validator

type ValidateResult struct {
	// TrustDomain is the trust domain of the client.
	TrustDomain spiffeid.TrustDomain
}

type Validator interface {
	// Start starts the validator.
	Start(context.Context) error

	// Validate validates the identity of a certificate request.
	// Returns the Trust Domain of the certificate requester, and whether the
	// signed certificates duration should be overridden to the maximum time
	// permitted by the singing certificate.
	Validate(context.Context, *sentryv1pb.SignCertificateRequest) (ValidateResult, error)
}