pod 'ClientAttestation', :podspec => './SDK'  // 配置示例，请替换为实际SDK podspec地址

pod install

#import <TCBasCommon/TCBasCommon.h>
#import <ClientAttestation/ClientAttestation.h>

- (BOOL)application:(UIApplication *)application didFinishLaunchingWithOptions:(NSDictionary *)launchOptions {
    // SDK初始化
    TCBasConfig *basConfig = [[TCBasConfig alloc] init];
    basConfig.baseUrl = @"www.example.com"; // 设置为业务域名
    basConfig.logLevel = TCBCLogLevelTypeWARN; // 可选，设置日志级别
    [TCBas initializeWithOptions:basConfig];
    return YES;
}

#import <ClientAttestation/ClientAttestation.h>

// 启动客户端认证引擎
[[ClientAttestation sharedInstance] start];

#import <ClientAttestation/ClientAttestation.h>

// attestId
// 主动发起挑战时从控制台获取
// 被动发起挑战时从http返回的header字段中的‘EO-Attest-Challenge’获取
NSString *attestId = @"your-attestId";
AttestParams *params = [[AttestParams alloc] init];
params.attestId = attestId;
params.webView = self.webView; // 验证码界面显示使用的WebView
params.reqTimeoutMillis = 60000; // 可选，请求超时时间
[[ClientAttestation sharedInstance] attestWithParams:params
                                          callback:self];

// 实现 AttestCallbackDelegate 协议
#pragma mark - AttestCallbackDelegate
- (void)onSuccess:(NSString *)token {
    // 返回风险票据，把票据放在http请求中的header字段‘EO-Attest-Token’
}

- (void)onError:(NSError *)error {
    // 错误信息回调
}

#import <ClientAttestation/ClientAttestation.h>

// 获取客户端认证票据
[[ClientAttestation sharedInstance] getAttestationTokenWithCompletion:^(NSString *token) {
// 示例：将令牌添加到您的网络请求头中
// 假设您正在使用 URLSession 或其他网络库
    if (token) {
        // 您的请求对象
        NSMutableURLRequest *request = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:@"https://your-backend-api.com/data"]];
        [request setValue:token forHTTPHeaderField:@"EO-Attest-Token"];
        // 继续发送请求
    }
}];

#import <ClientAttestation/ClientAttestation.h>

// 假设您的网络请求处理逻辑
- (void)sendAPIRequest:(NSMutableURLRequest *)request {
    NSURLSessionDataTask *task = [[NSURLSession sharedSession] dataTaskWithRequest:request completionHandler:^(NSData * _Nullable data, NSURLResponse * _Nullable response, NSError * _Nullable error) {
        if (error) {
            NSLog(@"网络请求错误: %@", error.localizedDescription);
            return;
        }
        
        NSHTTPURLResponse *httpResponse = (NSHTTPURLResponse *)response;
        if (httpResponse.statusCode == 428) {
            // 收到 428 挑战，提取挑战 ID
            NSString *challengeId = httpResponse.allHeaderFields[@"EO-Attest-Challenge"];
            if (challengeId) {
                NSLog(@"收到 428 挑战，挑战 ID: %@", challengeId);
                
                // 执行认证挑战
                AttestParams *attestParams = [[AttestParams alloc] init];
                attestParams.attestId = challengeId;
                attestParams.webView = self.webView;
                
                [[ClientAttestation sharedInstance] attestWithParams:attestParams callback:self];
                
                // 注意：这里需要处理 AttestCallbackDelegate 的回调，在 onSuccess 中重新发送请求
            } else {
                NSLog(@"428 响应中未找到 EO-Attest-Challenge 头");
            }
        } else if (httpResponse.statusCode == 200) {
            NSLog(@"请求成功！");
            // 处理业务数据
        } else {
            NSLog(@"请求失败，状态码: %ld", (long)httpResponse.statusCode);
            // 处理其他错误
        }
    }];
    [task resume];
}

// 示例调用
// NSMutableURLRequest *initialRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:@"https://your-backend-api.com/protected-data"]];
// [self sendAPIRequest:initialRequest];

// 在 AttestCallbackDelegate 的 onSuccess 方法中重新发送请求
#pragma mark - AttestCallbackDelegate
- (void)onSuccess:(NSString *)token {
    NSLog(@"挑战成功，获取到新令牌: %@", token);
    // 重新发送原始请求，带上新令牌
    // 这里需要获取到之前的请求对象，并重新发送
    // 例如：
    // NSMutableURLRequest *retryRequest = [self.lastFailedRequest mutableCopy]; // 假设您保存了上次失败的请求
    // [retryRequest setValue:token forHTTPHeaderField:@"EO-Attest-Token"];
    // [self sendAPIRequest:retryRequest];
}

- (void)onError:(NSError *)error {
    NSLog(@"认证挑战失败: %@", error.localizedDescription);
}