| | | 1 | | namespace AsiBackbone.Signing.ManagedKey; |
| | | 2 | | |
| | | 3 | | /// <summary> |
| | | 4 | | /// Represents the result returned by a host-owned managed-key signing client. |
| | | 5 | | /// </summary> |
| | | 6 | | public sealed class ManagedKeySignResult |
| | | 7 | | { |
| | 21 | 8 | | private ManagedKeySignResult( |
| | 21 | 9 | | string signature, |
| | 21 | 10 | | string signatureAlgorithm, |
| | 21 | 11 | | string keyId, |
| | 21 | 12 | | string? keyVersion, |
| | 21 | 13 | | string? providerOperationId, |
| | 21 | 14 | | DateTimeOffset signedUtc, |
| | 21 | 15 | | IReadOnlyDictionary<string, string> metadata) |
| | | 16 | | { |
| | 21 | 17 | | ArgumentException.ThrowIfNullOrWhiteSpace(signature); |
| | 21 | 18 | | ArgumentException.ThrowIfNullOrWhiteSpace(signatureAlgorithm); |
| | 21 | 19 | | ArgumentException.ThrowIfNullOrWhiteSpace(keyId); |
| | | 20 | | |
| | 21 | 21 | | Signature = signature.Trim(); |
| | 21 | 22 | | SignatureAlgorithm = signatureAlgorithm.Trim(); |
| | 21 | 23 | | KeyId = keyId.Trim(); |
| | 21 | 24 | | KeyVersion = NormalizeOptional(keyVersion); |
| | 21 | 25 | | ProviderOperationId = NormalizeOptional(providerOperationId); |
| | 21 | 26 | | SignedUtc = signedUtc.ToUniversalTime(); |
| | 21 | 27 | | Metadata = metadata; |
| | 21 | 28 | | } |
| | | 29 | | |
| | | 30 | | /// <summary> |
| | | 31 | | /// Gets the provider-neutral encoded signature value or provider signature reference. |
| | | 32 | | /// </summary> |
| | | 33 | | public string Signature { get; } |
| | | 34 | | |
| | | 35 | | /// <summary> |
| | | 36 | | /// Gets the provider-neutral signature algorithm descriptor. |
| | | 37 | | /// </summary> |
| | | 38 | | public string SignatureAlgorithm { get; } |
| | | 39 | | |
| | | 40 | | /// <summary> |
| | | 41 | | /// Gets the managed key identifier or key URI reference used to sign. |
| | | 42 | | /// </summary> |
| | | 43 | | public string KeyId { get; } |
| | | 44 | | |
| | | 45 | | /// <summary> |
| | | 46 | | /// Gets the managed key version used to sign, when supplied by the provider. |
| | | 47 | | /// </summary> |
| | | 48 | | public string? KeyVersion { get; } |
| | | 49 | | |
| | | 50 | | /// <summary> |
| | | 51 | | /// Gets a safe provider operation identifier, when supplied. |
| | | 52 | | /// </summary> |
| | | 53 | | public string? ProviderOperationId { get; } |
| | | 54 | | |
| | | 55 | | /// <summary> |
| | | 56 | | /// Gets the UTC timestamp when the provider completed signing. |
| | | 57 | | /// </summary> |
| | | 58 | | public DateTimeOffset SignedUtc { get; } |
| | | 59 | | |
| | | 60 | | /// <summary> |
| | | 61 | | /// Gets minimized provider-neutral diagnostic metadata returned by the managed-key client. |
| | | 62 | | /// </summary> |
| | | 63 | | /// <remarks> |
| | | 64 | | /// Provider metadata is an untrusted input. Only documented provider-neutral diagnostic keys |
| | | 65 | | /// are retained, and key, value, count, and aggregate-size limits are applied before the |
| | | 66 | | /// metadata can reach signing or downstream audit records. |
| | | 67 | | /// </remarks> |
| | | 68 | | public IReadOnlyDictionary<string, string> Metadata { get; } |
| | | 69 | | |
| | | 70 | | /// <summary> |
| | | 71 | | /// Creates a successful managed-key sign result. |
| | | 72 | | /// </summary> |
| | | 73 | | public static ManagedKeySignResult Create( |
| | | 74 | | string signature, |
| | | 75 | | string signatureAlgorithm, |
| | | 76 | | string keyId, |
| | | 77 | | string? keyVersion, |
| | | 78 | | DateTimeOffset signedUtc, |
| | | 79 | | string? providerOperationId = null, |
| | | 80 | | IReadOnlyDictionary<string, string>? metadata = null) |
| | | 81 | | { |
| | 21 | 82 | | return new ManagedKeySignResult( |
| | 21 | 83 | | signature, |
| | 21 | 84 | | signatureAlgorithm, |
| | 21 | 85 | | keyId, |
| | 21 | 86 | | keyVersion, |
| | 21 | 87 | | providerOperationId, |
| | 21 | 88 | | signedUtc, |
| | 21 | 89 | | ManagedKeyProviderMetadataFilter.Filter(metadata)); |
| | | 90 | | } |
| | | 91 | | |
| | | 92 | | private static string? NormalizeOptional(string? value) |
| | | 93 | | { |
| | 42 | 94 | | return string.IsNullOrWhiteSpace(value) ? null : value.Trim(); |
| | | 95 | | } |
| | | 96 | | } |