attestation_administration_client.hpp

// Copyright (c) Microsoft Corporation. All rights reserved.
// SPDX-License-Identifier: MIT
 
#pragma once
 
#include "azure/attestation/attestation_client_models.hpp"
#include "azure/attestation/attestation_client_options.hpp"
#include <azure/core/context.hpp>
#include <azure/core/url.hpp>
#include <string>
 
namespace Azure { namespace Core { namespace Http { namespace _internal {
  class HttpPipeline;
}}}} // namespace Azure::Core::Http::_internal
 
namespace Azure { namespace Security { namespace Attestation {
 
  class AttestationAdministrationClient final {
 
  public:
    static AttestationAdministrationClient Create(
        std::string const& endpoint,
        std::shared_ptr<Core::Credentials::TokenCredential const> credential,
        AttestationAdministrationClientOptions const& options
        = AttestationAdministrationClientOptions{},
        Azure::Core::Context const& context = Azure::Core::Context{});
 
    AttestationAdministrationClient(AttestationAdministrationClient const& attestationClient)
        : m_endpoint(attestationClient.m_endpoint), m_apiVersion(attestationClient.m_apiVersion),
          m_pipeline(attestationClient.m_pipeline),
          m_tokenValidationOptions(attestationClient.m_tokenValidationOptions),
          m_attestationSigners(attestationClient.m_attestationSigners){};
 
    virtual ~AttestationAdministrationClient() = default;
 
    std::string const Endpoint() const { return m_endpoint.GetAbsoluteUrl(); }
 
    Response<Models::AttestationToken<std::string>> GetAttestationPolicy(
        Models::AttestationType const& attestationType,
        GetPolicyOptions const& options = GetPolicyOptions{},
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
    Response<Models::AttestationToken<Models::PolicyResult>> SetAttestationPolicy(
        Models::AttestationType const& attestationType,
        std::string const& policyToSet,
        SetPolicyOptions const& options = SetPolicyOptions{},
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
    Response<Models::AttestationToken<Models::PolicyResult>> ResetAttestationPolicy(
        Models::AttestationType const& attestationType,
        SetPolicyOptions const& options = SetPolicyOptions{},
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
    Models::AttestationToken<void> CreateAttestationPolicyToken(
        Azure::Nullable<std::string> const& policyToSet,
        Azure::Nullable<AttestationSigningKey> const& signingKey = {}) const;
 
    Response<Models::AttestationToken<Models::IsolatedModeCertificateListResult>>
    GetIsolatedModeCertificates(
        GetIsolatedModeCertificatesOptions const& options = GetIsolatedModeCertificatesOptions{},
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
    Response<Models::AttestationToken<Models::IsolatedModeCertificateModificationResult>>
    AddIsolatedModeCertificate(
        std::string const& pemEncodedCertificateToAdd,
        AttestationSigningKey const& signerForRequest,
        AddIsolatedModeCertificateOptions const& options = AddIsolatedModeCertificateOptions{},
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
    Response<Models::AttestationToken<Models::IsolatedModeCertificateModificationResult>>
    RemoveIsolatedModeCertificate(
        std::string const& pemEncodedCertificateToAdd,
        AttestationSigningKey const& signerForRequest,
        RemoveIsolatedModeCertificateOptions const& options
        = RemoveIsolatedModeCertificateOptions{},
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
  private:
    Azure::Core::Url m_endpoint;
    std::string m_apiVersion;
    std::shared_ptr<Azure::Core::Credentials::TokenCredential const> m_credentials;
    std::shared_ptr<Azure::Core::Http::_internal::HttpPipeline> m_pipeline;
    AttestationTokenValidationOptions m_tokenValidationOptions;
 
    std::vector<Models::AttestationSigner> m_attestationSigners;
 
    explicit AttestationAdministrationClient(
        std::string const& endpoint,
        std::shared_ptr<Core::Credentials::TokenCredential const> credential,
        AttestationAdministrationClientOptions const& options
        = AttestationAdministrationClientOptions{});
 
    std::string CreateIsolatedModeModificationToken(
        std::string const& pemEncodedX509CertificateToAdd,
        AttestationSigningKey const& existingSigningKey) const;
 
    Models::AttestationToken<Models::IsolatedModeCertificateModificationResult>
    ProcessIsolatedModeModificationResult(
        std::unique_ptr<Azure::Core::Http::RawResponse> const& serverResponse,
        AttestationTokenValidationOptions const& tokenValidationOptions) const;
 
    void RetrieveResponseValidationCollateral(
        Azure::Core::Context const& context = Azure::Core::Context{});
  };
}}} // namespace Azure::Security::Attestation