identity

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	DomainID    string `yaml:"domain_id"`
	IssuerParty string `yaml:"issuer_party"`
	UserID      string `yaml:"user_id"`
	PackageID   string `yaml:"package_id" validate:"required"` // package ID for FingerprintMapping (Common.FingerprintAuth)
}

type CreateFingerprintMappingRequest struct {
	UserParty   string
	Fingerprint string
	EvmAddress  string
}

type ExternalPartyKey interface {
	SignDER(message []byte) ([]byte, error)
}

type ExternalPartyTopology struct {
	TopologyTransactions [][]byte // Serialized topology transactions
	MultiHash            []byte   // Hash to be signed by the party's key
	Fingerprint          string   // Canton key fingerprint (multihash of SPKI public key)
}

type FingerprintMapping struct {
	ContractID  string
	Issuer      string
	UserParty   string
	Fingerprint string
	EvmAddress  string
}

type Identity interface {
	AllocateParty(ctx context.Context, hint string) (*Party, error)
	AllocateExternalParty(ctx context.Context, hint string, spkiPublicKey []byte, signer ExternalPartyKey) (*Party, error)
	ListParties(ctx context.Context) ([]*Party, error) // TODO: add iterator
	GetParticipantID(ctx context.Context) (string, error)

	CreateFingerprintMapping(ctx context.Context, req CreateFingerprintMappingRequest) (*FingerprintMapping, error)
	GetFingerprintMapping(ctx context.Context, fingerprint string) (*FingerprintMapping, error)

	GrantActAsParty(ctx context.Context, partyID string) error

	// GenerateExternalPartyTopology generates the topology transactions and multi-hash
	// needed for external party allocation. The multi-hash must be signed by the party's
	// private key and submitted via AllocateExternalPartyWithSignature.
	GenerateExternalPartyTopology(ctx context.Context, hint string, spkiPublicKey []byte) (*ExternalPartyTopology, error)

	// AllocateExternalPartyWithSignature completes external party allocation using
	// a client-provided DER signature of the topology multi-hash.
	AllocateExternalPartyWithSignature(ctx context.Context, topology *ExternalPartyTopology, derSignature []byte) (*Party, error)

	// PackageID returns the DAML package ID this client uses for identity templates
	// (e.g. Common.FingerprintAuth). Callers that need to query identity templates
	// using a ledger client directly (rather than through this client) can use this
	// to construct the correct template identifier.
	PackageID() string
}

type Option func(*settings)

type Party struct {
	PartyID string
	IsLocal bool
}