Bug 481026

Summary: kscreenlocker fallback theme multimonitor race condition
Product: [Plasma] kscreenlocker Reporter: Benjamin Flesch <benjaminflesch>
Component: generalAssignee: Plasma Bugs List <plasma-bugs>
Status: CONFIRMED ---    
Severity: normal CC: fanzhuyifan, nate
Priority: NOR Keywords: multiscreen
Version: 5.93.0   
Target Milestone: ---   
Platform: Other   
OS: Linux   
See Also: https://bugs.kde.org/show_bug.cgi?id=481027
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Benjamin Flesch 2024-02-07 18:14:10 UTC
SUMMARY
***
When kscreenlocker fallback theme is used in a multimonitor setup, an instance of the fallback theme is created for each monitor. When authenticator.onPromptForSecret() signal is received every single instance receives this signal and sends the content of their password field via `authenticator.respond(password.text);`. 

In some cases, the instance with the password textfield that's been edited by the user is sent, and in some cases the empty password fields of an fallback instance on another monitor is sent first.

This creates a problem where the user types in the correct password, but the login still fails - which can lead to locking of their session (happened to me some times).
***


STEPS TO REPRODUCE
1. have a multimonitor setup
2. use fallback theme
3. type in password on one of the screens, press enter
4. sometimes, login fails even though you have typed in the proper password (verify with "show password" button on the password input box) - this is the race condition
5. once the race condition is met, you need to figure out which window is processed first and/or type in your password into the password field on each monitor to unlock again

OBSERVED RESULT
user gets locked out even though they have proper password

EXPECTED RESULT
no locking out and no race conditon

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: 5.93

ADDITIONAL INFORMATION
In my theme I have fixed this issue by setting `Connections { target : authenticator; enabled: false }` for all lockscreen instances on monitors who don't have user interaction. In order to check for user interaction, I'm using a `MouseArea { hoverEnabled: true; }` and a state transition for the lockscreen root element  like this: 

```
  states: [
    State {
      name: "NoInput"
      when: !myMouseArea.containsMouse
      PropertyChanges {
        target: myAuthenticatorConnection
        enabled: false
      }
    },
    State {
      name: "ReadyForInput"
      when: myMouseArea.containsMouse
      PropertyChanges {
        target: myAuthenticatorConnection
        enabled: true
      }
    }
  ] 
```

With this `mouseArea.containsMouse` hack you can prevent the race condition, because only the "enabled" connection will receive the signal.
Comment 1 Benjamin Flesch 2024-02-07 18:16:37 UTC
I've experienced this race condition with fallback lockscreen today on plasma v6 RC2 on a three monitor setup, one monitor via HDMI and two via DVI over an USB-C docking station (displaylink)
Comment 2 Benjamin Flesch 2024-02-07 18:20:49 UTC
can't seem to trigger it in the breeze lockscreen right now
Comment 3 fanzhuyifan 2024-02-07 18:31:23 UTC
Where is the authorization triggered? It is possible to put a patch there so that it works for all themes?
Comment 4 Nate Graham 2024-02-15 03:48:24 UTC
I think Ultimately the issue here is that the input fields should be synced, but they're not.