Enforce Android lifecycle and presentation security (#100)

crates/storage/tests/authentication_leases.rs

@@ -85,6 +85,28 @@ fn mobile_context_uses_injected_os_backend_clock_and_lifecycle_without_global_co
     authentication.lifecycle(MobileLifecycleEvent::Background)?;
     assert!(!authentication.state()?.unlocked());
     assert!(authentication.entry_editor(editor.id()).is_err());
+    for event in [
+        MobileLifecycleEvent::DeviceLocked,
+        MobileLifecycleEvent::MemoryPressure,
+        MobileLifecycleEvent::ProcessRecreated,
+    ] {
+        authentication.unlock_entry(
+            "email/personal",
+            Some(SecretBytes::new(
+                fixture.key("alice")?.passphrase.as_bytes().to_vec(),
+            )),
+        )?;
+        let editor = authentication.begin_entry_editor("email/personal")?;
+        clock.advance(Duration::from_secs(5));
+        assert_eq!(
+            authentication
+                .lifecycle(MobileLifecycleEvent::Foreground)?
+                .remaining_seconds(),
+            25
+        );
+        assert!(!authentication.lifecycle(event)?.unlocked());
+        assert!(authentication.entry_editor(editor.id()).is_err());
+    }
     let baseline_locks = backend.locks();
     drop(authentication);
     assert!(