// <copyright file="ICryptographyService.cs" company="alveus.dev">
// Copyright (c) alveus.dev. All rights reserved. Licensed under the MIT License.
// </copyright>

using Astral.Services.Constants;

namespace Astral.Services.Interfaces;

/// <summary>
/// Cryptographic operations.
/// </summary>
public interface ICryptographyService
{
    /// <summary>
    /// Generate a random salt.
    /// </summary>
    /// <param name="size">Size of the salt to generate - if omitted, will use PwdHashSettings:HashSize config.</param>
    /// <returns>Byte array containing the generated salt.</returns>
    byte[] GenerateSalt(int? size = null);

    /// <summary>
    /// Hash a password string with the accompanying salt.
    /// </summary>
    /// <param name="password">The password to hash.</param>
    /// <param name="salt">The salt to use.</param>
    /// <returns>A byte array of PwdHashSettings:HashSize config size of the password.</returns>
    byte[] HashPassword(string password, byte[] salt);

    /// <summary>
    /// Verify that the given password matches the password hash and salt.
    /// </summary>
    /// <param name="password">The password to test.</param>
    /// <param name="salt">The password's accompanying salt.</param>
    /// <param name="passwordHash">The password hash to test again.</param>
    /// <returns>True if verified, false otherwise.</returns>
    bool VerifyPassword(string password, byte[] salt, byte[] passwordHash);

    /// <summary>
    /// Verify that the given password matches the password hash and salt.
    /// </summary>
    /// <param name="password">The password to test.</param>
    /// <param name="salt">The password's base64 encoded accompanying salt.</param>
    /// <param name="passwordHash">The password base64 hash to test again.</param>
    /// <returns>True if verified, false otherwise.</returns>
    bool VerifyPassword(string password, string salt, string passwordHash);

    /// <summary>
    /// Generate a cryptographically random string.
    /// </summary>
    /// <param name="length">Length of string to create.</param>
    /// <returns>A random string.</returns>
    string GenerateRandomString(int length);

    /// <summary>
    /// Convert public key.
    /// </summary>
    /// <param name="pkcs1Key">PKCS #1 key.</param>
    /// <param name="type">The type to convert to.</param>
    /// <returns>The converted key.</returns>
    string ConvertPublicKey(byte[] pkcs1Key, PublicKeyType type);

    /// <summary>
    /// Strip out header, footer and newlines from PEM RSA key.
    /// </summary>
    /// <param name="pemKey">Key to simplify.</param>
    /// <returns>Simplified form.</returns>
    string SimplifyPemKey(string pemKey);
}