feat: add fprintd fingerprint authentication via greetd multi-stage PAM (v0.6.0)

Fingerprint auth was missing because moongreet rejected multi-stage
auth_message sequences from greetd. With pam_fprintd.so in the PAM
stack, greetd sends non-secret prompts for fingerprint and secret
prompts for password — moongreet now handles both in a loop.

- Replace single-pass auth with multi-stage auth_message loop
- fprintd D-Bus probe (gio::DBusProxy) for UI feedback only
- Fingerprint label shown when device available and fingers enrolled
- 60s socket timeout when fingerprint available (pam_fprintd scan time)
- Config option: [appearance] fingerprint-enabled (default: true)
- Fix: password entry focus loss after auth error (grab_focus while
  widget was insensitive — now re-enable before grab_focus)

This commit is contained in:

nevaforget

2026-03-29 13:47:57 +02:00

parent 77b94a560d

commit a462b2cf06

10 changed files with 381 additions and 47 deletions

									
										src/main.rs
									
		+1
		
												View File
												
				@@ -2,6 +2,7 @@

				// ABOUTME: Sets up GTK Application, Layer Shell, CSS, and multi-monitor windows.

				mod config;

				mod fingerprint;

				mod greeter;

				mod i18n;

				mod ipc;