namespace Svrnty.CQRS.Altcha.Abstractions;

/// <summary>
/// Phase 3 placeholder — when a future module implements Apple App Attest /
/// Google Play Integrity verification, it stamps
/// <see cref="Svrnty.CQRS.Abstractions.Security.AuthorizationCheckContext.Items"/>[<c>"mobile_attested"</c>]
/// based on the verification result, and the Altcha check reads that flag
/// to short-circuit when <see cref="AltchaAttribute.AllowMobileAttestationBypass"/>
/// is true.
/// </summary>
/// <remarks>
/// Intentionally left abstract and unwired in this phase. The interface
/// exists so Phase 3 can drop in an implementation without touching command
/// definitions or the Altcha check.
/// </remarks>
public interface IMobileAttestationProvider
{
    /// <param name="attestationToken">Platform-specific attestation token from the request.</param>
    /// <returns><c>true</c> if attestation passes; <c>false</c> otherwise.</returns>
    Task<bool> VerifyAsync(string attestationToken, CancellationToken cancellationToken = default);
}