msgcrypto

type AuthCodeFunc func(ctx context.Context) (string, error)

type AuthCodeProvider interface {
	AuthCode(ctx context.Context) (string, error)
}

type CachedAuthCode struct {
	// contains filtered or unexported fields
}

type Cipher interface {
	// EncryptMessage encrypts plaintext for corpID/staffID and returns the
	// vendor ciphertext envelope.
	EncryptMessage(ctx context.Context, corpID, staffID string, plaintext []byte) ([]byte, error)

	// DecryptMessage decrypts a vendor ciphertext envelope.
	DecryptMessage(ctx context.Context, corpID, staffID string, ciphertext []byte) ([]byte, error)

	// Close releases the backend and frees the process-wide slot so a later
	// Open can succeed. Calling it twice is safe.
	Close() error
}

type Config struct {
	// KeystoreDir is where fetched keys are cached. Defaults to
	// DefaultKeystoreDir. It is created with 0700 if missing.
	KeystoreDir string

	// UserID is an opaque local identifier. The vendor SDK stores it but
	// does not use it for key selection; leave empty to let the SDK
	// generate one.
	UserID string

	// AuthCode supplies the DingTalk 免登 authCode used to authenticate key
	// requests. Required. The backend calls it only from the vendor goProxy
	// callback (cold keystore or key-version rotation), never on every
	// encrypt/decrypt.
	AuthCode AuthCodeProvider

	// KeyServer is the HTTPS URL of the vendor key service. Required: it
	// replaces the host the closed-source C library would otherwise pick.
	KeyServer string

	// AllowedRedirectHost, when set, is compared to the domain the C
	// library passes into goProxy. A mismatch fails that key fetch. It is
	// a local check only; the domain is never sent to portal.
	AllowedRedirectHost string

	// MaxRetry bounds retries while a key is still being fetched. Zero
	// selects the vendor default.
	MaxRetry int

	// HTTPTimeout bounds each key request. Zero selects the vendor default.
	HTTPTimeout time.Duration

	// Debug enables backend logging through a redacting logger. Off by
	// default because the vendor SDK logs the authCode and raw key-server
	// responses at debug level.
	Debug bool

	// Logf receives already-redacted backend log lines when Debug is set.
	// Nil discards them.
	Logf func(format string, args ...any)
}

type CorpAuthCodeProvider interface {
	AuthCodeProvider
	AuthCodeForCorp(ctx context.Context, corpID string) (string, error)
}

type Identity struct {
	CorpID  string
	StaffID string
}

type PortalAuthCode struct {
	ConfigDir  string
	Vendor     string
	CLIVersion string
	HTTPClient *http.Client
	// contains filtered or unexported fields
}

type Session struct {
	Cipher      Cipher
	CorpID      string
	StaffID     string
	KeystoreDir string
}

type SessionOptions struct {
	ConfigDir           string
	CLIVersion          string
	KeyServer           string
	AllowedRedirectHost string
	KeystoreDir         string
	Debug               bool
	Logf                func(format string, args ...any)
}