pairing

type API struct {
	// contains filtered or unexported fields
}

type APIConfig struct {
	RegisterRate     float64
	RegisterBurst    int
	CredentialsRate  float64
	CredentialsBurst int
}

type Config struct {
	// BrokerURL is handed to devices by the info endpoint
	// (e.g. "mqtts://host:8883").
	BrokerURL string
	// CertTTL is the client certificate validity; zero selects
	// ca.DefaultCertTTL (30 days).
	CertTTL time.Duration
	// EnforceLatestCert enables the always-online-CRL behaviour
	// (docs/DESIGN.md §4.3): verify reports REVOKED for certificates whose
	// serial differs from the device's latest issuance.
	EnforceLatestCert bool
	// Version is reported by the info endpoint; empty selects
	// DefaultVersion.
	Version string
	// BcryptCost hashes credentials secrets; zero selects
	// bcrypt.DefaultCost (10, docs/DESIGN.md §4.1).
	BcryptCost int
}

type Info struct {
	Version   string
	Status    string
	BrokerURL string
	CACertPEM string
}

type Limiter struct {
	// contains filtered or unexported fields
}

type Service struct {
	// contains filtered or unexported fields
}

type Store interface {
	GetRealmByName(ctx context.Context, name string) (*store.Realm, error)
	RegisterDevice(ctx context.Context, realmID int16, id deviceid.ID, secretHash string) error
	UnregisterDevice(ctx context.Context, realmID int16, id deviceid.ID) error
	GetDevice(ctx context.Context, realmID int16, id deviceid.ID) (*store.Device, error)
	SetDeviceCredentials(ctx context.Context, realmID int16, id deviceid.ID, certSerial, certAKI string, requestIP netip.Addr) error
	SetPayloadFormatHint(ctx context.Context, realmID int16, id deviceid.ID, hint string) error
	CountDevices(ctx context.Context, realmID int16) (int64, error)
}

type VerifyResult struct {
	Valid     bool
	Timestamp time.Time
	Until     time.Time
	Cause     string
}