[EPIC-04] Auth daemon #4

New issue

Closed

opened 2026-07-26 23:17:33 +02:00 by elegos · 0 comments

elegos commented

2026-07-26 23:17:33 +02:00

Owner

Main daemon binary: provider orchestration, auth pipeline, in-memory data strategy.

Scope

tokio async runtime, provider registry
Auth session lifecycle (AuthSession + Drop zeroize)
Trust policy: TPM unseal per request — no cache (integrity requirement)
Biometric templates: session-scoped, zeroize on drop
NoEnrollment + DatabaseError signals
Post-login enrollment invitation via session D-Bus + org.freedesktop.Notifications
udev hot-plug monitoring (tokio-udev)

Main daemon binary: provider orchestration, auth pipeline, in-memory data strategy. ## Scope - tokio async runtime, provider registry - Auth session lifecycle (`AuthSession` + `Drop` zeroize) - Trust policy: TPM unseal per request — no cache (integrity requirement) - Biometric templates: session-scoped, zeroize on drop - `NoEnrollment` + `DatabaseError` signals - Post-login enrollment invitation via session D-Bus + `org.freedesktop.Notifications` - udev hot-plug monitoring (tokio-udev)

elegos added this to the EPIC-04 milestone

2026-07-26 23:17:33 +02:00

elegos added the

epic

area: core

labels

2026-07-26 23:17:33 +02:00

elegos added this to the Foundation project

2026-07-26 23:21:30 +02:00

elegos closed this issue

2026-07-28 12:22:49 +02:00