diff --git a/CMakeLists.txt b/CMakeLists.txt index 0f0271a..7e3e71d 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -26,6 +26,7 @@ add_subdirectory(bioauth) add_subdirectory(bioauth-bin) add_subdirectory(pam-biometric) add_subdirectory(polkit-agent) +add_subdirectory(uniauth-backend) add_subdirectory(images) add_dependencies(bioauth BioAuth) diff --git a/bioauth-bin/i18n_ts/zh_CN.ts b/bioauth-bin/i18n_ts/zh_CN.ts index 59e3f5d..1738a34 100644 --- a/bioauth-bin/i18n_ts/zh_CN.ts +++ b/bioauth-bin/i18n_ts/zh_CN.ts @@ -91,7 +91,12 @@ 按Q或者Esc取消 - + + BIOMETRIC AUTHENTICATION IS CLOSED + 生物识别认证已关闭 + + + AUTHENTICATION SUCCESS 认证成功 diff --git a/bioauth-bin/src/main.cpp b/bioauth-bin/src/main.cpp index b0c7855..2bd5322 100644 --- a/bioauth-bin/src/main.cpp +++ b/bioauth-bin/src/main.cpp @@ -237,14 +237,15 @@ int main(int argc, char *argv[]) exit(BIO_ERROR); BioDevices bioDevices(true); + bioDevices.setUId(uid); int maxFailedTimes = bioDevices.getFailedTimes(); - int failedTimes = 0; DeviceInfoPtr deviceInfo = bioDevices.getDefaultDevice(uid); bool isHiddenSwitchButton = bioDevices.GetHiddenSwitchButton(); - if(!deviceInfo) + if(!deviceInfo){ // 只检查默认设备，不再使用第一个设备 exit(BIO_ERROR); + } if(bioDevices.getFeatureCount(uid)<1) - exit(BIO_ERROR); + exit(BIO_ERROR); showMessage(QObject::tr("BIOMETRIC AUTHENTICATION"), START); if(!isHiddenSwitchButton) @@ -259,6 +260,11 @@ int main(int argc, char *argv[]) QObject::connect(&bioAuth, &BioAuth::authComplete, &a, [&](uid_t uid_, int result, int retErrNo){ Q_UNUSED(retErrNo); watcher.stop(); + bool isBioEnable = bioDevices.GetBioAuthEnable(uid_); + if(!isBioEnable){ + showMessage(QObject::tr("BIOMETRIC AUTHENTICATION IS CLOSED"), RESULT); + exit(BIO_IGNORE); + } if(result && uid == uid_) { showMessage(QObject::tr("AUTHENTICATION SUCCESS"), RESULT); exit(BIO_SUCCESS); @@ -277,7 +283,7 @@ int main(int argc, char *argv[]) showMessage(QObject::tr("Failed to verify %1, you still have %2 verification opportunities").arg(bioDevices.bioTypeToString_tr(deviceInfo->biotype)).arg(maxFailedTimes-m_failedTimes[deviceInfo->device_id]),RESULT); }else{ showMessage(QObject::tr("Unable to verify %1, please enter password.").arg(bioDevices.bioTypeToString_tr(deviceInfo->biotype)),RESULT); - exit(BIO_IGNORE); + exit(BIO_IGNORE); } Option option = showOption(bioDevices.count() > 1); switch(option) { diff --git a/bioauth/CMakeLists.txt b/bioauth/CMakeLists.txt index b6d7215..076db39 100644 --- a/bioauth/CMakeLists.txt +++ b/bioauth/CMakeLists.txt @@ -6,6 +6,7 @@ qt5_wrap_ui(BioAuthWidgets_SRC qt5_wrap_cpp(BioAuth_SRC include/bioauth.h include/biodevices.h + include/uniauthservice.h ) qt5_wrap_cpp(BioAuthWidgets_SRC include/bioauthwidget.h @@ -19,6 +20,7 @@ set(BioAuth_SRC src/bioauth.cpp src/biodevices.cpp src/biotypes.cpp + src/uniauthservice.cpp ) set(BioAuthWidgets_SRC diff --git a/bioauth/i18n_ts/bo_CN.ts b/bioauth/i18n_ts/bo_CN.ts index 81c1ae3..42b8bca 100644 --- a/bioauth/i18n_ts/bo_CN.ts +++ b/bioauth/i18n_ts/bo_CN.ts @@ -29,15 +29,15 @@ %1 too many unsuccessful attempts,please enter password. - + %1ལ་ལེགས་འགྲུབ་མ་བྱུང་བའི་ཚོད་ལྟ་མང་དྲགས་པས་གསང་གྲངས་ནང་འཇུག་གནང་རོགས། %1 authentication failure,there are still %2 remaining opportunities - + %1 བདེན་དཔང་ར་སྤྲོད་བྱེད་མ་ཐུབ་ན། ད་དུང་%2ལྷག་པའི་གོ་སྐབས་ཡོད། Please use wechat to scan the code - + ཁྱེད་ཀྱིས་འཕྲིན་ཕྲན་སྤྱད་དེ་ཚབ་རྟགས་ལ་ཞིབ་བཤེར་བྱེད་རོགས། @@ -52,7 +52,7 @@ biometric - 生物特征 + སྐྱེ་དངོས་རིག་པ། VoicePrint @@ -60,11 +60,11 @@ Unplugging of %1 device detected - 检测到%1设备拔出 + ཞིབ་དཔྱད་ཚད་ལེན་བྱས་པའི་%1སྒྲིག་ཆས་ཀྱི་ཁ་པར་རྒྱག་པ། %1 device insertion detected - 检测到%1设备插入 + %1སྒྲིག་ཆས་ནང་དུ་བཅུག་ནས་ཞིབ་དཔྱད་ཚད་ལེན་བྱས་པ་རེད། FingerPrint @@ -76,11 +76,11 @@ ukui-biometric-manager - + སྐྱེ་དངོས་ཁྱབ་རྟགས་དོ་དམ་ལག་ཆ། QRCode - + ཨང་ཀི་ཕྱག་པ། @@ -106,7 +106,7 @@ LoginOptionsWidget Login Options - + ཐོ་འགོད་ཀྱི་བསལ་འདེམས་ཀྱི་དབང་ཆ། diff --git a/bioauth/include/biodevices.h b/bioauth/include/biodevices.h index 2e21cd1..2aa8098 100644 --- a/bioauth/include/biodevices.h +++ b/bioauth/include/biodevices.h @@ -22,6 +22,7 @@ #include #include #include "biotypes.h" +#include "uniauthservice.h" class QDBusInterface; @@ -39,6 +40,7 @@ public: explicit BioDevices(bool isIgnoreQrCode = false, QObject *parent = nullptr); int count(); + void setUId(int nUId); QMap> getAllDevices(); QMap> getUserDevices(int uid); QList getDevices(int type); @@ -59,6 +61,7 @@ public: bool GetHiddenSwitchButton(); bool GetQRCodeEnable(); bool GetBioAuthEnable(); + QStringList getAllDefDevices(); /** * @brief UpdateStatus 获取更新的设备状态 * @param drvid 驱动id @@ -66,6 +69,7 @@ public: * int devStatus, int opsStatus, notifyMessageId, ...> */ StatusReslut UpdateStatus(int drvid); + bool GetBioAuthEnable(uid_t uid); private: void connectToService(); @@ -83,6 +87,9 @@ private: bool isShowHotPlug; bool useFirstDevice; bool m_isIgnoreQrCode = false; + UniAuthService *m_uniAuthService = nullptr; + int m_nUId = -1; + QList m_listPriority; }; diff --git a/bioauth/include/biotypes.h b/bioauth/include/biotypes.h index f3ccca2..862d0ee 100644 --- a/bioauth/include/biotypes.h +++ b/bioauth/include/biotypes.h @@ -62,6 +62,104 @@ enum DBusResult { DBUS_RESULT_PERMISSIONDENIED }; +/** + * @brief 识别操作（Identify）的ops状态 + */ +/* 定义操作类型 */ +typedef enum { + OPS_TYPE_COMM = 0, + OPS_TYPE_OPEN, + OPS_TYPE_ENROLL, + OPS_TYPE_VERIFY, + OPS_TYPE_IDENTIFY, + OPS_TYPE_CAPTURE, + OPS_TYPE_SEARCH, + OPS_TYPE_CLEAN, + OPS_TYPE_GET_FLIST, + OPS_TYPE_RENAME, + OPS_TYPE_CLOSE, +}BioOpsType; + +/* + * 定义各种操作结果 + */ +typedef enum { + OPS_COMM_SUCCESS = OPS_TYPE_COMM * 100, /** 空闲状态 **/ + OPS_COMM_FAIL, /** 操作失败 **/ + OPS_COMM_NO_MATCH = OPS_COMM_FAIL, /** 不匹配 **/ + OPS_COMM_ERROR, /** 通用操作错误 **/ + OPS_COMM_STOP_BY_USER, /** 用户取消 **/ + OPS_COMM_TIMEOUT, /** 操作超时 **/ + OPS_COMM_OUT_OF_MEM, /** 无法分配内存 **/ + OPS_COMM_MAX, + + OPS_OPEN_SUCCESS = OPS_TYPE_OPEN * 100, /** 打开设备完成 **/ + OPS_OPEN_FAIL, /** 打开设备失败 **/ + OPS_OPEN_ERROR, /** 打开设备遇到错误 **/ + OPS_OPEN_MAX, + + OPS_ENROLL_SUCCESS = OPS_TYPE_ENROLL * 100, /** 录入信息成功 **/ + OPS_ENROLL_FAIL, /** 录入失败 **/ + OPS_ENROLL_ERROR, /** 录入过程中遇到错误 **/ + OPS_ENROLL_STOP_BY_USER, /** 录入被用户中断 **/ + OPS_ENROLL_TIMEOUT, /** 操作超时 **/ + OPS_ENROLL_MAX, + + OPS_VERIFY_MATCH = OPS_TYPE_VERIFY * 100, /** 认证匹配 **/ + OPS_VERIFY_NO_MATCH, /** 认证不匹配 **/ + OPS_VERIFY_ERROR, /** 认证过程中遇到错误 **/ + OPS_VERIFY_STOP_BY_USER, /** 认证被用户中断 **/ + OPS_VERIFY_TIMEOUT, /** 操作超时 **/ + OPS_VERIFY_MAX, + + OPS_IDENTIFY_MATCH = OPS_TYPE_IDENTIFY * 100, /** 识别到指定特征 **/ + OPS_IDENTIFY_NO_MATCH, /** 未识别出指定特征 **/ + OPS_IDENTIFY_ERROR, /** 识别过程中遇到错误 **/ + OPS_IDENTIFY_STOP_BY_USER, /** 识别被用户中断 **/ + OPS_IDENTIFY_TIMEOUT, /** 操作超时 **/ + OPS_IDENTIFY_MAX, + + OPS_CAPTURE_SUCCESS = OPS_TYPE_CAPTURE * 100, /** 捕获成功 **/ + OPS_CAPTURE_FAIL, /** 捕获失败 **/ + OPS_CAPTURE_ERROR, /** 捕获过程中遇到错误 **/ + OPS_CAPTURE_STOP_BY_USER, /** 捕获被用户中断 **/ + OPS_CAPTURE_TIMEOUT, /** 操作超时 **/ + OPS_CAPTURE_MAX, + + OPS_SEARCH_MATCH = OPS_TYPE_SEARCH * 100, /** 搜索到指定特征 **/ + OPS_SEARCH_NO_MATCH, /** 未搜索到指定特征 **/ + OPS_SEARCH_ERROR, /** 搜索过程中遇到错误 **/ + OPS_SEARCH_STOP_BY_USER, /** 搜索被用户中断 **/ + OPS_SEARCH_TIMEOUT, /** 操作超时 **/ + OPS_SEARCH_MAX, + + OPS_CLEAN_SUCCESS = OPS_TYPE_CLEAN * 100, /** 清理特征成功 **/ + OPS_CLEAN_FAIL, /** 清理失败 **/ + OPS_CLEAN_ERROR, /** 清理过程中遇到错误 **/ + OPS_CLEAN_STOP_BY_USER, /** 清理被用户中断 **/ + OPS_CLEAN_TIMEOUT, /** 操作超时 **/ + OPS_CLEAN_MAX, + + OPS_GET_FLIST_SUCCESS = OPS_TYPE_GET_FLIST * 100, /** 获取特征列表完成 **/ + OPS_GET_FLIST_FAIL, /** 获取特征列表失败 **/ + OPS_GET_FLIST_ERROR, /** 获取特征列表过程中遇到错误 **/ + OPS_GET_FLIST_STOP_BY_USER, /** 获取特征列表被用户中断 **/ + OPS_GET_FLIST_TIMEOUT, /** 获取特征列表超时 **/ + OPS_GET_FLIST_MAX, + + OPS_RENAME_SUCCESS = OPS_TYPE_RENAME * 100, /** 重命名特征完成 **/ + OPS_RENAME_FAIL, /** 重命名特征失败 **/ + OPS_RENAME_ERROR, /** 重命名特征过程中遇到错误 **/ + OPS_RENAME_STOP_BY_USER, /** 重命名特征被用户中断 **/ + OPS_RENAME_TIMEOUT, /** 重命名特征超时 **/ + OPS_RENAME_MAX, + + OPS_CLOSE_SUCCESS = OPS_TYPE_CLOSE * 100, /** 关闭设备完成 **/ + OPS_CLOSE_FAIL, /** 关闭设备失败 **/ + OPS_CLOSE_ERROR, /** 关闭设备过程中遇到错误 **/ + OPS_CLOSE_MAX, +}OpsResult; + /** * @brief UpdateStauts调用返回的结果 */ diff --git a/bioauth/include/loginoptionswidget.h b/bioauth/include/loginoptionswidget.h index 4276b22..c5c8584 100644 --- a/bioauth/include/loginoptionswidget.h +++ b/bioauth/include/loginoptionswidget.h @@ -45,6 +45,7 @@ public: DeviceInfoPtr findDeviceByName(const QString &name); void setDeviceDisable(int nDevId, bool bDisable = true); bool isDeviceDisable(int nDevId); + void lockStatusChanged(bool locked); /** * @brief 获取默认设备 @@ -71,6 +72,7 @@ public: bool isAuthenticating() { return m_isInAuth; } + QPixmap loadSvg(QString path, QString color, int size); public slots: void readDevicesInfo(); @@ -99,11 +101,10 @@ private: void clearOptionButtons(); void updateOptionButtons(); void startAuth_(); - bool getAuthDouble(); QPixmap PixmapToRound(const QPixmap &src, int radius); QPixmap scaledPixmap(int width, int height, QString url); - QPixmap loadSvg(QString path, QString color, int size); QPixmap drawSymbolicColoredPixmap(QPixmap &source, QString cgColor); + void updatePixmap(); private: BioAuth *m_biomericProxy = nullptr; @@ -129,10 +130,14 @@ private: QMap m_mapOptBtns; QWidget *m_widgetImage = nullptr; QLabel *m_labelFace = nullptr; + QLabel *m_labelFaceLoad = nullptr; QLabel *m_labelQRCode = nullptr; // 二维码图标 QLabel *m_labelQRCodeMsg = nullptr; // 二维码状态消息提示 QLabel *m_labelQRCodeTip = nullptr; QMap> m_mapDisableDev; + bool is_Lock = false; + QPixmap m_waitingPixmap; + QTimer *w_timer; }; #endif // LOGINOPTIONSWIDGET_H diff --git a/bioauth/include/uniauthservice.h b/bioauth/include/uniauthservice.h new file mode 100644 index 0000000..9bbe5b4 --- /dev/null +++ b/bioauth/include/uniauthservice.h @@ -0,0 +1,78 @@ +/* + * Copyright (C) 2022 Tianjin KYLIN Information Technology Co., Ltd. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3, or (at your option) + * any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see . + * +**/ +#ifndef UNIAUTH_SERVICE_H +#define UNIAUTH_SERVICE_H + +#include +#include + +enum authEnableType { + ENABLETYPE_BIO, // 全局总使能 + ENABLETYPE_SAVER, // 锁屏 + ENABLETYPE_GREETER, // 登录 + ENABLETYPE_POLKIT, // 授权 + ENABLETYPE_SU, // 暂保留 + ENABLETYPE_SUDO, // 暂保留 + ENABLETYPE_LOGIN, // 暂保留 +}; + +class UniAuthService : public QDBusAbstractInterface +{ + Q_OBJECT +public: + explicit UniAuthService(QObject *parent = nullptr); + +public Q_SLOTS: + // 设置默认设备 + void setDefaultDevice(int bioDevType, QString deviceName); + // 获取默认设备 + QString getDefaultDevice(QString userName, int bioDevType); + // 获取所有默认设备 + QStringList getAllDefaultDevice(QString userName); + //生物特征开关接口 + bool getBioAuthStatus(QString userName, int bioAuthType); + void setBioAuthStatus(int bioAuthType, bool status); + // 获取最大失败次数 + int getMaxFailedTimes(); + // 获取是否使能微信扫码登录 + bool getQRCodeEnable(); + // 获取是否双认证 + bool getDoubleAuth(); + // 获取用户绑定 + bool getUserBind(); + // 获取是否在控制面板显示 + bool getIsShownInControlCenter(); + // 获取是否使用第一个设备 + bool getUseFirstDevice(); + // 获取是否隐藏切换按钮 + bool getHiddenSwitchButton(); + +public: + bool isActivatable(); + +Q_SIGNALS: + //默认设备改变 + void defaultDeviceChanged(QString userName, int bioDevType, QString deviceName); + //开关状态改变 + void bioAuthStatusChanged(QString userName, int type, bool status); + +private: + bool m_isActivatable; +}; + +#endif // UNIAUTH_SERVICE_H diff --git a/bioauth/src/biodevices.cpp b/bioauth/src/biodevices.cpp index 0f2c230..92fb32e 100644 --- a/bioauth/src/biodevices.cpp +++ b/bioauth/src/biodevices.cpp @@ -29,14 +29,26 @@ BioDevices::BioDevices(bool isIgnoreQrCode, QObject *parent) : QObject(parent), + m_uniAuthService(new UniAuthService(this)), isShowHotPlug(false), useFirstDevice(false), m_isIgnoreQrCode(isIgnoreQrCode) { connectToService(); - getDevicesList(); - useFirstDevice = getUseFirstDevice(); + m_listPriority.clear(); + m_listPriority.push_back(BIOTYPE_FACE); + m_listPriority.push_back(BIOTYPE_FINGERPRINT); + m_listPriority.push_back(BIOTYPE_IRIS); + m_listPriority.push_back(BIOTYPE_VOICEPRINT); + m_listPriority.push_back(BIOTYPE_FINGERVEIN); + m_listPriority.push_back(REMOTE_QRCODE_TYPE); +} + +void BioDevices::setUId(int nUId) +{ + m_nUId = nUId; + getDevicesList(); } void BioDevices::connectToService() @@ -92,6 +104,31 @@ void BioDevices::onUSBDeviceHotPlug(int deviceId, int action, int devNumNow) } } +bool BioDevices::GetBioAuthEnable(uid_t uid) +{ + if (m_uniAuthService && m_uniAuthService->isActivatable()) { + struct passwd *pwd = getpwuid(uid); + if (pwd) { + return m_uniAuthService->getBioAuthStatus(pwd->pw_name, ENABLETYPE_BIO); + } else { + return false; + } + } else { + QString configPath = "/etc/biometric-auth/ukui-biometric.conf"; + QSettings settings(configPath, QSettings::IniFormat); + qDebug() << "configure path: " << settings.fileName(); + + if(settings.allKeys().contains("EnableAuth")){ + return settings.value("EnableAuth").toBool(); + }else{ + QSettings sysSettings(GET_STR(CONFIG_FILE), QSettings::IniFormat); + if(sysSettings.contains("EnableAuth")) + return sysSettings.value("EnableAuth").toBool(); + else + return true; + } + } +} /** * 获取设备列表 @@ -237,48 +274,128 @@ void BioDevices::setIsShowHotPlug(bool isShow) bool BioDevices::getUseFirstDevice() { - QSettings settings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); - return settings.value("UseFirstDevice").toBool(); + if (m_uniAuthService && m_uniAuthService->isActivatable()) { + return m_uniAuthService->getUseFirstDevice(); + } else { + QSettings settings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); + return settings.value("UseFirstDevice").toBool(); + } } bool BioDevices::GetHiddenSwitchButton() { - QSettings sysSettings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); - if(sysSettings.contains("HiddenSwitchButton")) - return sysSettings.value("HiddenSwitchButton").toBool(); - else - return false; + if (m_uniAuthService && m_uniAuthService->isActivatable()) { + return m_uniAuthService->getHiddenSwitchButton(); + } else { + QSettings sysSettings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); + if(sysSettings.contains("HiddenSwitchButton")) + return sysSettings.value("HiddenSwitchButton").toBool(); + else + return false; + } } int BioDevices::getFailedTimes() { - QSettings sysSettings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); - if(sysSettings.contains("MaxFailedTimes")) - return sysSettings.value("MaxFailedTimes").toInt(); - else - return 3; + if (m_uniAuthService && m_uniAuthService->isActivatable()) { + return m_uniAuthService->getMaxFailedTimes(); + } else { + QSettings sysSettings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); + if(sysSettings.contains("MaxFailedTimes")) + return sysSettings.value("MaxFailedTimes").toInt(); + else + return 3; + } } bool BioDevices::GetQRCodeEnable() { - bool isEnable = false; - QSettings sysSettings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); - sysSettings.beginGroup("Functions"); - if (sysSettings.allKeys().contains("EnableQRCode")) { - isEnable = sysSettings.value("EnableQRCode").toBool(); + if (m_uniAuthService && m_uniAuthService->isActivatable()) { + return m_uniAuthService->getQRCodeEnable(); + } else { + bool isEnable = false; + QSettings sysSettings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); + sysSettings.beginGroup("Functions"); + if (sysSettings.allKeys().contains("EnableQRCode")) { + isEnable = sysSettings.value("EnableQRCode").toBool(); + } + sysSettings.endGroup(); + return isEnable; } - sysSettings.endGroup(); - return isEnable; } +/** + * ukui-greeter 1 + * ukui-screensaver 1<<1 + * ukui-polkit 1<<2 + * sudo 1<<3 + * su 1<<4 + * login 1<<5 + **/ bool BioDevices::GetBioAuthEnable() { - bool isEnable = false; - QSettings sysSettings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); - if (sysSettings.allKeys().contains("EnableAuth")) { - isEnable = sysSettings.value("EnableAuth").toBool(); + if (m_uniAuthService && m_uniAuthService->isActivatable()) { + bool isEnable = false; + struct passwd *pwd = getpwuid(m_nUId); + if (pwd) { + isEnable = m_uniAuthService->getBioAuthStatus(pwd->pw_name, ENABLETYPE_BIO); + } + if (isEnable && !isShowHotPlug) { + if(qAppName() == "polkit-ukui-authentication-agent-1") //获取polkit开关是否打开 + isEnable = m_uniAuthService->getBioAuthStatus(pwd->pw_name, ENABLETYPE_POLKIT); + if(qAppName() == "bioauth"){ //获取父进程名称为sudo，su，或者login + int ppid = getppid(); //获取父进程pid + QString filename = "/proc/" + QString::number(ppid) + "/cmdline"; + QFile file(filename); + if(!file.open(QIODevice::ReadOnly | QIODevice::Text)) { + qDebug()<<"Can't open the file!"<getBioAuthStatus(pwd->pw_name, ENABLETYPE_SUDO); + }else if(text.contains("su")){ + isEnable = m_uniAuthService->getBioAuthStatus(pwd->pw_name, ENABLETYPE_SU); + }else if(text.contains("login")){ + isEnable = m_uniAuthService->getBioAuthStatus(pwd->pw_name, ENABLETYPE_LOGIN); + } + } + } + + return isEnable; + } else { + bool isEnable = false; + int isEnableApp = 0; + QSettings sysSettings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); + if (sysSettings.allKeys().contains("EnableAuth")) { + isEnable = sysSettings.value("EnableAuth").toBool(); + } + + if (isEnable && sysSettings.allKeys().contains("EnableAuthApp")) { + isEnableApp = sysSettings.value("EnableAuthApp").toInt(); + if(qAppName() == "polkit-ukui-authentication-agent-1") //获取polkit开关是否打开 + isEnable = isEnableApp & (1<<2); + if(qAppName() == "bioauth"){ //获取父进程名称为sudo，su，或者login + int ppid = getppid(); //获取父进程pid + QString filename = "/proc/" + QString::number(ppid) + "/cmdline"; + QFile file(filename); + if(!file.open(QIODevice::ReadOnly | QIODevice::Text)) { + qDebug()<<"Can't open the file!"<isActivatable()) { + QString defaultDeviceName = ""; + struct passwd *pwdInfo = getpwuid(uid); + DeviceInfoPtr ptrDevInfo = nullptr; + if (pwdInfo) { + for (auto bioType : m_listPriority) { + QString strDeviceName = m_uniAuthService->getDefaultDevice(pwdInfo->pw_name, bioType); + if(!strDeviceName.isEmpty()) { + ptrDevInfo = findDevice(strDeviceName); + if (ptrDevInfo) { + if (GetUserDevFeatureCount(uid,ptrDevInfo->device_id) > 0) { + defaultDeviceName = strDeviceName; + break; + } + } + } + } + } + if(defaultDeviceName.isEmpty()){ + return nullptr; + } + return ptrDevInfo; + } else { + QString defaultDeviceName; - struct passwd *pwd = getpwuid(uid); - QString userConfigFile = QString(pwd->pw_dir) + "/.biometric_auth/ukui_biometric.conf"; - QSettings userConfig(userConfigFile, QSettings::IniFormat); - qDebug() << userConfig.fileName(); - defaultDeviceName = userConfig.value(DEFAULT_DEVICE).toString(); - qDebug() << defaultDeviceName; - - if(defaultDeviceName.isEmpty() || !findDevice(defaultDeviceName)) { - QSettings sysConfig(GET_STR(CONFIG_FILE), QSettings::IniFormat); - defaultDeviceName = sysConfig.value(DEFAULT_DEVICE).toString(); - } - - if(defaultDeviceName.isEmpty() || !findDevice(defaultDeviceName)){ + struct passwd *pwd = getpwuid(uid); QString userConfigFile = QString(pwd->pw_dir) + "/.biometric_auth/ukui_biometric.conf"; QSettings userConfig(userConfigFile, QSettings::IniFormat); + qDebug() << userConfig.fileName(); defaultDeviceName = userConfig.value(DEFAULT_DEVICE).toString(); + qDebug() << defaultDeviceName; + + if(defaultDeviceName.isEmpty() || !findDevice(defaultDeviceName)) { + QSettings sysConfig(GET_STR(CONFIG_FILE), QSettings::IniFormat); + defaultDeviceName = sysConfig.value(DEFAULT_DEVICE).toString(); + } + + if(defaultDeviceName.isEmpty() || !findDevice(defaultDeviceName)){ + QString userConfigFile = QString(pwd->pw_dir) + "/.biometric_auth/ukui_biometric.conf"; + QSettings userConfig(userConfigFile, QSettings::IniFormat); + defaultDeviceName = userConfig.value(DEFAULT_DEVICE).toString(); + } + qDebug() << "default device: " << defaultDeviceName; + // 终端不默认使用第一个设备 + if(defaultDeviceName.isEmpty()){ + return nullptr; + } + bool defValid = false; + DeviceInfoPtr ptrDevInfo = findDevice(defaultDeviceName); + if (ptrDevInfo) { + if (GetUserDevFeatureCount(uid,ptrDevInfo->device_id) > 0) { + defValid = true; + } + } + + if (!defValid) { + ptrDevInfo = nullptr; + } + + return ptrDevInfo; } - qDebug() << "default device: " << defaultDeviceName; - // 终端不默认使用第一个设备 - if(defaultDeviceName.isEmpty()){ -// if(!useFirstDevice) -// return nullptr; -// else -// return getFirstDevice(uid); - return nullptr; - } - bool defValid = false; - DeviceInfoPtr ptrDevInfo = findDevice(defaultDeviceName); - if (ptrDevInfo) { - if (GetUserDevFeatureCount(uid,ptrDevInfo->device_id) > 0) { - defValid = true; +} + +QStringList BioDevices::getAllDefDevices() +{ + QStringList listDefDevices; + if (m_uniAuthService && m_uniAuthService->isActivatable()) { + struct passwd *pwdInfo = getpwuid(m_nUId); + if (pwdInfo) { + listDefDevices = m_uniAuthService->getAllDefaultDevice(pwdInfo->pw_name); + } + } else { + QString defaultDeviceName; + + struct passwd *pwd = getpwuid(m_nUId); + QString userConfigFile = QString(pwd->pw_dir) + "/.biometric_auth/ukui_biometric.conf"; + QSettings userConfig(userConfigFile, QSettings::IniFormat); + qDebug() << userConfig.fileName(); + defaultDeviceName = userConfig.value(DEFAULT_DEVICE).toString(); + qDebug() << defaultDeviceName; + + if(defaultDeviceName.isEmpty() || !findDevice(defaultDeviceName)) { + QSettings sysConfig(GET_STR(CONFIG_FILE), QSettings::IniFormat); + defaultDeviceName = sysConfig.value(DEFAULT_DEVICE).toString(); + } + + if(defaultDeviceName.isEmpty() || !findDevice(defaultDeviceName)){ + QString userConfigFile = QString(pwd->pw_dir) + "/.biometric_auth/ukui_biometric.conf"; + QSettings userConfig(userConfigFile, QSettings::IniFormat); + defaultDeviceName = userConfig.value(DEFAULT_DEVICE).toString(); + } + qDebug() << "default device: " << defaultDeviceName; + if(!defaultDeviceName.isEmpty()){ + listDefDevices.push_back(defaultDeviceName); } } - - if (!defValid) { -// if(!useFirstDevice) -// ptrDevInfo = nullptr; -// else -// ptrDevInfo = getFirstDevice(uid); - ptrDevInfo = nullptr; - } - - return ptrDevInfo; + return listDefDevices; } int BioDevices::GetLastDevice(const QString &userName) diff --git a/bioauth/src/loginoptionswidget.cpp b/bioauth/src/loginoptionswidget.cpp index cf06ddf..445592c 100644 --- a/bioauth/src/loginoptionswidget.cpp +++ b/bioauth/src/loginoptionswidget.cpp @@ -27,6 +27,7 @@ LoginOptionsWidget::LoginOptionsWidget(QWidget *parent) : QWidget(parent) , m_biomericProxy(new BioAuth(this)) , m_bioDevices(new BioDevices()) + , w_timer(nullptr) { initUI(); initConnections(); @@ -73,8 +74,17 @@ void LoginOptionsWidget::initUI() m_labelFace->setObjectName("faceLabel"); m_labelFace->setAlignment(Qt::AlignCenter); m_labelFace->setFixedSize(154,154); - QImage img; - setFaceImg(img); + QHBoxLayout *layoutFace = new QHBoxLayout(); + layoutFace->setContentsMargins(0,0,0,0); + layoutFace->setAlignment(Qt::AlignCenter); + m_labelFace->setLayout(layoutFace); + m_labelFaceLoad = new QLabel(); + m_labelFaceLoad->setAlignment(Qt::AlignCenter); + m_labelFaceLoad->setFixedSize(142, 142); + m_labelFaceLoad->setStyleSheet(QString("QLabel{background-color: rgba(230,230,230,0.39); border-radius: %1px; border: 8px solid white;}").arg(71)); + layoutFace->addWidget(m_labelFaceLoad, 0, Qt::AlignVCenter); +// QImage img; +// setFaceImg(img); m_labelFace->hide(); // 二维码窗口 m_labelQRCode = new QLabel(m_widgetImage); @@ -85,11 +95,11 @@ void LoginOptionsWidget::initUI() m_layoutMain->addLayout(m_layoutImage); QVBoxLayout *layoutQRCode = new QVBoxLayout(); layoutQRCode->setAlignment(Qt::AlignCenter); - layoutQRCode->setSpacing(10); + layoutQRCode->setSpacing(5); m_labelQRCode->setLayout(layoutQRCode); m_labelQRCodeTip = new QLabel(); m_labelQRCodeTip->setFixedSize(22,22); - m_labelQRCodeTip->setPixmap(QIcon::fromTheme("ukui-dialog-warning").pixmap(QSize(22,22))); + m_labelQRCodeTip->setPixmap(QIcon::fromTheme("dialog-warning").pixmap(QSize(22,22))); layoutQRCode->addWidget(m_labelQRCodeTip, 0, Qt::AlignHCenter); m_labelQRCodeMsg = new QLabel(); m_labelQRCodeMsg->setFixedHeight(24); @@ -117,7 +127,7 @@ void LoginOptionsWidget::initConnections() if (m_bioDevices) { connect(m_bioDevices, &BioDevices::deviceCountChanged, this, &LoginOptionsWidget::onUSBDeviceCountChange); - readDevicesInfo(); + //readDevicesInfo(); } connect(m_btnGroup, SIGNAL(buttonClicked(int)), this, SLOT(onOptionSelected(int))); } @@ -293,6 +303,9 @@ void LoginOptionsWidget::setUser(int uid) } m_uid = uid; if (bNeedUpdateDevInfo) { + if (m_bioDevices) { + m_bioDevices->setUId(m_uid); + } readDevicesInfo(); } } @@ -303,6 +316,7 @@ void LoginOptionsWidget::readDevicesInfo() bool isAuthEnable = m_bioDevices->GetBioAuthEnable(); bool isQRCodeEnable = m_bioDevices->GetQRCodeEnable(); DeviceList deviceList = m_bioDevices->GetDevList(); + QStringList listDefDevices = m_bioDevices->getAllDefDevices(); for(auto pDeviceInfo : deviceList) { int nDevFeatureCount = 0; @@ -323,7 +337,10 @@ void LoginOptionsWidget::readDevicesInfo() continue; int nDevType = LOGINOPT_TYPE_OTHERS; nDevType = convertDeviceType(pDeviceInfo->biotype); - m_mapDevices[nDevType].push_back(pDeviceInfo); + if (listDefDevices.contains(pDeviceInfo->device_shortname) && + !m_mapDevices.contains(nDevType)) { + m_mapDevices[nDevType].push_back(pDeviceInfo); + } } } updateOptionButtons(); @@ -333,7 +350,7 @@ void LoginOptionsWidget::readDevicesInfo() void LoginOptionsWidget::startAuth(DeviceInfoPtr device, int uid) { - if(!m_biomericProxy) + if(!device || !m_biomericProxy || is_Lock) { qWarning() << "BiometricProxy doesn't exist."; return; @@ -363,7 +380,24 @@ void LoginOptionsWidget::startAuth_() m_isInAuth = true; m_dupFD = -1; - + if(!w_timer) + { + w_timer = new QTimer(this); + w_timer->setInterval(150); + connect(w_timer, &QTimer::timeout, this, &LoginOptionsWidget::updatePixmap); + } + m_waitingPixmap = QIcon::fromTheme("ukui-loading-0-symbolic").pixmap(24, 24); + if(m_curLoginOptType == LOGINOPT_TYPE_QRCODE) { + m_labelQRCodeTip->setPixmap(m_waitingPixmap); + m_labelQRCodeTip->show(); + m_labelQRCodeMsg->hide(); + } else if(m_curLoginOptType == LOGINOPT_TYPE_FACE) { + m_labelFace->setStyleSheet(QString("border-radius: %1px; border:0px solid white;background-color: rgba(230,230,230,0.39);").arg(77)); + m_labelFace->setPixmap(QPixmap("")); + m_labelFaceLoad->setPixmap(m_waitingPixmap); + m_labelFaceLoad->show(); + } + w_timer->start(); m_biomericProxy->startAuth(m_uid, m_curDevInfo); } @@ -386,6 +420,18 @@ void LoginOptionsWidget::stopAuth() setFaceImg(img); } +void LoginOptionsWidget::updatePixmap() +{ + QMatrix matrix; + matrix.rotate(90.0); + m_waitingPixmap = m_waitingPixmap.transformed(matrix, Qt::FastTransformation); + if(m_curLoginOptType == LOGINOPT_TYPE_QRCODE) + m_labelQRCodeTip->setPixmap(m_waitingPixmap); + else if(m_curLoginOptType == LOGINOPT_TYPE_FACE) { + m_labelFaceLoad->setPixmap(m_waitingPixmap); + } +} + void LoginOptionsWidget::onIdentifyComplete(int uid, bool ret, int retErrNo) { if(m_isStopped == true) @@ -414,6 +460,10 @@ void LoginOptionsWidget::onIdentifyComplete(int uid, bool ret, int retErrNo) if(ret.result == 0 && (ret.opsStatus == 404 || ret.opsStatus == 304 || ret.opsStatus == 8)) { // 304认证超时， 8网络异常 Q_EMIT authComplete(uid, false, 1); + } else if (ret.opsStatus == OPS_IDENTIFY_STOP_BY_USER || ret.opsStatus == OPS_VERIFY_STOP_BY_USER) { + Q_EMIT authComplete(uid, false, -2); // 主动停止，直接重试 + } else if (ret.opsStatus == OPS_OPEN_FAIL || ret.opsStatus == OPS_OPEN_ERROR) { // 无法打开设备（设备是坏的/被占用），直接禁用 + Q_EMIT authComplete(uid, false, 5); } else { Q_EMIT authComplete(uid, false, 2); } @@ -518,6 +568,7 @@ void LoginOptionsWidget::onFrameWritten(int drvid) m_labelQRCode->setStyleSheet(QString("border-radius: %1px; border:0px solid white;background-color: rgba(255,255,255,100%);").arg(6)); setQRCode(srcQImage); m_labelQRCode->show(); + m_labelQRCodeTip->hide(); m_labelFace->hide(); } else { m_labelFace->hide(); @@ -527,6 +578,10 @@ void LoginOptionsWidget::onFrameWritten(int drvid) m_labelFace->hide(); m_labelQRCode->hide(); } + if(w_timer && w_timer->isActive()) + { + w_timer->stop(); + } Q_EMIT updateImage(srcQImage); } @@ -544,11 +599,17 @@ void LoginOptionsWidget::setQRCodeMsg(QString strMsg) { if (strMsg.isEmpty()) { m_labelQRCodeMsg->hide(); - m_labelQRCodeTip->hide(); + //m_labelQRCodeTip->hide(); } else { + //一开始认证时就没有网，直接停止加载状态 + if(w_timer && w_timer->isActive()) + { + w_timer->stop(); + } m_labelQRCodeMsg->setText(strMsg); m_labelQRCodeMsg->show(); m_labelQRCodeTip->show(); + m_labelQRCodeTip->setPixmap(QIcon::fromTheme("dialog-warning").pixmap(QSize(22,22))); } } @@ -563,15 +624,22 @@ void LoginOptionsWidget::setFaceImg(QImage& imgFace, int nStatus) switch(nStatus) { case 1: faceImage = loadSvg(QString("%1/images/ukui-loginopt-lose.svg").arg(GET_STR(UKUI_BIOMETRIC)),"black",48); + m_labelFace->setStyleSheet(QString("border-radius: %1px; border:0px solid white;background-color: rgba(230,230,230,40%);").arg(77)); + break; + case 2: + faceImage = loadSvg(QString("%1/images/ukui-loginopt-smile.svg").arg(GET_STR(UKUI_BIOMETRIC)),"gray",48); + m_labelFace->setStyleSheet(QString("border-radius: %1px; border:0px solid white;background-color: rgba(230,230,230,100%);").arg(77)); break; default: faceImage = loadSvg(QString("%1/images/ukui-loginopt-smile.svg").arg(GET_STR(UKUI_BIOMETRIC)),"black",48); + m_labelFace->setStyleSheet(QString("border-radius: %1px; border:0px solid white;background-color: rgba(230,230,230,40%);").arg(77)); break; } } m_labelFace->setAlignment(Qt::AlignCenter); m_labelFace->setPixmap(faceImage); + m_labelFaceLoad->hide(); } void LoginOptionsWidget::onStatusChanged(int drvid, const QString &message) @@ -646,24 +714,10 @@ DeviceInfoPtr LoginOptionsWidget::findDeviceByName(const QString &name) QString LoginOptionsWidget::GetDefaultDevice(uid_t uid) { - QString defaultDeviceName; - - struct passwd *pwd = getpwuid(uid); - QString userConfigFile = QString(pwd->pw_dir) + "/.biometric_auth/ukui_biometric.conf"; - QSettings userConfig(userConfigFile, QSettings::IniFormat); - qDebug() << userConfig.fileName(); - defaultDeviceName = userConfig.value(DEFAULT_DEVICE).toString(); - qDebug() << defaultDeviceName; - - if(defaultDeviceName.isEmpty() || !findDeviceByName(defaultDeviceName)) { - QSettings sysConfig(GET_STR(CONFIG_FILE), QSettings::IniFormat); - defaultDeviceName = sysConfig.value(DEFAULT_DEVICE).toString(); - } - - if(defaultDeviceName.isEmpty() || !findDeviceByName(defaultDeviceName)){ - QString userConfigFile = QString(pwd->pw_dir) + "/.biometric_auth/ukui_biometric.conf"; - QSettings userConfig(userConfigFile, QSettings::IniFormat); - defaultDeviceName = userConfig.value(DEFAULT_DEVICE).toString(); + QString defaultDeviceName = ""; + DeviceInfoPtr pDeviceInfo = m_bioDevices->getDefaultDevice(uid); + if (pDeviceInfo) { + defaultDeviceName = pDeviceInfo->device_shortname; } qDebug() << "default device: " << defaultDeviceName; @@ -691,13 +745,6 @@ void LoginOptionsWidget::onUSBDeviceCountChange(int newNum) updateUIStatus(false); } -bool LoginOptionsWidget::getAuthDouble() -{ - QSettings settings("/etc/biometric-auth/ukui-biometric.conf", QSettings::IniFormat); - bool distribId = settings.value("DoubleAuth").toBool(); - return distribId; -} - void LoginOptionsWidget::updateUIStatus(bool update) { if (m_mapOptBtns.contains(-1)) { @@ -810,6 +857,17 @@ bool LoginOptionsWidget::isDeviceDisable(int nDevId) return false; } +void LoginOptionsWidget::lockStatusChanged(bool locked) +{ + if(locked){ + is_Lock = true; + stopAuth(); + } else { + is_Lock = false; + readDevicesInfo(); + } +} + QPixmap LoginOptionsWidget::loadSvg(QString path, QString color, int size) { int origSize = size; diff --git a/bioauth/src/uniauthservice.cpp b/bioauth/src/uniauthservice.cpp new file mode 100644 index 0000000..4f327af --- /dev/null +++ b/bioauth/src/uniauthservice.cpp @@ -0,0 +1,251 @@ +/* + * Copyright (C) 2022 Tianjin KYLIN Information Technology Co., Ltd. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3, or (at your option) + * any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see . + * +**/ +#include "uniauthservice.h" +#include +#include + +#define UNIAUTH_DBUS_SERVICE "org.ukui.UniauthBackend" +#define UNIAUTH_DBUS_PATH "/org/ukui/UniauthBackend" +#define UNIAUTH_DBUS_INTERFACE "org.ukui.UniauthBackend" + +#define FD_DBUS_SERVICE "org.freedesktop.DBus" +#define FD_DBUS_PATH "/org/freedesktop/DBus" +#define FD_DBUS_INTERFACE "org.freedesktop.DBus" + +UniAuthService::UniAuthService(QObject *parent) + : QDBusAbstractInterface(UNIAUTH_DBUS_SERVICE, + UNIAUTH_DBUS_PATH, + UNIAUTH_DBUS_INTERFACE, + QDBusConnection::systemBus(), + parent) + , m_isActivatable(false) +{ + setTimeout(2147483647); + QDBusInterface *dbusService = new QDBusInterface(FD_DBUS_SERVICE, + FD_DBUS_PATH, + FD_DBUS_INTERFACE, + QDBusConnection::systemBus()); + if (dbusService) { + QDBusReply result = dbusService->call(QStringLiteral("ListActivatableNames")); + if(!result.isValid()) { + qWarning() << "ListActivatableNames error:" << result.error().message(); + } else { + QStringList listNames = result.value(); + if (listNames.contains(UNIAUTH_DBUS_INTERFACE)) { + m_isActivatable = true; + } + } + } +} + +// 设置默认设备 +void UniAuthService::setDefaultDevice(int bioDevType, QString deviceName) +{ + qDebug() << " bioType : " << bioDevType << "deviceName : " << deviceName; + QDBusMessage result = call(QStringLiteral("setDefaultDevice"), bioDevType, deviceName); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "setDefaultDevice error:" << result.errorMessage(); + return ; + } + return ; +} + +// 获取默认设备 +QString UniAuthService::getDefaultDevice(QString userName, int bioDevType) +{ + QDBusMessage result = call(QStringLiteral("getDefaultDevice"), userName, bioDevType); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "getDefaultDevice error:" << result.errorMessage(); + return ""; + } + QList varResult = result.arguments(); + if (varResult.size() > 0) { + QString strDefDevice = varResult.takeFirst().toString(); + return strDefDevice; + } else { + return ""; + } +} + +// 获取所有默认设备 +QStringList UniAuthService::getAllDefaultDevice(QString userName) +{ + QStringList listDefDevices; + QDBusReply result = call(QStringLiteral("getAllDefaultDevice"), userName); + if(!result.isValid()) { + qWarning() << "getAllDefaultDevice error:" << result.error().message(); + } else { + listDefDevices = result.value(); + } + return listDefDevices; +} + +//生物特征开关接口 +bool UniAuthService::getBioAuthStatus(QString userName, int bioAuthType) +{ + QDBusMessage bioResult = call(QStringLiteral("getBioAuthStatus"), userName, bioAuthType); + if(bioResult.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "getBioStatus error:" << bioResult.errorMessage(); + return false; + } + QList varResult = bioResult.arguments(); + if (varResult.size() > 0) { + return varResult.takeFirst().toBool(); + } else { + return false; + } +} + +void UniAuthService::setBioAuthStatus(int bioAuthType, bool status) +{ + qDebug() << "setBioAuthStatus bioAuthType : " << bioAuthType << "status : " << status; + QDBusMessage result = call(QStringLiteral("setBioAuthStatus"), bioAuthType, status); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "setBioAuthStatus error:" << result.errorMessage(); + return ; + } + return ; +} + +// 获取最大失败次数 +int UniAuthService::getMaxFailedTimes() +{ + QDBusMessage result = call(QStringLiteral("getMaxFailedTimes")); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "getMaxFailedTimes error:" << result.errorMessage(); + return false; + } + QList varResult = result.arguments(); + if (varResult.size() > 0) { + return varResult.takeFirst().toInt(); + } else { + return 3; + } +} + +// 获取是否使能微信扫码登录 +bool UniAuthService::getQRCodeEnable() +{ + QDBusMessage result = call(QStringLiteral("getQRCodeEnable")); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "getQRCodeEnable error:" << result.errorMessage(); + return false; + } + QList varResult = result.arguments(); + if (varResult.size() > 0) { + return varResult.takeFirst().toBool(); + } else { + return false; + } +} + +// 获取是否双认证 +bool UniAuthService::getDoubleAuth() +{ + QDBusMessage result = call(QStringLiteral("getDoubleAuth")); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "getDoubleAuth error:" << result.errorMessage(); + return false; + } + QList varResult = result.arguments(); + if (varResult.size() > 0) { + return varResult.takeFirst().toBool(); + } else { + return false; + } +} + +// 获取用户绑定 +bool UniAuthService::getUserBind() +{ + QDBusMessage result = call(QStringLiteral("getUserBind")); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "getUserBind error:" << result.errorMessage(); + return false; + } + QList varResult = result.arguments(); + if (varResult.size() > 0) { + return varResult.takeFirst().toBool(); + } else { + return false; + } +} + +// 获取是否在控制面板显示 +bool UniAuthService::getIsShownInControlCenter() +{ + QDBusMessage result = call(QStringLiteral("getIsShownInControlCenter")); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "getIsShownInControlCenter error:" << result.errorMessage(); + return false; + } + QList varResult = result.arguments(); + if (varResult.size() > 0) { + return varResult.takeFirst().toBool(); + } else { + return false; + } +} + +// 获取是否使用第一个设备 +bool UniAuthService::getUseFirstDevice() +{ + QDBusMessage result = call(QStringLiteral("getUseFirstDevice")); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "getUseFirstDevice error:" << result.errorMessage(); + return false; + } + QList varResult = result.arguments(); + if (varResult.size() > 0) { + return varResult.takeFirst().toBool(); + } else { + return false; + } +} + +// 获取是否隐藏切换按钮 +bool UniAuthService::getHiddenSwitchButton() +{ + QDBusMessage result = call(QStringLiteral("getHiddenSwitchButton")); + if(result.type() == QDBusMessage::ErrorMessage) + { + qWarning() << "getHiddenSwitchButton error:" << result.errorMessage(); + return false; + } + QList varResult = result.arguments(); + if (varResult.size() > 0) { + return varResult.takeFirst().toBool(); + } else { + return false; + } +} + +bool UniAuthService::isActivatable() +{ + return m_isActivatable; +} diff --git a/debian/libpam-biometric.install b/debian/libpam-biometric.install index 3a9dd20..6ce65fb 100644 --- a/debian/libpam-biometric.install +++ b/debian/libpam-biometric.install @@ -1,4 +1,6 @@ -/etc/biometric-auth/ukui-biometric.conf +/usr/share/ukui-biometric/ukui-biometric.conf +/usr/share/dbus-1/system-services/org.ukui.UniauthBackend.service +/etc/dbus-1/system.d/org.ukui.UniauthBackend.conf /lib/security/* /usr/bin/* /usr/share/pam-configs/* diff --git a/debian/libpam-biometric.postinst b/debian/libpam-biometric.postinst index 0526f15..46f1a0d 100644 --- a/debian/libpam-biometric.postinst +++ b/debian/libpam-biometric.postinst @@ -3,3 +3,52 @@ set -e #DEBHELPER# pam-auth-update --package + +#update default conf +config_file=/etc/biometric-auth/ukui-biometric.conf + +delimeter='=' + +get_opt(){ + file=$1 + section=$2 + key=$3 + val=$(awk -F "$delimeter" '/\['${section}'\]/{a=1}(a==1 && "'${key}'"==$1){print $2;exit}' ${file}) + echo ${val} +} + +is_key_exist(){ + file=$1 + section=$2 + key=$3 + is_exist=$(awk -F "$delimeter" '/\['${section}'\]/{a=1}(a==1 && "'${key}'"==$1){print '1';exit}' ${file}) + echo ${is_exist} +} + +set_opt(){ + file=$1 + section=$2 + key=$3 + val=$4 + contain_section=$(awk '/\['${section}'\]/ {print NR}' ${file}) + if [ ${#contain_section} -gt 0 ]; then + is_exist=$(is_key_exist $file $section $key) + if [ "${is_exist}" = "1" ]; then + awk -F "$delimeter" '/\['${section}'\]/{a=1}(a==1 && "'${key}'"==$1){gsub($2,"'${val}'");a=0} {print $0}' ${file} 1<>${file} + else + sed -i "s/\[${section}\]/\[${section}\]\n${key}\=${val}/g" ${file} + fi + else + echo -e "\n[${section}]\n${key}=${val}" >> ${file} + sed -i "s/\-e//g" ${file} + fi +} + +if [ ! -f ${config_file} ]; then + mkdir -p /etc/biometric-auth + cp /usr/share/ukui-biometric/ukui-biometric.conf ${config_file} +else + set_opt ${config_file} General UseFirstDevice true + set_opt ${config_file} General MaxFailedTimes 5 + set_opt ${config_file} Functions EnableQRCode true +fi diff --git a/pam-biometric/CMakeLists.txt b/pam-biometric/CMakeLists.txt index b30abe0..2c82306 100644 --- a/pam-biometric/CMakeLists.txt +++ b/pam-biometric/CMakeLists.txt @@ -39,7 +39,7 @@ set_target_properties(pam_biometric PROPERTIES PREFIX "") install(TARGETS pam_biometric DESTINATION /lib/security) install(FILES pam-configs/pam-biometric DESTINATION /usr/share/pam-configs) -install(FILES data/ukui-biometric.conf DESTINATION /etc/biometric-auth) +install(FILES data/ukui-biometric.conf DESTINATION /usr/share/ukui-biometric) install(FILES ${PROJECT_BINARY_DIR}/data/org.freedesktop.plicykit.pkexec.bioctl-helper.policy ${PROJECT_BINARY_DIR}/data/org.freedesktop.plicykit.pkexec.biodrvctl.policy diff --git a/pam-biometric/data/org.freedesktop.plicykit.pkexec.bioctl-helper.policy.in b/pam-biometric/data/org.freedesktop.plicykit.pkexec.bioctl-helper.policy.in index f10b42a..62c21b6 100644 --- a/pam-biometric/data/org.freedesktop.plicykit.pkexec.bioctl-helper.policy.in +++ b/pam-biometric/data/org.freedesktop.plicykit.pkexec.bioctl-helper.policy.in @@ -7,8 +7,10 @@ Run the biometric authentication control tool 运行生物识别认证控制工具 + འཁོར་སྐྱོད་སྐྱེ་དངོས་ཀྱི་ངོས་འཛིན་ཁས་ལེན་ཚོད་འཛིན་ཡོ་བྱད།། Authentication is required to enable or disable biometric authentication 开启或关闭生物识别认证需要进行身份验证 + སྒོ་རྒྱག་པའམ་ཡང་ན་སྒོ་རྒྱག་པའི་སྐྱེ་དངོས་ངོས་འཛིན་བདེན་དཔངར་སྤྲོད་བྱེད་པར་ཐོབ་ཐང་གི་ཚོད་ལྟསར་སྤྲོད་བྱ་དགོས། stock_person no diff --git a/pam-biometric/data/org.freedesktop.plicykit.pkexec.biodrvctl.policy.in b/pam-biometric/data/org.freedesktop.plicykit.pkexec.biodrvctl.policy.in index 42487bd..aed20c3 100644 --- a/pam-biometric/data/org.freedesktop.plicykit.pkexec.biodrvctl.policy.in +++ b/pam-biometric/data/org.freedesktop.plicykit.pkexec.biodrvctl.policy.in @@ -7,8 +7,10 @@ Run the biometric device driver control tool 运行生物识别设备驱动控制工具 - Authentication is required to change the status of biometric device's driver - 改变生物识别设备驱动状态需要进行身份验证 + སྐྱ་དངོས་དབྱེ་འབྱེད་སྒྲག་ཆས་ཀྱི་ཁ་ལོ་བའི་ཚོད་འཛིན་ཡོ་བྱད་ + Authentication is required to change the status of biometric device's driver + 改变生物识别设备驱动状态需要进行身份验证 + སྐྱ་དངོས་དབྱེ་འབྱེད་སྒྲག་ཆས་ཀྱི་ཁ་ལོ་བའི་གནས་ཚུལ་ལ་འགྱུར་ལྡོག་གཏོང་བར་བདེན་དཔང་ར་སྤྲད་བྱ་དགོས། stock_person auth_admin diff --git a/pam-biometric/data/org.freedesktop.plicykit.pkexec.biorestart.policy.in b/pam-biometric/data/org.freedesktop.plicykit.pkexec.biorestart.policy.in index 3ca842b..cbad164 100644 --- a/pam-biometric/data/org.freedesktop.plicykit.pkexec.biorestart.policy.in +++ b/pam-biometric/data/org.freedesktop.plicykit.pkexec.biorestart.policy.in @@ -7,8 +7,10 @@ Restart Service 重启生物特征服务 - Authentication is required to restart biometric service - 重启生物特征服务需要身份验证 + བསྐྱར་དུ་ཞབས་འདེགས་ཞུ་བ + Authentication is required to restart biometric service + 重启生物特征服务需要身份验证 + སྐྱ་དངོས་དབྱེ་འབྱེད་ཞབས་ཞུ་སླར་གསོ་བྱེད་པར་བདེན་དཔང་ར་སྤྲད་བྱ་དགོས། stock_person auth_admin diff --git a/pam-biometric/data/ukui-biometric.conf b/pam-biometric/data/ukui-biometric.conf index 50e1c44..e96090b 100644 --- a/pam-biometric/data/ukui-biometric.conf +++ b/pam-biometric/data/ukui-biometric.conf @@ -1,5 +1,6 @@ [General] EnableAuth=false +EnableAuthApp=63 DefaultDevice= DoubleAuth=false UserBind=false diff --git a/pam-biometric/pam_biometric.c b/pam-biometric/pam_biometric.c index cb92642..066d2ff 100644 --- a/pam-biometric/pam_biometric.c +++ b/pam-biometric/pam_biometric.c @@ -20,6 +20,7 @@ #include #include #include +#include #include #include #include @@ -31,6 +32,8 @@ #include #include +#define USER_CONFIG_FILE "/home/%s/.biometric_auth/ukui_biometric.conf" + /* Declare log function */ extern int enable_debug; extern char *log_prefix; @@ -50,28 +53,70 @@ static void signal_handler(int signo) logger("signal_handler is triggered\n"); } +int enable_biometric_authentication_app() +{ + char conf_file[] = GET_STR(CONFIG_FILE); + FILE *file; + char line[1024]; + int i; + int is_enable = 0; + + if((file = fopen(conf_file, "r")) == NULL){ + logger("open configure file failed: %s\n", strerror(errno)); + return 1; + } + + while(fgets(line, sizeof(line), file)) { + i = sscanf(line, "EnableAuthApp=%d\n", &is_enable); + if(i > 0) { + logger("EnableAuthApp=%d\n", is_enable); + break; + } + } + fclose(file); + return is_enable; +} + /* * Check if the service should use biometric authentication */ int service_filter(char *service) { + //int is_enable = enable_biometric_authentication_app(); + + //syslog(LOG_INFO,"is_enable = %d service = %s\n",is_enable,service); if (strcmp(service, "lightdm") == 0) { int ret = system("/bin/chmod -f a+wr /tmp/bio.log"); (void)ret; /* Suppress gcc ignoring return value warning */ + //if(is_enable & 1 == 0) + // return 0; + return 1; + } + if (strcmp(service, "ukui-screensaver-qt") == 0){ + //if((is_enable & (1<<1)) == 0) + // return 0; return 1; } - if (strcmp(service, "ukui-screensaver-qt") == 0) + if (strcmp(service, "polkit-1") == 0){ + //if((is_enable & (1<<2)) == 0) + // return 0; return 1; - if (strcmp(service, "sudo") == 0) - return 1; - if (strcmp(service, "login") == 0) + } + if (strcmp(service, "sudo") == 0){ + //if((is_enable & (1<<3)) == 0) + // return 0; return 1; - if (strcmp(service, "su") == 0) + } + if (strcmp(service, "su") == 0){ + //if((is_enable & (1<<4)) == 0) + // return 0; return 1; -// if (strcmp(service, "mate-screensaver") == 0) -// return 1; - if (strcmp(service, "polkit-1") == 0) + } + if (strcmp(service, "login") == 0){ + //if((is_enable & (1<<5)) == 0) + // return 0; return 1; + } #ifdef ENABLE_BIOTEST if (strcmp(service, "biotest") == 0) return 1; @@ -104,11 +149,11 @@ int call_conversation(pam_handle_t *pamh, int msg_style, char *msg, char *resp) status = conv_struct->conv(1, message, &response, conv_struct->appdata_ptr); logger("Finish conv callback function\n"); - if (resp) - strcpy(resp, response->resp); + if (resp && response->resp) + strcpy(resp, response->resp); /* Use typecast to suppress gcc warnings */ free((void *)message[0]); - if (response) + if (response->resp) free(response->resp); free(response); @@ -215,9 +260,9 @@ int parent(int pid, pam_handle_t *pamh, int need_call_conv) logger("The GUI-Child process terminate abnormally.\n"); if (bio_result == BIO_SUCCESS) { - if(!enable_biometric_authentication(pamh) && !enable_qrcode_authentication(pamh)) { - logger("disable biometric authentication.\n"); - return PAM_SYSTEM_ERR; + if(!enable_biometric_authentication(pamh) && !enable_qrcode_authentication(pamh)) { + logger("disable biometric authentication.\n"); + return PAM_SYSTEM_ERR; } logger("pam_biometric.so return PAM_SUCCESS\n"); return PAM_SUCCESS; @@ -395,18 +440,47 @@ int enable_by_polkit() int enable_biometric_authentication(pam_handle_t *pamh) { + char *username = NULL; + int is_found = 0; + int is_auth_enable = 0; + pam_get_item(pamh, PAM_USER, (const void **)&username); + if (username) { + char conf_file_user[256]; + snprintf(conf_file_user, 255, USER_CONFIG_FILE, username); + FILE *file = NULL; + char line[1024], is_enable[16]; + int i; + if((file = fopen(conf_file_user, "r")) == NULL){ + logger("open configure file failed: %s\n", strerror(errno)); + } else { + while(fgets(line, sizeof(line), file)) { + i = sscanf(line, "EnableAuth=%15s\n", is_enable); + if(i > 0) { + logger("EnableAuth=%s\n", is_enable); + is_found = 1; + break; + } + } + fclose(file); + if(!strcmp(is_enable, "true")) + is_auth_enable = 1; + } + } + if (is_found != 0) { + return is_auth_enable; + } + char conf_file[] = GET_STR(CONFIG_FILE); FILE *file; char line[1024], is_enable[16]; int i; - if((file = fopen(conf_file, "r")) == NULL){ logger("open configure file failed: %s\n", strerror(errno)); return 0; } while(fgets(line, sizeof(line), file)) { - i = sscanf(line, "EnableAuth=%s\n", is_enable); + i = sscanf(line, "EnableAuth=%15s\n", is_enable); if(i > 0) { logger("EnableAuth=%s\n", is_enable); break; @@ -421,18 +495,47 @@ int enable_biometric_authentication(pam_handle_t *pamh) int enable_qrcode_authentication(pam_handle_t *pamh) { + char *username = NULL; + int is_found = 0; + int is_auth_enable = 0; + pam_get_item(pamh, PAM_USER, (const void **)&username); + if (username) { + char conf_file_user[256]; + snprintf(conf_file_user, 255, USER_CONFIG_FILE, username); + FILE *file = NULL; + char line[1024], is_enable[16]; + int i; + if((file = fopen(conf_file_user, "r")) == NULL){ + logger("open configure file failed: %s\n", strerror(errno)); + } else { + while(fgets(line, sizeof(line), file)) { + i = sscanf(line, "EnableQRCode=%15s\n", is_enable); + if(i > 0) { + logger("EnableQRCode=%s\n", is_enable); + is_found = 1; + break; + } + } + fclose(file); + if(!strcmp(is_enable, "true")) + is_auth_enable = 1; + } + } + if (is_found != 0) { + return is_auth_enable; + } + char conf_file[] = GET_STR(CONFIG_FILE); FILE *file; char line[1024], is_enable[16]; int i; - if((file = fopen(conf_file, "r")) == NULL){ logger("open configure file failed: %s\n", strerror(errno)); return 0; } while(fgets(line, sizeof(line), file)) { - i = sscanf(line, "EnableQRCode=%s\n", is_enable); + i = sscanf(line, "EnableQRCode=%15s\n", is_enable); if(i > 0) { logger("EnableQRCode=%s\n", is_enable); break; @@ -502,8 +605,6 @@ int pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc, return PAM_IGNORE; } - - /* Different services use different processing function */ if (strcmp(service, "lightdm") == 0) { char buf[128]; diff --git a/pam-biometric/utils/bioctl b/pam-biometric/utils/bioctl index 7e2d806..0c15640 100755 --- a/pam-biometric/utils/bioctl +++ b/pam-biometric/utils/bioctl @@ -3,11 +3,11 @@ # Usage: bioctl status|enable|disable if [ "$1" = "enable" ]; then - pkexec /usr/bin/bioctl-helper enable + pkexec /usr/bin/bioctl-helper enable $2 elif [ "$1" = "disable" ]; then - pkexec /usr/bin/bioctl-helper disable + pkexec /usr/bin/bioctl-helper disable $2 elif [ "$1" = "status" ]; then - /usr/bin/bioctl-helper status + /usr/bin/bioctl-helper status $2 else echo "Usage: bioctl status|enable|disable" fi diff --git a/pam-biometric/utils/bioctl-helper b/pam-biometric/utils/bioctl-helper index 07095a3..ebba384 100755 --- a/pam-biometric/utils/bioctl-helper +++ b/pam-biometric/utils/bioctl-helper @@ -23,6 +23,13 @@ if [ ! -f $CONFIG_FILE ]; then fi contain_key=`grep -c "^EnableAuth=" $CONFIG_FILE` +contain_key_app=`grep -c "^EnableAuthApp=" $CONFIG_FILE` +greeter=1 +screensaver=$[1<<1] +polkit=$[1<<2] +sudo=$[1<<3] +su=$[1<<4] +login=$[1<<5] if [ "$1" = "enable" ]; then test_privilege @@ -34,25 +41,158 @@ if [ "$1" = "enable" ]; then #执行 pam-auth-update 了。 #pam-auth-update --package pam-biometric - - if [ "$contain_key" = "1" ]; then + if [[ $# > 1 ]] && [[ $2 = "greeter" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app | $greeter ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=63" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "screensaver" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app | $screensaver ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=63" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "sudo" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app | $sudo ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=63" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "polkit" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app | $polkit ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=63" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "su" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app | $su ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=63" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "login" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app | $login ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=63" >> $CONFIG_FILE + fi + elif [ "$contain_key" = "1" ]; then sed -i 's/^EnableAuth=[a-zA-Z0-9]*/EnableAuth=true/g' $CONFIG_FILE else echo "EnableAuth=true" >> $CONFIG_FILE fi elif [ "$1" = "disable" ]; then test_privilege - if [ "$contain_key" = "1" ]; then + if [[ $# > 1 ]] && [[ $2 = "greeter" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app & $[~$greeter] ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=0" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "screensaver" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app & $[ ~$screensaver ]] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=0" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "sudo" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app & $[ ~$sudo ] ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=0" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "polkit" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app & $[~$polkit] ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=0" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "su" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app & $[~$su] ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=0" >> $CONFIG_FILE + fi + elif [[ $# > 1 ]] && [[ $2 = "login" ]]; then + if [ "$contain_key_app" = "1" ]; then + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=$[ $cur_status_app & $[~$login] ] + sed -i "s/^EnableAuthApp=[a-zA-Z0-9]*/EnableAuthApp=$cur_status_app/g" $CONFIG_FILE + else + echo "EnableAuthApp=0" >> $CONFIG_FILE + fi + elif [ "$contain_key" = "1" ]; then sed -i 's/^EnableAuth=[a-zA-Z0-9]*/EnableAuth=false/g' $CONFIG_FILE else echo "EnableAuth=false" >> $CONFIG_FILE fi elif [ "$1" = "status" ]; then - cur_status=`sed '/^EnableAuth/!d;s/.*=//' $CONFIG_FILE` - if [ "$cur_status" = "true" ]; then - echo "enable" + cur_status=`sed '/^EnableAuth=/!d;s/.*=//' $CONFIG_FILE` + cur_status_app=`sed '/^EnableAuthApp=/!d;s/.*=//' $CONFIG_FILE` + + if [[ $# > 1 ]] && [[ $2 = "greeter" ]];then + if [ $[ $[cur_status_app] & $[greeter] ] = $greeter ]; then + echo "enable" + else + echo "disable" + fi + elif [[ $# > 1 ]] && [[ $2 = "screensaver" ]];then + if [ $[$cur_status_app & $screensaver] = $screensaver ]; then + echo "enable" + else + echo "disable" + fi + elif [[ $# > 1 ]] && [[ $2 = "sudo" ]];then + if [ $[$cur_status_app & $sudo] = $sudo ]; then + echo "enable" + else + echo "disable" + fi + elif [[ $# > 1 ]] && [[ $2 = "polkit" ]];then + if [ $[$cur_status_app & $polkit] = $polkit ]; then + echo "enable" + else + echo "disable" + fi + elif [[ $# > 1 ]] && [[ $2 = "su" ]];then + if [ $[$cur_status_app & $su] = $su ]; then + echo "enable" + else + echo "disable" + fi + elif [[ $# > 1 ]] && [[ $2 = "login" ]];then + if [ $[$cur_status_app & $login] = $login ]; then + echo "enable" + else + echo "disable" + fi + elif [ "$cur_status" = "true" ]; then + echo "enable" else - echo "disable" + echo "disable" fi else echo "Usage: bioctl status|enable|disable" diff --git a/pam-biometric/utils/biodrvctl b/pam-biometric/utils/biodrvctl index 383788d..9e4454b 100755 --- a/pam-biometric/utils/biodrvctl +++ b/pam-biometric/utils/biodrvctl @@ -35,6 +35,7 @@ else fi if [ $? -eq 0 ]; then + systemctl reset-failed biometric-authentication.service systemctl restart biometric-authentication.service fi diff --git a/polkit-agent/CMakeLists.txt b/polkit-agent/CMakeLists.txt index 8b7d6f0..bdfcbf4 100644 --- a/polkit-agent/CMakeLists.txt +++ b/polkit-agent/CMakeLists.txt @@ -2,6 +2,7 @@ cmake_minimum_required(VERSION 2.6) project(ukui-polkit-agent) pkg_check_modules(QGS REQUIRED gsettings-qt) +pkg_check_modules(KDKINFO REQUIRED kysdk-sysinfo) find_package(PolkitQt5-1 REQUIRED 0.103.0) find_package(Qt5 COMPONENTS Core Widgets DBus X11Extras Xml Network Svg) @@ -18,11 +19,17 @@ configure_file( include_directories( ${QGS_INCLUDE_DIRS} + ${KDKINFO_INCLUDE_DIRS} ) +link_directories( + ${KDKINFO_LIBRARY_DIRS} + ) + set(EXTRA_LIBS ${EXTRA_LIBS} ${QGS_LIBRARIES} + ${KDKINFO_LIBRARIES} ) include_directories( @@ -42,6 +49,7 @@ set(polkit_SRCS src/users.cpp src/pam-tally.c src/modeButton.cpp + src/kalabel.cpp ../common/generic.cpp ) diff --git a/polkit-agent/i18n_ts/bo.ts b/polkit-agent/i18n_ts/bo.ts index 2ec7e24..e29f1bf 100644 --- a/polkit-agent/i18n_ts/bo.ts +++ b/polkit-agent/i18n_ts/bo.ts @@ -9,180 +9,185 @@ - - - + + + Biometric - + use password - - + + Cancel - - + + Authenticate - + Authentication - - + + Failed to verify %1, please enter password to unlock - - + + Unable to verify %1, please enter password to unlock - + Failed to verify %1, you still have %2 verification opportunities - - NET Exception - - - - + Please enter your password or enroll your fingerprint - + + This operation requires the administrator's authorization. Please enter your password to allow this operation. + + + + A program is attempting to perform an action that requires privileges.It requires authorization to perform the action. - + Password: - + _Password: - + _Password: - - - - + + + + Account locked, - + days left - + hours left - + minutes left - + seconds left - - + + Password cannot be empty - - + + Use password - - - + + + Please try again in %1 minutes. - - - + + + Please try again in %1 seconds. - - - - + + + + Account locked permanently. - + Verify face recognition or enter password to unlock - + Press fingerprint or enter password to unlock - + Verify voiceprint or enter password to unlock - + Verify finger vein or enter password to unlock - + Verify iris or enter password to unlock - + Use the bound wechat scanning code or enter the password to unlock - + Input Password - + + Abnormal network + + + + Authentication failed, please try again. @@ -190,17 +195,17 @@ PolkitListener - + Another client is already authenticating, please try again later. - + Authentication failure, please try again. - + Password input error! diff --git a/polkit-agent/i18n_ts/bo_CN.ts b/polkit-agent/i18n_ts/bo_CN.ts index b038161..59dbbc7 100644 --- a/polkit-agent/i18n_ts/bo_CN.ts +++ b/polkit-agent/i18n_ts/bo_CN.ts @@ -1,194 +1,421 @@ + + BioAuthWidget + + Retry + 重试 + + + %1 too many unsuccessful attempts,please enter password. + %1验证失败达最大次数，请使用密码登录 + + + %1 authentication failure,there are still %2 remaining opportunities + %1认证失败，还剩%2次尝试机会 + + + Please use wechat to scan the code + 请使用微信扫码 + + + + BioDevices + + FingerPrint + 指纹 + + + FingerVein + 指静脉 + + + Iris + 虹膜 + + + Face + 人脸 + + + VoicePrint + 声纹 + + + Wechat + 微信 + + + QRCode + 二维码 + + + + LoginOptionsWidget + + Login Options + 登录选项 + + + Wechat + 微信 + + MainWindow - Form - ནས་འོང་བ། - - - days left - ཟྭ་འབྱེད་པ། - - - Please enter your password or enroll your fingerprint - གསང་ཨང་མནོན་པའམ་མཛུབ་རིམ་མནོན་རོགས། - - - Authenticate - ར་སྤྲོད། - - - in authentication, please wait... - བདེན་དཔང་ངོས་འཛིན་སྒང་ཡིན། ཁྱུག་ཙམ་སྒུག་དང་། - - + Authentication - གསལ་འབྱེད་ར་སྤྲོད། - - - Cancel - མེད་པར་བཟོ་བ - - - Description: - གསལ་བཤད།: - - - Biometric - སྐྱེ་དངོས་བརྟག་དཔྱད་སྤྱོད་པ། - - - Too many unsuccessful attempts,please enter password. - མཛུབ་རིས་ར་སྤྲོད་ཕམ་ཉེས་ཚད་ཆེས་ཆེ་ལས་བརྒལ་བ། ཁྱོས་གསང་ཨང་བཀོལ་ནས་ཟྭ་འབྱེད་རོགས། - - - Action: - འགུལ་སྟངས།： + བདེན་དཔང་ར་སྤྲོད་ Fingerprint authentication failed, you still have %1 verification opportunities - མཛུབ་རིས་ར་སྤྲོད་ཕམ་ཉེས་བྱུང་། ཁྱོད་ལ་ད་དུང་གོ་སྐབས་གཅིག་ཡོད། + 指纹验证失败，您还有%1次尝试机会 - Polkit.caller-pid: - Polkit.caller-pid： + + Form + + + + More + 更多 + + + Restart + 重新开始 + + + Password + 密码 + + + + + + Biometric + སྐྱེ་དངོས་རིག་པ། + + + + use password + གསང་གྲངས་བེད་སྤྱོད་བྱ་དགོས + + + DeviceType: + 设备类型： + + + Back + 返回 + + + Details + 详细 + + + Action Id: + 动作: + + + Description: + 描述： Polkit.subject-pid: Polkit.subject-pid： - Account locked, - རྩིས་ཐེམ་ཟྭ་བརྒྱབ་ཟིན། + Retry + 重试 - hours left - ཆུ་ཚོད་གཅིག་རྗེས་ནས་ཟྭ་འབྱེད་པ། - - - An application is attempting to perform an action that requires privileges. Authentication is required to perform this action. - བྱ་རིམ་ཞིག་གིས་ཁྱད་དབང་དགོས་པའི་འགུལ་སྟངས་ཤིག་ལག་བསྟར་བྱེད་ཚོད་བྱེད་པ། དབང་སྤྲད་ནས་འགུལ་སྟངས་འདི་ལག་བསྟར་བྱ། - - - Details - ཆ་འཕྲིན་ཞིབ་ཕྲ། - - - Password: - གསང་ཨང་། - - - minutes left - སྐར་མ་གཅིག་རྗེས་ནས་ཟྭ་འབྱེད་པ། - - - Authentication failed, please try again. - བདེན་དཔང་ངོས་འཛིན་ཕམ་ཉེས་བྱུང་། ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས། + Device types: + 设备类型： Vendor: - བཟོ་གྲྭ： + 发行商： - seconds left - སྐར་ཆའི་རྗེས་ནས་ཟྭ་འབྱེད་པ། + Action: + 动作： - Password cannot be empty - གསང་གྲངས་སྟོང་པ་ཡིན་མི་རུང་། + Polkit.caller-pid: + Polkit.caller-pid： - use password - + + + Cancel + ཕྱིར་འཐེན། + + + Authenticate + བདེན་དཔང་ར་སྤྲོད་བྱ་དགོས + + + + Use password - + གསང་གྲངས་བེད་སྤྱོད་བྱ་དགོས + Auth + 授权 + + + Too many unsuccessful attempts,please enter password. + 指纹验证失败达最大次数，请使用密码解锁 + + + %1 authentication failure,there are still %2 remaining opportunities + %1认证失败，还剩%2次尝试机会 + + + %1 too many unsuccessful attempts,please enter password. + %1验证失败达最大次数，请使用密码登录 + + + in authentication, please wait... + 认证中，请稍等... + + + + + Please try again in %1 minutes. - + ཁྱོད་ཀྱིས་ཡང་བསྐྱར་ཐེངས་གཅིག་ལ་ཚོད་ལྟ་ཞིག་བྱེད་རོགས། + + + Please try again in %1 seconds. - + ཁྱོད་ཀྱིས་དུས་ཚོད་སྐར་ཆ་གཅིག་གི་ནང་དུ་ཡང་བསྐྱར་ཚོད་ལྟ་ཞིག་བྱེད་རོགས། + + + + Account locked permanently. - + དུས་གཏན་དུ་ཟྭ་བརྒྱབ་པའི་རྩིས་ཐོ། + + + + + Password cannot be empty + གསང་གྲངས་སྟོང་པ་ཡིན་མི་སྲིད། + + + Failed to verify %1, please enter password. + 验证%1失败，请输入密码. + + + Unable to verify %1, please enter password. + 无法验证%1，请输入密码. + + + + Failed to verify %1, you still have %2 verification opportunities + %1ལ་ཞིབ་བཤེར་བྱེད་མ་ཐུབ་ན། ཁྱེད་ཚོར་ད་དུང་%2ལ་ཞིབ་བཤེར་བྱེད་པའི་གོ་སྐབས་ཡོད། + + + An application is attempting to perform an action that requires privileges. Authentication is required to perform this action. + 一个程序正试图执行一个需要特权的动作。要求授权以执行该动作。 + + + + Password: + གསང་གྲངས་ནི། + + + + Please enter your password or enroll your fingerprint + ཁྱེད་ཀྱི་གསང་གྲངས་ནང་འཇུག་བྱེད་པའམ་ཡང་ན་ཁྱེད་ཀྱི་མཛུབ་རིས + + + + Abnormal network + རྒྱུན་ལྡན་མིན་པའི་དྲ་ + + + + This operation requires the administrator's authorization. Please enter your password to allow this operation. + བྱ་སྤྱོད་འདི་ལ་དོ་དམ་པས་དབང་ཆ་སྤྲོད་དགོས། ཁྱེད་ཀྱི་གསང་གྲངས་ནང་དུ་བཅུག་ནས་གཤག་བཅོས་འདི་བྱེད་དུ་འཇུག་རོགས། + + + + _Password: + _Password་ནི། + + + + _Password: + _Password་ནི། + + + + Authentication failed, please try again. + བདེན་དཔང་ར་སྤྲོད་བྱེད་མ་ཐུབ་པས་ཁྱེད་ཀྱིས་ཡང་བསྐྱར་ཚོད་ལྟ་ཞིག་བྱེད་ + + + + days left + ཉིན་ཁ་ཤས་ལས་ལྷག་མེད + + + Biometric/code scan authentication failed too many times, please enter the password. + 生物/扫码验证失败达最大次数，请使用密码解锁. + + + Bioauth/code scan authentication failed, you still have %1 verification opportunities + 生物/扫码验证失败，您还有%1次尝试机会 + + + + + Failed to verify %1, please enter password to unlock + %1ལ་ཞིབ་བཤེར་བྱེད་མ་ཐུབ་ན། གསང་གྲངས་ནང་འཇུག་བྱས་ནས་ཟྭ་རྒྱག་རོགས། + + + + + Unable to verify %1, please enter password to unlock + %1ལ་ཞིབ་བཤེར་བྱེད་ཐབས་བྲལ་བ་དང་། གསང་གྲངས་ནང་འཇུག་བྱས་ནས་ཟྭ་རྒྱག་རོགས། NET Exception - - - - Verify face recognition or enter password to unlock - - - - Press fingerprint or enter password to unlock - - - - Verify voiceprint or enter password to unlock - - - - Verify finger vein or enter password to unlock - - - - Verify iris or enter password to unlock - - - - Failed to verify %1, you still have %2 verification opportunities - - - - Input Password - - - - Use the bound wechat scanning code or enter the password to unlock - - - - Failed to verify %1, please enter password to unlock - - - - Unable to verify %1, please enter password to unlock - + 网络异常 + A program is attempting to perform an action that requires privileges.It requires authorization to perform the action. - + གོ་རིམ་ཞིག་གིས་དམིགས་བསལ་དབང་ཆ་དགོས་པའི་བྱ་སྤྱོད་ཅིག་སྤེལ་རྩིས་བྱེད་བཞིན་ཡོད། དེས་བྱ་སྤྱོད་སྤེལ་བའི་དབང་ཆ་སྤྲོད་དགོས། - _Password: - + + Input Password + ནང་འཇུག་གི་གསང་གྲངས། - _Password: - + + hours left + དུས་ཚོད་འགའ་ལས་ལྷག་མེད + + + + minutes left + སྐར་མ་འགའ་ལས་ལྷག་མེད + + + + seconds left + གཡོན་ཕྱོགས་ཀྱི་དུས་ཚོད་སྐར་ཆ + + + + Verify face recognition or enter password to unlock + ངོ་གདོང་ངོས་འཛིན་ལ་ཞིབ་བཤེར་བྱེད་པའམ་ཡང་ན་གསང་གྲངས་ནང་ + + + + Press fingerprint or enter password to unlock + མཛུབ་རིས་མནན་པའམ་ཡང་ན་གསང་གྲངས་ནང་འཇུག་བྱས་ནས་ + + + + Verify voiceprint or enter password to unlock + སྒྲ་པར་ཞིབ་བཤེར་བྱེད་པའམ་ཡང་ན་གསང་གྲངས་ནང་འཇུག་བྱས་ནས་ཟྭ་རྒྱག + + + + Verify finger vein or enter password to unlock + མཛུབ་མོའི་ནང་དུ་ཞིབ་བཤེར་བྱེད་པའམ་ཡང་ན་གསང་གྲངས་ནང་འཇུག་བྱས་ + + + + Verify iris or enter password to unlock + iris ཞིབ་བཤེར་བྱེད་པའམ་ཡང་ན་གསང་གྲངས་ནང་འཇུག་བྱས་ནས་ཟྭ་ + + + + Use the bound wechat scanning code or enter the password to unlock + འབྲེལ་མཐུད་ཀྱི་འཕྲིན་ཕྲན་ཞིབ་བཤེར་ཨང་གྲངས་སམ་ཡང་ན་གསང་གྲངས་ནང་འཇུག་བྱས་ནས་ཟྭ་རྒྱག་པ། + + + Use the bound wechat scanning code or enter the password to log in + 使用绑定的微信扫码或输入密码登录 + + + + + + + Account locked, + རྩིས་ཐོ་ཟྭ་བརྒྱབ་པ། + + + Authentication failed, please try again + 认证失败，请重试 PolkitListener - Authentication failure, please try again. - བདེན་དཔང་ངོས་འཛིན་ཕམ་ཉེས་བྱུང་། ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས། - - + Another client is already authenticating, please try again later. - ཚོང་མགྲོན་སྣེ་གཞན་ཞིག་ནས་བདེན་དཔང་ངོས་འཛིན་བྱེད་སྒང་ཡིན། ཁྱུག་ཙམ་ནས་ཡང་བསྐྱར་ཚོད་ལྟ་བྱ་རོགས། + མངགས་བཅོལ་བྱེད་མཁན་གཞན་ཞིག་གིས་བདེན་དཔང་ར་སྤྲོད་བྱེད་བཞིན་ཡོད། ཅུང་ཙམ་འགོར་རྗེས་ཡང་བསྐྱར་ཚོད་ལྟ + + Authentication failure, please try again. + བདེན་དཔང་ར་སྤྲོད་བྱེད་མ་ཐུབ་ན་ཁྱེད་ཀྱིས་ཡང་བསྐྱར་ཚོད་ལྟ་ + + + Password input error! - + གསང་གྲངས་ནང་འཇུག་ནོར་འཁྲུལ་བྱུང་བ་རེད + + + Account locked %1 minutes due to %2 fail attempts + 账户锁定%1分钟由于%2次错误尝试 + + + Authentication failure,there are still %1 remaining opportunities + 认证失败，还剩余%1次尝试机会 + + + + QObject + + FingerPrint + 指纹 + + + FingerVein + 指静脉 + + + Iris + 虹膜 + + + Face + 人脸 + + + VoicePrint + 声纹 + + + Cancel + 取消 diff --git a/polkit-agent/i18n_ts/es.ts b/polkit-agent/i18n_ts/es.ts index 9a038a3..ac1ddd7 100644 --- a/polkit-agent/i18n_ts/es.ts +++ b/polkit-agent/i18n_ts/es.ts @@ -145,10 +145,6 @@ Verify iris or enter password to unlock - - NET Exception - - Failed to verify %1, you still have %2 verification opportunities @@ -181,6 +177,14 @@ _Password: + + Abnormal network + + + + This operation requires the administrator's authorization. Please enter your password to allow this operation. + + PolkitListener diff --git a/polkit-agent/i18n_ts/fr.ts b/polkit-agent/i18n_ts/fr.ts index 4b4cd3e..87ca0d5 100644 --- a/polkit-agent/i18n_ts/fr.ts +++ b/polkit-agent/i18n_ts/fr.ts @@ -145,10 +145,6 @@ Verify iris or enter password to unlock - - NET Exception - - Failed to verify %1, you still have %2 verification opportunities @@ -181,6 +177,14 @@ _Password: + + Abnormal network + + + + This operation requires the administrator's authorization. Please enter your password to allow this operation. + + PolkitListener diff --git a/polkit-agent/i18n_ts/pt.ts b/polkit-agent/i18n_ts/pt.ts index d528c7c..b24dbb2 100644 --- a/polkit-agent/i18n_ts/pt.ts +++ b/polkit-agent/i18n_ts/pt.ts @@ -145,10 +145,6 @@ Verify iris or enter password to unlock - - NET Exception - - Failed to verify %1, you still have %2 verification opportunities @@ -181,6 +177,14 @@ _Password: + + Abnormal network + + + + This operation requires the administrator's authorization. Please enter your password to allow this operation. + + PolkitListener diff --git a/polkit-agent/i18n_ts/ru.ts b/polkit-agent/i18n_ts/ru.ts index 65f4480..6ceb7d7 100644 --- a/polkit-agent/i18n_ts/ru.ts +++ b/polkit-agent/i18n_ts/ru.ts @@ -145,10 +145,6 @@ Verify iris or enter password to unlock - - NET Exception - - Failed to verify %1, you still have %2 verification opportunities @@ -181,6 +177,14 @@ _Password: + + Abnormal network + + + + This operation requires the administrator's authorization. Please enter your password to allow this operation. + + PolkitListener diff --git a/polkit-agent/i18n_ts/tr.ts b/polkit-agent/i18n_ts/tr.ts index 7336231..33848d7 100644 --- a/polkit-agent/i18n_ts/tr.ts +++ b/polkit-agent/i18n_ts/tr.ts @@ -34,131 +34,136 @@ MainWindow - + Authentication Kimlik Doğrulama - - + + Failed to verify %1, please enter password to unlock - - + + Unable to verify %1, please enter password to unlock - + Failed to verify %1, you still have %2 verification opportunities - - NET Exception + + Abnormal network - + + This operation requires the administrator's authorization. Please enter your password to allow this operation. + + + + A program is attempting to perform an action that requires privileges.It requires authorization to perform the action. - + Input Password - - - - + + + + Account locked, - + days left - + hours left - + minutes left - + seconds left - - + + Password cannot be empty - - + + Use password - - - + + + Please try again in %1 minutes. - - - + + + Please try again in %1 seconds. - - - - + + + + Account locked permanently. - + Verify face recognition or enter password to unlock - + Press fingerprint or enter password to unlock - + Verify voiceprint or enter password to unlock - + Verify finger vein or enter password to unlock - + Verify iris or enter password to unlock - + Use the bound wechat scanning code or enter the password to unlock @@ -180,9 +185,9 @@ Parola - - - + + + Biometric Biyometrik @@ -231,19 +236,19 @@ Polkit.caller-pid： - - + + Cancel İptal - - + + Authenticate Kimlik Doğrulaması - + use password @@ -252,7 +257,7 @@ Kimlik Doğrulaması - + Please enter your password or enroll your fingerprint @@ -265,22 +270,22 @@ Bir uygulama, ayrıcalıklar gerektiren bir eylem gerçekleştirmeye çalışıyor. Bu işlemi gerçekleştirmek için kimlik doğrulaması gerekiyor. - + Password: Parola： - + _Password: _Parola： - + _Password: _Parola： - + Authentication failed, please try again. Kimlik doğrulama başarısız, lütfen tekrar deneyin. @@ -292,17 +297,17 @@ PolkitListener - + Another client is already authenticating, please try again later. Başka bir hesap zaten kimlik doğrulaması yapıyor, lütfen daha sonra tekrar deneyin. - + Authentication failure, please try again. Kimlik doğrulama hatalı, lütfen tekrar deneyin. - + Password input error! diff --git a/polkit-agent/i18n_ts/zh_CN.ts b/polkit-agent/i18n_ts/zh_CN.ts index 3b9346c..7cb81a2 100644 --- a/polkit-agent/i18n_ts/zh_CN.ts +++ b/polkit-agent/i18n_ts/zh_CN.ts @@ -240,7 +240,17 @@ 请输入密码或者录入指纹 - + + Abnormal network + 网络异常 + + + + This operation requires the administrator's authorization. Please enter your password to allow this operation. + 本次操作需要通过管理员的授权才能继续执行，请输入密码以允许本次操作。 + + + _Password: 密码： diff --git a/polkit-agent/src/PolkitAgent.cpp b/polkit-agent/src/PolkitAgent.cpp index e5c9cf9..ef68e02 100644 --- a/polkit-agent/src/PolkitAgent.cpp +++ b/polkit-agent/src/PolkitAgent.cpp @@ -73,6 +73,7 @@ int main(int argc, char *argv[]) BioDevices devices; devices.setIsShowHotPlug(true); + devices.setUId(getuid()); agent.exec(); return EXIT_SUCCESS; } diff --git a/polkit-agent/src/PolkitListener.cpp b/polkit-agent/src/PolkitListener.cpp index 9196982..1642cca 100644 --- a/polkit-agent/src/PolkitListener.cpp +++ b/polkit-agent/src/PolkitListener.cpp @@ -35,6 +35,7 @@ #include "PolkitListener.h" #include "mainwindow.h" #include "generic.h" +#include PolkitListener::PolkitListener(QObject *parent) : Listener(parent), @@ -42,12 +43,40 @@ PolkitListener::PolkitListener(QObject *parent) currentIdentity(0), mainWindow(nullptr) { + m_isSupportTableMode = isSupportTableMode(); + m_isMavis = isMavis(); + qDebug()<<"isSupportTableMode:"<setWindowMotifHint(mainWindow->winId(), hints); mainWindow->setWindowFlags(Qt::WindowCloseButtonHint | Qt::WindowStaysOnTopHint); mainWindow->setIcon(iconName); + mainWindow->setCurProject(m_isMavis); mainWindow->setHeader(message); mainWindow->setUsers(usersList); + mainWindow->setEditInputMethod(m_isSupportTableMode); /* mainWindow->setDetails(subjectPid, callerPid, actionDesc.actionId(), diff --git a/polkit-agent/src/PolkitListener.h b/polkit-agent/src/PolkitListener.h index 49e3fec..0f2420e 100644 --- a/polkit-agent/src/PolkitListener.h +++ b/polkit-agent/src/PolkitListener.h @@ -32,6 +32,10 @@ public: PolkitListener(QObject *parent = 0); virtual ~PolkitListener(); +private: + bool isSupportTableMode(); + bool isMavis(); + public slots: void initiateAuthentication(const QString &actionId, const QString &message, @@ -58,6 +62,8 @@ private: QString cookie; MainWindow *mainWindow; bool unacknowledged_messages = false; + bool m_isSupportTableMode = false; + bool m_isMavis = false; private slots: diff --git a/polkit-agent/src/kalabel.cpp b/polkit-agent/src/kalabel.cpp new file mode 100644 index 0000000..2666f0b --- /dev/null +++ b/polkit-agent/src/kalabel.cpp @@ -0,0 +1,44 @@ +#include "kalabel.h" + + +KALabel::KALabel(QWidget *parent) + : QLabel(parent) +{ + m_strText = ""; +} + +KALabel::KALabel(QString strText, QWidget *parent) + : QLabel(strText, parent) +{ + m_strText = strText; +} + +void KALabel::setText(const QString &strText) +{ + m_strText = strText; + QLabel::setText(strText); +} + +void KALabel::paintEvent(QPaintEvent *event) +{ + QString strEText = getElidedText(font(), width() ,m_strText); + if (strEText != m_strText) { + QLabel::setText(strEText); + setToolTip(m_strText); + } else { + QLabel::setText(m_strText); + setToolTip(""); + } + QLabel::paintEvent(event); +} + +QString KALabel::getElidedText(QFont font,int width,QString strInfo) +{ + QFontMetrics fontMetrics(font); + //如果当前字体下，字符串长度大于指定宽度 + if(fontMetrics.width(strInfo) > width) + { + strInfo= QFontMetrics(font).elidedText(strInfo, Qt::ElideRight, width); + } + return strInfo; +} diff --git a/polkit-agent/src/kalabel.h b/polkit-agent/src/kalabel.h new file mode 100644 index 0000000..f2678ac --- /dev/null +++ b/polkit-agent/src/kalabel.h @@ -0,0 +1,23 @@ +#ifndef KALABEL_H +#define KALABEL_H + +#include + +class KALabel : public QLabel +{ + Q_OBJECT +public: + KALabel(QWidget *parent = nullptr); + KALabel(QString strText, QWidget *parent = nullptr); + QString getElidedText(QFont font,int width,QString strInfo); +public slots: + void setText(const QString &); + +protected: + void paintEvent(QPaintEvent *event); + +private: + QString m_strText; +}; + +#endif // KALABEL_H diff --git a/polkit-agent/src/mainwindow.cpp b/polkit-agent/src/mainwindow.cpp index 29602b0..850a82a 100644 --- a/polkit-agent/src/mainwindow.cpp +++ b/polkit-agent/src/mainwindow.cpp @@ -35,6 +35,7 @@ #include #include #include +#include #include "bioauthwidget.h" #include #include @@ -54,10 +55,10 @@ MainWindow::MainWindow(QWidget *parent) : authMode(UNDEFINED), useDoubleAuth(false), m_timer(nullptr), + w_timer(nullptr), isLockingFlg(false), m_nCurLockMin(0), - isbioSuccess(false), - useFirstDevice(false) + isbioSuccess(false) { ui->setupUi(this); setWindowTitle(tr("Authentication")); @@ -87,7 +88,7 @@ MainWindow::MainWindow(QWidget *parent) : // headerLayout->addWidget(closeBtn); // 登录选项 - m_labelTip = new QLabel(); + m_labelTip = new KALabel(); m_labelTip->setText(""); m_labelTip->hide(); m_loginOptsWidget = new LoginOptionsWidget(); @@ -98,7 +99,6 @@ MainWindow::MainWindow(QWidget *parent) : maxFailedTimes = bioDevices.getFailedTimes(); isHiddenSwitchButton = bioDevices.GetHiddenSwitchButton(); - useFirstDevice = bioDevices.getUseFirstDevice(); connect(m_loginOptsWidget, &LoginOptionsWidget::optionSelected, this, [&](unsigned uCurLoginOptType, const DeviceInfoPtr &deviceInfo){ @@ -143,7 +143,13 @@ MainWindow::MainWindow(QWidget *parent) : emit switchToBiometric(); authMode = UNDEFINED; } else { - if (nStatus >= 2) { + if (nStatus == 5 && m_deviceInfo) { + if(w_timer && w_timer->isActive()) + w_timer->stop(); + QImage imgFailed; + m_loginOptsWidget->setFaceImg(imgFailed, 2); + return; + } else if (nStatus >= 2 && nStatus != 5)if (nStatus >= 2) { if (m_deviceInfo) { uid_t curUid = getUid(userName); if(m_failMap.contains(curUid) && m_failMap[curUid].contains(m_deviceInfo->device_id)){ @@ -157,6 +163,7 @@ MainWindow::MainWindow(QWidget *parent) : m_loginOptsWidget->setFaceImg(imgFailed, 1); } if(m_failMap[curUid][m_deviceInfo->device_id] >= maxFailedTimes){ + no_changes = true; if (m_deviceInfo->biotype == REMOTE_QRCODE_TYPE) { setLoginTypeTip(tr("Failed to verify %1, please enter password to unlock").arg(BioDevices::bioTypeToString_tr(m_deviceInfo->biotype))); QImage nullImage; @@ -168,6 +175,7 @@ MainWindow::MainWindow(QWidget *parent) : useDoubleAuth = false; return ; } + no_changes = false; setLoginTypeTip(tr("Failed to verify %1, you still have %2 verification opportunities") .arg(BioDevices::bioTypeToString_tr(m_deviceInfo->biotype)) .arg(maxFailedTimes-m_failMap[curUid][m_deviceInfo->device_id])); @@ -180,7 +188,7 @@ MainWindow::MainWindow(QWidget *parent) : } if (m_uCurLoginOptType == LOGINOPT_TYPE_QRCODE && nStatus == 1) { m_isNetworkErr = true; - m_loginOptsWidget->setQRCodeMsg(tr("NET Exception")); + m_loginOptsWidget->setQRCodeMsg(tr("Abnormal network")); startBioAuth(10000); } else { startBioAuth(); @@ -221,6 +229,16 @@ MainWindow::MainWindow(QWidget *parent) : fontSize = settings->get("system-font-size").toInt(); connect(settings, &QGSettings::changed, this, &MainWindow::onConfigurationChanged); + + QDBusInterface *interfaceScreensaver = new QDBusInterface( + "org.ukui.ScreenSaver", + "/", + "org.ukui.ScreenSaver", + QDBusConnection::sessionBus()); + connect(interfaceScreensaver, SIGNAL(lock()), + this, SLOT(onLockStatus())); + connect(interfaceScreensaver, SIGNAL(unlock()), + this, SLOT(onUnlockStatus())); } MainWindow::~MainWindow() @@ -337,6 +355,7 @@ void MainWindow::on_cmbUsers_currentTextChanged(const QString &userName) m_deviceInfo = DeviceInfoPtr(); ui->lblMessage->clear(); ui->lblMessage->setToolTip(""); + setMessage(""); isLockingFlg = false; emit userChanged(this->userName); } @@ -390,6 +409,19 @@ void MainWindow::on_btnAuth_clicked() on_lePassword_returnPressed(); } +void MainWindow::onLockStatus() +{ + //m_loginOptsWidget->stopAuth(); + m_loginOptsWidget->lockStatusChanged(true); +} + +void MainWindow::onUnlockStatus() +{ + //m_loginOptsWidget->readDevicesInfo(); + m_loginOptsWidget->lockStatusChanged(false); + startBioAuth(); +} + /*** pagePassword ***/ void MainWindow::editIcon() { @@ -414,6 +446,17 @@ void MainWindow::on_lePassword_returnPressed() { emit accept(ui->lePassword->text()); ui->btnAuth->hide(); + ui->btnLoading->show(); + if(!w_timer) + { + w_timer = new QTimer(this); + w_timer->setInterval(150); + connect(w_timer, &QTimer::timeout, this, &MainWindow::updatePixmap); + } + m_waitingPixmap = QIcon::fromTheme("ukui-loading-0-symbolic").pixmap(24, 24); + ui->btnLoading->setIcon(QIcon(m_waitingPixmap)); + + w_timer->start(); // switchWidget(UNDEFINED); // setMessage(tr("in authentication, please wait...")); } @@ -469,7 +512,11 @@ void MainWindow::setIcon(const QString &iconName) void MainWindow::setHeader(const QString &text) { - ui->lblHeader->setText(text); + if(is_Mavis) + ui->lblHeader->setText(tr("This operation requires the administrator's authorization. " + "Please enter your password to allow this operation.")); + else + ui->lblHeader->setText(text); ui->lblHeader->adjustSize(); ui->lblHeader->height(); ui->lblContent->setText(tr("A program is attempting to perform an action that requires privileges." @@ -566,17 +613,17 @@ QString MainWindow::check_is_pam_message(QString text) textdomain("Linux-PAM"); char* str; QString strTrans = ""; - QByteArray ba = text.toLatin1(); // must + QByteArray ba = text.toLocal8Bit(); // must str=ba.data(); - + char l_str[1024]; int a,b; //兼容旧版本翻译，以及适配新版本翻译 if(text.contains("attemps",Qt::CaseSensitive) && sscanf(str,"Authenticated failed, %d login attemps left",&a)) - sprintf(str,_("Authenticated failed, %d login attemps left"),a); + snprintf(l_str,1024,_("Authenticated failed, %d login attemps left"),a); else if(text.contains("attempts",Qt::CaseSensitive) && sscanf(str,"Authenticated failed, %d login attempts left",&a)) - sprintf(str,_("Authenticated failed, %d login attempts left"),a); + snprintf(l_str,1024,_("Authenticated failed, %d login attempts left"),a); else if(text.contains("attempt",Qt::CaseSensitive) && sscanf(str,"Authenticated failed, %d login attempt left",&a)) - sprintf(str,_("Authenticated failed, %d login attempt left"),a); + snprintf(l_str,1024,_("Authenticated failed, %d login attempt left"),a); else if(text.contains("days",Qt::CaseSensitive) && sscanf(str,"Account locked, %d days left",&a)){ strTrans = tr("Account locked,") + QString("%1 ").arg(a) + tr("days left"); return strTrans; @@ -594,12 +641,11 @@ QString MainWindow::check_is_pam_message(QString text) return strTrans; } else{ - str = _(str); + return _(str); } - qDebug()<<"str = "<lePassword->setStyleSheet("QLineEdit{background-color: palette(Button);" +// "border-radius: 6px;border: 1px solid #F3222D;}"); }else if(situat == TRUE){ QColor color = palette().color(QPalette::WindowText); QPalette pal(this->palette()); @@ -649,12 +695,14 @@ void MainWindow::setAuthResult(bool result, const QString &text) message = tr("Authentication failed, please try again."); } - if(authMode == PASSWORD) + if(authMode == PASSWORD) { + switchWidget(PASSWORD); setMessage(message,ERROR); + } else if(authMode == BIOMETRIC) setMessage(message,ERROR); - switchWidget(PASSWORD); + } void MainWindow::clearEdit() @@ -705,6 +753,7 @@ void MainWindow::switchAuthMode(Mode mode) break; case BIOMETRIC: { + authMode = mode; qDebug() << "switch to biometric"; if (m_deviceInfo) { if (!m_loginOptsWidget->findDeviceById(m_deviceInfo->device_id) @@ -712,10 +761,10 @@ void MainWindow::switchAuthMode(Mode mode) m_deviceInfo = DeviceInfoPtr(); } } - if(authMode == PASSWORD) { + /*if(authMode == PASSWORD) { emit accept(BIOMETRIC_IGNORE); return; - }else if(!enableBioAuth){ + }else */if(!enableBioAuth){ qDebug() << "It doesn't meet the condition for enabling biometric authentication, switch to password."; emit accept(BIOMETRIC_IGNORE); return; @@ -725,19 +774,13 @@ void MainWindow::switchAuthMode(Mode mode) if(strDeviceName.isEmpty() && !m_deviceInfo) { qDebug() << "No default device"; - if(useFirstDevice == true){ - m_deviceInfo = m_loginOptsWidget->getFirstDevInfo(); - } else { - emit accept(BIOMETRIC_IGNORE); - return; - } + emit accept(BIOMETRIC_IGNORE); + return; } //第一次，获取默认设备的设备信息，之后使用的则是从设备选择窗口传出的设备信息 if(!m_deviceInfo) { m_deviceInfo = m_loginOptsWidget->findDeviceByName(strDeviceName); - if (!m_deviceInfo) - m_deviceInfo = m_loginOptsWidget->getFirstDevInfo(); } if(!m_deviceInfo){ emit accept(BIOMETRIC_IGNORE); @@ -751,7 +794,7 @@ void MainWindow::switchAuthMode(Mode mode) startBioAuth(); emit accept(BIOMETRIC_IGNORE); return; - } else if(authMode == UNDEFINED){ + } /*else if(authMode == UNDEFINED){ authMode = BIOMETRIC; if(enableBioAuth) { @@ -787,13 +830,13 @@ void MainWindow::switchAuthMode(Mode mode) startBioAuth(); emit accept(BIOMETRIC_IGNORE); return; - } else { + } else {*/ /* pass biometric's pam module if there are not available devices */ - qDebug() << "It doesn't meet the condition for enabling biometric authentication, switch to password."; - emit accept(BIOMETRIC_IGNORE); - return; - } - } +// qDebug() << "It doesn't meet the condition for enabling biometric authentication, switch to password."; +// emit accept(BIOMETRIC_IGNORE); +// return; +// } +// } } break; default: @@ -831,6 +874,7 @@ void MainWindow::switchWidget(Mode mode) { ui->widgetPasswdAuth->hide(); ui->btnAuth->hide(); + ui->btnLoading->hide(); ui->btnAuth->setText(tr("Authenticate")); ui->btnAuth->adjustSize(); ui->btnBioAuth->setText(tr("Biometric")); @@ -838,7 +882,14 @@ void MainWindow::switchWidget(Mode mode) ui->btnCancel->setText(tr("Cancel")); ui->btnCancel->adjustSize(); ui->returnButton->setText(tr("Use password")); + ui->btnLoading->setDisabled(true); ui->returnButton->adjustSize(); + if(is_Mavis){ + ui->cmbUsers->setFixedHeight(48); + ui->lePassword->setFixedHeight(48); + ui->btnAuth->setFixedHeight(48); + ui->btnCancel->setFixedHeight(48); + } switch(mode){ case PASSWORD: { @@ -878,15 +929,17 @@ void MainWindow::switchWidget(Mode mode) + ui->cmbUsers->height() + ui->lePassword->height() + ui->lblMessage->height() + ui->btnAuth->height(); } + if (m_loginOptsWidget->isHidden()) { + height -= 20 ; + } + unsigned uOptsWidgetHeight = m_loginOptsWidget->height(); if (m_loginOptsWidget->isHidden()) { uOptsWidgetHeight = 0; height -= 20 ; } - ui->lblContent->adjustSize(); - ui->lblHeader->adjustSize(); - setMinimumHeight(height + uOptsWidgetHeight); - setMaximumHeight(height + uOptsWidgetHeight); + setMinimumHeight(height + uOptsWidgetHeight + 10); + setMaximumHeight(height + uOptsWidgetHeight + 10); //m_loginOptsWidget->updateUIStatus(); ui->btnBioAuth->setStyleSheet("QPushButton{font-size:14px;}QPushButton:hover{border:none;color:#3E6CE5;}QPushButton:pressed{border:none;}"); ui->btnBioAuth->setFlat(true); @@ -895,10 +948,19 @@ void MainWindow::switchWidget(Mode mode) ui->btnBioAuth->adjustSize(); ui->widgetPasswdAuth->show(); ui->lePassword->setFocus(); - ui->lePassword->setContextMenuPolicy(Qt::NoContextMenu); //禁用右键菜单 - ui->lePassword->setAttribute(Qt::WA_InputMethodEnabled, false); - ui->lePassword->setEchoMode(QLineEdit::Password); + //ui->lePassword->setAttribute(Qt::WA_InputMethodEnabled, false); + if (m_modeButton && m_modeButton->isShowPwd()) { + ui->lePassword->setEchoMode(QLineEdit::Normal); + } else { + ui->lePassword->setEchoMode(QLineEdit::Password); + } ui->btnAuth->show(); + ui->btnLoading->hide(); + ui->lePassword->setDisabled(false); + if(w_timer && w_timer->isActive()) + { + w_timer->stop(); + } ui->btnCancel->show(); //ui->lblContent->show(); ui->returnButton->hide(); @@ -909,11 +971,10 @@ void MainWindow::switchWidget(Mode mode) case BIOMETRIC: setMinimumWidth(420); setMaximumWidth(420); - if(bioDevices.count()<1||bioDevices.count()==1){ + if(m_loginOptsWidget->getLoginOptCount() <= 1){ setMinimumHeight(392+ui->cmbUsers->height()+ui->lblHeader->height()); setMaximumHeight(392+ui->cmbUsers->height()+ui->lblHeader->height()); - } - if(bioDevices.count()>1){ + } else { setMinimumHeight(482+ui->cmbUsers->height()+ui->lblHeader->height()); setMaximumHeight(482+ui->cmbUsers->height()+ui->lblHeader->height()); } @@ -934,7 +995,7 @@ void MainWindow::switchWidget(Mode mode) default: break; } - adjustSize(); +// adjustSize(); } void MainWindow::unlock_countdown() @@ -1107,6 +1168,7 @@ void MainWindow::switchLoginOptType(unsigned uLoginOptType) QImage imgFailed; m_loginOptsWidget->setFaceImg(imgFailed, 1); } + no_changes = true; if (m_deviceInfo->biotype == REMOTE_QRCODE_TYPE) { setLoginTypeTip(tr("Failed to verify %1, please enter password to unlock").arg(BioDevices::bioTypeToString_tr(m_deviceInfo->biotype))); } else { @@ -1114,6 +1176,7 @@ void MainWindow::switchLoginOptType(unsigned uLoginOptType) } m_loginOptsWidget->setDeviceDisable(m_deviceInfo->device_id, true); } else { + no_changes = false; if (uLoginOptType != m_uCurLoginOptType || (m_deviceInfo && m_deviceInfo->device_id != m_nLastDeviceId)) { switch(uLoginOptType) { case LOGINOPT_TYPE_PASSWORD: @@ -1171,22 +1234,21 @@ void MainWindow::setLoginTypeTip(QString strLoginTypeTip) if (m_strLoginTypeTip.isEmpty()) { m_labelTip->hide(); } else { - QFontMetrics font(m_labelTip->font()); - //返回字符串末尾带省略号的字符串 - QString strDisplay = font.elidedText(m_strLoginTypeTip, Qt::ElideRight, m_labelTip->width()-8); QPalette pe; - pe.setColor(QPalette::WindowText,Qt::blue); + if(no_changes) + pe.setColor(QPalette::WindowText,Qt::red); + else + pe.setColor(QPalette::WindowText,QColor(55, 144, 250, 255)); m_labelTip->setPalette(pe); - m_labelTip->setText(strDisplay); - m_labelTip->setToolTip(m_strLoginTypeTip); + m_labelTip->setText(m_strLoginTypeTip); m_labelTip->show(); } } void MainWindow::startBioAuthDelay() { - m_loginOptsWidget->startAuth(m_deviceInfo, getUid(userName)); if (m_deviceInfo) { + m_loginOptsWidget->startAuth(m_deviceInfo, getUid(userName)); switchLoginOptType(m_loginOptsWidget->convertDeviceType(m_deviceInfo->biotype)); } else { switchLoginOptType(LOGINOPT_TYPE_PASSWORD); @@ -1211,6 +1273,17 @@ void MainWindow::onUpdateBioAuthMsg(QString strMsg) setMessage(strMsg, TRUE); } +void MainWindow::updatePixmap() +{ + ui->btnAuth->hide(); + ui->btnLoading->show(); + ui->lePassword->setDisabled(true); + QMatrix matrix; + matrix.rotate(90.0); + m_waitingPixmap = m_waitingPixmap.transformed(matrix, Qt::FastTransformation); + ui->btnLoading->setIcon(m_waitingPixmap); +} + void MainWindow::onUpdateWndSize(unsigned uLoginOptType, unsigned uLoginOptSize) { ui->lblContent->hide(); @@ -1230,7 +1303,7 @@ void MainWindow::onUpdateWndSize(unsigned uLoginOptType, unsigned uLoginOptSize) uOptsWidgetHeight = m_loginOptsWidget->height() + 10 ; } // ui->lblContent->adjustSize(); - ui->lblHeader->adjustSize(); +// ui->lblHeader->adjustSize(); int height; if(fontSize = 10){ height = 120 + ui->lblHeader->height() /*+ ui->lblContent->height()*/ @@ -1264,4 +1337,19 @@ void MainWindow::onUpdateWndSize(unsigned uLoginOptType, unsigned uLoginOptSize) setMaximumHeight(height + uOptsWidgetHeight); } +void MainWindow::setEditInputMethod(bool bEnable) +{ + qDebug()<<"setEditInputMethod:"<lePassword->setAttribute(Qt::WA_InputMethodEnabled, true); + } else { + ui->lePassword->setAttribute(Qt::WA_InputMethodEnabled, false); + } +} + +void MainWindow::setCurProject(bool isMavis) +{ + is_Mavis = isMavis; +} + /*** end of private member ***/ diff --git a/polkit-agent/src/mainwindow.h b/polkit-agent/src/mainwindow.h index 01c3deb..894e938 100644 --- a/polkit-agent/src/mainwindow.h +++ b/polkit-agent/src/mainwindow.h @@ -30,6 +30,7 @@ #include "bioauthwidget.h" #include "loginoptionswidget.h" #include "modeButton.h" +#include "kalabel.h" namespace Ui { class MainWindow; } @@ -61,6 +62,8 @@ public: void stopDoubleAuth(); QString check_is_pam_message(QString text); void switchLoginOptType(unsigned uLoginOptType); + void setEditInputMethod(bool bEnable); + void setCurProject(bool isMavis); private: uid_t getUid(const QString &userName); @@ -75,6 +78,8 @@ private: void unlock_countdown(); void editIcon(); void setLoginTypeTip(QString strLoginTypeTip); + void setMavisSheel(); + void updatePixmap(); public slots: void onUpdateBioAuthMsg(QString strMsg); @@ -91,6 +96,8 @@ private slots: void restart_bio_identify(); void startBioAuthDelay(); void onConfigurationChanged(QString key); + void onLockStatus(); + void onUnlockStatus(); signals: void accept(const QString &text); @@ -123,13 +130,12 @@ private: bool isLockingFlg; //判断当前是否正在锁定倒计时 int m_nCurLockMin; //当前锁定的分钟数 // 登录选项 - QLabel *m_labelTip = nullptr; + KALabel *m_labelTip = nullptr; LoginOptionsWidget *m_loginOptsWidget = nullptr; unsigned m_uCurLoginOptType = LOGINOPT_TYPE_PASSWORD; // 当前登录验证方式 QString m_strLoginTypeTip = ""; QTimer *m_bioTimer = nullptr; DeviceInfoPtr m_deviceInfo = nullptr; - bool useFirstDevice; bool m_isNetworkErr = false; //标题栏 QHBoxLayout *headerLayout; @@ -142,6 +148,12 @@ private: QString app_IconName; int m_nLastDeviceId = -1; + bool no_changes = false; + + bool is_Mavis = false; + + QTimer *w_timer; + QPixmap m_waitingPixmap; }; #endif // MAINWINDOW_H diff --git a/polkit-agent/src/mainwindow.ui b/polkit-agent/src/mainwindow.ui index 7d7eb36..22b4aa5 100644 --- a/polkit-agent/src/mainwindow.ui +++ b/polkit-agent/src/mainwindow.ui @@ -7,7 +7,7 @@ 0 0 459 - 419 + 432 @@ -96,6 +96,9 @@ + + true + 0 @@ -172,7 +175,7 @@ - + 0 @@ -351,6 +354,16 @@ + + + + + + + true + + + @@ -365,6 +378,13 @@ + + + KALabel + QLabel +
./src/kalabel.h
+ + diff --git a/polkit-agent/src/modeButton.cpp b/polkit-agent/src/modeButton.cpp index b9e75e4..53d0ffc 100644 --- a/polkit-agent/src/modeButton.cpp +++ b/polkit-agent/src/modeButton.cpp @@ -147,3 +147,8 @@ QPixmap ModeButton::drawSymbolicColoredPixmap(QPixmap &source, QString cgColor) } return QPixmap::fromImage(img); } + +bool ModeButton::isShowPwd() +{ + return pwdShow; +} diff --git a/polkit-agent/src/modeButton.h b/polkit-agent/src/modeButton.h index be772ce..b8fa08f 100644 --- a/polkit-agent/src/modeButton.h +++ b/polkit-agent/src/modeButton.h @@ -17,6 +17,7 @@ public: QPixmap drawSymbolicColoredPixmap(QPixmap &source, QString cgColor); void initUI(); void setModeIcon(); + bool isShowPwd(); protected: bool eventFilter(QObject *obj, QEvent *event) override; //事件过滤 diff --git a/polkit-agent/src/pam-tally.c b/polkit-agent/src/pam-tally.c index d32f578..50a3055 100644 --- a/polkit-agent/src/pam-tally.c +++ b/polkit-agent/src/pam-tally.c @@ -357,13 +357,19 @@ pam_modutil_read(int fd, char *buffer, int count) void get_tally(uid_t uid, int *tfile, struct tallylog *tally) { - char filename[50]={0}; - sprintf(filename,"%s","/tmp/.tallylog"); + char filename[50]={0}; + sprintf(filename,"/tmp/.tallylog.d/.%d",uid); + fprintf(stderr,"new_filename = :%s \n",filename); + void *void_tally = tally; - void *void_tally = tally; - if ((*tfile = open(filename, O_RDONLY)) == -1){ - fprintf(stderr, "open tallylog failed \n"); - return ; + if ((*tfile = open(filename, O_RDONLY)) == -1){ + fprintf(stderr, "lseek tallylog failed,Re-open the new file, uid = %d \n",uid); + sprintf(filename,"/tmp/.tallylog"); + fprintf(stderr,"old_filename = :%s \n",filename); + if ((*tfile = open(filename, O_RDONLY)) == -1){ + fprintf(stderr, "open tallylog failed \n"); + return ; + } } if (lseek(*tfile, (off_t)uid*(off_t)sizeof(*tally), SEEK_SET) == (off_t)-1) { diff --git a/uniauth-backend/CMakeLists.txt b/uniauth-backend/CMakeLists.txt new file mode 100644 index 0000000..330a65e --- /dev/null +++ b/uniauth-backend/CMakeLists.txt @@ -0,0 +1,26 @@ +project(uniauth-backend) + +set(CMAKE_AUTOMOC ON) + +include_directories( + ${Qt5Core_INCLUDE_DIRS} + ${Qt5DBus_INCLUDE_DIRS} + ) + +set(bin_SRCS + ${bin_SRCS} + src/main.cpp + src/biodeviceinfo.h + src/biodeviceinfo.cpp + src/serviceinterface.h + src/serviceinterface.cpp + src/servicemanager.h + src/servicemanager.cpp + ) + +add_executable(uniauth-backend ${bin_SRCS}) +target_link_libraries(uniauth-backend Qt5::Core Qt5::DBus) + +install(TARGETS uniauth-backend DESTINATION bin) +install(FILES org.ukui.UniauthBackend.conf DESTINATION /etc/dbus-1/system.d/) +install(FILES org.ukui.UniauthBackend.service DESTINATION /usr/share/dbus-1/system-services/) diff --git a/uniauth-backend/org.ukui.UniauthBackend.conf b/uniauth-backend/org.ukui.UniauthBackend.conf new file mode 100644 index 0000000..49ea12f --- /dev/null +++ b/uniauth-backend/org.ukui.UniauthBackend.conf @@ -0,0 +1,23 @@ + + + + + + + + + + + + + + + + + + diff --git a/uniauth-backend/org.ukui.UniauthBackend.service b/uniauth-backend/org.ukui.UniauthBackend.service new file mode 100644 index 0000000..38a3585 --- /dev/null +++ b/uniauth-backend/org.ukui.UniauthBackend.service @@ -0,0 +1,4 @@ +[D-BUS Service] +Name=org.ukui.UniauthBackend +Exec=/usr/bin/uniauth-backend +User=root diff --git a/uniauth-backend/src/biodeviceinfo.cpp b/uniauth-backend/src/biodeviceinfo.cpp new file mode 100644 index 0000000..d386d2b --- /dev/null +++ b/uniauth-backend/src/biodeviceinfo.cpp @@ -0,0 +1,53 @@ +/* + * Copyright (C) 2022 Tianjin KYLIN Information Technology Co., Ltd. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3, or (at your option) + * any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see . + * +**/ + +#include "biodeviceinfo.h" + +void registerCustomTypes() +{ + qDBusRegisterMetaType(); + qDBusRegisterMetaType >(); +} + +QDBusArgument &operator<<(QDBusArgument &argument, const DeviceInfo &deviceInfo) +{ + argument.beginStructure(); + argument << deviceInfo.device_id << deviceInfo.device_shortname + << deviceInfo.device_fullname << deviceInfo.driver_enable + << deviceInfo.device_available + << deviceInfo.biotype << deviceInfo.stotype + << deviceInfo.eigtype << deviceInfo.vertype + << deviceInfo.idtype << deviceInfo.bustype + << deviceInfo.dev_status << deviceInfo.ops_status; + argument.endStructure(); + return argument; +} + +const QDBusArgument &operator>>(const QDBusArgument &argument, DeviceInfo &deviceInfo) +{ + argument.beginStructure(); + argument >> deviceInfo.device_id >> deviceInfo.device_shortname + >> deviceInfo.device_fullname >> deviceInfo.driver_enable + >> deviceInfo.device_available + >> deviceInfo.biotype >> deviceInfo.stotype + >> deviceInfo.eigtype >> deviceInfo.vertype + >> deviceInfo.idtype >> deviceInfo.bustype + >> deviceInfo.dev_status >> deviceInfo.ops_status; + argument.endStructure(); + return argument; +} diff --git a/uniauth-backend/src/biodeviceinfo.h b/uniauth-backend/src/biodeviceinfo.h new file mode 100644 index 0000000..994bb17 --- /dev/null +++ b/uniauth-backend/src/biodeviceinfo.h @@ -0,0 +1,58 @@ +/* + * Copyright (C) 2022 Tianjin KYLIN Information Technology Co., Ltd. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3, or (at your option) + * any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see . + * +**/ +#ifndef BIODEVICEINFO_H +#define BIODEVICEINFO_H + +#include +#include +#include + +struct DeviceInfo { + int device_id; + QString device_shortname; /* aka driverName */ + QString device_fullname; + int driver_enable; /* The corresponding driver is enabled/disabled */ + int device_available; /* The driver is enabled and the device is connected */ + int biotype; + int stotype; + int eigtype; + int vertype; + int idtype; + int bustype; + int dev_status; + int ops_status; +}; + +enum BioType { + BIOTYPE_FINGERPRINT, + BIOTYPE_FINGERVEIN, + BIOTYPE_IRIS, + BIOTYPE_FACE, + BIOTYPE_VOICEPRINT, + __MAX_NR_BIOTYPES +}; + +#define REMOTE_QRCODE_TYPE (8) + +Q_DECLARE_METATYPE(DeviceInfo) +Q_DECLARE_METATYPE(QList) +void registerCustomTypes(); +QDBusArgument &operator<<(QDBusArgument &argument, const DeviceInfo &deviceInfo); +const QDBusArgument &operator>>(const QDBusArgument &argument, DeviceInfo &deviceInfo); + +#endif // BIODEVICEINFO_H diff --git a/uniauth-backend/src/main.cpp b/uniauth-backend/src/main.cpp new file mode 100644 index 0000000..dae33a6 --- /dev/null +++ b/uniauth-backend/src/main.cpp @@ -0,0 +1,29 @@ +/* + * Copyright (C) 2022 Tianjin KYLIN Information Technology Co., Ltd. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3, or (at your option) + * any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see . + * +**/ +#include +#include "serviceinterface.h" + +int main(int argc, char *argv[]) +{ + QCoreApplication a(argc, argv); + + ServiceInterface serviveInterface; + Q_UNUSED(serviveInterface); + + return a.exec(); +} diff --git a/uniauth-backend/src/serviceinterface.cpp b/uniauth-backend/src/serviceinterface.cpp new file mode 100644 index 0000000..3862868 --- /dev/null +++ b/uniauth-backend/src/serviceinterface.cpp @@ -0,0 +1,766 @@ +/* + * Copyright (C) 2022 Tianjin KYLIN Information Technology Co., Ltd. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3, or (at your option) + * any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see . + * +**/ +#include "serviceinterface.h" +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include "servicemanager.h" + +#define COMM_CONFIG_PATH "/etc/biometric-auth/ukui-biometric.conf" +#define USER_CONFIG_PATH "/home/%1/.biometric_auth/ukui_biometric.conf" + +ServiceInterface::ServiceInterface() +{ + bool res = QDBusConnection::systemBus().registerService("org.ukui.UniauthBackend"); + if(!res){ + qInfo()<<"registerService org.ukui.UniauthBackend failed!!"; + exit(0); + } + res = QDBusConnection::systemBus().registerObject("/org/ukui/UniauthBackend", "org.ukui.UniauthBackend", + this, QDBusConnection::ExportAllSlots|QDBusConnection::ExportAllSignals); + if(!res){ + qInfo()<<"registerObject /org/ukui/UniauthBackend failed!!"; + exit(0); + } + + registerCustomTypes(); + m_serviceInterface = new QDBusInterface(DBUS_SERVICE, DBUS_PATH, + DBUS_INTERFACE, + QDBusConnection::systemBus()); + + m_serviceInterface->setTimeout(2147483647); + connect(m_serviceInterface, SIGNAL(USBDeviceHotPlug(int, int, int)), + this, SLOT(onUSBDeviceHotPlug(int,int,int))); + updateCommDefaultDevice(-1); + initData(); + + ServiceManager *sm = ServiceManager::instance(); + connect(sm, &ServiceManager::serviceStatusChanged, + this, &ServiceInterface::onBiometricDbusChanged); +} + +void ServiceInterface::setDefaultDevice(QString userName, int bioDevType, QString deviceName) +{ + QString configPath = QString(USER_CONFIG_PATH).arg(userName); + qDebug() << configPath << bioDevType ; + QSettings settings(configPath, QSettings::IniFormat); + switch (bioDevType) { + case BIOTYPE_FACE: + settings.setValue("FC_DefaultDevice", deviceName); + break; + case BIOTYPE_FINGERPRINT: + settings.setValue("FP_DefaultDevice", deviceName); + break; + case BIOTYPE_FINGERVEIN: + settings.setValue("FV_DefaultDevice", deviceName); + break; + case BIOTYPE_IRIS: + settings.setValue("IR_DefaultDevice", deviceName); + break; + case BIOTYPE_VOICEPRINT: + settings.setValue("VP_DefaultDevice", deviceName); + break; + case REMOTE_QRCODE_TYPE: + settings.setValue("WC_DefaultDevice", deviceName); + break; + default: + break; + } + settings.sync(); + qDebug()<<"setDefaultDevice:"<serviceUid(msg.service()).value(); + struct passwd *pwinfo = getpwuid(uid); + if (pwinfo && pwinfo->pw_name) { + setDefaultDevice(pwinfo->pw_name, bioDevType, deviceName); + } else { + qInfo()<<"GetPWInfo failed!!"; + } +} + +QString ServiceInterface::getDefaultDevice(QString userName, int bioDevType) +{ + QString defaultDevice = ""; + QString configPath = QString(USER_CONFIG_PATH).arg(userName); + QSettings settings(configPath, QSettings::IniFormat); + // 获取用户旧的默认设备 + if (settings.contains("DefaultDevice")) { + QString strOldDefDev = settings.value("DefaultDevice").toString(); + if (!strOldDefDev.isEmpty()) { + for (auto devInfo : m_listDeviceInfos) { + if (devInfo && devInfo->device_shortname == strOldDefDev) { + QString strBioDefType = ""; + switch(devInfo->biotype) { + case BIOTYPE_FINGERPRINT: + strBioDefType = "FP_DefaultDevice"; + break; + case BIOTYPE_FINGERVEIN: + strBioDefType = "FV_DefaultDevice"; + break; + case BIOTYPE_IRIS: + strBioDefType = "IR_DefaultDevice"; + break; + case BIOTYPE_FACE: + strBioDefType = "FC_DefaultDevice"; + break; + case BIOTYPE_VOICEPRINT: + strBioDefType = "VP_DefaultDevice"; + break; + case REMOTE_QRCODE_TYPE: + strBioDefType = "WC_DefaultDevice"; + break; + default: + break; + } + if (!strBioDefType.isEmpty() && !settings.contains(strBioDefType)) { + settings.setValue(strBioDefType, strOldDefDev); + settings.setValue("DefaultDevice", ""); + settings.sync(); + } + if (bioDevType == devInfo->biotype) { + return strOldDefDev; + } + break; + } + } + } + } + switch (bioDevType) { + case BIOTYPE_FACE: + defaultDevice = settings.value("FC_DefaultDevice").toString(); + break; + case BIOTYPE_FINGERPRINT: + defaultDevice = settings.value("FP_DefaultDevice").toString(); + break; + case BIOTYPE_FINGERVEIN: + defaultDevice = settings.value("FV_DefaultDevice").toString(); + break; + case BIOTYPE_IRIS: + defaultDevice = settings.value("IR_DefaultDevice").toString(); + break; + case BIOTYPE_VOICEPRINT: + defaultDevice = settings.value("VP_DefaultDevice").toString(); + break; + case REMOTE_QRCODE_TYPE: + defaultDevice = settings.value("WC_DefaultDevice").toString(); + break; + default: + defaultDevice = settings.value("DefaultDevice").toString(); + break; + } + if(defaultDevice.isEmpty()) { + QSettings settings2(COMM_CONFIG_PATH, QSettings::IniFormat); + switch (bioDevType) { + case BIOTYPE_FACE: + defaultDevice = settings2.value("FC_DefaultDevice").toString(); + break; + case BIOTYPE_FINGERPRINT: + defaultDevice = settings2.value("FP_DefaultDevice").toString(); + break; + case BIOTYPE_FINGERVEIN: + defaultDevice = settings2.value("FV_DefaultDevice").toString(); + break; + case BIOTYPE_IRIS: + defaultDevice = settings2.value("IR_DefaultDevice").toString(); + break; + case BIOTYPE_VOICEPRINT: + defaultDevice = settings2.value("VP_DefaultDevice").toString(); + break; + case REMOTE_QRCODE_TYPE: + defaultDevice = settings2.value("WC_DefaultDevice").toString(); + break; + default: + defaultDevice = settings2.value("DefaultDevice").toString(); + break; + } + } + return defaultDevice; +} + +QStringList ServiceInterface::getAllDefaultDevice(QString userName) +{ + QStringList listDefDevice; + QString configPath = QString(USER_CONFIG_PATH).arg(userName); + QSettings settings(configPath, QSettings::IniFormat); + int nOldDefType = -1; + // 获取用户旧的默认设备 + if (settings.contains("DefaultDevice")) { + QString strOldDefDev = settings.value("DefaultDevice").toString(); + if (!strOldDefDev.isEmpty()) { + for (auto devInfo : m_listDeviceInfos) { + if (devInfo && devInfo->device_shortname == strOldDefDev) { + QString strBioDefType = ""; + switch(devInfo->biotype) { + case BIOTYPE_FINGERPRINT: + strBioDefType = "FP_DefaultDevice"; + break; + case BIOTYPE_FINGERVEIN: + strBioDefType = "FV_DefaultDevice"; + break; + case BIOTYPE_IRIS: + strBioDefType = "IR_DefaultDevice"; + break; + case BIOTYPE_FACE: + strBioDefType = "FC_DefaultDevice"; + break; + case BIOTYPE_VOICEPRINT: + strBioDefType = "VP_DefaultDevice"; + break; + case REMOTE_QRCODE_TYPE: + strBioDefType = "WC_DefaultDevice"; + break; + default: + break; + } + if (!strBioDefType.isEmpty() && !settings.contains(strBioDefType)) { + nOldDefType = devInfo->biotype; + listDefDevice.push_back(strOldDefDev); + settings.setValue(strBioDefType, strOldDefDev); + settings.setValue("DefaultDevice", ""); + settings.sync(); + } + break; + } + } + } + } + QSettings settings2(COMM_CONFIG_PATH, QSettings::IniFormat); + for (int nBioType = 0; nBioType <= REMOTE_QRCODE_TYPE; nBioType++) { + QString defaultDevice = ""; + if (nBioType == nOldDefType) + continue; + switch (nBioType) { + case BIOTYPE_FACE: + defaultDevice = settings.value("FC_DefaultDevice").toString(); + break; + case BIOTYPE_FINGERPRINT: + defaultDevice = settings.value("FP_DefaultDevice").toString(); + break; + case BIOTYPE_FINGERVEIN: + defaultDevice = settings.value("FV_DefaultDevice").toString(); + break; + case BIOTYPE_IRIS: + defaultDevice = settings.value("IR_DefaultDevice").toString(); + break; + case BIOTYPE_VOICEPRINT: + defaultDevice = settings.value("VP_DefaultDevice").toString(); + break; + case REMOTE_QRCODE_TYPE: + defaultDevice = settings.value("WC_DefaultDevice").toString(); + break; + default: + break; + } + if(defaultDevice.isEmpty()) { + switch (nBioType) { + case BIOTYPE_FACE: + defaultDevice = settings2.value("FC_DefaultDevice").toString(); + break; + case BIOTYPE_FINGERPRINT: + defaultDevice = settings2.value("FP_DefaultDevice").toString(); + break; + case BIOTYPE_FINGERVEIN: + defaultDevice = settings2.value("FV_DefaultDevice").toString(); + break; + case BIOTYPE_IRIS: + defaultDevice = settings2.value("IR_DefaultDevice").toString(); + break; + case BIOTYPE_VOICEPRINT: + defaultDevice = settings2.value("VP_DefaultDevice").toString(); + break; + case REMOTE_QRCODE_TYPE: + defaultDevice = settings2.value("WC_DefaultDevice").toString(); + break; + default: + break; + } + } + if (!defaultDevice.isEmpty()) { + listDefDevice.push_back(defaultDevice); + } + } + return listDefDevice; +} + +//设置通用默认设备 +void ServiceInterface::setCommDefaultDevice(int bioDevType, QString deviceName) +{ + QSettings settings(COMM_CONFIG_PATH, QSettings::IniFormat); + switch (bioDevType) { + case BIOTYPE_FACE: + settings.setValue("FC_DefaultDevice", deviceName); + break; + case BIOTYPE_FINGERPRINT: + settings.setValue("FP_DefaultDevice", deviceName); + break; + case BIOTYPE_FINGERVEIN: + settings.setValue("FV_DefaultDevice", deviceName); + break; + case BIOTYPE_IRIS: + settings.setValue("IR_DefaultDevice", deviceName); + break; + case BIOTYPE_VOICEPRINT: + settings.setValue("VP_DefaultDevice", deviceName); + break; + case REMOTE_QRCODE_TYPE: + settings.setValue("WC_DefaultDevice", deviceName); + break; + default: + break; + } + settings.sync(); + qDebug()<<"setCommDefaultDevice:"<serviceUid(msg.service()).value(); + struct passwd *pwinfo = getpwuid(uid); + if (pwinfo && pwinfo->pw_name) { + QString configPath = QString(USER_CONFIG_PATH).arg(pwinfo->pw_name); + QSettings settings(configPath, QSettings::IniFormat); + switch (bioAuthType) { + case ENABLETYPE_BIO: + settings.setValue("EnableAuth", status); + break; + case ENABLETYPE_SAVER: + settings.setValue("SaverEnable", status); + break; + case ENABLETYPE_GREETER: + settings.setValue("GreeterEnable", status); + break; + case ENABLETYPE_POLKIT: + settings.setValue("PolkitEnable", status); + break; + case ENABLETYPE_SU: + settings.setValue("SuEnable", status); + break; + case ENABLETYPE_SUDO: + settings.setValue("SudoEnable", status); + break; + case ENABLETYPE_LOGIN: + settings.setValue("LoginEnable", status); + break; + default: + break; + } + settings.sync(); + emit bioAuthStatusChanged(pwinfo->pw_name, bioAuthType, status); + qDebug()<<"setBioAuthStatus:"<pw_name<<","< 0) { + qDebug()<<"onUSBDeviceHotPlug in:"< bioPath = iface.call("GetUnit","biometric-authentication.service"); + if(!bioPath.isValid()){ + return ; + } + + QDBusInterface bioface("org.freedesktop.systemd1", bioPath.value().path(), + "org.freedesktop.DBus.Properties", QDBusConnection::systemBus()); + QDBusReply sessionReply = bioface.call("Get", "org.freedesktop.systemd1.Unit", "UnitFileState"); + if(!sessionReply.isValid()) + qWarning() << sessionReply.error(); + else { + QString res = sessionReply.value().variant().toString(); + if(res == "disable") + return; + } + + qDebug()<<"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ get activeState"; + int times = 0; + while(times<20){ + QDBusReply sessionReply = bioface.call("Get", "org.freedesktop.systemd1.Unit", "ActiveState"); + if(!sessionReply.isValid()){ + qWarning() << sessionReply.error(); + return ; + } + else { + QString res = sessionReply.value().variant().toString(); + if(res == "activating"){ + times ++; + usleep(100000); + }else{ + break; + } + } + } + qDebug()<<"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ times = "< qlist; + QDBusVariant item; + DeviceInfo *deviceInfo; + + /* 返回值为 i -- int 和 av -- array of variant */ + QDBusPendingReply > reply = m_serviceInterface->call("GetDrvList"); + reply.waitForFinished(); + if (reply.isError()) { + qDebug() << "GUI:" << reply.error(); + deviceCount = 0; + return; + } + + /* 解析 DBus 返回值，reply 有两个返回值，都是 QVariant 类型 */ + variant = reply.argumentAt(0); /* 得到第一个返回值 */ + deviceCount = variant.value(); /* 解封装得到设备个数 */ + variant = reply.argumentAt(1); /* 得到第二个返回值 */ + argument = variant.value(); /* 解封装，获取QDBusArgument对象 */ + argument >> qlist; /* 使用运算符重载提取 argument 对象里面存储的列表对象 */ + + if (nDriId != -1) { // 指定设备接入 + for (int i = 0; i < deviceCount; i++) { + item = qlist[i]; /* 取出一个元素 */ + variant = item.variant(); /* 转为普通QVariant对象 */ + /* 解封装得到 QDBusArgument 对象 */ + argument = variant.value(); + deviceInfo = new DeviceInfo(); + argument >> *deviceInfo; /* 提取最终的 DeviceInfo 结构体 */ + if (nDriId == deviceInfo->device_id) { + if (getCommDefaultDevice(deviceInfo->biotype).isEmpty()) { + setCommDefaultDevice(deviceInfo->biotype, deviceInfo->device_shortname); + } + break; + } + } + } else { + for (auto devInfo : m_listDeviceInfos) { + if (devInfo) { + delete devInfo; + devInfo = nullptr; + } + } + m_listDeviceInfos.clear(); + for (int i = 0; i < deviceCount; i++) { + item = qlist[i]; /* 取出一个元素 */ + variant = item.variant(); /* 转为普通QVariant对象 */ + /* 解封装得到 QDBusArgument 对象 */ + argument = variant.value(); + deviceInfo = new DeviceInfo(); + argument >> *deviceInfo; /* 提取最终的 DeviceInfo 结构体 */ + m_listDeviceInfos.push_back(deviceInfo); + } + } +} + +void ServiceInterface::initData() +{ + // 沿用旧app enable + QSettings sysSettings(COMM_CONFIG_PATH, QSettings::IniFormat); + if(sysSettings.contains("EnableAuthApp") || sysSettings.contains("Functions/EnableAuthApp")) { + int nAppOldStatus = 0; + if (sysSettings.contains("Functions/EnableAuthApp")) { + nAppOldStatus = sysSettings.value("Functions/EnableAuthApp").toInt(); + } else { + nAppOldStatus = sysSettings.value("EnableAuthApp").toInt(); + } + if ((nAppOldStatus&0x01) && !sysSettings.contains("GreeterEnable")) { // greeter + sysSettings.setValue("GreeterEnable", true); + } + if ((nAppOldStatus&0x02) && !sysSettings.contains("SaverEnable")) { // saver + sysSettings.setValue("SaverEnable", true); + } + if ((nAppOldStatus&0x04) && !sysSettings.contains("PolkitEnable")) { // polkit + sysSettings.setValue("PolkitEnable", true); + } + if ((nAppOldStatus&0x08) && !sysSettings.contains("SudoEnable")) { // sudo + sysSettings.setValue("SudoEnable", true); + } + if ((nAppOldStatus&0x10) && !sysSettings.contains("SuEnable")) { // su + sysSettings.setValue("SuEnable", true); + } + if ((nAppOldStatus&0x20) && !sysSettings.contains("LoginEnable")) { // login + sysSettings.setValue("LoginEnable", true); + } + } + // 沿用旧的默认设备 + if(sysSettings.contains("DefaultDevice")) { + QString strOldDefDev = sysSettings.value("DefaultDevice").toString(); + if (!strOldDefDev.isEmpty()) { + for (auto devInfo : m_listDeviceInfos) { + if (devInfo && devInfo->device_shortname == strOldDefDev) { + QString strBioDefType = ""; + switch(devInfo->biotype) { + case BIOTYPE_FINGERPRINT: + strBioDefType = "FP_DefaultDevice"; + break; + case BIOTYPE_FINGERVEIN: + strBioDefType = "FV_DefaultDevice"; + break; + case BIOTYPE_IRIS: + strBioDefType = "IR_DefaultDevice"; + break; + case BIOTYPE_FACE: + strBioDefType = "FC_DefaultDevice"; + break; + case BIOTYPE_VOICEPRINT: + strBioDefType = "VP_DefaultDevice"; + break; + case REMOTE_QRCODE_TYPE: + strBioDefType = "WC_DefaultDevice"; + break; + default: + break; + } + if (!strBioDefType.isEmpty() && !sysSettings.contains(strBioDefType)) { + sysSettings.setValue(strBioDefType, strOldDefDev); + sysSettings.setValue("DefaultDevice", ""); + } + break; + } + } + } + } + // 设置未设置过默认设备的类型，如果驱动已打开且已连接 + for (auto devInfo : m_listDeviceInfos) { + if (devInfo && devInfo->device_available > 0 && devInfo->driver_enable > 0) { + QString strBioDefType = ""; + switch(devInfo->biotype) { + case BIOTYPE_FINGERPRINT: + strBioDefType = "FP_DefaultDevice"; + break; + case BIOTYPE_FINGERVEIN: + strBioDefType = "FV_DefaultDevice"; + break; + case BIOTYPE_IRIS: + strBioDefType = "IR_DefaultDevice"; + break; + case BIOTYPE_FACE: + strBioDefType = "FC_DefaultDevice"; + break; + case BIOTYPE_VOICEPRINT: + strBioDefType = "VP_DefaultDevice"; + break; + case REMOTE_QRCODE_TYPE: + strBioDefType = "WC_DefaultDevice"; + break; + default: + break; + } + if (!strBioDefType.isEmpty() && !sysSettings.contains(strBioDefType)) { + sysSettings.setValue(strBioDefType, devInfo->device_shortname); + } + } + } + sysSettings.sync(); +} + +void ServiceInterface::onBiometricDbusChanged(bool bActive) +{ + qDebug()<<"BiometricDbus:"<. + * +**/ +#ifndef SERVICEINTERFACE_H +#define SERVICEINTERFACE_H + +#include "biodeviceinfo.h" +#include +#include +#include +#include + +#define DBUS_SERVICE "org.ukui.Biometric" +#define DBUS_PATH "/org/ukui/Biometric" +#define DBUS_INTERFACE "org.ukui.Biometric" + +enum authEnableType { + ENABLETYPE_BIO, // 全局总使能 + ENABLETYPE_SAVER, // 锁屏 + ENABLETYPE_GREETER, // 登录 + ENABLETYPE_POLKIT, // 授权 + ENABLETYPE_SU, // 暂保留 + ENABLETYPE_SUDO, // 暂保留 + ENABLETYPE_LOGIN, // 暂保留 +}; + +class ServiceInterface : public QObject, protected QDBusContext +{ + Q_OBJECT + Q_CLASSINFO("D-Bus Interface", "org.ukui.UniauthBackend") +public: + ServiceInterface(); + +public slots: + // 设置默认设备 + void setDefaultDevice(int bioDevType, QString deviceName); + // 获取默认设备 + QString getDefaultDevice(QString userName, int bioDevType); + // 获取所有默认设备 + QStringList getAllDefaultDevice(QString userName); + //生物特征开关接口 + bool getBioAuthStatus(QString userName, int bioAuthType); + void setBioAuthStatus(int bioAuthType, bool status); + // 获取最大失败次数 + int getMaxFailedTimes(); + // 获取是否使能微信扫码登录 + bool getQRCodeEnable(); + // 获取是否双认证 + bool getDoubleAuth(); + // 获取用户绑定 + bool getUserBind(); + // 获取是否在控制面板显示 + bool getIsShownInControlCenter(); + // 获取是否使用第一个设备 + bool getUseFirstDevice(); + // 获取是否隐藏切换按钮 + bool getHiddenSwitchButton(); + +private slots: + void onUSBDeviceHotPlug(int drvid, int action, int deviceNum); + void onBiometricDbusChanged(bool bActive); + +signals: + //默认设备改变 + void defaultDeviceChanged(QString userName, int bioDevType, QString deviceName); + //开关状态改变 + void bioAuthStatusChanged(QString userName, int type, bool status); + +private: + //设置默认设备 + void setDefaultDevice(QString userName, int bioDevType, QString deviceName); + //设置通用默认设备 + void setCommDefaultDevice(int bioDevType, QString deviceName); + //获取通用默认设备 + QString getCommDefaultDevice(int bioDevType); + // 获取旧版app使能值 + int getOldAppStatus(); + // 初始化数据 + void initData(); + // 更新通用默认设备 + void updateCommDefaultDevice(int nDriId); + // 等待生物识别服务 + void waitBiometricServiceStatus(); + +private: + QDBusInterface *m_serviceInterface = nullptr; + QList m_listDeviceInfos; + int deviceCount = 0; +}; + +#endif // SERVICEINTERFACE_H diff --git a/uniauth-backend/src/servicemanager.cpp b/uniauth-backend/src/servicemanager.cpp new file mode 100644 index 0000000..7219d32 --- /dev/null +++ b/uniauth-backend/src/servicemanager.cpp @@ -0,0 +1,101 @@ +/* + * Copyright (C) 2018 Tianjin KYLIN Information Technology Co., Ltd. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3, or (at your option) + * any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see . + * +**/ + +#include "servicemanager.h" +#include +#include + +#define SERVICE "biometric-authentication.service" +#define DBUS_SERVICE "org.ukui.Biometric" +#define DBUS_PATH "/org/ukui/Biometric" +#define DBUS_INTERFACE "org.ukui.Biometric" + +#define FD_DBUS_SERVICE "org.freedesktop.DBus" +#define FD_DBUS_PATH "/org/freedesktop/DBus" +#define FD_DBUS_INTERFACE "org.freedesktop.DBus" + +ServiceManager *ServiceManager::instance_ = nullptr; + +ServiceManager::ServiceManager(QObject *parent) + : QObject(parent), + dbusService(nullptr), + bioService(nullptr) +{ + init(); +} + +void ServiceManager::init() +{ + if(!dbusService) + { + dbusService = new QDBusInterface(FD_DBUS_SERVICE, + FD_DBUS_PATH, + FD_DBUS_INTERFACE, + QDBusConnection::systemBus()); + connect(dbusService, SIGNAL(NameOwnerChanged(QString, QString, QString)), + this, SLOT(onDBusNameOwnerChanged(QString,QString,QString))); + } +} + +ServiceManager *ServiceManager::instance() +{ + if(!instance_) + { + instance_ = new ServiceManager; + } + return instance_; +} + +bool ServiceManager::connectToService() +{ + if(!bioService) + { + bioService = new QDBusInterface(DBUS_SERVICE, + DBUS_PATH, + DBUS_INTERFACE, + QDBusConnection::systemBus()); + } + return bioService->isValid(); +} + +void ServiceManager::onDBusNameOwnerChanged(const QString &name, + const QString &oldOwner, + const QString &newOwner) +{ + if(name == DBUS_SERVICE) + { + qDebug() << "service status changed:" + << (newOwner.isEmpty() ? "inactivate" : "activate"); + Q_EMIT serviceStatusChanged(!newOwner.isEmpty()); + } +} + +/*! + * \brief checkServiceExist + * 检查生物识别后台服务是否已启动 + */ +bool ServiceManager::serviceExists() +{ + QDBusReply reply = dbusService->call("NameHasOwner", DBUS_SERVICE); + if(!reply.isValid()) + { + qDebug() << "check service exists error:" << reply.error(); + return false; + } + return reply.value(); +} diff --git a/uniauth-backend/src/servicemanager.h b/uniauth-backend/src/servicemanager.h new file mode 100644 index 0000000..0128b38 --- /dev/null +++ b/uniauth-backend/src/servicemanager.h @@ -0,0 +1,52 @@ +/* + * Copyright (C) 2018 Tianjin KYLIN Information Technology Co., Ltd. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3, or (at your option) + * any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see . + * +**/ + +#ifndef SERVICEMANAGER_H +#define SERVICEMANAGER_H + +#include +#include + +class ServiceManager : public QObject +{ + Q_OBJECT +public: + static ServiceManager *instance(); + bool serviceExists(); + +private: + explicit ServiceManager(QObject *parent = nullptr); + void init(); + bool connectToService(); + +Q_SIGNALS: + void serviceStatusChanged(bool activate); + +public Q_SLOTS: + void onDBusNameOwnerChanged(const QString &name, + const QString &oldOwner, + const QString &newOwner); + +private: + static ServiceManager *instance_; + QDBusInterface *dbusService; + QDBusInterface *bioService; + bool serviceStatus; +}; + +#endif // SERVICEMANAGER_H