sudo with Touch ID support

touchid_sudo.sh

#!/usr/bin/env bash

#
# Original idea:
# https://github.com/SladeGetz/MacM1_SudoTID/blob/main/sudo_tid.sh
#

# Check if we are running as a superuser (ID should be 0).
user_id=`id -u`

if [[ $user_id -ne 0 ]]
then
	echo "ERROR: You need to run this command using as a superuser (sudo)!"
	exit 1
fi

filename="/etc/pam.d/sudo"

# Parse the PAM sudo configuration for Touch ID support.
if grep -q "pam_tid.so" $filename
then
	# We do nothing if it has already been configured.
	echo "Touch ID has been already configured, no need to change anything!"
else
	# Or insert the configuration string on top of the other methods (right after the first commented out line).
	sed -i '' '1a\
auth       sufficient     pam_tid.so\
' $filename

	# Show a message or error after we try to update the file.
	if [[ $? -eq 0 ]]
	then
		echo "Touch ID successfully set!"
	else
		echo "ERROR: Touch ID could not be integrated!"
		exit 1
	fi
fi

exit 0