re-trigger "pam" (inserting u2f key *after* greeter is already loaded)

[colemickens]

Hi,

This is a bit esoteric, I'm happy to try to patch and test this myself, especially if someone can give me a pointer.

I am trying to get away from passwords for my local machine. I have PAM configured to allow me to login with a u2f/fido2 token.

However, I also have udev configured to loginctl lock-sessions whenever I remove my fido2 token. This ends up trigger cosmic-greeter, which then does not find my fido2 token available, and switches to password prompt.

I'm wondering/hoping that there's a way to maybe bind Escape to "re-trigger" PAM? or like (securely) soft-reset the greeter/unlock process?/

Thanks for any tips! And thanks for Cosmic, already feels great!

[ryanabx]

How does it work in other display managers? That'd be a good place to start for some prior art on the subject