namespace Idoklad.Credentials;

/// <summary>
/// Names of the HTTP headers that carry per-request iDoklad credentials.
///
/// Secrets are never accepted in the query string or request body: they are required in
/// request headers (and documented as such in Swagger). Each header carries the credential
/// value directly and must therefore only be sent over TLS.
/// </summary>
public static class CredentialConstants
{
    public const string ClientIdHeader = "X-ClientId";
    public const string ClientSecretHeader = "X-ClientSecret";
    public const string ApplicationIdHeader = "X-ApplicationId";

    /// <summary>Header carrying the response language override (Cz, Sk, En).</summary>
    public const string LanguageHeader = "X-Idoklad-Language";
}