/*

 * /net/reactivated/Fprint/Device/foo object implementation

 * Copyright (C) 2008 Daniel Drake <dsd@gentoo.org>

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 * 

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 * 

 * You should have received a copy of the GNU General Public License along

 * with this program; if not, write to the Free Software Foundation, Inc.,

 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.

 */

#include "config.h"

#include <dbus/dbus-glib-bindings.h>

#include <dbus/dbus-glib-lowlevel.h>

#include <glib/gi18n.h>

#include <gio/gio.h>

#include <polkit/polkit.h>

#include <fprint.h>

#include <sys/types.h>

#include <pwd.h>

#include <errno.h>

#include "fprintd-marshal.h"

#include "fprintd.h"

#include "storage.h"

static char *fingers[] = {

	"unknown",

	"left-thumb",

	"left-index-finger",

	"left-middle-finger",

	"left-ring-finger",

	"left-little-finger",

	"right-thumb",

	"right-index-finger",

	"right-middle-finger",

	"right-ring-finger",

	"right-little-finger"

};

extern DBusGConnection *fprintd_dbus_conn;

static void fprint_device_claim(FprintDevice *rdev,

				const char *username,

				DBusGMethodInvocation *context);

static void fprint_device_release(FprintDevice *rdev,

	DBusGMethodInvocation *context);

static void fprint_device_verify_start(FprintDevice *rdev,

	const char *finger_name, DBusGMethodInvocation *context);

static void fprint_device_verify_stop(FprintDevice *rdev,

	DBusGMethodInvocation *context);

static void fprint_device_enroll_start(FprintDevice *rdev,

	const char *finger_name, DBusGMethodInvocation *context);

static void fprint_device_enroll_stop(FprintDevice *rdev,

	DBusGMethodInvocation *context);

static void fprint_device_list_enrolled_fingers(FprintDevice *rdev, 

						const char *username,

						DBusGMethodInvocation *context);

static void fprint_device_delete_enrolled_fingers(FprintDevice *rdev,

						  const char *username,

						  DBusGMethodInvocation *context);

static void fprint_device_delete_enrolled_fingers2(FprintDevice *rdev,

						    DBusGMethodInvocation *context);

#include "device-dbus-glue.h"

typedef enum {

	ACTION_NONE = 0,

	ACTION_IDENTIFY,

	ACTION_VERIFY,

	ACTION_ENROLL

} FprintDeviceAction;

struct session_data {

	/* method invocation for async ClaimDevice() */

	DBusGMethodInvocation *context_claim_device;

	/* method invocation for async ReleaseDevice() */

	DBusGMethodInvocation *context_release_device;

};

struct FprintDevicePrivate {

	guint32 id;

	FpDevice *dev;

	struct session_data *session;

	PolkitAuthority *auth;

	/* The current user of the device, if claimed */

	char *sender;

	/* The current user of the device, or if allowed,

	 * what was passed as a username argument */

	char *username;

	/* type of storage */

	int storage_type;

	/* Hashtable of connected clients */

	GHashTable *clients;

	/* Required to restart the operation on a retry failure. */

	FpPrint   *verify_data;

	GPtrArray *identify_data;

	gint enroll_data;

	/* whether we're running an identify, or a verify */

	FprintDeviceAction current_action;

	GCancellable *current_cancellable;

	DBusGMethodInvocation *current_cancel_context;

	/* Whether the device was disconnected */

	gboolean disconnected;

};

typedef struct FprintDevicePrivate FprintDevicePrivate;

#define DEVICE_GET_PRIVATE(o) (G_TYPE_INSTANCE_GET_PRIVATE((o), FPRINT_TYPE_DEVICE, FprintDevicePrivate))

enum fprint_device_properties {

	FPRINT_DEVICE_CONSTRUCT_DEV = 1,

	FPRINT_DEVICE_IN_USE,

	FPRINT_DEVICE_NAME,

	FPRINT_DEVICE_NUM_ENROLL,

	FPRINT_DEVICE_SCAN_TYPE

};

enum fprint_device_signals {

	SIGNAL_VERIFY_STATUS,

	SIGNAL_VERIFY_FINGER_SELECTED,

	SIGNAL_ENROLL_STATUS,

	NUM_SIGNALS,

};

static GObjectClass *parent_class = NULL;

static guint32 last_id = ~0;

static guint signals[NUM_SIGNALS] = { 0, };

static void fprint_device_finalize(GObject *object)

{

	FprintDevice *self = (FprintDevice *) object;

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(self);

	g_hash_table_destroy (priv->clients);

	/* FIXME close and stuff */

}

static void fprint_device_set_property(GObject *object, guint property_id,

	const GValue *value, GParamSpec *pspec)

{

	FprintDevice *self = (FprintDevice *) object;

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(self);

	switch (property_id) {

	case FPRINT_DEVICE_CONSTRUCT_DEV:

		priv->dev = g_value_dup_object(value);

		break;

	default:

		G_OBJECT_WARN_INVALID_PROPERTY_ID(object, property_id, pspec);

		break;

	}

}

static void fprint_device_get_property(GObject *object, guint property_id,

				       GValue *value, GParamSpec *pspec)

{

	FprintDevice *self = (FprintDevice *) object;

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(self);

	switch (property_id) {

	case FPRINT_DEVICE_CONSTRUCT_DEV:

		g_value_set_object(value, priv->dev);

		break;

	case FPRINT_DEVICE_IN_USE:

		g_value_set_boolean(value, g_hash_table_size (priv->clients) != 0);

		break;

	case FPRINT_DEVICE_NAME:

		g_value_set_static_string (value, fp_device_get_name (priv->dev));

		break;

	case FPRINT_DEVICE_NUM_ENROLL:

		if (priv->dev)

			g_value_set_int (value, fp_device_get_nr_enroll_stages (priv->dev));

		else

			g_value_set_int (value, -1);

		break;

	case FPRINT_DEVICE_SCAN_TYPE: {

		const char *type;

		if (fp_device_get_scan_type (priv->dev) == FP_SCAN_TYPE_PRESS)

			type = "press";

		else

			type = "swipe";

		g_value_set_static_string (value, type);

		break;

	}

	default:

		G_OBJECT_WARN_INVALID_PROPERTY_ID(object, property_id, pspec);

		break;

	}

}

static void fprint_device_class_init(FprintDeviceClass *klass)

{

	GObjectClass *gobject_class = G_OBJECT_CLASS(klass);

	GParamSpec *pspec;

	dbus_g_object_type_install_info(FPRINT_TYPE_DEVICE,

		&dbus_glib_fprint_device_object_info);

	parent_class = g_type_class_peek_parent(klass);

	gobject_class->finalize = fprint_device_finalize;

	gobject_class->set_property = fprint_device_set_property;

	gobject_class->get_property = fprint_device_get_property;

	g_type_class_add_private(klass, sizeof(FprintDevicePrivate));

	pspec = g_param_spec_object("dev", "Device",

				     "Set device construction property",

				     FP_TYPE_DEVICE,

				     G_PARAM_CONSTRUCT_ONLY | G_PARAM_WRITABLE | G_PARAM_READABLE);

	g_object_class_install_property(gobject_class,

					FPRINT_DEVICE_CONSTRUCT_DEV, pspec);

	pspec = g_param_spec_boolean("in-use", "In use",

				     "Whether the device is currently in use", FALSE,

				     G_PARAM_READABLE);

	g_object_class_install_property(gobject_class,

					FPRINT_DEVICE_IN_USE, pspec);

	pspec = g_param_spec_string("name", "Name",

				    "The product name of the device", NULL,

				    G_PARAM_READABLE);

	g_object_class_install_property(gobject_class,

					FPRINT_DEVICE_NAME, pspec);

	pspec = g_param_spec_string("scan-type", "Scan Type",

				    "The scan type of the device", "press",

				    G_PARAM_READABLE);

	g_object_class_install_property(gobject_class,

					FPRINT_DEVICE_SCAN_TYPE, pspec);

	pspec = g_param_spec_int("num-enroll-stages", "Number of enrollments stages",

				  "Number of enrollment stages for the device.",

				  -1, G_MAXINT, -1, G_PARAM_READABLE);

	g_object_class_install_property(gobject_class,

					FPRINT_DEVICE_NUM_ENROLL, pspec);

	signals[SIGNAL_VERIFY_STATUS] = g_signal_new("verify-status",

		G_TYPE_FROM_CLASS(gobject_class), G_SIGNAL_RUN_LAST, 0, NULL, NULL,

		fprintd_marshal_VOID__STRING_BOOLEAN, G_TYPE_NONE, 2, G_TYPE_STRING, G_TYPE_BOOLEAN);

	signals[SIGNAL_ENROLL_STATUS] = g_signal_new("enroll-status",

		G_TYPE_FROM_CLASS(gobject_class), G_SIGNAL_RUN_LAST, 0, NULL, NULL,

		fprintd_marshal_VOID__STRING_BOOLEAN, G_TYPE_NONE, 2, G_TYPE_STRING, G_TYPE_BOOLEAN);

	signals[SIGNAL_VERIFY_FINGER_SELECTED] = g_signal_new("verify-finger-selected",

		G_TYPE_FROM_CLASS(gobject_class), G_SIGNAL_RUN_LAST, 0, NULL, NULL,

		g_cclosure_marshal_VOID__STRING, G_TYPE_NONE, 1, G_TYPE_STRING);

}

static void fprint_device_init(FprintDevice *device)

{

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(device);

	priv->id = ++last_id;

	/* Setup PolicyKit */

	priv->auth = polkit_authority_get_sync (NULL, NULL);

	priv->clients = g_hash_table_new_full (g_str_hash,

					       g_str_equal,

					       g_free,

					       NULL);

}

G_DEFINE_TYPE(FprintDevice, fprint_device, G_TYPE_OBJECT);

FprintDevice *fprint_device_new(FpDevice *dev)

{

	return g_object_new(FPRINT_TYPE_DEVICE, "dev", dev, NULL);

}

guint32 _fprint_device_get_id(FprintDevice *rdev)

{

	return DEVICE_GET_PRIVATE(rdev)->id;

}

static const char *

finger_num_to_name (int finger_num)

{

	if (finger_num == -1)

		return "any";

	if (finger_num < FP_FINGER_UNKNOWN || finger_num > FP_FINGER_RIGHT_LITTLE)

		return NULL;

	return fingers[finger_num];

}

static int

finger_name_to_num (const char *finger_name)

{

	guint i;

	if (finger_name == NULL || *finger_name == '\0' || g_str_equal (finger_name, "any"))

		return -1;

	for (i = 0; i < G_N_ELEMENTS (fingers); i++) {

		if (g_str_equal (finger_name, fingers[i]))

			return i;

	}

	/* Invalid, let's try that */

	return -1;

}

static const char *

verify_result_to_name (gboolean match, GError *error)

{

	if (!error) {

		if (match)

			return "verify-match";

		else

			return "verify-no-match";

	}

	if (error->domain == FP_DEVICE_RETRY) {

		switch (error->code) {

			case FP_DEVICE_RETRY_TOO_SHORT:

				return "verify-swipe-too-short";

			case FP_DEVICE_RETRY_CENTER_FINGER:

				return "verify-finger-not-centered";

			case FP_DEVICE_RETRY_REMOVE_FINGER:

				return "verify-remove-and-retry";

			default:

				return "verify-retry-scan";

		}

	} else {

		/* Which errors should be mapped to disconnection?

		 * Are drivers/libfprint/fprintd really in agreement here?

		 */

		if (g_error_matches (error, FP_DEVICE_ERROR, FP_DEVICE_ERROR_PROTO))

			return "verify-disconnect";

		return "verify-unknown-error";

	}

}

static const char *

enroll_result_to_name (gboolean completed, gboolean enrolled, GError *error)

{

	if (!error) {

		if (!completed)

			return "enroll-stage-passed";

		else if (enrolled)

			return "enroll-completed";

		else

			return "enroll-failed";

	}

	if (error->domain == FP_DEVICE_RETRY) {

		switch (error->code) {

			case FP_DEVICE_RETRY_TOO_SHORT:

				return "enroll-swipe-too-short";

			case FP_DEVICE_RETRY_CENTER_FINGER:

				return "enroll-finger-not-centered";

			case FP_DEVICE_RETRY_REMOVE_FINGER:

				return "verify-remove-and-retry";

			default:

				return "enroll-remove-and-retry";

		}

	} else {

		/* Which errors should be mapped to disconnection?

		 * Are drivers/libfprint/fprintd really in agreement here?

		 */

		if (g_error_matches (error, FP_DEVICE_ERROR, FP_DEVICE_ERROR_PROTO))

			return "enroll-disconnected";

		else if (g_error_matches (error, FP_DEVICE_ERROR, FP_DEVICE_ERROR_DATA_FULL))

			return "enroll-data-full";

		return "enroll-unknown-error";

	}

}

static void

set_disconnected (FprintDevicePrivate *priv, const char *res)

{

	if (g_str_equal (res, "enroll-disconnected") ||

	    g_str_equal (res, "verify-disconnected"))

		priv->disconnected = TRUE;

}

static gboolean

_fprint_device_check_claimed (FprintDevice *rdev,

			      DBusGMethodInvocation *context,

			      GError **error)

{

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	char *sender;

	gboolean retval;

	/* The device wasn't claimed, exit */

	if (priv->sender == NULL) {

		g_set_error (error, FPRINT_ERROR, FPRINT_ERROR_CLAIM_DEVICE,

			     _("Device was not claimed before use"));

		return FALSE;

	}

	sender = dbus_g_method_get_sender (context);

	retval = g_str_equal (sender, priv->sender);

	g_free (sender);

	if (retval == FALSE) {

		g_set_error (error, FPRINT_ERROR, FPRINT_ERROR_ALREADY_IN_USE,

			     _("Device already in use by another user"));

	}

	return retval;

}

static gboolean

_fprint_device_check_polkit_for_action (FprintDevice *rdev, DBusGMethodInvocation *context, const char *action, GError **error)

{

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	char *sender;

	PolkitSubject *subject;

	PolkitAuthorizationResult *result;

	GError *_error = NULL;

	/* Check that caller is privileged */

	sender = dbus_g_method_get_sender (context);

	subject = polkit_system_bus_name_new (sender);

	g_free (sender);

	result = polkit_authority_check_authorization_sync (priv->auth,

                                                            subject,

                                                            action,

							    NULL,

                                                            POLKIT_CHECK_AUTHORIZATION_FLAGS_ALLOW_USER_INTERACTION,

					                    NULL, &_error);

	g_object_unref (subject);

	if (result == NULL) {

		g_set_error (error, FPRINT_ERROR,

			     FPRINT_ERROR_PERMISSION_DENIED,

			     "Not Authorized: %s", _error->message);

		g_error_free (_error);

		return FALSE;

	}

	if (!polkit_authorization_result_get_is_authorized (result)) {

		g_set_error (error, FPRINT_ERROR,

			     FPRINT_ERROR_PERMISSION_DENIED,

			     "Not Authorized: %s", action);

		g_object_unref (result);

		return FALSE;

	}

	g_object_unref (result);

	return TRUE;

}

static gboolean

_fprint_device_check_polkit_for_actions (FprintDevice *rdev,

					 DBusGMethodInvocation *context,

					 const char *action1,

					 const char *action2,

					 GError **error)

{

	if (_fprint_device_check_polkit_for_action (rdev, context, action1, error) != FALSE)

		return TRUE;

	g_error_free (*error);

	*error = NULL;

	return _fprint_device_check_polkit_for_action (rdev, context, action2, error);

}

static char *

_fprint_device_check_for_username (FprintDevice *rdev,

				   DBusGMethodInvocation *context,

				   const char *username,

				   char **ret_sender,

				   GError **error)

{

	DBusConnection *conn;

	DBusError dbus_error;

	char *sender;

	unsigned long uid;

	struct passwd *user;

	/* Get details about the current sender, and username/uid */

	conn = dbus_g_connection_get_connection (fprintd_dbus_conn);

	sender = dbus_g_method_get_sender (context);

	dbus_error_init (&dbus_error);

	uid = dbus_bus_get_unix_user (conn, sender, &dbus_error);

	if (dbus_error_is_set(&dbus_error)) {

		g_free (sender);

		dbus_set_g_error (error, &dbus_error);

		return NULL;

	}

	user = getpwuid (uid);

	if (user == NULL) {

		g_free (sender);

		g_set_error(error, FPRINT_ERROR, FPRINT_ERROR_INTERNAL,

			    "Failed to get information about user UID %lu", uid);

		return NULL;

	}

	/* The current user is usually allowed to access their

	 * own data, this should be followed by PolicyKit checks

	 * anyway */

	if (username == NULL || *username == '\0' || g_str_equal (username, user->pw_name)) {

		if (ret_sender != NULL)

			*ret_sender = sender;

		else

			g_free (sender);

		return g_strdup (user->pw_name);

	}

	/* If we're not allowed to set a different username,

	 * then fail */

	if (_fprint_device_check_polkit_for_action (rdev, context, "net.reactivated.fprint.device.setusername", error) == FALSE) {

		g_free (sender);

		return NULL;

	}

	if (ret_sender != NULL)

		*ret_sender = sender;

	else

		g_free (sender);

	return g_strdup (username);

}

static void

_fprint_device_client_vanished (GDBusConnection *connection,

				const char *name,

				FprintDevice *rdev)

{

	g_autoptr(GError) error = NULL;

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	/* Was that the client that claimed the device? */

	if (g_strcmp0 (priv->sender, name) == 0) {

		while (priv->current_action != ACTION_NONE) {

			g_cancellable_cancel (priv->current_cancellable);

			g_main_context_iteration (NULL, TRUE);

		}

		if (!fp_device_close_sync (priv->dev, NULL, &error)) {

			g_warning ("Error closing device after disconnect: %s", error->message);

		}

		g_slice_free (struct session_data, priv->session);

		priv->session = NULL;

		g_clear_pointer (&priv->sender, g_free);

		g_clear_pointer (&priv->username, g_free);

	}

	g_hash_table_remove (priv->clients, name);

	if (g_hash_table_size (priv->clients) == 0) {

		g_object_notify (G_OBJECT (rdev), "in-use");

	}

}

static void

_fprint_device_add_client (FprintDevice *rdev, const char *sender)

{

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	guint id;

	id = GPOINTER_TO_UINT (g_hash_table_lookup (priv->clients, sender));

	if (id == 0) {

		id = g_bus_watch_name (G_BUS_TYPE_SYSTEM,

				       sender,

				       G_BUS_NAME_WATCHER_FLAGS_NONE,

				       NULL,

				       (GBusNameVanishedCallback) _fprint_device_client_vanished,

				       rdev,

				       NULL);

		g_hash_table_insert (priv->clients, g_strdup (sender), GUINT_TO_POINTER(id));

		g_object_notify (G_OBJECT (rdev), "in-use");

	}

}

static void dev_open_cb(FpDevice *dev, GAsyncResult *res, void *user_data)

{

	g_autoptr(GError) error = NULL;

	FprintDevice *rdev = user_data;

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	struct session_data *session = priv->session;

	if (!fp_device_open_finish (dev, res, &error)) {

		g_autoptr(GError) dbus_error = NULL;

		g_clear_pointer (&priv->sender, g_free);

		dbus_error = g_error_new (FPRINT_ERROR,

		                          FPRINT_ERROR_INTERNAL,

		                          "Open failed with error: %s", error->message);

		dbus_g_method_return_error(session->context_claim_device, error);

		return;

	}

	g_debug("device %d claimed", priv->id);

	dbus_g_method_return(session->context_claim_device);

}

static void fprint_device_claim(FprintDevice *rdev,

				const char *username,

				DBusGMethodInvocation *context)

{

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	GError *error = NULL;

	char *sender, *user;

	/* Is it already claimed? */

	if (priv->sender != NULL) {

		g_set_error(&error, FPRINT_ERROR, FPRINT_ERROR_ALREADY_IN_USE,

			    "Device was already claimed");

		dbus_g_method_return_error(context, error);

		g_error_free(error);

		return;

	}

	g_assert (priv->username == NULL);

	g_assert (priv->sender == NULL);

	sender = NULL;

	user = _fprint_device_check_for_username (rdev,

						  context,

						  username,

						  &sender,

						  &error);

	if (user == NULL) {

		g_free (sender);

		dbus_g_method_return_error (context, error);

		g_error_free (error);

		return;

	}

	if (_fprint_device_check_polkit_for_actions (rdev, context,

						     "net.reactivated.fprint.device.verify",

						     "net.reactivated.fprint.device.enroll",

						     &error) == FALSE) {

		g_free (sender);

		g_free (user);

		dbus_g_method_return_error (context, error);

		g_error_free (error);

		return;

	}

	_fprint_device_add_client (rdev, sender);

	priv->username = user;

	priv->sender = sender;

	g_debug ("user '%s' claiming the device: %d", priv->username, priv->id);

	priv->session = g_slice_new0(struct session_data);

	priv->session->context_claim_device = context;

	fp_device_open (priv->dev, NULL, (GAsyncReadyCallback) dev_open_cb, rdev);

}

static void dev_close_cb(FpDevice *dev, GAsyncResult *res, void *user_data)

{

	g_autoptr(GError) error = NULL;

	FprintDevice *rdev = user_data;

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	struct session_data *session = priv->session;

	if (!fp_device_close_finish (dev, res, &error)) {

		g_autoptr(GError) dbus_error = NULL;

		g_clear_pointer (&priv->sender, g_free);

		dbus_error = g_error_new (FPRINT_ERROR,

		                          FPRINT_ERROR_INTERNAL,

		                          "Release failed with error: %s", error->message);

		dbus_g_method_return_error(session->context_release_device, error);

		return;

	}

	g_debug("device %d released", priv->id);

	dbus_g_method_return(session->context_release_device);

	g_slice_free (struct session_data, priv->session);

	priv->session = NULL;

	g_clear_pointer (&priv->sender, g_free);

	g_clear_pointer (&priv->username, g_free);

}

static void fprint_device_release(FprintDevice *rdev,

	DBusGMethodInvocation *context)

{

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	struct session_data *session = priv->session;

	GError *error = NULL;

	if (_fprint_device_check_claimed(rdev, context, &error) == FALSE) {

		dbus_g_method_return_error (context, error);

		g_error_free(error);

		return;

	}

	/* People that can claim can also release */

	if (_fprint_device_check_polkit_for_actions (rdev, context,

						     "net.reactivated.fprint.device.verify",

						     "net.reactivated.fprint.device.enroll",

						     &error) == FALSE) {

		dbus_g_method_return_error (context, error);

		g_error_free(error);

		return;

	}

	session->context_release_device = context;

	fp_device_close (priv->dev, NULL, (GAsyncReadyCallback) dev_close_cb, rdev);

}

static void verify_cb(FpDevice *dev, GAsyncResult *res, void *user_data)

{

	g_autoptr(GError) error = NULL;

	struct FprintDevice *rdev = user_data;

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	gboolean success;

	const char *name;

	gboolean match;

	success = fp_device_verify_finish (dev, res, &match, NULL, &error);

	g_assert (!!success == !error);

	name = verify_result_to_name (match, error);

	g_debug("verify_cb: result %s", name);

	set_disconnected (priv, name);

	/* Automatically restart the operation for retry failures */

	if (error && error->domain == FP_DEVICE_RETRY) {

		g_signal_emit(rdev, signals[SIGNAL_VERIFY_STATUS], 0, name, FALSE);

		fp_device_verify (priv->dev,

				  priv->verify_data,

				  priv->current_cancellable,

				  (GAsyncReadyCallback) verify_cb,

				  rdev);

	} else {

		g_clear_object (&priv->verify_data);

		g_signal_emit(rdev, signals[SIGNAL_VERIFY_STATUS], 0, name, TRUE);

		/* Return the cancellation or reset action right away if vanished. */

		if (priv->current_cancel_context) {

			dbus_g_method_return(priv->current_cancel_context);

			priv->current_cancel_context = NULL;

			priv->current_action = ACTION_NONE;

		} else if (g_cancellable_is_cancelled (priv->current_cancellable)) {

			priv->current_action = ACTION_NONE;

		}

		g_clear_object (&priv->current_cancellable);

	}

}

static void identify_cb(FpDevice *dev, GAsyncResult *res, void *user_data)

{

	g_autoptr(GError) error = NULL;

	struct FprintDevice *rdev = user_data;

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	const char *name;

	gboolean success;

	FpPrint *match;

	success = fp_device_identify_finish (dev, res, &match, NULL, &error);

	g_assert (!!success == !error);

	name = verify_result_to_name (match != NULL, error);

	g_debug("verify_cb: result %s", name);

	set_disconnected (priv, name);

	/* Automatically restart the operation for retry failures */

	if (error && error->domain == FP_DEVICE_RETRY) {

		g_signal_emit (rdev, signals[SIGNAL_VERIFY_STATUS], 0, name, FALSE);

		fp_device_identify (priv->dev,

				    priv->identify_data,

				    priv->current_cancellable,

				    (GAsyncReadyCallback) identify_cb,

				    rdev);

	} else {

		g_clear_pointer (&priv->identify_data, g_ptr_array_unref);

		g_signal_emit (rdev, signals[SIGNAL_VERIFY_STATUS], 0, name, TRUE);

		/* Return the cancellation or reset action right away if vanished. */

		if (priv->current_cancel_context) {

			dbus_g_method_return(priv->current_cancel_context);

			priv->current_cancel_context = NULL;

			priv->current_action = ACTION_NONE;

		} else if (g_cancellable_is_cancelled (priv->current_cancellable)) {

			priv->current_action = ACTION_NONE;

		}

		g_clear_object (&priv->current_cancellable);

	}

}

static void fprint_device_verify_start(FprintDevice *rdev,

	const char *finger_name, DBusGMethodInvocation *context)

{

	FprintDevicePrivate *priv = DEVICE_GET_PRIVATE(rdev);

	g_autoptr(GPtrArray) gallery = NULL;

	g_autoptr(FpPrint) print = NULL;

	g_autoptr(GError) error = NULL;

	guint finger_num = finger_name_to_num (finger_name);

	if (_fprint_device_check_claimed(rdev, context, &error) == FALSE) {

		dbus_g_method_return_error (context, error);

		return;

	}

	if (_fprint_device_check_polkit_for_action (rdev, context, "net.reactivated.fprint.device.verify", &error) == FALSE) {

		dbus_g_method_return_error (context, error);

		return;

	}

	if (priv->current_action != ACTION_NONE) {

		if (priv->current_action == ACTION_ENROLL) {

			g_set_error(&error, FPRINT_ERROR, FPRINT_ERROR_ALREADY_IN_USE,

				    "Enrollment in progress");

		} else {

			g_set_error(&error, FPRINT_ERROR, FPRINT_ERROR_ALREADY_IN_USE,

				    "Verification already in progress");

		}

		dbus_g_method_return_error(context, error);

		return;

	}

	if (finger_num == -1) {

		GSList *prints;

		prints = store.discover_prints(priv->dev, priv->username);

		if (prints == NULL) {

			g_set_error(&error, FPRINT_ERROR, FPRINT_ERROR_NO_ENROLLED_PRINTS,

				    "No fingerprints enrolled");

			dbus_g_method_return_error(context, error);

			return;

		}

		if (fp_device_supports_identify (priv->dev)) {

			GSList *l;

			gallery = g_ptr_array_new_with_free_func (g_object_unref);

			for (l = prints; l != NULL; l = l->next) {

				g_debug ("adding finger %d to the gallery", GPOINTER_TO_INT (l->data));

				store.print_data_load(priv->dev, GPOINTER_TO_INT (l->data),

						      priv->username, &print);

				if (print)

					g_ptr_array_add (gallery, g_steal_pointer (&print));

			}

		} else {

			finger_num = GPOINTER_TO_INT (prints->data);

		}

		g_slist_free(prints);

	}

	if (fp_device_supports_identify (priv->dev) && finger_num == -1) {

		if (gallery->len == 0) {

			g_set_error(&error, FPRINT_ERROR, FPRINT_ERROR_NO_ENROLLED_PRINTS,

				    "No fingerprints on that device");