using GB5Shared.DTO.Framework.Login;
using SwDAL.DTO.ClientDatabaseKey;

namespace SwBLL.ClientDatabaseKey;

public interface IClientDatabaseKeyBLL
{
    Task<ClientDatabaseKeyDTO?> GetActiveByClientDb(int clientDbId, LoginDTO loginDTO, CancellationToken ct);

    /// <summary>Registers a new Active public key for a client database, first superseding
    /// whatever key currently sits Active for it (rotation, not overwrite — the superseded row
    /// is kept, never deleted).</summary>
    Task<string> RegisterKeyAsync(int clientDbId, string publicKeyPem, LoginDTO loginDTO, CancellationToken ct);

    /// <summary>Marks a key Revoked outright (compromise/decommission) — distinct from the
    /// automatic Supersede that happens on rotation.</summary>
    Task<string> RevokeAsync(int clientDatabaseKeyId, LoginDTO loginDTO, CancellationToken ct);
}