custody

type AuditEvent struct {
	Action    string
	RefID     string
	Status    string
	SecretRef string
	Fields    map[string]string
	Time      time.Time
}

type AuditWriter struct {
	// contains filtered or unexported fields
}

type Config struct {
	BackendID     string
	StorageDir    string
	KEKRef        string
	KEKVersion    string
	SchemaVersion uint32
	ResolveSecret SecretResolver
}

type CreateRequest struct {
	RefID      string
	AccountRef string
	DeviceRef  string
	Material   map[string][]byte
	Now        time.Time
}

type Metadata struct {
	BackendID     string    `json:"backend_id"`
	RefID         string    `json:"ref_id"`
	SchemaVersion uint32    `json:"schema_version"`
	KEKRef        string    `json:"kek_ref"`
	KEKVersion    string    `json:"kek_version"`
	CreatedAt     time.Time `json:"created_at"`
	RotatedAt     time.Time `json:"rotated_at"`
	RevokedAt     time.Time `json:"revoked_at,omitempty"`
	State         string    `json:"state"`
	AccountRef    string    `json:"account_ref,omitempty"`
	DeviceRef     string    `json:"device_ref,omitempty"`
}

type RotateRequest struct {
	RefID              string
	ExpectedKekVersion string
	NewKekRef          string
	NewKekVersion      string
	Now                time.Time
}

type SecretResolver func(string) ([]byte, error)

type Store struct {
	// contains filtered or unexported fields
}