kms

type Config struct {
	StorageProvider           storage.Provider
	CacheProvider             storage.Provider
	KeyManagerStorageProvider storage.Provider

	LocalKMS      kms.KeyManager
	CryptoService crypto.Crypto
	HeaderSigner  edv.HeaderSigner

	PrimaryKeyStorageProvider storage.Provider
	PrimaryKeyLock            secretlock.Service
	CreateSecretLockFunc      func(keyURI string, provider lock.Provider) (secretlock.Service, error)

	EDVServerURL    string
	HubAuthURL      string
	HubAuthAPIToken string

	HTTPClient support.HTTPClient
	TLSConfig  *tls.Config
}

type KeystoreData struct {
	ID             string          `json:"id"`
	Controller     string          `json:"controller"`
	RecipientKeyID string          `json:"recipientKeyID,omitempty"`
	MACKeyID       string          `json:"macKeyID,omitempty"`
	VaultID        string          `json:"vaultID,omitempty"`
	EDVCapability  json.RawMessage `json:"edvCapability,omitempty"`
	CreatedAt      *time.Time      `json:"createdAt"`
}

type Service interface {
	CreateKeystore(controller, vaultID string) (*KeystoreData, error)
	ResolveKeystore(req *http.Request) (keystore.Keystore, error)
	GetKeystoreData(keystoreID string) (*KeystoreData, error)
	SaveKeystoreData(data *KeystoreData) error
	crypto.Crypto
}