Avalonia reference
Every public type in FacePing.Sdk.Avalonia: setup, enrolment, verification, the camera control and results.
Package: FacePing.Sdk.Avalonia (NuGet, preview). Starter app: faceping/avalonia-starter. Avalonia 12 and .NET 10. Android 7 (API 24) or later on 64-bit phones, iOS 15 or later.
Namespaces: FacePing.Sdk.Avalonia for setup, IFacePing, FaceImage and FaceCameraView; FacePing.Sdk for results and exceptions, the same on every platform. With implicit usings on, the package adds using FacePing.Sdk for you.
Install#
Add the package to your shared project (your views) and to the Android and iOS projects:
dotnet add FaceCheck package FacePing.Sdk.Avalonia --prerelease
dotnet add FaceCheck.Android package FacePing.Sdk.Avalonia --prerelease
dotnet add FaceCheck.iOS package FacePing.Sdk.Avalonia --prerelease
The shared project compiles against the same API, and each platform project brings the real thing: the native core, the face models and the camera. On desktop and in the browser your app still builds, but face checks throw FacePingModelException: FacePing runs on Android and iOS devices.
The Android project needs <RuntimeIdentifiers>android-arm64;android-x64</RuntimeIdentifiers> (FacePing runs on 64-bit phones and x86_64 emulators) and <SupportedOSPlatformVersion>24</SupportedOSPlatformVersion>. The iOS project needs <SupportedOSPlatformVersion>15.0</SupportedOSPlatformVersion>.
Setup#
In CustomizeAppBuilder, in Android's Application and in iOS's AppDelegate:
builder.UseFacePing(o =>
{
o.SandboxKey = "fp_test_…"; // sandbox: faces enrolled on the device
// o.DeviceToken = "fpd_…"; // production: faces synced from your list
// o.Region = FacePingRegion.EU; // your account's region (the default)
});
FacePingOptions#
| Property | Type | Default | Notes |
|---|---|---|---|
SandboxKey |
string? |
null |
A fp_test_ key from Developers → Sandbox keys. |
DeviceToken |
string? |
null |
Production. A fpd_ token for one check-in list. Set this or SandboxKey, not both. |
Region |
FacePingRegion |
EU |
Your account's region, which sets the API address. Today the only value is EU (https://api-eu.faceping.ai/). |
ApiBaseUrl |
Uri? |
null |
Overrides the region's address. UK and US regions are available on request: we give you the address to put here. |
PassiveLiveness |
bool |
true |
Passive liveness on every check. Turn it off only if your app runs its own liveness check first. |
AutoSyncInterval |
TimeSpan? |
5 minutes | Production only. null turns automatic sync off; call SyncAsync yourself. |
VerifyPolicy |
VerifyPolicy |
VerifyPolicy.Default |
How strict verification is. Change only if you know why. |
UseFacePing sets FacePing up once and starts loading the face models in the background. Then use IFacePing.Current anywhere, or register it in your own container.
Setting neither SandboxKey nor DeviceToken, or both, throws FacePingSetupException when the app starts.
IFacePing#
public interface IFacePing
{
static IFacePing Current { get; } // the app's FacePing, once UseFacePing has run
bool IsSandbox { get; }
IReadOnlyCollection<string> EnrolledIds { get; }
Task<EnrollResult> EnrollAsync(string id, FaceImage photo, CancellationToken ct = default);
Task<VerifyResult> VerifyLiveAsync(string id, FaceCameraView camera, CancellationToken ct = default);
Task<VerifyResult> VerifyAsync(string id, FaceImage photo, CancellationToken ct = default);
Task<bool> ForgetAsync(string id);
Task ForgetAllAsync();
Task<SyncResult> SyncAsync(CancellationToken ct = default); // sandbox: activate the key; production: fetch faces
event EventHandler<SyncResult>? Synced; // production
}
| Method | Notes |
|---|---|
EnrollAsync |
Sandbox only. Production enrolment happens with consent on your server or through the FacePing widget. Replaces any face already stored under id. |
VerifyLiveAsync |
Runs a live attempt on the camera's frames: match, head turn, match again. Shows prompts in the FaceCameraView. Times out after 10 seconds with NoFace or the last failure. |
VerifyAsync |
One photo, passive liveness only. |
ForgetAsync |
Sandbox: deletes the face stored under id from the device straight away. Production: throws InvalidOperationException; remove a person through your server instead, and every device drops them at its next sync. |
ForgetAllAsync |
Deletes every face on the device straight away. In production the next sync brings back the people still enrolled. |
EnrolledIds |
Who can be verified on this device, as of the last enrol, forget or sync. |
SyncAsync |
Production: downloads the latest faces for the device's list; a revoked device wipes its faces. Sandbox: activates the key, or renews its licence when due. Either way it refreshes EnrolledIds, so it's a good first call when the app starts. |
FaceImage#
What you can pass as a photo. Bytes and streams convert implicitly; use FaceImage.FromFile for a storage file.
| From | Example |
|---|---|
byte[] (JPEG or PNG) |
await faceping.EnrollAsync("me", bytes) |
Stream |
await faceping.EnrollAsync("me", stream) |
IStorageFile (from a file picker) |
await faceping.EnrollAsync("me", FaceImage.FromFile(file)) |
FaceCameraView capture |
await faceping.EnrollAsync("me", await Camera.CaptureAsync()) |
Large photos are scaled down to 1280 pixels on the device before anything else happens.
FaceCameraView#
A front-camera control with a face guide and the liveness prompts ("Turn your head left", "Look back at the camera"). FacePing runs the camera itself (CameraX on Android, AVFoundation on iOS) and draws the picture in Avalonia, so the control sits in your layout like any other: rounded corners, clipping and overlays all work.
<!-- xmlns:fp="using:FacePing.Sdk.Avalonia" -->
<fp:FaceCameraView x:Name="Camera" Height="420" />
| Member | Notes |
|---|---|
Task<FaceImage> CaptureAsync() |
Takes a still from the live view: upright, as the camera sees it (the picture on screen is mirrored, this isn't). |
bool ShowGuide |
The face outline. Default true. |
string? Prompt |
Set by VerifyLiveAsync; bind to it if you draw your own prompts. |
FaceGuideState GuideState |
How the guide looks: Ready (dashed), Working (a scan line), Match (green) or NoMatch (red). VerifyLiveAsync sets it; set it yourself for other steps, for example Working while enrolling. |
event CameraFailed |
The camera couldn't start: permission refused or no front camera. The message says which. Raised on the UI thread. |
void StartCamera() |
Starts the camera again, for example after the person allows it in Settings. Called for you when the control appears. |
The camera starts when the control appears and stops when it leaves the screen. Camera permission is requested the first time: the package declares Android's camera permission, and your iOS project's Info.plist needs NSCameraUsageDescription.
Results#
public record EnrollResult(EnrollOutcome Outcome, string Id)
{
public bool IsEnrolled { get; } // Outcome == Enrolled
}
public enum EnrollOutcome
{
Enrolled, NoFace, MultipleFaces, FaceTooSmall, NotLive, LimitReached
}
public record VerifyResult(
VerifyOutcome Outcome,
double Similarity,
double? LivenessScore,
TimeSpan Elapsed,
bool IsSandbox)
{
public bool IsMatch { get; } // Outcome == Match
}
public enum VerifyOutcome
{
Match, NoMatch, NotEnrolled, NoFace, LivenessFailed, ChallengeFailed, Expired, LeaseExpired
}
public record SyncResult(
SyncStatus Status, // Ok, Gone, Revoked or Unavailable
int Enrolled,
DateTimeOffset? LeaseUntil, // production: verifies offline until then
DateTimeOffset? DeleteAfter);
LimitReached means the sandbox already holds 25 faces on this device: forget one first. LeaseExpired (production) means the device hasn't synced for longer than its lease, 24 hours by default; it needs a connection before it verifies again.
EnrollmentPhoto#
For server-side enrolment: shrinks a camera photo before your app uploads it to your server. FacePing works at 1280 px, so a 12 MP original only costs upload time; this makes about 1.4 MB into 0.2 to 0.3 MB with the same result, and applies the photo's EXIF orientation. It runs in the FacePing core, with the same decoder as the server.
public static class EnrollmentPhoto // namespace FacePing.Sdk
{
public const int DefaultQuality = 90;
// A JPEG, upright, longest side at most 1280 px. Throws ArgumentException if the photo isn't a JPEG or PNG.
public static byte[] Prepare(byte[] photo, int quality = DefaultQuality);
}
Exceptions#
| Exception | When |
|---|---|
FacePingSetupException |
The key or token is missing, invalid or revoked, or the sandbox key couldn't be activated (no connection on first run). The message says which. |
FacePingModelException |
The face models couldn't load on this device, or the app is running on desktop or in the browser. Send people to your normal entry. |
Everything else is a result, not an exception: a face check never throws because someone looked away.