Attestation

let result = try await grantiva.validateAttestation()

result.isValid              // Bool — whether the device passed
result.token                // String — signed JWT token
result.expiresAt            // Date — token expiration
result.deviceIntelligence   // DeviceIntelligence
result.customClaims         // [String: Any] — your custom JWT claims

result.deviceIntelligence.deviceId           // String — unique device ID
result.deviceIntelligence.riskScore          // Int? — 0–100 (Pro and above); nil on Free tier
result.deviceIntelligence.deviceIntegrity    // String — integrity status
result.deviceIntelligence.jailbreakDetected  // Bool
result.deviceIntelligence.attestationCount   // Int — total attestations from this device
result.deviceIntelligence.lastAttestationDate // Date?

// First call — full attestation flow
let result1 = try await grantiva.validateAttestation()

// Second call — returns cached token instantly
let result2 = try await grantiva.validateAttestation()

if let result = try await grantiva.refreshToken() {
    // Token is valid or was refreshed
    print(result.token)
}

// Synchronous check — does a valid token exist?
if grantiva.isTokenValid() {
    let token = grantiva.getCurrentToken()
    // Use token in API requests
}

grantiva.clearStoredData()

var request = URLRequest(url: yourAPIEndpoint)
request.setValue("Bearer \(result.token)", forHTTPHeaderField: "Authorization")

do {
    let result = try await grantiva.validateAttestation()
} catch GrantivaError.simulatorAPIKeyRequired {
    // Running in Simulator without an API key — see Simulator Setup
} catch GrantivaError.deviceNotSupported {
    // Hardware/region does not support App Attest
} catch GrantivaError.networkError(let error) {
    // Network issue — retry later
} catch GrantivaError.validationFailed {
    // Device failed attestation — potentially compromised
} catch GrantivaError.challengeExpired {
    // Challenge timed out — retry automatically
} catch {
    print(error.localizedDescription)
}