using GB5Shared.DTO.Framework.Login;

namespace ComplianceBLL.GSTValidate;

// OTP + auth-token flow (GB4's GSTCafeServiceBLL.GetOTPRequest/GetAuthToken) — common to every GST
// Returns filing surface (Outward/GSTR1, GSTR3B, Inward sync), not Outward-specific. Must complete
// before SubmitGSTOutward/FileGSTReturn/SubmitGSTR3B/SyncReturnStatusFromPortal/SyncFromPortal.
public interface IGSTValidateBLL
{
    Task<string> RequestOTPAsync(string gstin, string returnPeriod, LoginDTO login, CancellationToken ct);
    // appKey: AdapterAuthResult.AppKey returned by RequestOTPAsync's response — the FE must echo it
    // back here (GSTN's Authentication API spec requires the same app-key for both OTP-request and
    // auth-token-exchange calls).
    Task<string> GetAuthTokenAsync(string gstin, string otp, string appKey, string returnPeriod, LoginDTO login, CancellationToken ct);
}