From 9933fc90e0373c963311b3cfc7a76a5c7c17d59b Mon Sep 17 00:00:00 2001
From: Marcus Kida <marcus.kida@bearologics.com>
Date: Mon, 19 Jan 2026 10:54:25 +0100
Subject: [PATCH] Fix auth

---
 android/app/src/main/AndroidManifest.xml |  1 +
 lib/services/authentication_manager.dart | 33 +++++++++++++++---------
 macos/Runner/DebugProfile.entitlements   |  6 +++++
 macos/Runner/Release.entitlements        |  6 +++++
 4 files changed, 34 insertions(+), 12 deletions(-)

diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
index 58ae3a9..117ee5d 100644
--- a/android/app/src/main/AndroidManifest.xml
+++ b/android/app/src/main/AndroidManifest.xml
@@ -1,4 +1,5 @@
 <manifest xmlns:android="http://schemas.android.com/apk/res/android">
+    <uses-permission android:name="android.permission.INTERNET"/>
     <application
         android:label="bmmanager"
         android:name="${applicationName}"
diff --git a/lib/services/authentication_manager.dart b/lib/services/authentication_manager.dart
index 5a0367e..81fcf9d 100644
--- a/lib/services/authentication_manager.dart
+++ b/lib/services/authentication_manager.dart
@@ -9,14 +9,27 @@ import 'brandmeister_client.dart';
 class AuthenticationManager extends ChangeNotifier {
   static const String _tokenKey = 'apiToken';
 
-  final FlutterSecureStorage _storage = const FlutterSecureStorage(
-    aOptions: AndroidOptions(
-      encryptedSharedPreferences: true,
-    ),
-    iOptions: IOSOptions(
-      accessibility: KeychainAccessibility.first_unlock,
-    ),
-  );
+  late final FlutterSecureStorage _storage;
+
+  AuthenticationManager() {
+    _initStorage();
+    _loadToken();
+  }
+
+  void _initStorage() {
+    _storage = const FlutterSecureStorage(
+      aOptions: AndroidOptions(
+        encryptedSharedPreferences: true,
+      ),
+      iOptions: IOSOptions(
+        accessibility: KeychainAccessibility.first_unlock,
+      ),
+      webOptions: WebOptions(
+        dbName: 'bmmanager',
+        publicKey: 'bmmanager_public_key',
+      ),
+    );
+  }
 
   bool _isAuthenticated = false;
   String _apiToken = '';
@@ -27,10 +40,6 @@ class AuthenticationManager extends ChangeNotifier {
   String get apiToken => _apiToken;
   UserInfo? get userInfo => _userInfo;
 
-  AuthenticationManager() {
-    _loadToken();
-  }
-
   Future<void> _loadToken() async {
     try {
       final token = await _storage.read(key: _tokenKey);
diff --git a/macos/Runner/DebugProfile.entitlements b/macos/Runner/DebugProfile.entitlements
index dddb8a3..2cbb7f5 100644
--- a/macos/Runner/DebugProfile.entitlements
+++ b/macos/Runner/DebugProfile.entitlements
@@ -8,5 +8,11 @@
 	<true/>
 	<key>com.apple.security.network.server</key>
 	<true/>
+	<key>com.apple.security.network.client</key>
+	<true/>
+	<key>com.apple.security.application-groups</key>
+	<array>
+		<string>$(TeamIdentifierPrefix)io.kida.bmmanager</string>
+	</array>
 </dict>
 </plist>
diff --git a/macos/Runner/Release.entitlements b/macos/Runner/Release.entitlements
index 852fa1a..a532b08 100644
--- a/macos/Runner/Release.entitlements
+++ b/macos/Runner/Release.entitlements
@@ -4,5 +4,11 @@
 <dict>
 	<key>com.apple.security.app-sandbox</key>
 	<true/>
+	<key>com.apple.security.network.client</key>
+	<true/>
+	<key>com.apple.security.application-groups</key>
+	<array>
+		<string>$(TeamIdentifierPrefix)io.kida.bmmanager</string>
+	</array>
 </dict>
 </plist>