@icure/api 7.1.33 → 7.1.35

package/test/icc-x-api/crypto/cryptoTest.js

@@ -0,0 +1,275 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/* make node behave */
+require("isomorphic-fetch");
+const icc_api_1 = require("../../../icc-api");
+const chai_1 = require("chai");
+require("mocha");
+const Patient_1 = require("../../../icc-api/model/Patient");
+const test_utils_1 = require("../../utils/test_utils");
+const AuthenticationProvider_1 = require("../../../icc-x-api/auth/AuthenticationProvider");
+var initApi = test_utils_1.TestUtils.initApi;
+const types_1 = require("@icure/test-setup/types");
+let env;
+(0, test_utils_1.setLocalStorage)(fetch);
+describe('Create a patient from scratch', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should create a patient in the database', () => __awaiter(void 0, void 0, void 0, function* () {
+        const api = yield initApi(env, test_utils_1.hcp1Username);
+        const user = yield api.userApi.getCurrentUser();
+        const note = 'A secured note that is encrypted';
+        const patient = yield api.patientApi.createPatientWithUser(user, yield api.patientApi.newInstance(user, new Patient_1.Patient({
+            lastName: 'Biden',
+            firstName: 'Joe',
+            note,
+        })));
+        (0, chai_1.expect)(patient.note).to.equal(note);
+        console.log(`Created patient (decrypted): ${patient.id}: ${patient.firstName} ${patient.lastName} [note:${patient.note}, encryptedSelf:${patient.encryptedSelf}]`);
+        const fetched = yield api.patientApi.getPatientWithUser(user, patient.id);
+        console.log(`Fetched patient (decrypted): ${fetched.id}: ${fetched.firstName} ${fetched.lastName} [note:${fetched.note}, encryptedSelf:${fetched.encryptedSelf}]`);
+        (0, chai_1.expect)(fetched.id).to.equal(patient.id);
+        (0, chai_1.expect)(fetched.note).to.equal(note);
+        const fetchedWithoutDecryption = yield new icc_api_1.IccPatientApi(env.iCureUrl, {}, new AuthenticationProvider_1.BasicAuthenticationProvider(env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password), fetch).getPatient(patient.id);
+        console.log(`Fetched patient (encrypted):${fetchedWithoutDecryption.id}: ${fetchedWithoutDecryption.firstName} ${fetchedWithoutDecryption.lastName} [note: ${fetchedWithoutDecryption.note}]`);
+        (0, chai_1.expect)(fetchedWithoutDecryption.id).to.equal(patient.id);
+        (0, chai_1.expect)(fetchedWithoutDecryption.note).to.be.undefined;
+    }));
+});
+describe('Init confidential delegation in patient', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should return a patient with a confidential delegation', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+        const others = [
+            { api: child2Api, user: child2User },
+            { api: parentApi, user: parentUser },
+            { api: grandApi, user: grandUser },
+        ];
+        const note = 'Some note';
+        const pat = yield childApi.patientApi.createPatientWithUser(childUser, yield childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe', note }));
+        // All parents and siblings should have access to the decrypted data and to the initial secret id
+        (0, chai_1.expect)(yield childApi.cryptoApi.entities.secretIdsOf(pat)).to.have.length(1);
+        (0, chai_1.expect)((yield childApi.patientApi.getPatientWithUser(childUser, pat.id)).note).to.equal(note);
+        const originalSecretId = (yield childApi.cryptoApi.entities.secretIdsOf(pat))[0];
+        for (const { api, user } of others) {
+            (0, chai_1.expect)(yield api.cryptoApi.entities.secretIdsOf(pat)).to.have.length(1);
+            (0, chai_1.expect)((yield api.cryptoApi.entities.secretIdsOf(pat))[0]).to.equal(originalSecretId);
+            (0, chai_1.expect)((yield api.patientApi.getPatientWithUser(user, pat.id)).note).to.equal(note);
+        }
+        // Initially there shouldn't be any secret confidential secret id
+        (0, chai_1.expect)(yield childApi.cryptoApi.confidential.getConfidentialSecretId(pat)).to.be.undefined;
+        // Now create a confidential delegation
+        const patWithConfidential = yield childApi.patientApi.initConfidentialSecretId(pat, childUser);
+        // Confidential secret id should be different from the original secret id
+        const confidentialDelegationKey = yield childApi.cryptoApi.confidential.getConfidentialSecretId(patWithConfidential);
+        const nonConfidentialDelegationKey = yield childApi.cryptoApi.confidential.getAnySecretIdSharedWithParents(patWithConfidential);
+        (0, chai_1.expect)(confidentialDelegationKey).to.not.equal(nonConfidentialDelegationKey);
+        (0, chai_1.expect)(nonConfidentialDelegationKey).to.equal(originalSecretId);
+        // Child has access to confidential and not confidential secret ids.
+        const childSecretIds = yield childApi.cryptoApi.entities.secretIdsOf(patWithConfidential);
+        (0, chai_1.expect)(childSecretIds).to.have.length(2);
+        (0, chai_1.expect)(childSecretIds).to.have.contain(nonConfidentialDelegationKey);
+        (0, chai_1.expect)(childSecretIds).to.have.contain(confidentialDelegationKey);
+        // All parents and siblings should have access to the decrypted data even after initialising confidential delegations...
+        (0, chai_1.expect)((yield childApi.patientApi.getPatientWithUser(childUser, pat.id)).note).to.equal(note);
+        for (const { api, user } of others) {
+            (0, chai_1.expect)((yield api.patientApi.getPatientWithUser(user, pat.id)).note).to.equal(note);
+        }
+        // ...but not to the confidential secret id
+        for (const { api } of others) {
+            const secretIds = yield api.cryptoApi.entities.secretIdsOf(patWithConfidential);
+            (0, chai_1.expect)(secretIds).to.have.length(1);
+            (0, chai_1.expect)(secretIds).to.contain(nonConfidentialDelegationKey);
+        }
+        // If a secret delegation is already available there is no need to create a new one
+        const patWithConfidentialAgain = yield childApi.patientApi.initConfidentialSecretId(patWithConfidential, childUser);
+        (0, chai_1.expect)(patWithConfidentialAgain.rev).to.equal(patWithConfidentialAgain.rev);
+        (0, chai_1.expect)(yield childApi.cryptoApi.entities.secretIdsOf(patWithConfidentialAgain)).to.have.length(2);
+        // Different users will have different confidential secret ids...
+        (0, chai_1.expect)(yield child2Api.cryptoApi.confidential.getConfidentialSecretId(patWithConfidential)).to.be.undefined;
+        const patWithMoreConfidentialIds = yield child2Api.patientApi.initConfidentialSecretId(patWithConfidential, child2User);
+        // ...child continues to know the same secret ids...
+        const childSecretIdsRepeat = yield childApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds);
+        (0, chai_1.expect)(childSecretIdsRepeat).to.have.length(2);
+        (0, chai_1.expect)(childSecretIdsRepeat).to.have.contain(nonConfidentialDelegationKey);
+        (0, chai_1.expect)(childSecretIdsRepeat).to.have.contain(confidentialDelegationKey);
+        // ...but child2 now also knows a different secret id...
+        const child2secretIds = yield child2Api.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds);
+        const child2confidential = yield child2Api.cryptoApi.confidential.getConfidentialSecretId(patWithMoreConfidentialIds);
+        (0, chai_1.expect)(child2confidential).to.not.equal(confidentialDelegationKey);
+        (0, chai_1.expect)(child2confidential).to.not.equal(nonConfidentialDelegationKey);
+        (0, chai_1.expect)(child2secretIds).to.have.length(2);
+        (0, chai_1.expect)(child2secretIds).to.contain(nonConfidentialDelegationKey);
+        (0, chai_1.expect)(child2secretIds).to.contain(child2confidential);
+        // ...and their parents still don't know them
+        (0, chai_1.expect)(yield grandApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)).to.have.length(1);
+        (0, chai_1.expect)(yield grandApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)).to.have.contain(nonConfidentialDelegationKey);
+        (0, chai_1.expect)(yield parentApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)).to.have.length(1);
+        (0, chai_1.expect)(yield parentApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)).to.have.contain(nonConfidentialDelegationKey);
+    }));
+});
+describe('Test that contact information can be decrypted', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should return a contact with decrypted information', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+        const allApis = [
+            { api: childApi, user: childUser },
+            { api: child2Api, user: child2User },
+            { api: parentApi, user: parentUser },
+            { api: grandApi, user: grandUser },
+        ];
+        const pat = yield childApi.patientApi.createPatientWithUser(childUser, yield childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' }));
+        const idFlat = childApi.cryptoApi.primitives.randomUuid();
+        const idCompound = childApi.cryptoApi.primitives.randomUuid();
+        const idSalut = childApi.cryptoApi.primitives.randomUuid();
+        const idAtoi = childApi.cryptoApi.primitives.randomUuid();
+        const instance = yield childApi.contactApi.newInstance(childUser, pat, {
+            services: [
+                {
+                    id: idFlat,
+                    content: { fr: { stringValue: 'Salut' }, nl: { stringValue: 'Halo' } },
+                },
+                {
+                    id: idCompound,
+                    content: {
+                        fr: {
+                            compoundValue: [
+                                { id: idSalut, content: { fr: { stringValue: 'Salut' } } },
+                                { id: idAtoi, content: { fr: { stringValue: 'à toi' } } },
+                            ],
+                        },
+                    },
+                },
+            ],
+        });
+        const created = yield childApi.contactApi.createContactWithUser(childUser, instance);
+        const createdFlat = created.services.find((x) => x.id === idFlat);
+        const createdCompound = created.services.find((x) => x.id === idCompound);
+        const createdSalut = createdCompound.content.fr.compoundValue.find((x) => x.id === idSalut);
+        const createdAtoi = createdCompound.content.fr.compoundValue.find((x) => x.id === idAtoi);
+        for (const { api, user } of allApis) {
+            console.log('Trying with user: ' + user.login);
+            const check = yield api.contactApi.getContactWithUser(user, created.id);
+            const checkFlat = check.services.find((x) => x.id == idFlat);
+            const checkCompound = check.services.find((x) => x.id == idCompound);
+            const checkSalut = checkCompound.content.fr.compoundValue.find((x) => x.id === idSalut);
+            const checkAtoi = checkCompound.content.fr.compoundValue.find((x) => x.id === idAtoi);
+            (0, chai_1.expect)(checkFlat).to.not.be.undefined;
+            (0, chai_1.expect)(checkFlat).to.not.be.null;
+            (0, chai_1.expect)(checkSalut).to.not.be.undefined;
+            (0, chai_1.expect)(checkSalut).to.not.be.null;
+            (0, chai_1.expect)(checkAtoi).to.not.be.undefined;
+            (0, chai_1.expect)(checkAtoi).to.not.be.null;
+            (0, chai_1.expect)(checkFlat.content.fr.stringValue).to.equal(createdFlat.content.fr.stringValue);
+            (0, chai_1.expect)(checkFlat.content.nl.stringValue).to.equal(createdFlat.content.nl.stringValue);
+            (0, chai_1.expect)(checkFlat.content.encryptedSelf).to.not.be.null;
+            (0, chai_1.expect)(checkSalut.content.fr.stringValue).to.equal(createdSalut.content.fr.stringValue);
+            (0, chai_1.expect)(checkSalut.encryptedSelf).to.not.be.null;
+            (0, chai_1.expect)(checkAtoi.content.fr.stringValue).to.equal(createdAtoi.content.fr.stringValue);
+            (0, chai_1.expect)(checkAtoi.encryptedSelf).to.not.be.null;
+        }
+    }));
+});
+describe('test that confidential helement information cannot be retrieved at MH level', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should find the confidential data only when logged as the user', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+        const others = [
+            { api: child2Api, user: child2User },
+            { api: parentApi, user: parentUser },
+            { api: grandApi, user: grandUser },
+        ];
+        const pat = yield childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' });
+        const modifiedPatient = (yield childApi.patientApi.initConfidentialSecretId(pat, childUser));
+        const confidentialHe = yield childApi.healthcareElementApi.createHealthElementWithUser(childUser, yield childApi.healthcareElementApi.newInstance(childUser, modifiedPatient, { descr: 'Confidential info' }, { confidential: true }));
+        const retrievedHesAsUser = yield childApi.healthcareElementApi.findBy(childUser.healthcarePartyId, modifiedPatient);
+        (0, chai_1.expect)(retrievedHesAsUser.length).to.equal(1, 'User should see its confidential data');
+        for (const { api, user } of others) {
+            const retrievedHesAsMh = yield api.healthcareElementApi.findBy(user.healthcarePartyId, modifiedPatient);
+            (0, chai_1.expect)(retrievedHesAsMh.length).to.equal(0, 'MH should not see confidential data');
+            let failedToRetrieve = false;
+            try {
+                yield api.healthcareElementApi.getHealthElementWithUser(user, confidentialHe.id);
+            }
+            catch (e) {
+                console.log(e);
+                failedToRetrieve = true;
+            }
+            (0, chai_1.expect)(failedToRetrieve).to.equal(true, 'MH should fail to retrieve confidential data');
+            // Even if in some way I could get the contact I should not be able to decrypt it
+            (0, chai_1.expect)(yield api.cryptoApi.entities.encryptionKeysOf(confidentialHe)).to.have.length(0);
+        }
+    }));
+});
+describe('test that confidential contact information cannot be retrieved at MH level', () => {
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('should find the confidential data only when logged as the user', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+        const others = [
+            { api: child2Api, user: child2User },
+            { api: parentApi, user: parentUser },
+            { api: grandApi, user: grandUser },
+        ];
+        const pat = yield childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' });
+        const modifiedPatient = (yield childApi.patientApi.initConfidentialSecretId(pat, childUser));
+        const confidentialCtc = yield childApi.contactApi.createContactWithUser(childUser, yield childApi.healthcareElementApi.newInstance(childUser, modifiedPatient, { descr: 'Confidential info', services: [], subContacts: [] }, { confidential: true }));
+        yield childApi.contactApi.createContactWithUser(childUser, yield childApi.healthcareElementApi.newInstance(childUser, modifiedPatient, { descr: 'Non confidential info', services: [], subContacts: [] }, { confidential: false }));
+        const retrievedCtcsAsUser = yield childApi.contactApi.findBy(childUser.healthcarePartyId, modifiedPatient);
+        (0, chai_1.expect)(retrievedCtcsAsUser.length).to.equal(2, 'User should see its confidential data');
+        for (const { api, user } of others) {
+            const retrievedCtcsAsMh = yield api.contactApi.findBy(user.healthcarePartyId, modifiedPatient);
+            (0, chai_1.expect)(retrievedCtcsAsMh.length).to.equal(1, 'MH should not see confidential data');
+            // Even if in some way I could get the contact id I should not be able to get it
+            let failedToRetrieve = false;
+            try {
+                yield api.contactApi.getContactWithUser(user, confidentialCtc.id);
+            }
+            catch (e) {
+                console.log(e);
+                failedToRetrieve = true;
+            }
+            (0, chai_1.expect)(failedToRetrieve).to.equal(true, 'MH should fail to retrieve confidential data');
+            // Even if in some way I could get the contact I should not be able to decrypt it
+            (0, chai_1.expect)(yield api.cryptoApi.entities.encryptionKeysOf(confidentialCtc)).to.have.length(0);
+        }
+    }));
+});
+//# sourceMappingURL=cryptoTest.js.map

package/test/icc-x-api/crypto/cryptoTest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoTest.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/cryptoTest.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,sBAAsB;AACtB,4BAAyB;AACzB,8CAAgD;AAChD,+BAA6B;AAC7B,iBAAc;AAEd,4DAAwD;AACxD,uDAAkJ;AAClJ,2FAA4F;AAC5F,IAAO,OAAO,GAAG,sBAAS,CAAC,OAAO,CAAA;AAClC,mDAAmE;AAEnE,IAAI,GAAyB,CAAA;AAE7B,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AAEtB,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAS,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAI,EAAE,yBAAY,CAAC,CAAA;QAC7C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAE/C,MAAM,IAAI,GAAG,kCAAkC,CAAA;QAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,qBAAqB,CACxD,IAAI,EACJ,MAAM,GAAG,CAAC,UAAU,CAAC,WAAW,CAC9B,IAAI,EACJ,IAAI,iBAAO,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,KAAK;YAChB,IAAI;SACL,CAAC,CACH,CACF,CAAA;QACD,IAAA,aAAM,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAEnC,OAAO,CAAC,GAAG,CACT,gCAAgC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,UAAU,OAAO,CAAC,IAAI,mBAAmB,OAAO,CAAC,aAAa,GAAG,CACtJ,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;QACzE,OAAO,CAAC,GAAG,CACT,gCAAgC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,UAAU,OAAO,CAAC,IAAI,mBAAmB,OAAO,CAAC,aAAa,GAAG,CACtJ,CAAA;QACD,IAAA,aAAM,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACvC,IAAA,aAAM,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAEnC,MAAM,wBAAwB,GAAG,MAAM,IAAI,uBAAa,CACtD,GAAI,CAAC,QAAQ,EACb,EAAE,EACF,IAAI,oDAA2B,CAAC,GAAI,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EAAE,GAAI,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,CAAC,EACvH,KAAY,CACb,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAExB,OAAO,CAAC,GAAG,CACT,+BAA+B,wBAAwB,CAAC,EAAE,KAAK,wBAAwB,CAAC,SAAS,IAAI,wBAAwB,CAAC,QAAQ,WAAW,wBAAwB,CAAC,IAAI,GAAG,CAClL,CAAA;QACD,IAAA,aAAM,EAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACxD,IAAA,aAAM,EAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;IACvD,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAS,EAAE;QACtE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAI,CAAC,CAAA;QACrI,MAAM,MAAM,GAAG;YACb,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC,CAAA;QAED,MAAM,IAAI,GAAG,WAAW,CAAA;QACxB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CACzD,SAAS,EACT,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAC/F,CAAA;QAED,iGAAiG;QACjG,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC5E,IAAA,aAAM,EAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7F,MAAM,gBAAgB,GAAG,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAChF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE;YAClC,IAAA,aAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACvE,IAAA,aAAM,EAAC,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;YACrF,IAAA,aAAM,EAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;SACpF;QAED,iEAAiE;QACjE,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;QAE1F,uCAAuC;QACvC,MAAM,mBAAmB,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAE9F,yEAAyE;QACzE,MAAM,yBAAyB,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAA;QACpH,MAAM,4BAA4B,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,+BAA+B,CAAC,mBAAmB,CAAC,CAAA;QAC/H,IAAA,aAAM,EAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC5E,IAAA,aAAM,EAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;QAE/D,oEAAoE;QACpE,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;QACzF,IAAA,aAAM,EAAC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACxC,IAAA,aAAM,EAAC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;QACpE,IAAA,aAAM,EAAC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;QAEjE,wHAAwH;QACxH,IAAA,aAAM,EAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7F,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE;YAClC,IAAA,aAAM,EAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;SACpF;QAED,2CAA2C;QAC3C,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,MAAM,EAAE;YAC5B,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;YAC/E,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACnC,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;SAC3D;QAED,mFAAmF;QACnF,MAAM,wBAAwB,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;QACnH,IAAA,aAAM,EAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAA;QAC3E,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAEjG,iEAAiE;QACjE,IAAA,aAAM,EAAC,MAAM,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;QAC3G,MAAM,0BAA0B,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,wBAAwB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAA;QAEvH,oDAAoD;QACpD,MAAM,oBAAoB,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAA;QACtG,IAAA,aAAM,EAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC9C,IAAA,aAAM,EAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;QAC1E,IAAA,aAAM,EAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;QAEvE,wDAAwD;QACxD,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAA;QAClG,MAAM,kBAAkB,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,uBAAuB,CAAC,0BAA0B,CAAC,CAAA;QACrH,IAAA,aAAM,EAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;QAClE,IAAA,aAAM,EAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;QACrE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACzC,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;QAChE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QAEtD,6CAA6C;QAC7C,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnG,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;QAC/H,IAAA,aAAM,EAAC,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACpG,IAAA,aAAM,EAAC,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;IAClI,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAS,EAAE;QAClE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAI,CAAC,CAAA;QACrI,MAAM,OAAO,GAAG;YACd,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CACzD,SAAS,EACT,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CACzF,CAAA;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;QACzD,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;QAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;QACzD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE;YACrE,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,MAAM;oBACV,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;iBACvE;gBACD;oBACE,EAAE,EAAE,UAAU;oBACd,OAAO,EAAE;wBACP,EAAE,EAAE;4BACF,aAAa,EAAE;gCACb,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;gCAC1D,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;6BAC1D;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACpF,MAAM,WAAW,GAAG,OAAQ,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAE,CAAA;QACpE,MAAM,eAAe,GAAG,OAAQ,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAE,CAAA;QAC5E,MAAM,YAAY,GAAG,eAAe,CAAC,OAAQ,CAAC,EAAE,CAAC,aAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAA;QAC9F,MAAM,WAAW,GAAG,eAAe,CAAC,OAAQ,CAAC,EAAE,CAAC,aAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAE,CAAA;QAE5F,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE;YACnC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;YAC9C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAQ,CAAC,EAAG,CAAC,CAAA;YACzE,MAAM,SAAS,GAAG,KAAM,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAE,CAAA;YAC/D,MAAM,aAAa,GAAG,KAAM,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,UAAU,CAAE,CAAA;YACvE,MAAM,UAAU,GAAG,aAAa,CAAC,OAAQ,CAAC,EAAE,CAAC,aAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAA;YAC1F,MAAM,SAAS,GAAG,aAAa,CAAC,OAAQ,CAAC,EAAE,CAAC,aAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAE,CAAA;YAExF,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;YACrC,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAChC,IAAA,aAAM,EAAC,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;YACtC,IAAA,aAAM,EAAC,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YACjC,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;YACrC,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAEhC,IAAA,aAAM,EAAC,SAAS,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAY,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACxF,IAAA,aAAM,EAAC,SAAS,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAY,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACxF,IAAA,aAAM,EAAC,SAAS,CAAC,OAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAEvD,IAAA,aAAM,EAAC,UAAU,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACzF,IAAA,aAAM,EAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAE/C,IAAA,aAAM,EAAC,SAAS,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACvF,IAAA,aAAM,EAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;SAC/C;IACH,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6EAA6E,EAAE,GAAG,EAAE;IAC3F,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAS,EAAE;QAC9E,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAI,CAAC,CAAA;QACrI,MAAM,MAAM,GAAG;YACb,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACpG,MAAM,eAAe,GAAG,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAE,CAAA;QAE7F,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,2BAA2B,CACpF,SAAS,EACT,MAAM,QAAQ,CAAC,oBAAoB,CAAC,WAAW,CAAC,SAAS,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CACpI,CAAA;QAED,MAAM,kBAAkB,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAkB,EAAE,eAAe,CAAC,CAAA;QACpH,IAAA,aAAM,EAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAA;QAEtF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE;YAClC,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAkB,EAAE,eAAe,CAAC,CAAA;YACxG,IAAA,aAAM,EAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,qCAAqC,CAAC,CAAA;YAClF,IAAI,gBAAgB,GAAG,KAAK,CAAA;YAC5B,IAAI;gBACF,MAAM,GAAG,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,IAAI,EAAE,cAAc,CAAC,EAAG,CAAC,CAAA;aAClF;YAAC,OAAO,CAAC,EAAE;gBACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACd,gBAAgB,GAAG,IAAI,CAAA;aACxB;YACD,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAA;YACvF,iFAAiF;YACjF,IAAA,aAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,cAAe,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;SACzF;IACH,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,4EAA4E,EAAE,GAAG,EAAE;IAC1F,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAS,EAAE;QAC9E,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAI,CAAC,CAAA;QACrI,MAAM,MAAM,GAAG;YACb,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;YACpC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACpG,MAAM,eAAe,GAAG,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAE,CAAA;QAE7F,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CACrE,SAAS,EACT,MAAM,QAAQ,CAAC,oBAAoB,CAAC,WAAW,CAC7C,SAAS,EACT,eAAe,EAEf,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAC7D,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CACF,CAAA;QAED,MAAM,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CAC7C,SAAS,EACT,MAAM,QAAQ,CAAC,oBAAoB,CAAC,WAAW,CAC7C,SAAS,EACT,eAAe,EACf,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EACjE,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CACF,CAAA;QAED,MAAM,mBAAmB,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAkB,EAAE,eAAe,CAAC,CAAA;QAC3G,IAAA,aAAM,EAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAA;QAEvF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE;YAClC,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAkB,EAAE,eAAe,CAAC,CAAA;YAC/F,IAAA,aAAM,EAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,qCAAqC,CAAC,CAAA;YACnF,gFAAgF;YAChF,IAAI,gBAAgB,GAAG,KAAK,CAAA;YAC5B,IAAI;gBACF,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,eAAgB,CAAC,EAAG,CAAC,CAAA;aACpE;YAAC,OAAO,CAAC,EAAE;gBACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACd,gBAAgB,GAAG,IAAI,CAAA;aACxB;YACD,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAA;YACvF,iFAAiF;YACjF,IAAA,aAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,eAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;SAC1F;IACH,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["/* make node behave */\nimport 'isomorphic-fetch'\nimport { IccPatientApi } from '../../../icc-api'\nimport { expect } from 'chai'\nimport 'mocha'\n\nimport { Patient } from '../../../icc-api/model/Patient'\nimport { createHcpHierarchyApis, getEnvironmentInitializer, hcp1Username, hcp2Username, setLocalStorage, TestUtils } from '../../utils/test_utils'\nimport { BasicAuthenticationProvider } from '../../../icc-x-api/auth/AuthenticationProvider'\nimport initApi = TestUtils.initApi\nimport { getEnvVariables, TestVars } from '@icure/test-setup/types'\n\nlet env: TestVars | undefined\n\nsetLocalStorage(fetch)\n\ndescribe('Create a patient from scratch', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should create a patient in the database', async () => {\n    const api = await initApi(env!, hcp1Username)\n    const user = await api.userApi.getCurrentUser()\n\n    const note = 'A secured note that is encrypted'\n    const patient = await api.patientApi.createPatientWithUser(\n      user,\n      await api.patientApi.newInstance(\n        user,\n        new Patient({\n          lastName: 'Biden',\n          firstName: 'Joe',\n          note,\n        })\n      )\n    )\n    expect(patient.note).to.equal(note)\n\n    console.log(\n      `Created patient (decrypted): ${patient.id}: ${patient.firstName} ${patient.lastName} [note:${patient.note}, encryptedSelf:${patient.encryptedSelf}]`\n    )\n\n    const fetched = await api.patientApi.getPatientWithUser(user, patient.id)\n    console.log(\n      `Fetched patient (decrypted): ${fetched.id}: ${fetched.firstName} ${fetched.lastName} [note:${fetched.note}, encryptedSelf:${fetched.encryptedSelf}]`\n    )\n    expect(fetched.id).to.equal(patient.id)\n    expect(fetched.note).to.equal(note)\n\n    const fetchedWithoutDecryption = await new IccPatientApi(\n      env!.iCureUrl,\n      {},\n      new BasicAuthenticationProvider(env!.dataOwnerDetails[hcp1Username].user, env!.dataOwnerDetails[hcp1Username].password),\n      fetch as any\n    ).getPatient(patient.id)\n\n    console.log(\n      `Fetched patient (encrypted):${fetchedWithoutDecryption.id}: ${fetchedWithoutDecryption.firstName} ${fetchedWithoutDecryption.lastName} [note: ${fetchedWithoutDecryption.note}]`\n    )\n    expect(fetchedWithoutDecryption.id).to.equal(patient.id)\n    expect(fetchedWithoutDecryption.note).to.be.undefined\n  })\n})\n\ndescribe('Init confidential delegation in patient', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should return a patient with a confidential delegation', async () => {\n    const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = await createHcpHierarchyApis(env!)\n    const others = [\n      { api: child2Api, user: child2User },\n      { api: parentApi, user: parentUser },\n      { api: grandApi, user: grandUser },\n    ]\n\n    const note = 'Some note'\n    const pat = await childApi.patientApi.createPatientWithUser(\n      childUser,\n      await childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe', note })\n    )\n\n    // All parents and siblings should have access to the decrypted data and to the initial secret id\n    expect(await childApi.cryptoApi.entities.secretIdsOf(pat)).to.have.length(1)\n    expect((await childApi.patientApi.getPatientWithUser(childUser, pat.id)).note).to.equal(note)\n    const originalSecretId = (await childApi.cryptoApi.entities.secretIdsOf(pat))[0]\n    for (const { api, user } of others) {\n      expect(await api.cryptoApi.entities.secretIdsOf(pat)).to.have.length(1)\n      expect((await api.cryptoApi.entities.secretIdsOf(pat))[0]).to.equal(originalSecretId)\n      expect((await api.patientApi.getPatientWithUser(user, pat.id)).note).to.equal(note)\n    }\n\n    // Initially there shouldn't be any secret confidential secret id\n    expect(await childApi.cryptoApi.confidential.getConfidentialSecretId(pat)).to.be.undefined\n\n    // Now create a confidential delegation\n    const patWithConfidential = await childApi.patientApi.initConfidentialSecretId(pat, childUser)\n\n    // Confidential secret id should be different from the original secret id\n    const confidentialDelegationKey = await childApi.cryptoApi.confidential.getConfidentialSecretId(patWithConfidential)\n    const nonConfidentialDelegationKey = await childApi.cryptoApi.confidential.getAnySecretIdSharedWithParents(patWithConfidential)\n    expect(confidentialDelegationKey).to.not.equal(nonConfidentialDelegationKey)\n    expect(nonConfidentialDelegationKey).to.equal(originalSecretId)\n\n    // Child has access to confidential and not confidential secret ids.\n    const childSecretIds = await childApi.cryptoApi.entities.secretIdsOf(patWithConfidential)\n    expect(childSecretIds).to.have.length(2)\n    expect(childSecretIds).to.have.contain(nonConfidentialDelegationKey)\n    expect(childSecretIds).to.have.contain(confidentialDelegationKey)\n\n    // All parents and siblings should have access to the decrypted data even after initialising confidential delegations...\n    expect((await childApi.patientApi.getPatientWithUser(childUser, pat.id)).note).to.equal(note)\n    for (const { api, user } of others) {\n      expect((await api.patientApi.getPatientWithUser(user, pat.id)).note).to.equal(note)\n    }\n\n    // ...but not to the confidential secret id\n    for (const { api } of others) {\n      const secretIds = await api.cryptoApi.entities.secretIdsOf(patWithConfidential)\n      expect(secretIds).to.have.length(1)\n      expect(secretIds).to.contain(nonConfidentialDelegationKey)\n    }\n\n    // If a secret delegation is already available there is no need to create a new one\n    const patWithConfidentialAgain = await childApi.patientApi.initConfidentialSecretId(patWithConfidential, childUser)\n    expect(patWithConfidentialAgain.rev).to.equal(patWithConfidentialAgain.rev)\n    expect(await childApi.cryptoApi.entities.secretIdsOf(patWithConfidentialAgain)).to.have.length(2)\n\n    // Different users will have different confidential secret ids...\n    expect(await child2Api.cryptoApi.confidential.getConfidentialSecretId(patWithConfidential)).to.be.undefined\n    const patWithMoreConfidentialIds = await child2Api.patientApi.initConfidentialSecretId(patWithConfidential, child2User)\n\n    // ...child continues to know the same secret ids...\n    const childSecretIdsRepeat = await childApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)\n    expect(childSecretIdsRepeat).to.have.length(2)\n    expect(childSecretIdsRepeat).to.have.contain(nonConfidentialDelegationKey)\n    expect(childSecretIdsRepeat).to.have.contain(confidentialDelegationKey)\n\n    // ...but child2 now also knows a different secret id...\n    const child2secretIds = await child2Api.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)\n    const child2confidential = await child2Api.cryptoApi.confidential.getConfidentialSecretId(patWithMoreConfidentialIds)\n    expect(child2confidential).to.not.equal(confidentialDelegationKey)\n    expect(child2confidential).to.not.equal(nonConfidentialDelegationKey)\n    expect(child2secretIds).to.have.length(2)\n    expect(child2secretIds).to.contain(nonConfidentialDelegationKey)\n    expect(child2secretIds).to.contain(child2confidential)\n\n    // ...and their parents still don't know them\n    expect(await grandApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)).to.have.length(1)\n    expect(await grandApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)).to.have.contain(nonConfidentialDelegationKey)\n    expect(await parentApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)).to.have.length(1)\n    expect(await parentApi.cryptoApi.entities.secretIdsOf(patWithMoreConfidentialIds)).to.have.contain(nonConfidentialDelegationKey)\n  })\n})\n\ndescribe('Test that contact information can be decrypted', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should return a contact with decrypted information', async () => {\n    const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = await createHcpHierarchyApis(env!)\n    const allApis = [\n      { api: childApi, user: childUser },\n      { api: child2Api, user: child2User },\n      { api: parentApi, user: parentUser },\n      { api: grandApi, user: grandUser },\n    ]\n\n    const pat = await childApi.patientApi.createPatientWithUser(\n      childUser,\n      await childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' })\n    )\n    const idFlat = childApi.cryptoApi.primitives.randomUuid()\n    const idCompound = childApi.cryptoApi.primitives.randomUuid()\n    const idSalut = childApi.cryptoApi.primitives.randomUuid()\n    const idAtoi = childApi.cryptoApi.primitives.randomUuid()\n    const instance = await childApi.contactApi.newInstance(childUser, pat, {\n      services: [\n        {\n          id: idFlat,\n          content: { fr: { stringValue: 'Salut' }, nl: { stringValue: 'Halo' } },\n        },\n        {\n          id: idCompound,\n          content: {\n            fr: {\n              compoundValue: [\n                { id: idSalut, content: { fr: { stringValue: 'Salut' } } },\n                { id: idAtoi, content: { fr: { stringValue: 'à toi' } } },\n              ],\n            },\n          },\n        },\n      ],\n    })\n    const created = await childApi.contactApi.createContactWithUser(childUser, instance)\n    const createdFlat = created!.services!.find((x) => x.id === idFlat)!\n    const createdCompound = created!.services!.find((x) => x.id === idCompound)!\n    const createdSalut = createdCompound.content!.fr.compoundValue!.find((x) => x.id === idSalut)!\n    const createdAtoi = createdCompound.content!.fr.compoundValue!.find((x) => x.id === idAtoi)!\n\n    for (const { api, user } of allApis) {\n      console.log('Trying with user: ' + user.login)\n      const check = await api.contactApi.getContactWithUser(user, created!.id!)\n      const checkFlat = check!.services!.find((x) => x.id == idFlat)!\n      const checkCompound = check!.services!.find((x) => x.id == idCompound)!\n      const checkSalut = checkCompound.content!.fr.compoundValue!.find((x) => x.id === idSalut)!\n      const checkAtoi = checkCompound.content!.fr.compoundValue!.find((x) => x.id === idAtoi)!\n\n      expect(checkFlat).to.not.be.undefined\n      expect(checkFlat).to.not.be.null\n      expect(checkSalut).to.not.be.undefined\n      expect(checkSalut).to.not.be.null\n      expect(checkAtoi).to.not.be.undefined\n      expect(checkAtoi).to.not.be.null\n\n      expect(checkFlat.content!.fr.stringValue).to.equal(createdFlat!.content!.fr.stringValue)\n      expect(checkFlat.content!.nl.stringValue).to.equal(createdFlat!.content!.nl.stringValue)\n      expect(checkFlat.content!.encryptedSelf).to.not.be.null\n\n      expect(checkSalut.content!.fr.stringValue).to.equal(createdSalut.content!.fr.stringValue)\n      expect(checkSalut.encryptedSelf).to.not.be.null\n\n      expect(checkAtoi.content!.fr.stringValue).to.equal(createdAtoi.content!.fr.stringValue)\n      expect(checkAtoi.encryptedSelf).to.not.be.null\n    }\n  })\n})\n\ndescribe('test that confidential helement information cannot be retrieved at MH level', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should find the confidential data only when logged as the user', async () => {\n    const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = await createHcpHierarchyApis(env!)\n    const others = [\n      { api: child2Api, user: child2User },\n      { api: parentApi, user: parentUser },\n      { api: grandApi, user: grandUser },\n    ]\n\n    const pat = await childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' })\n    const modifiedPatient = (await childApi.patientApi.initConfidentialSecretId(pat, childUser))!\n\n    const confidentialHe = await childApi.healthcareElementApi.createHealthElementWithUser(\n      childUser,\n      await childApi.healthcareElementApi.newInstance(childUser, modifiedPatient, { descr: 'Confidential info' }, { confidential: true })\n    )\n\n    const retrievedHesAsUser = await childApi.healthcareElementApi.findBy(childUser.healthcarePartyId!, modifiedPatient)\n    expect(retrievedHesAsUser.length).to.equal(1, 'User should see its confidential data')\n\n    for (const { api, user } of others) {\n      const retrievedHesAsMh = await api.healthcareElementApi.findBy(user.healthcarePartyId!, modifiedPatient)\n      expect(retrievedHesAsMh.length).to.equal(0, 'MH should not see confidential data')\n      let failedToRetrieve = false\n      try {\n        await api.healthcareElementApi.getHealthElementWithUser(user, confidentialHe.id!)\n      } catch (e) {\n        console.log(e)\n        failedToRetrieve = true\n      }\n      expect(failedToRetrieve).to.equal(true, 'MH should fail to retrieve confidential data')\n      // Even if in some way I could get the contact I should not be able to decrypt it\n      expect(await api.cryptoApi.entities.encryptionKeysOf(confidentialHe!)).to.have.length(0)\n    }\n  })\n})\n\ndescribe('test that confidential contact information cannot be retrieved at MH level', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('should find the confidential data only when logged as the user', async () => {\n    const { grandApi, grandUser, childApi, childUser, parentApi, parentUser, child2Api, child2User } = await createHcpHierarchyApis(env!)\n    const others = [\n      { api: child2Api, user: child2User },\n      { api: parentApi, user: parentUser },\n      { api: grandApi, user: grandUser },\n    ]\n\n    const pat = await childApi.patientApi.newInstance(childUser, { firstName: 'John', lastName: 'Doe' })\n    const modifiedPatient = (await childApi.patientApi.initConfidentialSecretId(pat, childUser))!\n\n    const confidentialCtc = await childApi.contactApi.createContactWithUser(\n      childUser,\n      await childApi.healthcareElementApi.newInstance(\n        childUser,\n        modifiedPatient,\n\n        { descr: 'Confidential info', services: [], subContacts: [] },\n        { confidential: true }\n      )\n    )\n\n    await childApi.contactApi.createContactWithUser(\n      childUser,\n      await childApi.healthcareElementApi.newInstance(\n        childUser,\n        modifiedPatient,\n        { descr: 'Non confidential info', services: [], subContacts: [] },\n        { confidential: false }\n      )\n    )\n\n    const retrievedCtcsAsUser = await childApi.contactApi.findBy(childUser.healthcarePartyId!, modifiedPatient)\n    expect(retrievedCtcsAsUser.length).to.equal(2, 'User should see its confidential data')\n\n    for (const { api, user } of others) {\n      const retrievedCtcsAsMh = await api.contactApi.findBy(user.healthcarePartyId!, modifiedPatient)\n      expect(retrievedCtcsAsMh.length).to.equal(1, 'MH should not see confidential data')\n      // Even if in some way I could get the contact id I should not be able to get it\n      let failedToRetrieve = false\n      try {\n        await api.contactApi.getContactWithUser(user, confidentialCtc!.id!)\n      } catch (e) {\n        console.log(e)\n        failedToRetrieve = true\n      }\n      expect(failedToRetrieve).to.equal(true, 'MH should fail to retrieve confidential data')\n      // Even if in some way I could get the contact I should not be able to decrypt it\n      expect(await api.cryptoApi.entities.encryptionKeysOf(confidentialCtc!)).to.have.length(0)\n    }\n  })\n})\n"]}

package/test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.d.ts

@@ -0,0 +1 @@
+import 'isomorphic-fetch';

package/test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.js

@@ -0,0 +1,132 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const icc_x_api_1 = require("../../../icc-x-api");
+const CalendarItem_1 = require("../../../icc-api/model/CalendarItem");
+const models_1 = require("../../../icc-api/model/models");
+const mocha_1 = require("mocha");
+const crypto_1 = require("crypto");
+require("isomorphic-fetch");
+const chai_1 = require("chai");
+const MaintenanceTaskAfterDateFilter_1 = require("../../../icc-x-api/filters/MaintenanceTaskAfterDateFilter");
+const test_utils_1 = require("../../utils/test_utils");
+const TestStorage_1 = require("../../utils/TestStorage");
+const TestCryptoStrategies_1 = require("../../utils/TestCryptoStrategies");
+const KeyPairUpdateRequest_1 = require("../../../icc-x-api/maintenance/KeyPairUpdateRequest");
+const types_1 = require("@icure/test-setup/types");
+function _getHcpKeyUpdateMaintenanceTask(delegateApi) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const delegateUser = yield delegateApi.userApi.getCurrentUser();
+        const notifications = yield delegateApi.maintenanceTaskApi.filterMaintenanceTasksByWithUser(delegateUser, undefined, undefined, new models_1.FilterChainMaintenanceTask({
+            filter: new MaintenanceTaskAfterDateFilter_1.MaintenanceTaskAfterDateFilter({
+                date: new Date().getTime() - 100000,
+            }),
+        }));
+        return notifications.rows.sort((a, b) => a.created - b.created)[notifications.rows.length - 1];
+    });
+}
+(0, test_utils_1.setLocalStorage)(fetch);
+let env;
+(0, mocha_1.describe)('Full battery of tests on crypto and keys', function () {
+    return __awaiter(this, void 0, void 0, function* () {
+        (0, mocha_1.before)(function () {
+            return __awaiter(this, void 0, void 0, function* () {
+                this.timeout(600000);
+                const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+                env = yield initializer.execute((0, types_1.getEnvVariables)());
+            });
+        });
+        (0, mocha_1.it)(`Create calendar item as a patient`, () => __awaiter(this, void 0, void 0, function* () {
+            const previousPubKey = env.dataOwnerDetails[test_utils_1.patUsername].publicKey;
+            const api = yield (0, test_utils_1.getApiAndAddPrivateKeysForUser)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.patUsername]);
+            const u = yield api.userApi.getCurrentUser();
+            const delegateApi = yield (0, test_utils_1.getApiAndAddPrivateKeysForUser)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.hcp1Username]);
+            const delegateUser = yield delegateApi.userApi.getCurrentUser();
+            const delegateHcp = yield delegateApi.healthcarePartyApi.getHealthcareParty(delegateUser.healthcarePartyId);
+            const patient = yield api.patientApi.getPatientWithUser(u, u.patientId);
+            // Create a Record to share with delegateHcp: this will trigger the creation of a new aes exchange key as well
+            const initialRecord = yield api.calendarItemApi.newInstance(u, new CalendarItem_1.CalendarItem({ id: `${u.id}-ci-initial`, title: 'CI-INITIAL' }), {
+                additionalDelegates: { [delegateHcp.id]: 'WRITE' },
+            });
+            const savedInitialRecord = yield api.calendarItemApi.createCalendarItemWithHcParty(u, initialRecord);
+            // Decrypting this AES Key to compare it with AES key decrypted with new key in the next steps
+            yield api.cryptoApi.forceReload();
+            const decryptedAesWithPreviousKey = yield api.cryptoApi.exchangeKeys.getDecryptionExchangeKeysFor(patient.id, delegateHcp.id);
+            (0, chai_1.expect)(decryptedAesWithPreviousKey).to.have.length(1);
+            const oldExchangeKeyRaw = (0, icc_x_api_1.ua2hex)(yield api.cryptoApi.primitives.AES.exportKey(decryptedAesWithPreviousKey[0], 'raw'));
+            // And creates a new one
+            const newKey = yield api.cryptoApi.primitives.RSA.generateKeyPair();
+            const publicKey = (0, icc_x_api_1.ua2hex)(yield api.cryptoApi.primitives.RSA.exportKey(newKey.publicKey, 'spki'));
+            const apiAfterNewKey = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, { username: env.dataOwnerDetails[test_utils_1.patUsername].user, password: env.dataOwnerDetails[test_utils_1.patUsername].password }, new TestCryptoStrategies_1.TestCryptoStrategies(newKey), crypto_1.webcrypto, fetch, {
+                storage: new TestStorage_1.TestStorage(),
+                keyStorage: new TestStorage_1.TestKeyStorage(),
+            });
+            const user = yield apiAfterNewKey.userApi.getCurrentUser();
+            yield apiAfterNewKey.icureMaintenanceTaskApi.createMaintenanceTasksForNewKeypair(user, newKey);
+            // Api with new key should not be able to decrypt past exchange key with delegateHcp
+            yield apiAfterNewKey.cryptoApi.forceReload();
+            const decryptedAesAfterShareBackRequest = yield apiAfterNewKey.cryptoApi.exchangeKeys.getDecryptionExchangeKeysFor(patient.id, delegateHcp.id);
+            (0, chai_1.expect)(decryptedAesAfterShareBackRequest).to.have.length(1);
+            const newExchangeKeyRaw = (0, icc_x_api_1.ua2hex)(yield api.cryptoApi.primitives.AES.exportKey(decryptedAesAfterShareBackRequest[0], 'raw'));
+            // User can get not encrypted information from iCure (HCP, ...)
+            const hcp = yield apiAfterNewKey.healthcarePartyApi.getHealthcareParty(delegateUser.healthcarePartyId);
+            // User can create new data, using its new keyPair
+            const newRecord = yield apiAfterNewKey.calendarItemApi.newInstance(u, new CalendarItem_1.CalendarItem({ id: `${u.id}-ci`, title: 'CI' }), {
+                additionalDelegates: { [hcp.id]: 'WRITE' },
+            });
+            const entity = yield apiAfterNewKey.calendarItemApi.createCalendarItemWithHcParty(u, newRecord);
+            (0, chai_1.expect)(entity.id).to.be.not.null;
+            (0, chai_1.expect)(entity.rev).to.be.not.null;
+            // But user can not decrypt data he previously created
+            const initialRecordAfterNewKey = yield apiAfterNewKey.calendarItemApi.getCalendarItemWithUser(u, initialRecord.id);
+            (0, chai_1.expect)(initialRecordAfterNewKey.id).to.be.equal(savedInitialRecord.id);
+            (0, chai_1.expect)(initialRecordAfterNewKey.rev).to.be.equal(savedInitialRecord.rev);
+            (0, chai_1.expect)(initialRecordAfterNewKey.title).to.be.undefined;
+            // Delegate user will therefore give user access back to data he previously created
+            // Hcp gets his maintenance tasks
+            yield delegateApi.cryptoApi.forceReload();
+            const maintenanceTask = KeyPairUpdateRequest_1.KeyPairUpdateRequest.fromMaintenanceTask(yield _getHcpKeyUpdateMaintenanceTask(delegateApi));
+            (0, chai_1.expect)(maintenanceTask.concernedDataOwnerId).equals(patient.id);
+            (0, chai_1.expect)(maintenanceTask.newPublicKey).equals(publicKey);
+            yield delegateApi.icureMaintenanceTaskApi.applyKeyPairUpdate(maintenanceTask);
+            const updatedDataOwner = yield delegateApi.dataOwnerApi.getCryptoActorStub(maintenanceTask.concernedDataOwnerId);
+            (0, chai_1.expect)(updatedDataOwner.type).to.be.equal('patient');
+            (0, chai_1.expect)(updatedDataOwner.stub).to.not.be.undefined;
+            (0, chai_1.expect)(updatedDataOwner.stub).to.not.be.null;
+            (0, chai_1.expect)(updatedDataOwner.stub.aesExchangeKeys[previousPubKey][delegateUser.healthcarePartyId][publicKey.slice(-32)]).to.be.not.undefined;
+            (0, chai_1.expect)(updatedDataOwner.stub.aesExchangeKeys[previousPubKey][delegateUser.healthcarePartyId][publicKey.slice(-32)]).to.be.not.null;
+            const apiAfterSharedBack = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, {
+                username: env.dataOwnerDetails[test_utils_1.patUsername].user,
+                password: env.dataOwnerDetails[test_utils_1.patUsername].password,
+            }, new TestCryptoStrategies_1.TestCryptoStrategies(newKey), crypto_1.webcrypto, fetch, {
+                storage: new TestStorage_1.TestStorage(),
+                keyStorage: new TestStorage_1.TestKeyStorage(),
+            });
+            yield apiAfterSharedBack.cryptoApi.forceReload();
+            const decryptedAesWithShareBack = yield apiAfterSharedBack.cryptoApi.exchangeKeys.getDecryptionExchangeKeysFor(patient.id, delegateHcp.id);
+            (0, chai_1.expect)(decryptedAesWithShareBack).to.have.length(2);
+            const shareBackKeysRaw = yield Promise.all(decryptedAesWithShareBack.map((k) => api.cryptoApi.primitives.AES.exportKey(k, 'raw').then((x) => (0, icc_x_api_1.ua2hex)(x))));
+            // Patient can decrypt the new hcPartyKey
+            (0, chai_1.expect)(shareBackKeysRaw).to.not.contain(null);
+            (0, chai_1.expect)(shareBackKeysRaw).to.not.contain(undefined);
+            (0, chai_1.expect)(shareBackKeysRaw).to.contain(oldExchangeKeyRaw);
+            (0, chai_1.expect)(shareBackKeysRaw).to.contain(newExchangeKeyRaw);
+            // User can access his previous data again
+            yield apiAfterSharedBack.cryptoApi.forceReload();
+            const initialRecordAfterSharedBack = yield apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(u, initialRecord.id);
+            (0, chai_1.expect)(initialRecordAfterSharedBack.id).to.be.equal(savedInitialRecord.id);
+            (0, chai_1.expect)(initialRecordAfterSharedBack.rev).to.be.equal(savedInitialRecord.rev);
+            (0, chai_1.expect)(initialRecordAfterSharedBack.title).to.be.equal(savedInitialRecord.title);
+        }));
+    });
+});
+// TODO test that EXACTLY ONE maintenance task is created for each delegator AND delegate in a exchange key with the data owner with the new key
+//# sourceMappingURL=delegate-ci-to-patient-with-missing-keys-test.js.map

package/test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate-ci-to-patient-with-missing-keys-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,kDAA2D;AAC3D,sEAAkE;AAClE,0DAAyH;AACzH,iCAA4C;AAE5C,mCAAkC;AAClC,4BAAyB;AAEzB,+BAA6B;AAC7B,8GAA0G;AAC1G,uDAA8I;AAC9I,yDAAqE;AACrE,2EAAuE;AACvE,8FAA0F;AAC1F,mDAAmE;AAEnE,SAAe,+BAA+B,CAAC,WAAiB;;QAC9D,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAC/D,MAAM,aAAa,GAAiC,MAAM,WAAW,CAAC,kBAAkB,CAAC,gCAAgC,CACvH,YAAa,EACb,SAAS,EACT,SAAS,EACT,IAAI,mCAA0B,CAAC;YAC7B,MAAM,EAAE,IAAI,+DAA8B,CAAC;gBACzC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM;aACpC,CAAC;SACH,CAAC,CACH,CAAA;QAED,OAAO,aAAa,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAQ,GAAG,CAAC,CAAC,OAAQ,CAAC,CAAC,aAAa,CAAC,IAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACpG,CAAC;CAAA;AAED,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AAEtB,IAAI,GAAyB,CAAA;AAE7B,IAAA,gBAAQ,EAAC,0CAA0C,EAAE;;QACnD,IAAA,cAAM,EAAC;;gBACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;gBACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;YACpD,CAAC;SAAA,CAAC,CAAA;QAEF,IAAA,UAAE,EAAC,mCAAmC,EAAE,GAAS,EAAE;YACjD,MAAM,cAAc,GAAG,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,SAAS,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,IAAA,2CAA8B,EAAC,GAAI,CAAC,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,CAAA;YACnG,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAE5C,MAAM,WAAW,GAAG,MAAM,IAAA,2CAA8B,EAAC,GAAI,CAAC,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,CAAA;YAC5G,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAC/D,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,YAAY,CAAC,iBAAkB,CAAC,CAAA;YAE5G,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,SAAU,CAAC,CAAA;YAExE,8GAA8G;YAC9G,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,2BAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE;gBAClI,mBAAmB,EAAE,EAAE,CAAC,WAAY,CAAC,EAAG,CAAC,EAAE,OAAO,EAAE;aACrD,CAAC,CAAA;YACF,MAAM,kBAAkB,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,6BAA6B,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;YAEpG,8FAA8F;YAC9F,MAAM,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YACjC,MAAM,2BAA2B,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAG,EAAE,WAAW,CAAC,EAAG,CAAC,CAAA;YAC/H,IAAA,aAAM,EAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACrD,MAAM,iBAAiB,GAAG,IAAA,kBAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;YAErH,wBAAwB;YACxB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA;YACnE,MAAM,SAAS,GAAG,IAAA,kBAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YAChG,MAAM,cAAc,GAAG,MAAM,oBAAQ,CAAC,UAAU,CAC9C,GAAI,CAAC,QAAQ,EACb,EAAE,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,QAAQ,EAAE,EAC5G,IAAI,2CAAoB,CAAC,MAAM,CAAC,EAChC,kBAA8B,EAC9B,KAAK,EACL;gBACE,OAAO,EAAE,IAAI,yBAAW,EAAE;gBAC1B,UAAU,EAAE,IAAI,4BAAc,EAAE;aACjC,CACF,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAC1D,MAAM,cAAc,CAAC,uBAAuB,CAAC,mCAAmC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAC9F,oFAAoF;YACpF,MAAM,cAAc,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YAC5C,MAAM,iCAAiC,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,YAAY,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAG,EAAE,WAAW,CAAC,EAAG,CAAC,CAAA;YAChJ,IAAA,aAAM,EAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAC3D,MAAM,iBAAiB,GAAG,IAAA,kBAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;YAE3H,+DAA+D;YAC/D,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,YAAa,CAAC,iBAAkB,CAAC,CAAA;YAExG,kDAAkD;YAClD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,2BAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE;gBACzH,mBAAmB,EAAE,EAAE,CAAC,GAAI,CAAC,EAAG,CAAC,EAAE,OAAO,EAAE;aAC7C,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,6BAA6B,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;YAC/F,IAAA,aAAM,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAA;YAChC,IAAA,aAAM,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAA;YAEjC,sDAAsD;YACtD,MAAM,wBAAwB,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,EAAE,aAAa,CAAC,EAAG,CAAC,CAAA;YACnH,IAAA,aAAM,EAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;YACtE,IAAA,aAAM,EAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;YACxE,IAAA,aAAM,EAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;YAEtD,mFAAmF;YAEnF,iCAAiC;YACjC,MAAM,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YACzC,MAAM,eAAe,GAAG,2CAAoB,CAAC,mBAAmB,CAAC,MAAM,+BAA+B,CAAC,WAAW,CAAC,CAAC,CAAA;YAEpH,IAAA,aAAM,EAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC/D,IAAA,aAAM,EAAC,eAAe,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAEtD,MAAM,WAAW,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAA;YAC7E,MAAM,gBAAgB,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,kBAAkB,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;YAEhH,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;YACpD,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;YACjD,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAC5C,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,eAAgB,CAAC,cAAc,CAAC,CAAC,YAAa,CAAC,iBAAkB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAA;YAC1I,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,eAAgB,CAAC,cAAc,CAAC,CAAC,YAAa,CAAC,iBAAkB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAA;YAErI,MAAM,kBAAkB,GAAG,MAAM,oBAAQ,CAAC,UAAU,CAClD,GAAI,CAAC,QAAQ,EACb;gBACE,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,IAAI;gBACjD,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,QAAQ;aACtD,EACD,IAAI,2CAAoB,CAAC,MAAM,CAAC,EAChC,kBAA8B,EAC9B,KAAK,EACL;gBACE,OAAO,EAAE,IAAI,yBAAW,EAAE;gBAC1B,UAAU,EAAE,IAAI,4BAAc,EAAE;aACjC,CACF,CAAA;YACD,MAAM,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YAChD,MAAM,yBAAyB,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,YAAY,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAG,EAAE,WAAW,CAAC,EAAG,CAAC,CAAA;YAC5I,IAAA,aAAM,EAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACnD,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CACxC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,kBAAM,EAAC,CAAC,CAAC,CAAC,CAAC,CAC9G,CAAA;YAED,yCAAyC;YACzC,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC7C,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAClD,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;YACtD,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;YAEtD,0CAA0C;YAC1C,MAAM,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YAEhD,MAAM,4BAA4B,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,EAAE,aAAa,CAAC,EAAG,CAAC,CAAA;YAC3H,IAAA,aAAM,EAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;YAC1E,IAAA,aAAM,EAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;YAC5E,IAAA,aAAM,EAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;QAClF,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC;CAAA,CAAC,CAAA;AAEF,gJAAgJ","sourcesContent":["import { Apis, IcureApi, ua2hex } from '../../../icc-x-api'\nimport { CalendarItem } from '../../../icc-api/model/CalendarItem'\nimport { FilterChainMaintenanceTask, MaintenanceTask, PaginatedListMaintenanceTask } from '../../../icc-api/model/models'\nimport { before, describe, it } from 'mocha'\n\nimport { webcrypto } from 'crypto'\nimport 'isomorphic-fetch'\n\nimport { expect } from 'chai'\nimport { MaintenanceTaskAfterDateFilter } from '../../../icc-x-api/filters/MaintenanceTaskAfterDateFilter'\nimport { getApiAndAddPrivateKeysForUser, getEnvironmentInitializer, hcp1Username, patUsername, setLocalStorage } from '../../utils/test_utils'\nimport { TestKeyStorage, TestStorage } from '../../utils/TestStorage'\nimport { TestCryptoStrategies } from '../../utils/TestCryptoStrategies'\nimport { KeyPairUpdateRequest } from '../../../icc-x-api/maintenance/KeyPairUpdateRequest'\nimport { getEnvVariables, TestVars } from '@icure/test-setup/types'\n\nasync function _getHcpKeyUpdateMaintenanceTask(delegateApi: Apis): Promise<MaintenanceTask> {\n  const delegateUser = await delegateApi.userApi.getCurrentUser()\n  const notifications: PaginatedListMaintenanceTask = await delegateApi.maintenanceTaskApi.filterMaintenanceTasksByWithUser(\n    delegateUser!,\n    undefined,\n    undefined,\n    new FilterChainMaintenanceTask({\n      filter: new MaintenanceTaskAfterDateFilter({\n        date: new Date().getTime() - 100000,\n      }),\n    })\n  )\n\n  return notifications.rows!.sort((a, b) => a.created! - b.created!)[notifications.rows!.length - 1]\n}\n\nsetLocalStorage(fetch)\n\nlet env: TestVars | undefined\n\ndescribe('Full battery of tests on crypto and keys', async function () {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it(`Create calendar item as a patient`, async () => {\n    const previousPubKey = env!.dataOwnerDetails[patUsername].publicKey\n    const api = await getApiAndAddPrivateKeysForUser(env!.iCureUrl, env!.dataOwnerDetails[patUsername])\n    const u = await api.userApi.getCurrentUser()\n\n    const delegateApi = await getApiAndAddPrivateKeysForUser(env!.iCureUrl, env!.dataOwnerDetails[hcp1Username])\n    const delegateUser = await delegateApi.userApi.getCurrentUser()\n    const delegateHcp = await delegateApi.healthcarePartyApi.getHealthcareParty(delegateUser.healthcarePartyId!)\n\n    const patient = await api.patientApi.getPatientWithUser(u, u.patientId!)\n\n    // Create a Record to share with delegateHcp: this will trigger the creation of a new aes exchange key as well\n    const initialRecord = await api.calendarItemApi.newInstance(u, new CalendarItem({ id: `${u.id}-ci-initial`, title: 'CI-INITIAL' }), {\n      additionalDelegates: { [delegateHcp!.id!]: 'WRITE' },\n    })\n    const savedInitialRecord = await api.calendarItemApi.createCalendarItemWithHcParty(u, initialRecord)\n\n    // Decrypting this AES Key to compare it with AES key decrypted with new key in the next steps\n    await api.cryptoApi.forceReload()\n    const decryptedAesWithPreviousKey = await api.cryptoApi.exchangeKeys.getDecryptionExchangeKeysFor(patient.id!, delegateHcp.id!)\n    expect(decryptedAesWithPreviousKey).to.have.length(1)\n    const oldExchangeKeyRaw = ua2hex(await api.cryptoApi.primitives.AES.exportKey(decryptedAesWithPreviousKey[0], 'raw'))\n\n    // And creates a new one\n    const newKey = await api.cryptoApi.primitives.RSA.generateKeyPair()\n    const publicKey = ua2hex(await api.cryptoApi.primitives.RSA.exportKey(newKey.publicKey, 'spki'))\n    const apiAfterNewKey = await IcureApi.initialise(\n      env!.iCureUrl,\n      { username: env!.dataOwnerDetails[patUsername].user, password: env!.dataOwnerDetails[patUsername].password },\n      new TestCryptoStrategies(newKey),\n      webcrypto as unknown as Crypto,\n      fetch,\n      {\n        storage: new TestStorage(),\n        keyStorage: new TestKeyStorage(),\n      }\n    )\n    const user = await apiAfterNewKey.userApi.getCurrentUser()\n    await apiAfterNewKey.icureMaintenanceTaskApi.createMaintenanceTasksForNewKeypair(user, newKey)\n    // Api with new key should not be able to decrypt past exchange key with delegateHcp\n    await apiAfterNewKey.cryptoApi.forceReload()\n    const decryptedAesAfterShareBackRequest = await apiAfterNewKey.cryptoApi.exchangeKeys.getDecryptionExchangeKeysFor(patient.id!, delegateHcp.id!)\n    expect(decryptedAesAfterShareBackRequest).to.have.length(1)\n    const newExchangeKeyRaw = ua2hex(await api.cryptoApi.primitives.AES.exportKey(decryptedAesAfterShareBackRequest[0], 'raw'))\n\n    // User can get not encrypted information from iCure (HCP, ...)\n    const hcp = await apiAfterNewKey.healthcarePartyApi.getHealthcareParty(delegateUser!.healthcarePartyId!)\n\n    // User can create new data, using its new keyPair\n    const newRecord = await apiAfterNewKey.calendarItemApi.newInstance(u, new CalendarItem({ id: `${u.id}-ci`, title: 'CI' }), {\n      additionalDelegates: { [hcp!.id!]: 'WRITE' },\n    })\n    const entity = await apiAfterNewKey.calendarItemApi.createCalendarItemWithHcParty(u, newRecord)\n    expect(entity.id).to.be.not.null\n    expect(entity.rev).to.be.not.null\n\n    // But user can not decrypt data he previously created\n    const initialRecordAfterNewKey = await apiAfterNewKey.calendarItemApi.getCalendarItemWithUser(u, initialRecord.id!)\n    expect(initialRecordAfterNewKey.id).to.be.equal(savedInitialRecord.id)\n    expect(initialRecordAfterNewKey.rev).to.be.equal(savedInitialRecord.rev)\n    expect(initialRecordAfterNewKey.title).to.be.undefined\n\n    // Delegate user will therefore give user access back to data he previously created\n\n    // Hcp gets his maintenance tasks\n    await delegateApi.cryptoApi.forceReload()\n    const maintenanceTask = KeyPairUpdateRequest.fromMaintenanceTask(await _getHcpKeyUpdateMaintenanceTask(delegateApi))\n\n    expect(maintenanceTask.concernedDataOwnerId).equals(patient.id)\n    expect(maintenanceTask.newPublicKey).equals(publicKey)\n\n    await delegateApi.icureMaintenanceTaskApi.applyKeyPairUpdate(maintenanceTask)\n    const updatedDataOwner = await delegateApi.dataOwnerApi.getCryptoActorStub(maintenanceTask.concernedDataOwnerId)\n\n    expect(updatedDataOwner.type).to.be.equal('patient')\n    expect(updatedDataOwner.stub).to.not.be.undefined\n    expect(updatedDataOwner.stub).to.not.be.null\n    expect(updatedDataOwner.stub.aesExchangeKeys![previousPubKey][delegateUser!.healthcarePartyId!][publicKey.slice(-32)]).to.be.not.undefined\n    expect(updatedDataOwner.stub.aesExchangeKeys![previousPubKey][delegateUser!.healthcarePartyId!][publicKey.slice(-32)]).to.be.not.null\n\n    const apiAfterSharedBack = await IcureApi.initialise(\n      env!.iCureUrl,\n      {\n        username: env!.dataOwnerDetails[patUsername].user,\n        password: env!.dataOwnerDetails[patUsername].password,\n      },\n      new TestCryptoStrategies(newKey),\n      webcrypto as unknown as Crypto,\n      fetch,\n      {\n        storage: new TestStorage(),\n        keyStorage: new TestKeyStorage(),\n      }\n    )\n    await apiAfterSharedBack.cryptoApi.forceReload()\n    const decryptedAesWithShareBack = await apiAfterSharedBack.cryptoApi.exchangeKeys.getDecryptionExchangeKeysFor(patient.id!, delegateHcp.id!)\n    expect(decryptedAesWithShareBack).to.have.length(2)\n    const shareBackKeysRaw = await Promise.all(\n      decryptedAesWithShareBack.map((k) => api.cryptoApi.primitives.AES.exportKey(k, 'raw').then((x) => ua2hex(x)))\n    )\n\n    // Patient can decrypt the new hcPartyKey\n    expect(shareBackKeysRaw).to.not.contain(null)\n    expect(shareBackKeysRaw).to.not.contain(undefined)\n    expect(shareBackKeysRaw).to.contain(oldExchangeKeyRaw)\n    expect(shareBackKeysRaw).to.contain(newExchangeKeyRaw)\n\n    // User can access his previous data again\n    await apiAfterSharedBack.cryptoApi.forceReload()\n\n    const initialRecordAfterSharedBack = await apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(u, initialRecord.id!)\n    expect(initialRecordAfterSharedBack.id).to.be.equal(savedInitialRecord.id)\n    expect(initialRecordAfterSharedBack.rev).to.be.equal(savedInitialRecord.rev)\n    expect(initialRecordAfterSharedBack.title).to.be.equal(savedInitialRecord.title)\n  })\n})\n\n// TODO test that EXACTLY ONE maintenance task is created for each delegator AND delegate in a exchange key with the data owner with the new key\n"]}

package/test/icc-x-api/crypto/full-crypto-test.d.ts

@@ -0,0 +1 @@
+import 'isomorphic-fetch';