mhome-core-api 1.15.1

//! Offline Client–Host authorization. No Space, cloud session or transport ownership.
use serde::{Deserialize, Serialize};
use std::collections::{BTreeMap, BTreeSet};

pub const KEY_REFRESH_INTERVAL_SECONDS: u64 = 24 * 60 * 60;
pub const REQUEST_WINDOW_SECONDS: u64 = 60;
pub const ENROLLMENT_PROOF_TTL_SECONDS: u64 = 300;
pub const PROTOCOL: &str = "meow-host-auth-v1";

/// Public P-256 point; x/y are exactly 32 bytes, base64url without padding.
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct PublicKey {
    pub x: String,
    pub y: String,
}

/// Verification-only permits an overlap. Disabled never accepts proofs or bindings.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase")]
pub enum SigningKeyStatus {
    Active,
    VerifyOnly,
    Disabled,
}

#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct SigningKey {
    pub kid: String,
    pub status: SigningKeyStatus,
    /// RS256 JWK modulus and exponent, base64url without padding.
    pub n: String,
    pub e: String,
}

/// A complete authoritative snapshot from the configured HTTPS issuer.
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct SigningKeySet {
    pub issuer: String,
    pub version: u64,
    pub keys: Vec<SigningKey>,
}

impl SigningKeySet {
    pub fn validate_update(
        &self,
        issuer: &str,
        previous: Option<&Self>,
    ) -> Result<(), &'static str> {
        use base64::{engine::general_purpose::URL_SAFE_NO_PAD, Engine};
        if self.issuer != issuer || self.version == 0 || self.version > 9_007_199_254_740_991 {
            return Err("invalid issuer or key set version");
        }
        if self.keys.is_empty() || self.keys.len() > 128 {
            return Err("invalid key set size");
        }
        let mut kids = BTreeSet::new();
        let mut active = 0;
        for key in &self.keys {
            if key.kid.is_empty() || key.kid.len() > 128 || !kids.insert(&key.kid) {
                return Err("invalid or duplicate signing key ID");
            }
            let n = URL_SAFE_NO_PAD
                .decode(&key.n)
                .map_err(|_| "invalid RSA modulus")?;
            let e = URL_SAFE_NO_PAD
                .decode(&key.e)
                .map_err(|_| "invalid RSA exponent")?;
            if !(256..=512).contains(&n.len())
                || n.first().is_some_and(|v| *v < 128)
                || e != [1, 0, 1]
            {
                return Err("unsupported RSA public key");
            }
            active += usize::from(key.status == SigningKeyStatus::Active);
        }
        if active != 1 {
            return Err("exactly one active signing key is required");
        }
        if let Some(old) = previous {
            if old.issuer != self.issuer || self.version < old.version {
                return Err("key set rollback");
            }
            let index: BTreeMap<_, _> = old.keys.iter().map(|k| (&k.kid, k)).collect();
            for key in &self.keys {
                if let Some(prior) = index.get(&key.kid) {
                    if key.n != prior.n || key.e != prior.e {
                        return Err("signing key ID was reused");
                    }
                    if prior.status == SigningKeyStatus::Disabled
                        && key.status != SigningKeyStatus::Disabled
                    {
                        return Err("disabled signing key was reactivated");
                    }
                }
            }
            let next: BTreeMap<_, _> = self.keys.iter().map(|k| (&k.kid, k)).collect();
            if self.version == old.version && next != index {
                return Err("conflicting key set version");
            }
            // Keep tombstones: an offline Host must learn emergency disablement too.
            if old
                .keys
                .iter()
                .any(|k| k.status == SigningKeyStatus::Disabled && !next.contains_key(&k.kid))
            {
                return Err("disabled signing key tombstone was removed");
            }
        }
        Ok(())
    }

    pub fn permits_binding(&self, kid: &str) -> bool {
        self.keys
            .iter()
            .any(|key| key.kid == kid && key.status != SigningKeyStatus::Disabled)
    }
}

#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "SCREAMING_SNAKE_CASE")]
pub enum ErrorCode {
    HostReauthRequired,
    HostEnrollmentRequired,
    HostUserNotAuthorized,
    HostContextChanged,
    HostReplayDetected,
    HostAuthUnavailable,
    HostInvalidProof,
}

/// Only authenticated responses may drive refresh/retry. Rejections precede dispatch.
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct AuthError {
    pub code: ErrorCode,
    pub host_id: String,
    pub boot_id: String,
    pub request_id: String,
    pub key_set_version: u64,
}

#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct ContextRequest {
    pub probe_id: String,
}

#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct HostContext {
    pub protocol: String,
    pub host_id: String,
    pub boot_id: String,
    pub probe_id: String,
    pub server_time: u64,
}

#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct EnrollmentRequest {
    pub proof: String,
    pub client_signature: String,
}

#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct EnrollmentChallengeRequest {
    pub issuer: String,
    pub user_id: String,
    pub client_public_key: PublicKey,
    pub probe_id: String,
}

#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct EnrollmentChallenge {
    pub host_id: String,
    pub boot_id: String,
    pub issuer: String,
    pub user_id: String,
    pub client_public_key: PublicKey,
    pub probe_id: String,
    pub challenge: String,
    pub expires_at: u64,
}

#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct ClientBinding {
    pub issuer: String,
    pub user_id: String,
    pub client_public_key: PublicKey,
    pub enrollment_kid: String,
}

/// Cloud claims are short-lived evidence for registration, never LAN bearer credentials.
#[derive(Clone, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct Grant {
    pub iss: String,
    pub sub: String,
    pub aud: String,
    pub jti: String,
    pub iat: u64,
    pub exp: u64,
    pub host_id: String,
    pub host_public_key: PublicKey,
    pub client_public_key: Option<PublicKey>,
    pub challenge: String,
    pub boot_id: Option<String>,
}
#[derive(Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct LocalAuthorization {
    pub host_id: String,
    pub host_name: String,
    pub host_public_key: PublicKey,
    pub transaction_id: String,
    pub expires_at: u64,
}
#[derive(Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct Possession {
    pub proof_digest: String,
}
#[derive(Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct AuthorizationReceipt {
    pub proof: String,
    pub host_id: String,
    pub user_id: String,
}