// Copyright 2021 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef COMPONENTS_ENTERPRISE_DEVICE_TRUST_CORE_ATTESTATION_ATTESTATION_SERVICE_H_
#define COMPONENTS_ENTERPRISE_DEVICE_TRUST_CORE_ATTESTATION_ATTESTATION_SERVICE_H_

#include <memory>
#include <set>
#include <string>

#include "base/functional/callback.h"
#include "base/values.h"
#include "components/enterprise/device_trust/core/attestation/signals_type.h"
#include "components/enterprise/device_trust/core/common_types.h"

namespace enterprise_connectors {

struct AttestationResponse;

// Interface for classes in charge of building challenge-responses to enable
// handshake between Chrome, an IdP and Verified Access.
class AttestationService {
 public:
  using AttestationCallback =
      base::OnceCallback<void(const AttestationResponse&)>;

  virtual ~AttestationService() = default;

  // Uses the `challenge` that comes from Verified Access to build a proper
  // response according to the policy `levels`. This response will contain the
  // `signals` and at times a signature representing the device identity. This
  // is then returned via the given `callback`. If the challenge does not come
  // from VA, runs `callback` with an empty string. `challenge` represents a
  // serialized SignedData proto.
  virtual void BuildChallengeResponseForVAChallenge(
      const std::string& challenge,
      base::DictValue signals,
      const std::set<DTCPolicyLevel>& levels,
      AttestationCallback callback) = 0;
};

}  // namespace enterprise_connectors

#endif  // COMPONENTS_ENTERPRISE_DEVICE_TRUST_CORE_ATTESTATION_ATTESTATION_SERVICE_H_