{"id":13609209,"url":"https://github.com/spaghetti-/pam-touchid","last_synced_at":"2025-04-12T19:33:31.015Z","repository":{"id":147786460,"uuid":"93309589","full_name":"spaghetti-/pam-touchid","owner":"spaghetti-","description":"Pluggable Authentication Module for TouchID enabled MacBooks","archived":false,"fork":false,"pushed_at":"2021-03-07T20:28:52.000Z","size":14,"stargazers_count":32,"open_issues_count":0,"forks_count":2,"subscribers_count":8,"default_branch":"master","last_synced_at":"2024-08-01T19:51:39.253Z","etag":null,"topics":["macos","pam-module","touchbar","touchid"],"latest_commit_sha":null,"homepage":null,"language":"Objective-C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spaghetti-.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2017-06-04T11:40:41.000Z","updated_at":"2024-02-26T20:29:19.000Z","dependencies_parsed_at":"2023-05-27T13:00:26.837Z","dependency_job_id":null,"html_url":"https://github.com/spaghetti-/pam-touchid","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spaghetti-%2Fpam-touchid","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spaghetti-%2Fpam-touchid/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spaghetti-%2Fpam-touchid/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spaghetti-%2Fpam-touchid/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spaghetti-","download_url":"https://codeload.github.com/spaghetti-/pam-touchid/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":223538945,"owners_count":17162017,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["macos","pam-module","touchbar","touchid"],"created_at":"2024-08-01T19:01:33.299Z","updated_at":"2024-11-07T15:30:30.556Z","avatar_url":"https://github.com/spaghetti-.png","language":"Objective-C","funding_links":[],"categories":["Objective-C"],"sub_categories":[],"readme":"Pluggable Authentication Module using Touch-ID\n----------------------------------------------\n\nThis module allows us to authenticate services via touch-id using Apple's\n`LocalAuthentication` API. I am using the module to authenticate `sudo` as it's\nsomething we run frequently. The module can be dropped in to authenticate any\nother PAM enabled service as well.\n\nNOTE: Apple has added its own pam touch-id module to the OS and you should\nuse that. Please see: https://news.ycombinator.com/item?id=26302139\n\n\nCompilation\n-----------\n\nCompile this module as the user who has touchid active. Otherwise manually edit\nthe user id's inside the .m file.\n\n\n`make all`\n\nCaveats\n------- \n\nThe compiled module must be installed to `/usr/lib/pam` which is a system\ndirectory protected by System Integrity Protection (SIP). To install the module\nyou have to disable this (no worries, it can be enabled later).\n\nReboot while holding Command-R, go into the recovery mode and spawn a new shell.\nIn the shell run \n\n```\ncsrutil disable\n```\n\nReboot, copy the module over by doing `sudo cp pam_touchid.so /usr/lib/pam/`\n\nNext, add this line to the top of `/etc/pam.d/sudo` \n\n```\nauth       sufficient     pam_touchid.so\n```\n\nThis also allows fallback to standard password authentication if your finger\nfails.\n\nReboot back into recovery to enable SIP again\n\n```\ncsrutil enable\n```\n\nScreenshot\n----------\n\n\nHere's what shows on the touchbar when you try to `sudo` with the module\ninstalled\n\n![Touchbar screenshot](tscrot.png)\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fspaghetti-%2Fpam-touchid","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fspaghetti-%2Fpam-touchid","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fspaghetti-%2Fpam-touchid/lists"}