supreme-client/at.asitplus.attestation.supreme/AttestationClient

AttestationClient

class AttestationClient(client: HttpClient, clock: Clock = Clock.System, maxAttestationPayloadBytes: Int = WardenDefaults.DEFAULT_MAX_ATTESTATION_PAYLOAD_BYTES)(source)

Mobile client, fetching attestation challenges and posting signed CSRs or unsigned TBS CSRs containing attestation statements to an attestation verification endpoint.

Based on a Ktor client. Automatically installs JSON content negotiation. maxAttestationPayloadBytes bounds challenge and response bodies before they are deserialized. For testing, it is possible to provide a custom clock for high-level checks. Note that this clock does not affect generated attestation proofs, because those will always use the actual device clock!

Constructors

AttestationClient

constructor(client: HttpClient, clock: Clock = Clock.System, maxAttestationPayloadBytes: Int = WardenDefaults.DEFAULT_MAX_ATTESTATION_PAYLOAD_BYTES)

Functions

attest

suspend fun attest(attestationProof: AttestationProof, destination: Url): AttestationResponse

Posts an attestation proof created by createAttestationProof. Signed proofs send a complete PKCS#10 CSR; hash-authenticated proofs send an unsigned TBS CSR. Both are encoded as DER octet streams.

suspend fun ~~attest~~(csr: Pkcs10CertificationRequest, destination: Url): AttestationResponse

getChallenge

suspend fun getChallenge(endpoint: Url): KmmResult<AttestationChallenge>

Fetches a challenge from an endpoint. This is the first step in an attestation ceremony.

performAttestationFlow

suspend fun AttestationClient.~~performAttestationFlow~~(alias: String, fetchChallengeEndpoint: Url, authPromptMessage: String? = null, authPromptCancelText: String? = null, additionalCsrExtensions: List<X509CertificateExtension> = listOf(), additionalCsrAttributes: List<Pkcs10CertificationRequestAttribute> = listOf()): AttestationResponse

suspend fun AttestationClient.performAttestationFlow(alias: String, fetchChallengeEndpoint: Url, authPromptMessage: String? = null, authPromptCancelText: String? = null, additionalCsrExtensions: List<X509CertificateExtension> = listOf(), additionalCsrAttributes: List<Pkcs10CertificationRequestAttribute> = listOf(), toBeAttestedAttributes: (List<AttestationChallenge.AttributeAttestationDescriptor>) -> List<Primitive>): AttestationResponse

Truly integrated attestation in a single call.