// Copyright 2013 Google Inc. All Rights Reserved.

#ifndef WVCDM_CORE_CERTIFICATE_PROVISIONING_H_
#define WVCDM_CORE_CERTIFICATE_PROVISIONING_H_

#include <string>

#include "crypto_session.h"
#include "license_protocol.pb.h"
#include "metrics_collections.h"
#include "oemcrypto_adapter.h"
#include "scoped_ptr.h"
#include "wv_cdm_types.h"

namespace wvcdm {

class CdmClientPropertySet;
class CdmSession;
class FileSystem;
class ServiceCertificate;

class CertificateProvisioning {
 public:
  CertificateProvisioning(metrics::CryptoMetrics* metrics,
                          ServiceCertificate* service_certificate) :
      crypto_session_(metrics),
      cert_type_(kCertificateWidevine),
      service_certificate_(service_certificate) {}

  ~CertificateProvisioning() {};

  // Construct a valid provisioning request.
  // The request will be sent to the provisioning server.
  CdmResponseType GetProvisioningRequest(
      SecurityLevel requested_security_level, CdmCertificateType cert_type,
      const std::string& cert_authority, const std::string& origin,
      const std::string& spoid, CdmProvisioningRequest* request,
      std::string* default_url);

  // Process the provisioning response.
  CdmResponseType HandleProvisioningResponse(
      FileSystem* file_system, const CdmProvisioningResponse& response,
      std::string* cert, std::string* wrapped_key);

 private:
  bool GetProvisioningTokenType(
      video_widevine::ClientIdentification::TokenType* token_type);

  bool SetSpoidParameter(const std::string& origin, const std::string& spoid,
                         video_widevine::ProvisioningRequest* request);

  video_widevine::SignedProvisioningMessage::ProtocolVersion
      GetProtocolVersion();

  CryptoSession crypto_session_;
  CdmCertificateType cert_type_;
  ServiceCertificate* service_certificate_;

  CORE_DISALLOW_COPY_AND_ASSIGN(CertificateProvisioning);
};

}  // namespace wvcdm

#endif  // WVCDM_CORE_CERTIFICATE_PROVISIONING_H_