Package io.jans.fido2.service.trust

Class TrustStatusService

java.lang.Object

io.jans.fido2.service.trust.TrustStatusService

@ApplicationScoped
public class TrustStatusService
extends Object

Assembles the read-only attestation and MDS status reported by the trust endpoints.

This service only reads state the attestation and metadata services already hold. It never changes attestation behaviour, never triggers a metadata download, and never touches the document store — a diagnostics endpoint must not cause outbound traffic or mutate state.

Author:

Janssen Project

Constructor Summary

Constructors

Constructor	Description
TrustStatusService()

Method Summary

Modifier and Type	Method	Description
AttestationTrustConfig	getAttestationTrustConfig()	The attestation policy the server is actually applying.
MdsHealth	getMdsHealth()	The state of the metadata the server validates attestation against.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TrustStatusService

public TrustStatusService()

Method Details

getAttestationTrustConfig

public AttestationTrustConfig getAttestationTrustConfig()

The attestation policy the server is actually applying.

getMdsHealth

public MdsHealth getMdsHealth()

The state of the metadata the server validates attestation against.

Every value is read from memory. In particular the blob's nextUpdate comes from TocService.getLoadedTocNextUpdate() rather than getNextUpdateDate(), which reads the document store and throws on failure — unusable from a health endpoint.