rewrite antispoofing module

README.md

@@ -35,7 +35,7 @@ Biopass was developed by [@phucvinh57](https://github.com/phucvinh57) and [@thai
 | **Authentication methods** | Face + Fingerprint | Face only |
 | **User Interface** | Modern GUI for management | Command-line interface only |
 | **Configuration** | GUI | Manual |
-| **Face Anti-spoofing** | IR camera + Embedded AI model | IR camera only |
+| **Face Anti-spoofing** | IR liveness classification + Embedded AI model | IR camera only |
 
 ## Installation
 
@@ -62,6 +62,7 @@ Feel free to request new features or report bugs by opening an issue. For contri
 Models used in this project:
 - Face Recognition: **[EdgeFace](https://github.com/otroshi/edgeface)**
 - Face Detection: **[YOLO-Face](https://github.com/akanametov/yolo-face)**
+- Face Anti-Spoofing: **[mobilenetv3-antispoof](https://github.com/facenox/face-antispoof-onnx)** (used for both RGB and IR liveness classification)
 
 ## Star History
 

app/package.json

@@ -27,9 +27,9 @@
     "@radix-ui/react-tabs": "^1.1.13",
     "@tanstack/react-router": "^1.168.18",
     "@tanstack/react-router-devtools": "^1.166.13",
-    "@tauri-apps/api": "^2.10.1",
-    "@tauri-apps/plugin-fs": "^2.4.5",
-    "@tauri-apps/plugin-opener": "^2.5.3",
+    "@tauri-apps/api": "2.10.1",
+    "@tauri-apps/plugin-fs": "2.4.5",
+    "@tauri-apps/plugin-opener": "2.5.3",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "lucide-react": "^0.577.0",

app/src-tauri/src/config.rs

@@ -59,6 +59,10 @@ struct AntiSpoofingConfigRaw {
     pub threshold: Option<f32>,
     #[serde(default)]
     pub ir_camera: Option<String>,
+    #[serde(default = "default_ir_warmup_delay_ms")]
+    pub ir_warmup_delay_ms: i32,
+    #[serde(default = "default_ir_min_face_area_ratio")]
+    pub ir_min_face_area_ratio: f32,
 }
 
 #[derive(Debug, Deserialize)]
@@ -160,6 +164,8 @@ pub struct AntiSpoofingConfig {
     pub enable: bool,
     pub model: AntiSpoofingModelConfig,
     pub ir_camera: Option<String>,
+    pub ir_warmup_delay_ms: i32,
+    pub ir_min_face_area_ratio: f32,
 }
 
 impl AntiSpoofingConfig {
@@ -201,6 +207,8 @@ impl AntiSpoofingConfig {
             enable: raw.enable,
             model,
             ir_camera: raw.ir_camera,
+            ir_warmup_delay_ms: raw.ir_warmup_delay_ms,
+            ir_min_face_area_ratio: raw.ir_min_face_area_ratio,
         }
     }
 }
@@ -242,6 +250,12 @@ fn default_fingerprint_retries() -> u32 {
 fn default_fingerprint_timeout() -> u32 {
     5000
 }
+fn default_ir_warmup_delay_ms() -> i32 {
+    300
+}
+fn default_ir_min_face_area_ratio() -> f32 {
+    0.08
+}
 
 fn default_ignored_services() -> Vec<String> {
     vec!["polkit-1".to_string(), "pkexec".to_string()]
@@ -282,6 +296,8 @@ fn get_default_config(app: &AppHandle) -> BiopassConfig {
                         threshold: 0.8,
                     },
                     ir_camera: None,
+                    ir_warmup_delay_ms: default_ir_warmup_delay_ms(),
+                    ir_min_face_area_ratio: default_ir_min_face_area_ratio(),
                 },
             },
             fingerprint: FingerprintMethodConfig {

app/src/app/configuration/-components/face/FaceSetting.tsx

@@ -285,7 +285,7 @@ export function FaceSetting() {
           </Select>
         </div>
 
-        {config.anti_spoofing.enable && (
+        {(config.anti_spoofing.enable || !!config.anti_spoofing.ir_camera) && (
           <div className="w-48">
             <Threshold
               label="Threshold"

app/src/types/config.ts

@@ -43,6 +43,8 @@ export interface FaceMethodConfig {
       threshold: number;
     };
     ir_camera: string | null;
+    ir_warmup_delay_ms: number;
+    ir_min_face_area_ratio: number;
   };
 }
 

auth/core/auth_config.cc

@@ -160,6 +160,11 @@ BiopassConfig readConfig(const std::string& username) {
             config.methods.face.anti_spoofing.ir_warmup_delay_ms =
                 anti_spoofing["ir_warmup_delay_ms"].as<int>();
           }
+
+          if (anti_spoofing["ir_min_face_area_ratio"]) {
+            config.methods.face.anti_spoofing.ir_min_face_area_ratio =
+                anti_spoofing["ir_min_face_area_ratio"].as<float>();
+          }
         }
 
         // Backward compatibility with old schema:
@@ -258,6 +263,8 @@ bool migrateConfigSchema(const std::string& username, std::string* error) {
     std::string model_path = "models/mobilenetv3_antispoof.onnx";
     float threshold = 0.8f;
     std::string ir_camera_path;
+    int ir_warmup_delay_ms = 300;
+    float ir_min_face_area_ratio = 0.08f;
 
     if (anti) {
       if (anti["enable"]) {
@@ -284,6 +291,14 @@ bool migrateConfigSchema(const std::string& username, std::string* error) {
       if (anti["ir_camera"] && !anti["ir_camera"].IsNull()) {
         ir_camera_path = anti["ir_camera"].as<std::string>();
       }
+
+      if (anti["ir_warmup_delay_ms"]) {
+        ir_warmup_delay_ms = anti["ir_warmup_delay_ms"].as<int>();
+      }
+
+      if (anti["ir_min_face_area_ratio"]) {
+        ir_min_face_area_ratio = anti["ir_min_face_area_ratio"].as<float>();
+      }
     }
 
     if (ir_camera_path.empty() && face["ir_camera"]) {
@@ -311,9 +326,11 @@ bool migrateConfigSchema(const std::string& username, std::string* error) {
         anti && static_cast<bool>(anti["model"]) && anti["model"].IsMap() &&
         static_cast<bool>(anti["model"]["path"]) && static_cast<bool>(anti["model"]["threshold"]);
     const bool has_new_ir_key = anti && static_cast<bool>(anti["ir_camera"]);
+    const bool has_new_ir_warmup_key = anti && static_cast<bool>(anti["ir_warmup_delay_ms"]);
+    const bool has_new_ir_area_key = anti && static_cast<bool>(anti["ir_min_face_area_ratio"]);
     const bool needs_migration = has_legacy_face_ir || has_legacy_anti_threshold ||
                                  has_legacy_anti_model_scalar || !has_new_model_map ||
-                                 !has_new_ir_key;
+                                 !has_new_ir_key || !has_new_ir_warmup_key || !has_new_ir_area_key;
     if (!needs_migration)
       return true;
 
@@ -328,6 +345,8 @@ bool migrateConfigSchema(const std::string& username, std::string* error) {
     } else {
       anti_new["ir_camera"] = ir_camera_path;
     }
+    anti_new["ir_warmup_delay_ms"] = ir_warmup_delay_ms;
+    anti_new["ir_min_face_area_ratio"] = ir_min_face_area_ratio;
 
     face["anti_spoofing"] = anti_new;
     if (face["ir_camera"]) {

auth/core/auth_config.h

@@ -46,13 +46,12 @@ struct AntiSpoofingConfig {
   AntiSpoofingModelConfig model;
   // Linux device path, e.g. "/dev/video2". nullopt means disabled.
   std::optional<std::string> ir_camera = std::nullopt;
-  // Extra delay (ms) inserted after the warmup-frame discard and before the
-  // actual IR capture. Gives IR LEDs and auto-exposure time to stabilise.
+  // Extra delay (ms) kept for backwards compatibility with existing configs.
   // Configurable via anti_spoofing.ir_warmup_delay_ms in config.yaml.
-  // NOTE: The IR check verifies that a face-shaped bounding box exists in the
-  // IR frame (presence check). It is NOT a full liveness detector. A printed
-  // photo that the YOLO model can detect in IR will still pass.
   int ir_warmup_delay_ms = 300;
+  // Minimum detected IR face bounding-box area as a fraction of the full frame.
+  // Smaller crops are treated as insufficient detail for reliable liveness.
+  float ir_min_face_area_ratio = 0.08f;
 };
 
 struct FaceMethodConfig {