attestation_client.hpp

// Copyright (c) Microsoft Corporation. All rights reserved.
// SPDX-License-Identifier: MIT
 
#pragma once
 
#include "azure/attestation/attestation_client_models.hpp"
#include "azure/attestation/attestation_client_options.hpp"
#include <azure/core/context.hpp>
#include <azure/core/url.hpp>
#include <string>
 
namespace Azure { namespace Core { namespace Http { namespace _internal {
  class HttpPipeline;
}}}} // namespace Azure::Core::Http::_internal
 
namespace Azure { namespace Security { namespace Attestation {
 
  class AttestationClient final {
 
  public:
    static AttestationClient Create(
        std::string const& endpoint,
        std::shared_ptr<Core::Credentials::TokenCredential const> credential,
        AttestationClientOptions const& options = AttestationClientOptions{},
        Azure::Core::Context const& constext = Azure::Core::Context{});
 
    static AttestationClient Create(
        std::string const& endpoint,
        AttestationClientOptions options = AttestationClientOptions{},
        Azure::Core::Context const& constext = Azure::Core::Context{});
 
    virtual ~AttestationClient() = default;
 
    AttestationClient(AttestationClient const& attestationClient)
        : m_endpoint(attestationClient.m_endpoint), m_apiVersion(attestationClient.m_apiVersion),
          m_pipeline(attestationClient.m_pipeline),
          m_tokenValidationOptions(attestationClient.m_tokenValidationOptions),
          m_attestationSigners(attestationClient.m_attestationSigners){};
 
    std::string const Endpoint() const { return m_endpoint.GetAbsoluteUrl(); }
 
    Response<Models::OpenIdMetadata> GetOpenIdMetadata(
        Azure::Core::Context const& context = Azure::Core::Context::ApplicationContext) const;
 
    Response<Models::TokenValidationCertificateResult> GetTokenValidationCertificates(
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
    Response<Models::AttestationToken<Models::AttestationResult>> AttestSgxEnclave(
        std::vector<uint8_t> const& sgxQuoteToAttest,
        AttestSgxEnclaveOptions options = AttestSgxEnclaveOptions{},
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
    Response<Models::AttestationToken<Models::AttestationResult>> AttestOpenEnclave(
        std::vector<uint8_t> const& openEnclaveReportToAttest,
        AttestOpenEnclaveOptions options = AttestOpenEnclaveOptions{},
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
    Response<Models::TpmAttestationResult> AttestTpm(
        AttestTpmOptions const& options,
        Azure::Core::Context const& context = Azure::Core::Context{}) const;
 
  private:
    Azure::Core::Url m_endpoint;
    std::string m_apiVersion;
    std::shared_ptr<Azure::Core::Credentials::TokenCredential const> m_credentials;
    std::shared_ptr<Azure::Core::Http::_internal::HttpPipeline> m_pipeline;
    AttestationTokenValidationOptions m_tokenValidationOptions;
    std::vector<Models::AttestationSigner> m_attestationSigners;
 
    AttestationClient(
        std::string const& endpoint,
        std::shared_ptr<Core::Credentials::TokenCredential const> credential,
        AttestationClientOptions options = AttestationClientOptions{});
 
    void RetrieveResponseValidationCollateral(
        Azure::Core::Context const& context = Azure::Core::Context{});
  };
 
}}} // namespace Azure::Security::Attestation