attestation_client_options.hpp

Go to the documentation of this file.

// Copyright (c) Microsoft Corporation. All rights reserved.
// SPDX-License-Identifier: MIT
 
#pragma once
 
#include "azure/attestation/attestation_client_models.hpp"
#include "dll_import_export.hpp"
#include <azure/core/internal/client_options.hpp>
#include <azure/core/internal/extendable_enumeration.hpp>
 
namespace Azure { namespace Security { namespace Attestation {
 
  using TokenValidationCallbackFn = std::function<void(
      Models::AttestationToken<void> const& token,
      Models::AttestationSigner const& tokenSigner)>;
 
  struct AttestationTokenValidationOptions final
  {
    bool ValidateToken{true};
 
    bool ValidateSigner{true};
 
    bool ValidateExpirationTime{true};
 
    bool ValidateNotBeforeTime{true};
 
    bool ValidateIssuer{false};
 
    std::string ExpectedIssuer;
 
    std::chrono::seconds TimeValidationSlack{0};
 
    TokenValidationCallbackFn ValidationCallback;
  };
 
  struct AttestationClientOptions final : public Azure::Core::_internal::ClientOptions
  {
    std::string ApiVersion{"2020-10-01"};
 
    AttestationTokenValidationOptions TokenValidationOptions;
    AttestationClientOptions(AttestationTokenValidationOptions const& tokenValidationOptions = {})
        : Azure::Core::_internal::ClientOptions(), TokenValidationOptions(tokenValidationOptions)
    {
    }
  };
 
  struct AttestationAdministrationClientOptions final : public Azure::Core::_internal::ClientOptions
  {
    std::string ApiVersion{"2020-10-01"};
    AttestationTokenValidationOptions TokenValidationOptions;
    AttestationAdministrationClientOptions(
        AttestationTokenValidationOptions const& tokenValidationOptions = {})
        : Azure::Core::_internal::ClientOptions(), TokenValidationOptions(tokenValidationOptions)
    {
    }
  };
 
  class AttestationDataType final
      : public Azure::Core::_internal::ExtendableEnumeration<AttestationDataType> {
 
  public:
    explicit AttestationDataType(std::string dataType)
        : Azure::Core::_internal::ExtendableEnumeration<AttestationDataType>(std::move(dataType))
    {
    }
 
    AZ_ATTESTATION_DLLEXPORT static const AttestationDataType Json;
 
    AZ_ATTESTATION_DLLEXPORT static const AttestationDataType Binary;
  };
 
  struct AttestationData final
  {
    std::vector<uint8_t> Data;
 
    AttestationDataType DataType;
  };
 
  struct AttestSgxEnclaveOptions final
  {
    Azure::Nullable<AttestationData> RunTimeData{};
 
    Azure::Nullable<AttestationData> InitTimeData{};
 
    Azure::Nullable<std::string> Nonce{};
 
    Azure::Nullable<std::string> DraftPolicyForAttestation{};
 
    Azure::Nullable<AttestationTokenValidationOptions> TokenValidationOptionsOverride{};
  };
 
  struct AttestOpenEnclaveOptions final
  {
    Azure::Nullable<AttestationData> RunTimeData{};
 
    Azure::Nullable<AttestationData> InitTimeData{};
 
    Azure::Nullable<std::string> Nonce{};
 
    Azure::Nullable<std::string> DraftPolicyForAttestation{};
 
    Azure::Nullable<AttestationTokenValidationOptions> TokenValidationOptionsOverride{};
  };
 
  struct AttestTpmOptions final
  {
    std::string Payload;
  };
 
  struct AttestationSigningKey final
  {
    std::string PemEncodedPrivateKey;
 
    std::string PemEncodedX509Certificate;
  };
 
  struct GetPolicyOptions final
  {
    Azure::Nullable<AttestationTokenValidationOptions> TokenValidationOptionsOverride{};
  };
 
  struct SetPolicyOptions final
  {
    Azure::Nullable<AttestationSigningKey> SigningKey;
 
    Azure::Nullable<AttestationTokenValidationOptions> TokenValidationOptionsOverride{};
  };
 
  struct GetIsolatedModeCertificatesOptions final
  {
    Azure::Nullable<AttestationTokenValidationOptions> TokenValidationOptionsOverride{};
  };
 
  struct AddIsolatedModeCertificateOptions final
  {
    Azure::Nullable<AttestationTokenValidationOptions> TokenValidationOptionsOverride{};
  };
 
  struct RemoveIsolatedModeCertificateOptions final
  {
    Azure::Nullable<AttestationTokenValidationOptions> TokenValidationOptionsOverride{};
  };
 
}}} // namespace Azure::Security::Attestation