@icure/api 5.3.5 → 5.3.6

package/dist/icc-api/model/models.d.ts

@@ -0,0 +1,274 @@
+import { AccessLog } from './AccessLog';
+import { Article } from './Article';
+import { Classification } from './Classification';
+import { Document } from './Document';
+import { HealthElement } from './HealthElement';
+import { Invoice } from './Invoice';
+import { Form } from './Form';
+import { Contact } from './Contact';
+import { CalendarItem } from './CalendarItem';
+import { MaintenanceTask } from './MaintenanceTask';
+import { Message } from './Message';
+import { Receipt } from './Receipt';
+import { Patient } from './Patient';
+export * from './AbstractFilterCode';
+export * from './AbstractFilterContact';
+export * from './AbstractFilterDevice';
+export * from './AbstractFilterHealthElement';
+export * from './AbstractFilterHealthcareParty';
+export * from './AbstractFilterInvoice';
+export * from './AbstractFilterMaintenanceTask';
+export * from './AbstractFilterPatient';
+export * from './AbstractFilterService';
+export * from './AbstractFilterUser';
+export * from './AccessLog';
+export * from './AddedDocument';
+export * from './Address';
+export * from './AdministrationQuantity';
+export * from './Agenda';
+export * from './AgreementAppendix';
+export * from './Amp';
+export * from './AmpComponent';
+export * from './Ampp';
+export * from './AmppComponent';
+export * from './Annotation';
+export * from './ApplicationSettings';
+export * from './AppointmentTypeAndPlace';
+export * from './Article';
+export * from './Atc';
+export * from './AttachmentMetadata';
+export * from './AuthenticationResponse';
+export * from './AuthenticationToken';
+export * from './Basic';
+export * from './Body';
+export * from './BulkAttachmentUpdateOptions';
+export * from './CalendarItem';
+export * from './CalendarItemTag';
+export * from './CalendarItemType';
+export * from './CareTeamMember';
+export * from './CareTeamMembership';
+export * from './CheckSMFPatientResult';
+export * from './Classification';
+export * from './ClassificationTemplate';
+export * from './Code';
+export * from './CodeStub';
+export * from './CodeType';
+export * from './CommentedClassification';
+export * from './Commercialization';
+export * from './Company';
+export * from './Contact';
+export * from './Content';
+export * from './Copayment';
+export * from './Data';
+export * from './DataAttachment';
+export * from './DataOwnerRegistrationSuccess';
+export * from './DataOwnerWithType';
+export * from './DatabaseInfo';
+export * from './DatabaseInitialisation';
+export * from './DatabaseSynchronization';
+export * from './Delegation';
+export * from './DeletedAttachment';
+export * from './Device';
+export * from './DeviceType';
+export * from './DiaryNoteExportInfo';
+export * from './Dmpp';
+export * from './DocIdentifier';
+export * from './Document';
+export * from './DocumentGroup';
+export * from './DocumentTemplate';
+export * from './Duration';
+export * from './EIDItem';
+export * from './Editor';
+export * from './EfactInvoice';
+export * from './Employer';
+export * from './EmploymentInfo';
+export * from './EntityReference';
+export * from './EntityTemplate';
+export * from './Episode';
+export * from './FilterChainCode';
+export * from './FilterChainContact';
+export * from './FilterChainDevice';
+export * from './FilterChainHealthElement';
+export * from './FilterChainHealthcareParty';
+export * from './FilterChainInvoice';
+export * from './FilterChainMaintenanceTask';
+export * from './FilterChainPatient';
+export * from './FilterChainService';
+export * from './FilterChainUser';
+export * from './FinancialInstitutionInformation';
+export * from './FlatRateTarification';
+export * from './FlowItem';
+export * from './Form';
+export * from './FormColumn';
+export * from './FormDataOption';
+export * from './FormLayout';
+export * from './FormLayoutData';
+export * from './FormPlanning';
+export * from './FormSection';
+export * from './FormTemplate';
+export * from './FormTemplateLayout';
+export * from './Formula';
+export * from './FrontEndMigration';
+export * from './Group';
+export * from './GroupDatabasesInfo';
+export * from './GuiCode';
+export * from './GuiCodeType';
+export * from './GroupDeletionReport';
+export * from './HealthElement';
+export * from './HealthcareParty';
+export * from './HealthcarePartyHistoryStatus';
+export * from './IcureStub';
+export * from './IdWithRev';
+export * from './Identifier';
+export * from './IdentityDocumentReader';
+export * from './ImportMapping';
+export * from './ImportResult';
+export * from './IncapacityExportInfo';
+export * from './IndexingInfo';
+export * from './Ingredient';
+export * from './Insurability';
+export * from './Insurance';
+export * from './Invoice';
+export * from './InvoiceItem';
+export * from './InvoiceSender';
+export * from './InvoicesBatch';
+export * from './InvoicingCode';
+export * from './Keyword';
+export * from './KeywordSubword';
+export * from './LabelledOccurence';
+export * from './LetterValue';
+export * from './ListOfIds';
+export * from './ListOfProperties';
+export * from './LoginCredentials';
+export * from './MaintenanceTask';
+export * from './MapOfIds';
+export * from './Measure';
+export * from './MedexInfo';
+export * from './MedicalHouseContract';
+export * from './MedicalLocation';
+export * from './Medication';
+export * from './MedicationSchemeExportInfo';
+export * from './Medicinalproduct';
+export * from './Message';
+export * from './MessageReadStatus';
+export * from './MessageWithBatch';
+export * from './MessagesReadStatusUpdate';
+export * from './MimeAttachment';
+export * from './Nmp';
+export * from './NoGenericPrescriptionReason';
+export * from './NoSwitchReason';
+export * from './NumeratorRange';
+export * from './PackagingType';
+export * from './PaginatedDocumentKeyIdPairObject';
+export * from './PaginatedListAccessLog';
+export * from './PaginatedListAmp';
+export * from './PaginatedListCalendarItem';
+export * from './PaginatedListClassification';
+export * from './PaginatedListClassificationTemplate';
+export * from './PaginatedListCode';
+export * from './PaginatedListContact';
+export * from './PaginatedListDevice';
+export * from './PaginatedListDocument';
+export * from './PaginatedListEntityTemplate';
+export * from './PaginatedListForm';
+export * from './PaginatedListGroup';
+export * from './PaginatedListHealthElement';
+export * from './PaginatedListHealthcareParty';
+export * from './PaginatedListInvoice';
+export * from './PaginatedListMaintenanceTask';
+export * from './PaginatedListMessage';
+export * from './PaginatedListNmp';
+export * from './PaginatedListPatient';
+export * from './PaginatedListService';
+export * from './PaginatedListString';
+export * from './PaginatedListTarification';
+export * from './PaginatedListUser';
+export * from './PaginatedListVmp';
+export * from './PaginatedListVmpGroup';
+export * from './Paragraph';
+export * from './ParagraphAgreement';
+export * from './Part';
+export * from './Partnership';
+export * from './Patient';
+export * from './PatientHealthCareParty';
+export * from './Payment';
+export * from './Periodicity';
+export * from './Permission';
+export * from './PermissionItem';
+export * from './PersonName';
+export * from './PharmaceuticalForm';
+export * from './PharmaceuticalFormStub';
+export * from './Place';
+export * from './PlanOfAction';
+export * from './Predicate';
+export * from './Pricing';
+export * from './PropertyStub';
+export * from './PropertyTypeStub';
+export * from './PublicKey';
+export * from './Quantity';
+export * from './Receipt';
+export * from './ReferralPeriod';
+export * from './RegimenItem';
+export * from './RegistrationInformation';
+export * from './RegistrationSuccess';
+export * from './Reimbursement';
+export * from './ReimbursementCriterion';
+export * from './Remote';
+export * from './RemoteAuthentication';
+export * from './Renewal';
+export * from './Replication';
+export * from './ReplicateCommand';
+export * from './ReplicationInfo';
+export * from './ReplicationStats';
+export * from './ReplicatorDocument';
+export * from './ReplicatorResponse';
+export * from './ResultInfo';
+export * from './Right';
+export * from './RouteOfAdministration';
+export * from './SamText';
+export * from './SamVersion';
+export * from './SchoolingInfo';
+export * from './Section';
+export * from './Service';
+export * from './ServiceLink';
+export * from './SoftwareMedicalFileExport';
+export * from './StandardSubstance';
+export * from './StrengthRange';
+export * from './StructureElement';
+export * from './SubContact';
+export * from './Substance';
+export * from './SubstanceStub';
+export * from './Substanceproduct';
+export * from './Suggest';
+export * from './SumehrContent';
+export * from './SumehrExportInfo';
+export * from './SumehrValidity';
+export * from './SupplyProblem';
+export * from './Suspension';
+export * from './Tag';
+export * from './Tarification';
+export * from './Telecom';
+export * from './TimeSeries';
+export * from './TimeTable';
+export * from './TimeTableHour';
+export * from './TimeTableItem';
+export * from './TokenWithGroup';
+export * from './TypedValueObject';
+export * from './Unit';
+export * from './User';
+export * from './UserAndHealthcareParty';
+export * from './UserGroup';
+export * from './Valorisation';
+export * from './Verse';
+export * from './VirtualForm';
+export * from './VirtualIngredient';
+export * from './Vmp';
+export * from './VmpComponent';
+export * from './VmpGroup';
+export * from './VmpGroupStub';
+export * from './VmpStub';
+export * from './Vtm';
+export * from './Wada';
+export * from './Weekday';
+export type EncryptedEntity = AccessLog | Article | CalendarItem | Classification | Contact | Document | Form | HealthElement | Invoice | MaintenanceTask | Message | Patient | Receipt;
+export type EncryptedParentEntity = Message | Patient;

package/dist/icc-x-api/auth/AuthenticationProvider.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NoAuthenticationProvider = exports.BasicAuthenticationProvider = exports.JwtAuthenticationProvider = exports.EnsembleAuthenticationProvider = void 0;
+const EnsembleAuthService_1 = require("./EnsembleAuthService");
+const JwtBridgedAuthService_1 = require("./JwtBridgedAuthService");
+const NoAuthService_1 = require("./NoAuthService");
+const BasicAuthService_1 = require("./BasicAuthService");
+const JwtAuthService_1 = require("./JwtAuthService");
+class EnsembleAuthenticationProvider {
+    constructor(authApi, username, password, jwtTimeout = 3600, thirdPartyTokens = {}) {
+        this.authApi = authApi;
+        this.username = username;
+        this.password = password;
+        this.jwtTimeout = jwtTimeout;
+        this.jwtAuth = new JwtBridgedAuthService_1.JwtBridgedAuthService(this.authApi, this.username, this.password, thirdPartyTokens);
+        this.basicAuth = new BasicAuthService_1.BasicAuthService(this.username, this.password);
+    }
+    getIcureTokens() {
+        return this.jwtAuth.getIcureTokens();
+    }
+    getAuthService() {
+        // If the jwtAuth is in an error state, it instantiates a new one,
+        // but it will not use it until the suspension ends
+        if (this.jwtAuth.isInErrorState()) {
+            console.warn('Error state in JWT, I will skip it');
+            this.jwtAuth = new JwtBridgedAuthService_1.JwtBridgedAuthService(this.authApi, this.username, this.password);
+            this.suspensionEnd = new Date(new Date().getTime() + this.jwtTimeout * 1000);
+        }
+        return !!this.suspensionEnd && new Date() <= this.suspensionEnd
+            ? new EnsembleAuthService_1.EnsembleAuthService(null, new NoAuthService_1.NoAuthService(), this.basicAuth)
+            : new EnsembleAuthService_1.EnsembleAuthService(this.jwtAuth, new NoAuthService_1.NoAuthService(), this.basicAuth);
+    }
+}
+exports.EnsembleAuthenticationProvider = EnsembleAuthenticationProvider;
+class JwtAuthenticationProvider {
+    getIcureTokens() {
+        return Promise.resolve({ refreshToken: '', token: '' });
+    }
+    /**
+     * @internal
+     * @param authApi
+     * @param username
+     * @param password
+     * @param icureToken
+     */
+    constructor(authApi, username, password, icureToken) {
+        this.jwtAuth = icureToken
+            ? new JwtAuthService_1.JwtAuthService(authApi, icureToken.token, icureToken.refreshToken)
+            : new JwtBridgedAuthService_1.JwtBridgedAuthService(authApi, username, password);
+    }
+    getAuthService() {
+        return this.jwtAuth;
+    }
+}
+exports.JwtAuthenticationProvider = JwtAuthenticationProvider;
+class BasicAuthenticationProvider {
+    getIcureTokens() {
+        return Promise.resolve();
+    }
+    constructor(username, password) {
+        this.username = username;
+        this.password = password;
+    }
+    getAuthService() {
+        return new BasicAuthService_1.BasicAuthService(this.username, this.password);
+    }
+}
+exports.BasicAuthenticationProvider = BasicAuthenticationProvider;
+class NoAuthenticationProvider {
+    getAuthService() {
+        return new NoAuthService_1.NoAuthService();
+    }
+    getIcureTokens() {
+        return Promise.resolve();
+    }
+}
+exports.NoAuthenticationProvider = NoAuthenticationProvider;
+//# sourceMappingURL=AuthenticationProvider.js.map

package/dist/icc-x-api/auth/AuthenticationProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticationProvider.js","sourceRoot":"","sources":["../../../icc-x-api/auth/AuthenticationProvider.ts"],"names":[],"mappings":";;;AAEA,+DAA2D;AAC3D,mEAA+D;AAC/D,mDAA+C;AAC/C,yDAAqD;AACrD,qDAAiD;AAOjD,MAAa,8BAA8B;IAKzC,YACU,OAAmB,EACnB,QAAgB,EAChB,QAAgB,EAChB,aAAqB,IAAI,EACjC,mBAAqD,EAAE;QAJ/C,YAAO,GAAP,OAAO,CAAY;QACnB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,eAAU,GAAV,UAAU,CAAe;QAGjC,IAAI,CAAC,OAAO,GAAG,IAAI,6CAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;QACtG,IAAI,CAAC,SAAS,GAAG,IAAI,mCAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACrE,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;IACtC,CAAC;IAED,cAAc;QACZ,kEAAkE;QAClE,mDAAmD;QACnD,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE;YACjC,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;YAClD,IAAI,CAAC,OAAO,GAAG,IAAI,6CAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpF,IAAI,CAAC,aAAa,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;SAC7E;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,aAAa;YAC7D,CAAC,CAAC,IAAI,yCAAmB,CAAC,IAAI,EAAE,IAAI,6BAAa,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC;YACpE,CAAC,CAAC,IAAI,yCAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,6BAAa,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAChF,CAAC;CACF;AAjCD,wEAiCC;AAED,MAAa,yBAAyB;IACpC,cAAc;QACZ,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IACzD,CAAC;IAGD;;;;;;OAMG;IACH,YAAY,OAAmB,EAAE,QAAiB,EAAE,QAAiB,EAAE,UAAoD;QACzH,IAAI,CAAC,OAAO,GAAG,UAAU;YACvB,CAAC,CAAC,IAAI,+BAAc,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC;YACxE,CAAC,CAAC,IAAI,6CAAqB,CAAC,OAAO,EAAE,QAAS,EAAE,QAAS,CAAC,CAAA;IAC9D,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;CACF;AAtBD,8DAsBC;AAED,MAAa,2BAA2B;IACtC,cAAc;QACZ,OAAO,OAAO,CAAC,OAAO,EAAwB,CAAA;IAChD,CAAC;IACD,YAAoB,QAAgB,EAAU,QAAgB;QAA1C,aAAQ,GAAR,QAAQ,CAAQ;QAAU,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAElE,cAAc;QACZ,OAAO,IAAI,mCAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC3D,CAAC;CACF;AATD,kEASC;AAED,MAAa,wBAAwB;IACnC,cAAc;QACZ,OAAO,IAAI,6BAAa,EAAE,CAAA;IAC5B,CAAC;IAED,cAAc;QACZ,OAAO,OAAO,CAAC,OAAO,EAAwB,CAAA;IAChD,CAAC;CACF;AARD,4DAQC","sourcesContent":["import { AuthService } from './AuthService'\nimport { IccAuthApi, OAuthThirdParty } from '../../icc-api'\nimport { EnsembleAuthService } from './EnsembleAuthService'\nimport { JwtBridgedAuthService } from './JwtBridgedAuthService'\nimport { NoAuthService } from './NoAuthService'\nimport { BasicAuthService } from './BasicAuthService'\nimport { JwtAuthService } from './JwtAuthService'\n\nexport interface AuthenticationProvider {\n  getAuthService(): AuthService\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined>\n}\n\nexport class EnsembleAuthenticationProvider implements AuthenticationProvider {\n  private readonly basicAuth: BasicAuthService\n  private jwtAuth: JwtBridgedAuthService\n  private suspensionEnd: Date | undefined\n\n  constructor(\n    private authApi: IccAuthApi,\n    private username: string,\n    private password: string,\n    private jwtTimeout: number = 3600,\n    thirdPartyTokens: { [thirdParty: string]: string } = {}\n  ) {\n    this.jwtAuth = new JwtBridgedAuthService(this.authApi, this.username, this.password, thirdPartyTokens)\n    this.basicAuth = new BasicAuthService(this.username, this.password)\n  }\n\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined> {\n    return this.jwtAuth.getIcureTokens()\n  }\n\n  getAuthService(): AuthService {\n    // If the jwtAuth is in an error state, it instantiates a new one,\n    // but it will not use it until the suspension ends\n    if (this.jwtAuth.isInErrorState()) {\n      console.warn('Error state in JWT, I will skip it')\n      this.jwtAuth = new JwtBridgedAuthService(this.authApi, this.username, this.password)\n      this.suspensionEnd = new Date(new Date().getTime() + this.jwtTimeout * 1000)\n    }\n\n    return !!this.suspensionEnd && new Date() <= this.suspensionEnd\n      ? new EnsembleAuthService(null, new NoAuthService(), this.basicAuth)\n      : new EnsembleAuthService(this.jwtAuth, new NoAuthService(), this.basicAuth)\n  }\n}\n\nexport class JwtAuthenticationProvider implements AuthenticationProvider {\n  getIcureTokens(): Promise<{ token: string; refreshToken: string }> {\n    return Promise.resolve({ refreshToken: '', token: '' })\n  }\n  private readonly jwtAuth: AuthService\n\n  /**\n   * @internal\n   * @param authApi\n   * @param username\n   * @param password\n   * @param icureToken\n   */\n  constructor(authApi: IccAuthApi, username?: string, password?: string, icureToken?: { token: string; refreshToken: string }) {\n    this.jwtAuth = icureToken\n      ? new JwtAuthService(authApi, icureToken.token, icureToken.refreshToken)\n      : new JwtBridgedAuthService(authApi, username!, password!)\n  }\n\n  getAuthService(): AuthService {\n    return this.jwtAuth\n  }\n}\n\nexport class BasicAuthenticationProvider implements AuthenticationProvider {\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined> {\n    return Promise.resolve() as Promise<undefined>\n  }\n  constructor(private username: string, private password: string) {}\n\n  getAuthService(): AuthService {\n    return new BasicAuthService(this.username, this.password)\n  }\n}\n\nexport class NoAuthenticationProvider implements AuthenticationProvider {\n  getAuthService(): AuthService {\n    return new NoAuthService()\n  }\n\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined> {\n    return Promise.resolve() as Promise<undefined>\n  }\n}\n"]}

package/dist/icc-x-api/auth/JwtAuthService.d.ts

@@ -0,0 +1,20 @@
+import { AuthService } from './AuthService';
+import { XHR } from '../../icc-api/api/XHR';
+import { IccAuthApi } from '../../icc-api';
+import Header = XHR.Header;
+export declare class JwtAuthService implements AuthService {
+    private authApi;
+    private _error;
+    private _currentPromise;
+    constructor(authApi: IccAuthApi, token: string, refreshToken: string);
+    getIcureTokens(): Promise<{
+        token: string;
+        refreshToken: string;
+    } | undefined>;
+    getAuthHeaders(): Promise<Array<Header>>;
+    private _refreshAuthJwt;
+    private _isJwtInvalidOrExpired;
+    private _base64Decode;
+    invalidateHeader(error: Error): void;
+    isInErrorState(): boolean;
+}

package/dist/icc-x-api/auth/JwtAuthService.js

@@ -0,0 +1,85 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtAuthService = void 0;
+const XHR_1 = require("../../icc-api/api/XHR");
+const utils_1 = require("../utils");
+class JwtAuthService {
+    constructor(authApi, token, refreshToken) {
+        this.authApi = authApi;
+        this._error = null;
+        this._currentPromise = Promise.resolve({ authJwt: token, refreshJwt: refreshToken });
+    }
+    getIcureTokens() {
+        return this._currentPromise.then(({ authJwt, refreshJwt }) => ({ token: authJwt, refreshToken: refreshJwt }));
+    }
+    getAuthHeaders() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this._currentPromise
+                .then(({ authJwt, refreshJwt }) => {
+                if (!authJwt || this._isJwtInvalidOrExpired(authJwt)) {
+                    // If it does not have the JWT, tries to get it
+                    // If the JWT is expired, tries to refresh it
+                    this._currentPromise = this._refreshAuthJwt(refreshJwt).then((updatedTokens) => {
+                        // If here the token is null,
+                        // it goes in a suspension status
+                        if (!updatedTokens.authJwt) {
+                            throw new Error('Your iCure back-end version does not support JWT authentication');
+                        }
+                        return updatedTokens;
+                    });
+                }
+                else if (!!this._error) {
+                    throw this._error;
+                }
+                return this._currentPromise;
+            })
+                .then(({ authJwt }) => {
+                return [new XHR_1.XHR.Header('Authorization', `Bearer ${authJwt}`)];
+            });
+        });
+    }
+    _refreshAuthJwt(refreshJwt) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // If I do not have a refresh JWT or the refresh JWT is expired,
+            // I have to log in again
+            if (this._isJwtInvalidOrExpired(refreshJwt)) {
+                throw Error('Missing or expired refresh token: please log in again');
+            }
+            else {
+                return this.authApi.refreshAuthenticationJWT(refreshJwt).then((refreshResponse) => ({
+                    authJwt: refreshResponse.token,
+                    refreshJwt: refreshJwt,
+                }));
+            }
+        });
+    }
+    _isJwtInvalidOrExpired(jwt) {
+        const parts = jwt.split('.');
+        if (parts.length !== 3) {
+            return true;
+        }
+        const payload = this._base64Decode(parts[1]);
+        // Using the 'exp' string is safe to use as it is part of the JWT RFC and cannot be modified by us.
+        return !('exp' in payload) || payload['exp'] * 1000 < new Date().getTime();
+    }
+    _base64Decode(encodedString) {
+        return JSON.parse((0, utils_1.a2b)(encodedString));
+    }
+    invalidateHeader(error) {
+        this._error = error;
+    }
+    isInErrorState() {
+        return !!this._error;
+    }
+}
+exports.JwtAuthService = JwtAuthService;
+//# sourceMappingURL=JwtAuthService.js.map

package/dist/icc-x-api/auth/JwtAuthService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JwtAuthService.js","sourceRoot":"","sources":["../../../icc-x-api/auth/JwtAuthService.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,+CAA2C;AAI3C,oCAA8B;AAI9B,MAAa,cAAc;IAIzB,YAAoB,OAAmB,EAAE,KAAa,EAAE,YAAoB;QAAxD,YAAO,GAAP,OAAO,CAAY;QAH/B,WAAM,GAAiB,IAAI,CAAA;QAIjC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAA;IACtF,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;IAC/G,CAAC;IAEK,cAAc;;YAClB,OAAO,IAAI,CAAC,eAAe;iBACxB,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE;gBAChC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE;oBACpD,+CAA+C;oBAC/C,6CAA6C;oBAE7C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE;wBAC7E,6BAA6B;wBAC7B,iCAAiC;wBACjC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE;4BAC1B,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;yBACnF;wBAED,OAAO,aAAa,CAAA;oBACtB,CAAC,CAAC,CAAA;iBACH;qBAAM,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE;oBACxB,MAAM,IAAI,CAAC,MAAM,CAAA;iBAClB;gBACD,OAAO,IAAI,CAAC,eAAe,CAAA;YAC7B,CAAC,CAAC;iBACD,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpB,OAAO,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,OAAO,EAAE,CAAC,CAAC,CAAA;YAC/D,CAAC,CAAC,CAAA;QACN,CAAC;KAAA;IAEa,eAAe,CAAC,UAAkB;;YAC9C,gEAAgE;YAChE,yBAAyB;YACzB,IAAI,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE;gBAC3C,MAAM,KAAK,CAAC,uDAAuD,CAAC,CAAA;aACrE;iBAAM;gBACL,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;oBAClF,OAAO,EAAE,eAAe,CAAC,KAAM;oBAC/B,UAAU,EAAE,UAAU;iBACvB,CAAC,CAAC,CAAA;aACJ;QACH,CAAC;KAAA;IAEO,sBAAsB,CAAC,GAAW;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE;YACtB,OAAO,IAAI,CAAA;SACZ;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5C,mGAAmG;QACnG,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;IAC5E,CAAC;IAEO,aAAa,CAAC,aAAqB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,WAAG,EAAC,aAAa,CAAC,CAAC,CAAA;IACvC,CAAC;IAED,gBAAgB,CAAC,KAAY;QAC3B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,cAAc;QACZ,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;IACtB,CAAC;CACF;AAxED,wCAwEC","sourcesContent":["import { AuthService } from './AuthService'\nimport { XHR } from '../../icc-api/api/XHR'\nimport { IccAuthApi, OAuthThirdParty } from '../../icc-api'\nimport { LoginCredentials } from '../../icc-api/model/LoginCredentials'\nimport Header = XHR.Header\nimport { a2b } from '../utils'\nimport { AuthenticationResponse } from '../../icc-api/model/AuthenticationResponse'\nimport XHRError = XHR.XHRError\n\nexport class JwtAuthService implements AuthService {\n  private _error: Error | null = null\n  private _currentPromise: Promise<{ authJwt: string; refreshJwt: string }>\n\n  constructor(private authApi: IccAuthApi, token: string, refreshToken: string) {\n    this._currentPromise = Promise.resolve({ authJwt: token, refreshJwt: refreshToken })\n  }\n\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined> {\n    return this._currentPromise.then(({ authJwt, refreshJwt }) => ({ token: authJwt, refreshToken: refreshJwt }))\n  }\n\n  async getAuthHeaders(): Promise<Array<Header>> {\n    return this._currentPromise\n      .then(({ authJwt, refreshJwt }) => {\n        if (!authJwt || this._isJwtInvalidOrExpired(authJwt)) {\n          // If it does not have the JWT, tries to get it\n          // If the JWT is expired, tries to refresh it\n\n          this._currentPromise = this._refreshAuthJwt(refreshJwt).then((updatedTokens) => {\n            // If here the token is null,\n            // it goes in a suspension status\n            if (!updatedTokens.authJwt) {\n              throw new Error('Your iCure back-end version does not support JWT authentication')\n            }\n\n            return updatedTokens\n          })\n        } else if (!!this._error) {\n          throw this._error\n        }\n        return this._currentPromise\n      })\n      .then(({ authJwt }) => {\n        return [new XHR.Header('Authorization', `Bearer ${authJwt}`)]\n      })\n  }\n\n  private async _refreshAuthJwt(refreshJwt: string): Promise<{ authJwt: string; refreshJwt: string }> {\n    // If I do not have a refresh JWT or the refresh JWT is expired,\n    // I have to log in again\n    if (this._isJwtInvalidOrExpired(refreshJwt)) {\n      throw Error('Missing or expired refresh token: please log in again')\n    } else {\n      return this.authApi.refreshAuthenticationJWT(refreshJwt).then((refreshResponse) => ({\n        authJwt: refreshResponse.token!,\n        refreshJwt: refreshJwt,\n      }))\n    }\n  }\n\n  private _isJwtInvalidOrExpired(jwt: string): boolean {\n    const parts = jwt.split('.')\n    if (parts.length !== 3) {\n      return true\n    }\n    const payload = this._base64Decode(parts[1])\n    // Using the 'exp' string is safe to use as it is part of the JWT RFC and cannot be modified by us.\n    return !('exp' in payload) || payload['exp'] * 1000 < new Date().getTime()\n  }\n\n  private _base64Decode(encodedString: string): any {\n    return JSON.parse(a2b(encodedString))\n  }\n\n  invalidateHeader(error: Error): void {\n    this._error = error\n  }\n\n  isInErrorState(): boolean {\n    return !!this._error\n  }\n}\n"]}

package/dist/icc-x-api/auth/JwtBridgedAuthService.d.ts

@@ -0,0 +1,26 @@
+import { AuthService } from './AuthService';
+import { XHR } from '../../icc-api/api/XHR';
+import { IccAuthApi } from '../../icc-api';
+import Header = XHR.Header;
+export declare class JwtBridgedAuthService implements AuthService {
+    private authApi;
+    private username;
+    private password;
+    private thirdPartyTokens;
+    private _error;
+    private _currentPromise;
+    constructor(authApi: IccAuthApi, username: string, password: string, thirdPartyTokens?: {
+        [thirdParty: string]: string;
+    });
+    getIcureTokens(): Promise<{
+        token: string;
+        refreshToken: string;
+    } | undefined>;
+    getAuthHeaders(): Promise<Array<Header>>;
+    private _refreshAuthJwt;
+    private _loginAndGetTokens;
+    private _isJwtInvalidOrExpired;
+    private _base64Decode;
+    invalidateHeader(error: Error): void;
+    isInErrorState(): boolean;
+}

package/dist/icc-x-api/auth/JwtBridgedAuthService.js

@@ -0,0 +1,128 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtBridgedAuthService = void 0;
+const XHR_1 = require("../../icc-api/api/XHR");
+const LoginCredentials_1 = require("../../icc-api/model/LoginCredentials");
+const utils_1 = require("../utils");
+var XHRError = XHR_1.XHR.XHRError;
+class JwtBridgedAuthService {
+    constructor(authApi, username, password, thirdPartyTokens = {}) {
+        this.authApi = authApi;
+        this.username = username;
+        this.password = password;
+        this.thirdPartyTokens = thirdPartyTokens;
+        this._error = null;
+        this._currentPromise = Promise.resolve({});
+    }
+    getIcureTokens() {
+        return this.getAuthHeaders().then(() => this._currentPromise.then(({ authJwt, refreshJwt }) => ({ token: authJwt, refreshToken: refreshJwt })));
+    }
+    getAuthHeaders() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this._currentPromise
+                .then(({ authJwt, refreshJwt }) => {
+                if (!authJwt || this._isJwtInvalidOrExpired(authJwt)) {
+                    // If it does not have the JWT, tries to get it
+                    // If the JWT is expired, tries to refresh it
+                    this._currentPromise = this._refreshAuthJwt(refreshJwt).then((updatedTokens) => {
+                        // If here the token is null,
+                        // it goes in a suspension status
+                        if (!updatedTokens.authJwt) {
+                            throw new Error('Your iCure back-end version does not support JWT authentication');
+                        }
+                        return updatedTokens;
+                    });
+                }
+                else if (!!this._error) {
+                    throw this._error;
+                }
+                return this._currentPromise;
+            })
+                .then(({ authJwt }) => {
+                return [new XHR_1.XHR.Header('Authorization', `Bearer ${authJwt}`)];
+            });
+        });
+    }
+    _refreshAuthJwt(refreshJwt) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // If I do not have a refresh JWT or the refresh JWT is expired,
+            // I have to log in again
+            if (!refreshJwt || this._isJwtInvalidOrExpired(refreshJwt)) {
+                return this._loginAndGetTokens();
+            }
+            else {
+                return this.authApi.refreshAuthenticationJWT(refreshJwt).then((refreshResponse) => ({
+                    authJwt: refreshResponse.token,
+                    refreshJwt: refreshJwt,
+                }));
+            }
+        });
+    }
+    _loginAndGetTokens() {
+        return __awaiter(this, void 0, void 0, function* () {
+            let authResponse;
+            let firstError;
+            if (this.username && this.password) {
+                try {
+                    authResponse = yield this.authApi.login(new LoginCredentials_1.LoginCredentials({
+                        username: this.username,
+                        password: this.password,
+                    }));
+                }
+                catch (e) {
+                    firstError = e;
+                }
+            }
+            if (!authResponse) {
+                authResponse = yield Object.entries(this.thirdPartyTokens).reduce((acc, [thirdParty, token]) => __awaiter(this, void 0, void 0, function* () {
+                    const prev = yield acc;
+                    return (prev !== null && prev !== void 0 ? prev : (token
+                        ? this.authApi.loginWithThirdPartyToken(thirdParty, token).catch((e) => {
+                            if (!firstError) {
+                                firstError = e;
+                            }
+                            return Promise.resolve();
+                        })
+                        : undefined));
+                }), Promise.resolve());
+            }
+            if (!authResponse) {
+                if (firstError)
+                    throw firstError;
+                throw new XHRError('', 'Unknown error', 401, 'Unauthorized', new Headers());
+            }
+            return {
+                authJwt: authResponse.token,
+                refreshJwt: authResponse.refreshToken,
+            };
+        });
+    }
+    _isJwtInvalidOrExpired(jwt) {
+        const parts = jwt.split('.');
+        if (parts.length !== 3) {
+            return true;
+        }
+        const payload = this._base64Decode(parts[1]);
+        return !('exp' in payload) || payload['exp'] * 1000 < new Date().getTime();
+    }
+    _base64Decode(encodedString) {
+        return JSON.parse((0, utils_1.a2b)(encodedString));
+    }
+    invalidateHeader(error) {
+        this._error = error;
+    }
+    isInErrorState() {
+        return !!this._error;
+    }
+}
+exports.JwtBridgedAuthService = JwtBridgedAuthService;
+//# sourceMappingURL=JwtBridgedAuthService.js.map

package/dist/icc-x-api/auth/JwtBridgedAuthService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JwtBridgedAuthService.js","sourceRoot":"","sources":["../../../icc-x-api/auth/JwtBridgedAuthService.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,+CAA2C;AAE3C,2EAAuE;AAEvE,oCAA8B;AAE9B,IAAO,QAAQ,GAAG,SAAG,CAAC,QAAQ,CAAA;AAE9B,MAAa,qBAAqB;IAIhC,YACU,OAAmB,EACnB,QAAgB,EAChB,QAAgB,EAChB,mBAAqD,EAAE;QAHvD,YAAO,GAAP,OAAO,CAAY;QACnB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,qBAAgB,GAAhB,gBAAgB,CAAuC;QAPzD,WAAM,GAAiB,IAAI,CAAA;QAC3B,oBAAe,GAAuD,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAO9F,CAAC;IAEJ,cAAc;QACZ,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAQ,EAAE,YAAY,EAAE,UAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IACnJ,CAAC;IAEK,cAAc;;YAClB,OAAO,IAAI,CAAC,eAAe;iBACxB,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE;gBAChC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE;oBACpD,+CAA+C;oBAC/C,6CAA6C;oBAE7C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE;wBAC7E,6BAA6B;wBAC7B,iCAAiC;wBACjC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE;4BAC1B,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;yBACnF;wBAED,OAAO,aAAa,CAAA;oBACtB,CAAC,CAAC,CAAA;iBACH;qBAAM,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE;oBACxB,MAAM,IAAI,CAAC,MAAM,CAAA;iBAClB;gBACD,OAAO,IAAI,CAAC,eAAe,CAAA;YAC7B,CAAC,CAAC;iBACD,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpB,OAAO,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,OAAO,EAAE,CAAC,CAAC,CAAA;YAC/D,CAAC,CAAC,CAAA;QACN,CAAC;KAAA;IAEa,eAAe,CAAC,UAA8B;;YAC1D,gEAAgE;YAChE,yBAAyB;YACzB,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE;gBAC1D,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAA;aACjC;iBAAM;gBACL,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;oBAClF,OAAO,EAAE,eAAe,CAAC,KAAK;oBAC9B,UAAU,EAAE,UAAU;iBACvB,CAAC,CAAC,CAAA;aACJ;QACH,CAAC;KAAA;IAEa,kBAAkB;;YAC9B,IAAI,YAAgD,CAAA;YACpD,IAAI,UAAgC,CAAA;YACpC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE;gBAClC,IAAI;oBACF,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CACrC,IAAI,mCAAgB,CAAC;wBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC,CACH,CAAA;iBACF;gBAAC,OAAO,CAAC,EAAE;oBACV,UAAU,GAAG,CAAa,CAAA;iBAC3B;aACF;YACD,IAAI,CAAC,YAAY,EAAE;gBACjB,YAAY,GAAG,MAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAiC,CAAC,MAAM,CAAC,CAAO,GAAG,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE;oBACpI,MAAM,IAAI,GAAG,MAAM,GAAG,CAAA;oBACtB,OAAO,CACL,IAAI,aAAJ,IAAI,cAAJ,IAAI,GACJ,CAAC,KAAK;wBACJ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;4BACnE,IAAI,CAAC,UAAU,EAAE;gCACf,UAAU,GAAG,CAAa,CAAA;6BAC3B;4BACD,OAAO,OAAO,CAAC,OAAO,EAAwB,CAAA;wBAChD,CAAC,CAAC;wBACJ,CAAC,CAAC,SAAS,CAAC,CACf,CAAA;gBACH,CAAC,CAAA,EAAE,OAAO,CAAC,OAAO,EAAiD,CAAC,CAAA;aACrE;YAED,IAAI,CAAC,YAAY,EAAE;gBACjB,IAAI,UAAU;oBAAE,MAAM,UAAU,CAAA;gBAChC,MAAM,IAAI,QAAQ,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,OAAO,EAAE,CAAC,CAAA;aAC5E;YAED,OAAO;gBACL,OAAO,EAAE,YAAY,CAAC,KAAK;gBAC3B,UAAU,EAAE,YAAY,CAAC,YAAY;aACtC,CAAA;QACH,CAAC;KAAA;IAEO,sBAAsB,CAAC,GAAW;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE;YACtB,OAAO,IAAI,CAAA;SACZ;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5C,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;IAC5E,CAAC;IAEO,aAAa,CAAC,aAAqB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,WAAG,EAAC,aAAa,CAAC,CAAC,CAAA;IACvC,CAAC;IAED,gBAAgB,CAAC,KAAY;QAC3B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,cAAc;QACZ,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;IACtB,CAAC;CACF;AArHD,sDAqHC","sourcesContent":["import { AuthService } from './AuthService'\nimport { XHR } from '../../icc-api/api/XHR'\nimport { IccAuthApi, OAuthThirdParty } from '../../icc-api'\nimport { LoginCredentials } from '../../icc-api/model/LoginCredentials'\nimport Header = XHR.Header\nimport { a2b } from '../utils'\nimport { AuthenticationResponse } from '../../icc-api/model/AuthenticationResponse'\nimport XHRError = XHR.XHRError\n\nexport class JwtBridgedAuthService implements AuthService {\n  private _error: Error | null = null\n  private _currentPromise: Promise<{ authJwt?: string; refreshJwt?: string }> = Promise.resolve({})\n\n  constructor(\n    private authApi: IccAuthApi,\n    private username: string,\n    private password: string,\n    private thirdPartyTokens: { [thirdParty: string]: string } = {}\n  ) {}\n\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined> {\n    return this.getAuthHeaders().then(() => this._currentPromise.then(({ authJwt, refreshJwt }) => ({ token: authJwt!, refreshToken: refreshJwt! })))\n  }\n\n  async getAuthHeaders(): Promise<Array<Header>> {\n    return this._currentPromise\n      .then(({ authJwt, refreshJwt }) => {\n        if (!authJwt || this._isJwtInvalidOrExpired(authJwt)) {\n          // If it does not have the JWT, tries to get it\n          // If the JWT is expired, tries to refresh it\n\n          this._currentPromise = this._refreshAuthJwt(refreshJwt).then((updatedTokens) => {\n            // If here the token is null,\n            // it goes in a suspension status\n            if (!updatedTokens.authJwt) {\n              throw new Error('Your iCure back-end version does not support JWT authentication')\n            }\n\n            return updatedTokens\n          })\n        } else if (!!this._error) {\n          throw this._error\n        }\n        return this._currentPromise\n      })\n      .then(({ authJwt }) => {\n        return [new XHR.Header('Authorization', `Bearer ${authJwt}`)]\n      })\n  }\n\n  private async _refreshAuthJwt(refreshJwt: string | undefined): Promise<{ authJwt?: string; refreshJwt?: string }> {\n    // If I do not have a refresh JWT or the refresh JWT is expired,\n    // I have to log in again\n    if (!refreshJwt || this._isJwtInvalidOrExpired(refreshJwt)) {\n      return this._loginAndGetTokens()\n    } else {\n      return this.authApi.refreshAuthenticationJWT(refreshJwt).then((refreshResponse) => ({\n        authJwt: refreshResponse.token,\n        refreshJwt: refreshJwt,\n      }))\n    }\n  }\n\n  private async _loginAndGetTokens(): Promise<{ authJwt?: string; refreshJwt?: string }> {\n    let authResponse: AuthenticationResponse | undefined\n    let firstError: XHRError | undefined\n    if (this.username && this.password) {\n      try {\n        authResponse = await this.authApi.login(\n          new LoginCredentials({\n            username: this.username,\n            password: this.password,\n          })\n        )\n      } catch (e) {\n        firstError = e as XHRError\n      }\n    }\n    if (!authResponse) {\n      authResponse = await (Object.entries(this.thirdPartyTokens) as [OAuthThirdParty, string][]).reduce(async (acc, [thirdParty, token]) => {\n        const prev = await acc\n        return (\n          prev ??\n          (token\n            ? this.authApi.loginWithThirdPartyToken(thirdParty, token).catch((e) => {\n                if (!firstError) {\n                  firstError = e as XHRError\n                }\n                return Promise.resolve() as Promise<undefined>\n              })\n            : undefined)\n        )\n      }, Promise.resolve() as Promise<AuthenticationResponse | undefined>)\n    }\n\n    if (!authResponse) {\n      if (firstError) throw firstError\n      throw new XHRError('', 'Unknown error', 401, 'Unauthorized', new Headers())\n    }\n\n    return {\n      authJwt: authResponse.token,\n      refreshJwt: authResponse.refreshToken,\n    }\n  }\n\n  private _isJwtInvalidOrExpired(jwt: string): boolean {\n    const parts = jwt.split('.')\n    if (parts.length !== 3) {\n      return true\n    }\n    const payload = this._base64Decode(parts[1])\n    return !('exp' in payload) || payload['exp'] * 1000 < new Date().getTime()\n  }\n\n  private _base64Decode(encodedString: string): any {\n    return JSON.parse(a2b(encodedString))\n  }\n\n  invalidateHeader(error: Error): void {\n    this._error = error\n  }\n\n  isInErrorState(): boolean {\n    return !!this._error\n  }\n}\n"]}