ciphermask/app/scripts/controllers/permissions/background-api.js

import {
  CaveatTypes,
  RestrictedMethods,
} from '../../../../shared/constants/permissions';

export function getPermissionBackgroundApiMethods(permissionController) {
  return {
    addPermittedAccount: (origin, account) => {
      const existing = permissionController.getCaveat(
        origin,
        RestrictedMethods.eth_accounts,
        CaveatTypes.restrictReturnedAccounts,
      );

      if (existing.value.includes(account)) {
        throw new Error(
          `eth_accounts permission for origin "${origin}" already permits account "${account}".`,
        );
      }

      permissionController.updateCaveat(
        origin,
        RestrictedMethods.eth_accounts,
        CaveatTypes.restrictReturnedAccounts,
        [...existing.value, account],
      );
    },

    removePermittedAccount: (origin, account) => {
      const existing = permissionController.getCaveat(
        origin,
        RestrictedMethods.eth_accounts,
        CaveatTypes.restrictReturnedAccounts,
      );

      if (!existing.value.includes(account)) {
        throw new Error(
          `eth_accounts permission for origin "${origin}" already does not permit account "${account}".`,
        );
      }

      const remainingAccounts = existing.value.filter(
        (existingAccount) => existingAccount !== account,
      );

      if (remainingAccounts.length === 0) {
        permissionController.revokePermission(
          origin,
          RestrictedMethods.eth_accounts,
        );
      } else {
        permissionController.updateCaveat(
          origin,
          RestrictedMethods.eth_accounts,
          CaveatTypes.restrictReturnedAccounts,
          remainingAccounts,
        );
      }
    },

    requestAccountsPermissionWithId: async (origin) => {
      const [, { id }] = await permissionController.requestPermissions(
        { origin },
        {
          eth_accounts: {},
        },
      );
      return id;
    },
  };
}