@azure/attestation 1.0.1-alpha.20241022.1 → 1.0.1-alpha.20241023.1

package/dist/browser/models/attestationResponse.d.ts

@@ -0,0 +1,30 @@
+import { AttestationToken } from "./attestationToken.js";
+/**
+ * An AttestationResponse represents the response from the Microsoft Azure
+ * Attestation service. It has two properties:
+ *
+ * @param token - The attestation token returned from the attestation service.
+ * @param body - The value of the response from the attestation service.
+ * @typeparam T - The type of the {@link body} property.
+ *
+ */
+export interface AttestationResponse<T> {
+    /**
+     * The Attestation Token returned from the attestation service.
+     */
+    token: AttestationToken;
+    /**
+     * The value of the response from the attestation service, derived
+     *  from the body of the {@link token} property.
+     */
+    body: T;
+}
+/** Create an AttestationResponse object.
+ *
+ * @param token - Token which was returned from the attestation service.
+ * @param value - Value for the response. Usually derived from the body of the token
+ *    returned by the service.
+ * @returns - A newly created AttestationResponse object.
+ */
+export declare function createAttestationResponse<T>(token: AttestationToken, value: T): AttestationResponse<T>;
+//# sourceMappingURL=attestationResponse.d.ts.map

package/dist/browser/models/attestationResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationResponse.d.ts","sourceRoot":"","sources":["../../../src/models/attestationResponse.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC;;OAEG;IACH,KAAK,EAAE,gBAAgB,CAAC;IAExB;;;OAGG;IAEH,IAAI,EAAE,CAAC,CAAC;CACT;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EACzC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,CAAC,GACP,mBAAmB,CAAC,CAAC,CAAC,CAExB"}

package/dist/browser/models/attestationResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationResponse.js","sourceRoot":"","sources":["../../../src/models/attestationResponse.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AA2BlC;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAuB,EACvB,KAAQ;IAER,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { AttestationToken } from \"./attestationToken.js\";\n\n/**\n * An AttestationResponse represents the response from the Microsoft Azure\n * Attestation service. It has two properties:\n *\n * @param token - The attestation token returned from the attestation service.\n * @param body - The value of the response from the attestation service.\n * @typeparam T - The type of the {@link body} property.\n *\n */\nexport interface AttestationResponse<T> {\n  /**\n   * The Attestation Token returned from the attestation service.\n   */\n  token: AttestationToken;\n\n  /**\n   * The value of the response from the attestation service, derived\n   *  from the body of the {@link token} property.\n   */\n\n  body: T;\n}\n\n/** Create an AttestationResponse object.\n *\n * @param token - Token which was returned from the attestation service.\n * @param value - Value for the response. Usually derived from the body of the token\n *    returned by the service.\n * @returns - A newly created AttestationResponse object.\n */\nexport function createAttestationResponse<T>(\n  token: AttestationToken,\n  value: T,\n): AttestationResponse<T> {\n  return { token: token, body: value };\n}\n"]}

package/dist/browser/models/attestationResult.d.ts

@@ -0,0 +1,294 @@
+import { AttestationSigner } from "./index.js";
+import { GeneratedAttestationResult } from "../generated/index.js";
+/**
+ * Defines the contents of the {@link AttestationResult.sgxCollateral} claim in
+ * an {@link AttestationResult}.
+ */
+export interface AttestationSgxCollateralInfo {
+    /**
+     * Hex encoded Sha256 hash of the Quoting Enclave Certificates.
+     *
+     * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }
+     *  for more information on quote validation.
+     */
+    qeidcertshash?: string;
+    /**
+     * Hex encoded Sha256 hash of the Quoting Enclave Certificate CRL.
+     *
+     * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }
+     *  for more information on quote validation.
+     */
+    qeidcrlhash?: string;
+    /**
+     * Hex encoded Sha256 hash of the Quoting Enclave Identity.
+     *
+     * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }
+     *  for more information on quote validation.
+     */
+    qeidhash?: string;
+    /**
+     * Hex encoded Sha256 hash of the SGX Quote or OpenEnclave Report validated
+     * by this token.
+     *
+     * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }
+     *  for more information on quote validation.
+     */
+    quotehash?: string;
+    /**
+     * Hex encoded Sha256 hash of the TCB Info Certificates.
+     *
+     * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }
+     *  for more information on quote validation.
+     */
+    tcbinfocertshash?: string;
+    /**
+     * Hex encoded Sha256 hash of the TCB Info Certificate CRL.
+     *
+     * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }
+     *  for more information on quote validation.
+     */
+    tcbinfocrlhash?: string;
+    /**
+     * Hex encoded Sha256 hash of the TCB Info for the device being attested.
+     *
+     * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }
+     *  for more information on quote validation.
+     */
+    tcbinfohash?: string;
+}
+/**
+ * A Microsoft Azure Attestation response token body - the body of a response token issued by MAA
+ */
+export interface AttestationResult {
+    /**
+     * Unique Identifier for the token.
+     *
+     * Corresponds to the 'jti' claim defined in
+     * {@link https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.7 | RFC 7519 section 4.1.7}
+     */
+    uniqueId: string;
+    /**
+     * Returns the issuer of the attestation token. MUST be the same as the
+     * endpoint used when constructing the attestation client instance.
+     */
+    issuer: string;
+    /**
+     * Returns the "nonce" value if one was specified in the Attest request.
+     */
+    nonce?: string;
+    /**
+     * The Schema version of this structure. Current Value: 1.0
+     */
+    version: string;
+    /**
+     *  Returns the runtime claims in the token.
+     *
+     * This value will match the input `runTimeJson` property to the
+     * {@link AttestationClient.attestSgxEnclave} or
+     * {@link AttestationClient.attestOpenEnclave} API.
+     *
+     * @remarks
+     *
+     * The `runtimeClaims` property will only be populated if the
+     * `runtimeJson` parameter to the `Attest` API is specified. It will
+     * not be populated if the `runtimeData` parameter is specified.
+     */
+    runTimeClaims: unknown;
+    /**
+     * Returns the initialization time claims in the token.
+     * This value will match the input `initTimeJson` property to the
+     * {@link AttestationClient.attestSgxEnclave} or
+     * {@link AttestationClient.attestOpenEnclave} API.
+     *
+     * @remarks
+     *
+     *  The `initTimeClaims` property will only be populated if the `initTimeJson`
+     *  parameter to the `Attest` API is specified. It will not be populated if
+     *  the `initTimeData` parameter is specified.
+     */
+    initTimeClaims: unknown;
+    /**
+     * Returns the set of claims generated by the attestation policy on the instance.
+     */
+    policyClaims: unknown;
+    /**
+     * Returns the verifier which generated this attestation token. Normally one of:
+     * "SGX" or "TPM", but others can be specified.
+     */
+    verifierType: string;
+    /**
+     * The certificate used to sign the policy object, if specified.
+     */
+    policySigner?: AttestationSigner;
+    /**
+     * The base64url encoded SHA256 hash of the BASE64URL encoded policy text
+     * used for attestation.
+     */
+    policyHash: Uint8Array;
+    /**
+     * True if the enclave is debuggable, false otherwise. Only valid if `verifierType` is SGX.
+     */
+    isDebuggable?: boolean;
+    /**
+     * The SGX Product ID for the enclave. Only valid if the `verifierType` field is "SGX"
+     */
+    productId?: number;
+    /**
+     * The HEX encoded SGX MRENCLAVE value for the enclave. Only valid if the
+     * `verifierType` field is "SGX"
+     */
+    mrEnclave?: string;
+    /**
+     * The HEX encoded SGX MRSIGNER value for the enclave. Only valid if the
+     * `verifierType` field is "SGX"
+     */
+    mrSigner?: string;
+    /**
+     * The SGX SVN value for the enclave. Only valid if the `verifierType` field is "SGX"
+     */
+    svn?: number;
+    /**
+     * Returns the value of the runtime_data field specified as an input to the
+     * {@link AttestationClient.attestSgxEnclave} or {@link AttestationClient.attestOpenEnclave} API.
+     *
+     * @remarks
+     *
+     * The `enclaveHeldData` property will only be populated if the
+     * `runtimeData` parameter to the `Attest` API is specified.
+     */
+    enclaveHeldData?: Uint8Array;
+    /**
+     * Returns a set of information describing the complete set of inputs to the
+     * Attestation validation logic.
+     *
+     * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }
+     *  for more information on quote validation.
+     */
+    sgxCollateral?: AttestationSgxCollateralInfo;
+}
+/**
+ * A Microsoft Azure Attestation response token body - the body of a response token issued by MAA
+ */
+export declare class AttestationResultImpl implements AttestationResult {
+    /**
+     *
+     * @param params - The parameters for the constructor.
+     *
+     * @hidden
+     */
+    constructor(params: {
+        issuer: string;
+        version: string;
+        nonce?: string;
+        uniqueId: string;
+        runTimeClaims?: unknown;
+        initTimeClaims?: unknown;
+        policyClaims?: unknown;
+        verifierType: string;
+        policySigner?: AttestationSigner;
+        policyHash: Uint8Array;
+        isDebuggable?: boolean;
+        productId?: number;
+        mrEnclave?: string;
+        mrSigner?: string;
+        svn?: number;
+        enclaveHeldData?: Uint8Array;
+        sgxCollateral?: AttestationSgxCollateralInfo;
+    });
+    private _issuer;
+    private _version;
+    private _nonce?;
+    private _uniqueId;
+    private _runTimeClaims?;
+    private _initTimeClaims?;
+    private _policyClaims?;
+    private _verifierType;
+    private _policySigner?;
+    private _policyHash;
+    private _isDebuggable?;
+    private _productId?;
+    private _mrEnclave?;
+    private _mrSigner?;
+    private _svn?;
+    private _enclaveHeldData?;
+    private _sgxCollateral?;
+    /**
+     * Unique Identifier for the token
+     *
+     */
+    get uniqueId(): string;
+    /**
+     * Returns the issuer of the attestation token. MUST be the same as the
+     * endpoint used when constructing the attestation client instance.
+     */
+    get issuer(): string;
+    /**
+     * Returns the "nonce" value specified in the Attest request.
+     */
+    get nonce(): string | undefined;
+    /**
+     * The Schema version of this structure. Current Value: 1.0
+     */
+    get version(): string;
+    /**
+     * Runtime Claims
+     */
+    get runTimeClaims(): unknown;
+    /**
+     * Inittime Claims
+     */
+    get initTimeClaims(): unknown;
+    /**
+     * Policy Generated Claims
+     */
+    get policyClaims(): unknown;
+    /**
+     * The Attestation type being attested.
+     */
+    get verifierType(): string;
+    /**
+     * The certificate used to sign the policy object, if specified.
+     */
+    get policySigner(): AttestationSigner | undefined;
+    /**
+     * The SHA256 hash of the BASE64URL encoded policy text used for attestation
+     */
+    get policyHash(): Uint8Array;
+    /**
+     * True if the enclave is debuggable, false otherwise
+     */
+    get isDebuggable(): boolean | undefined;
+    /**
+     * The SGX Product ID for the enclave.
+     */
+    get productId(): number | undefined;
+    /**
+     * The HEX encoded SGX MRENCLAVE value for the enclave.
+     */
+    get mrEnclave(): string | undefined;
+    /**
+     * The HEX encoded SGX MRSIGNER value for the enclave.
+     */
+    get mrSigner(): string | undefined;
+    /**
+     * The SGX SVN value for the enclave.
+     */
+    get svn(): number | undefined;
+    /**
+     * A copy of the RuntimeData specified as an input to the attest call.
+     */
+    get enclaveHeldData(): Uint8Array | undefined;
+    /**
+     * The SGX SVN value for the enclave.
+     */
+    get sgxCollateral(): AttestationSgxCollateralInfo | undefined;
+}
+/**
+ *
+ * @param generated - Generated attestation result object.
+ * @returns newly created AttestationResult from the generated result.
+ *
+ * @internal
+ */
+export declare function _attestationResultFromGenerated(generated: GeneratedAttestationResult): AttestationResultImpl;
+//# sourceMappingURL=attestationResult.d.ts.map

package/dist/browser/models/attestationResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationResult.d.ts","sourceRoot":"","sources":["../../../src/models/attestationResult.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAGnE;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;;;;;;;;OAYG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;;OAWG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,YAAY,EAAE,OAAO,CAAC;IAEtB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC;;;OAGG;IACH,UAAU,EAAE,UAAU,CAAC;IACvB;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,UAAU,CAAC;IAE7B;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,4BAA4B,CAAC;CAC9C;AAED;;GAEG;AACH,qBAAa,qBAAsB,YAAW,iBAAiB;IAC7D;;;;;OAKG;gBACS,MAAM,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,iBAAiB,CAAC;QACjC,UAAU,EAAE,UAAU,CAAC;QACvB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,UAAU,CAAC;QAC7B,aAAa,CAAC,EAAE,4BAA4B,CAAC;KAC9C;IAoBD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,cAAc,CAAC,CAAU;IACjC,OAAO,CAAC,eAAe,CAAC,CAAU;IAClC,OAAO,CAAC,aAAa,CAAC,CAAU;IAChC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,aAAa,CAAC,CAAoB;IAC1C,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,aAAa,CAAC,CAAU;IAChC,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAS;IACtB,OAAO,CAAC,gBAAgB,CAAC,CAAa;IACtC,OAAO,CAAC,cAAc,CAAC,CAA+B;IAEtD;;;OAGG;IACH,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;;OAGG;IACH,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,OAAO,CAE3B;IACD;;OAEG;IACH,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,OAAO,CAE1B;IACD;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IACD;;OAEG;IACH,IAAI,YAAY,IAAI,iBAAiB,GAAG,SAAS,CAEhD;IACD;;OAEG;IACH,IAAI,UAAU,IAAI,UAAU,CAE3B;IACD;;OAEG;IACH,IAAI,YAAY,IAAI,OAAO,GAAG,SAAS,CAEtC;IACD;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IACD;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IACD;;OAEG;IACH,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IACD;;OAEG;IACH,IAAI,GAAG,IAAI,MAAM,GAAG,SAAS,CAE5B;IACD;;OAEG;IACH,IAAI,eAAe,IAAI,UAAU,GAAG,SAAS,CAE5C;IACD;;OAEG;IACH,IAAI,aAAa,IAAI,4BAA4B,GAAG,SAAS,CAE5D;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,0BAA0B,GACpC,qBAAqB,CAsBvB"}

package/{dist-esm/src → dist/browser}/models/attestationResult.js

@@ -1,6 +1,6 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
-import { _attestationSignerFromGenerated } from "./attestationSigner";
+import { _attestationSignerFromGenerated } from "./attestationSigner.js";
 /**
  * A Microsoft Azure Attestation response token body - the body of a response token issued by MAA
  */

package/dist/browser/models/attestationResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationResult.js","sourceRoot":"","sources":["../../../src/models/attestationResult.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAIlC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAqLzE;;GAEG;AACH,MAAM,OAAO,qBAAqB;IAChC;;;;;OAKG;IACH,YAAY,MAkBX;QACC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC;IAC7C,CAAC;IAoBD;;;OAGG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IACD;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IACD;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IACD;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IACD;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IACD;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IACD;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IACD;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IACD;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD;;OAEG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IACD;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC7C,SAAqC;IAErC,OAAO,IAAI,qBAAqB,CAAC;QAC/B,MAAM,EAAE,SAAS,CAAC,GAAG;QACrB,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,QAAQ,EAAE,SAAS,CAAC,GAAG;QACvB,YAAY,EAAE,SAAS,CAAC,YAAY;YAClC,CAAC,CAAC,+BAA+B,CAAC,SAAS,CAAC,YAAY,CAAC;YACzD,CAAC,CAAC,SAAS;QACb,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,aAAa,EAAE,SAAS,CAAC,aAAa;KACvC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { AttestationSigner } from \"./index.js\";\nimport { GeneratedAttestationResult } from \"../generated/index.js\";\nimport { _attestationSignerFromGenerated } from \"./attestationSigner.js\";\n\n/**\n * Defines the contents of the {@link AttestationResult.sgxCollateral} claim in\n * an {@link AttestationResult}.\n */\nexport interface AttestationSgxCollateralInfo {\n  /**\n   * Hex encoded Sha256 hash of the Quoting Enclave Certificates.\n   *\n   * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }\n   *  for more information on quote validation.\n   */\n  qeidcertshash?: string;\n  /**\n   * Hex encoded Sha256 hash of the Quoting Enclave Certificate CRL.\n   *\n   * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }\n   *  for more information on quote validation.\n   */\n  qeidcrlhash?: string;\n  /**\n   * Hex encoded Sha256 hash of the Quoting Enclave Identity.\n   *\n   * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }\n   *  for more information on quote validation.\n   */\n  qeidhash?: string;\n  /**\n   * Hex encoded Sha256 hash of the SGX Quote or OpenEnclave Report validated\n   * by this token.\n   *\n   * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }\n   *  for more information on quote validation.\n   */\n  quotehash?: string;\n  /**\n   * Hex encoded Sha256 hash of the TCB Info Certificates.\n   *\n   * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }\n   *  for more information on quote validation.\n   */\n  tcbinfocertshash?: string;\n  /**\n   * Hex encoded Sha256 hash of the TCB Info Certificate CRL.\n   *\n   * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }\n   *  for more information on quote validation.\n   */\n  tcbinfocrlhash?: string;\n  /**\n   * Hex encoded Sha256 hash of the TCB Info for the device being attested.\n   *\n   * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }\n   *  for more information on quote validation.\n   */\n  tcbinfohash?: string;\n}\n\n/**\n * A Microsoft Azure Attestation response token body - the body of a response token issued by MAA\n */\nexport interface AttestationResult {\n  /**\n   * Unique Identifier for the token.\n   *\n   * Corresponds to the 'jti' claim defined in\n   * {@link https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.7 | RFC 7519 section 4.1.7}\n   */\n  uniqueId: string;\n\n  /**\n   * Returns the issuer of the attestation token. MUST be the same as the\n   * endpoint used when constructing the attestation client instance.\n   */\n  issuer: string;\n\n  /**\n   * Returns the \"nonce\" value if one was specified in the Attest request.\n   */\n  nonce?: string;\n\n  /**\n   * The Schema version of this structure. Current Value: 1.0\n   */\n  version: string;\n\n  /**\n   *  Returns the runtime claims in the token.\n   *\n   * This value will match the input `runTimeJson` property to the\n   * {@link AttestationClient.attestSgxEnclave} or\n   * {@link AttestationClient.attestOpenEnclave} API.\n   *\n   * @remarks\n   *\n   * The `runtimeClaims` property will only be populated if the\n   * `runtimeJson` parameter to the `Attest` API is specified. It will\n   * not be populated if the `runtimeData` parameter is specified.\n   */\n  runTimeClaims: unknown;\n  /**\n   * Returns the initialization time claims in the token.\n   * This value will match the input `initTimeJson` property to the\n   * {@link AttestationClient.attestSgxEnclave} or\n   * {@link AttestationClient.attestOpenEnclave} API.\n   *\n   * @remarks\n   *\n   *  The `initTimeClaims` property will only be populated if the `initTimeJson`\n   *  parameter to the `Attest` API is specified. It will not be populated if\n   *  the `initTimeData` parameter is specified.\n   */\n  initTimeClaims: unknown;\n\n  /**\n   * Returns the set of claims generated by the attestation policy on the instance.\n   */\n  policyClaims: unknown;\n\n  /**\n   * Returns the verifier which generated this attestation token. Normally one of:\n   * \"SGX\" or \"TPM\", but others can be specified.\n   */\n  verifierType: string;\n  /**\n   * The certificate used to sign the policy object, if specified.\n   */\n  policySigner?: AttestationSigner;\n  /**\n   * The base64url encoded SHA256 hash of the BASE64URL encoded policy text\n   * used for attestation.\n   */\n  policyHash: Uint8Array;\n  /**\n   * True if the enclave is debuggable, false otherwise. Only valid if `verifierType` is SGX.\n   */\n  isDebuggable?: boolean;\n\n  /**\n   * The SGX Product ID for the enclave. Only valid if the `verifierType` field is \"SGX\"\n   */\n  productId?: number;\n  /**\n   * The HEX encoded SGX MRENCLAVE value for the enclave. Only valid if the\n   * `verifierType` field is \"SGX\"\n   */\n  mrEnclave?: string;\n\n  /**\n   * The HEX encoded SGX MRSIGNER value for the enclave. Only valid if the\n   * `verifierType` field is \"SGX\"\n   */\n  mrSigner?: string;\n\n  /**\n   * The SGX SVN value for the enclave. Only valid if the `verifierType` field is \"SGX\"\n   */\n  svn?: number;\n\n  /**\n   * Returns the value of the runtime_data field specified as an input to the\n   * {@link AttestationClient.attestSgxEnclave} or {@link AttestationClient.attestOpenEnclave} API.\n   *\n   * @remarks\n   *\n   * The `enclaveHeldData` property will only be populated if the\n   * `runtimeData` parameter to the `Attest` API is specified.\n   */\n  enclaveHeldData?: Uint8Array;\n\n  /**\n   * Returns a set of information describing the complete set of inputs to the\n   * Attestation validation logic.\n   *\n   * See the {@link https://software.intel.com/content/www/us/en/develop/articles/quote-verification-attestation-with-intel-sgx-dcap.html | Intel SGX documentation }\n   *  for more information on quote validation.\n   */\n  sgxCollateral?: AttestationSgxCollateralInfo;\n}\n\n/**\n * A Microsoft Azure Attestation response token body - the body of a response token issued by MAA\n */\nexport class AttestationResultImpl implements AttestationResult {\n  /**\n   *\n   * @param params - The parameters for the constructor.\n   *\n   * @hidden\n   */\n  constructor(params: {\n    issuer: string;\n    version: string;\n    nonce?: string;\n    uniqueId: string;\n    runTimeClaims?: unknown;\n    initTimeClaims?: unknown;\n    policyClaims?: unknown;\n    verifierType: string;\n    policySigner?: AttestationSigner;\n    policyHash: Uint8Array;\n    isDebuggable?: boolean;\n    productId?: number;\n    mrEnclave?: string;\n    mrSigner?: string;\n    svn?: number;\n    enclaveHeldData?: Uint8Array;\n    sgxCollateral?: AttestationSgxCollateralInfo;\n  }) {\n    this._issuer = params.issuer;\n    this._nonce = params.nonce;\n    this._version = params.version;\n    this._uniqueId = params.uniqueId;\n    this._runTimeClaims = params.runTimeClaims;\n    this._initTimeClaims = params.initTimeClaims;\n    this._policyClaims = params.policyClaims;\n    this._verifierType = params.verifierType;\n    this._policySigner = params.policySigner;\n    this._policyHash = params.policyHash;\n    this._isDebuggable = params.isDebuggable;\n    this._productId = params.productId;\n    this._mrEnclave = params.mrEnclave;\n    this._mrSigner = params.mrSigner;\n    this._svn = params.svn;\n    this._enclaveHeldData = params.enclaveHeldData;\n    this._sgxCollateral = params.sgxCollateral;\n  }\n\n  private _issuer: string;\n  private _version: string;\n  private _nonce?: string;\n  private _uniqueId: string;\n  private _runTimeClaims?: unknown;\n  private _initTimeClaims?: unknown;\n  private _policyClaims?: unknown;\n  private _verifierType: string;\n  private _policySigner?: AttestationSigner;\n  private _policyHash: Uint8Array;\n  private _isDebuggable?: boolean;\n  private _productId?: number;\n  private _mrEnclave?: string;\n  private _mrSigner?: string;\n  private _svn?: number;\n  private _enclaveHeldData?: Uint8Array;\n  private _sgxCollateral?: AttestationSgxCollateralInfo;\n\n  /**\n   * Unique Identifier for the token\n   *\n   */\n  get uniqueId(): string {\n    return this._uniqueId;\n  }\n\n  /**\n   * Returns the issuer of the attestation token. MUST be the same as the\n   * endpoint used when constructing the attestation client instance.\n   */\n  get issuer(): string {\n    return this._issuer;\n  }\n\n  /**\n   * Returns the \"nonce\" value specified in the Attest request.\n   */\n  get nonce(): string | undefined {\n    return this._nonce;\n  }\n\n  /**\n   * The Schema version of this structure. Current Value: 1.0\n   */\n  get version(): string {\n    return this._version;\n  }\n\n  /**\n   * Runtime Claims\n   */\n  get runTimeClaims(): unknown {\n    return this._runTimeClaims;\n  }\n  /**\n   * Inittime Claims\n   */\n  get initTimeClaims(): unknown {\n    return this._initTimeClaims;\n  }\n\n  /**\n   * Policy Generated Claims\n   */\n  get policyClaims(): unknown {\n    return this._policyClaims;\n  }\n  /**\n   * The Attestation type being attested.\n   */\n  get verifierType(): string {\n    return this._verifierType;\n  }\n  /**\n   * The certificate used to sign the policy object, if specified.\n   */\n  get policySigner(): AttestationSigner | undefined {\n    return this._policySigner;\n  }\n  /**\n   * The SHA256 hash of the BASE64URL encoded policy text used for attestation\n   */\n  get policyHash(): Uint8Array {\n    return this._policyHash;\n  }\n  /**\n   * True if the enclave is debuggable, false otherwise\n   */\n  get isDebuggable(): boolean | undefined {\n    return this._isDebuggable;\n  }\n  /**\n   * The SGX Product ID for the enclave.\n   */\n  get productId(): number | undefined {\n    return this._productId;\n  }\n  /**\n   * The HEX encoded SGX MRENCLAVE value for the enclave.\n   */\n  get mrEnclave(): string | undefined {\n    return this._mrEnclave;\n  }\n  /**\n   * The HEX encoded SGX MRSIGNER value for the enclave.\n   */\n  get mrSigner(): string | undefined {\n    return this._mrSigner;\n  }\n  /**\n   * The SGX SVN value for the enclave.\n   */\n  get svn(): number | undefined {\n    return this._svn;\n  }\n  /**\n   * A copy of the RuntimeData specified as an input to the attest call.\n   */\n  get enclaveHeldData(): Uint8Array | undefined {\n    return this._enclaveHeldData;\n  }\n  /**\n   * The SGX SVN value for the enclave.\n   */\n  get sgxCollateral(): AttestationSgxCollateralInfo | undefined {\n    return this._sgxCollateral;\n  }\n}\n\n/**\n *\n * @param generated - Generated attestation result object.\n * @returns newly created AttestationResult from the generated result.\n *\n * @internal\n */\nexport function _attestationResultFromGenerated(\n  generated: GeneratedAttestationResult,\n): AttestationResultImpl {\n  return new AttestationResultImpl({\n    issuer: generated.iss,\n    version: generated.version,\n    nonce: generated.nonce,\n    uniqueId: generated.jti,\n    policySigner: generated.policySigner\n      ? _attestationSignerFromGenerated(generated.policySigner)\n      : undefined,\n    runTimeClaims: generated.runtimeClaims,\n    initTimeClaims: generated.inittimeClaims,\n    policyClaims: generated.policyClaims,\n    verifierType: generated.verifierType,\n    policyHash: generated.policyHash,\n    isDebuggable: generated.isDebuggable,\n    productId: generated.productId,\n    mrEnclave: generated.mrEnclave,\n    mrSigner: generated.mrSigner,\n    svn: generated.svn,\n    enclaveHeldData: generated.enclaveHeldData,\n    sgxCollateral: generated.sgxCollateral,\n  });\n}\n"]}

package/dist/browser/models/attestationSigner.d.ts

@@ -0,0 +1,27 @@
+import { JsonWebKey } from "../generated/models/index.js";
+/**
+ * An AttestationSigner represents a signing certificate chain/Key ID combination
+ * returned by the attestation service.
+ */
+export interface AttestationSigner {
+    /**
+     * The Key ID for the signer, as defined by the "kid" parameter in
+     * {@link https://datatracker.ietf.org/doc/html/rfc7517#section-4.5 | RFC 7517 section 4.5}
+     */
+    keyId?: string;
+    /**
+     * An array of X.509 certificates DER encoded and PEM encoded one of which
+     * will be used to sign an attestation token. Also the "x5c" parameter in
+     * {@link https://datatracker.ietf.org/doc/html/rfc7517#section-4.7 | RFC 7517 section 4.7}
+     */
+    certificates: string[];
+}
+/**
+ *
+ * @param key  - JsonWebKey for signing key.
+ * @returns AttestationSigner created from the JsonWebKey.
+ *
+ * @internal
+ */
+export declare function _attestationSignerFromGenerated(key?: JsonWebKey): AttestationSigner;
+//# sourceMappingURL=attestationSigner.d.ts.map

package/dist/browser/models/attestationSigner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationSigner.d.ts","sourceRoot":"","sources":["../../../src/models/attestationSigner.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAG1D;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,GAAG,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAKnF"}

package/{dist-esm/src → dist/browser}/models/attestationSigner.js

@@ -1,6 +1,6 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
-import { pemFromBase64 } from "../utils/helpers";
+import { pemFromBase64 } from "../utils/helpers.js";
 /**
  *
  * @param key  - JsonWebKey for signing key.

package/dist/browser/models/attestationSigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationSigner.js","sourceRoot":"","sources":["../../../src/models/attestationSigner.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAGlC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAqBpD;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,GAAgB;;IAC9D,OAAO;QACL,KAAK,EAAE,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,GAAG;QACf,YAAY,EAAE,MAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,GAAG,0CAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,mCAAI,EAAE;KAChF,CAAC;AACJ,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { JsonWebKey } from \"../generated/models/index.js\";\nimport { pemFromBase64 } from \"../utils/helpers.js\";\n\n/**\n * An AttestationSigner represents a signing certificate chain/Key ID combination\n * returned by the attestation service.\n */\nexport interface AttestationSigner {\n  /**\n   * The Key ID for the signer, as defined by the \"kid\" parameter in\n   * {@link https://datatracker.ietf.org/doc/html/rfc7517#section-4.5 | RFC 7517 section 4.5}\n   */\n  keyId?: string;\n\n  /**\n   * An array of X.509 certificates DER encoded and PEM encoded one of which\n   * will be used to sign an attestation token. Also the \"x5c\" parameter in\n   * {@link https://datatracker.ietf.org/doc/html/rfc7517#section-4.7 | RFC 7517 section 4.7}\n   */\n  certificates: string[];\n}\n\n/**\n *\n * @param key  - JsonWebKey for signing key.\n * @returns AttestationSigner created from the JsonWebKey.\n *\n * @internal\n */\nexport function _attestationSignerFromGenerated(key?: JsonWebKey): AttestationSigner {\n  return {\n    keyId: key?.kid,\n    certificates: key?.x5C?.map((cert) => pemFromBase64(cert, \"CERTIFICATE\")) ?? [],\n  };\n}\n"]}