epa

type Client struct {
	Env            Env
	ProviderNumber ProviderNumber
	BaseURL        string
	HttpClient     *http.Client

	Timeout time.Duration
	// contains filtered or unexported fields
}

type ClientOption func(*Client)

type Config struct {
	BaseDir      string        `yaml:"-"` // set to the base directory of config files when loading
	ProxyConfigs []ProxyConfig `yaml:"proxies" validate:"required,dive,required"`
}

type ConsentDecisionType string

type ConsentDecisionsResponseType struct {
	FunctionId string `json:"functionId"`
	Decision   string `json:"decision"`
}

type EntitlementRequestType struct {
	JWT string `json:"jwt"`
}

type Env string

type ErrorType struct {
	HttpStatusCode int    `json:"-"`
	ErrorCode      string `json:"errorCode"`
	ErrorDetail    string `json:"errorDetail,omitempty"`
}

type GetConsentDecisionInformationType struct {
	Data []ConsentDecisionsResponseType `json:"data"`
}

type MultiProviderError struct {
	Errors []ProvidersError `json:"errors"`
}

type Nonce struct {
	Nonce string `json:"nonce"`
}

type PatientRecordMetadata struct {
	InsurantID string
	Provider   ProviderNumber
}

type ProvideHCVFunc func(insurantId string) ([]byte, error)

type ProvidePNFunc func(insurantId string) (string, error)

type ProviderNumber int

type ProvidersError struct {
	Code           string         `json:"error"`
	Description    string         `json:"error_description"`
	ProviderNumber ProviderNumber `json:"provider"`
}

type Proxy struct {
	Env Env

	Authenticator *gemidp.Authenticator
	// contains filtered or unexported fields
}

type ProxyConfig struct {
	BaseDir string        `yaml:"-"`
	Name    string        `yaml:"name" validate:"required"`
	Env     Env           `yaml:"env" validate:"required,oneof=dev test ref prod"`
	Timeout time.Duration `yaml:"timeout" validate:"required,gt=0"`

	// SMC-B identity: either a PKCS#12 (authn_p12_path) or a PEM cert+key pair
	// (authn_cert_path + authn_key_path). PKCS#12 takes precedence when set.
	AuthnP12Path     string `yaml:"authn_p12_path"`
	AuthnP12Password string `yaml:"authn_p12_password"`
	AuthnCertPath    string `yaml:"authn_cert_path"`
	AuthnKeyPath     string `yaml:"authn_key_path"`

	VsdmHmacKeyHex string `yaml:"vsdm_hmac_key_hex" validate:"required"`
	VsdmHmacKeyId  string `yaml:"vsdm_hmac_key_id" validate:"required"`

	SecurityFunctions *SecurityFunctions `yaml:"-"`

	// CertPool is the TLS root pool used when connecting to ePA aggregators.
	// When nil, the session manager falls back to InsecureSkipVerify — fine for
	// demos, wrong for anything real. Callers should populate this from the
	// gematik TI roots (e.g. via gempki.EmbeddedLoader{Env}.Load(ctx)).
	CertPool *x509.CertPool `yaml:"-"`
}

type ProxyInfo struct {
	Name               string                     `json:"name"`
	Env                Env                        `json:"env"`
	Subject            string                     `json:"subject"`
	AdmissionStatement *gempki.AdmissionStatement `json:"admission_statement"`
}

type ReadmeData struct {
	BaseURL    string
	AuthHeader string
	ProxyInfos []*ProxyInfo
}

type SecurityFunctions struct {
	AuthnSignFunc           brainpool.SignFunc
	AuthnCertFunc           func() (*x509.Certificate, error)
	ClientAssertionSignFunc brainpool.SignFunc
	ClientAssertionCertFunc func() (*x509.Certificate, error)
	ProvidePN               ProvidePNFunc
	ProvideHCV              func(insurantId string) ([]byte, error)
}

type SendAuthCodeSCtype struct {
	AuthorizationCode string `json:"authorizationCode"`
	ClientAttest      string `json:"clientAttest"`
}

type Session struct {
	*Client
	VAUChannel *vau.Channel
	OpenedAt   time.Time
}