@azure/attestation 1.0.1-alpha.20241022.1 → 1.0.1-alpha.20241024.1

package/dist/browser/utils/buffer-browser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"buffer-browser.mjs","sourceRoot":"","sources":["../../../src/utils/buffer-browser.mts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,KAAK,UAAU,iBAAiB,CAAC,IAAU;IACzC,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAqB,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA6C;IAE7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6FAA6F;IAC7F,IAAK,KAAa,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,IAAI,UAAU,CAAC,MAAM,iBAAiB,CAAC,KAAa,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,8FAA8F;IAC9F,OAAO,KAA4B,CAAC;AACtC,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nasync function blobToArrayBuffer(blob: Blob): Promise<ArrayBuffer> {\n  if (\"arrayBuffer\" in blob) {\n    return blob.arrayBuffer();\n  }\n  return new Promise((resolve, reject) => {\n    const reader = new FileReader();\n    reader.onload = () => resolve(reader.result as ArrayBuffer);\n    reader.onerror = () => reject;\n    reader.readAsArrayBuffer(blob);\n  });\n}\n\n/**\n * Converts an attestation input from Uint8Array/Buffer/Blob to Uint8Array.\n *\n * @param input - Input to attestation API.\n * @returns Promise which completes with the input data as a Uint8Array.\n */\nexport async function Uint8ArrayFromInput(\n  input: Uint8Array | Buffer | Blob | undefined,\n): Promise<Uint8Array | undefined> {\n  if (input === undefined) {\n    return input;\n  }\n\n  // If this is not a Uint8Array, assume it's a blob and retrieve an ArrayBuffer from the blob.\n  if ((input as any).byteLength === undefined) {\n    return new Uint8Array(await blobToArrayBuffer(input as Blob));\n  }\n\n  // We eliminated the 'Blob' case above, so we know this must be either a Buffer or Uint8Array.\n  return input as Uint8Array | Buffer;\n}\n"]}

package/dist/browser/utils/buffer.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Converts an attestation input from Uint8Array/Buffer/Blob to Uint8Array.
+ *
+ * @param input - Input to attestation API.
+ * @returns Promise which completes with the input data as a Uint8Array.
+ */
+export declare function Uint8ArrayFromInput(input: Uint8Array | Buffer | Blob | undefined): Promise<Uint8Array | undefined>;
+//# sourceMappingURL=buffer-browser.d.mts.map

package/{dist-esm/src/utils/buffer.browser.js → dist/browser/utils/buffer.js}

@@ -28,4 +28,4 @@ export async function Uint8ArrayFromInput(input) {
     // We eliminated the 'Blob' case above, so we know this must be either a Buffer or Uint8Array.
     return input;
 }
-//# sourceMappingURL=buffer.browser.js.map
+//# sourceMappingURL=buffer-browser.mjs.map

package/dist/browser/utils/helpers.d.ts

@@ -0,0 +1,22 @@
+/** Create an AttestationSigningKey from the provided private key and certificate.
+ *
+ * @param privateKey - PEM encoded DER Encoded RSA or ECDS key.
+ * @param certificate - PEM encoded DER encoded X.509 certificate.
+ */
+export declare function verifyAttestationSigningKey(privateKey: string, certificate: string): {
+    certificate: string;
+    privateKey: string;
+};
+export type PemType = "CERTIFICATE" | "PRIVATE KEY";
+/**
+ *
+ * @param base64 - Base64 encoded DER object to encode as PEM.
+ * @param pemType - PEM object type - typically "CERTIFICATE" |
+ */
+export declare function pemFromBase64(base64: string, pemType: PemType): string;
+/**
+ * Converts a hex encoded string to its base64 equivalent.
+ * @param value - Hex encoded value
+ */
+export declare function hexToBase64(value: string): string;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/browser/utils/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/utils/helpers.ts"],"names":[],"mappings":"AAQA;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA2B7C;AAED,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,aAAa,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAStE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD"}

package/{dist-esm/src → dist/browser}/utils/helpers.js

@@ -3,7 +3,7 @@
 // eslint-disable-next-line @typescript-eslint/triple-slash-reference
 /// <reference path="../jsrsasign.d.ts"/>
 import * as jsrsasign from "jsrsasign";
-import { base64EncodeByteArray, hexToByteArray } from "./base64";
+import { base64EncodeByteArray, hexToByteArray } from "./base64.js";
 /** Create an AttestationSigningKey from the provided private key and certificate.
  *
  * @param privateKey - PEM encoded DER Encoded RSA or ECDS key.

package/dist/browser/utils/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/utils/helpers.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,qEAAqE;AACrE,yCAAyC;AACzC,OAAO,KAAK,SAAS,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEpE;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,WAAmB;IAEnB,EAAE;IACF,sEAAsE;IACtE,EAAE;IACF,iEAAiE;IACjE,eAAe;IACf,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;IAE7C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjE,0EAA0E;IAC1E,MAAM,YAAY,GAAG,MAAM,CAAC;IAE5B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,OAAgB;IAC5D,IAAI,GAAG,GAAG,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;IAC9C,OAAO,MAAM,KAAK,EAAE,EAAE,CAAC;QACrB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;QACnC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,GAAG,IAAI,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IAEzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,qBAAqB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n// eslint-disable-next-line @typescript-eslint/triple-slash-reference\n/// <reference path=\"../jsrsasign.d.ts\"/>\nimport * as jsrsasign from \"jsrsasign\";\nimport { base64EncodeByteArray, hexToByteArray } from \"./base64.js\";\n\n/** Create an AttestationSigningKey from the provided private key and certificate.\n *\n * @param privateKey - PEM encoded DER Encoded RSA or ECDS key.\n * @param certificate - PEM encoded DER encoded X.509 certificate.\n */\nexport function verifyAttestationSigningKey(\n  privateKey: string,\n  certificate: string,\n): { certificate: string; privateKey: string } {\n  //\n  // Ensure that the key and certificate are associated with each other.\n  //\n  // Sign a buffer with the key, then verify the signature with the\n  // certificate.\n  const x509 = new jsrsasign.X509();\n  x509.readCertPEM(certificate);\n\n  const alg = x509.getSignatureAlgorithmName();\n\n  const signer = new jsrsasign.KJUR.crypto.Signature({ alg: alg });\n\n  // Confirm that the certificate and private key are related to each other.\n  const bufferToSign = \"1234\";\n\n  signer.init(privateKey);\n  signer.updateString(bufferToSign);\n  const sigVal = signer.sign();\n\n  const verifier = new jsrsasign.KJUR.crypto.Signature({ alg: alg });\n  verifier.init(x509.getPublicKey());\n  verifier.updateString(bufferToSign);\n  if (!verifier.verify(sigVal)) {\n    throw new Error(\"verifyAttestationSigningKey: Key does not match Certificate.\");\n  }\n  return { certificate: certificate, privateKey: privateKey };\n}\n\nexport type PemType = \"CERTIFICATE\" | \"PRIVATE KEY\";\n\n/**\n *\n * @param base64 - Base64 encoded DER object to encode as PEM.\n * @param pemType - PEM object type - typically \"CERTIFICATE\" |\n */\nexport function pemFromBase64(base64: string, pemType: PemType): string {\n  let pem = \"-----BEGIN \" + pemType + \"-----\\n\";\n  while (base64 !== \"\") {\n    pem += base64.substr(0, 64) + \"\\n\";\n    base64 = base64.substr(64);\n  }\n  pem += \"-----END \" + pemType + \"-----\\n\";\n\n  return pem;\n}\n\n/**\n * Converts a hex encoded string to its base64 equivalent.\n * @param value - Hex encoded value\n */\nexport function hexToBase64(value: string): string {\n  return base64EncodeByteArray(hexToByteArray(value));\n}\n"]}

package/dist/browser/utils/textEncoding-browser.d.mts

@@ -0,0 +1,10 @@
+declare const textDecoder: {
+    new (label?: string, options?: TextDecoderOptions): TextDecoder;
+    prototype: TextDecoder;
+};
+declare const textEncoder: {
+    new (): TextEncoder;
+    prototype: TextEncoder;
+};
+export { textDecoder as TextDecoder, textEncoder as TextEncoder };
+//# sourceMappingURL=textEncoding-browser.d.mts.map

package/dist/browser/utils/textEncoding-browser.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"textEncoding-browser.d.mts","sourceRoot":"","sources":["../../../src/utils/textEncoding-browser.mts"],"names":[],"mappings":"AAGA,QAAA,MAAM,WAAW;;;CAAc,CAAC;AAChC,QAAA,MAAM,WAAW;;;CAAc,CAAC;AAEhC,OAAO,EAAE,WAAW,IAAI,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,CAAC"}

package/{dist-esm/src/utils/textEncoding.browser.js → dist/browser/utils/textEncoding-browser.mjs}

@@ -3,4 +3,4 @@
 const textDecoder = TextDecoder;
 const textEncoder = TextEncoder;
 export { textDecoder as TextDecoder, textEncoder as TextEncoder };
-//# sourceMappingURL=textEncoding.browser.js.map
+//# sourceMappingURL=textEncoding-browser.mjs.map

package/dist/browser/utils/textEncoding-browser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"textEncoding-browser.mjs","sourceRoot":"","sources":["../../../src/utils/textEncoding-browser.mts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,MAAM,WAAW,GAAG,WAAW,CAAC;AAChC,MAAM,WAAW,GAAG,WAAW,CAAC;AAEhC,OAAO,EAAE,WAAW,IAAI,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nconst textDecoder = TextDecoder;\nconst textEncoder = TextEncoder;\n\nexport { textDecoder as TextDecoder, textEncoder as TextEncoder };\n"]}

package/dist/browser/utils/typeDeserializer.d.ts

@@ -0,0 +1,34 @@
+import { Mapper } from "@azure/core-client";
+/**
+ * The TypeDeserializer class enables easy access to the Attestation Model serialization
+ * and deserialization APIs.
+ */
+export declare class TypeDeserializer {
+    /**
+     * Deserializes a JSON object into a model type.
+     * @param rawJson - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A mapping between type names and {@link Mapper} objects
+     *  which defines the model properties for the type. the {@link bodyTypeName}
+     *  must be one of the properties in the {@link bodyMapper} parameter.
+     * @param bodyTypeName - The name of the type of the body.
+     * @returns The deserialized type. It is the responsibility of the caller to cast to the
+     *      expected return type.
+     *
+     * @internal
+     */
+    static deserialize(rawJson: unknown, typeMappers: {
+        [key: string]: any;
+    }, bodyTypeName: string): unknown;
+    /**
+     * Serializes a JSON object into a model type.
+     * @param objectToSerialize - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A {@link Mapper} object which defines the model properties for the type.
+     * @returns The serialized type as a JSON encoded string.
+     *
+     * @internal
+     */
+    static serialize(objectToSerialize: unknown, typeMappers: {
+        [key: string]: Mapper;
+    }, bodyMapper: Mapper): string;
+}
+//# sourceMappingURL=typeDeserializer.d.ts.map

package/dist/browser/utils/typeDeserializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeDeserializer.d.ts","sourceRoot":"","sources":["../../../src/utils/typeDeserializer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,oBAAoB,CAAC;AAE9D;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B;;;;;;;;;;;OAWG;WACW,WAAW,CACvB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,EACnC,YAAY,EAAE,MAAM,GACnB,OAAO;IAKV;;;;;;;OAOG;WACW,SAAS,CACrB,iBAAiB,EAAE,OAAO,EAC1B,WAAW,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EACtC,UAAU,EAAE,MAAM,GACjB,MAAM;CAIV"}

package/dist/browser/utils/utf8.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Converts a string into a utf8 encoded byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+export declare function stringToBytes(content: string): Uint8Array;
+/**
+ * Converts a utf8 string into a byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+export declare function bytesToString(content: Uint8Array): string;
+//# sourceMappingURL=utf8.d.ts.map

package/dist/browser/utils/utf8.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utf8.d.ts","sourceRoot":"","sources":["../../../src/utils/utf8.ts"],"names":[],"mappings":"AAeA;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAEzD"}

package/dist/commonjs/attestationAdministrationClient.d.ts

@@ -0,0 +1,183 @@
+import { AttestationResponse, AttestationSigner, AttestationTokenValidationOptions, AttestationType, PolicyCertificatesModificationResult, PolicyResult } from "./models/index.js";
+import { CommonClientOptions, OperationOptions } from "@azure/core-client";
+import { TokenCredential } from "@azure/core-auth";
+/**
+ * Attestation Client Construction Options.
+ */
+export interface AttestationAdministrationClientOptions extends CommonClientOptions {
+    /**
+     * Options to be used globally to validate attestation tokens received from
+     * the attestation service.
+     */
+    validationOptions?: AttestationTokenValidationOptions;
+}
+/**
+ * Operation options for the Attestation Administration Client operations.
+ */
+export interface AttestationAdministrationClientOperationOptions extends OperationOptions {
+    /**
+     * Options to be used globally to validate attestation tokens received from
+     * the attestation service.
+     */
+    validationOptions?: AttestationTokenValidationOptions;
+}
+/**
+ * Operation options for the administration Policy operations.
+ */
+export interface AttestationAdministrationClientPolicyOperationOptions extends AttestationAdministrationClientOperationOptions {
+    /**
+     * Optional Private key used to sign the token sent to the attestation service.
+     *
+     * Required for Isolated Mode attestation instances.
+     */
+    privateKey?: string;
+    /**
+     * Optional certificate which can validate the token sent to the attestation service.
+     *
+     * Required for Isolated Mode attestation instances.
+     *
+     * If the service instance is in Isolated mode, the certificate *must* be one
+     * of the configured policy management certificates.
+     */
+    certificate?: string;
+}
+/**
+ * Operation options for the Policy Certificates operations.
+ */
+export interface AttestationAdministrationClientPolicyCertificateOperationOptions extends AttestationAdministrationClientOperationOptions {
+}
+/**
+ * Attestation Client class.
+ *
+ * The AttestationClient class enables access to the Attestation related APIs:
+ *
+ * - getPolicy
+ * - setPolicy
+ * - resetPolicy
+ * - getPolicyManagementCertificates
+ * - addPolicyManagementCertificate
+ * - removePolicyManagementCertificate
+ */
+export declare class AttestationAdministrationClient {
+    /**
+     * Creates an instance of AttestationAdministrationClient.
+     *
+     * Example usage:
+     * ```ts
+     * import { AttestationAdministrationClient } from "@azure/attestation";
+     *
+     * const client = new AttestationAdministrationClient(
+     *    "<service endpoint>",
+     *    new TokenCredential("<>")
+     * );
+     * ```
+     *
+     * @param endpoint - The attestation instance endpoint, for example https://mytenant.attest.azure.net.
+     * @param credential - Used to authenticate requests to the service.
+     * @param options - Used to configure the Form Recognizer client.
+     */
+    constructor(endpoint: string, credentials: TokenCredential, options?: AttestationAdministrationClientOptions);
+    /**
+     * Retrieves the attestation policy document from the server, and returns it
+     * to the caller.
+     *
+     * @param attestationType - AttestationType for which to retrieve policy.
+     * @param options - Pipeline and client options for the `getPolicy` call.
+     * @returns `AttestationResponse<string>` - the `value` property is the
+     *      attestation policy,  the `token` property will be the actual token
+     *      returned by the attestation service.
+     */
+    getPolicy(attestationType: AttestationType, options?: AttestationAdministrationClientPolicyOperationOptions): Promise<AttestationResponse<string>>;
+    /**
+     * Sets the attestation policy for the specified {@link attestationType}.
+     *
+     * @param attestationType - Attestation Type for which to set policy.
+     * @param newPolicyDocument - Policy document to be set.
+     * @param options - call options.
+     * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.
+     *  Clients can use the PolicyResult to validate that the policy was actually
+     *  set by the attestation service.
+     *
+     * @remarks
+     *
+     * Please note that if the attestation service instance is running in "Isolated"
+     * mode, the {@link signingKey} must be one of the signing keys configured for the
+     * service instance.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     */
+    setPolicy(attestationType: AttestationType, newPolicyDocument: string, options?: AttestationAdministrationClientPolicyOperationOptions): Promise<AttestationResponse<PolicyResult>>;
+    /**
+     * Resets the attestation policy for the specified {@link attestationType} to
+     * the default value.
+     *
+     * @param attestationType - Attestation Type for which to set policy.
+     * @param options - call options.
+     * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.
+     *  Clients can use the PolicyResult to validate that the policy was actually
+     *  reset by the attestation service.
+     *
+     * @remarks
+     *
+     * Please note that if the attestation service instance is running in "Isolated"
+     * mode, the {@link signingKey} must be one of the signing keys configured for the
+     * service instance.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     */
+    resetPolicy(attestationType: AttestationType, options?: AttestationAdministrationClientPolicyOperationOptions): Promise<AttestationResponse<PolicyResult>>;
+    /** Returns the set of policy management certificates for this attestation instance.
+     *
+     * @remarks If the attestation instance is not in `Isolated` mode, this list will
+     *    always be empty.
+     *
+     * @param options - Options for the call to the attestation service.
+     * @returns AttestationResponse wrapping a list of Attestation Signers.
+     */
+    getPolicyManagementCertificates(options?: AttestationAdministrationClientPolicyCertificateOperationOptions): Promise<AttestationResponse<AttestationSigner[]>>;
+    /** Add a new certificate chain to the set of policy management certificates.
+     *
+     * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.
+     * @param privateKey - Existing attestation private key used to sign the incoming request.
+     * @param certificate - Existing attestation certificate used to verify the incoming request.
+     * @param options - Options used in the call to the service.
+     * @returns An attestation response including a PolicyCertificatesModificationResult
+     *
+     * @remarks This API is only supported on `isolated` attestation instances.
+     *
+     * The signing key MUST be one of the existing attestation signing certificates. The
+     * new pemCertificate is signed using the signingKey and the service will validate the
+     * signature before allowing the addition.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     *
+     */
+    addPolicyManagementCertificate(pemCertificate: string, privateKey: string, certificate: string, options?: AttestationAdministrationClientPolicyCertificateOperationOptions): Promise<AttestationResponse<PolicyCertificatesModificationResult>>;
+    private keyTypeFromCertificate;
+    /** Add a new certificate chain to the set of policy management certificates.
+     *
+     * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.
+     * @param privateKey - Existing attestation private key used to sign the incoming request.
+     * @param certificate - Existing attestation certificate used to verify the incoming request.
+     * @param options - Options used in the call to the service.
+     * @returns An attestation response including a PolicyCertificatesModificationResult
+     *
+     * @remarks This API is only supported on `isolated` attestation instances.
+     *
+     * The signing key MUST be one of the existing attestation signing certificates. The
+     * new pemCertificate is signed using the signingKey and the service will validate the
+     * signature before allowing the addition.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     */
+    removePolicyManagementCertificate(pemCertificate: string, privateKey: string, certificate: string, options?: AttestationAdministrationClientPolicyCertificateOperationOptions): Promise<AttestationResponse<PolicyCertificatesModificationResult>>;
+    private signingKeys;
+    private _client;
+    private _signers?;
+    private _validationOptions?;
+}
+//# sourceMappingURL=attestationAdministrationClient.d.ts.map

package/dist/commonjs/attestationAdministrationClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationAdministrationClient.d.ts","sourceRoot":"","sources":["../../src/attestationAdministrationClient.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iCAAiC,EACjC,eAAe,EACf,oCAAoC,EACpC,YAAY,EACb,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAenD;;GAEG;AACH,MAAM,WAAW,sCAAuC,SAAQ,mBAAmB;IACjF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,+CAAgD,SAAQ,gBAAgB;IACvF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,qDACf,SAAQ,+CAA+C;IACvD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gEACf,SAAQ,+CAA+C;CAAG;AAE5D;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAC1C;;;;;;;;;;;;;;;;OAgBG;gBAGD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sCAA2C;IAmBtD;;;;;;;;;OASG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IA6CvC;;;;;;;;;;;;;;;;;;OAkBG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAqD7C;;;;;;;;;;;;;;;;;;OAkBG;IAEU,WAAW,CACtB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAoD7C;;;;;;;OAOG;IACU,+BAA+B,CAC1C,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAuCpD;;;;;;;;;;;;;;;;;OAiBG;IACU,8BAA8B,CACzC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;IAwErE,OAAO,CAAC,sBAAsB;IAmB9B;;;;;;;;;;;;;;;;OAgBG;IACU,iCAAiC,CAC5C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;YAwEvD,WAAW;IAazB,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,QAAQ,CAAC,CAAsB;IACvC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;CAChE"}