The Raydrim Dev Vault

import { useState, useCallback } from 'react';
import * as LocalAuthentication from 'expo-local-authentication';
import * as SecureStore from 'expo-secure-store';

export function useBiometricAuth(serviceKey: string = 'raydrim_auth_token') {
  const [isAuthenticating, setIsAuthenticating] = useState(false);
  const [authError, setAuthError] = useState<string | null>(null);

  const authenticateAndGetToken = useCallback(async (): Promise<string | null> => {
    setIsAuthenticating(true);
    setAuthError(null);

    try {
      const hasHardware = await LocalAuthentication.hasHardwareAsync();
      const isEnrolled = await LocalAuthentication.isEnrolledAsync();

      if (!hasHardware || !isEnrolled) {
        throw new Error('Biometric authentication is not supported or enrolled on this device.');
      }

      const result = await LocalAuthentication.authenticateAsync({
        promptMessage: 'Authenticate to access your account',
        cancelLabel: 'Cancel',
        fallbackLabel: 'Use Device Passcode',
        disableDeviceFallback: false,
      });

      if (!result.success) {
        setAuthError(result.error || 'Authentication canceled');
        return null;
      }

      const secureToken = await SecureStore.getItemAsync(serviceKey);
      return secureToken;
    } catch (err: any) {
      setAuthError(err.message || 'Biometric authentication failed');
      return null;
    } finally {
      setIsAuthenticating(false);
    }
  }, [serviceKey]);

  return { authenticateAndGetToken, isAuthenticating, authError };
}