@azure/attestation 1.0.1-alpha.20241021.1 → 1.0.1-alpha.20241023.1

package/dist/esm/utils/helpers.d.ts

@@ -0,0 +1,22 @@
+/** Create an AttestationSigningKey from the provided private key and certificate.
+ *
+ * @param privateKey - PEM encoded DER Encoded RSA or ECDS key.
+ * @param certificate - PEM encoded DER encoded X.509 certificate.
+ */
+export declare function verifyAttestationSigningKey(privateKey: string, certificate: string): {
+    certificate: string;
+    privateKey: string;
+};
+export type PemType = "CERTIFICATE" | "PRIVATE KEY";
+/**
+ *
+ * @param base64 - Base64 encoded DER object to encode as PEM.
+ * @param pemType - PEM object type - typically "CERTIFICATE" |
+ */
+export declare function pemFromBase64(base64: string, pemType: PemType): string;
+/**
+ * Converts a hex encoded string to its base64 equivalent.
+ * @param value - Hex encoded value
+ */
+export declare function hexToBase64(value: string): string;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/esm/utils/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/utils/helpers.ts"],"names":[],"mappings":"AAQA;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA2B7C;AAED,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,aAAa,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAStE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD"}

package/dist/esm/utils/helpers.js

@@ -0,0 +1,56 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+// eslint-disable-next-line @typescript-eslint/triple-slash-reference
+/// <reference path="../jsrsasign.d.ts"/>
+import * as jsrsasign from "jsrsasign";
+import { base64EncodeByteArray, hexToByteArray } from "./base64.js";
+/** Create an AttestationSigningKey from the provided private key and certificate.
+ *
+ * @param privateKey - PEM encoded DER Encoded RSA or ECDS key.
+ * @param certificate - PEM encoded DER encoded X.509 certificate.
+ */
+export function verifyAttestationSigningKey(privateKey, certificate) {
+    //
+    // Ensure that the key and certificate are associated with each other.
+    //
+    // Sign a buffer with the key, then verify the signature with the
+    // certificate.
+    const x509 = new jsrsasign.X509();
+    x509.readCertPEM(certificate);
+    const alg = x509.getSignatureAlgorithmName();
+    const signer = new jsrsasign.KJUR.crypto.Signature({ alg: alg });
+    // Confirm that the certificate and private key are related to each other.
+    const bufferToSign = "1234";
+    signer.init(privateKey);
+    signer.updateString(bufferToSign);
+    const sigVal = signer.sign();
+    const verifier = new jsrsasign.KJUR.crypto.Signature({ alg: alg });
+    verifier.init(x509.getPublicKey());
+    verifier.updateString(bufferToSign);
+    if (!verifier.verify(sigVal)) {
+        throw new Error("verifyAttestationSigningKey: Key does not match Certificate.");
+    }
+    return { certificate: certificate, privateKey: privateKey };
+}
+/**
+ *
+ * @param base64 - Base64 encoded DER object to encode as PEM.
+ * @param pemType - PEM object type - typically "CERTIFICATE" |
+ */
+export function pemFromBase64(base64, pemType) {
+    let pem = "-----BEGIN " + pemType + "-----\n";
+    while (base64 !== "") {
+        pem += base64.substr(0, 64) + "\n";
+        base64 = base64.substr(64);
+    }
+    pem += "-----END " + pemType + "-----\n";
+    return pem;
+}
+/**
+ * Converts a hex encoded string to its base64 equivalent.
+ * @param value - Hex encoded value
+ */
+export function hexToBase64(value) {
+    return base64EncodeByteArray(hexToByteArray(value));
+}
+//# sourceMappingURL=helpers.js.map

package/dist/esm/utils/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/utils/helpers.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,qEAAqE;AACrE,yCAAyC;AACzC,OAAO,KAAK,SAAS,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEpE;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,WAAmB;IAEnB,EAAE;IACF,sEAAsE;IACtE,EAAE;IACF,iEAAiE;IACjE,eAAe;IACf,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;IAE7C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjE,0EAA0E;IAC1E,MAAM,YAAY,GAAG,MAAM,CAAC;IAE5B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,OAAgB;IAC5D,IAAI,GAAG,GAAG,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;IAC9C,OAAO,MAAM,KAAK,EAAE,EAAE,CAAC;QACrB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;QACnC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,GAAG,IAAI,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IAEzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,qBAAqB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n// eslint-disable-next-line @typescript-eslint/triple-slash-reference\n/// <reference path=\"../jsrsasign.d.ts\"/>\nimport * as jsrsasign from \"jsrsasign\";\nimport { base64EncodeByteArray, hexToByteArray } from \"./base64.js\";\n\n/** Create an AttestationSigningKey from the provided private key and certificate.\n *\n * @param privateKey - PEM encoded DER Encoded RSA or ECDS key.\n * @param certificate - PEM encoded DER encoded X.509 certificate.\n */\nexport function verifyAttestationSigningKey(\n  privateKey: string,\n  certificate: string,\n): { certificate: string; privateKey: string } {\n  //\n  // Ensure that the key and certificate are associated with each other.\n  //\n  // Sign a buffer with the key, then verify the signature with the\n  // certificate.\n  const x509 = new jsrsasign.X509();\n  x509.readCertPEM(certificate);\n\n  const alg = x509.getSignatureAlgorithmName();\n\n  const signer = new jsrsasign.KJUR.crypto.Signature({ alg: alg });\n\n  // Confirm that the certificate and private key are related to each other.\n  const bufferToSign = \"1234\";\n\n  signer.init(privateKey);\n  signer.updateString(bufferToSign);\n  const sigVal = signer.sign();\n\n  const verifier = new jsrsasign.KJUR.crypto.Signature({ alg: alg });\n  verifier.init(x509.getPublicKey());\n  verifier.updateString(bufferToSign);\n  if (!verifier.verify(sigVal)) {\n    throw new Error(\"verifyAttestationSigningKey: Key does not match Certificate.\");\n  }\n  return { certificate: certificate, privateKey: privateKey };\n}\n\nexport type PemType = \"CERTIFICATE\" | \"PRIVATE KEY\";\n\n/**\n *\n * @param base64 - Base64 encoded DER object to encode as PEM.\n * @param pemType - PEM object type - typically \"CERTIFICATE\" |\n */\nexport function pemFromBase64(base64: string, pemType: PemType): string {\n  let pem = \"-----BEGIN \" + pemType + \"-----\\n\";\n  while (base64 !== \"\") {\n    pem += base64.substr(0, 64) + \"\\n\";\n    base64 = base64.substr(64);\n  }\n  pem += \"-----END \" + pemType + \"-----\\n\";\n\n  return pem;\n}\n\n/**\n * Converts a hex encoded string to its base64 equivalent.\n * @param value - Hex encoded value\n */\nexport function hexToBase64(value: string): string {\n  return base64EncodeByteArray(hexToByteArray(value));\n}\n"]}

package/dist/esm/utils/textEncoding-browser.d.mts

@@ -0,0 +1,4 @@
+declare const textDecoder: typeof import("util").TextDecoder;
+declare const textEncoder: typeof import("util").TextEncoder;
+export { textDecoder as TextDecoder, textEncoder as TextEncoder };
+//# sourceMappingURL=textEncoding-browser.d.mts.map

package/dist/esm/utils/textEncoding-browser.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"textEncoding-browser.d.mts","sourceRoot":"","sources":["../../../src/utils/textEncoding-browser.mts"],"names":[],"mappings":"AAGA,QAAA,MAAM,WAAW,mCAAc,CAAC;AAChC,QAAA,MAAM,WAAW,mCAAc,CAAC;AAEhC,OAAO,EAAE,WAAW,IAAI,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,CAAC"}

package/dist/esm/utils/textEncoding-browser.mjs

@@ -0,0 +1,6 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+const textDecoder = TextDecoder;
+const textEncoder = TextEncoder;
+export { textDecoder as TextDecoder, textEncoder as TextEncoder };
+//# sourceMappingURL=textEncoding-browser.mjs.map

package/dist/esm/utils/textEncoding-browser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"textEncoding-browser.mjs","sourceRoot":"","sources":["../../../src/utils/textEncoding-browser.mts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,MAAM,WAAW,GAAG,WAAW,CAAC;AAChC,MAAM,WAAW,GAAG,WAAW,CAAC;AAEhC,OAAO,EAAE,WAAW,IAAI,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nconst textDecoder = TextDecoder;\nconst textEncoder = TextEncoder;\n\nexport { textDecoder as TextDecoder, textEncoder as TextEncoder };\n"]}

package/dist/esm/utils/typeDeserializer.d.ts

@@ -0,0 +1,34 @@
+import { Mapper } from "@azure/core-client";
+/**
+ * The TypeDeserializer class enables easy access to the Attestation Model serialization
+ * and deserialization APIs.
+ */
+export declare class TypeDeserializer {
+    /**
+     * Deserializes a JSON object into a model type.
+     * @param rawJson - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A mapping between type names and {@link Mapper} objects
+     *  which defines the model properties for the type. the {@link bodyTypeName}
+     *  must be one of the properties in the {@link bodyMapper} parameter.
+     * @param bodyTypeName - The name of the type of the body.
+     * @returns The deserialized type. It is the responsibility of the caller to cast to the
+     *      expected return type.
+     *
+     * @internal
+     */
+    static deserialize(rawJson: unknown, typeMappers: {
+        [key: string]: any;
+    }, bodyTypeName: string): unknown;
+    /**
+     * Serializes a JSON object into a model type.
+     * @param objectToSerialize - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A {@link Mapper} object which defines the model properties for the type.
+     * @returns The serialized type as a JSON encoded string.
+     *
+     * @internal
+     */
+    static serialize(objectToSerialize: unknown, typeMappers: {
+        [key: string]: Mapper;
+    }, bodyMapper: Mapper): string;
+}
+//# sourceMappingURL=typeDeserializer.d.ts.map

package/dist/esm/utils/typeDeserializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeDeserializer.d.ts","sourceRoot":"","sources":["../../../src/utils/typeDeserializer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,oBAAoB,CAAC;AAE9D;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B;;;;;;;;;;;OAWG;WACW,WAAW,CACvB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,EACnC,YAAY,EAAE,MAAM,GACnB,OAAO;IAKV;;;;;;;OAOG;WACW,SAAS,CACrB,iBAAiB,EAAE,OAAO,EAC1B,WAAW,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EACtC,UAAU,EAAE,MAAM,GACjB,MAAM;CAIV"}

package/dist/esm/utils/typeDeserializer.js

@@ -0,0 +1,38 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+import { createSerializer } from "@azure/core-client";
+/**
+ * The TypeDeserializer class enables easy access to the Attestation Model serialization
+ * and deserialization APIs.
+ */
+export class TypeDeserializer {
+    /**
+     * Deserializes a JSON object into a model type.
+     * @param rawJson - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A mapping between type names and {@link Mapper} objects
+     *  which defines the model properties for the type. the {@link bodyTypeName}
+     *  must be one of the properties in the {@link bodyMapper} parameter.
+     * @param bodyTypeName - The name of the type of the body.
+     * @returns The deserialized type. It is the responsibility of the caller to cast to the
+     *      expected return type.
+     *
+     * @internal
+     */
+    static deserialize(rawJson, typeMappers, bodyTypeName) {
+        const serializer = createSerializer(typeMappers);
+        return serializer.deserialize(typeMappers[bodyTypeName], rawJson, bodyTypeName);
+    }
+    /**
+     * Serializes a JSON object into a model type.
+     * @param objectToSerialize - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A {@link Mapper} object which defines the model properties for the type.
+     * @returns The serialized type as a JSON encoded string.
+     *
+     * @internal
+     */
+    static serialize(objectToSerialize, typeMappers, bodyMapper) {
+        const serializer = createSerializer(typeMappers);
+        return JSON.stringify(serializer.serialize(bodyMapper, objectToSerialize));
+    }
+}
+//# sourceMappingURL=typeDeserializer.js.map

package/dist/esm/utils/typeDeserializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeDeserializer.js","sourceRoot":"","sources":["../../../src/utils/typeDeserializer.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,OAAO,EAAU,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IAC3B;;;;;;;;;;;OAWG;IACI,MAAM,CAAC,WAAW,CACvB,OAAgB,EAChB,WAAmC,EACnC,YAAoB;QAEpB,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACjD,OAAO,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAClF,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,SAAS,CACrB,iBAA0B,EAC1B,WAAsC,EACtC,UAAkB;QAElB,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { Mapper, createSerializer } from \"@azure/core-client\";\n\n/**\n * The TypeDeserializer class enables easy access to the Attestation Model serialization\n * and deserialization APIs.\n */\nexport class TypeDeserializer {\n  /**\n   * Deserializes a JSON object into a model type.\n   * @param rawJson - The JSON encoded object to convert into model type.\n   * @param bodyMapper - A mapping between type names and {@link Mapper} objects\n   *  which defines the model properties for the type. the {@link bodyTypeName}\n   *  must be one of the properties in the {@link bodyMapper} parameter.\n   * @param bodyTypeName - The name of the type of the body.\n   * @returns The deserialized type. It is the responsibility of the caller to cast to the\n   *      expected return type.\n   *\n   * @internal\n   */\n  public static deserialize(\n    rawJson: unknown,\n    typeMappers: { [key: string]: any },\n    bodyTypeName: string,\n  ): unknown {\n    const serializer = createSerializer(typeMappers);\n    return serializer.deserialize(typeMappers[bodyTypeName], rawJson, bodyTypeName);\n  }\n\n  /**\n   * Serializes a JSON object into a model type.\n   * @param objectToSerialize - The JSON encoded object to convert into model type.\n   * @param bodyMapper - A {@link Mapper} object which defines the model properties for the type.\n   * @returns The serialized type as a JSON encoded string.\n   *\n   * @internal\n   */\n  public static serialize(\n    objectToSerialize: unknown,\n    typeMappers: { [key: string]: Mapper },\n    bodyMapper: Mapper,\n  ): string {\n    const serializer = createSerializer(typeMappers);\n    return JSON.stringify(serializer.serialize(bodyMapper, objectToSerialize));\n  }\n}\n"]}

package/dist/esm/utils/utf8.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Converts a string into a utf8 encoded byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+export declare function stringToBytes(content: string): Uint8Array;
+/**
+ * Converts a utf8 string into a byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+export declare function bytesToString(content: Uint8Array): string;
+//# sourceMappingURL=utf8.d.ts.map

package/dist/esm/utils/utf8.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utf8.d.ts","sourceRoot":"","sources":["../../../src/utils/utf8.ts"],"names":[],"mappings":"AAeA;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAEzD"}

package/dist/esm/utils/utf8.js

@@ -0,0 +1,27 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+const decoder = typeof Buffer === "undefined" ? new TextDecoder("ascii") : undefined;
+const encoder = typeof Buffer === "undefined" ? new TextEncoder() : undefined;
+const decode = decoder
+    ? (buffer) => decoder.decode(buffer)
+    : (buffer) => buffer.toString("ascii");
+const encode = encoder
+    ? (str) => encoder.encode(str)
+    : (str) => Buffer.from(str, "utf8");
+/**
+ * Converts a string into a utf8 encoded byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+export function stringToBytes(content) {
+    return encode(content);
+}
+/**
+ * Converts a utf8 string into a byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+export function bytesToString(content) {
+    return decode(content);
+}
+//# sourceMappingURL=utf8.js.map

package/dist/esm/utils/utf8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utf8.js","sourceRoot":"","sources":["../../../src/utils/utf8.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAErF,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9E,MAAM,MAAM,GAAoC,OAAO;IACrD,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAE,MAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAErD,MAAM,MAAM,GAAgC,OAAO;IACjD,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;IAC9B,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAmB;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nconst decoder = typeof Buffer === \"undefined\" ? new TextDecoder(\"ascii\") : undefined;\n\nconst encoder = typeof Buffer === \"undefined\" ? new TextEncoder() : undefined;\n\nconst decode: (buffer: ArrayBuffer) => string = decoder\n  ? (buffer) => decoder.decode(buffer)\n  : (buffer) => (buffer as Buffer).toString(\"ascii\");\n\nconst encode: (str: string) => Uint8Array = encoder\n  ? (str) => encoder.encode(str)\n  : (str) => Buffer.from(str, \"utf8\");\n\n/**\n * Converts a string into a utf8 encoded byte array.\n * @param content - The utf8 string to convert.\n * @internal\n */\nexport function stringToBytes(content: string): Uint8Array {\n  return encode(content);\n}\n\n/**\n * Converts a utf8 string into a byte array.\n * @param content - The utf8 string to convert.\n * @internal\n */\nexport function bytesToString(content: Uint8Array): string {\n  return decode(content);\n}\n"]}

package/dist/react-native/attestationAdministrationClient.d.ts

@@ -0,0 +1,183 @@
+import { AttestationResponse, AttestationSigner, AttestationTokenValidationOptions, AttestationType, PolicyCertificatesModificationResult, PolicyResult } from "./models/index.js";
+import { CommonClientOptions, OperationOptions } from "@azure/core-client";
+import { TokenCredential } from "@azure/core-auth";
+/**
+ * Attestation Client Construction Options.
+ */
+export interface AttestationAdministrationClientOptions extends CommonClientOptions {
+    /**
+     * Options to be used globally to validate attestation tokens received from
+     * the attestation service.
+     */
+    validationOptions?: AttestationTokenValidationOptions;
+}
+/**
+ * Operation options for the Attestation Administration Client operations.
+ */
+export interface AttestationAdministrationClientOperationOptions extends OperationOptions {
+    /**
+     * Options to be used globally to validate attestation tokens received from
+     * the attestation service.
+     */
+    validationOptions?: AttestationTokenValidationOptions;
+}
+/**
+ * Operation options for the administration Policy operations.
+ */
+export interface AttestationAdministrationClientPolicyOperationOptions extends AttestationAdministrationClientOperationOptions {
+    /**
+     * Optional Private key used to sign the token sent to the attestation service.
+     *
+     * Required for Isolated Mode attestation instances.
+     */
+    privateKey?: string;
+    /**
+     * Optional certificate which can validate the token sent to the attestation service.
+     *
+     * Required for Isolated Mode attestation instances.
+     *
+     * If the service instance is in Isolated mode, the certificate *must* be one
+     * of the configured policy management certificates.
+     */
+    certificate?: string;
+}
+/**
+ * Operation options for the Policy Certificates operations.
+ */
+export interface AttestationAdministrationClientPolicyCertificateOperationOptions extends AttestationAdministrationClientOperationOptions {
+}
+/**
+ * Attestation Client class.
+ *
+ * The AttestationClient class enables access to the Attestation related APIs:
+ *
+ * - getPolicy
+ * - setPolicy
+ * - resetPolicy
+ * - getPolicyManagementCertificates
+ * - addPolicyManagementCertificate
+ * - removePolicyManagementCertificate
+ */
+export declare class AttestationAdministrationClient {
+    /**
+     * Creates an instance of AttestationAdministrationClient.
+     *
+     * Example usage:
+     * ```ts
+     * import { AttestationAdministrationClient } from "@azure/attestation";
+     *
+     * const client = new AttestationAdministrationClient(
+     *    "<service endpoint>",
+     *    new TokenCredential("<>")
+     * );
+     * ```
+     *
+     * @param endpoint - The attestation instance endpoint, for example https://mytenant.attest.azure.net.
+     * @param credential - Used to authenticate requests to the service.
+     * @param options - Used to configure the Form Recognizer client.
+     */
+    constructor(endpoint: string, credentials: TokenCredential, options?: AttestationAdministrationClientOptions);
+    /**
+     * Retrieves the attestation policy document from the server, and returns it
+     * to the caller.
+     *
+     * @param attestationType - AttestationType for which to retrieve policy.
+     * @param options - Pipeline and client options for the `getPolicy` call.
+     * @returns `AttestationResponse<string>` - the `value` property is the
+     *      attestation policy,  the `token` property will be the actual token
+     *      returned by the attestation service.
+     */
+    getPolicy(attestationType: AttestationType, options?: AttestationAdministrationClientPolicyOperationOptions): Promise<AttestationResponse<string>>;
+    /**
+     * Sets the attestation policy for the specified {@link attestationType}.
+     *
+     * @param attestationType - Attestation Type for which to set policy.
+     * @param newPolicyDocument - Policy document to be set.
+     * @param options - call options.
+     * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.
+     *  Clients can use the PolicyResult to validate that the policy was actually
+     *  set by the attestation service.
+     *
+     * @remarks
+     *
+     * Please note that if the attestation service instance is running in "Isolated"
+     * mode, the {@link signingKey} must be one of the signing keys configured for the
+     * service instance.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     */
+    setPolicy(attestationType: AttestationType, newPolicyDocument: string, options?: AttestationAdministrationClientPolicyOperationOptions): Promise<AttestationResponse<PolicyResult>>;
+    /**
+     * Resets the attestation policy for the specified {@link attestationType} to
+     * the default value.
+     *
+     * @param attestationType - Attestation Type for which to set policy.
+     * @param options - call options.
+     * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.
+     *  Clients can use the PolicyResult to validate that the policy was actually
+     *  reset by the attestation service.
+     *
+     * @remarks
+     *
+     * Please note that if the attestation service instance is running in "Isolated"
+     * mode, the {@link signingKey} must be one of the signing keys configured for the
+     * service instance.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     */
+    resetPolicy(attestationType: AttestationType, options?: AttestationAdministrationClientPolicyOperationOptions): Promise<AttestationResponse<PolicyResult>>;
+    /** Returns the set of policy management certificates for this attestation instance.
+     *
+     * @remarks If the attestation instance is not in `Isolated` mode, this list will
+     *    always be empty.
+     *
+     * @param options - Options for the call to the attestation service.
+     * @returns AttestationResponse wrapping a list of Attestation Signers.
+     */
+    getPolicyManagementCertificates(options?: AttestationAdministrationClientPolicyCertificateOperationOptions): Promise<AttestationResponse<AttestationSigner[]>>;
+    /** Add a new certificate chain to the set of policy management certificates.
+     *
+     * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.
+     * @param privateKey - Existing attestation private key used to sign the incoming request.
+     * @param certificate - Existing attestation certificate used to verify the incoming request.
+     * @param options - Options used in the call to the service.
+     * @returns An attestation response including a PolicyCertificatesModificationResult
+     *
+     * @remarks This API is only supported on `isolated` attestation instances.
+     *
+     * The signing key MUST be one of the existing attestation signing certificates. The
+     * new pemCertificate is signed using the signingKey and the service will validate the
+     * signature before allowing the addition.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     *
+     */
+    addPolicyManagementCertificate(pemCertificate: string, privateKey: string, certificate: string, options?: AttestationAdministrationClientPolicyCertificateOperationOptions): Promise<AttestationResponse<PolicyCertificatesModificationResult>>;
+    private keyTypeFromCertificate;
+    /** Add a new certificate chain to the set of policy management certificates.
+     *
+     * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.
+     * @param privateKey - Existing attestation private key used to sign the incoming request.
+     * @param certificate - Existing attestation certificate used to verify the incoming request.
+     * @param options - Options used in the call to the service.
+     * @returns An attestation response including a PolicyCertificatesModificationResult
+     *
+     * @remarks This API is only supported on `isolated` attestation instances.
+     *
+     * The signing key MUST be one of the existing attestation signing certificates. The
+     * new pemCertificate is signed using the signingKey and the service will validate the
+     * signature before allowing the addition.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     */
+    removePolicyManagementCertificate(pemCertificate: string, privateKey: string, certificate: string, options?: AttestationAdministrationClientPolicyCertificateOperationOptions): Promise<AttestationResponse<PolicyCertificatesModificationResult>>;
+    private signingKeys;
+    private _client;
+    private _signers?;
+    private _validationOptions?;
+}
+//# sourceMappingURL=attestationAdministrationClient.d.ts.map

package/dist/react-native/attestationAdministrationClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationAdministrationClient.d.ts","sourceRoot":"","sources":["../../src/attestationAdministrationClient.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iCAAiC,EACjC,eAAe,EACf,oCAAoC,EACpC,YAAY,EACb,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAenD;;GAEG;AACH,MAAM,WAAW,sCAAuC,SAAQ,mBAAmB;IACjF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,+CAAgD,SAAQ,gBAAgB;IACvF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,qDACf,SAAQ,+CAA+C;IACvD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gEACf,SAAQ,+CAA+C;CAAG;AAE5D;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAC1C;;;;;;;;;;;;;;;;OAgBG;gBAGD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sCAA2C;IAmBtD;;;;;;;;;OASG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IA6CvC;;;;;;;;;;;;;;;;;;OAkBG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAqD7C;;;;;;;;;;;;;;;;;;OAkBG;IAEU,WAAW,CACtB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAoD7C;;;;;;;OAOG;IACU,+BAA+B,CAC1C,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAuCpD;;;;;;;;;;;;;;;;;OAiBG;IACU,8BAA8B,CACzC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;IAwErE,OAAO,CAAC,sBAAsB;IAmB9B;;;;;;;;;;;;;;;;OAgBG;IACU,iCAAiC,CAC5C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;YAwEvD,WAAW;IAazB,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,QAAQ,CAAC,CAAsB;IACvC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;CAChE"}