pod 'ClientAttestation', :podspec => './SDK'

pod install

<key>NSAppTransportSecurity</key>
<dict>
    <key>NSAllowsArbitraryLoads</key>
    <true/>
</dict>
If your application needs to access the Internet, please ensure this permission is declared.
<key>NSInternetPermission</key>
<true/>

import ClientAttestation

func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool {
    // SDK initialization
    let baseUrl = "www.example.com" // set to business domain
    let basOptions = TCBasOptions()
    basOptions.baseUrl = baseUrl
    basOptions.logLevel = LOG_LEVEL_DEBUG // Optional, set log level
    TCBas.initialize(with: basOptions)
    return true
}

// Start the client attestation engine
[[ClientAttestation sharedInstance] start];

// attestId
// Get from console when actively initiating a challenge
// Retrieve from the 'EO-Attest-Challenge' header field in the http response when passively triggering a Challenge
NSString *attestId = @"your-attestId";
AttestParams *params = [[AttestParams alloc] init];
params.attestId = attestId;
params.webView = webView; // WebView used for Captcha display
params.reqTimeoutMillis = 60000; // Optional, request timeout
[[ClientAttestation sharedInstance] attestWithParams:params
                                          callback:self];

// Implement the AttestCallbackDelegate protocol
#pragma mark - AttestCallbackDelegate
- (void)onSuccess:(NSString *)token {
    // Return the risk invoice, place the invoice in the header field 'EO-Attest-Token' of the http request
}

- (void)onError:(NSError *)error {
    // Error message returned
}

// Get client attestation invoice
NSString *attestToken = [[ClientAttestation sharedInstance] getAttestationToken];

// Example: Add the token to your network request header
// Assuming you are using URLSession or another network library
if (attestToken) {
    // Your request object
    NSMutableURLRequest *request = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:@"https://your-backend-api.com/data"]];
    [request setValue:attestToken forHTTPHeaderField:@"EO-Attest-Token"];
    // Continue sending the request
}

// Assume your network request processing logic
- (void)sendAPIRequest:(NSMutableURLRequest *)request {
    NSURLSessionDataTask *task = [[NSURLSession sharedSession] dataTaskWithRequest:request completionHandler:^(NSData * _Nullable data, NSURLResponse * _Nullable response, NSError * _Nullable error) {
        if (error) {
            NSLog(@"network error: %@", error.localizedDescription);
            return;
        }
        
        NSHTTPURLResponse *httpResponse = (NSHTTPURLResponse *)response;
        if (httpResponse.statusCode == 428) {
            // Received 428 challenge, extract challenge ID
            NSString *challengeId = httpResponse.allHeaderFields[@"EO-Attest-Challenge"];
            if (challengeId) {
                NSLog(@"Received 428 challenge, challenge ID: %@", challengeId);
                
                // Execute attestation challenge
                // Create or reuse a WKWebView instance as needed
                WKWebView *webView = [[WKWebView alloc] init];
                AttestParams *attestParams = [[AttestParams alloc] init];
                attestParams.attestId = challengeId;
                attestParams.webView = webView;
                
                [[ClientAttestation sharedInstance] attestWithParams:attestParams callback:self];
                
                // Note: Need to process the AttestCallbackDelegate callback and resend the request in onSuccess
            } else {
                NSLog(@"428 EO-Attest-Challenge header not found in response");
            }
        } else if (httpResponse.statusCode == 200) {
            NSLog(@"Request succeeded.");
            // Process business data
        } else {
            NSLog(@"Request failed, status code: %ld", (long)httpResponse.statusCode);
            // fix other errors
        }
    }];
    [task resume];
}

// Example call
// NSMutableURLRequest *initialRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:@"https://your-backend-api.com/protected-data"]];
// [self sendAPIRequest:initialRequest];

// Resend the request in the onSuccess method of AttestCallbackDelegate
#pragma mark - AttestCallbackDelegate
- (void)onSuccess:(NSString *)token {
    NSLog(@"Challenge Success, obtain new token: %@", token);
    // Resend the original request with the new token
    // Need to get the previous request object and resend
    // For example:
    // NSMutableURLRequest *retryRequest = [self.lastFailedRequest mutableCopy]; // Assume you saved the last failed request
    // [retryRequest setValue:token forHTTPHeaderField:@"EO-Attest-Token"];
    // [self sendAPIRequest:retryRequest];
}

- (void)onError:(NSError *)error {
    NSLog(@"attestation challenge failure: %@", error.localizedDescription);
}