features/wallet/reveal_authorization library

Classes

WalletPassthroughRevealAuthorizer

The default: no host re-auth step. Correct for the reference app and any sealed-keychain host that gates reveal by the on-screen deliberate action alone. Resolves immediately.

WalletRevealAuthorizer

The host RE-AUTH seam for revealing the recovery phrase (#333).

Properties

walletRevealAuthorizerProvider → Provider<WalletRevealAuthorizer>

The host re-auth seam source. PRODUCTION default is the passthrough (no re-auth step); a host with a credential overrides this at the ProviderScope root, exactly as it overrides walletSendAuthorizerProvider. Tests inject a fake to assert the reveal is gated (passes → words shown; denied → no words).

final

Exceptions / Errors

WalletRevealReauthDenied

Thrown by a WalletRevealAuthorizer when the user cancels re-auth. The backup screen catches it BEFORE reading the words and silently returns to its pre-reveal state — the host's own prompt is the user-facing channel for the cancel, so the package shows no additional fault (mirrors WalletSpendAuthorizationDenied).