Add Ability to Delete All Saved Passwords

DuckDuckGo.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved

@@ -156,7 +156,7 @@
     {
       "identity" : "trackerradarkit",
       "kind" : "remoteSourceControl",
-      "location" : "https://github.com/duckduckgo/TrackerRadarKit.git",
+      "location" : "https://github.com/duckduckgo/TrackerRadarKit",
       "state" : {
         "revision" : "a6b7ba151d9dc6684484f3785293875ec01cc1ff",
         "version" : "1.2.2"

DuckDuckGo/Autofill/AutofillActionBuilder.swift

@@ -0,0 +1,45 @@
+//
+//  AutofillActionBuilder.swift
+//
+//  Copyright © 2024 DuckDuckGo. All rights reserved.
+//
+//  Licensed under the Apache License, Version 2.0 (the "License");
+//  you may not use this file except in compliance with the License.
+//  You may obtain a copy of the License at
+//
+//  http://www.apache.org/licenses/LICENSE-2.0
+//
+//  Unless required by applicable law or agreed to in writing, software
+//  distributed under the License is distributed on an "AS IS" BASIS,
+//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//  See the License for the specific language governing permissions and
+//  limitations under the License.
+//
+
+import BrowserServicesKit
+import Foundation
+
+/// Conforming types provide methods to build an `AutofillActionExecutor` and an `AutofillActionPresenter`
+protocol AutofillActionBuilder {
+    func buildExecutor() -> AutofillActionExecutor?
+    func buildPresenter() -> AutofillActionPresenter
+}
+
+extension AutofillActionBuilder {
+    func buildPresenter() -> AutofillActionPresenter {
+        DefaultAutofillActionPresenter()
+    }
+}
+
+/// Builds an `AutofillActionExecutor`
+struct AutofillDeleteAllPasswordsBuilder: AutofillActionBuilder {
+    @MainActor
+    func buildExecutor() -> AutofillActionExecutor? {
+        guard let secureVault = try? AutofillSecureVaultFactory.makeVault(errorReporter: SecureVaultErrorReporter.shared),
+        let syncService = NSApp.delegateTyped.syncService else { return nil }
+
+        return AutofillDeleteAllPasswordsExecutor(userAuthenticator: DeviceAuthenticator.shared,
+                                                  secureVault: secureVault,
+                                                  syncService: syncService)
+    }
+}

DuckDuckGo/Autofill/AutofillActionExecutor.swift

@@ -0,0 +1,77 @@
+//
+//  AutofillActionExecutor.swift
+//
+//  Copyright © 2024 DuckDuckGo. All rights reserved.
+//
+//  Licensed under the Apache License, Version 2.0 (the "License");
+//  you may not use this file except in compliance with the License.
+//  You may obtain a copy of the License at
+//
+//  http://www.apache.org/licenses/LICENSE-2.0
+//
+//  Unless required by applicable law or agreed to in writing, software
+//  distributed under the License is distributed on an "AS IS" BASIS,
+//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//  See the License for the specific language governing permissions and
+//  limitations under the License.
+//
+
+import Foundation
+import BrowserServicesKit
+import DDGSync
+import AppKit
+
+/// Conforming types provide an `execute` method which performs some action on autofill types (e.g delete all passwords)
+protocol AutofillActionExecutor {
+    init(userAuthenticator: UserAuthenticating, secureVault: any AutofillSecureVault, syncService: DDGSyncing)
+    /// NSAlert to display asking a user to confirm the action
+    var confirmationAlert: NSAlert { get }
+    /// NSAlert to display when the action is complete
+    var completionAlert: NSAlert { get }
+    /// Executes the action
+    func execute(_ onSuccess: (() -> Void)?)
+}
+
+/// Concrete `AutofillActionExecutor` for deletion of all autofill passwords
+struct AutofillDeleteAllPasswordsExecutor: AutofillActionExecutor {
+
+    var confirmationAlert: NSAlert {
+        let accounts = (try? secureVault.accounts()) ?? []
+        return NSAlert.deleteAllPasswordsConfirmationAlert(count: accounts.count, syncEnabled: syncEnabled)
+    }
+
+    var completionAlert: NSAlert {
+        let accounts = (try? secureVault.accounts()) ?? []
+        return NSAlert.deleteAllPasswordsCompletionAlert(count: accounts.count, syncEnabled: syncEnabled)
+    }
+
+    private var syncEnabled: Bool {
+        syncService.authState != .inactive
+    }
+
+    private var userAuthenticator: UserAuthenticating
+    private var secureVault: any AutofillSecureVault
+    private var syncService: DDGSyncing
+
+    init(userAuthenticator: UserAuthenticating, secureVault: any AutofillSecureVault, syncService: DDGSyncing) {
+        self.userAuthenticator = userAuthenticator
+        self.secureVault = secureVault
+        self.syncService = syncService
+    }
+
+    func execute(_ onSuccess: (() -> Void)? = nil) {
+        userAuthenticator.authenticateUser(reason: .deleteAllPasswords) { authenticationResult in
+            guard authenticationResult.authenticated else { return }
+
+            do {
+                try secureVault.deleteAllWebsiteCredentials()
+                syncService.scheduler.notifyDataChanged()
+                onSuccess?()
+            } catch {
+                Pixel.fire(.debug(event: .secureVaultError, error: error))
+            }
+
+            return
+        }
+    }
+}

DuckDuckGo/Autofill/AutofillActionPresenter.swift

@@ -0,0 +1,63 @@
+//
+//  AutofillActionPresenter.swift
+//
+//  Copyright © 2024 DuckDuckGo. All rights reserved.
+//
+//  Licensed under the Apache License, Version 2.0 (the "License");
+//  you may not use this file except in compliance with the License.
+//  You may obtain a copy of the License at
+//
+//  http://www.apache.org/licenses/LICENSE-2.0
+//
+//  Unless required by applicable law or agreed to in writing, software
+//  distributed under the License is distributed on an "AS IS" BASIS,
+//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//  See the License for the specific language governing permissions and
+//  limitations under the License.
+//
+
+import Foundation
+import AppKit
+
+/// Conforming types handles presentation of `NSAlert`s associated with an `AutofillActionExecutor`
+protocol AutofillActionPresenter {
+    func show(actionExecutor: AutofillActionExecutor, completion: @escaping () -> Void)
+}
+
+/// Handles presentation of an alert associated with an `AutofillActionExecutor`
+struct DefaultAutofillActionPresenter: AutofillActionPresenter {
+
+    @MainActor
+    func show(actionExecutor: AutofillActionExecutor, completion: @escaping  () -> Void) {
+        guard let window else { return }
+
+        let confirmationAlert = actionExecutor.confirmationAlert
+        let completionAlert = actionExecutor.completionAlert
+
+        confirmationAlert.beginSheetModal(for: window) { response in
+            switch response {
+            case .alertFirstButtonReturn:
+                actionExecutor.execute {
+                    completion()
+                    show(completionAlert)
+                }
+            default:
+                break
+            }
+        }
+    }
+}
+
+private extension DefaultAutofillActionPresenter {
+
+    @MainActor
+    func show(_ alert: NSAlert) {
+        guard let window else { return }
+        alert.beginSheetModal(for: window)
+    }
+
+    @MainActor
+    var window: NSWindow? {
+        WindowControllersManager.shared.lastKeyMainWindowController?.window
+    }
+}

DuckDuckGo/Common/Extensions/NSAlertExtension.swift

@@ -261,5 +261,4 @@ extension NSAlert {
             continuation.resume(returning: self.runModal())
         }
     }
-
 }

DuckDuckGo/DeviceAuthentication/DeviceAuthenticator.swift

@@ -40,6 +40,7 @@ final class DeviceAuthenticator: UserAuthenticating {
         case unlockLogins
         case exportLogins
         case syncSettings
+        case deleteAllPasswords
 
         var localizedDescription: String {
             switch self {
@@ -48,6 +49,7 @@ final class DeviceAuthenticator: UserAuthenticating {
             case .unlockLogins: return UserText.pmAutoLockPromptUnlockLogins
             case .exportLogins: return UserText.pmAutoLockPromptExportLogins
             case .syncSettings: return UserText.syncAutoLockPrompt
+            case .deleteAllPasswords: return UserText.deleteAllPasswordsPermissionText
             }
         }
     }
@@ -154,7 +156,8 @@ final class DeviceAuthenticator: UserAuthenticating {
     func authenticateUser(reason: AuthenticationReason, result: @escaping (DeviceAuthenticationResult) -> Void) {
         let needsAuthenticationForCreditCardsAutofill = reason == .autofillCreditCards && isCreditCardTimeIntervalExpired()
         let needsAuthenticationForSyncSettings = reason == .syncSettings && isSyncSettingsTimeIntervalExpired()
-        guard needsAuthenticationForCreditCardsAutofill || needsAuthenticationForSyncSettings || requiresAuthentication else {
+        let needsAuthenticationForDeleteAllPasswords = reason == .deleteAllPasswords
+        guard needsAuthenticationForCreditCardsAutofill || needsAuthenticationForSyncSettings || needsAuthenticationForDeleteAllPasswords || requiresAuthentication else {
             result(.success)
             return
         }