ios

type AssertionRequest struct {
	// Assertion is the base64-encoded assertion object.
	Assertion string

	// ClientData is the client data that was signed.
	ClientData []byte

	// KeyID is the key identifier.
	KeyID string

	// BundleID is the app bundle identifier.
	BundleID string
}

type AssertionResult struct {
	// Valid indicates whether the assertion was verified successfully.
	Valid bool

	// KeyID is the verified key identifier.
	KeyID string

	// Counter is the new assertion counter value.
	Counter uint32

	// Timestamp is when the verification was performed.
	Timestamp time.Time
}

type AttestationRequest struct {
	// Attestation is the base64-encoded attestation object.
	Attestation string

	// Challenge is the server-generated challenge.
	Challenge string

	// KeyID is the key identifier from DCAppAttestService.generateKey.
	KeyID string

	// BundleID is the app bundle identifier.
	BundleID string
}

type AttestationResult struct {
	// Valid indicates whether the attestation was verified successfully.
	Valid bool

	// KeyID is the verified key identifier.
	KeyID string

	// PublicKey is the attested public key (for storage).
	PublicKey *ecdsa.PublicKey

	// Receipt is the attestation receipt (for fraud assessment).
	Receipt []byte

	// Timestamp is when the verification was performed.
	Timestamp time.Time
}

type Config struct {
	// BundleIDs is the list of allowed app bundle identifiers.
	BundleIDs []string

	// TeamID is your Apple Developer Team ID.
	TeamID string

	// ChallengeTimeout is the maximum age of a challenge (default: 5 minutes).
	ChallengeTimeout time.Duration

	// KeyStore for storing attestation public keys.
	// Required for assertion verification.
	KeyStore KeyStore

	// Production indicates whether to use production or development environment.
	// Default is true (production).
	Production bool

	// SkipCertificateVerification skips the certificate chain verification.
	// WARNING: Only use this for development/testing. Never in production!
	SkipCertificateVerification bool
}

type KeyStore interface {
	// Store saves a public key for the given key ID.
	Store(ctx context.Context, keyID string, key *StoredKey) error

	// Load retrieves a public key by key ID.
	Load(ctx context.Context, keyID string) (*StoredKey, error)

	// Delete removes a public key by key ID.
	Delete(ctx context.Context, keyID string) error

	// IncrementCounter atomically increments and returns the new counter value.
	IncrementCounter(ctx context.Context, keyID string) (uint32, error)
}

type MemoryKeyStore struct {
	// contains filtered or unexported fields
}

type StoredKey struct {
	// KeyID is the unique identifier for this key.
	KeyID string

	// PublicKey is the ECDSA public key from the attestation.
	PublicKey *ecdsa.PublicKey

	// BundleID is the app bundle identifier associated with this key.
	BundleID string

	// TeamID is the Apple Team ID.
	TeamID string

	// Counter is the assertion counter for replay protection.
	Counter uint32

	// CreatedAt is when the key was first attested.
	CreatedAt time.Time

	// LastUsedAt is when the key was last used for an assertion.
	LastUsedAt time.Time
}

type Verifier struct {
	// contains filtered or unexported fields
}