checks.h

/*
 * Copyright 2021 The HIBA Authors
 *
 * Use of this source code is governed by a BSD-style
 * license that can be found in the LICENSE file or at
 * https://developers.google.com/open-source/licenses/bsd
 */
#ifndef _CHECKS_H
#define _CHECKS_H

#include <stdint.h>

#include "certificates.h"
#include "extensions.h"

struct hibaenv;

/* Check whether the grant extension authorized access to the target
 * environment. */
int hibachk_authorize(const struct hibaenv *env, const struct hibaext *grant,
                      const char *role);

/* Output the dynamically generated authorized_users.
 * The output will be generated for the 'idx'th grant of the given 'cert'
 * certificate. */
void hibachk_authorized_users(const struct hibaenv *env,
                              const struct hibacert *cert, int idx, FILE *f);

/* Create an environment from a host certificate with a HIBA identity grant
 * Resulting struct hibaenv must be released using hibaenv_free().
 * The grl parameter is currently unused and ignored. */
struct hibaenv *hibaenv_from_host(const struct hibacert *host, const char *grl);

/* Destructor for hibaenv. */
void hibaenv_free(struct hibaenv *env);

#endif  // _CHECKS_H