clients

type AttestedClientConfig struct {
	StandardClientConfig
	AttestationPolicy string `env:"ATTESTATION_POLICY" envDefault:""`
	AttestedTLS       bool   `env:"ATTESTED_TLS"       envDefault:"false"`
	ProductName       string `env:"PRODUCT_NAME"       envDefault:"Milan"`
	// AttestationRequestContextHex, when set, is decoded from hex and used as
	// the exported authenticator certificate_request_context. This lets the
	// caller provide the background-check freshness value directly.
	AttestationRequestContextHex string `env:"ATTESTATION_REQUEST_CONTEXT" envDefault:""`
	// AttestationRequestContext allows callers inside the same process to pass
	// raw request-context bytes directly instead of using the hex string form.
	AttestationRequestContext []byte `env:"-"`
}

type ClientConfiguration interface {
	Config() StandardClientConfig
}

type StandardClientConfig struct {
	URL          string        `env:"URL"             envDefault:"localhost:7001"`
	Timeout      time.Duration `env:"TIMEOUT"         envDefault:"60s"`
	ClientCert   string        `env:"CLIENT_CERT"     envDefault:""`
	ClientKey    string        `env:"CLIENT_KEY"      envDefault:""`
	ServerCAFile string        `env:"SERVER_CA_CERTS" envDefault:""`
}