From c26ddc116ecb24569db92ed16922503b7ab41f5f Mon Sep 17 00:00:00 2001
From: Paul Schaub <vanitasvitae@fsfe.org>
Date: Fri, 21 Jul 2023 17:08:48 +0200
Subject: [PATCH] Add identify API endpoint

---
 .../authentication/CertificateAuthority.java       | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/pgpainless-core/src/main/java/org/pgpainless/authentication/CertificateAuthority.java b/pgpainless-core/src/main/java/org/pgpainless/authentication/CertificateAuthority.java
index d124902d..468de022 100644
--- a/pgpainless-core/src/main/java/org/pgpainless/authentication/CertificateAuthority.java
+++ b/pgpainless-core/src/main/java/org/pgpainless/authentication/CertificateAuthority.java
@@ -54,4 +54,18 @@ public interface CertificateAuthority {
                                          boolean email,
                                          @Nonnull Date referenceTime,
                                          int targetAmount);
+
+    /**
+     * Identify trustworthy bindings for a certificate.
+     * The result is a list of authenticatable userIds on the certificate.
+     *
+     * @param fingerprint fingerprint of the certificate
+     * @param referenceTime reference time for trust calculations
+     * @param targetAmount target trust amount (120 = fully authenticated, 240 = doubly authenticated,
+     *                     60 = partially authenticated...)
+     * @return list of identified bindings
+     */
+    List<CertificateAuthenticity> identify(@Nonnull OpenPgpFingerprint fingerprint,
+                                           @Nonnull Date referenceTime,
+                                           int targetAmount);
 }