| | | 1 | | using System.Security.Cryptography; |
| | | 2 | | using ProjectTemplate.Infrastructure.Data.Entities; |
| | | 3 | | |
| | | 4 | | namespace ProjectTemplate.Infrastructure.Data.Auditing; |
| | | 5 | | |
| | | 6 | | /// <summary> |
| | | 7 | | /// Verifies retained application audit records against a canonical mutation manifest digest. |
| | | 8 | | /// </summary> |
| | 22 | 9 | | public sealed class ApplicationMutationManifestVerifier( |
| | 22 | 10 | | IApplicationMutationManifestBuilder manifestBuilder, |
| | 22 | 11 | | IApplicationMutationManifestHasher manifestHasher) |
| | | 12 | | : IApplicationMutationManifestVerifier |
| | | 13 | | { |
| | 22 | 14 | | private readonly IApplicationMutationManifestBuilder _manifestBuilder = |
| | 22 | 15 | | manifestBuilder ?? throw new ArgumentNullException(nameof(manifestBuilder)); |
| | 22 | 16 | | private readonly IApplicationMutationManifestHasher _manifestHasher = |
| | 22 | 17 | | manifestHasher ?? throw new ArgumentNullException(nameof(manifestHasher)); |
| | | 18 | | |
| | | 19 | | /// <inheritdoc /> |
| | | 20 | | public bool Verify( |
| | | 21 | | ApplicationMutationAuditReceipt receipt, |
| | | 22 | | IReadOnlyCollection<AuditRecord> auditRecords) |
| | | 23 | | { |
| | 17 | 24 | | ArgumentNullException.ThrowIfNull(receipt); |
| | 17 | 25 | | ArgumentNullException.ThrowIfNull(auditRecords); |
| | | 26 | | |
| | 17 | 27 | | if (!string.Equals(receipt.MutationManifestAlgorithm, _manifestHasher.Algorithm, StringComparison.Ordinal) || |
| | 17 | 28 | | auditRecords.Count != receipt.AuditRecordCount || |
| | 17 | 29 | | auditRecords.Any(record => !string.Equals(record.MutationBatchId, receipt.MutationBatchId, StringComparison. |
| | | 30 | | { |
| | 3 | 31 | | return false; |
| | | 32 | | } |
| | | 33 | | |
| | 14 | 34 | | ApplicationMutationManifest manifest = _manifestBuilder.Build(auditRecords); |
| | 14 | 35 | | string actualHash = _manifestHasher.ComputeHash(manifest); |
| | | 36 | | |
| | | 37 | | byte[] expectedBytes; |
| | | 38 | | byte[] actualBytes; |
| | | 39 | | |
| | | 40 | | try |
| | | 41 | | { |
| | 14 | 42 | | expectedBytes = Convert.FromHexString(receipt.MutationManifestHash); |
| | 13 | 43 | | actualBytes = Convert.FromHexString(actualHash); |
| | 13 | 44 | | } |
| | 1 | 45 | | catch (FormatException) |
| | | 46 | | { |
| | 1 | 47 | | return false; |
| | | 48 | | } |
| | | 49 | | |
| | 13 | 50 | | return CryptographicOperations.FixedTimeEquals(expectedBytes, actualBytes); |
| | 1 | 51 | | } |
| | | 52 | | } |