@icure/api 7.1.34 → 7.1.35

package/test/icc-x-api/crypto/KeyManager-test.js

@@ -0,0 +1,225 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const mocha_1 = require("mocha");
+const crypto_1 = require("crypto");
+require("isomorphic-fetch");
+const chai_1 = require("chai");
+const test_utils_1 = require("../../utils/test_utils");
+const TestStorage_1 = require("../../utils/TestStorage");
+const TestCryptoStrategies_1 = require("../../utils/TestCryptoStrategies");
+const types_1 = require("@icure/test-setup/types");
+const icc_x_api_1 = require("../../../icc-x-api");
+const apiV6_1 = require("@icure/apiV6");
+(0, test_utils_1.setLocalStorage)(fetch);
+let env;
+(0, mocha_1.describe)('Key manager', function () {
+    return __awaiter(this, void 0, void 0, function* () {
+        this.timeout(600000);
+        (0, mocha_1.before)(function () {
+            return __awaiter(this, void 0, void 0, function* () {
+                const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+                env = yield initializer.execute((0, types_1.getEnvVariables)());
+            });
+        });
+        (0, mocha_1.it)(`Should not ask crypto strategies to recover available keys`, () => __awaiter(this, void 0, void 0, function* () {
+            const apis = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+            const storageWithoutParentKey = yield (0, TestStorage_1.testStorageWithKeys)([
+                {
+                    dataOwnerId: apis.grandCredentials.dataOwnerId,
+                    pairs: [{ privateKey: apis.grandCredentials.privateKey, publicKey: apis.grandCredentials.publicKey }],
+                },
+                {
+                    dataOwnerId: apis.childCredentials.dataOwnerId,
+                    pairs: [{ privateKey: apis.childCredentials.privateKey, publicKey: apis.childCredentials.publicKey }],
+                },
+            ]);
+            const cryptoStrats = new TestCryptoStrategies_1.TestCryptoStrategies(undefined, {}, {
+                [apis.parentCredentials.dataOwnerId]: { privateKey: apis.parentCredentials.privateKey, publicKey: apis.parentCredentials.publicKey },
+            });
+            yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, { username: apis.childCredentials.user, password: apis.childCredentials.password }, cryptoStrats, crypto_1.webcrypto, fetch, {
+                storage: storageWithoutParentKey.storage,
+                keyStorage: storageWithoutParentKey.keyStorage,
+                entryKeysFactory: storageWithoutParentKey.keyFactory,
+            });
+            (0, chai_1.expect)(cryptoStrats.recoverAndVerifyCallsParams).to.have.length(1);
+            const params = cryptoStrats.recoverAndVerifyCallsParams[0];
+            (0, chai_1.expect)(params).to.have.length(3);
+            (0, chai_1.expect)(params[0].dataOwner.dataOwner.id).to.equal(apis.grandCredentials.dataOwnerId);
+            (0, chai_1.expect)(params[0].unavailableKeys).to.be.empty;
+            (0, chai_1.expect)(params[0].unknownKeys).to.be.empty;
+            (0, chai_1.expect)(params[1].dataOwner.dataOwner.id).to.equal(apis.parentCredentials.dataOwnerId);
+            (0, chai_1.expect)(params[1].unavailableKeys).to.have.members([apis.parentCredentials.publicKey]);
+            (0, chai_1.expect)(params[1].unknownKeys).to.have.members([apis.parentCredentials.publicKey]);
+            (0, chai_1.expect)(params[2].dataOwner.dataOwner.id).to.equal(apis.childCredentials.dataOwnerId);
+            (0, chai_1.expect)(params[2].unavailableKeys).to.be.empty;
+            (0, chai_1.expect)(params[2].unknownKeys).to.be.empty;
+        }));
+        (0, mocha_1.it)('Should not ask crypto strategies to recover keys if all keys are available', () => __awaiter(this, void 0, void 0, function* () {
+            const apis = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+            const storageWithoutParentKey = yield (0, TestStorage_1.testStorageWithKeys)([
+                {
+                    dataOwnerId: apis.grandCredentials.dataOwnerId,
+                    pairs: [{ privateKey: apis.grandCredentials.privateKey, publicKey: apis.grandCredentials.publicKey }],
+                },
+                {
+                    dataOwnerId: apis.parentCredentials.dataOwnerId,
+                    pairs: [{ privateKey: apis.parentCredentials.privateKey, publicKey: apis.parentCredentials.publicKey }],
+                },
+                {
+                    dataOwnerId: apis.childCredentials.dataOwnerId,
+                    pairs: [{ privateKey: apis.childCredentials.privateKey, publicKey: apis.childCredentials.publicKey }],
+                },
+            ]);
+            const cryptoStrats = new TestCryptoStrategies_1.TestCryptoStrategies();
+            yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, { username: apis.childCredentials.user, password: apis.childCredentials.password }, cryptoStrats, crypto_1.webcrypto, fetch, {
+                storage: storageWithoutParentKey.storage,
+                keyStorage: storageWithoutParentKey.keyStorage,
+                entryKeysFactory: storageWithoutParentKey.keyFactory,
+            });
+            (0, chai_1.expect)(cryptoStrats.recoverAndVerifyCallsParams).to.have.length(0);
+        }));
+        (0, mocha_1.it)('Should allow to retrieve all keys for a data owner and his parents', () => __awaiter(this, void 0, void 0, function* () {
+            const apis = yield (0, test_utils_1.createHcpHierarchyApis)(env);
+            const keysData = yield apis.childApi.cryptoApi.getEncryptionDecryptionKeypairsForDataOwnerHierarchy();
+            function checkKey(userDetails, key) {
+                return __awaiter(this, void 0, void 0, function* () {
+                    const exportedPrivateKey = (0, apiV6_1.ua2hex)(yield apis.childApi.cryptoApi.primitives.RSA.exportKey(key.privateKey, 'pkcs8'));
+                    const exportedPublicKey = (0, apiV6_1.ua2hex)(yield apis.childApi.cryptoApi.primitives.RSA.exportKey(key.publicKey, 'spki'));
+                    (0, chai_1.expect)(exportedPublicKey).to.equal(userDetails.publicKey);
+                    (0, chai_1.expect)(exportedPrivateKey).to.equal(userDetails.privateKey);
+                });
+            }
+            (0, chai_1.expect)(keysData.self.dataOwnerId).to.equal(apis.childCredentials.dataOwnerId);
+            (0, chai_1.expect)(keysData.self.keys).to.have.length(1);
+            (0, chai_1.expect)(keysData.self.keys[0].verified).to.be.true;
+            yield checkKey(apis.childCredentials, keysData.self.keys[0].pair);
+            (0, chai_1.expect)(keysData.parents).to.have.length(2);
+            (0, chai_1.expect)(keysData.parents[0].dataOwnerId).to.equal(apis.grandCredentials.dataOwnerId);
+            (0, chai_1.expect)(keysData.parents[0].keys).to.have.length(1);
+            yield checkKey(apis.grandCredentials, keysData.parents[0].keys[0].pair);
+            (0, chai_1.expect)(keysData.parents[1].dataOwnerId).to.equal(apis.parentCredentials.dataOwnerId);
+            (0, chai_1.expect)(keysData.parents[1].keys).to.have.length(1);
+            yield checkKey(apis.parentCredentials, keysData.parents[1].keys[0].pair);
+        }));
+        (0, mocha_1.it)('If a HCP has no key yet, but the parent does the crypto strategies should first ask to recover the keys for the parent then ask for the generation of a new key to the data owner', () => __awaiter(this, void 0, void 0, function* () {
+            const hcpsInfo = yield (0, test_utils_1.createNewHcpWithoutKeyAndParentWithKey)(env);
+            const cryptoStrats = new (class {
+                constructor() {
+                    this.generateNewKeyCalled = false;
+                    this.recoverCalled = false;
+                    this.generatedKeyPair = undefined;
+                }
+                generateNewKeyForDataOwner(self, cryptoPrimitives) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        if (this.generateNewKeyCalled)
+                            throw new Error('generateNewKeyForDataOwner called twice');
+                        if (!this.recoverCalled)
+                            throw new Error('generateNewKeyForDataOwner called before recoverAndVerifySelfHierarchyKeys');
+                        this.generateNewKeyCalled = true;
+                        (0, chai_1.expect)(self.dataOwner.id).to.equal(hcpsInfo.childDataOwnerId);
+                        return (this.generatedKeyPair = yield cryptoPrimitives.RSA.generateKeyPair());
+                    });
+                }
+                recoverAndVerifySelfHierarchyKeys(keysData, cryptoPrimitives) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        if (this.recoverCalled)
+                            throw new Error('recoverAndVerifySelfHierarchyKeys called twice');
+                        this.recoverCalled = true;
+                        (0, chai_1.expect)(keysData).to.have.length(2);
+                        (0, chai_1.expect)(keysData[0].dataOwner.dataOwner.id).to.equal(hcpsInfo.parentCredentials.dataOwnerId);
+                        (0, chai_1.expect)(keysData[0].unknownKeys).to.have.members([hcpsInfo.parentCredentials.publicKey]);
+                        (0, chai_1.expect)(keysData[0].unavailableKeys).to.have.members([hcpsInfo.parentCredentials.publicKey]);
+                        (0, chai_1.expect)(keysData[1].dataOwner.dataOwner.id).to.equal(hcpsInfo.childDataOwnerId);
+                        (0, chai_1.expect)(keysData[1].unknownKeys).to.be.empty;
+                        (0, chai_1.expect)(keysData[1].unavailableKeys).to.be.empty;
+                        return {
+                            [hcpsInfo.parentCredentials.dataOwnerId]: {
+                                recoveredKeys: {
+                                    [hcpsInfo.parentCredentials.publicKey.slice(-32)]: yield cryptoPrimitives.RSA.importKeyPair('pkcs8', (0, icc_x_api_1.hex2ua)(hcpsInfo.parentCredentials.privateKey), 'spki', (0, icc_x_api_1.hex2ua)(hcpsInfo.parentCredentials.publicKey)),
+                                },
+                                keyAuthenticity: {},
+                            },
+                            [hcpsInfo.childDataOwnerId]: {
+                                recoveredKeys: {},
+                                keyAuthenticity: {},
+                            },
+                        };
+                    });
+                }
+                verifyDelegatePublicKeys(delegate, publicKeys, cryptoPrimitives) {
+                    throw new Error('This method should not be called by this test');
+                }
+            })();
+            const childApi = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, { username: hcpsInfo.childUser, password: hcpsInfo.childPassword }, cryptoStrats, crypto_1.webcrypto, fetch, {
+                storage: new TestStorage_1.TestStorage(),
+                keyStorage: new TestStorage_1.TestKeyStorage(),
+            });
+            (0, chai_1.expect)(cryptoStrats.generateNewKeyCalled).to.be.true;
+            (0, chai_1.expect)(cryptoStrats.recoverCalled).to.be.true;
+            const keys = Array.from(childApi.dataOwnerApi.getHexPublicKeysOf((yield childApi.dataOwnerApi.getCurrentDataOwner()).dataOwner));
+            (0, chai_1.expect)(keys).to.have.length(1);
+            (0, chai_1.expect)(Array.from(keys)[0]).to.equal((0, apiV6_1.ua2hex)(yield childApi.cryptoApi.primitives.RSA.exportKey(cryptoStrats.generatedKeyPair.publicKey, 'spki')));
+        }));
+        (0, mocha_1.it)('If a HCP has no key yet, but the parent does and the key is available the crypto strategies should ask for the generation of a new key to the data owner', () => __awaiter(this, void 0, void 0, function* () {
+            function doTest(initialiseEmptyKeyForChild) {
+                return __awaiter(this, void 0, void 0, function* () {
+                    const hcpsInfo = yield (0, test_utils_1.createNewHcpWithoutKeyAndParentWithKey)(env, { initialiseEmptyKeyForChild });
+                    const cryptoStrats = new (class {
+                        constructor() {
+                            this.generateNewKeyCalled = false;
+                            this.generatedKeyPair = undefined;
+                        }
+                        generateNewKeyForDataOwner(self, cryptoPrimitives) {
+                            return __awaiter(this, void 0, void 0, function* () {
+                                if (this.generateNewKeyCalled)
+                                    throw new Error('generateNewKeyForDataOwner called twice');
+                                this.generateNewKeyCalled = true;
+                                (0, chai_1.expect)(self.dataOwner.id).to.equal(hcpsInfo.childDataOwnerId);
+                                return (this.generatedKeyPair = yield cryptoPrimitives.RSA.generateKeyPair());
+                            });
+                        }
+                        recoverAndVerifySelfHierarchyKeys(keysData, cryptoPrimitives) {
+                            return __awaiter(this, void 0, void 0, function* () {
+                                throw new Error('This method should not be called by this test');
+                            });
+                        }
+                        verifyDelegatePublicKeys(delegate, publicKeys, cryptoPrimitives) {
+                            throw new Error('This method should not be called by this test');
+                        }
+                    })();
+                    const storages = yield (0, TestStorage_1.testStorageWithKeys)([
+                        {
+                            dataOwnerId: hcpsInfo.parentCredentials.dataOwnerId,
+                            pairs: [{ privateKey: hcpsInfo.parentCredentials.privateKey, publicKey: hcpsInfo.parentCredentials.publicKey }],
+                        },
+                    ]);
+                    const childApi = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, { username: hcpsInfo.childUser, password: hcpsInfo.childPassword }, cryptoStrats, crypto_1.webcrypto, fetch, {
+                        storage: storages.storage,
+                        keyStorage: storages.keyStorage,
+                        entryKeysFactory: storages.keyFactory,
+                    });
+                    (0, chai_1.expect)(cryptoStrats.generateNewKeyCalled).to.be.true;
+                    const initialisedHcp = (yield childApi.dataOwnerApi.getCurrentDataOwner()).dataOwner;
+                    const keys = Array.from(childApi.dataOwnerApi.getHexPublicKeysOf(initialisedHcp));
+                    (0, chai_1.expect)(keys).to.have.length(1);
+                    (0, chai_1.expect)(keys[0]).to.equal((0, apiV6_1.ua2hex)(yield childApi.cryptoApi.primitives.RSA.exportKey(cryptoStrats.generatedKeyPair.publicKey, 'spki')));
+                    // V7 ONLY: the new key should be saved in `publicKey`
+                    (0, chai_1.expect)(initialisedHcp.publicKey).to.equal(keys[0]);
+                });
+            }
+            yield doTest(false);
+            // V7 ONLY
+            yield doTest(true);
+        }));
+    });
+});
+//# sourceMappingURL=KeyManager-test.js.map

package/test/icc-x-api/crypto/KeyManager-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeyManager-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/KeyManager-test.ts"],"names":[],"mappings":";;;;;;;;;;;AAEA,iCAA4C;AAE5C,mCAAkC;AAClC,4BAAyB;AAGzB,+BAA6B;AAG7B,uDAAmJ;AACnJ,yDAA0F;AAC1F,2EAAuE;AACvE,mDAAgF;AAChF,kDAAkG;AAIlG,wCAAqC;AAIrC,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AAEtB,IAAI,GAAa,CAAA;AAEjB,IAAA,gBAAQ,EAAC,aAAa,EAAE;;QACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAEpB,IAAA,cAAM,EAAC;;gBACL,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;gBACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;YACpD,CAAC;SAAA,CAAC,CAAA;QAEF,IAAA,UAAE,EAAC,4DAA4D,EAAE,GAAS,EAAE;YAC1E,MAAM,IAAI,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAG,CAAC,CAAA;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAA,iCAAmB,EAAC;gBACxD;oBACE,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW;oBAC9C,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC;iBACtG;gBACD;oBACE,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW;oBAC9C,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC;iBACtG;aACF,CAAC,CAAA;YACF,MAAM,YAAY,GAAG,IAAI,2CAAoB,CAC3C,SAAS,EACT,EAAE,EACF;gBACE,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE;aACrI,CACF,CAAA;YACD,MAAM,oBAAQ,CAAC,UAAU,CACvB,GAAG,CAAC,QAAQ,EACZ,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAClF,YAAY,EACZ,kBAAgB,EAChB,KAAK,EACL;gBACE,OAAO,EAAE,uBAAuB,CAAC,OAAO;gBACxC,UAAU,EAAE,uBAAuB,CAAC,UAAU;gBAC9C,gBAAgB,EAAE,uBAAuB,CAAC,UAAU;aACrD,CACF,CAAA;YACD,IAAA,aAAM,EAAC,YAAY,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAClE,MAAM,MAAM,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAA;YAC1D,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAChC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;YACpF,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;YAC7C,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;YACzC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;YACrF,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAA;YACrF,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAA;YACjF,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;YACpF,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;YAC7C,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;QAC3C,CAAC,CAAA,CAAC,CAAA;QAEF,IAAA,UAAE,EAAC,4EAA4E,EAAE,GAAS,EAAE;YAC1F,MAAM,IAAI,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAG,CAAC,CAAA;YAC9C,MAAM,uBAAuB,GAAG,MAAM,IAAA,iCAAmB,EAAC;gBACxD;oBACE,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW;oBAC9C,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC;iBACtG;gBACD;oBACE,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,WAAW;oBAC/C,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC;iBACxG;gBACD;oBACE,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW;oBAC9C,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC;iBACtG;aACF,CAAC,CAAA;YACF,MAAM,YAAY,GAAG,IAAI,2CAAoB,EAAE,CAAA;YAC/C,MAAM,oBAAQ,CAAC,UAAU,CACvB,GAAG,CAAC,QAAQ,EACZ,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAClF,YAAY,EACZ,kBAAgB,EAChB,KAAK,EACL;gBACE,OAAO,EAAE,uBAAuB,CAAC,OAAO;gBACxC,UAAU,EAAE,uBAAuB,CAAC,UAAU;gBAC9C,gBAAgB,EAAE,uBAAuB,CAAC,UAAU;aACrD,CACF,CAAA;YACD,IAAA,aAAM,EAAC,YAAY,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACpE,CAAC,CAAA,CAAC,CAAA;QAEF,IAAA,UAAE,EAAC,oEAAoE,EAAE,GAAS,EAAE;YAClF,MAAM,IAAI,GAAG,MAAM,IAAA,mCAAsB,EAAC,GAAG,CAAC,CAAA;YAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,oDAAoD,EAAE,CAAA;YACrG,SAAe,QAAQ,CAAC,WAAwB,EAAE,GAAuB;;oBACvE,MAAM,kBAAkB,GAAG,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;oBAClH,MAAM,iBAAiB,GAAG,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;oBAC/G,IAAA,aAAM,EAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;oBACzD,IAAA,aAAM,EAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;gBAC7D,CAAC;aAAA;YACD,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAC7E,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAC5C,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAA;YACjD,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACjE,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAC1C,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;YACnF,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAClD,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACvE,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;YACpF,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAClD,MAAM,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC1E,CAAC,CAAA,CAAC,CAAA;QAEF,IAAA,UAAE,EAAC,mLAAmL,EAAE,GAAS,EAAE;YACjM,MAAM,QAAQ,GAAG,MAAM,IAAA,mDAAsC,EAAC,GAAG,CAAC,CAAA;YAClE,MAAM,YAAY,GAAG,IAAI,CAAC;gBAAA;oBACxB,yBAAoB,GAAY,KAAK,CAAA;oBACrC,kBAAa,GAAY,KAAK,CAAA;oBAC9B,qBAAgB,GAAmC,SAAS,CAAA;gBAmD9D,CAAC;gBAjDO,0BAA0B,CAAC,IAAuB,EAAE,gBAAkC;;wBAC1F,IAAI,IAAI,CAAC,oBAAoB;4BAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;wBACzF,IAAI,CAAC,IAAI,CAAC,aAAa;4BAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;wBACtH,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;wBAChC,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;wBAC7D,OAAO,CAAC,IAAI,CAAC,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAA;oBAC/E,CAAC;iBAAA;gBAEK,iCAAiC,CACrC,QAIG,EACH,gBAAkC;;wBAIlC,IAAI,IAAI,CAAC,aAAa;4BAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;wBACzF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;wBACzB,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;wBAClC,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;wBAC3F,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAA;wBACvF,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAA;wBAC3F,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;wBAC9E,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;wBAC3C,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;wBAC/C,OAAO;4BACL,CAAC,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE;gCACxC,aAAa,EAAE;oCACb,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,gBAAgB,CAAC,GAAG,CAAC,aAAa,CACzF,OAAO,EACP,IAAA,kBAAM,EAAC,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAC7C,MAAM,EACN,IAAA,kBAAM,EAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAC7C;iCACF;gCACD,eAAe,EAAE,EAAE;6BACpB;4BACD,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;gCAC3B,aAAa,EAAE,EAAE;gCACjB,eAAe,EAAE,EAAE;6BACpB;yBACF,CAAA;oBACH,CAAC;iBAAA;gBAED,wBAAwB,CAAC,QAAiC,EAAE,UAAoB,EAAE,gBAAkC;oBAClH,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;gBAClE,CAAC;aACF,CAAC,EAAE,CAAA;YACJ,MAAM,QAAQ,GAAG,MAAM,oBAAQ,CAAC,UAAU,CACxC,GAAG,CAAC,QAAQ,EACZ,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,aAAa,EAAE,EAClE,YAAY,EACZ,kBAAgB,EAChB,KAAK,EACL;gBACE,OAAO,EAAE,IAAI,yBAAW,EAAE;gBAC1B,UAAU,EAAE,IAAI,4BAAc,EAAE;aACjC,CACF,CAAA;YACD,IAAA,aAAM,EAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAA;YACpD,IAAA,aAAM,EAAC,YAAY,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAA;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;YAChI,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAC9B,IAAA,aAAM,EAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAA,cAAM,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,gBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACnJ,CAAC,CAAA,CAAC,CAAA;QAEF,IAAA,UAAE,EAAC,0JAA0J,EAAE,GAAS,EAAE;YACxK,SAAe,MAAM,CAAC,0BAAmC;;oBACvD,MAAM,QAAQ,GAAG,MAAM,IAAA,mDAAsC,EAAC,GAAG,EAAE,EAAE,0BAA0B,EAAE,CAAC,CAAA;oBAClG,MAAM,YAAY,GAAG,IAAI,CAAC;wBAAA;4BACxB,yBAAoB,GAAY,KAAK,CAAA;4BACrC,qBAAgB,GAAmC,SAAS,CAAA;wBAyB9D,CAAC;wBAvBO,0BAA0B,CAAC,IAAuB,EAAE,gBAAkC;;gCAC1F,IAAI,IAAI,CAAC,oBAAoB;oCAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;gCACzF,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;gCAChC,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;gCAC7D,OAAO,CAAC,IAAI,CAAC,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAA;4BAC/E,CAAC;yBAAA;wBAEK,iCAAiC,CACrC,QAIG,EACH,gBAAkC;;gCAIlC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;4BAClE,CAAC;yBAAA;wBAED,wBAAwB,CAAC,QAAiC,EAAE,UAAoB,EAAE,gBAAkC;4BAClH,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;wBAClE,CAAC;qBACF,CAAC,EAAE,CAAA;oBACJ,MAAM,QAAQ,GAAG,MAAM,IAAA,iCAAmB,EAAC;wBACzC;4BACE,WAAW,EAAE,QAAQ,CAAC,iBAAiB,CAAC,WAAW;4BACnD,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC;yBAChH;qBACF,CAAC,CAAA;oBACF,MAAM,QAAQ,GAAG,MAAM,oBAAQ,CAAC,UAAU,CACxC,GAAG,CAAC,QAAQ,EACZ,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,aAAa,EAAE,EAClE,YAAY,EACZ,kBAAgB,EAChB,KAAK,EACL;wBACE,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;wBAC/B,gBAAgB,EAAE,QAAQ,CAAC,UAAU;qBACtC,CACF,CAAA;oBACD,IAAA,aAAM,EAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAA;oBACpD,MAAM,cAAc,GAAG,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAA;oBACpF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAA;oBACjF,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;oBAC9B,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAA,cAAM,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,gBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;oBACrI,sDAAsD;oBACtD,IAAA,aAAM,EAAC,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;gBACpD,CAAC;aAAA;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,CAAA;YACnB,UAAU;YACV,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC;CAAA,CAAC,CAAA","sourcesContent":["import { v4 as uuid } from 'uuid'\nimport { User } from '../../../icc-api/model/User'\nimport { before, describe, it } from 'mocha'\n\nimport { webcrypto } from 'crypto'\nimport 'isomorphic-fetch'\n\nimport { IccPatientApi } from '../../../icc-api'\nimport { expect } from 'chai'\n\nimport { BasicAuthenticationProvider } from '../../../icc-x-api/auth/AuthenticationProvider'\nimport { createHcpHierarchyApis, createNewHcpWithoutKeyAndParentWithKey, getEnvironmentInitializer, setLocalStorage } from '../../utils/test_utils'\nimport { TestKeyStorage, TestStorage, testStorageWithKeys } from '../../utils/TestStorage'\nimport { TestCryptoStrategies } from '../../utils/TestCryptoStrategies'\nimport { getEnvVariables, TestVars, UserDetails } from '@icure/test-setup/types'\nimport { CryptoPrimitives, CryptoStrategies, hex2ua, IcureApi, KeyPair } from '../../../icc-x-api'\nimport exp = require('constants')\nimport { KeyManager } from '../../../icc-x-api/crypto/KeyManager'\nimport { TestApi } from '../../utils/TestApi'\nimport { ua2hex } from '@icure/apiV6'\nimport { DataOwnerWithType } from '../../../icc-api/model/DataOwnerWithType'\nimport { CryptoActorStubWithType } from '../../../icc-api/model/CryptoActorStub'\n\nsetLocalStorage(fetch)\n\nlet env: TestVars\n\ndescribe('Key manager', async function () {\n  this.timeout(600000)\n\n  before(async function () {\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it(`Should not ask crypto strategies to recover available keys`, async () => {\n    const apis = await createHcpHierarchyApis(env)\n    const storageWithoutParentKey = await testStorageWithKeys([\n      {\n        dataOwnerId: apis.grandCredentials.dataOwnerId,\n        pairs: [{ privateKey: apis.grandCredentials.privateKey, publicKey: apis.grandCredentials.publicKey }],\n      },\n      {\n        dataOwnerId: apis.childCredentials.dataOwnerId,\n        pairs: [{ privateKey: apis.childCredentials.privateKey, publicKey: apis.childCredentials.publicKey }],\n      },\n    ])\n    const cryptoStrats = new TestCryptoStrategies(\n      undefined,\n      {},\n      {\n        [apis.parentCredentials.dataOwnerId]: { privateKey: apis.parentCredentials.privateKey, publicKey: apis.parentCredentials.publicKey },\n      }\n    )\n    await IcureApi.initialise(\n      env.iCureUrl,\n      { username: apis.childCredentials.user, password: apis.childCredentials.password },\n      cryptoStrats,\n      webcrypto as any,\n      fetch,\n      {\n        storage: storageWithoutParentKey.storage,\n        keyStorage: storageWithoutParentKey.keyStorage,\n        entryKeysFactory: storageWithoutParentKey.keyFactory,\n      }\n    )\n    expect(cryptoStrats.recoverAndVerifyCallsParams).to.have.length(1)\n    const params = cryptoStrats.recoverAndVerifyCallsParams[0]\n    expect(params).to.have.length(3)\n    expect(params[0].dataOwner.dataOwner.id).to.equal(apis.grandCredentials.dataOwnerId)\n    expect(params[0].unavailableKeys).to.be.empty\n    expect(params[0].unknownKeys).to.be.empty\n    expect(params[1].dataOwner.dataOwner.id).to.equal(apis.parentCredentials.dataOwnerId)\n    expect(params[1].unavailableKeys).to.have.members([apis.parentCredentials.publicKey])\n    expect(params[1].unknownKeys).to.have.members([apis.parentCredentials.publicKey])\n    expect(params[2].dataOwner.dataOwner.id).to.equal(apis.childCredentials.dataOwnerId)\n    expect(params[2].unavailableKeys).to.be.empty\n    expect(params[2].unknownKeys).to.be.empty\n  })\n\n  it('Should not ask crypto strategies to recover keys if all keys are available', async () => {\n    const apis = await createHcpHierarchyApis(env)\n    const storageWithoutParentKey = await testStorageWithKeys([\n      {\n        dataOwnerId: apis.grandCredentials.dataOwnerId,\n        pairs: [{ privateKey: apis.grandCredentials.privateKey, publicKey: apis.grandCredentials.publicKey }],\n      },\n      {\n        dataOwnerId: apis.parentCredentials.dataOwnerId,\n        pairs: [{ privateKey: apis.parentCredentials.privateKey, publicKey: apis.parentCredentials.publicKey }],\n      },\n      {\n        dataOwnerId: apis.childCredentials.dataOwnerId,\n        pairs: [{ privateKey: apis.childCredentials.privateKey, publicKey: apis.childCredentials.publicKey }],\n      },\n    ])\n    const cryptoStrats = new TestCryptoStrategies()\n    await IcureApi.initialise(\n      env.iCureUrl,\n      { username: apis.childCredentials.user, password: apis.childCredentials.password },\n      cryptoStrats,\n      webcrypto as any,\n      fetch,\n      {\n        storage: storageWithoutParentKey.storage,\n        keyStorage: storageWithoutParentKey.keyStorage,\n        entryKeysFactory: storageWithoutParentKey.keyFactory,\n      }\n    )\n    expect(cryptoStrats.recoverAndVerifyCallsParams).to.have.length(0)\n  })\n\n  it('Should allow to retrieve all keys for a data owner and his parents', async () => {\n    const apis = await createHcpHierarchyApis(env)\n    const keysData = await apis.childApi.cryptoApi.getEncryptionDecryptionKeypairsForDataOwnerHierarchy()\n    async function checkKey(userDetails: UserDetails, key: KeyPair<CryptoKey>) {\n      const exportedPrivateKey = ua2hex(await apis.childApi.cryptoApi.primitives.RSA.exportKey(key.privateKey, 'pkcs8'))\n      const exportedPublicKey = ua2hex(await apis.childApi.cryptoApi.primitives.RSA.exportKey(key.publicKey, 'spki'))\n      expect(exportedPublicKey).to.equal(userDetails.publicKey)\n      expect(exportedPrivateKey).to.equal(userDetails.privateKey)\n    }\n    expect(keysData.self.dataOwnerId).to.equal(apis.childCredentials.dataOwnerId)\n    expect(keysData.self.keys).to.have.length(1)\n    expect(keysData.self.keys[0].verified).to.be.true\n    await checkKey(apis.childCredentials, keysData.self.keys[0].pair)\n    expect(keysData.parents).to.have.length(2)\n    expect(keysData.parents[0].dataOwnerId).to.equal(apis.grandCredentials.dataOwnerId)\n    expect(keysData.parents[0].keys).to.have.length(1)\n    await checkKey(apis.grandCredentials, keysData.parents[0].keys[0].pair)\n    expect(keysData.parents[1].dataOwnerId).to.equal(apis.parentCredentials.dataOwnerId)\n    expect(keysData.parents[1].keys).to.have.length(1)\n    await checkKey(apis.parentCredentials, keysData.parents[1].keys[0].pair)\n  })\n\n  it('If a HCP has no key yet, but the parent does the crypto strategies should first ask to recover the keys for the parent then ask for the generation of a new key to the data owner', async () => {\n    const hcpsInfo = await createNewHcpWithoutKeyAndParentWithKey(env)\n    const cryptoStrats = new (class implements CryptoStrategies {\n      generateNewKeyCalled: boolean = false\n      recoverCalled: boolean = false\n      generatedKeyPair: KeyPair<CryptoKey> | undefined = undefined\n\n      async generateNewKeyForDataOwner(self: DataOwnerWithType, cryptoPrimitives: CryptoPrimitives): Promise<KeyPair<CryptoKey> | boolean> {\n        if (this.generateNewKeyCalled) throw new Error('generateNewKeyForDataOwner called twice')\n        if (!this.recoverCalled) throw new Error('generateNewKeyForDataOwner called before recoverAndVerifySelfHierarchyKeys')\n        this.generateNewKeyCalled = true\n        expect(self.dataOwner.id).to.equal(hcpsInfo.childDataOwnerId)\n        return (this.generatedKeyPair = await cryptoPrimitives.RSA.generateKeyPair())\n      }\n\n      async recoverAndVerifySelfHierarchyKeys(\n        keysData: {\n          dataOwner: DataOwnerWithType\n          unknownKeys: string[]\n          unavailableKeys: string[]\n        }[],\n        cryptoPrimitives: CryptoPrimitives\n      ): Promise<{\n        [p: string]: { recoveredKeys: { [p: string]: KeyPair<CryptoKey> }; keyAuthenticity: { [p: string]: boolean } }\n      }> {\n        if (this.recoverCalled) throw new Error('recoverAndVerifySelfHierarchyKeys called twice')\n        this.recoverCalled = true\n        expect(keysData).to.have.length(2)\n        expect(keysData[0].dataOwner.dataOwner.id).to.equal(hcpsInfo.parentCredentials.dataOwnerId)\n        expect(keysData[0].unknownKeys).to.have.members([hcpsInfo.parentCredentials.publicKey])\n        expect(keysData[0].unavailableKeys).to.have.members([hcpsInfo.parentCredentials.publicKey])\n        expect(keysData[1].dataOwner.dataOwner.id).to.equal(hcpsInfo.childDataOwnerId)\n        expect(keysData[1].unknownKeys).to.be.empty\n        expect(keysData[1].unavailableKeys).to.be.empty\n        return {\n          [hcpsInfo.parentCredentials.dataOwnerId]: {\n            recoveredKeys: {\n              [hcpsInfo.parentCredentials.publicKey.slice(-32)]: await cryptoPrimitives.RSA.importKeyPair(\n                'pkcs8',\n                hex2ua(hcpsInfo.parentCredentials.privateKey),\n                'spki',\n                hex2ua(hcpsInfo.parentCredentials.publicKey)\n              ),\n            },\n            keyAuthenticity: {},\n          },\n          [hcpsInfo.childDataOwnerId]: {\n            recoveredKeys: {},\n            keyAuthenticity: {},\n          },\n        }\n      }\n\n      verifyDelegatePublicKeys(delegate: CryptoActorStubWithType, publicKeys: string[], cryptoPrimitives: CryptoPrimitives): Promise<string[]> {\n        throw new Error('This method should not be called by this test')\n      }\n    })()\n    const childApi = await IcureApi.initialise(\n      env.iCureUrl,\n      { username: hcpsInfo.childUser, password: hcpsInfo.childPassword },\n      cryptoStrats,\n      webcrypto as any,\n      fetch,\n      {\n        storage: new TestStorage(),\n        keyStorage: new TestKeyStorage(),\n      }\n    )\n    expect(cryptoStrats.generateNewKeyCalled).to.be.true\n    expect(cryptoStrats.recoverCalled).to.be.true\n    const keys = Array.from(childApi.dataOwnerApi.getHexPublicKeysOf((await childApi.dataOwnerApi.getCurrentDataOwner()).dataOwner))\n    expect(keys).to.have.length(1)\n    expect(Array.from(keys)[0]).to.equal(ua2hex(await childApi.cryptoApi.primitives.RSA.exportKey(cryptoStrats.generatedKeyPair!.publicKey, 'spki')))\n  })\n\n  it('If a HCP has no key yet, but the parent does and the key is available the crypto strategies should ask for the generation of a new key to the data owner', async () => {\n    async function doTest(initialiseEmptyKeyForChild: boolean) {\n      const hcpsInfo = await createNewHcpWithoutKeyAndParentWithKey(env, { initialiseEmptyKeyForChild })\n      const cryptoStrats = new (class implements CryptoStrategies {\n        generateNewKeyCalled: boolean = false\n        generatedKeyPair: KeyPair<CryptoKey> | undefined = undefined\n\n        async generateNewKeyForDataOwner(self: DataOwnerWithType, cryptoPrimitives: CryptoPrimitives): Promise<KeyPair<CryptoKey> | boolean> {\n          if (this.generateNewKeyCalled) throw new Error('generateNewKeyForDataOwner called twice')\n          this.generateNewKeyCalled = true\n          expect(self.dataOwner.id).to.equal(hcpsInfo.childDataOwnerId)\n          return (this.generatedKeyPair = await cryptoPrimitives.RSA.generateKeyPair())\n        }\n\n        async recoverAndVerifySelfHierarchyKeys(\n          keysData: {\n            dataOwner: DataOwnerWithType\n            unknownKeys: string[]\n            unavailableKeys: string[]\n          }[],\n          cryptoPrimitives: CryptoPrimitives\n        ): Promise<{\n          [p: string]: { recoveredKeys: { [p: string]: KeyPair<CryptoKey> }; keyAuthenticity: { [p: string]: boolean } }\n        }> {\n          throw new Error('This method should not be called by this test')\n        }\n\n        verifyDelegatePublicKeys(delegate: CryptoActorStubWithType, publicKeys: string[], cryptoPrimitives: CryptoPrimitives): Promise<string[]> {\n          throw new Error('This method should not be called by this test')\n        }\n      })()\n      const storages = await testStorageWithKeys([\n        {\n          dataOwnerId: hcpsInfo.parentCredentials.dataOwnerId,\n          pairs: [{ privateKey: hcpsInfo.parentCredentials.privateKey, publicKey: hcpsInfo.parentCredentials.publicKey }],\n        },\n      ])\n      const childApi = await IcureApi.initialise(\n        env.iCureUrl,\n        { username: hcpsInfo.childUser, password: hcpsInfo.childPassword },\n        cryptoStrats,\n        webcrypto as any,\n        fetch,\n        {\n          storage: storages.storage,\n          keyStorage: storages.keyStorage,\n          entryKeysFactory: storages.keyFactory,\n        }\n      )\n      expect(cryptoStrats.generateNewKeyCalled).to.be.true\n      const initialisedHcp = (await childApi.dataOwnerApi.getCurrentDataOwner()).dataOwner\n      const keys = Array.from(childApi.dataOwnerApi.getHexPublicKeysOf(initialisedHcp))\n      expect(keys).to.have.length(1)\n      expect(keys[0]).to.equal(ua2hex(await childApi.cryptoApi.primitives.RSA.exportKey(cryptoStrats.generatedKeyPair!.publicKey, 'spki')))\n      // V7 ONLY: the new key should be saved in `publicKey`\n      expect(initialisedHcp.publicKey).to.equal(keys[0])\n    }\n    await doTest(false)\n    // V7 ONLY\n    await doTest(true)\n  })\n})\n"]}

package/test/icc-x-api/crypto/concurrency.d.ts

@@ -0,0 +1 @@
+import 'mocha';

package/test/icc-x-api/crypto/concurrency.js

@@ -0,0 +1,35 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const icc_x_api_1 = require("../../../icc-x-api");
+const chai_1 = require("chai");
+require("mocha");
+const delay = (ms) => new Promise((res) => setTimeout(res, ms));
+describe('Concurrency test', () => {
+    it('should return ordered sequence', () => __awaiter(void 0, void 0, void 0, function* () {
+        const cm = {};
+        const seq1 = [];
+        const seq2 = [];
+        const ctrl = yield Promise.all([500, 400, 300, 200, 100].map((x, idx) => __awaiter(void 0, void 0, void 0, function* () {
+            yield delay(x);
+            seq1.push(idx);
+            return idx;
+        })));
+        const res = yield Promise.all([500, 400, 300, 200, 100].map((x, idx) => (0, icc_x_api_1.notConcurrent)(cm, '123', () => __awaiter(void 0, void 0, void 0, function* () {
+            yield delay(x);
+            seq2.push(idx);
+            return idx;
+        }))));
+        (0, chai_1.expect)(seq1).to.not.eql(ctrl);
+        (0, chai_1.expect)(seq2).to.eql(res);
+    }));
+});
+//# sourceMappingURL=concurrency.js.map

package/test/icc-x-api/crypto/concurrency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/concurrency.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,kDAAkD;AAClD,+BAA6B;AAC7B,iBAAc;AAEd,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAA;AAEvE,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,gCAAgC,EAAE,GAAS,EAAE;QAC9C,MAAM,EAAE,GAAG,EAAE,CAAA;QACb,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,MAAM,IAAI,GAAa,EAAE,CAAA;QAEzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAO,CAAC,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,KAAK,CAAC,CAAC,CAAC,CAAA;YACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACd,OAAO,GAAG,CAAA;QACZ,CAAC,CAAA,CAAC,CACH,CAAA;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CACvC,IAAA,yBAAa,EAAC,EAAE,EAAE,KAAK,EAAE,GAAS,EAAE;YAClC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAA;YACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACd,OAAO,GAAG,CAAA;QACZ,CAAC,CAAA,CAAC,CACH,CACF,CAAA;QAED,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { notConcurrent } from '../../../icc-x-api'\nimport { expect } from 'chai'\nimport 'mocha'\n\nconst delay = (ms: number) => new Promise((res) => setTimeout(res, ms))\n\ndescribe('Concurrency test', () => {\n  it('should return ordered sequence', async () => {\n    const cm = {}\n    const seq1: number[] = []\n    const seq2: number[] = []\n\n    const ctrl = await Promise.all(\n      [500, 400, 300, 200, 100].map(async (x, idx) => {\n        await delay(x)\n        seq1.push(idx)\n        return idx\n      })\n    )\n    const res = await Promise.all(\n      [500, 400, 300, 200, 100].map((x, idx) =>\n        notConcurrent(cm, '123', async () => {\n          await delay(x)\n          seq2.push(idx)\n          return idx\n        })\n      )\n    )\n\n    expect(seq1).to.not.eql(ctrl)\n    expect(seq2).to.eql(res)\n  })\n})\n"]}

package/test/icc-x-api/crypto/crypto-utils.d.ts

@@ -0,0 +1 @@
+import 'mocha';

package/test/icc-x-api/crypto/crypto-utils.js

@@ -0,0 +1,80 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const icc_x_api_1 = require("../../../icc-x-api");
+const chai_1 = require("chai");
+require("mocha");
+const index_1 = require("../../../index");
+const node_compat_1 = require("../../../node-compat");
+const RSA_1 = require("../../../icc-x-api/crypto/RSA");
+const asn1_parser_1 = require("../../../icc-x-api/utils/asn1-parser");
+const test_utils_1 = require("../../utils/test_utils");
+const TestApi_1 = require("../../utils/TestApi");
+const types_1 = require("@icure/test-setup/types");
+let env;
+describe('ArrayBuffer methods', () => {
+    let rsa;
+    before(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+            rsa = new RSA_1.RSAUtils(node_compat_1.crypto);
+        });
+    });
+    describe('truncateTrailingNulls', () => {
+        it('should truncate trailing nulls out of an Uint8Array without copying', () => {
+            const bytes = [72, 101, 108, 108, 111, 33];
+            const originalArray = Uint8Array.from([...bytes, 0, 0]);
+            const truncatedArray = (0, index_1.truncateTrailingNulls)(originalArray);
+            (0, chai_1.expect)(truncatedArray.buffer).to.equal(originalArray.buffer);
+            (0, chai_1.expect)(Array.from(truncatedArray)).to.eql(bytes);
+        });
+        it('should preserve the offset into the buffer', () => {
+            const bytes = [72, 101, 108, 108, 111, 33];
+            const originalBuffer = new Uint8Array([0, 0, ...bytes, 0, 0]).buffer;
+            const originalArray = new Uint8Array(originalBuffer, 2, bytes.length);
+            const truncatedArray = (0, index_1.truncateTrailingNulls)(originalArray);
+            (0, chai_1.expect)(truncatedArray.buffer).to.equal(originalArray.buffer);
+            (0, chai_1.expect)(truncatedArray.byteOffset).to.equal(originalArray.byteOffset);
+            (0, chai_1.expect)(Array.from(truncatedArray)).to.eql(bytes);
+        });
+    });
+    describe('convertKeysFormat', () => {
+        it('should manage jwk conversions for private keys gracefully', () => __awaiter(void 0, void 0, void 0, function* () {
+            const { healthcarePartyApi } = yield (0, TestApi_1.TestApi)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password, node_compat_1.crypto);
+            const privKey = env.dataOwnerDetails[test_utils_1.hcp1Username].privateKey;
+            const parsed = (0, asn1_parser_1.parseAsn1)(new Uint8Array((0, index_1.hex2ua)(privKey)));
+            const jwk1 = (0, index_1.pkcs8ToJwk)((0, index_1.hex2ua)(privKey));
+            const pkcs8 = (0, index_1.jwk2pkcs8)(jwk1);
+            const jwk2 = (0, index_1.pkcs8ToJwk)((0, index_1.hex2ua)(pkcs8));
+            (0, chai_1.expect)(jwk1.n).to.equal(jwk2.n);
+            const pubKey = yield healthcarePartyApi.getCurrentHealthcareParty().then((hcp) => hcp.publicKey);
+            const jwk3 = (0, index_1.spkiToJwk)((0, index_1.hex2ua)(pubKey));
+            const spki = (0, index_1.jwk2spki)(jwk3);
+            const jwk4 = (0, index_1.spkiToJwk)((0, index_1.hex2ua)(spki));
+            (0, chai_1.expect)(jwk3.n).to.equal(jwk4.n);
+        }));
+        it('should convert spki to jwk in a coherent way', () => __awaiter(void 0, void 0, void 0, function* () {
+            const { healthcarePartyApi } = yield (0, TestApi_1.TestApi)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password, node_compat_1.crypto);
+            const pubKey = yield healthcarePartyApi.getCurrentHealthcareParty().then((hcp) => hcp.publicKey);
+            const jwk1 = (0, index_1.spkiToJwk)((0, index_1.hex2ua)(pubKey));
+            const rsaKey1 = yield rsa.importKey('jwk', jwk1, ['encrypt']);
+            const rsaKey2 = yield rsa.importKey('spki', (0, index_1.hex2ua)(pubKey), ['encrypt']);
+            const jwk2 = yield rsa.exportKey(rsaKey2, 'jwk');
+            const rsaKey3 = yield rsa.importKey('jwk', jwk2, ['encrypt']);
+            const n1 = (0, index_1.ua2hex)((0, icc_x_api_1.b64Url2ua)(jwk1.n));
+            const n2 = (0, index_1.ua2hex)((0, icc_x_api_1.b64Url2ua)(jwk2.n));
+            (0, chai_1.expect)(jwk1.n).to.equal(jwk2.n);
+        }));
+    });
+});
+//# sourceMappingURL=crypto-utils.js.map

package/test/icc-x-api/crypto/crypto-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-utils.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/crypto-utils.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,kDAA8C;AAC9C,+BAA6B;AAE7B,iBAAc;AACd,0CAAkH;AAClH,sDAA6C;AAC7C,uDAAwD;AACxD,sEAAgE;AAChE,uDAAgF;AAChF,iDAA6C;AAC7C,mDAAmE;AAEnE,IAAI,GAAyB,CAAA;AAE7B,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,GAAa,CAAA;IAEjB,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;YAClD,GAAG,GAAG,IAAI,cAAQ,CAAC,oBAAM,CAAC,CAAA;QAC5B,CAAC;KAAA,CAAC,CAAA;IAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;YAC7E,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YAC1C,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,cAAc,GAAG,IAAA,6BAAqB,EAAC,aAAa,CAAC,CAAA;YAC3D,IAAA,aAAM,EAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YAC5D,IAAA,aAAM,EAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAClD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YAC1C,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;YACpE,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;YACrE,MAAM,cAAc,GAAG,IAAA,6BAAqB,EAAC,aAAa,CAAC,CAAA;YAC3D,IAAA,aAAM,EAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YAC5D,IAAA,aAAM,EAAC,cAAc,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;YACpE,IAAA,aAAM,EAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAClD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,2DAA2D,EAAE,GAAS,EAAE;YACzE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAA,iBAAO,EAC1C,GAAI,CAAC,QAAQ,EACb,GAAI,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EACxC,GAAI,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,EAC5C,oBAAM,CACP,CAAA;YACD,MAAM,OAAO,GAAG,GAAI,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,UAAU,CAAA;YAC9D,MAAM,MAAM,GAAG,IAAA,uBAAS,EAAC,IAAI,UAAU,CAAC,IAAA,cAAM,EAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAEzD,MAAM,IAAI,GAAG,IAAA,kBAAU,EAAC,IAAA,cAAM,EAAC,OAAO,CAAC,CAAC,CAAA;YACxC,MAAM,KAAK,GAAG,IAAA,iBAAS,EAAC,IAAI,CAAC,CAAA;YAC7B,MAAM,IAAI,GAAG,IAAA,kBAAU,EAAC,IAAA,cAAM,EAAC,KAAK,CAAC,CAAC,CAAA;YAEtC,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAE/B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,yBAAyB,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAU,CAAC,CAAA;YACjG,MAAM,IAAI,GAAG,IAAA,iBAAS,EAAC,IAAA,cAAM,EAAC,MAAM,CAAC,CAAC,CAAA;YACtC,MAAM,IAAI,GAAG,IAAA,gBAAQ,EAAC,IAAI,CAAC,CAAA;YAC3B,MAAM,IAAI,GAAG,IAAA,iBAAS,EAAC,IAAA,cAAM,EAAC,IAAI,CAAC,CAAC,CAAA;YAEpC,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjC,CAAC,CAAA,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,GAAS,EAAE;YAC5D,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAA,iBAAO,EAC1C,GAAI,CAAC,QAAQ,EACb,GAAI,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EACxC,GAAI,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,EAC5C,oBAAM,CACP,CAAA;YACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,yBAAyB,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAU,CAAC,CAAA;YACjG,MAAM,IAAI,GAAG,IAAA,iBAAS,EAAC,IAAA,cAAM,EAAC,MAAM,CAAC,CAAC,CAAA;YAEtC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;YAC7D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,cAAM,EAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;YACxE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAChD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;YAE7D,MAAM,EAAE,GAAG,IAAA,cAAM,EAAC,IAAA,qBAAS,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YACpC,MAAM,EAAE,GAAG,IAAA,cAAM,EAAC,IAAA,qBAAS,EAAC,IAAI,CAAC,CAAE,CAAC,CAAC,CAAA;YAErC,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjC,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { b64Url2ua } from '../../../icc-x-api'\nimport { expect } from 'chai'\n\nimport 'mocha'\nimport { hex2ua, jwk2pkcs8, jwk2spki, pkcs8ToJwk, spkiToJwk, truncateTrailingNulls, ua2hex } from '../../../index'\nimport { crypto } from '../../../node-compat'\nimport { RSAUtils } from '../../../icc-x-api/crypto/RSA'\nimport { parseAsn1 } from '../../../icc-x-api/utils/asn1-parser'\nimport { getEnvironmentInitializer, hcp1Username } from '../../utils/test_utils'\nimport { TestApi } from '../../utils/TestApi'\nimport { getEnvVariables, TestVars } from '@icure/test-setup/types'\n\nlet env: TestVars | undefined\n\ndescribe('ArrayBuffer methods', () => {\n  let rsa: RSAUtils\n\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n    rsa = new RSAUtils(crypto)\n  })\n\n  describe('truncateTrailingNulls', () => {\n    it('should truncate trailing nulls out of an Uint8Array without copying', () => {\n      const bytes = [72, 101, 108, 108, 111, 33]\n      const originalArray = Uint8Array.from([...bytes, 0, 0])\n      const truncatedArray = truncateTrailingNulls(originalArray)\n      expect(truncatedArray.buffer).to.equal(originalArray.buffer)\n      expect(Array.from(truncatedArray)).to.eql(bytes)\n    })\n\n    it('should preserve the offset into the buffer', () => {\n      const bytes = [72, 101, 108, 108, 111, 33]\n      const originalBuffer = new Uint8Array([0, 0, ...bytes, 0, 0]).buffer\n      const originalArray = new Uint8Array(originalBuffer, 2, bytes.length)\n      const truncatedArray = truncateTrailingNulls(originalArray)\n      expect(truncatedArray.buffer).to.equal(originalArray.buffer)\n      expect(truncatedArray.byteOffset).to.equal(originalArray.byteOffset)\n      expect(Array.from(truncatedArray)).to.eql(bytes)\n    })\n  })\n\n  describe('convertKeysFormat', () => {\n    it('should manage jwk conversions for private keys gracefully', async () => {\n      const { healthcarePartyApi } = await TestApi(\n        env!.iCureUrl,\n        env!.dataOwnerDetails[hcp1Username].user,\n        env!.dataOwnerDetails[hcp1Username].password,\n        crypto\n      )\n      const privKey = env!.dataOwnerDetails[hcp1Username].privateKey\n      const parsed = parseAsn1(new Uint8Array(hex2ua(privKey)))\n\n      const jwk1 = pkcs8ToJwk(hex2ua(privKey))\n      const pkcs8 = jwk2pkcs8(jwk1)\n      const jwk2 = pkcs8ToJwk(hex2ua(pkcs8))\n\n      expect(jwk1.n).to.equal(jwk2.n)\n\n      const pubKey = await healthcarePartyApi.getCurrentHealthcareParty().then((hcp) => hcp.publicKey!)\n      const jwk3 = spkiToJwk(hex2ua(pubKey))\n      const spki = jwk2spki(jwk3)\n      const jwk4 = spkiToJwk(hex2ua(spki))\n\n      expect(jwk3.n).to.equal(jwk4.n)\n    })\n\n    it('should convert spki to jwk in a coherent way', async () => {\n      const { healthcarePartyApi } = await TestApi(\n        env!.iCureUrl,\n        env!.dataOwnerDetails[hcp1Username].user,\n        env!.dataOwnerDetails[hcp1Username].password,\n        crypto\n      )\n      const pubKey = await healthcarePartyApi.getCurrentHealthcareParty().then((hcp) => hcp.publicKey!)\n      const jwk1 = spkiToJwk(hex2ua(pubKey))\n\n      const rsaKey1 = await rsa.importKey('jwk', jwk1, ['encrypt'])\n      const rsaKey2 = await rsa.importKey('spki', hex2ua(pubKey), ['encrypt'])\n      const jwk2 = await rsa.exportKey(rsaKey2, 'jwk')\n      const rsaKey3 = await rsa.importKey('jwk', jwk2, ['encrypt'])\n\n      const n1 = ua2hex(b64Url2ua(jwk1.n))\n      const n2 = ua2hex(b64Url2ua(jwk2.n!))\n\n      expect(jwk1.n).to.equal(jwk2.n)\n    })\n  })\n})\n"]}

package/test/icc-x-api/crypto/cryptoTest.d.ts

@@ -0,0 +1,2 @@
+import 'isomorphic-fetch';
+import 'mocha';