pod 'ClientAttestation', :podspec => './SDK'

pod install

<key>NSAppTransportSecurity</key>
<dict>
    <key>NSAllowsArbitraryLoads</key>
    <true/>
</dict>
<!-- 如果您的应用需要访问互联网，请确保已声明此权限 -->
<key>NSInternetPermission</key>
<true/>

import ClientAttestation

func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool {
    // SDK初始化
    let baseUrl = "www.example.com" // 设置为业务域名
    let basOptions = TCBasOptions()
    basOptions.baseUrl = baseUrl
    basOptions.logLevel = LOG_LEVEL_DEBUG // 可选，设置日志级别
    TCBas.initialize(with: basOptions)
    return true
}

// 启动客户端认证引擎
[[ClientAttestation sharedInstance] start];

// attestId
// 主动发起挑战时从控制台获取
// 被动发起挑战时从http返回的header字段中的‘EO-Attest-Challenge’获取
NSString *attestId = @"your-attestId";
AttestParams *params = [[AttestParams alloc] init];
params.attestId = attestId;
params.webView = webView; // 验证码界面显示使用的WebView
params.reqTimeoutMillis = 60000; // 可选，请求超时时间
[[ClientAttestation sharedInstance] attestWithParams:params
                                          callback:self];

// 实现 AttestCallbackDelegate 协议
#pragma mark - AttestCallbackDelegate
- (void)onSuccess:(NSString *)token {
    // 返回风险票据，把票据放在http请求中的header字段‘EO-Attest-Token’
}

- (void)onError:(NSError *)error {
    // 错误信息回调
}

// 获取客户端认证票据
NSString *attestToken = [[ClientAttestation sharedInstance] getAttestationToken];

// 示例：将令牌添加到您的网络请求头中
// 假设您正在使用 URLSession 或其他网络库
if (attestToken) {
    // 您的请求对象
    NSMutableURLRequest *request = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:@"https://your-backend-api.com/data"]];
    [request setValue:attestToken forHTTPHeaderField:@"EO-Attest-Token"];
    // 继续发送请求
}

// 假设您的网络请求处理逻辑
- (void)sendAPIRequest:(NSMutableURLRequest *)request {
    NSURLSessionDataTask *task = [[NSURLSession sharedSession] dataTaskWithRequest:request completionHandler:^(NSData * _Nullable data, NSURLResponse * _Nullable response, NSError * _Nullable error) {
        if (error) {
            NSLog(@"网络请求错误: %@", error.localizedDescription);
            return;
        }
        
        NSHTTPURLResponse *httpResponse = (NSHTTPURLResponse *)response;
        if (httpResponse.statusCode == 428) {
            // 收到 428 挑战，提取挑战 ID
            NSString *challengeId = httpResponse.allHeaderFields[@"EO-Attest-Challenge"];
            if (challengeId) {
                NSLog(@"收到 428 挑战，挑战 ID: %@", challengeId);
                
                // 执行认证挑战
                // 根据需要创建或复用 WKWebView 实例
                WKWebView *webView = [[WKWebView alloc] init];
                AttestParams *attestParams = [[AttestParams alloc] init];
                attestParams.attestId = challengeId;
                attestParams.webView = webView;
                
                [[ClientAttestation sharedInstance] attestWithParams:attestParams callback:self];
                
                // 注意：这里需要处理 AttestCallbackDelegate 的回调，在 onSuccess 中重新发送请求
            } else {
                NSLog(@"428 响应中未找到 EO-Attest-Challenge 头");
            }
        } else if (httpResponse.statusCode == 200) {
            NSLog(@"请求成功！");
            // 处理业务数据
        } else {
            NSLog(@"请求失败，状态码: %ld", (long)httpResponse.statusCode);
            // 处理其他错误
        }
    }];
    [task resume];
}

// 示例调用
// NSMutableURLRequest *initialRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:@"https://your-backend-api.com/protected-data"]];
// [self sendAPIRequest:initialRequest];

// 在 AttestCallbackDelegate 的 onSuccess 方法中重新发送请求
#pragma mark - AttestCallbackDelegate
- (void)onSuccess:(NSString *)token {
    NSLog(@"挑战成功，获取到新令牌: %@", token);
    // 重新发送原始请求，带上新令牌
    // 这里需要获取到之前的请求对象，并重新发送
    // 例如：
    // NSMutableURLRequest *retryRequest = [self.lastFailedRequest mutableCopy]; // 假设您保存了上次失败的请求
    // [retryRequest setValue:token forHTTPHeaderField:@"EO-Attest-Token"];
    // [self sendAPIRequest:retryRequest];
}

- (void)onError:(NSError *)error {
    NSLog(@"认证挑战失败: %@", error.localizedDescription);
}