// Copyright 2021 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef CRYPTOHOME_USER_SECRET_STASH_STORAGE_H_
#define CRYPTOHOME_USER_SECRET_STASH_STORAGE_H_

#include <optional>
#include <string>

#include <brillo/secure_blob.h>

#include "cryptohome/platform.h"

namespace cryptohome {

class UserSecretStashStorage final {
 public:
  explicit UserSecretStashStorage(Platform* platform);

  UserSecretStashStorage(const UserSecretStashStorage&) = delete;
  UserSecretStashStorage& operator=(const UserSecretStashStorage&) = delete;

  ~UserSecretStashStorage();

  // Persists the serialized USS container, as created by
  // `UserSecretStash::GetEncryptedContainer()`, in the given user's directory
  // in the shadow root. Returns false on failure.
  bool Persist(const brillo::SecureBlob& uss_container_flatbuffer,
               const std::string& obfuscated_username);
  // Loads the serialized USS container flatbuffer (to be used with
  // `UserSecretStash::FromEncryptedContainer()`) from the given user's
  // directory in the shadow root. Returns nullopt on failure.
  std::optional<brillo::SecureBlob> LoadPersisted(
      const std::string& obfuscated_username);

 private:
  Platform* const platform_;
};

}  // namespace cryptohome

#endif  // CRYPTOHOME_USER_SECRET_STASH_STORAGE_H_