@azure/attestation 1.0.1-alpha.20250110.1 → 1.0.1-alpha.20250114.1

package/dist/browser/attestationClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"attestationClient.js","sourceRoot":"","sources":["../../src/attestationClient.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAajE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,KAAK,OAAO,MAAM,+BAA+B,CAAC;AAGzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAmGvD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iBAAiB;IA4C5B,YACE,QAAgB,EAChB,oBAAiE,EACjE,gBAA0C,EAAE;QAE5C,IAAI,gBAAgB,GAAyB,SAAS,CAAC;QACvD,IAAI,UAAU,GAAgC,SAAS,CAAC;QACxD,IAAI,OAAiC,CAAC;QAEtC,IAAI,oBAAoB,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACpE,UAAU,GAAG,oBAAoB,CAAC;YAClC,gBAAgB,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACzD,OAAO,GAAG,aAAa,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,oBAAoB,IAAI,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,uBAAuB,mCACxB,OAAO,GACP;YACD,gBAAgB,EAAE,gBAAgB;YAClC,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE;gBACd,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;aACpE;SACF,CACF,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,iBAAiB,CAC5B,MAAkC,EAClC,UAAoC,EAAE;QAEtC,OAAO,aAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YAEtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAC1E;gBACE,MAAM,EAAE,MAAM,mBAAmB,CAAC,MAAM,CAAC;gBACzC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,yBAAyB,CAC9B,KAAK,EACL,+BAA+B,CAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,gBAAgB,CAC3B,KAAiC,EACjC,UAAmC,EAAE;QAErC,OAAO,aAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YACtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CACzE;gBACE,KAAK,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC;gBACvC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,yBAAyB,CAC9B,KAAK,EACL,+BAA+B,CAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACI,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,UAA4B,EAAE;QACpE,OAAO,aAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CACvD,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,EAChC,cAAc,CACf,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,qBAAqB;IAChC,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,aAAa,CAAC,QAAQ,CAC3B,yCAAyC,EACzC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACvF,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;YACjD,MAAA,mBAAmB,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5C,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,iBAAiB;IAC5B,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,aAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC7E,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAMO,KAAK,CAAC,YAAY;;QACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;QACjD,MAAA,IAAI,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { GeneratedClient } from \"./generated/generatedClient.js\";\n\nimport type {\n  AttestationResult,\n  AttestationSigner,\n  AttestationTokenValidationOptions,\n} from \"./models/index.js\";\n\nimport type {\n  GeneratedAttestationResult,\n  InitTimeData,\n  RuntimeData,\n} from \"./generated/models/index.js\";\nimport { KnownDataType } from \"./generated/models/index.js\";\n\nimport { logger } from \"./logger.js\";\nimport type { GeneratedClientOptionalParams } from \"./generated/models/index.js\";\nimport * as Mappers from \"./generated/models/mappers.js\";\n\nimport type { AttestationResponse } from \"./models/attestationResponse.js\";\nimport { createAttestationResponse } from \"./models/attestationResponse.js\";\n\nimport { TypeDeserializer } from \"./utils/typeDeserializer.js\";\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport { isTokenCredential } from \"@azure/core-auth\";\nimport type { CommonClientOptions, OperationOptions } from \"@azure/core-client\";\nimport { bytesToString, stringToBytes } from \"./utils/utf8.js\";\nimport { _attestationResultFromGenerated } from \"./models/attestationResult.js\";\nimport { _attestationSignerFromGenerated } from \"./models/attestationSigner.js\";\nimport { AttestationTokenImpl } from \"./models/attestationToken.js\";\nimport { Uint8ArrayFromInput } from \"./utils/buffer.js\";\nimport { tracingClient } from \"./generated/tracing.js\";\n\n/**\n * Attestation Client Construction Options.\n */\nexport interface AttestationClientOptions extends CommonClientOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Operation options for the Attestation Client operations.\n */\nexport interface AttestationClientOperationOptions extends OperationOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service for the individual operation.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Optional parameters for the AttestOpenEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestOpenEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Optional parameters for the AttestSgxEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestSgxEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Operation options for the AttestTpm API.\n */\nexport interface AttestTpmOptions extends AttestationClientOperationOptions {}\n\n/**\n * Attestation Client class.\n *\n * The AttestationClient class enables access to the Attestation related APIs:\n *\n * - getOpenIdMetadata\n * - getAttestationSigners\n * - attestSgxEnclave\n * - attestOpenEnclave\n * - attestTpm\n */\nexport class AttestationClient {\n  /**\n   * Creates an instance of AttestationClient.\n   *\n   * Example usage:\n   * ```ts\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const client = new AttestationClient(\n   *    \"<service endpoint>\"\n   * );\n   * ```\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param options - Options used to configure the Attestation Client.\n   *\n   */\n  public constructor(endpoint: string, options?: AttestationClientOptions);\n\n  /**\n   * Creates an instance of AttestationClient with options and credentials.\n   *\n   * Example usage:\n   * ```ts\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const client = new AttestationClient(\n   *    \"<service endpoint>\",\n   *    new TokenCredential(\"<>\"),\n   *    { tokenValidationOptions: { validateToken: false } }\n   * );\n   * ```\n   *\n   * Note that credentials are required to call the `attestTpm` API.\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param credentials - Credentials used to configure the attestation client.\n   *\n   */\n  public constructor(\n    endpoint: string,\n    credentials: TokenCredential,\n    options?: AttestationClientOptions,\n  );\n  public constructor(\n    endpoint: string,\n    credentialsOrOptions?: TokenCredential | AttestationClientOptions,\n    clientOptions: AttestationClientOptions = {},\n  ) {\n    let credentialScopes: string[] | undefined = undefined;\n    let credential: TokenCredential | undefined = undefined;\n    let options: AttestationClientOptions;\n\n    if (credentialsOrOptions && isTokenCredential(credentialsOrOptions)) {\n      credential = credentialsOrOptions;\n      credentialScopes = [\"https://attest.azure.net/.default\"];\n      options = clientOptions;\n    } else {\n      options = credentialsOrOptions || {};\n    }\n\n    const internalPipelineOptions: GeneratedClientOptionalParams = {\n      ...options,\n      ...{\n        credentialScopes: credentialScopes,\n        credential: credential,\n        loggingOptions: {\n          logger: logger.info,\n          allowedHeaderNames: [\"x-ms-request-id\", \"x-ms-maa-service-version\"],\n        },\n      },\n    };\n\n    this._client = new GeneratedClient(endpoint, internalPipelineOptions);\n    this._validationOptions = options.validationOptions;\n  }\n\n  /** Attests an OpenEnclave report generated from an SGX Enclave using the OpenEnclave SDK.\n   *\n   * @param report - An OpenEnclave report generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   *\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   * @throws {@link Error} if the `initTimeJson` option is provided and the value of `initTimeJson` is not JSON.\n   * @throws {@link Error} if the `runTimeJson` option is provided and the value of `runTimeJson` is not JSON.\n   */\n  public async attestOpenEnclave(\n    report: Uint8Array | Buffer | Blob,\n    options: AttestOpenEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestOpenEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestOpenEnclave(\n          {\n            report: await Uint8ArrayFromInput(report),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attests a quote generated from SGX Enclave using the Intel SDK.\n   *\n   * @param quote - An SGX quote generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   */\n  public async attestSgxEnclave(\n    quote: Uint8Array | Buffer | Blob,\n    options: AttestSgxEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestSgxEnclave(\n          {\n            quote: await Uint8ArrayFromInput(quote),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attest a TPM based enclave.\n\n   * See the  {@link https://learn.microsoft.com/en-us/azure/attestation/virtualization-based-security-protocol | TPM Attestation Protocol Reference} for more information.\n   * \n   * @param request - Incoming request to send to the TPM attestation service, Utf8 encoded.\n   * @param options - Pipeline options for TPM attestation request.\n   * @returns A structure containing the response from the TPM attestation, Utf8 encoded.\n   * \n   * @remarks\n   * \n   * The incoming requests to the TPM attestation API are stringified JSON objects.\n   * \n   * @example\n   * For example, the initial call for a TPM attestation operation is:\n   * \n   * ```js\n   * const encodedPayload = JSON.stringify({ payload: { type: \"aikcert\" } });\n   * const result = await client.attestTpm(encodedPayload);\n   * ```\n   * \n   * where stringToBytes converts the string to UTF8.\n   * \n   * Note that the attestTpm requires an attestation client which is configured with\n   * authentication credentials.\n   * \n   */\n  public async attestTpm(request: string, options: AttestTpmOptions = {}): Promise<string> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        const response = await this._client.attestation.attestTpm(\n          { data: stringToBytes(request) },\n          updatedOptions,\n        );\n        if (response.data) {\n          return bytesToString(response.data);\n        } else {\n          throw Error(\"Internal error - response data cannot be undefined.\");\n        }\n      },\n    );\n  }\n\n  /**\n   * Returns the list of attestation signers which can be used to sign attestation\n   * service tokens.\n   *\n   * @param options - Client operation options.\n   * @returns the set of AttestationSigners which may be used to sign attestation tokens.\n   */\n  public async getAttestationSigners(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<AttestationSigner[]> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getAttestationSigners\",\n      options,\n      async (updatedOptions) => {\n        const signingCertificates = await this._client.signingCertificates.get(updatedOptions);\n        const signers: AttestationSigner[] = new Array();\n        signingCertificates.keys?.forEach((element) => {\n          signers.push(_attestationSignerFromGenerated(element));\n        });\n        return signers;\n      },\n    );\n  }\n\n  /**\n   * Returns the OpenID Metadata discovery document for the attestation service instance.\n   * @param options - Client operation options.\n   * @returns The OpenID metadata discovery document for the attestation service.\n   */\n  public async getOpenIdMetadata(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<Record<string, unknown>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getOpenIdMetadata\",\n      options,\n      async (updatedOptions) => {\n        const configs = await this._client.metadataConfiguration.get(updatedOptions);\n        return configs;\n      },\n    );\n  }\n\n  private _client: GeneratedClient;\n  private _validationOptions?: AttestationTokenValidationOptions;\n  private _signers?: AttestationSigner[];\n\n  private async _signingKeys(): Promise<AttestationSigner[]> {\n    if (this._signers !== undefined) {\n      return this._signers;\n    }\n    const jwks = await this._client.signingCertificates.get();\n    const signers: AttestationSigner[] = new Array();\n    jwks.keys?.forEach((element) => {\n      signers.push(_attestationSignerFromGenerated(element));\n    });\n    this._signers = signers;\n    return this._signers;\n  }\n}\n"]}
+{"version":3,"file":"attestationClient.js","sourceRoot":"","sources":["../../src/attestationClient.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAajE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,KAAK,OAAO,MAAM,+BAA+B,CAAC;AAGzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAmGvD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iBAAiB;IA0C5B,YACE,QAAgB,EAChB,oBAAiE,EACjE,gBAA0C,EAAE;QAE5C,IAAI,gBAAgB,GAAyB,SAAS,CAAC;QACvD,IAAI,UAAU,GAAgC,SAAS,CAAC;QACxD,IAAI,OAAiC,CAAC;QAEtC,IAAI,oBAAoB,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACpE,UAAU,GAAG,oBAAoB,CAAC;YAClC,gBAAgB,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACzD,OAAO,GAAG,aAAa,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,oBAAoB,IAAI,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,uBAAuB,mCACxB,OAAO,GACP;YACD,gBAAgB,EAAE,gBAAgB;YAClC,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE;gBACd,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;aACpE;SACF,CACF,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,iBAAiB,CAC5B,MAAkC,EAClC,UAAoC,EAAE;QAEtC,OAAO,aAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YAEtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAC1E;gBACE,MAAM,EAAE,MAAM,mBAAmB,CAAC,MAAM,CAAC;gBACzC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,yBAAyB,CAC9B,KAAK,EACL,+BAA+B,CAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,gBAAgB,CAC3B,KAAiC,EACjC,UAAmC,EAAE;QAErC,OAAO,aAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YACtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CACzE;gBACE,KAAK,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC;gBACvC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,yBAAyB,CAC9B,KAAK,EACL,+BAA+B,CAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACI,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,UAA4B,EAAE;QACpE,OAAO,aAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CACvD,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,EAChC,cAAc,CACf,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,qBAAqB;IAChC,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,aAAa,CAAC,QAAQ,CAC3B,yCAAyC,EACzC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACvF,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;YACjD,MAAA,mBAAmB,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5C,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,iBAAiB;IAC5B,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,aAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC7E,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAMO,KAAK,CAAC,YAAY;;QACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;QACjD,MAAA,IAAI,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { GeneratedClient } from \"./generated/generatedClient.js\";\n\nimport type {\n  AttestationResult,\n  AttestationSigner,\n  AttestationTokenValidationOptions,\n} from \"./models/index.js\";\n\nimport type {\n  GeneratedAttestationResult,\n  InitTimeData,\n  RuntimeData,\n} from \"./generated/models/index.js\";\nimport { KnownDataType } from \"./generated/models/index.js\";\n\nimport { logger } from \"./logger.js\";\nimport type { GeneratedClientOptionalParams } from \"./generated/models/index.js\";\nimport * as Mappers from \"./generated/models/mappers.js\";\n\nimport type { AttestationResponse } from \"./models/attestationResponse.js\";\nimport { createAttestationResponse } from \"./models/attestationResponse.js\";\n\nimport { TypeDeserializer } from \"./utils/typeDeserializer.js\";\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport { isTokenCredential } from \"@azure/core-auth\";\nimport type { CommonClientOptions, OperationOptions } from \"@azure/core-client\";\nimport { bytesToString, stringToBytes } from \"./utils/utf8.js\";\nimport { _attestationResultFromGenerated } from \"./models/attestationResult.js\";\nimport { _attestationSignerFromGenerated } from \"./models/attestationSigner.js\";\nimport { AttestationTokenImpl } from \"./models/attestationToken.js\";\nimport { Uint8ArrayFromInput } from \"./utils/buffer.js\";\nimport { tracingClient } from \"./generated/tracing.js\";\n\n/**\n * Attestation Client Construction Options.\n */\nexport interface AttestationClientOptions extends CommonClientOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Operation options for the Attestation Client operations.\n */\nexport interface AttestationClientOperationOptions extends OperationOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service for the individual operation.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Optional parameters for the AttestOpenEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestOpenEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Optional parameters for the AttestSgxEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestSgxEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Operation options for the AttestTpm API.\n */\nexport interface AttestTpmOptions extends AttestationClientOperationOptions {}\n\n/**\n * Attestation Client class.\n *\n * The AttestationClient class enables access to the Attestation related APIs:\n *\n * - getOpenIdMetadata\n * - getAttestationSigners\n * - attestSgxEnclave\n * - attestOpenEnclave\n * - attestTpm\n */\nexport class AttestationClient {\n  /**\n   * Creates an instance of AttestationClient.\n   *\n   * Example usage:\n   * ```ts snippet:Attestation_Constructor_NoCreds\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const endpoint = \"https://<attestation-instance>.<region>.attest.azure.net\";\n   * const client = new AttestationClient(endpoint);\n   * ```\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param options - Options used to configure the Attestation Client.\n   *\n   */\n  public constructor(endpoint: string, options?: AttestationClientOptions);\n\n  /**\n   * Creates an instance of AttestationClient with options and credentials.\n   *\n   * Example usage:\n   * ```ts snippet:Attestation_Constructor_Creds\n   * import { DefaultAzureCredential } from \"@azure/identity\";\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const endpoint = \"https://<attestation-instance>.<region>.attest.azure.net\";\n   * const credentials = new DefaultAzureCredential();\n   * const client = new AttestationClient(endpoint, credentials);\n   * ```\n   *\n   * Note that credentials are required to call the `attestTpm` API.\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param credentials - Credentials used to configure the attestation client.\n   *\n   */\n  public constructor(\n    endpoint: string,\n    credentials: TokenCredential,\n    options?: AttestationClientOptions,\n  );\n  public constructor(\n    endpoint: string,\n    credentialsOrOptions?: TokenCredential | AttestationClientOptions,\n    clientOptions: AttestationClientOptions = {},\n  ) {\n    let credentialScopes: string[] | undefined = undefined;\n    let credential: TokenCredential | undefined = undefined;\n    let options: AttestationClientOptions;\n\n    if (credentialsOrOptions && isTokenCredential(credentialsOrOptions)) {\n      credential = credentialsOrOptions;\n      credentialScopes = [\"https://attest.azure.net/.default\"];\n      options = clientOptions;\n    } else {\n      options = credentialsOrOptions || {};\n    }\n\n    const internalPipelineOptions: GeneratedClientOptionalParams = {\n      ...options,\n      ...{\n        credentialScopes: credentialScopes,\n        credential: credential,\n        loggingOptions: {\n          logger: logger.info,\n          allowedHeaderNames: [\"x-ms-request-id\", \"x-ms-maa-service-version\"],\n        },\n      },\n    };\n\n    this._client = new GeneratedClient(endpoint, internalPipelineOptions);\n    this._validationOptions = options.validationOptions;\n  }\n\n  /** Attests an OpenEnclave report generated from an SGX Enclave using the OpenEnclave SDK.\n   *\n   * @param report - An OpenEnclave report generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   *\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   * @throws {@link Error} if the `initTimeJson` option is provided and the value of `initTimeJson` is not JSON.\n   * @throws {@link Error} if the `runTimeJson` option is provided and the value of `runTimeJson` is not JSON.\n   */\n  public async attestOpenEnclave(\n    report: Uint8Array | Buffer | Blob,\n    options: AttestOpenEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestOpenEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestOpenEnclave(\n          {\n            report: await Uint8ArrayFromInput(report),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attests a quote generated from SGX Enclave using the Intel SDK.\n   *\n   * @param quote - An SGX quote generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   */\n  public async attestSgxEnclave(\n    quote: Uint8Array | Buffer | Blob,\n    options: AttestSgxEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestSgxEnclave(\n          {\n            quote: await Uint8ArrayFromInput(quote),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attest a TPM based enclave.\n\n   * See the  {@link https://learn.microsoft.com/en-us/azure/attestation/virtualization-based-security-protocol | TPM Attestation Protocol Reference} for more information.\n   * \n   * @param request - Incoming request to send to the TPM attestation service, Utf8 encoded.\n   * @param options - Pipeline options for TPM attestation request.\n   * @returns A structure containing the response from the TPM attestation, Utf8 encoded.\n   * \n   * @remarks\n   * \n   * The incoming requests to the TPM attestation API are stringified JSON objects.\n   * \n   * @example\n   * For example, the initial call for a TPM attestation operation is:\n   * \n   * ```snippet:AttestationClient_AttestTpm\n   * const encodedPayload = JSON.stringify({ payload: { type: \"aikcert\" } });\n   * const result = await client.attestTpm(encodedPayload);\n   * ```\n   * \n   * where stringToBytes converts the string to UTF8.\n   * \n   * Note that the attestTpm requires an attestation client which is configured with\n   * authentication credentials.\n   * \n   */\n  public async attestTpm(request: string, options: AttestTpmOptions = {}): Promise<string> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        const response = await this._client.attestation.attestTpm(\n          { data: stringToBytes(request) },\n          updatedOptions,\n        );\n        if (response.data) {\n          return bytesToString(response.data);\n        } else {\n          throw Error(\"Internal error - response data cannot be undefined.\");\n        }\n      },\n    );\n  }\n\n  /**\n   * Returns the list of attestation signers which can be used to sign attestation\n   * service tokens.\n   *\n   * @param options - Client operation options.\n   * @returns the set of AttestationSigners which may be used to sign attestation tokens.\n   */\n  public async getAttestationSigners(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<AttestationSigner[]> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getAttestationSigners\",\n      options,\n      async (updatedOptions) => {\n        const signingCertificates = await this._client.signingCertificates.get(updatedOptions);\n        const signers: AttestationSigner[] = new Array();\n        signingCertificates.keys?.forEach((element) => {\n          signers.push(_attestationSignerFromGenerated(element));\n        });\n        return signers;\n      },\n    );\n  }\n\n  /**\n   * Returns the OpenID Metadata discovery document for the attestation service instance.\n   * @param options - Client operation options.\n   * @returns The OpenID metadata discovery document for the attestation service.\n   */\n  public async getOpenIdMetadata(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<Record<string, unknown>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getOpenIdMetadata\",\n      options,\n      async (updatedOptions) => {\n        const configs = await this._client.metadataConfiguration.get(updatedOptions);\n        return configs;\n      },\n    );\n  }\n\n  private _client: GeneratedClient;\n  private _validationOptions?: AttestationTokenValidationOptions;\n  private _signers?: AttestationSigner[];\n\n  private async _signingKeys(): Promise<AttestationSigner[]> {\n    if (this._signers !== undefined) {\n      return this._signers;\n    }\n    const jwks = await this._client.signingCertificates.get();\n    const signers: AttestationSigner[] = new Array();\n    jwks.keys?.forEach((element) => {\n      signers.push(_attestationSignerFromGenerated(element));\n    });\n    this._signers = signers;\n    return this._signers;\n  }\n}\n"]}

package/dist/commonjs/attestationAdministrationClient.d.ts

@@ -63,13 +63,12 @@ export declare class AttestationAdministrationClient {
      * Creates an instance of AttestationAdministrationClient.
      *
      * Example usage:
-     * ```ts
+     * ```ts snippet:AttestationAdministrationClient_Constructor
      * import { AttestationAdministrationClient } from "@azure/attestation";
+     * import { DefaultAzureCredential } from "@azure/identity";
      *
-     * const client = new AttestationAdministrationClient(
-     *    "<service endpoint>",
-     *    new TokenCredential("<>")
-     * );
+     * const endpoint = "https://<attestation-instance>.<region>.attest.azure.net";
+     * const client = new AttestationAdministrationClient(endpoint, new DefaultAzureCredential());
      * ```
      *
      * @param endpoint - The attestation instance endpoint, for example https://mytenant.attest.azure.net.

package/dist/commonjs/attestationAdministrationClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attestationAdministrationClient.d.ts","sourceRoot":"","sources":["../../src/attestationAdministrationClient.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EACjB,iCAAiC,EACjC,eAAe,EACf,oCAAoC,EACpC,YAAY,EACb,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAcxD;;GAEG;AACH,MAAM,WAAW,sCAAuC,SAAQ,mBAAmB;IACjF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,+CAAgD,SAAQ,gBAAgB;IACvF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,qDACf,SAAQ,+CAA+C;IACvD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gEACf,SAAQ,+CAA+C;CAAG;AAE5D;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAC1C;;;;;;;;;;;;;;;;OAgBG;gBAGD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sCAA2C;IAmBtD;;;;;;;;;OASG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IA6CvC;;;;;;;;;;;;;;;;;;OAkBG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAqD7C;;;;;;;;;;;;;;;;;;OAkBG;IAEU,WAAW,CACtB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAoD7C;;;;;;;OAOG;IACU,+BAA+B,CAC1C,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAuCpD;;;;;;;;;;;;;;;;;OAiBG;IACU,8BAA8B,CACzC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;IAwErE,OAAO,CAAC,sBAAsB;IAmB9B;;;;;;;;;;;;;;;;OAgBG;IACU,iCAAiC,CAC5C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;YAwEvD,WAAW;IAazB,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,QAAQ,CAAC,CAAsB;IACvC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;CAChE"}
+{"version":3,"file":"attestationAdministrationClient.d.ts","sourceRoot":"","sources":["../../src/attestationAdministrationClient.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EACjB,iCAAiC,EACjC,eAAe,EACf,oCAAoC,EACpC,YAAY,EACb,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAcxD;;GAEG;AACH,MAAM,WAAW,sCAAuC,SAAQ,mBAAmB;IACjF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,+CAAgD,SAAQ,gBAAgB;IACvF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,qDACf,SAAQ,+CAA+C;IACvD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gEACf,SAAQ,+CAA+C;CAAG;AAE5D;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAC1C;;;;;;;;;;;;;;;OAeG;gBAGD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sCAA2C;IAmBtD;;;;;;;;;OASG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IA6CvC;;;;;;;;;;;;;;;;;;OAkBG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAqD7C;;;;;;;;;;;;;;;;;;OAkBG;IAEU,WAAW,CACtB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAoD7C;;;;;;;OAOG;IACU,+BAA+B,CAC1C,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAuCpD;;;;;;;;;;;;;;;;;OAiBG;IACU,8BAA8B,CACzC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;IAwErE,OAAO,CAAC,sBAAsB;IAmB9B;;;;;;;;;;;;;;;;OAgBG;IACU,iCAAiC,CAC5C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;YAwEvD,WAAW;IAazB,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,QAAQ,CAAC,CAAsB;IACvC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;CAChE"}

package/dist/commonjs/attestationAdministrationClient.js

@@ -37,13 +37,12 @@ class AttestationAdministrationClient {
      * Creates an instance of AttestationAdministrationClient.
      *
      * Example usage:
-     * ```ts
+     * ```ts snippet:AttestationAdministrationClient_Constructor
      * import { AttestationAdministrationClient } from "@azure/attestation";
+     * import { DefaultAzureCredential } from "@azure/identity";
      *
-     * const client = new AttestationAdministrationClient(
-     *    "<service endpoint>",
-     *    new TokenCredential("<>")
-     * );
+     * const endpoint = "https://<attestation-instance>.<region>.attest.azure.net";
+     * const client = new AttestationAdministrationClient(endpoint, new DefaultAzureCredential());
      * ```
      *
      * @param endpoint - The attestation instance endpoint, for example https://mytenant.attest.azure.net.

package/dist/commonjs/attestationAdministrationClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"attestationAdministrationClient.js","sourceRoot":"","sources":["../../src/attestationAdministrationClient.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;;AAElC,uDAAuD;AACvD,uEAAiE;AACjE,2CAAqC;AASrC,6CAAgD;AAUhD,oFAA8E;AAI9E,qEAA+D;AAC/D,+EAAyD;AAEzD,yCAAyC;AACzC,6DAAuC;AACvC,mDAAiD;AACjD,8DAAsE;AACtE,wEAAgF;AAChF,mDAAiE;AACjE,4EAA4E;AAC5E,sEAAoE;AACpE,uDAAuD;AAqDvD;;;;;;;;;;;GAWG;AACH,MAAa,+BAA+B;IAC1C;;;;;;;;;;;;;;;;OAgBG;IAEH,YACE,QAAgB,EAChB,WAA4B,EAC5B,UAAkD,EAAE;QAEpD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QAEpD,MAAM,uBAAuB,mCACxB,OAAO,GACP;YACD,UAAU,EAAE,WAAW;YACvB,gBAAgB,EAAE,CAAC,mCAAmC,CAAC;YACvD,cAAc,EAAE;gBACd,MAAM,EAAE,kBAAM,CAAC,IAAI;gBACnB,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;aACpE;SACF,CACF,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,oCAAe,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,SAAS,CACpB,eAAgC,EAChC,UAAiE,EAAE;QAEnE,OAAO,0BAAa,CAAC,QAAQ,CAC3B,2CAA2C,EAC3C,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;YAEvF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAE9D,gDAAgD;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,wEAAwE;YACxE,SAAS;YACT,MAAM,YAAY,GAAG,IAAA,4CAA0B,EAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAEjE,0EAA0E;YAC1E,sEAAsE;YACtE,6EAA6E;YAC7E,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,0CAAoB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAElE,MAAM,YAAY,GAAG,oDAAuB,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAEhF,uEAAuE;YACvE,4CAA4C;YAC5C,OAAO,IAAA,kDAAyB,EAC9B,KAAK,EACL,IAAA,uBAAa,EAAC,YAAY,CAAC,iBAAiB,CAAC,CAC9C,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACI,KAAK,CAAC,SAAS,CACpB,eAAgC,EAChC,iBAAyB,EACzB,UAAiE,EAAE;QAEnE,OAAO,0BAAa,CAAC,QAAQ,CAC3B,2CAA2C,EAC3C,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IACE,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC;gBAC5C,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAC5C,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC9C,IAAA,wCAA2B,EAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,uBAAuB,GAAG,IAAI,oDAAuB,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,CAAC;YAC3F,MAAM,cAAc,GAAG,0CAAoB,CAAC,MAAM,iBAChD,IAAI,EAAE,uBAAuB,IAC1B,OAAO,EACV,CAAC;YAEH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CACnD,eAAe,EACf,cAAc,CAAC,SAAS,EAAE,EAC1B,cAAc,CACf,CAAC;YAEF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,wEAAwE;YACxE,SAAS;YACT,MAAM,YAAY,GAAG,IAAA,4CAA0B,EAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAEjE,0EAA0E;YAC1E,sEAAsE;YACtE,6EAA6E;YAC7E,OAAO,IAAA,kDAAyB,EAAe,KAAK,EAAE,YAAY,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IAEI,KAAK,CAAC,WAAW,CACtB,eAAgC,EAChC,UAAiE,EAAE;QAEnE,OAAO,0BAAa,CAAC,QAAQ,CAC3B,2CAA2C,EAC3C,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IACE,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC;gBAC5C,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAC5C,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC9C,IAAA,wCAA2B,EAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,gBAAgB,GAAG,0CAAoB,CAAC,MAAM,CAAC;gBACnD,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;YAEH,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvD,eAAe,EACf,gBAAgB,CAAC,SAAS,EAAE,EAC5B,cAAc,CACf,CAAC;YAEF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,wEAAwE;YACxE,SAAS;YACT,MAAM,YAAY,GAAG,IAAA,4CAA0B,EAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAEjE,0EAA0E;YAC1E,sEAAsE;YACtE,6EAA6E;YAC7E,OAAO,IAAA,kDAAyB,EAAe,KAAK,EAAE,YAAY,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,+BAA+B,CAC1C,UAA4E,EAAE;QAE9E,OAAO,0BAAa,CAAC,QAAQ,CAC3B,iEAAiE,EACjE,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,wEAAwE;YACxE,SAAS;YACT,MAAM,IAAI,GAAG,sCAAgB,CAAC,WAAW,CACvC,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;gBAC1D,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,0BAA0B,CACC,CAAC;YAE9B,MAAM,kBAAkB,GAAG,IAAI,KAAK,EAAqB,CAAC;YAC1D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC3C,kBAAkB,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,GAAG,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;YAEH,OAAO,IAAA,kDAAyB,EAAsB,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACnF,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACI,KAAK,CAAC,8BAA8B,CACzC,cAAsB,EACtB,UAAkB,EAClB,WAAmB,EACnB,UAA4E,EAAE;QAE9E,OAAO,0BAAa,CAAC,QAAQ,CAC3B,gEAAgE,EAChE,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,CAAC,CAAC,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;YACJ,CAAC;YAED,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC9B,IAAA,wCAA2B,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE9C,MAAM,GAAG,GAAe;gBACtB,GAAG,EAAE,CAAC,IAAA,wBAAW,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5B,GAAG,EAAE,GAAG;aACT,CAAC;YAEF,MAAM,OAAO,GAAyC;gBACpD,iBAAiB,EAAE,GAAG;aACvB,CAAC;YAEF,MAAM,YAAY,GAAG,0CAAoB,CAAC,MAAM,CAAC;gBAC/C,IAAI,EAAE,sCAAgB,CAAC,SAAS,CAC9B,OAAO,EACP;oBACE,oCAAoC,EAAE,OAAO,CAAC,oCAAoC;oBAClF,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,EACD,OAAO,CAAC,oCAAoC,CAC7C;gBACD,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,WAAW;aACzB,CAAC,CAAC;YAEH,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CACpE,YAAY,CAAC,SAAS,EAAE,EACxB,cAAc,CACf,CAAC;YACF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,+DAA+D;YAC/D,MAAM,MAAM,GAAG,sCAAgB,CAAC,WAAW,CACzC,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,oCAAoC,EAAE,OAAO,CAAC,oCAAoC;gBAClF,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,sCAAsC,CACC,CAAC;YAE1C,OAAO,IAAA,kDAAyB,EAAuC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,IAAS;QACtC,IAAI,GAAW,CAAC;QAChB,QAAQ,IAAI,CAAC,yBAAyB,EAAE,EAAE,CAAC;YACzC,KAAK,eAAe,CAAC;YACrB,KAAK,eAAe,CAAC;YACrB,KAAK,eAAe;gBAClB,GAAG,GAAG,KAAK,CAAC;gBACZ,MAAM;YACR,KAAK,iBAAiB,CAAC;YACvB,KAAK,iBAAiB;gBACpB,GAAG,GAAG,IAAI,CAAC;gBACX,MAAM;YACR;gBACE,GAAG,GAAG,KAAK,CAAC;gBACZ,MAAM;QACV,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,KAAK,CAAC,iCAAiC,CAC5C,cAAsB,EACtB,UAAkB,EAClB,WAAmB,EACnB,UAA4E,EAAE;QAE9E,OAAO,0BAAa,CAAC,QAAQ,CAC3B,mEAAmE,EACnE,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,CAAC,CAAC,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;YACJ,CAAC;YAED,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC9B,IAAA,wCAA2B,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE9C,MAAM,GAAG,GAAe;gBACtB,GAAG,EAAE,CAAC,IAAA,wBAAW,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5B,GAAG,EAAE,GAAG;aACT,CAAC;YAEF,MAAM,OAAO,GAAyC;gBACpD,iBAAiB,EAAE,GAAG;aACvB,CAAC;YAEF,MAAM,eAAe,GAAG,0CAAoB,CAAC,MAAM,CAAC;gBAClD,IAAI,EAAE,sCAAgB,CAAC,SAAS,CAC9B,OAAO,EACP;oBACE,oCAAoC,EAAE,OAAO,CAAC,oCAAoC;oBAClF,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,EACD,OAAO,CAAC,oCAAoC,CAC7C;gBACD,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,WAAW;aACzB,CAAC,CAAC;YAEH,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAC1E,eAAe,CAAC,SAAS,EAAE,EAC3B,cAAc,CACf,CAAC;YACF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,+DAA+D;YAC/D,MAAM,MAAM,GAAG,sCAAgB,CAAC,WAAW,CACzC,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,oCAAoC,EAAE,OAAO,CAAC,oCAAoC;gBAClF,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,sCAAsC,CACC,CAAC;YAE1C,OAAO,IAAA,kDAAyB,EAAuC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW;;QACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;QACjD,MAAA,IAAI,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CAKF;AA3gBD,0EA2gBC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/* eslint-disable @azure/azure-sdk/ts-naming-options */\nimport { GeneratedClient } from \"./generated/generatedClient.js\";\nimport { logger } from \"./logger.js\";\n\nimport type {\n  AttestationCertificateManagementBody,\n  GeneratedClientOptionalParams,\n  JsonWebKey,\n  PolicyCertificatesResult,\n} from \"./generated/models/index.js\";\n\nimport { bytesToString } from \"./utils/utf8.js\";\n\nimport type {\n  AttestationResponse,\n  AttestationSigner,\n  AttestationTokenValidationOptions,\n  AttestationType,\n  PolicyCertificatesModificationResult,\n  PolicyResult,\n} from \"./models/index.js\";\nimport { StoredAttestationPolicy } from \"./models/storedAttestationPolicy.js\";\n\nimport type { CommonClientOptions, OperationOptions } from \"@azure/core-client\";\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport { TypeDeserializer } from \"./utils/typeDeserializer.js\";\nimport * as Mappers from \"./generated/models/mappers.js\";\n\n/// <reference path=\"../jsrsasign.d.ts\"/>\nimport * as jsrsasign from \"jsrsasign\";\nimport { hexToBase64 } from \"./utils/helpers.js\";\nimport { _policyResultFromGenerated } from \"./models/policyResult.js\";\nimport { _attestationSignerFromGenerated } from \"./models/attestationSigner.js\";\nimport { verifyAttestationSigningKey } from \"./utils/helpers.js\";\nimport { createAttestationResponse } from \"./models/attestationResponse.js\";\nimport { AttestationTokenImpl } from \"./models/attestationToken.js\";\nimport { tracingClient } from \"./generated/tracing.js\";\n\n/**\n * Attestation Client Construction Options.\n */\nexport interface AttestationAdministrationClientOptions extends CommonClientOptions {\n  /**\n   * Options to be used globally to validate attestation tokens received from\n   * the attestation service.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Operation options for the Attestation Administration Client operations.\n */\nexport interface AttestationAdministrationClientOperationOptions extends OperationOptions {\n  /**\n   * Options to be used globally to validate attestation tokens received from\n   * the attestation service.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Operation options for the administration Policy operations.\n */\nexport interface AttestationAdministrationClientPolicyOperationOptions\n  extends AttestationAdministrationClientOperationOptions {\n  /**\n   * Optional Private key used to sign the token sent to the attestation service.\n   *\n   * Required for Isolated Mode attestation instances.\n   */\n  privateKey?: string;\n\n  /**\n   * Optional certificate which can validate the token sent to the attestation service.\n   *\n   * Required for Isolated Mode attestation instances.\n   *\n   * If the service instance is in Isolated mode, the certificate *must* be one\n   * of the configured policy management certificates.\n   */\n  certificate?: string;\n}\n\n/**\n * Operation options for the Policy Certificates operations.\n */\nexport interface AttestationAdministrationClientPolicyCertificateOperationOptions\n  extends AttestationAdministrationClientOperationOptions {}\n\n/**\n * Attestation Client class.\n *\n * The AttestationClient class enables access to the Attestation related APIs:\n *\n * - getPolicy\n * - setPolicy\n * - resetPolicy\n * - getPolicyManagementCertificates\n * - addPolicyManagementCertificate\n * - removePolicyManagementCertificate\n */\nexport class AttestationAdministrationClient {\n  /**\n   * Creates an instance of AttestationAdministrationClient.\n   *\n   * Example usage:\n   * ```ts\n   * import { AttestationAdministrationClient } from \"@azure/attestation\";\n   *\n   * const client = new AttestationAdministrationClient(\n   *    \"<service endpoint>\",\n   *    new TokenCredential(\"<>\")\n   * );\n   * ```\n   *\n   * @param endpoint - The attestation instance endpoint, for example https://mytenant.attest.azure.net.\n   * @param credential - Used to authenticate requests to the service.\n   * @param options - Used to configure the Form Recognizer client.\n   */\n\n  constructor(\n    endpoint: string,\n    credentials: TokenCredential,\n    options: AttestationAdministrationClientOptions = {},\n  ) {\n    this._validationOptions = options.validationOptions;\n\n    const internalPipelineOptions: GeneratedClientOptionalParams = {\n      ...options,\n      ...{\n        credential: credentials,\n        credentialScopes: [\"https://attest.azure.net/.default\"],\n        loggingOptions: {\n          logger: logger.info,\n          allowedHeaderNames: [\"x-ms-request-id\", \"x-ms-maa-service-version\"],\n        },\n      },\n    };\n\n    this._client = new GeneratedClient(endpoint, internalPipelineOptions);\n  }\n\n  /**\n   * Retrieves the attestation policy document from the server, and returns it\n   * to the caller.\n   *\n   * @param attestationType - AttestationType for which to retrieve policy.\n   * @param options - Pipeline and client options for the `getPolicy` call.\n   * @returns `AttestationResponse<string>` - the `value` property is the\n   *      attestation policy,  the `token` property will be the actual token\n   *      returned by the attestation service.\n   */\n  public async getPolicy(\n    attestationType: AttestationType,\n    options: AttestationAdministrationClientPolicyOperationOptions = {},\n  ): Promise<AttestationResponse<string>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-getPolicy\",\n      options,\n      async (updatedOptions) => {\n        const getPolicyResult = await this._client.policy.get(attestationType, updatedOptions);\n\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(getPolicyResult.token);\n\n        // Validate the token returned from the service.\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyResult object to retrieve the underlying policy\n        //  token\n        const policyResult = _policyResultFromGenerated(token.getBody());\n\n        // The policyResult.policy value will be a JSON Web Signature representing\n        // the actual policy object being retrieved. Serialize the token to an\n        // AttestationToken object so we can access the body properties on the token.\n        if (!policyResult.policy) {\n          throw Error(\"Server returned an invalid getPolicy response!\");\n        }\n\n        const policyToken = new AttestationTokenImpl(policyResult.policy);\n\n        const storedPolicy = StoredAttestationPolicy.deserialize(policyToken.getBody());\n\n        // Finally, retrieve the stored attestationPolicy value and return that\n        // as the AttestationResponse to the caller.\n        return createAttestationResponse<string>(\n          token,\n          bytesToString(storedPolicy.attestationPolicy),\n        );\n      },\n    );\n  }\n\n  /**\n   * Sets the attestation policy for the specified {@link attestationType}.\n   *\n   * @param attestationType - Attestation Type for which to set policy.\n   * @param newPolicyDocument - Policy document to be set.\n   * @param options - call options.\n   * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.\n   *  Clients can use the PolicyResult to validate that the policy was actually\n   *  set by the attestation service.\n   *\n   * @remarks\n   *\n   * Please note that if the attestation service instance is running in \"Isolated\"\n   * mode, the {@link signingKey} must be one of the signing keys configured for the\n   * service instance.\n   *\n   * @throws {@link Error} when a private key is specified without a certificate and vice versa.\n   * @throws {@link Error} when the key in the certificate provided does not match the private key.\n   */\n  public async setPolicy(\n    attestationType: AttestationType,\n    newPolicyDocument: string,\n    options: AttestationAdministrationClientPolicyOperationOptions = {},\n  ): Promise<AttestationResponse<PolicyResult>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-setPolicy\",\n      options,\n      async (updatedOptions) => {\n        if (\n          (!options.privateKey && options.certificate) ||\n          (options.privateKey && !options.certificate)\n        ) {\n          throw new Error(\n            \"If privateKey is specified, certificate must also be provided. If certificate is provided, privateKey must also be provided.\",\n          );\n        }\n\n        if (options.privateKey && options.certificate) {\n          verifyAttestationSigningKey(options.privateKey, options.certificate);\n        }\n\n        const storedAttestationPolicy = new StoredAttestationPolicy(newPolicyDocument).serialize();\n        const setPolicyToken = AttestationTokenImpl.create({\n          body: storedAttestationPolicy,\n          ...options,\n        });\n\n        const setPolicyResult = await this._client.policy.set(\n          attestationType,\n          setPolicyToken.serialize(),\n          updatedOptions,\n        );\n\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(setPolicyResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyResult object to retrieve the underlying policy\n        //  token\n        const policyResult = _policyResultFromGenerated(token.getBody());\n\n        // The policyResult.policy value will be a JSON Web Signature representing\n        // the actual policy object being retrieved. Serialize the token to an\n        // AttestationToken object so we can access the body properties on the token.\n        return createAttestationResponse<PolicyResult>(token, policyResult);\n      },\n    );\n  }\n\n  /**\n   * Resets the attestation policy for the specified {@link attestationType} to\n   * the default value.\n   *\n   * @param attestationType - Attestation Type for which to set policy.\n   * @param options - call options.\n   * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.\n   *  Clients can use the PolicyResult to validate that the policy was actually\n   *  reset by the attestation service.\n   *\n   * @remarks\n   *\n   * Please note that if the attestation service instance is running in \"Isolated\"\n   * mode, the {@link signingKey} must be one of the signing keys configured for the\n   * service instance.\n   *\n   * @throws {@link Error} when a private key is specified without a certificate and vice versa.\n   * @throws {@link Error} when the key in the certificate provided does not match the private key.\n   */\n\n  public async resetPolicy(\n    attestationType: AttestationType,\n    options: AttestationAdministrationClientPolicyOperationOptions = {},\n  ): Promise<AttestationResponse<PolicyResult>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-setPolicy\",\n      options,\n      async (updatedOptions) => {\n        if (\n          (!options.privateKey && options.certificate) ||\n          (options.privateKey && !options.certificate)\n        ) {\n          throw new Error(\n            \"If privateKey is specified, certificate must also be provided. If certificate is provided, privateKey must also be provided.\",\n          );\n        }\n\n        if (options.privateKey && options.certificate) {\n          verifyAttestationSigningKey(options.privateKey, options.certificate);\n        }\n\n        const resetPolicyToken = AttestationTokenImpl.create({\n          privateKey: options.privateKey,\n          certificate: options.certificate,\n        });\n\n        const resetPolicyResult = await this._client.policy.reset(\n          attestationType,\n          resetPolicyToken.serialize(),\n          updatedOptions,\n        );\n\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(resetPolicyResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyResult object to retrieve the underlying policy\n        //  token\n        const policyResult = _policyResultFromGenerated(token.getBody());\n\n        // The policyResult.policy value will be a JSON Web Signature representing\n        // the actual policy object being retrieved. Serialize the token to an\n        // AttestationToken object so we can access the body properties on the token.\n        return createAttestationResponse<PolicyResult>(token, policyResult);\n      },\n    );\n  }\n\n  /** Returns the set of policy management certificates for this attestation instance.\n   *\n   * @remarks If the attestation instance is not in `Isolated` mode, this list will\n   *    always be empty.\n   *\n   * @param options - Options for the call to the attestation service.\n   * @returns AttestationResponse wrapping a list of Attestation Signers.\n   */\n  public async getPolicyManagementCertificates(\n    options: AttestationAdministrationClientPolicyCertificateOperationOptions = {},\n  ): Promise<AttestationResponse<AttestationSigner[]>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-getPolicyManagementCertificates\",\n      options,\n      async (updatedOptions) => {\n        const getCertificatesResult = await this._client.policyCertificates.get(updatedOptions);\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(getCertificatesResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyResult object to retrieve the underlying policy\n        //  token\n        const jwks = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            PolicyCertificatesResult: Mappers.PolicyCertificatesResult,\n            JsonWebKeySet: Mappers.JsonWebKeySet,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"PolicyCertificatesResult\",\n        ) as PolicyCertificatesResult;\n\n        const policyCertificates = new Array<AttestationSigner>();\n        jwks.policyCertificates.keys.forEach((jwk) => {\n          policyCertificates.push(_attestationSignerFromGenerated(jwk));\n        });\n\n        return createAttestationResponse<AttestationSigner[]>(token, policyCertificates);\n      },\n    );\n  }\n\n  /** Add a new certificate chain to the set of policy management certificates.\n   *\n   * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.\n   * @param privateKey - Existing attestation private key used to sign the incoming request.\n   * @param certificate - Existing attestation certificate used to verify the incoming request.\n   * @param options - Options used in the call to the service.\n   * @returns An attestation response including a PolicyCertificatesModificationResult\n   *\n   * @remarks This API is only supported on `isolated` attestation instances.\n   *\n   * The signing key MUST be one of the existing attestation signing certificates. The\n   * new pemCertificate is signed using the signingKey and the service will validate the\n   * signature before allowing the addition.\n   *\n   * @throws {@link Error} when a private key is specified without a certificate and vice versa.\n   * @throws {@link Error} when the key in the certificate provided does not match the private key.\n   *\n   */\n  public async addPolicyManagementCertificate(\n    pemCertificate: string,\n    privateKey: string,\n    certificate: string,\n    options: AttestationAdministrationClientPolicyCertificateOperationOptions = {},\n  ): Promise<AttestationResponse<PolicyCertificatesModificationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-addPolicyManagementCertificate\",\n      options,\n      async (updatedOptions) => {\n        if ((!privateKey && certificate) || (privateKey && !certificate)) {\n          throw new Error(\n            \"If privateKey is specified, certificate must also be provided. If certificate is provided, privateKey must also be provided.\",\n          );\n        }\n\n        if (privateKey && certificate) {\n          verifyAttestationSigningKey(privateKey, certificate);\n        }\n\n        const cert = new jsrsasign.X509();\n        cert.readCertPEM(pemCertificate);\n        const kty = this.keyTypeFromCertificate(cert);\n\n        const jwk: JsonWebKey = {\n          x5C: [hexToBase64(cert.hex)],\n          kty: kty,\n        };\n\n        const addBody: AttestationCertificateManagementBody = {\n          policyCertificate: jwk,\n        };\n\n        const addCertToken = AttestationTokenImpl.create({\n          body: TypeDeserializer.serialize(\n            addBody,\n            {\n              AttestationCertificateManagementBody: Mappers.AttestationCertificateManagementBody,\n              JsonWebKey: Mappers.JsonWebKey,\n            },\n            Mappers.AttestationCertificateManagementBody,\n          ),\n          privateKey: privateKey,\n          certificate: certificate,\n        });\n\n        const addCertificateResult = await this._client.policyCertificates.add(\n          addCertToken.serialize(),\n          updatedOptions,\n        );\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(addCertificateResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyCertificatesModificationResult object.\n        const result = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            PolicyCertificatesModificationResult: Mappers.PolicyCertificatesModificationResult,\n            JsonWebKeySet: Mappers.JsonWebKeySet,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"PolicyCertificatesModificationResult\",\n        ) as PolicyCertificatesModificationResult;\n\n        return createAttestationResponse<PolicyCertificatesModificationResult>(token, result);\n      },\n    );\n  }\n\n  private keyTypeFromCertificate(cert: any): string {\n    let kty: string;\n    switch (cert.getSignatureAlgorithmName()) {\n      case \"SHA256withRSA\":\n      case \"SHA384withRSA\":\n      case \"SHA512withRSA\":\n        kty = \"RSA\";\n        break;\n      case \"SHA256withECDSA\":\n      case \"SHA384withECDSA\":\n        kty = \"EC\";\n        break;\n      default:\n        kty = \"RSA\";\n        break;\n    }\n    return kty;\n  }\n\n  /** Add a new certificate chain to the set of policy management certificates.\n   *\n   * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.\n   * @param privateKey - Existing attestation private key used to sign the incoming request.\n   * @param certificate - Existing attestation certificate used to verify the incoming request.\n   * @param options - Options used in the call to the service.\n   * @returns An attestation response including a PolicyCertificatesModificationResult\n   *\n   * @remarks This API is only supported on `isolated` attestation instances.\n   *\n   * The signing key MUST be one of the existing attestation signing certificates. The\n   * new pemCertificate is signed using the signingKey and the service will validate the\n   * signature before allowing the addition.\n   *\n   * @throws {@link Error} when a private key is specified without a certificate and vice versa.\n   * @throws {@link Error} when the key in the certificate provided does not match the private key.\n   */\n  public async removePolicyManagementCertificate(\n    pemCertificate: string,\n    privateKey: string,\n    certificate: string,\n    options: AttestationAdministrationClientPolicyCertificateOperationOptions = {},\n  ): Promise<AttestationResponse<PolicyCertificatesModificationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-removePolicyManagementCertificate\",\n      options,\n      async (updatedOptions) => {\n        if ((!privateKey && certificate) || (privateKey && !certificate)) {\n          throw new Error(\n            \"If privateKey is specified, certificate must also be provided. If certificate is provided, privateKey must also be provided.\",\n          );\n        }\n\n        if (privateKey && certificate) {\n          verifyAttestationSigningKey(privateKey, certificate);\n        }\n\n        const cert = new jsrsasign.X509();\n        cert.readCertPEM(pemCertificate);\n        const kty = this.keyTypeFromCertificate(cert);\n\n        const jwk: JsonWebKey = {\n          x5C: [hexToBase64(cert.hex)],\n          kty: kty,\n        };\n\n        const addBody: AttestationCertificateManagementBody = {\n          policyCertificate: jwk,\n        };\n\n        const removeCertToken = AttestationTokenImpl.create({\n          body: TypeDeserializer.serialize(\n            addBody,\n            {\n              AttestationCertificateManagementBody: Mappers.AttestationCertificateManagementBody,\n              JsonWebKey: Mappers.JsonWebKey,\n            },\n            Mappers.AttestationCertificateManagementBody,\n          ),\n          privateKey: privateKey,\n          certificate: certificate,\n        });\n\n        const removeCertificateResult = await this._client.policyCertificates.remove(\n          removeCertToken.serialize(),\n          updatedOptions,\n        );\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(removeCertificateResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyCertificatesModificationResult object.\n        const result = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            PolicyCertificatesModificationResult: Mappers.PolicyCertificatesModificationResult,\n            JsonWebKeySet: Mappers.JsonWebKeySet,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"PolicyCertificatesModificationResult\",\n        ) as PolicyCertificatesModificationResult;\n\n        return createAttestationResponse<PolicyCertificatesModificationResult>(token, result);\n      },\n    );\n  }\n\n  private async signingKeys(): Promise<AttestationSigner[]> {\n    if (this._signers !== undefined) {\n      return this._signers;\n    }\n    const jwks = await this._client.signingCertificates.get();\n    const signers: AttestationSigner[] = new Array();\n    jwks.keys?.forEach((element) => {\n      signers.push(_attestationSignerFromGenerated(element));\n    });\n    this._signers = signers;\n    return this._signers;\n  }\n\n  private _client: GeneratedClient;\n  private _signers?: AttestationSigner[];\n  private _validationOptions?: AttestationTokenValidationOptions;\n}\n"]}
+{"version":3,"file":"attestationAdministrationClient.js","sourceRoot":"","sources":["../../src/attestationAdministrationClient.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;;AAElC,uDAAuD;AACvD,uEAAiE;AACjE,2CAAqC;AASrC,6CAAgD;AAUhD,oFAA8E;AAI9E,qEAA+D;AAC/D,+EAAyD;AAEzD,yCAAyC;AACzC,6DAAuC;AACvC,mDAAiD;AACjD,8DAAsE;AACtE,wEAAgF;AAChF,mDAAiE;AACjE,4EAA4E;AAC5E,sEAAoE;AACpE,uDAAuD;AAqDvD;;;;;;;;;;;GAWG;AACH,MAAa,+BAA+B;IAC1C;;;;;;;;;;;;;;;OAeG;IAEH,YACE,QAAgB,EAChB,WAA4B,EAC5B,UAAkD,EAAE;QAEpD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QAEpD,MAAM,uBAAuB,mCACxB,OAAO,GACP;YACD,UAAU,EAAE,WAAW;YACvB,gBAAgB,EAAE,CAAC,mCAAmC,CAAC;YACvD,cAAc,EAAE;gBACd,MAAM,EAAE,kBAAM,CAAC,IAAI;gBACnB,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;aACpE;SACF,CACF,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,oCAAe,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,SAAS,CACpB,eAAgC,EAChC,UAAiE,EAAE;QAEnE,OAAO,0BAAa,CAAC,QAAQ,CAC3B,2CAA2C,EAC3C,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;YAEvF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAE9D,gDAAgD;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,wEAAwE;YACxE,SAAS;YACT,MAAM,YAAY,GAAG,IAAA,4CAA0B,EAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAEjE,0EAA0E;YAC1E,sEAAsE;YACtE,6EAA6E;YAC7E,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,0CAAoB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAElE,MAAM,YAAY,GAAG,oDAAuB,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAEhF,uEAAuE;YACvE,4CAA4C;YAC5C,OAAO,IAAA,kDAAyB,EAC9B,KAAK,EACL,IAAA,uBAAa,EAAC,YAAY,CAAC,iBAAiB,CAAC,CAC9C,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACI,KAAK,CAAC,SAAS,CACpB,eAAgC,EAChC,iBAAyB,EACzB,UAAiE,EAAE;QAEnE,OAAO,0BAAa,CAAC,QAAQ,CAC3B,2CAA2C,EAC3C,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IACE,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC;gBAC5C,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAC5C,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC9C,IAAA,wCAA2B,EAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,uBAAuB,GAAG,IAAI,oDAAuB,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,CAAC;YAC3F,MAAM,cAAc,GAAG,0CAAoB,CAAC,MAAM,iBAChD,IAAI,EAAE,uBAAuB,IAC1B,OAAO,EACV,CAAC;YAEH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CACnD,eAAe,EACf,cAAc,CAAC,SAAS,EAAE,EAC1B,cAAc,CACf,CAAC;YAEF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,wEAAwE;YACxE,SAAS;YACT,MAAM,YAAY,GAAG,IAAA,4CAA0B,EAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAEjE,0EAA0E;YAC1E,sEAAsE;YACtE,6EAA6E;YAC7E,OAAO,IAAA,kDAAyB,EAAe,KAAK,EAAE,YAAY,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IAEI,KAAK,CAAC,WAAW,CACtB,eAAgC,EAChC,UAAiE,EAAE;QAEnE,OAAO,0BAAa,CAAC,QAAQ,CAC3B,2CAA2C,EAC3C,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IACE,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC;gBAC5C,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAC5C,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC9C,IAAA,wCAA2B,EAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,gBAAgB,GAAG,0CAAoB,CAAC,MAAM,CAAC;gBACnD,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;YAEH,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvD,eAAe,EACf,gBAAgB,CAAC,SAAS,EAAE,EAC5B,cAAc,CACf,CAAC;YAEF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,wEAAwE;YACxE,SAAS;YACT,MAAM,YAAY,GAAG,IAAA,4CAA0B,EAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAEjE,0EAA0E;YAC1E,sEAAsE;YACtE,6EAA6E;YAC7E,OAAO,IAAA,kDAAyB,EAAe,KAAK,EAAE,YAAY,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,+BAA+B,CAC1C,UAA4E,EAAE;QAE9E,OAAO,0BAAa,CAAC,QAAQ,CAC3B,iEAAiE,EACjE,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,wEAAwE;YACxE,SAAS;YACT,MAAM,IAAI,GAAG,sCAAgB,CAAC,WAAW,CACvC,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;gBAC1D,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,0BAA0B,CACC,CAAC;YAE9B,MAAM,kBAAkB,GAAG,IAAI,KAAK,EAAqB,CAAC;YAC1D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC3C,kBAAkB,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,GAAG,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;YAEH,OAAO,IAAA,kDAAyB,EAAsB,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACnF,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACI,KAAK,CAAC,8BAA8B,CACzC,cAAsB,EACtB,UAAkB,EAClB,WAAmB,EACnB,UAA4E,EAAE;QAE9E,OAAO,0BAAa,CAAC,QAAQ,CAC3B,gEAAgE,EAChE,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,CAAC,CAAC,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;YACJ,CAAC;YAED,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC9B,IAAA,wCAA2B,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE9C,MAAM,GAAG,GAAe;gBACtB,GAAG,EAAE,CAAC,IAAA,wBAAW,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5B,GAAG,EAAE,GAAG;aACT,CAAC;YAEF,MAAM,OAAO,GAAyC;gBACpD,iBAAiB,EAAE,GAAG;aACvB,CAAC;YAEF,MAAM,YAAY,GAAG,0CAAoB,CAAC,MAAM,CAAC;gBAC/C,IAAI,EAAE,sCAAgB,CAAC,SAAS,CAC9B,OAAO,EACP;oBACE,oCAAoC,EAAE,OAAO,CAAC,oCAAoC;oBAClF,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,EACD,OAAO,CAAC,oCAAoC,CAC7C;gBACD,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,WAAW;aACzB,CAAC,CAAC;YAEH,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CACpE,YAAY,CAAC,SAAS,EAAE,EACxB,cAAc,CACf,CAAC;YACF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,+DAA+D;YAC/D,MAAM,MAAM,GAAG,sCAAgB,CAAC,WAAW,CACzC,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,oCAAoC,EAAE,OAAO,CAAC,oCAAoC;gBAClF,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,sCAAsC,CACC,CAAC;YAE1C,OAAO,IAAA,kDAAyB,EAAuC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,IAAS;QACtC,IAAI,GAAW,CAAC;QAChB,QAAQ,IAAI,CAAC,yBAAyB,EAAE,EAAE,CAAC;YACzC,KAAK,eAAe,CAAC;YACrB,KAAK,eAAe,CAAC;YACrB,KAAK,eAAe;gBAClB,GAAG,GAAG,KAAK,CAAC;gBACZ,MAAM;YACR,KAAK,iBAAiB,CAAC;YACvB,KAAK,iBAAiB;gBACpB,GAAG,GAAG,IAAI,CAAC;gBACX,MAAM;YACR;gBACE,GAAG,GAAG,KAAK,CAAC;gBACZ,MAAM;QACV,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,KAAK,CAAC,iCAAiC,CAC5C,cAAsB,EACtB,UAAkB,EAClB,WAAmB,EACnB,UAA4E,EAAE;QAE9E,OAAO,0BAAa,CAAC,QAAQ,CAC3B,mEAAmE,EACnE,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,CAAC,CAAC,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;YACJ,CAAC;YAED,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC9B,IAAA,wCAA2B,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE9C,MAAM,GAAG,GAAe;gBACtB,GAAG,EAAE,CAAC,IAAA,wBAAW,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5B,GAAG,EAAE,GAAG;aACT,CAAC;YAEF,MAAM,OAAO,GAAyC;gBACpD,iBAAiB,EAAE,GAAG;aACvB,CAAC;YAEF,MAAM,eAAe,GAAG,0CAAoB,CAAC,MAAM,CAAC;gBAClD,IAAI,EAAE,sCAAgB,CAAC,SAAS,CAC9B,OAAO,EACP;oBACE,oCAAoC,EAAE,OAAO,CAAC,oCAAoC;oBAClF,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,EACD,OAAO,CAAC,oCAAoC,CAC7C;gBACD,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,WAAW;aACzB,CAAC,CAAC;YAEH,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAC1E,eAAe,CAAC,SAAS,EAAE,EAC3B,cAAc,CACf,CAAC;YACF,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,WAAW,EAAE,EACxB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,+DAA+D;YAC/D,MAAM,MAAM,GAAG,sCAAgB,CAAC,WAAW,CACzC,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,oCAAoC,EAAE,OAAO,CAAC,oCAAoC;gBAClF,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,sCAAsC,CACC,CAAC;YAE1C,OAAO,IAAA,kDAAyB,EAAuC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW;;QACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;QACjD,MAAA,IAAI,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CAKF;AA1gBD,0EA0gBC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/* eslint-disable @azure/azure-sdk/ts-naming-options */\nimport { GeneratedClient } from \"./generated/generatedClient.js\";\nimport { logger } from \"./logger.js\";\n\nimport type {\n  AttestationCertificateManagementBody,\n  GeneratedClientOptionalParams,\n  JsonWebKey,\n  PolicyCertificatesResult,\n} from \"./generated/models/index.js\";\n\nimport { bytesToString } from \"./utils/utf8.js\";\n\nimport type {\n  AttestationResponse,\n  AttestationSigner,\n  AttestationTokenValidationOptions,\n  AttestationType,\n  PolicyCertificatesModificationResult,\n  PolicyResult,\n} from \"./models/index.js\";\nimport { StoredAttestationPolicy } from \"./models/storedAttestationPolicy.js\";\n\nimport type { CommonClientOptions, OperationOptions } from \"@azure/core-client\";\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport { TypeDeserializer } from \"./utils/typeDeserializer.js\";\nimport * as Mappers from \"./generated/models/mappers.js\";\n\n/// <reference path=\"../jsrsasign.d.ts\"/>\nimport * as jsrsasign from \"jsrsasign\";\nimport { hexToBase64 } from \"./utils/helpers.js\";\nimport { _policyResultFromGenerated } from \"./models/policyResult.js\";\nimport { _attestationSignerFromGenerated } from \"./models/attestationSigner.js\";\nimport { verifyAttestationSigningKey } from \"./utils/helpers.js\";\nimport { createAttestationResponse } from \"./models/attestationResponse.js\";\nimport { AttestationTokenImpl } from \"./models/attestationToken.js\";\nimport { tracingClient } from \"./generated/tracing.js\";\n\n/**\n * Attestation Client Construction Options.\n */\nexport interface AttestationAdministrationClientOptions extends CommonClientOptions {\n  /**\n   * Options to be used globally to validate attestation tokens received from\n   * the attestation service.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Operation options for the Attestation Administration Client operations.\n */\nexport interface AttestationAdministrationClientOperationOptions extends OperationOptions {\n  /**\n   * Options to be used globally to validate attestation tokens received from\n   * the attestation service.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Operation options for the administration Policy operations.\n */\nexport interface AttestationAdministrationClientPolicyOperationOptions\n  extends AttestationAdministrationClientOperationOptions {\n  /**\n   * Optional Private key used to sign the token sent to the attestation service.\n   *\n   * Required for Isolated Mode attestation instances.\n   */\n  privateKey?: string;\n\n  /**\n   * Optional certificate which can validate the token sent to the attestation service.\n   *\n   * Required for Isolated Mode attestation instances.\n   *\n   * If the service instance is in Isolated mode, the certificate *must* be one\n   * of the configured policy management certificates.\n   */\n  certificate?: string;\n}\n\n/**\n * Operation options for the Policy Certificates operations.\n */\nexport interface AttestationAdministrationClientPolicyCertificateOperationOptions\n  extends AttestationAdministrationClientOperationOptions {}\n\n/**\n * Attestation Client class.\n *\n * The AttestationClient class enables access to the Attestation related APIs:\n *\n * - getPolicy\n * - setPolicy\n * - resetPolicy\n * - getPolicyManagementCertificates\n * - addPolicyManagementCertificate\n * - removePolicyManagementCertificate\n */\nexport class AttestationAdministrationClient {\n  /**\n   * Creates an instance of AttestationAdministrationClient.\n   *\n   * Example usage:\n   * ```ts snippet:AttestationAdministrationClient_Constructor\n   * import { AttestationAdministrationClient } from \"@azure/attestation\";\n   * import { DefaultAzureCredential } from \"@azure/identity\";\n   *\n   * const endpoint = \"https://<attestation-instance>.<region>.attest.azure.net\";\n   * const client = new AttestationAdministrationClient(endpoint, new DefaultAzureCredential());\n   * ```\n   *\n   * @param endpoint - The attestation instance endpoint, for example https://mytenant.attest.azure.net.\n   * @param credential - Used to authenticate requests to the service.\n   * @param options - Used to configure the Form Recognizer client.\n   */\n\n  constructor(\n    endpoint: string,\n    credentials: TokenCredential,\n    options: AttestationAdministrationClientOptions = {},\n  ) {\n    this._validationOptions = options.validationOptions;\n\n    const internalPipelineOptions: GeneratedClientOptionalParams = {\n      ...options,\n      ...{\n        credential: credentials,\n        credentialScopes: [\"https://attest.azure.net/.default\"],\n        loggingOptions: {\n          logger: logger.info,\n          allowedHeaderNames: [\"x-ms-request-id\", \"x-ms-maa-service-version\"],\n        },\n      },\n    };\n\n    this._client = new GeneratedClient(endpoint, internalPipelineOptions);\n  }\n\n  /**\n   * Retrieves the attestation policy document from the server, and returns it\n   * to the caller.\n   *\n   * @param attestationType - AttestationType for which to retrieve policy.\n   * @param options - Pipeline and client options for the `getPolicy` call.\n   * @returns `AttestationResponse<string>` - the `value` property is the\n   *      attestation policy,  the `token` property will be the actual token\n   *      returned by the attestation service.\n   */\n  public async getPolicy(\n    attestationType: AttestationType,\n    options: AttestationAdministrationClientPolicyOperationOptions = {},\n  ): Promise<AttestationResponse<string>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-getPolicy\",\n      options,\n      async (updatedOptions) => {\n        const getPolicyResult = await this._client.policy.get(attestationType, updatedOptions);\n\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(getPolicyResult.token);\n\n        // Validate the token returned from the service.\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyResult object to retrieve the underlying policy\n        //  token\n        const policyResult = _policyResultFromGenerated(token.getBody());\n\n        // The policyResult.policy value will be a JSON Web Signature representing\n        // the actual policy object being retrieved. Serialize the token to an\n        // AttestationToken object so we can access the body properties on the token.\n        if (!policyResult.policy) {\n          throw Error(\"Server returned an invalid getPolicy response!\");\n        }\n\n        const policyToken = new AttestationTokenImpl(policyResult.policy);\n\n        const storedPolicy = StoredAttestationPolicy.deserialize(policyToken.getBody());\n\n        // Finally, retrieve the stored attestationPolicy value and return that\n        // as the AttestationResponse to the caller.\n        return createAttestationResponse<string>(\n          token,\n          bytesToString(storedPolicy.attestationPolicy),\n        );\n      },\n    );\n  }\n\n  /**\n   * Sets the attestation policy for the specified {@link attestationType}.\n   *\n   * @param attestationType - Attestation Type for which to set policy.\n   * @param newPolicyDocument - Policy document to be set.\n   * @param options - call options.\n   * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.\n   *  Clients can use the PolicyResult to validate that the policy was actually\n   *  set by the attestation service.\n   *\n   * @remarks\n   *\n   * Please note that if the attestation service instance is running in \"Isolated\"\n   * mode, the {@link signingKey} must be one of the signing keys configured for the\n   * service instance.\n   *\n   * @throws {@link Error} when a private key is specified without a certificate and vice versa.\n   * @throws {@link Error} when the key in the certificate provided does not match the private key.\n   */\n  public async setPolicy(\n    attestationType: AttestationType,\n    newPolicyDocument: string,\n    options: AttestationAdministrationClientPolicyOperationOptions = {},\n  ): Promise<AttestationResponse<PolicyResult>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-setPolicy\",\n      options,\n      async (updatedOptions) => {\n        if (\n          (!options.privateKey && options.certificate) ||\n          (options.privateKey && !options.certificate)\n        ) {\n          throw new Error(\n            \"If privateKey is specified, certificate must also be provided. If certificate is provided, privateKey must also be provided.\",\n          );\n        }\n\n        if (options.privateKey && options.certificate) {\n          verifyAttestationSigningKey(options.privateKey, options.certificate);\n        }\n\n        const storedAttestationPolicy = new StoredAttestationPolicy(newPolicyDocument).serialize();\n        const setPolicyToken = AttestationTokenImpl.create({\n          body: storedAttestationPolicy,\n          ...options,\n        });\n\n        const setPolicyResult = await this._client.policy.set(\n          attestationType,\n          setPolicyToken.serialize(),\n          updatedOptions,\n        );\n\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(setPolicyResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyResult object to retrieve the underlying policy\n        //  token\n        const policyResult = _policyResultFromGenerated(token.getBody());\n\n        // The policyResult.policy value will be a JSON Web Signature representing\n        // the actual policy object being retrieved. Serialize the token to an\n        // AttestationToken object so we can access the body properties on the token.\n        return createAttestationResponse<PolicyResult>(token, policyResult);\n      },\n    );\n  }\n\n  /**\n   * Resets the attestation policy for the specified {@link attestationType} to\n   * the default value.\n   *\n   * @param attestationType - Attestation Type for which to set policy.\n   * @param options - call options.\n   * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.\n   *  Clients can use the PolicyResult to validate that the policy was actually\n   *  reset by the attestation service.\n   *\n   * @remarks\n   *\n   * Please note that if the attestation service instance is running in \"Isolated\"\n   * mode, the {@link signingKey} must be one of the signing keys configured for the\n   * service instance.\n   *\n   * @throws {@link Error} when a private key is specified without a certificate and vice versa.\n   * @throws {@link Error} when the key in the certificate provided does not match the private key.\n   */\n\n  public async resetPolicy(\n    attestationType: AttestationType,\n    options: AttestationAdministrationClientPolicyOperationOptions = {},\n  ): Promise<AttestationResponse<PolicyResult>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-setPolicy\",\n      options,\n      async (updatedOptions) => {\n        if (\n          (!options.privateKey && options.certificate) ||\n          (options.privateKey && !options.certificate)\n        ) {\n          throw new Error(\n            \"If privateKey is specified, certificate must also be provided. If certificate is provided, privateKey must also be provided.\",\n          );\n        }\n\n        if (options.privateKey && options.certificate) {\n          verifyAttestationSigningKey(options.privateKey, options.certificate);\n        }\n\n        const resetPolicyToken = AttestationTokenImpl.create({\n          privateKey: options.privateKey,\n          certificate: options.certificate,\n        });\n\n        const resetPolicyResult = await this._client.policy.reset(\n          attestationType,\n          resetPolicyToken.serialize(),\n          updatedOptions,\n        );\n\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(resetPolicyResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyResult object to retrieve the underlying policy\n        //  token\n        const policyResult = _policyResultFromGenerated(token.getBody());\n\n        // The policyResult.policy value will be a JSON Web Signature representing\n        // the actual policy object being retrieved. Serialize the token to an\n        // AttestationToken object so we can access the body properties on the token.\n        return createAttestationResponse<PolicyResult>(token, policyResult);\n      },\n    );\n  }\n\n  /** Returns the set of policy management certificates for this attestation instance.\n   *\n   * @remarks If the attestation instance is not in `Isolated` mode, this list will\n   *    always be empty.\n   *\n   * @param options - Options for the call to the attestation service.\n   * @returns AttestationResponse wrapping a list of Attestation Signers.\n   */\n  public async getPolicyManagementCertificates(\n    options: AttestationAdministrationClientPolicyCertificateOperationOptions = {},\n  ): Promise<AttestationResponse<AttestationSigner[]>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-getPolicyManagementCertificates\",\n      options,\n      async (updatedOptions) => {\n        const getCertificatesResult = await this._client.policyCertificates.get(updatedOptions);\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(getCertificatesResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyResult object to retrieve the underlying policy\n        //  token\n        const jwks = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            PolicyCertificatesResult: Mappers.PolicyCertificatesResult,\n            JsonWebKeySet: Mappers.JsonWebKeySet,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"PolicyCertificatesResult\",\n        ) as PolicyCertificatesResult;\n\n        const policyCertificates = new Array<AttestationSigner>();\n        jwks.policyCertificates.keys.forEach((jwk) => {\n          policyCertificates.push(_attestationSignerFromGenerated(jwk));\n        });\n\n        return createAttestationResponse<AttestationSigner[]>(token, policyCertificates);\n      },\n    );\n  }\n\n  /** Add a new certificate chain to the set of policy management certificates.\n   *\n   * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.\n   * @param privateKey - Existing attestation private key used to sign the incoming request.\n   * @param certificate - Existing attestation certificate used to verify the incoming request.\n   * @param options - Options used in the call to the service.\n   * @returns An attestation response including a PolicyCertificatesModificationResult\n   *\n   * @remarks This API is only supported on `isolated` attestation instances.\n   *\n   * The signing key MUST be one of the existing attestation signing certificates. The\n   * new pemCertificate is signed using the signingKey and the service will validate the\n   * signature before allowing the addition.\n   *\n   * @throws {@link Error} when a private key is specified without a certificate and vice versa.\n   * @throws {@link Error} when the key in the certificate provided does not match the private key.\n   *\n   */\n  public async addPolicyManagementCertificate(\n    pemCertificate: string,\n    privateKey: string,\n    certificate: string,\n    options: AttestationAdministrationClientPolicyCertificateOperationOptions = {},\n  ): Promise<AttestationResponse<PolicyCertificatesModificationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-addPolicyManagementCertificate\",\n      options,\n      async (updatedOptions) => {\n        if ((!privateKey && certificate) || (privateKey && !certificate)) {\n          throw new Error(\n            \"If privateKey is specified, certificate must also be provided. If certificate is provided, privateKey must also be provided.\",\n          );\n        }\n\n        if (privateKey && certificate) {\n          verifyAttestationSigningKey(privateKey, certificate);\n        }\n\n        const cert = new jsrsasign.X509();\n        cert.readCertPEM(pemCertificate);\n        const kty = this.keyTypeFromCertificate(cert);\n\n        const jwk: JsonWebKey = {\n          x5C: [hexToBase64(cert.hex)],\n          kty: kty,\n        };\n\n        const addBody: AttestationCertificateManagementBody = {\n          policyCertificate: jwk,\n        };\n\n        const addCertToken = AttestationTokenImpl.create({\n          body: TypeDeserializer.serialize(\n            addBody,\n            {\n              AttestationCertificateManagementBody: Mappers.AttestationCertificateManagementBody,\n              JsonWebKey: Mappers.JsonWebKey,\n            },\n            Mappers.AttestationCertificateManagementBody,\n          ),\n          privateKey: privateKey,\n          certificate: certificate,\n        });\n\n        const addCertificateResult = await this._client.policyCertificates.add(\n          addCertToken.serialize(),\n          updatedOptions,\n        );\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(addCertificateResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyCertificatesModificationResult object.\n        const result = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            PolicyCertificatesModificationResult: Mappers.PolicyCertificatesModificationResult,\n            JsonWebKeySet: Mappers.JsonWebKeySet,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"PolicyCertificatesModificationResult\",\n        ) as PolicyCertificatesModificationResult;\n\n        return createAttestationResponse<PolicyCertificatesModificationResult>(token, result);\n      },\n    );\n  }\n\n  private keyTypeFromCertificate(cert: any): string {\n    let kty: string;\n    switch (cert.getSignatureAlgorithmName()) {\n      case \"SHA256withRSA\":\n      case \"SHA384withRSA\":\n      case \"SHA512withRSA\":\n        kty = \"RSA\";\n        break;\n      case \"SHA256withECDSA\":\n      case \"SHA384withECDSA\":\n        kty = \"EC\";\n        break;\n      default:\n        kty = \"RSA\";\n        break;\n    }\n    return kty;\n  }\n\n  /** Add a new certificate chain to the set of policy management certificates.\n   *\n   * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.\n   * @param privateKey - Existing attestation private key used to sign the incoming request.\n   * @param certificate - Existing attestation certificate used to verify the incoming request.\n   * @param options - Options used in the call to the service.\n   * @returns An attestation response including a PolicyCertificatesModificationResult\n   *\n   * @remarks This API is only supported on `isolated` attestation instances.\n   *\n   * The signing key MUST be one of the existing attestation signing certificates. The\n   * new pemCertificate is signed using the signingKey and the service will validate the\n   * signature before allowing the addition.\n   *\n   * @throws {@link Error} when a private key is specified without a certificate and vice versa.\n   * @throws {@link Error} when the key in the certificate provided does not match the private key.\n   */\n  public async removePolicyManagementCertificate(\n    pemCertificate: string,\n    privateKey: string,\n    certificate: string,\n    options: AttestationAdministrationClientPolicyCertificateOperationOptions = {},\n  ): Promise<AttestationResponse<PolicyCertificatesModificationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationAdministrationClient-removePolicyManagementCertificate\",\n      options,\n      async (updatedOptions) => {\n        if ((!privateKey && certificate) || (privateKey && !certificate)) {\n          throw new Error(\n            \"If privateKey is specified, certificate must also be provided. If certificate is provided, privateKey must also be provided.\",\n          );\n        }\n\n        if (privateKey && certificate) {\n          verifyAttestationSigningKey(privateKey, certificate);\n        }\n\n        const cert = new jsrsasign.X509();\n        cert.readCertPEM(pemCertificate);\n        const kty = this.keyTypeFromCertificate(cert);\n\n        const jwk: JsonWebKey = {\n          x5C: [hexToBase64(cert.hex)],\n          kty: kty,\n        };\n\n        const addBody: AttestationCertificateManagementBody = {\n          policyCertificate: jwk,\n        };\n\n        const removeCertToken = AttestationTokenImpl.create({\n          body: TypeDeserializer.serialize(\n            addBody,\n            {\n              AttestationCertificateManagementBody: Mappers.AttestationCertificateManagementBody,\n              JsonWebKey: Mappers.JsonWebKey,\n            },\n            Mappers.AttestationCertificateManagementBody,\n          ),\n          privateKey: privateKey,\n          certificate: certificate,\n        });\n\n        const removeCertificateResult = await this._client.policyCertificates.remove(\n          removeCertToken.serialize(),\n          updatedOptions,\n        );\n        // The attestation token returned from the service has a PolicyResult\n        // object as the body.\n        const token = new AttestationTokenImpl(removeCertificateResult.token);\n        const problems = token.getTokenProblems(\n          await this.signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        // Deserialize the PolicyCertificatesModificationResult object.\n        const result = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            PolicyCertificatesModificationResult: Mappers.PolicyCertificatesModificationResult,\n            JsonWebKeySet: Mappers.JsonWebKeySet,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"PolicyCertificatesModificationResult\",\n        ) as PolicyCertificatesModificationResult;\n\n        return createAttestationResponse<PolicyCertificatesModificationResult>(token, result);\n      },\n    );\n  }\n\n  private async signingKeys(): Promise<AttestationSigner[]> {\n    if (this._signers !== undefined) {\n      return this._signers;\n    }\n    const jwks = await this._client.signingCertificates.get();\n    const signers: AttestationSigner[] = new Array();\n    jwks.keys?.forEach((element) => {\n      signers.push(_attestationSignerFromGenerated(element));\n    });\n    this._signers = signers;\n    return this._signers;\n  }\n\n  private _client: GeneratedClient;\n  private _signers?: AttestationSigner[];\n  private _validationOptions?: AttestationTokenValidationOptions;\n}\n"]}

package/dist/commonjs/attestationClient.d.ts

@@ -103,12 +103,11 @@ export declare class AttestationClient {
      * Creates an instance of AttestationClient.
      *
      * Example usage:
-     * ```ts
+     * ```ts snippet:Attestation_Constructor_NoCreds
      * import { AttestationClient } from "@azure/attestation";
      *
-     * const client = new AttestationClient(
-     *    "<service endpoint>"
-     * );
+     * const endpoint = "https://<attestation-instance>.<region>.attest.azure.net";
+     * const client = new AttestationClient(endpoint);
      * ```
      *
      * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.
@@ -120,14 +119,13 @@ export declare class AttestationClient {
      * Creates an instance of AttestationClient with options and credentials.
      *
      * Example usage:
-     * ```ts
+     * ```ts snippet:Attestation_Constructor_Creds
+     * import { DefaultAzureCredential } from "@azure/identity";
      * import { AttestationClient } from "@azure/attestation";
      *
-     * const client = new AttestationClient(
-     *    "<service endpoint>",
-     *    new TokenCredential("<>"),
-     *    { tokenValidationOptions: { validateToken: false } }
-     * );
+     * const endpoint = "https://<attestation-instance>.<region>.attest.azure.net";
+     * const credentials = new DefaultAzureCredential();
+     * const client = new AttestationClient(endpoint, credentials);
      * ```
      *
      * Note that credentials are required to call the `attestTpm` API.
@@ -175,7 +173,7 @@ export declare class AttestationClient {
      * @example
      * For example, the initial call for a TPM attestation operation is:
      *
-     * ```js
+     * ```snippet:AttestationClient_AttestTpm
      * const encodedPayload = JSON.stringify({ payload: { type: "aikcert" } });
      * const result = await client.attestTpm(encodedPayload);
      * ```

package/dist/commonjs/attestationClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attestationClient.d.ts","sourceRoot":"","sources":["../../src/attestationClient.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,iCAAiC,EAClC,MAAM,mBAAmB,CAAC;AAa3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAI3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAQhF;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,mBAAmB;IACnE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAkC,SAAQ,gBAAgB;IACzE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iCAAiC;IACjF;;;OAGG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAwB,SAAQ,iCAAiC;IAChF;;;OAGG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,iCAAiC;CAAG;AAE9E;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB;IAC5B;;;;;;;;;;;;;;;OAeG;gBACgB,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,wBAAwB;IAEvE;;;;;;;;;;;;;;;;;;;OAmBG;gBAED,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,CAAC,EAAE,wBAAwB;IAmCpC;;;;;;;;;;;OAWG;IACU,iBAAiB,CAC5B,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,EAClC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAqElD;;;;;;;;OAQG;IACU,gBAAgB,CAC3B,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAoElD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACU,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBxF;;;;;;OAMG;IACU,qBAAqB,CAEhC,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAe/B;;;;OAIG;IACU,iBAAiB,CAE5B,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAWnC,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,CAAsB;YAEzB,YAAY;CAY3B"}
+{"version":3,"file":"attestationClient.d.ts","sourceRoot":"","sources":["../../src/attestationClient.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,iCAAiC,EAClC,MAAM,mBAAmB,CAAC;AAa3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAI3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAQhF;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,mBAAmB;IACnE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAkC,SAAQ,gBAAgB;IACzE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iCAAiC;IACjF;;;OAGG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAwB,SAAQ,iCAAiC;IAChF;;;OAGG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,iCAAiC;CAAG;AAE9E;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB;IAC5B;;;;;;;;;;;;;;OAcG;gBACgB,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,wBAAwB;IAEvE;;;;;;;;;;;;;;;;;;OAkBG;gBAED,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,CAAC,EAAE,wBAAwB;IAmCpC;;;;;;;;;;;OAWG;IACU,iBAAiB,CAC5B,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,EAClC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAqElD;;;;;;;;OAQG;IACU,gBAAgB,CAC3B,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAoElD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACU,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBxF;;;;;;OAMG;IACU,qBAAqB,CAEhC,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAe/B;;;;OAIG;IACU,iBAAiB,CAE5B,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAWnC,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,CAAsB;YAEzB,YAAY;CAY3B"}

package/dist/commonjs/attestationClient.js

@@ -170,7 +170,7 @@ class AttestationClient {
      * @example
      * For example, the initial call for a TPM attestation operation is:
      *
-     * ```js
+     * ```snippet:AttestationClient_AttestTpm
      * const encodedPayload = JSON.stringify({ payload: { type: "aikcert" } });
      * const result = await client.attestTpm(encodedPayload);
      * ```

package/dist/commonjs/attestationClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"attestationClient.js","sourceRoot":"","sources":["../../src/attestationClient.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;;AAElC,uEAAiE;AAajE,0DAA4D;AAE5D,2CAAqC;AAErC,+EAAyD;AAGzD,4EAA4E;AAE5E,qEAA+D;AAE/D,gDAAqD;AAErD,6CAA+D;AAC/D,wEAAgF;AAChF,wEAAgF;AAChF,sEAAoE;AACpE,iDAAwD;AACxD,uDAAuD;AAmGvD;;;;;;;;;;GAUG;AACH,MAAa,iBAAiB;IA4C5B,YACE,QAAgB,EAChB,oBAAiE,EACjE,gBAA0C,EAAE;QAE5C,IAAI,gBAAgB,GAAyB,SAAS,CAAC;QACvD,IAAI,UAAU,GAAgC,SAAS,CAAC;QACxD,IAAI,OAAiC,CAAC;QAEtC,IAAI,oBAAoB,IAAI,IAAA,6BAAiB,EAAC,oBAAoB,CAAC,EAAE,CAAC;YACpE,UAAU,GAAG,oBAAoB,CAAC;YAClC,gBAAgB,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACzD,OAAO,GAAG,aAAa,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,oBAAoB,IAAI,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,uBAAuB,mCACxB,OAAO,GACP;YACD,gBAAgB,EAAE,gBAAgB;YAClC,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE;gBACd,MAAM,EAAE,kBAAM,CAAC,IAAI;gBACnB,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;aACpE;SACF,CACF,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,oCAAe,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,iBAAiB,CAC5B,MAAkC,EAClC,UAAoC,EAAE;QAEtC,OAAO,0BAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YAEtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAC1E;gBACE,MAAM,EAAE,MAAM,IAAA,+BAAmB,EAAC,MAAM,CAAC;gBACzC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,sCAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,IAAA,kDAAyB,EAC9B,KAAK,EACL,IAAA,sDAA+B,EAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,gBAAgB,CAC3B,KAAiC,EACjC,UAAmC,EAAE;QAErC,OAAO,0BAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YACtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CACzE;gBACE,KAAK,EAAE,MAAM,IAAA,+BAAmB,EAAC,KAAK,CAAC;gBACvC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,sCAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,IAAA,kDAAyB,EAC9B,KAAK,EACL,IAAA,sDAA+B,EAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACI,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,UAA4B,EAAE;QACpE,OAAO,0BAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CACvD,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,OAAO,CAAC,EAAE,EAChC,cAAc,CACf,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,IAAA,uBAAa,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,qBAAqB;IAChC,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,0BAAa,CAAC,QAAQ,CAC3B,yCAAyC,EACzC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACvF,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;YACjD,MAAA,mBAAmB,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5C,OAAO,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,iBAAiB;IAC5B,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,0BAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC7E,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAMO,KAAK,CAAC,YAAY;;QACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;QACjD,MAAA,IAAI,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAzVD,8CAyVC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { GeneratedClient } from \"./generated/generatedClient.js\";\n\nimport type {\n  AttestationResult,\n  AttestationSigner,\n  AttestationTokenValidationOptions,\n} from \"./models/index.js\";\n\nimport type {\n  GeneratedAttestationResult,\n  InitTimeData,\n  RuntimeData,\n} from \"./generated/models/index.js\";\nimport { KnownDataType } from \"./generated/models/index.js\";\n\nimport { logger } from \"./logger.js\";\nimport type { GeneratedClientOptionalParams } from \"./generated/models/index.js\";\nimport * as Mappers from \"./generated/models/mappers.js\";\n\nimport type { AttestationResponse } from \"./models/attestationResponse.js\";\nimport { createAttestationResponse } from \"./models/attestationResponse.js\";\n\nimport { TypeDeserializer } from \"./utils/typeDeserializer.js\";\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport { isTokenCredential } from \"@azure/core-auth\";\nimport type { CommonClientOptions, OperationOptions } from \"@azure/core-client\";\nimport { bytesToString, stringToBytes } from \"./utils/utf8.js\";\nimport { _attestationResultFromGenerated } from \"./models/attestationResult.js\";\nimport { _attestationSignerFromGenerated } from \"./models/attestationSigner.js\";\nimport { AttestationTokenImpl } from \"./models/attestationToken.js\";\nimport { Uint8ArrayFromInput } from \"./utils/buffer.js\";\nimport { tracingClient } from \"./generated/tracing.js\";\n\n/**\n * Attestation Client Construction Options.\n */\nexport interface AttestationClientOptions extends CommonClientOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Operation options for the Attestation Client operations.\n */\nexport interface AttestationClientOperationOptions extends OperationOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service for the individual operation.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Optional parameters for the AttestOpenEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestOpenEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Optional parameters for the AttestSgxEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestSgxEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Operation options for the AttestTpm API.\n */\nexport interface AttestTpmOptions extends AttestationClientOperationOptions {}\n\n/**\n * Attestation Client class.\n *\n * The AttestationClient class enables access to the Attestation related APIs:\n *\n * - getOpenIdMetadata\n * - getAttestationSigners\n * - attestSgxEnclave\n * - attestOpenEnclave\n * - attestTpm\n */\nexport class AttestationClient {\n  /**\n   * Creates an instance of AttestationClient.\n   *\n   * Example usage:\n   * ```ts\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const client = new AttestationClient(\n   *    \"<service endpoint>\"\n   * );\n   * ```\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param options - Options used to configure the Attestation Client.\n   *\n   */\n  public constructor(endpoint: string, options?: AttestationClientOptions);\n\n  /**\n   * Creates an instance of AttestationClient with options and credentials.\n   *\n   * Example usage:\n   * ```ts\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const client = new AttestationClient(\n   *    \"<service endpoint>\",\n   *    new TokenCredential(\"<>\"),\n   *    { tokenValidationOptions: { validateToken: false } }\n   * );\n   * ```\n   *\n   * Note that credentials are required to call the `attestTpm` API.\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param credentials - Credentials used to configure the attestation client.\n   *\n   */\n  public constructor(\n    endpoint: string,\n    credentials: TokenCredential,\n    options?: AttestationClientOptions,\n  );\n  public constructor(\n    endpoint: string,\n    credentialsOrOptions?: TokenCredential | AttestationClientOptions,\n    clientOptions: AttestationClientOptions = {},\n  ) {\n    let credentialScopes: string[] | undefined = undefined;\n    let credential: TokenCredential | undefined = undefined;\n    let options: AttestationClientOptions;\n\n    if (credentialsOrOptions && isTokenCredential(credentialsOrOptions)) {\n      credential = credentialsOrOptions;\n      credentialScopes = [\"https://attest.azure.net/.default\"];\n      options = clientOptions;\n    } else {\n      options = credentialsOrOptions || {};\n    }\n\n    const internalPipelineOptions: GeneratedClientOptionalParams = {\n      ...options,\n      ...{\n        credentialScopes: credentialScopes,\n        credential: credential,\n        loggingOptions: {\n          logger: logger.info,\n          allowedHeaderNames: [\"x-ms-request-id\", \"x-ms-maa-service-version\"],\n        },\n      },\n    };\n\n    this._client = new GeneratedClient(endpoint, internalPipelineOptions);\n    this._validationOptions = options.validationOptions;\n  }\n\n  /** Attests an OpenEnclave report generated from an SGX Enclave using the OpenEnclave SDK.\n   *\n   * @param report - An OpenEnclave report generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   *\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   * @throws {@link Error} if the `initTimeJson` option is provided and the value of `initTimeJson` is not JSON.\n   * @throws {@link Error} if the `runTimeJson` option is provided and the value of `runTimeJson` is not JSON.\n   */\n  public async attestOpenEnclave(\n    report: Uint8Array | Buffer | Blob,\n    options: AttestOpenEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestOpenEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestOpenEnclave(\n          {\n            report: await Uint8ArrayFromInput(report),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attests a quote generated from SGX Enclave using the Intel SDK.\n   *\n   * @param quote - An SGX quote generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   */\n  public async attestSgxEnclave(\n    quote: Uint8Array | Buffer | Blob,\n    options: AttestSgxEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestSgxEnclave(\n          {\n            quote: await Uint8ArrayFromInput(quote),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attest a TPM based enclave.\n\n   * See the  {@link https://learn.microsoft.com/en-us/azure/attestation/virtualization-based-security-protocol | TPM Attestation Protocol Reference} for more information.\n   * \n   * @param request - Incoming request to send to the TPM attestation service, Utf8 encoded.\n   * @param options - Pipeline options for TPM attestation request.\n   * @returns A structure containing the response from the TPM attestation, Utf8 encoded.\n   * \n   * @remarks\n   * \n   * The incoming requests to the TPM attestation API are stringified JSON objects.\n   * \n   * @example\n   * For example, the initial call for a TPM attestation operation is:\n   * \n   * ```js\n   * const encodedPayload = JSON.stringify({ payload: { type: \"aikcert\" } });\n   * const result = await client.attestTpm(encodedPayload);\n   * ```\n   * \n   * where stringToBytes converts the string to UTF8.\n   * \n   * Note that the attestTpm requires an attestation client which is configured with\n   * authentication credentials.\n   * \n   */\n  public async attestTpm(request: string, options: AttestTpmOptions = {}): Promise<string> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        const response = await this._client.attestation.attestTpm(\n          { data: stringToBytes(request) },\n          updatedOptions,\n        );\n        if (response.data) {\n          return bytesToString(response.data);\n        } else {\n          throw Error(\"Internal error - response data cannot be undefined.\");\n        }\n      },\n    );\n  }\n\n  /**\n   * Returns the list of attestation signers which can be used to sign attestation\n   * service tokens.\n   *\n   * @param options - Client operation options.\n   * @returns the set of AttestationSigners which may be used to sign attestation tokens.\n   */\n  public async getAttestationSigners(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<AttestationSigner[]> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getAttestationSigners\",\n      options,\n      async (updatedOptions) => {\n        const signingCertificates = await this._client.signingCertificates.get(updatedOptions);\n        const signers: AttestationSigner[] = new Array();\n        signingCertificates.keys?.forEach((element) => {\n          signers.push(_attestationSignerFromGenerated(element));\n        });\n        return signers;\n      },\n    );\n  }\n\n  /**\n   * Returns the OpenID Metadata discovery document for the attestation service instance.\n   * @param options - Client operation options.\n   * @returns The OpenID metadata discovery document for the attestation service.\n   */\n  public async getOpenIdMetadata(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<Record<string, unknown>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getOpenIdMetadata\",\n      options,\n      async (updatedOptions) => {\n        const configs = await this._client.metadataConfiguration.get(updatedOptions);\n        return configs;\n      },\n    );\n  }\n\n  private _client: GeneratedClient;\n  private _validationOptions?: AttestationTokenValidationOptions;\n  private _signers?: AttestationSigner[];\n\n  private async _signingKeys(): Promise<AttestationSigner[]> {\n    if (this._signers !== undefined) {\n      return this._signers;\n    }\n    const jwks = await this._client.signingCertificates.get();\n    const signers: AttestationSigner[] = new Array();\n    jwks.keys?.forEach((element) => {\n      signers.push(_attestationSignerFromGenerated(element));\n    });\n    this._signers = signers;\n    return this._signers;\n  }\n}\n"]}
+{"version":3,"file":"attestationClient.js","sourceRoot":"","sources":["../../src/attestationClient.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;;AAElC,uEAAiE;AAajE,0DAA4D;AAE5D,2CAAqC;AAErC,+EAAyD;AAGzD,4EAA4E;AAE5E,qEAA+D;AAE/D,gDAAqD;AAErD,6CAA+D;AAC/D,wEAAgF;AAChF,wEAAgF;AAChF,sEAAoE;AACpE,iDAAwD;AACxD,uDAAuD;AAmGvD;;;;;;;;;;GAUG;AACH,MAAa,iBAAiB;IA0C5B,YACE,QAAgB,EAChB,oBAAiE,EACjE,gBAA0C,EAAE;QAE5C,IAAI,gBAAgB,GAAyB,SAAS,CAAC;QACvD,IAAI,UAAU,GAAgC,SAAS,CAAC;QACxD,IAAI,OAAiC,CAAC;QAEtC,IAAI,oBAAoB,IAAI,IAAA,6BAAiB,EAAC,oBAAoB,CAAC,EAAE,CAAC;YACpE,UAAU,GAAG,oBAAoB,CAAC;YAClC,gBAAgB,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACzD,OAAO,GAAG,aAAa,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,oBAAoB,IAAI,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,uBAAuB,mCACxB,OAAO,GACP;YACD,gBAAgB,EAAE,gBAAgB;YAClC,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE;gBACd,MAAM,EAAE,kBAAM,CAAC,IAAI;gBACnB,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;aACpE;SACF,CACF,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,oCAAe,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,iBAAiB,CAC5B,MAAkC,EAClC,UAAoC,EAAE;QAEtC,OAAO,0BAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YAEtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAC1E;gBACE,MAAM,EAAE,MAAM,IAAA,+BAAmB,EAAC,MAAM,CAAC;gBACzC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,sCAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,IAAA,kDAAyB,EAC9B,KAAK,EACL,IAAA,sDAA+B,EAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,gBAAgB,CAC3B,KAAiC,EACjC,UAAmC,EAAE;QAErC,OAAO,0BAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YACtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CACzE;gBACE,KAAK,EAAE,MAAM,IAAA,+BAAmB,EAAC,KAAK,CAAC;gBACvC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,sCAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,IAAA,kDAAyB,EAC9B,KAAK,EACL,IAAA,sDAA+B,EAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACI,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,UAA4B,EAAE;QACpE,OAAO,0BAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CACvD,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,OAAO,CAAC,EAAE,EAChC,cAAc,CACf,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,IAAA,uBAAa,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,qBAAqB;IAChC,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,0BAAa,CAAC,QAAQ,CAC3B,yCAAyC,EACzC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACvF,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;YACjD,MAAA,mBAAmB,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5C,OAAO,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,iBAAiB;IAC5B,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,0BAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC7E,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAMO,KAAK,CAAC,YAAY;;QACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;QACjD,MAAA,IAAI,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAvVD,8CAuVC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { GeneratedClient } from \"./generated/generatedClient.js\";\n\nimport type {\n  AttestationResult,\n  AttestationSigner,\n  AttestationTokenValidationOptions,\n} from \"./models/index.js\";\n\nimport type {\n  GeneratedAttestationResult,\n  InitTimeData,\n  RuntimeData,\n} from \"./generated/models/index.js\";\nimport { KnownDataType } from \"./generated/models/index.js\";\n\nimport { logger } from \"./logger.js\";\nimport type { GeneratedClientOptionalParams } from \"./generated/models/index.js\";\nimport * as Mappers from \"./generated/models/mappers.js\";\n\nimport type { AttestationResponse } from \"./models/attestationResponse.js\";\nimport { createAttestationResponse } from \"./models/attestationResponse.js\";\n\nimport { TypeDeserializer } from \"./utils/typeDeserializer.js\";\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport { isTokenCredential } from \"@azure/core-auth\";\nimport type { CommonClientOptions, OperationOptions } from \"@azure/core-client\";\nimport { bytesToString, stringToBytes } from \"./utils/utf8.js\";\nimport { _attestationResultFromGenerated } from \"./models/attestationResult.js\";\nimport { _attestationSignerFromGenerated } from \"./models/attestationSigner.js\";\nimport { AttestationTokenImpl } from \"./models/attestationToken.js\";\nimport { Uint8ArrayFromInput } from \"./utils/buffer.js\";\nimport { tracingClient } from \"./generated/tracing.js\";\n\n/**\n * Attestation Client Construction Options.\n */\nexport interface AttestationClientOptions extends CommonClientOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Operation options for the Attestation Client operations.\n */\nexport interface AttestationClientOperationOptions extends OperationOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service for the individual operation.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Optional parameters for the AttestOpenEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestOpenEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Optional parameters for the AttestSgxEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestSgxEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Operation options for the AttestTpm API.\n */\nexport interface AttestTpmOptions extends AttestationClientOperationOptions {}\n\n/**\n * Attestation Client class.\n *\n * The AttestationClient class enables access to the Attestation related APIs:\n *\n * - getOpenIdMetadata\n * - getAttestationSigners\n * - attestSgxEnclave\n * - attestOpenEnclave\n * - attestTpm\n */\nexport class AttestationClient {\n  /**\n   * Creates an instance of AttestationClient.\n   *\n   * Example usage:\n   * ```ts snippet:Attestation_Constructor_NoCreds\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const endpoint = \"https://<attestation-instance>.<region>.attest.azure.net\";\n   * const client = new AttestationClient(endpoint);\n   * ```\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param options - Options used to configure the Attestation Client.\n   *\n   */\n  public constructor(endpoint: string, options?: AttestationClientOptions);\n\n  /**\n   * Creates an instance of AttestationClient with options and credentials.\n   *\n   * Example usage:\n   * ```ts snippet:Attestation_Constructor_Creds\n   * import { DefaultAzureCredential } from \"@azure/identity\";\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const endpoint = \"https://<attestation-instance>.<region>.attest.azure.net\";\n   * const credentials = new DefaultAzureCredential();\n   * const client = new AttestationClient(endpoint, credentials);\n   * ```\n   *\n   * Note that credentials are required to call the `attestTpm` API.\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param credentials - Credentials used to configure the attestation client.\n   *\n   */\n  public constructor(\n    endpoint: string,\n    credentials: TokenCredential,\n    options?: AttestationClientOptions,\n  );\n  public constructor(\n    endpoint: string,\n    credentialsOrOptions?: TokenCredential | AttestationClientOptions,\n    clientOptions: AttestationClientOptions = {},\n  ) {\n    let credentialScopes: string[] | undefined = undefined;\n    let credential: TokenCredential | undefined = undefined;\n    let options: AttestationClientOptions;\n\n    if (credentialsOrOptions && isTokenCredential(credentialsOrOptions)) {\n      credential = credentialsOrOptions;\n      credentialScopes = [\"https://attest.azure.net/.default\"];\n      options = clientOptions;\n    } else {\n      options = credentialsOrOptions || {};\n    }\n\n    const internalPipelineOptions: GeneratedClientOptionalParams = {\n      ...options,\n      ...{\n        credentialScopes: credentialScopes,\n        credential: credential,\n        loggingOptions: {\n          logger: logger.info,\n          allowedHeaderNames: [\"x-ms-request-id\", \"x-ms-maa-service-version\"],\n        },\n      },\n    };\n\n    this._client = new GeneratedClient(endpoint, internalPipelineOptions);\n    this._validationOptions = options.validationOptions;\n  }\n\n  /** Attests an OpenEnclave report generated from an SGX Enclave using the OpenEnclave SDK.\n   *\n   * @param report - An OpenEnclave report generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   *\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   * @throws {@link Error} if the `initTimeJson` option is provided and the value of `initTimeJson` is not JSON.\n   * @throws {@link Error} if the `runTimeJson` option is provided and the value of `runTimeJson` is not JSON.\n   */\n  public async attestOpenEnclave(\n    report: Uint8Array | Buffer | Blob,\n    options: AttestOpenEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestOpenEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestOpenEnclave(\n          {\n            report: await Uint8ArrayFromInput(report),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attests a quote generated from SGX Enclave using the Intel SDK.\n   *\n   * @param quote - An SGX quote generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   */\n  public async attestSgxEnclave(\n    quote: Uint8Array | Buffer | Blob,\n    options: AttestSgxEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestSgxEnclave(\n          {\n            quote: await Uint8ArrayFromInput(quote),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attest a TPM based enclave.\n\n   * See the  {@link https://learn.microsoft.com/en-us/azure/attestation/virtualization-based-security-protocol | TPM Attestation Protocol Reference} for more information.\n   * \n   * @param request - Incoming request to send to the TPM attestation service, Utf8 encoded.\n   * @param options - Pipeline options for TPM attestation request.\n   * @returns A structure containing the response from the TPM attestation, Utf8 encoded.\n   * \n   * @remarks\n   * \n   * The incoming requests to the TPM attestation API are stringified JSON objects.\n   * \n   * @example\n   * For example, the initial call for a TPM attestation operation is:\n   * \n   * ```snippet:AttestationClient_AttestTpm\n   * const encodedPayload = JSON.stringify({ payload: { type: \"aikcert\" } });\n   * const result = await client.attestTpm(encodedPayload);\n   * ```\n   * \n   * where stringToBytes converts the string to UTF8.\n   * \n   * Note that the attestTpm requires an attestation client which is configured with\n   * authentication credentials.\n   * \n   */\n  public async attestTpm(request: string, options: AttestTpmOptions = {}): Promise<string> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        const response = await this._client.attestation.attestTpm(\n          { data: stringToBytes(request) },\n          updatedOptions,\n        );\n        if (response.data) {\n          return bytesToString(response.data);\n        } else {\n          throw Error(\"Internal error - response data cannot be undefined.\");\n        }\n      },\n    );\n  }\n\n  /**\n   * Returns the list of attestation signers which can be used to sign attestation\n   * service tokens.\n   *\n   * @param options - Client operation options.\n   * @returns the set of AttestationSigners which may be used to sign attestation tokens.\n   */\n  public async getAttestationSigners(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<AttestationSigner[]> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getAttestationSigners\",\n      options,\n      async (updatedOptions) => {\n        const signingCertificates = await this._client.signingCertificates.get(updatedOptions);\n        const signers: AttestationSigner[] = new Array();\n        signingCertificates.keys?.forEach((element) => {\n          signers.push(_attestationSignerFromGenerated(element));\n        });\n        return signers;\n      },\n    );\n  }\n\n  /**\n   * Returns the OpenID Metadata discovery document for the attestation service instance.\n   * @param options - Client operation options.\n   * @returns The OpenID metadata discovery document for the attestation service.\n   */\n  public async getOpenIdMetadata(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<Record<string, unknown>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getOpenIdMetadata\",\n      options,\n      async (updatedOptions) => {\n        const configs = await this._client.metadataConfiguration.get(updatedOptions);\n        return configs;\n      },\n    );\n  }\n\n  private _client: GeneratedClient;\n  private _validationOptions?: AttestationTokenValidationOptions;\n  private _signers?: AttestationSigner[];\n\n  private async _signingKeys(): Promise<AttestationSigner[]> {\n    if (this._signers !== undefined) {\n      return this._signers;\n    }\n    const jwks = await this._client.signingCertificates.get();\n    const signers: AttestationSigner[] = new Array();\n    jwks.keys?.forEach((element) => {\n      signers.push(_attestationSignerFromGenerated(element));\n    });\n    this._signers = signers;\n    return this._signers;\n  }\n}\n"]}

package/dist/commonjs/tsdoc-metadata.json

@@ -5,7 +5,7 @@
   "toolPackages": [
     {
       "packageName": "@microsoft/api-extractor",
-      "packageVersion": "7.48.1"
+      "packageVersion": "7.49.1"
     }
   ]
 }

package/dist/esm/attestationAdministrationClient.d.ts

@@ -63,13 +63,12 @@ export declare class AttestationAdministrationClient {
      * Creates an instance of AttestationAdministrationClient.
      *
      * Example usage:
-     * ```ts
+     * ```ts snippet:AttestationAdministrationClient_Constructor
      * import { AttestationAdministrationClient } from "@azure/attestation";
+     * import { DefaultAzureCredential } from "@azure/identity";
      *
-     * const client = new AttestationAdministrationClient(
-     *    "<service endpoint>",
-     *    new TokenCredential("<>")
-     * );
+     * const endpoint = "https://<attestation-instance>.<region>.attest.azure.net";
+     * const client = new AttestationAdministrationClient(endpoint, new DefaultAzureCredential());
      * ```
      *
      * @param endpoint - The attestation instance endpoint, for example https://mytenant.attest.azure.net.

package/dist/esm/attestationAdministrationClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attestationAdministrationClient.d.ts","sourceRoot":"","sources":["../../src/attestationAdministrationClient.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EACjB,iCAAiC,EACjC,eAAe,EACf,oCAAoC,EACpC,YAAY,EACb,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAcxD;;GAEG;AACH,MAAM,WAAW,sCAAuC,SAAQ,mBAAmB;IACjF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,+CAAgD,SAAQ,gBAAgB;IACvF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,qDACf,SAAQ,+CAA+C;IACvD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gEACf,SAAQ,+CAA+C;CAAG;AAE5D;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAC1C;;;;;;;;;;;;;;;;OAgBG;gBAGD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sCAA2C;IAmBtD;;;;;;;;;OASG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IA6CvC;;;;;;;;;;;;;;;;;;OAkBG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAqD7C;;;;;;;;;;;;;;;;;;OAkBG;IAEU,WAAW,CACtB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAoD7C;;;;;;;OAOG;IACU,+BAA+B,CAC1C,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAuCpD;;;;;;;;;;;;;;;;;OAiBG;IACU,8BAA8B,CACzC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;IAwErE,OAAO,CAAC,sBAAsB;IAmB9B;;;;;;;;;;;;;;;;OAgBG;IACU,iCAAiC,CAC5C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;YAwEvD,WAAW;IAazB,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,QAAQ,CAAC,CAAsB;IACvC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;CAChE"}
+{"version":3,"file":"attestationAdministrationClient.d.ts","sourceRoot":"","sources":["../../src/attestationAdministrationClient.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EACjB,iCAAiC,EACjC,eAAe,EACf,oCAAoC,EACpC,YAAY,EACb,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAcxD;;GAEG;AACH,MAAM,WAAW,sCAAuC,SAAQ,mBAAmB;IACjF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,+CAAgD,SAAQ,gBAAgB;IACvF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,qDACf,SAAQ,+CAA+C;IACvD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gEACf,SAAQ,+CAA+C;CAAG;AAE5D;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAC1C;;;;;;;;;;;;;;;OAeG;gBAGD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sCAA2C;IAmBtD;;;;;;;;;OASG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IA6CvC;;;;;;;;;;;;;;;;;;OAkBG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAqD7C;;;;;;;;;;;;;;;;;;OAkBG;IAEU,WAAW,CACtB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAoD7C;;;;;;;OAOG;IACU,+BAA+B,CAC1C,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAuCpD;;;;;;;;;;;;;;;;;OAiBG;IACU,8BAA8B,CACzC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;IAwErE,OAAO,CAAC,sBAAsB;IAmB9B;;;;;;;;;;;;;;;;OAgBG;IACU,iCAAiC,CAC5C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;YAwEvD,WAAW;IAazB,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,QAAQ,CAAC,CAAsB;IACvC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;CAChE"}

package/dist/esm/attestationAdministrationClient.js

@@ -33,13 +33,12 @@ export class AttestationAdministrationClient {
      * Creates an instance of AttestationAdministrationClient.
      *
      * Example usage:
-     * ```ts
+     * ```ts snippet:AttestationAdministrationClient_Constructor
      * import { AttestationAdministrationClient } from "@azure/attestation";
+     * import { DefaultAzureCredential } from "@azure/identity";
      *
-     * const client = new AttestationAdministrationClient(
-     *    "<service endpoint>",
-     *    new TokenCredential("<>")
-     * );
+     * const endpoint = "https://<attestation-instance>.<region>.attest.azure.net";
+     * const client = new AttestationAdministrationClient(endpoint, new DefaultAzureCredential());
      * ```
      *
      * @param endpoint - The attestation instance endpoint, for example https://mytenant.attest.azure.net.