing identity"
 msgstr "Gunakan identitas yang ada"
 
+msgid "Verified email"
+msgstr ""
+
 msgid "Verify"
 msgstr "Verifikasi"