cc nasazeni

Credentials/CredentialConstants.cs

@@ -0,0 +1,18 @@
+namespace Idoklad.Credentials;
+
+/// <summary>
+/// Names of the HTTP headers that carry per-request iDoklad credentials.
+///
+/// Secrets are never accepted in the query string or request body: they are required in
+/// request headers (and documented as such in Swagger). Each header carries the credential
+/// value directly and must therefore only be sent over TLS.
+/// </summary>
+public static class CredentialConstants
+{
+    public const string ClientIdHeader = "X-ClientId";
+    public const string ClientSecretHeader = "X-ClientSecret";
+    public const string ApplicationIdHeader = "X-ApplicationId";
+
+    /// <summary>Header carrying the response language override (Cz, Sk, En).</summary>
+    public const string LanguageHeader = "X-Idoklad-Language";
+}