This script is used to setup the command-line sudo requests to fire up the fingerprint authentication on MBPs which have this feature. This file can be put anywhere in the path.

approve-fingerprint-sudo.sh

#!/usr/bin/env bash

# To be able to use the mac touchbar for sudo command auth:
# edit the following file: /etc/pam.d/sudo
# and add the following line after the initial comment line:
#   `auth sufficient pam_tid.so`
# This script also verifies that this line is added only once (ie skips if already present)
COUNT=`grep pam_tid /etc/pam.d/sudo | wc -l`
if [[ $COUNT -gt 0 ]]; then
  echo "ALREADY PRESENT - Not adding again!!!"
else
  echo "INCLUDING NEW LINE!!!"
  sudo sed -i '' '2i\
auth       sufficient     pam_tid.so\
' /etc/pam.d/sudo
fi