SuperApp:Authorization

Prerequisites

• When initializing the SDK, the app developer must set needAuthFromApp to true in the EMASMiniAppInitConfig or MiniAppInitConfig class.

Before you begin

• When a miniapp calls an API that requires device information, such as WVLocation.getLocation or WVVideo.chooseVideo, the host app must display an authorization prompt for the user to grant permission. Miniapp developers can call wv.getSetting to check the miniapp's current authorization status.

• To use APIs that require authorization, the user must grant permission at two levels: to the miniapp within the host app, and to the host app at the operating system level.

• These two authorization levels are independent. If a user has granted the miniapp permission but the host app has not obtained the corresponding system permission, the container automatically triggers a system prompt when the API is called. The miniapp can also call the WVUIDialog.showAuthGuide API to guide the user to the system settings page to grant the permission to the host app.

Miniapp authorization logic

If the user has not yet authorized the miniapp, you must first call wv.authorize before calling an API that requires permission. The host app will then display an authorization prompt to the user:

• If the user agrees, the miniapp can then call the device information API. Subsequent calls will not trigger another authorization prompt.

• If the user refuses, the fail callback is triggered immediately, indicating that the authorization was denied. Subsequent calls to the API will display the authorization prompt again.

Miniapp developers should first call wv.getSetting to check the user authorization status before calling an API that requires it. If the permission has not been granted, call wv.authorize to request it, and then call the target API.

System-level permission logic

If a required permission is disabled in the operating system or has not been granted to the host app, the API call will fail even if the user has granted permission to the miniapp. Typically, the first time the miniapp calls the API, the host app also requests the permission from the system, displaying a prompt. If the user denies the request and selects 'Don’t ask again', subsequent calls may trigger the fail callback directly. In this case, miniapp developers can call WVUIDialog.showAuthGuide to open the system's permission settings page and guide the user to enable the permission manually.