supreme-client/at.asitplus.attestation.supreme

Package-level declarations

Types

Link copied to clipboard
class AttestationClient(client: HttpClient)

Mobile client, fetching attestation challenges and posting CSRs containing attestation statements to an attestation verification endpoint.

Properties

Link copied to clipboard
val AttestationChallenge.attestationEndpointUrl: Url

convenience shorthand to parse the attestation POST endpoint as a URL

Functions

Link copied to clipboard
suspend fun AttestationChallenge.createAttestationProof(alias: String, authPromptMessage: String? = null, authPromptCancelText: String? = null): KmmResult<Pkcs10CertificationRequest>

Creates a signed CSR from a received AttestationChallenge according to AttestationChallenge.keyConstraints. Hence, if no constraints are set, this method will always fail!

Link copied to clipboard
suspend fun Signer.Attestable<*>.createCsr(challenge: AttestationChallenge, subjectName: List<RelativeDistinguishedName> = listOf(), additionalExtensions: List<X509CertificateExtension> = listOf(), additionalAttributes: List<Pkcs10CertificationRequestAttribute> = listOf()): KmmResult<Pkcs10CertificationRequest>

Creates a signed CSR from an attestable signer. Encodes the challenge's nonce into a KnownOIDs.serialNumber subjectName and the attestation statement into a Pkcs10CertificationRequestAttribute with AttestationChallenge.proofOID. Since this operation prepares and directly signs the CSR, it may require user authentication

Link copied to clipboard
suspend fun AttestationClient.performAttestationFlow(alias: String, fetchChallengeEndpoint: Url, authPromptMessage: String? = null, authPromptCancelText: String? = null): AttestationResponse

Truly integrated attestation in a single call.