access_contoller

type AccessControlProvider interface {

	// GetHashAlg return hash algorithm the access control provider uses
	GetHashAlg() string

	// CreatePrincipal creates a principal for one time authentication
	CreatePrincipal(resourceName string, endorsements []*EndorsementEntry, message []byte) (Principal, error)

	// VerifyPrincipal verifies if the policy for the resource is met
	VerifyPrincipal(principal Principal) (bool, error)
}

type EndorsementEntry struct {
	// signer
	Signer *Member
	// signature
	Signature []byte
}

type Member struct {
	// organization identifier of the member
	OrgId string
	// member type
	MemberType MemberType
	// member identity related info bytes
	MemberInfo []byte
}

type MemberInterface interface {
	// GetMemberId returns the identity of this member (non-uniqueness)
	GetMemberId() string

	// GetOrgId returns the organization id which this member belongs to
	GetOrgId() string

	// GetRole returns roles of this member
	GetRole() Role

	// GetUid returns the identity of this member (unique)
	GetUid() string

	// Verify verifies a signature over some message using this member
	Verify(hashType string, msg []byte, sig []byte) error

	// GetMember returns Member
	GetMember() (*Member, error)

	//GetPk returns public key
	GetPk() crypto.PublicKey
}

type MemberType int32

type PWKACProvider struct {
	// contains filtered or unexported fields
}

type Principal interface {
	// GetResourceName returns resource name of the verification
	GetResourceName() string

	// GetEndorsement returns all endorsements (signatures) of the verification
	GetEndorsement() []*EndorsementEntry

	// GetMessage returns signing data of the verification
	GetMessage() []byte

	// GetTargetOrgId returns target organization id of the verification if the verification is for a specific organization
	GetTargetOrgId() string
}

type ResourcePolicy struct {
	ResourceName string
	Policy       policy
}

type Role string

type Rule string

type SigningMember interface {
	// Extends Member interface
	MemberInterface

	// Sign signs the message with the given hash type and returns signature bytes
	Sign(hashType string, msg []byte) ([]byte, error)
}

type TrustMemberConfig struct {
	// member info
	MemberInfo string
	// oranization ideftifier
	OrgId  string
	Role   string
	NodeId string
}

type TrustRootConfig struct {
	OrgId string
	Root  []string
}