using Azaion.Missions.JwksMock.Services;

namespace Azaion.Missions.JwksMock.Endpoints;

public static class RotateKeyEndpoint
{
    /// <summary>
    /// <c>POST /rotate-key</c>. Generates a new active ECDSA P-256 keypair,
    /// retires the previous active key for <c>OldKeyGraceSeconds</c>, returns
    /// the new <c>kid</c>.
    /// </summary>
    public static IResult Handle(KeyStore keys)
    {
        var newKey = keys.Rotate();
        return Results.Json(new { kid = newKey.Kid });
    }
}