feat: add plasma-face-unlock

src/daemon/server.h

@@ -0,0 +1,96 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+//
+// The socket, and who may ask for what.
+
+#pragma once
+
+#include "settings.h"
+#include "vision.h"
+
+#include <QJsonObject>
+#include <QList>
+#include <QLocalServer>
+#include <QObject>
+#include <QPointer>
+#include <QThread>
+#include <QTimer>
+
+#include <sys/types.h>
+
+class AgentLink;
+class Client;
+class Job;
+
+struct ServerOptions {
+    QString socketPath;
+    int systemdFd = -1;
+    QString stateDir;
+    QString configPath;
+    QString modelDir;
+    // Exit after this long with nothing to do. 0 stays up.
+    int idleSeconds = 0;
+    // Running as somebody other than root is only ever development, and only
+    // touches that person's own test data. polkit is not asked then.
+    bool askPolkit = true;
+};
+
+class Server : public QObject
+{
+    Q_OBJECT
+public:
+    explicit Server(const ServerOptions &options, QObject *parent = nullptr);
+    ~Server() override;
+
+    bool start(QString *error);
+
+private:
+    void onConnection();
+    void onRequest(Client *client, const QJsonObject &request);
+    void onDisconnected(Client *client);
+
+    void handleStatus(Client *client);
+    void handleCameras(Client *client);
+    void handleVerify(Client *client, const QJsonObject &request);
+    void handleEnroll(Client *client, const QJsonObject &request);
+    void handleList(Client *client, const QJsonObject &request);
+    void handleChange(Client *client, const QJsonObject &request);
+    void handleWatch(Client *client);
+    void handleUnlocked(Client *client);
+
+    // The user a request is about: the caller, or for root whoever it names.
+    // Returns false (and answers) when the caller may not act for them.
+    bool targetUser(Client *client, const QJsonObject &request, uid_t *uid);
+    void authorize(Client *client, std::function<void()> then);
+    void reply(Client *client, QJsonObject message, bool close = true);
+    void fail(Client *client, const QString &reason, const QJsonObject &extra = {});
+
+    bool ensureVision(QString *error);
+    Settings settings() const;
+
+    void startJob(Job *job, Client *owner);
+    void onJobEvent(const QJsonObject &event);
+    void onJobDone();
+    void broadcast(uid_t uid, const QJsonObject &event);
+
+    void updateIdle();
+
+    ServerOptions m_options;
+    QLocalServer m_server;
+    QList<Client *> m_clients;
+    Vision m_vision;
+    bool m_visionLoaded = false;
+
+    Job *m_job = nullptr;
+    QThread *m_jobThread = nullptr;
+    QPointer<Client> m_jobOwner;
+    // The session to tell about the running scan, when it is not the lock
+    // screen's own (see agentlink.h).
+    QPointer<AgentLink> m_agentLink;
+
+    QTimer m_idle;
+
+    // Asking polkit whether faces may be changed. While that question is
+    // open, a scan for an admin prompt is refused: the answer to "may a face
+    // be added" has to be the password, not a face.
+    int m_manageChecks = 0;
+};