@abaxxtech/id 0.0.0

package/dist/esm/tests/interfaces/permissions-grant.spec.js

@@ -0,0 +1,216 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { expect } from 'chai';
+import { Message } from '../../src/core/message.js';
+import { PermissionsConditionPublication } from '../../src/types/permissions-grant-descriptor.js';
+import { PermissionsGrant } from '../../src/interfaces/permissions-grant.js';
+import { Secp256k1 } from '../../src/utils/secp256k1.js';
+import { TestDataGenerator } from '../utils/test-data-generator.js';
+import { Time } from '../../src/utils/time.js';
+import { DidKeyResolver, DwnErrorCode, DwnInterfaceName, DwnMethodName, Jws, PrivateKeySigner } from '../../src/index.js';
+describe('PermissionsGrant', () => {
+    if (process.env.TESTSOFF === 'true') {
+        return;
+    }
+    describe('create()', () => __awaiter(void 0, void 0, void 0, function* () {
+        it('creates a PermissionsGrant message', () => __awaiter(void 0, void 0, void 0, function* () {
+            const { privateJwk } = yield Secp256k1.generateKeyPair();
+            const signer = new PrivateKeySigner({ privateJwk, keyId: 'did:key:bob' });
+            const { message } = yield PermissionsGrant.create({
+                dateExpires: Time.getCurrentTimestamp(),
+                description: 'perms',
+                grantedBy: 'did:key:bob',
+                grantedTo: 'did:key:alice',
+                grantedFor: 'did:key:bob',
+                scope: { interface: DwnInterfaceName.Records, method: DwnMethodName.Write },
+                signer
+            });
+            expect(message.descriptor.grantedTo).to.equal('did:key:alice');
+            expect(message.descriptor.grantedBy).to.equal('did:key:bob');
+            expect(message.descriptor.scope).to.eql({ interface: DwnInterfaceName.Records, method: DwnMethodName.Write });
+            expect(message.descriptor.conditions).to.be.undefined;
+            expect(message.descriptor.description).to.eql('perms');
+        }));
+        describe('scope property normalizations', () => __awaiter(void 0, void 0, void 0, function* () {
+            it('ensures that `schema` is normalized', () => __awaiter(void 0, void 0, void 0, function* () {
+                const { privateJwk } = yield Secp256k1.generateKeyPair();
+                const signer = new PrivateKeySigner({ privateJwk, keyId: 'did:key:bob' });
+                const scope = {
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                    schema: 'example.com/',
+                };
+                const { message } = yield PermissionsGrant.create({
+                    dateExpires: Time.getCurrentTimestamp(),
+                    description: 'schema normalization test',
+                    grantedBy: 'did:key:bob',
+                    grantedTo: 'did:key:alice',
+                    grantedFor: 'did:key:bob',
+                    scope: scope,
+                    signer
+                });
+                expect(message.descriptor.scope.schema).to.equal('http://example.com');
+            }));
+            it('ensures that `protocol` is normalized', () => __awaiter(void 0, void 0, void 0, function* () {
+                const { privateJwk } = yield Secp256k1.generateKeyPair();
+                const signer = new PrivateKeySigner({ privateJwk, keyId: 'did:key:bob' });
+                const scope = {
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                    protocol: 'example.com/',
+                };
+                const { message } = yield PermissionsGrant.create({
+                    dateExpires: Time.getCurrentTimestamp(),
+                    description: 'protocol normalization test',
+                    grantedBy: 'did:key:bob',
+                    grantedTo: 'did:key:alice',
+                    grantedFor: 'did:key:bob',
+                    scope: scope,
+                    signer
+                });
+                expect(message.descriptor.scope.protocol).to.equal('http://example.com');
+            }));
+        }));
+        describe('scope validations', () => {
+            it('ensures that `schema` and protocol related fields `protocol`, `contextId` or `protocolPath`', () => __awaiter(void 0, void 0, void 0, function* () {
+                const { privateJwk } = yield Secp256k1.generateKeyPair();
+                const signer = new PrivateKeySigner({ privateJwk, keyId: 'did:key:bob' });
+                const permissionsGrantOptions = {
+                    dateExpires: Time.getCurrentTimestamp(),
+                    grantedBy: 'did:key:bob',
+                    grantedTo: 'did:key:alice',
+                    grantedFor: 'did:key:bob',
+                    signer
+                };
+                // Reject when `schema` and `protocol` are both present
+                let scope = {
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                    schema: 'some-schema',
+                    protocol: 'some-protocol'
+                };
+                expect(PermissionsGrant.create(Object.assign(Object.assign({}, permissionsGrantOptions), { scope })))
+                    .to.be.rejectedWith(DwnErrorCode.PermissionsGrantScopeSchemaProhibitedFields);
+                // Reject when `schema` and `contextId` are both present
+                scope = {
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                    schema: 'some-schema',
+                    contextId: 'some-contextId'
+                };
+                expect(PermissionsGrant.create(Object.assign(Object.assign({}, permissionsGrantOptions), { scope })))
+                    .to.be.rejectedWith(DwnErrorCode.PermissionsGrantScopeSchemaProhibitedFields);
+                // Reject when `schema` and `protocolPath` are both present
+                scope = {
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                    schema: 'some-schema',
+                    protocolPath: 'some-protocol-path'
+                };
+                expect(PermissionsGrant.create(Object.assign(Object.assign({}, permissionsGrantOptions), { scope })))
+                    .to.be.rejectedWith(DwnErrorCode.PermissionsGrantScopeSchemaProhibitedFields);
+            }));
+            it('ensures that `contextId` and `protocolPath` are not both present', () => __awaiter(void 0, void 0, void 0, function* () {
+                const { privateJwk } = yield Secp256k1.generateKeyPair();
+                const signer = new PrivateKeySigner({ privateJwk, keyId: 'did:key:bob' });
+                const permissionsGrantOptions = {
+                    dateExpires: Time.getCurrentTimestamp(),
+                    grantedBy: 'did:key:bob',
+                    grantedTo: 'did:key:alice',
+                    grantedFor: 'did:key:bob',
+                    signer
+                };
+                // Allow when `context to be present ` and `protocol` are both present
+                const scope = {
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                    protocol: 'some-protocol',
+                    contextId: 'some-contextId',
+                    protocolPath: 'some-protocol-path',
+                };
+                expect(PermissionsGrant.create(Object.assign(Object.assign({}, permissionsGrantOptions), { scope })))
+                    .to.be.rejectedWith(DwnErrorCode.PermissionsGrantScopeContextIdAndProtocolPath);
+            }));
+        });
+    }));
+    describe('createFromPermissionsRequest()', () => __awaiter(void 0, void 0, void 0, function* () {
+        it('should create a PermissionsGrant from a PermissionsRequest with the same properties', () => __awaiter(void 0, void 0, void 0, function* () {
+            const alice = yield TestDataGenerator.generatePersona();
+            const bob = yield TestDataGenerator.generatePersona();
+            const { privateJwk } = yield Secp256k1.generateKeyPair();
+            const signer = new PrivateKeySigner({ privateJwk, keyId: alice.did });
+            const { permissionsRequest } = yield TestDataGenerator.generatePermissionsRequest({
+                author: bob,
+                description: 'friendship',
+                grantedBy: alice.did,
+                grantedFor: alice.did,
+                grantedTo: bob.did,
+            });
+            const dateExpires = Time.createOffsetTimestamp({ seconds: 60 * 60 * 24 });
+            const permissionsGrant = yield PermissionsGrant.createFromPermissionsRequest(permissionsRequest, signer, { dateExpires });
+            expect(permissionsGrant.author).to.eq(alice.did);
+            expect(permissionsGrant.message.descriptor.description).to.eq(permissionsRequest.message.descriptor.description);
+            expect(permissionsGrant.message.descriptor.grantedBy).to.eq(permissionsRequest.message.descriptor.grantedBy);
+            expect(permissionsGrant.message.descriptor.grantedTo).to.eq(permissionsRequest.message.descriptor.grantedTo);
+            expect(permissionsGrant.message.descriptor.grantedFor).to.eq(permissionsRequest.message.descriptor.grantedFor);
+            expect(permissionsGrant.message.descriptor.scope).to.eql(permissionsRequest.message.descriptor.scope);
+            expect(permissionsGrant.message.descriptor.conditions).to.eq(permissionsRequest.message.descriptor.conditions);
+            expect(permissionsGrant.message.descriptor.permissionsRequestId).to.eq(yield Message.getCid(permissionsRequest.message));
+        }));
+        it('should create a PermissionsGrant from a PermissionsRequest and overrides', () => __awaiter(void 0, void 0, void 0, function* () {
+            const alice = yield DidKeyResolver.generate();
+            const bob = yield DidKeyResolver.generate();
+            const carol = yield DidKeyResolver.generate();
+            const { privateJwk } = yield Secp256k1.generateKeyPair();
+            const signer = new PrivateKeySigner({ privateJwk, keyId: `${alice.did}#key1` });
+            const { permissionsRequest } = yield TestDataGenerator.generatePermissionsRequest();
+            const description = 'friendship';
+            const dateExpires = Time.getCurrentTimestamp();
+            const overrides = {
+                dateExpires,
+                description,
+                grantedBy: alice.did,
+                grantedTo: bob.did,
+                grantedFor: carol.did,
+                scope: {
+                    interface: DwnInterfaceName.Protocols,
+                    method: DwnMethodName.Query,
+                },
+                conditions: {
+                    publication: PermissionsConditionPublication.Required,
+                }
+            };
+            const permissionsGrant = yield PermissionsGrant.createFromPermissionsRequest(permissionsRequest, signer, overrides);
+            expect(permissionsGrant.author).to.eq(alice.did);
+            expect(permissionsGrant.message.descriptor.description).to.eq(description);
+            expect(permissionsGrant.message.descriptor.grantedBy).to.eq(overrides.grantedBy);
+            expect(permissionsGrant.message.descriptor.grantedTo).to.eq(overrides.grantedTo);
+            expect(permissionsGrant.message.descriptor.grantedFor).to.eq(overrides.grantedFor);
+            expect(permissionsGrant.message.descriptor.scope).to.eql(overrides.scope);
+            expect(permissionsGrant.message.descriptor.conditions).to.eq(overrides.conditions);
+            expect(permissionsGrant.message.descriptor.permissionsRequestId).to.eq(yield Message.getCid(permissionsRequest.message));
+        }));
+    }));
+    describe('asDelegatedGrant()', () => __awaiter(void 0, void 0, void 0, function* () {
+        it('should throw if the `delegated` property is not `true`', () => __awaiter(void 0, void 0, void 0, function* () {
+            const alice = yield TestDataGenerator.generatePersona();
+            const { message } = yield PermissionsGrant.create({
+                dateExpires: Time.getCurrentTimestamp(),
+                grantedBy: alice.did,
+                grantedTo: 'did:example:bob',
+                grantedFor: alice.did,
+                scope: { interface: DwnInterfaceName.Records, method: DwnMethodName.Write },
+                signer: Jws.createSigner(alice)
+            });
+            expect(() => PermissionsGrant.asDelegatedGrant(message)).to.throw(DwnErrorCode.PermissionsGrantNotADelegatedGrant);
+        }));
+    }));
+});
+//# sourceMappingURL=permissions-grant.spec.js.map

package/dist/esm/tests/interfaces/permissions-grant.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-grant.spec.js","sourceRoot":"","sources":["../../../../tests/interfaces/permissions-grant.spec.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAM9B,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE1H,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,UAAU,EAAE,GAAS,EAAE;QAC9B,EAAE,CAAC,oCAAoC,EAAE,GAAS,EAAE;YAClD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAE1E,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC;gBAChD,WAAW,EAAG,IAAI,CAAC,mBAAmB,EAAE;gBACxC,WAAW,EAAG,OAAO;gBACrB,SAAS,EAAK,aAAa;gBAC3B,SAAS,EAAK,eAAe;gBAC7B,UAAU,EAAI,aAAa;gBAC3B,KAAK,EAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE;gBAClF,MAAM;aACP,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC/D,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC7D,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9G,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC,CAAA,CAAC,CAAC;QAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAS,EAAE;YACnD,EAAE,CAAC,qCAAqC,EAAE,GAAS,EAAE;gBACnD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;gBAE1E,MAAM,KAAK,GAAoB;oBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;oBAC/B,MAAM,EAAM,cAAc;iBAC3B,CAAC;gBAEF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC;oBAChD,WAAW,EAAG,IAAI,CAAC,mBAAmB,EAAE;oBACxC,WAAW,EAAG,2BAA2B;oBACzC,SAAS,EAAK,aAAa;oBAC3B,SAAS,EAAK,eAAe;oBAC7B,UAAU,EAAI,aAAa;oBAC3B,KAAK,EAAS,KAAK;oBACnB,MAAM;iBACP,CAAC,CAAC;gBAGH,MAAM,CAAE,OAAO,CAAC,UAAU,CAAC,KAAgC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACrG,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,uCAAuC,EAAE,GAAS,EAAE;gBACrD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;gBAE1E,MAAM,KAAK,GAAoB;oBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;oBAC/B,QAAQ,EAAI,cAAc;iBAC3B,CAAC;gBAEF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC;oBAChD,WAAW,EAAG,IAAI,CAAC,mBAAmB,EAAE;oBACxC,WAAW,EAAG,6BAA6B;oBAC3C,SAAS,EAAK,aAAa;oBAC3B,SAAS,EAAK,eAAe;oBAC7B,UAAU,EAAI,aAAa;oBAC3B,KAAK,EAAS,KAAK;oBACnB,MAAM;iBACP,CAAC,CAAC;gBAGH,MAAM,CAAE,OAAO,CAAC,UAAU,CAAC,KAAgC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACvG,CAAC,CAAA,CAAC,CAAC;QACL,CAAC,CAAA,CAAC,CAAC;QAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;YACjC,EAAE,CAAC,6FAA6F,EAAE,GAAS,EAAE;gBAC3G,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;gBAE1E,MAAM,uBAAuB,GAAG;oBAC9B,WAAW,EAAG,IAAI,CAAC,mBAAmB,EAAE;oBACxC,SAAS,EAAK,aAAa;oBAC3B,SAAS,EAAK,eAAe;oBAC7B,UAAU,EAAI,aAAa;oBAC3B,MAAM;iBACP,CAAC;gBAEF,uDAAuD;gBACvD,IAAI,KAAK,GAAoB;oBAC3B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;oBAC/B,MAAM,EAAM,aAAa;oBACzB,QAAQ,EAAI,eAAe;iBAC5B,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC,MAAM,iCAAM,uBAAuB,KAAE,KAAK,IAAG,CAAC;qBACnE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,2CAA2C,CAAC,CAAC;gBAEhF,wDAAwD;gBACxD,KAAK,GAAG;oBACN,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;oBAC/B,MAAM,EAAM,aAAa;oBACzB,SAAS,EAAG,gBAAgB;iBAC7B,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC,MAAM,iCAAM,uBAAuB,KAAE,KAAK,IAAG,CAAC;qBACnE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,2CAA2C,CAAC,CAAC;gBAEhF,2DAA2D;gBAC3D,KAAK,GAAG;oBACN,SAAS,EAAM,gBAAgB,CAAC,OAAO;oBACvC,MAAM,EAAS,aAAa,CAAC,KAAK;oBAClC,MAAM,EAAS,aAAa;oBAC5B,YAAY,EAAG,oBAAoB;iBACpC,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC,MAAM,iCAAM,uBAAuB,KAAE,KAAK,IAAG,CAAC;qBACnE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,2CAA2C,CAAC,CAAC;YAClF,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,kEAAkE,EAAE,GAAS,EAAE;gBAChF,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;gBAE1E,MAAM,uBAAuB,GAAG;oBAC9B,WAAW,EAAG,IAAI,CAAC,mBAAmB,EAAE;oBACxC,SAAS,EAAK,aAAa;oBAC3B,SAAS,EAAK,eAAe;oBAC7B,UAAU,EAAI,aAAa;oBAC3B,MAAM;iBACP,CAAC;gBAEF,sEAAsE;gBACtE,MAAM,KAAK,GAAG;oBACZ,SAAS,EAAM,gBAAgB,CAAC,OAAO;oBACvC,MAAM,EAAS,aAAa,CAAC,KAAK;oBAClC,QAAQ,EAAO,eAAe;oBAC9B,SAAS,EAAM,gBAAgB;oBAC/B,YAAY,EAAG,oBAAoB;iBACpC,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC,MAAM,iCAAM,uBAAuB,KAAE,KAAK,IAAG,CAAC;qBACnE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,6CAA6C,CAAC,CAAC;YACpF,CAAC,CAAA,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAA,CAAC,CAAC;IAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAS,EAAE;QACpD,EAAE,CAAC,qFAAqF,EAAE,GAAS,EAAE;YACnG,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;YAEtD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAEtE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,iBAAiB,CAAC,0BAA0B,CAAC;gBAChF,MAAM,EAAQ,GAAG;gBACjB,WAAW,EAAG,YAAY;gBAC1B,SAAS,EAAK,KAAK,CAAC,GAAG;gBACvB,UAAU,EAAI,KAAK,CAAC,GAAG;gBACvB,SAAS,EAAK,GAAG,CAAC,GAAG;aACtB,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1E,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,4BAA4B,CAAC,kBAAkB,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;YAE1H,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACjH,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC7G,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC7G,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC/G,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACtG,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC/G,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3H,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,0EAA0E,EAAE,GAAS,EAAE;YACxF,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,CAAC;YAE9C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,EAAE,CAAC,CAAC;YAEhF,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,iBAAiB,CAAC,0BAA0B,EAAE,CAAC;YAEpF,MAAM,WAAW,GAAG,YAAY,CAAC;YACjC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC/C,MAAM,SAAS,GAA0C;gBACvD,WAAW;gBACX,WAAW;gBACX,SAAS,EAAI,KAAK,CAAC,GAAG;gBACtB,SAAS,EAAI,GAAG,CAAC,GAAG;gBACpB,UAAU,EAAG,KAAK,CAAC,GAAG;gBACtB,KAAK,EAAQ;oBACX,SAAS,EAAG,gBAAgB,CAAC,SAAS;oBACtC,MAAM,EAAM,aAAa,CAAC,KAAK;iBAChC;gBACD,UAAU,EAAE;oBACV,WAAW,EAAE,+BAA+B,CAAC,QAAQ;iBACtD;aACF,CAAC;YAEF,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,4BAA4B,CAAC,kBAAkB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAEpH,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;YAC3E,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACjF,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACjF,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACnF,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACnF,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3H,CAAC,CAAA,CAAC,CAAC;IACL,CAAC,CAAA,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAS,EAAE;QACxC,EAAE,CAAC,wDAAwD,EAAE,GAAS,EAAE;YACtE,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;YAExD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC;gBAChD,WAAW,EAAG,IAAI,CAAC,mBAAmB,EAAE;gBACxC,SAAS,EAAK,KAAK,CAAC,GAAG;gBACvB,SAAS,EAAK,iBAAiB;gBAC/B,UAAU,EAAI,KAAK,CAAC,GAAG;gBACvB,KAAK,EAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE;gBAClF,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,kCAAkC,CAAC,CAAC;QACrH,CAAC,CAAA,CAAC,CAAC;IACL,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/tests/interfaces/permissions-request.spec.js

@@ -0,0 +1,45 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import chai from 'chai';
+import chaiAsPromised from 'chai-as-promised';
+import { expect } from 'chai';
+import { PermissionsRequest } from '../../src/interfaces/permissions-request.js';
+import { Secp256k1 } from '../../src/utils/secp256k1.js';
+import { DwnInterfaceName, DwnMethodName, PrivateKeySigner } from '../../src/index.js';
+chai.use(chaiAsPromised);
+describe('PermissionsRequest', () => {
+    if (process.env.TESTSOFF === 'true') {
+        return;
+    }
+    describe('create', () => {
+        it('creates a PermissionsRequest message', () => __awaiter(void 0, void 0, void 0, function* () {
+            const { privateJwk } = yield Secp256k1.generateKeyPair();
+            const signer = new PrivateKeySigner({ privateJwk, keyId: 'did:key:bob' });
+            const { message } = yield PermissionsRequest.create({
+                description: 'perms',
+                grantedBy: 'did:key:bob',
+                grantedTo: 'did:key:alice',
+                grantedFor: 'did:key:bob',
+                scope: {
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                    protocol: 'some-protocol',
+                },
+                signer
+            });
+            expect(message.descriptor.grantedTo).to.equal('did:key:alice');
+            expect(message.descriptor.grantedBy).to.equal('did:key:bob');
+            expect(message.descriptor.scope).to.eql({ interface: DwnInterfaceName.Records, method: DwnMethodName.Write, protocol: 'some-protocol', });
+            expect(message.descriptor.conditions).to.be.undefined;
+            expect(message.descriptor.description).to.eql('perms');
+        }));
+    });
+});
+//# sourceMappingURL=permissions-request.spec.js.map

package/dist/esm/tests/interfaces/permissions-request.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-request.spec.js","sourceRoot":"","sources":["../../../../tests/interfaces/permissions-request.spec.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEvF,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAEzB,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,sCAAsC,EAAE,GAAS,EAAE;YACpD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAE1E,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBAClD,WAAW,EAAG,OAAO;gBACrB,SAAS,EAAK,aAAa;gBAC3B,SAAS,EAAK,eAAe;gBAC7B,UAAU,EAAI,aAAa;gBAC3B,KAAK,EAAS;oBACZ,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;oBAC/B,QAAQ,EAAI,eAAe;iBAC5B;gBACD,MAAM;aACP,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC/D,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC7D,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,GAAG,CAAC,CAAC;YAC1I,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC,CAAA,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/tests/interfaces/protocols-configure.spec.js

@@ -0,0 +1,334 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import chaiAsPromised from 'chai-as-promised';
+import chai, { expect } from 'chai';
+import dexProtocolDefinition from '../vectors/protocol-definitions/dex.json' with { type: 'json' };
+import { DwnErrorCode } from '../../src/index.js';
+import { Jws } from '../../src/utils/jws.js';
+import { ProtocolsConfigure } from '../../src/interfaces/protocols-configure.js';
+import { TestDataGenerator } from '../utils/test-data-generator.js';
+import { Time } from '../../src/utils/time.js';
+chai.use(chaiAsPromised);
+describe('ProtocolsConfigure', () => {
+    if (process.env.TESTSOFF === 'true') {
+        return;
+    }
+    describe('create()', () => {
+        it('should use `messageTimestamp` as is if given', () => __awaiter(void 0, void 0, void 0, function* () {
+            const alice = yield TestDataGenerator.generatePersona();
+            const currentTime = Time.getCurrentTimestamp();
+            const definition = Object.assign({}, dexProtocolDefinition);
+            const protocolsConfigure = yield ProtocolsConfigure.create({
+                messageTimestamp: currentTime,
+                definition,
+                signer: Jws.createSigner(alice),
+            });
+            expect(protocolsConfigure.message.descriptor.messageTimestamp).to.equal(currentTime);
+        }));
+        it('should auto-normalize protocol URI', () => __awaiter(void 0, void 0, void 0, function* () {
+            const alice = yield TestDataGenerator.generatePersona();
+            const definition = Object.assign(Object.assign({}, dexProtocolDefinition), { protocol: 'example.com/' });
+            const options = {
+                recipient: alice.did,
+                data: TestDataGenerator.randomBytes(10),
+                dataFormat: 'application/json',
+                signer: Jws.createSigner(alice),
+                definition,
+            };
+            const protocolsConfig = yield ProtocolsConfigure.create(options);
+            const message = protocolsConfig.message;
+            expect(message.descriptor.definition.protocol).to.eq('http://example.com');
+        }));
+        it('should auto-normalize schema URIs', () => __awaiter(void 0, void 0, void 0, function* () {
+            const alice = yield TestDataGenerator.generatePersona();
+            const nonnormalizedDexProtocol = Object.assign({}, dexProtocolDefinition);
+            nonnormalizedDexProtocol.types.ask.schema = 'ask';
+            const options = {
+                recipient: alice.did,
+                data: TestDataGenerator.randomBytes(10),
+                dataFormat: 'application/json',
+                signer: Jws.createSigner(alice),
+                protocol: 'example.com/',
+                definition: nonnormalizedDexProtocol
+            };
+            const protocolsConfig = yield ProtocolsConfigure.create(options);
+            const message = protocolsConfig.message;
+            expect(message.descriptor.definition.types.ask.schema).to.eq('http://ask');
+        }));
+        describe('protocol definition validations', () => {
+            it('allows `role` actions that have protocol path to valid $globalRole records', () => __awaiter(void 0, void 0, void 0, function* () {
+                const definition = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        rootRole: {},
+                        secondLevel: {},
+                        otherRoot: {}
+                    },
+                    structure: {
+                        rootRole: {
+                            $globalRole: true,
+                            secondLevel: {
+                                $actions: [{
+                                        role: 'rootRole', // valid because 'rootRole` has $globalRole: true
+                                        can: 'write'
+                                    }]
+                            }
+                        },
+                        otherRole: {
+                            $actions: [{
+                                    role: 'rootRole', // valid because 'rootRole` has $globalRole: true
+                                    can: 'write'
+                                }]
+                        }
+                    }
+                };
+                const alice = yield TestDataGenerator.generatePersona();
+                const protocolsConfigure = yield ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition
+                });
+                expect(protocolsConfigure.message.descriptor.definition).not.to.be.undefined;
+            }));
+            it('allows `role` actions that have protocol path to valid $contextRole records', () => __awaiter(void 0, void 0, void 0, function* () {
+                const definition = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        rootRole: {},
+                        secondLevel: {},
+                        otherRoot: {}
+                    },
+                    structure: {
+                        thread: {
+                            participant: {
+                                $contextRole: true,
+                            },
+                            chat: {
+                                $actions: [{
+                                        role: 'thread/participant', // valid because 'thread/participant` has $contextRole: true
+                                        can: 'write'
+                                    }]
+                            }
+                        }
+                    }
+                };
+                const alice = yield TestDataGenerator.generatePersona();
+                const protocolsConfigure = yield ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition
+                });
+                expect(protocolsConfigure.message.descriptor.definition).not.to.be.undefined;
+            }));
+            it('rejects protocol definitions with $globalRole at records that are not root records', () => __awaiter(void 0, void 0, void 0, function* () {
+                const definition = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        root: {},
+                        secondLevel: {}
+                    },
+                    structure: {
+                        root: {
+                            secondLevel: {
+                                // $globalRole may only be set on root records, not nested records
+                                $globalRole: true
+                            }
+                        }
+                    }
+                };
+                const alice = yield TestDataGenerator.generatePersona();
+                const createProtocolsConfigurePromise = ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition
+                });
+                yield expect(createProtocolsConfigurePromise)
+                    .to.be.rejectedWith(DwnErrorCode.ProtocolsConfigureGlobalRoleAtProhibitedProtocolPath);
+            }));
+            it('rejects protocol definitions with $contextRole at records that are not second-level records', () => __awaiter(void 0, void 0, void 0, function* () {
+                const alice = yield TestDataGenerator.generatePersona();
+                // it rejects context roles too high in the structure
+                const definitionRootContextRole = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        root: {},
+                        secondLevel: {}
+                    },
+                    structure: {
+                        root: {
+                            // $contextRole may only be set on second-level records, not root records
+                            $contextRole: true,
+                        }
+                    }
+                };
+                const createProtocolsConfigurePromise = ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition: definitionRootContextRole
+                });
+                yield expect(createProtocolsConfigurePromise)
+                    .to.be.rejectedWith(DwnErrorCode.ProtocolsConfigureContextRoleAtProhibitedProtocolPath);
+                // it rejects contextRoles too nested in the structure
+                const definitionTooNestedContextRole = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        root: {},
+                        secondLevel: {}
+                    },
+                    structure: {
+                        root: {
+                            secondLevel: {
+                                thirdLevel: {
+                                    // $contextRole may only be set on second-level records, not third-level or lower records
+                                    $contextRole: true,
+                                }
+                            }
+                        }
+                    }
+                };
+                const createProtocolsConfigurePromise2 = ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition: definitionTooNestedContextRole
+                });
+                yield expect(createProtocolsConfigurePromise2)
+                    .to.be.rejectedWith(DwnErrorCode.ProtocolsConfigureContextRoleAtProhibitedProtocolPath);
+            }));
+            it('rejects protocol definitions with `role` actions that contain invalid roles', () => __awaiter(void 0, void 0, void 0, function* () {
+                const definition = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        rootRole: {},
+                        otherRoot: {},
+                    },
+                    structure: {
+                        rootRole: {
+                        // $globalRole: true // deliberated omitted
+                        },
+                        otherRoot: {
+                            $actions: [{
+                                    role: 'rootRole', // Not a valid role
+                                    can: 'read'
+                                }]
+                        }
+                    }
+                };
+                const alice = yield TestDataGenerator.generatePersona();
+                const createProtocolsConfigurePromise = ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition
+                });
+                yield expect(createProtocolsConfigurePromise)
+                    .to.be.rejectedWith(DwnErrorCode.ProtocolsConfigureInvalidRole);
+            }));
+            it('rejects protocol definitions with actions that contain `of` and  `who` is `anyone`', () => __awaiter(void 0, void 0, void 0, function* () {
+                const definition = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        message: {},
+                    },
+                    structure: {
+                        message: {
+                            $actions: [{
+                                    who: 'anyone',
+                                    of: 'message', // Not allowed
+                                    can: 'read'
+                                }]
+                        }
+                    }
+                };
+                const alice = yield TestDataGenerator.generatePersona();
+                const createProtocolsConfigurePromise = ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition
+                });
+                yield expect(createProtocolsConfigurePromise)
+                    .to.be.rejectedWith(DwnErrorCode.ProtocolsConfigureInvalidActionOfNotAllowed);
+            }));
+            it('rejects protocol definitions with actions that have direct-recipient-can rules with actions other than delete or update', () => __awaiter(void 0, void 0, void 0, function* () {
+                const definition = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        message: {},
+                    },
+                    structure: {
+                        message: {
+                            $actions: [{
+                                    who: 'recipient',
+                                    can: 'read' // not allowed, should be either delete or update
+                                }]
+                        }
+                    }
+                };
+                const alice = yield TestDataGenerator.generatePersona();
+                const createProtocolsConfigurePromise = ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition
+                });
+                yield expect(createProtocolsConfigurePromise)
+                    .to.be.rejectedWith(DwnErrorCode.ProtocolsConfigureInvalidRecipientOfAction);
+            }));
+            it('rejects protocol definitions with actions that don\'t contain `of` and  `who` is `author`', () => __awaiter(void 0, void 0, void 0, function* () {
+                const definition = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        message: {},
+                    },
+                    structure: {
+                        message: {
+                            $actions: [{
+                                    who: 'author',
+                                    // of : 'message', // Intentionally missing
+                                    can: 'read'
+                                }]
+                        }
+                    }
+                };
+                const alice = yield TestDataGenerator.generatePersona();
+                const createProtocolsConfigurePromise = ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition
+                });
+                yield expect(createProtocolsConfigurePromise)
+                    .to.be.rejectedWith(DwnErrorCode.ProtocolsConfigureInvalidActionMissingOf);
+            }));
+            it('rejects protocol definitions with `can: query` in non-role rules', () => __awaiter(void 0, void 0, void 0, function* () {
+                const definition = {
+                    published: true,
+                    protocol: 'http://example.com',
+                    types: {
+                        message: {},
+                    },
+                    structure: {
+                        message: {
+                            $actions: [{
+                                    who: 'author',
+                                    of: 'message',
+                                    can: 'query'
+                                }]
+                        }
+                    }
+                };
+                const alice = yield TestDataGenerator.generatePersona();
+                const createProtocolsConfigurePromise = ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition
+                });
+                yield expect(createProtocolsConfigurePromise)
+                    .to.be.rejected;
+            }));
+        });
+    });
+});
+//# sourceMappingURL=protocols-configure.spec.js.map

package/dist/esm/tests/interfaces/protocols-configure.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocols-configure.spec.js","sourceRoot":"","sources":["../../../../tests/interfaces/protocols-configure.spec.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAC9C,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAIpC,OAAO,qBAAqB,MAAM,0CAA0C,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAEzB,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,8CAA8C,EAAE,GAAS,EAAE;YAC5D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;YAExD,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC/C,MAAM,UAAU,qBAAQ,qBAAqB,CAAE,CAAC;YAChD,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBACzD,gBAAgB,EAAG,WAAW;gBAC9B,UAAU;gBACV,MAAM,EAAa,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aAC3C,CAAC,CAAC;YAEH,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvF,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAS,EAAE;YAClD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;YAExD,MAAM,UAAU,mCAAQ,qBAAqB,KAAE,QAAQ,EAAE,cAAc,GAAE,CAAC;YAC1E,MAAM,OAAO,GAAG;gBACd,SAAS,EAAI,KAAK,CAAC,GAAG;gBACtB,IAAI,EAAS,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9C,UAAU,EAAG,kBAAkB;gBAC/B,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,UAAU;aACX,CAAC;YACF,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAEjE,MAAM,OAAO,GAAG,eAAe,CAAC,OAAoC,CAAC;YAErE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;QAC7E,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAS,EAAE;YACjD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;YAExD,MAAM,wBAAwB,qBAAQ,qBAAqB,CAAE,CAAC;YAC9D,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC;YAElD,MAAM,OAAO,GAAG;gBACd,SAAS,EAAI,KAAK,CAAC,GAAG;gBACtB,IAAI,EAAS,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9C,UAAU,EAAG,kBAAkB;gBAC/B,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,QAAQ,EAAK,cAAc;gBAC3B,UAAU,EAAG,wBAAwB;aACtC,CAAC;YACF,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAEjE,MAAM,OAAO,GAAG,eAAe,CAAC,OAAoC,CAAC;YACrE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QAC7E,CAAC,CAAA,CAAC,CAAC;QAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;YAC/C,EAAE,CAAC,4EAA4E,EAAE,GAAS,EAAE;gBAC1F,MAAM,UAAU,GAAG;oBACjB,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,QAAQ,EAAM,EAAE;wBAChB,WAAW,EAAG,EAAE;wBAChB,SAAS,EAAK,EAAE;qBACjB;oBACD,SAAS,EAAE;wBACT,QAAQ,EAAE;4BACR,WAAW,EAAG,IAAI;4BAClB,WAAW,EAAG;gCACZ,QAAQ,EAAE,CAAC;wCACT,IAAI,EAAG,UAAU,EAAE,iDAAiD;wCACpE,GAAG,EAAI,OAAO;qCACf,CAAC;6BACH;yBACF;wBACD,SAAS,EAAE;4BACT,QAAQ,EAAE,CAAC;oCACT,IAAI,EAAG,UAAU,EAAE,iDAAiD;oCACpE,GAAG,EAAI,OAAO;iCACf,CAAC;yBACH;qBACF;iBACF,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAExD,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;oBACzD,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBAC/B,UAAU;iBACX,CAAC,CAAC;gBAEH,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC;YAC/E,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,6EAA6E,EAAE,GAAS,EAAE;gBAC3F,MAAM,UAAU,GAAG;oBACjB,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,QAAQ,EAAM,EAAE;wBAChB,WAAW,EAAG,EAAE;wBAChB,SAAS,EAAK,EAAE;qBACjB;oBACD,SAAS,EAAE;wBACT,MAAM,EAAE;4BACN,WAAW,EAAE;gCACX,YAAY,EAAE,IAAI;6BACnB;4BACD,IAAI,EAAE;gCACJ,QAAQ,EAAE,CAAC;wCACT,IAAI,EAAG,oBAAoB,EAAE,4DAA4D;wCACzF,GAAG,EAAI,OAAO;qCACf,CAAC;6BACH;yBACF;qBACF;iBACF,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAExD,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;oBACzD,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBAC/B,UAAU;iBACX,CAAC,CAAC;gBAEH,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC;YAC/E,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,oFAAoF,EAAE,GAAS,EAAE;gBAClG,MAAM,UAAU,GAAG;oBACjB,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,IAAI,EAAU,EAAE;wBAChB,WAAW,EAAG,EAAE;qBACjB;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE;4BACJ,WAAW,EAAE;gCACX,kEAAkE;gCAClE,WAAW,EAAE,IAAI;6BAClB;yBACF;qBACF;iBACF,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAExD,MAAM,+BAA+B,GAAG,kBAAkB,CAAC,MAAM,CAAC;oBAChE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBAC/B,UAAU;iBACX,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,+BAA+B,CAAC;qBAC1C,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,oDAAoD,CAAC,CAAC;YAC3F,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,6FAA6F,EAAE,GAAS,EAAE;gBAC3G,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAExD,qDAAqD;gBACrD,MAAM,yBAAyB,GAAG;oBAChC,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,IAAI,EAAU,EAAE;wBAChB,WAAW,EAAG,EAAE;qBACjB;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE;4BACJ,yEAAyE;4BACzE,YAAY,EAAE,IAAI;yBACnB;qBACF;iBACF,CAAC;gBAEF,MAAM,+BAA+B,GAAG,kBAAkB,CAAC,MAAM,CAAC;oBAChE,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBACpC,UAAU,EAAG,yBAAyB;iBACvC,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,+BAA+B,CAAC;qBAC1C,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,qDAAqD,CAAC,CAAC;gBAE1F,sDAAsD;gBACtD,MAAM,8BAA8B,GAAG;oBACrC,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,IAAI,EAAU,EAAE;wBAChB,WAAW,EAAG,EAAE;qBACjB;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE;4BACJ,WAAW,EAAE;gCACX,UAAU,EAAE;oCACV,yFAAyF;oCACzF,YAAY,EAAE,IAAI;iCACnB;6BACF;yBACF;qBACF;iBACF,CAAC;gBAEF,MAAM,gCAAgC,GAAG,kBAAkB,CAAC,MAAM,CAAC;oBACjE,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBACpC,UAAU,EAAG,8BAA8B;iBAC5C,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,gCAAgC,CAAC;qBAC3C,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,qDAAqD,CAAC,CAAC;YAC5F,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,6EAA6E,EAAE,GAAS,EAAE;gBAC3F,MAAM,UAAU,GAAG;oBACjB,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,QAAQ,EAAI,EAAE;wBACd,SAAS,EAAG,EAAE;qBACf;oBACD,SAAS,EAAE;wBACT,QAAQ,EAAE;wBACR,2CAA2C;yBAC5C;wBACD,SAAS,EAAE;4BACT,QAAQ,EAAE,CAAC;oCACT,IAAI,EAAG,UAAU,EAAE,mBAAmB;oCACtC,GAAG,EAAI,MAAM;iCACd,CAAC;yBACH;qBACF;iBACF,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAExD,MAAM,+BAA+B,GAAG,kBAAkB,CAAC,MAAM,CAAC;oBAChE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBAC/B,UAAU;iBACX,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,+BAA+B,CAAC;qBAC1C,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,6BAA6B,CAAC,CAAC;YACpE,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,oFAAoF,EAAE,GAAS,EAAE;gBAClG,MAAM,UAAU,GAAG;oBACjB,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,OAAO,EAAE,EAAE;qBACZ;oBACD,SAAS,EAAE;wBACT,OAAO,EAAE;4BACP,QAAQ,EAAE,CAAC;oCACT,GAAG,EAAG,QAAQ;oCACd,EAAE,EAAI,SAAS,EAAE,cAAc;oCAC/B,GAAG,EAAG,MAAM;iCACb,CAAC;yBACH;qBACF;iBACF,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAExD,MAAM,+BAA+B,GAAG,kBAAkB,CAAC,MAAM,CAAC;oBAChE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBAC/B,UAAU;iBACX,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,+BAA+B,CAAC;qBAC1C,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,2CAA2C,CAAC,CAAC;YAClF,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,yHAAyH,EAAE,GAAS,EAAE;gBACvI,MAAM,UAAU,GAAG;oBACjB,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,OAAO,EAAE,EAAE;qBACZ;oBACD,SAAS,EAAE;wBACT,OAAO,EAAE;4BACP,QAAQ,EAAE,CAAC;oCACT,GAAG,EAAG,WAAW;oCACjB,GAAG,EAAG,MAAM,CAAC,iDAAiD;iCAC/D,CAAC;yBACH;qBACF;iBACF,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAExD,MAAM,+BAA+B,GAAG,kBAAkB,CAAC,MAAM,CAAC;oBAChE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBAC/B,UAAU;iBACX,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,+BAA+B,CAAC;qBAC1C,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,0CAA0C,CAAC,CAAC;YACjF,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,2FAA2F,EAAE,GAAS,EAAE;gBACzG,MAAM,UAAU,GAAG;oBACjB,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,OAAO,EAAE,EAAE;qBACZ;oBACD,SAAS,EAAE;wBACT,OAAO,EAAE;4BACP,QAAQ,EAAE,CAAC;oCACT,GAAG,EAAG,QAAQ;oCACd,2CAA2C;oCAC3C,GAAG,EAAG,MAAM;iCACb,CAAC;yBACH;qBACF;iBACF,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAExD,MAAM,+BAA+B,GAAG,kBAAkB,CAAC,MAAM,CAAC;oBAChE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBAC/B,UAAU;iBACX,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,+BAA+B,CAAC;qBAC1C,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,wCAAwC,CAAC,CAAC;YAC/E,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,kEAAkE,EAAE,GAAS,EAAE;gBAChF,MAAM,UAAU,GAAG;oBACjB,SAAS,EAAG,IAAI;oBAChB,QAAQ,EAAI,oBAAoB;oBAChC,KAAK,EAAO;wBACV,OAAO,EAAE,EAAE;qBACZ;oBACD,SAAS,EAAE;wBACT,OAAO,EAAE;4BACP,QAAQ,EAAE,CAAC;oCACT,GAAG,EAAG,QAAQ;oCACd,EAAE,EAAI,SAAS;oCACf,GAAG,EAAG,OAAO;iCACd,CAAC;yBACH;qBACF;iBACF,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAExD,MAAM,+BAA+B,GAAG,kBAAkB,CAAC,MAAM,CAAC;oBAChE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;oBAC/B,UAAU;iBACX,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,+BAA+B,CAAC;qBAC1C,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC;YACpB,CAAC,CAAA,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}