feat(E21-S3): Daemon enrollment session state and Enroll/EnrollFinish/EnrollCancel D-Bus methods #33

New issue

Closed

opened 2026-07-29 12:14:37 +02:00 by elegos · 0 comments

elegos commented

2026-07-29 12:14:37 +02:00

Owner

Part of EPIC-21 (#24). See LLD: docs/lld/enrollment-session.md

What

Core daemon wiring for enrollment sessions:

linux-hello-daemon/src/state.rs

Add ActiveEnrollment struct (authenticator, username, owner_bus_name, credential Arc, task_handle)
Add active_sessions: HashMap<String, ActiveEnrollment> to AppState

linux-hello-daemon/src/dbus.rs

Implement enroll(authenticator, username) → session_id:
- Authorize with polkit enroll-self or root check
- Spawn enrollment task calling ProviderEnrollment::enroll_session
- Return session_id
Implement enroll_finish(session_id) → bool:
- Read credential from session, open enrollment DB, write, flush with TPM
Implement enroll_cancel(session_id) → ():
- Abort task, drop session
Add new enrollment D-Bus signals (EnrollStep, EnrollPoseRequired, EnrollFrame, EnrollPoseCaptured, EnrollPoseRetry, EnrollComplete, EnrollError)
Handle enrollment DaemonEvent variants in emit_signal

crates/linux-hello-ipc/src/dbus/proxy.rs

Expose new signals via proxy

Dependencies

S1 / #31, S2 / #32 must be completed first

Part of EPIC-21 (#24). See LLD: docs/lld/enrollment-session.md ## What Core daemon wiring for enrollment sessions: **`linux-hello-daemon/src/state.rs`** - Add `ActiveEnrollment` struct (authenticator, username, owner_bus_name, credential Arc, task_handle) - Add `active_sessions: HashMap<String, ActiveEnrollment>` to `AppState` **`linux-hello-daemon/src/dbus.rs`** - Implement `enroll(authenticator, username) → session_id`: - Authorize with polkit enroll-self or root check - Spawn enrollment task calling `ProviderEnrollment::enroll_session` - Return session_id - Implement `enroll_finish(session_id) → bool`: - Read credential from session, open enrollment DB, write, flush with TPM - Implement `enroll_cancel(session_id) → ()`: - Abort task, drop session - Add new enrollment D-Bus signals (EnrollStep, EnrollPoseRequired, EnrollFrame, EnrollPoseCaptured, EnrollPoseRetry, EnrollComplete, EnrollError) - Handle enrollment DaemonEvent variants in `emit_signal` **`crates/linux-hello-ipc/src/dbus/proxy.rs`** - Expose new signals via proxy ## Dependencies - S1 / #31, S2 / #32 must be completed first

elegos referenced this issue

2026-07-29 12:14:48 +02:00

feat(E21-S4): Enrollment session cleanup background task and polkit enroll-self/enroll-other actions #34

elegos added the

story

area: ipc

labels

2026-07-29 12:16:37 +02:00

elegos added this to the Foundation project

2026-07-29 12:16:55 +02:00

elegos closed this issue

2026-07-29 12:44:09 +02:00