chrome/browser/apps/app_shim/code_signature_mac.h

// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef CHROME_BROWSER_APPS_APP_SHIM_CODE_SIGNATURE_MAC_H_
#define CHROME_BROWSER_APPS_APP_SHIM_CODE_SIGNATURE_MAC_H_

#include <Security/Security.h>

#include "base/apple/scoped_cftyperef.h"
#include "base/types/expected.h"

namespace apps {

// Returns whether `process` has a valid code signature that fulfills
// `requirement`.
OSStatus ProcessIsSignedAndFulfillsRequirement(pid_t process,
                                               SecRequirementRef requirement);

// Reason why no requirement could be returned.
enum class MissingRequirementReason {
  NoOrAdHocSignature,
  Error,
};

// Returns the framework bundle's designated requirement as a string.
//
// If a value is returned, it will be non-null. If there was no designated
// requirement or the designated requirement could not be loaded, an error
// will be returned.
base::expected<base::apple::ScopedCFTypeRef<CFStringRef>,
               MissingRequirementReason>
FrameworkBundleDesignatedRequirementString();

// Create a SecRequirementRef from a requirement string.
//
// Returns a null reference if the requirement string was invalid.
base::apple::ScopedCFTypeRef<SecRequirementRef> RequirementFromString(
    CFStringRef requirement_string);

}  // namespace apps

#endif  // CHROME_BROWSER_APPS_APP_SHIM_CODE_SIGNATURE_MAC_H_