npm - @icure/api - Versions diffs - 8.0.63 → 8.0.65 - Mend

@icure/api 8.0.63 → 8.0.65

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (135) hide show

package/test/icc-x-api/crypto/secure-delegations-metadata-decryptor-test.js DELETED Viewed

@@ -1,393 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const mocha_1 = require("mocha");
-const CryptoPrimitives_1 = require("../../../icc-x-api/crypto/CryptoPrimitives");
-const crypto_1 = require("crypto");
-const FakeEncryptionKeysManager_1 = require("../../utils/FakeEncryptionKeysManager");
-const SecureDelegationsSecurityMetadataDecryptor_1 = require("../../../icc-x-api/crypto/SecureDelegationsSecurityMetadataDecryptor");
-const SecureDelegationsEncryption_1 = require("../../../icc-x-api/crypto/SecureDelegationsEncryption");
-const FakeExchangeDataManager_1 = require("../../utils/FakeExchangeDataManager");
-const EntityWithDelegationTypeName_1 = require("../../../icc-x-api/utils/EntityWithDelegationTypeName");
-const ExchangeData_1 = require("../../../icc-api/model/internal/ExchangeData");
-const chai_1 = require("chai");
-const IcureStub_1 = require("../../../icc-api/model/IcureStub");
-const SecureDelegation_1 = require("../../../icc-api/model/SecureDelegation");
-const icc_x_api_1 = require("../../../icc-x-api");
-const SecurityMetadata_1 = require("../../../icc-api/model/SecurityMetadata");
-const collection_utils_1 = require("../../../icc-x-api/utils/collection-utils");
-const FakeExchangeDataMapManager_1 = require("../../utils/FakeExchangeDataMapManager");
-var AccessLevel = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
-(0, mocha_1.describe)('Secure delegations security metadata decryptor', function () {
-    return __awaiter(this, void 0, void 0, function* () {
-        const primitives = new CryptoPrimitives_1.WebCryptoPrimitives(crypto_1.webcrypto);
-        const expectedType = EntityWithDelegationTypeName_1.EntityWithDelegationTypeName.AccessLog;
-        const expectedSfks = [primitives.randomUuid(), primitives.randomUuid()];
-        let encryptionKeysManager;
-        let exchangeData;
-        let exchangeDataMap;
-        let decryptor;
-        let secureDelegationsEncryption;
-        class SecureDelegationWithEncryptedExchangeId extends SecureDelegation_1.SecureDelegation {
-            constructor(json) {
-                super(json);
-                Object.assign(this, json);
-            }
-        }
-        function cacheExchangeDataMaps(secureDelegations) {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield exchangeDataMap.createExchangeDataMaps(Object.entries(secureDelegations).reduce((p, [hash, secDel]) => {
-                    return Object.assign(Object.assign({}, p), { [hash]: secDel.encryptedExchangeDataId });
-                }, {}));
-            });
-        }
-        function initialiseComponents() {
-            return __awaiter(this, void 0, void 0, function* () {
-                encryptionKeysManager = yield FakeEncryptionKeysManager_1.FakeEncryptionKeysManager.create(primitives, [], [yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256)]);
-                exchangeData = new FakeExchangeDataManager_1.FakeDecryptionExchangeDataManager(expectedType, expectedSfks, new CryptoPrimitives_1.WebCryptoPrimitives(crypto_1.webcrypto));
-                exchangeDataMap = new FakeExchangeDataMapManager_1.FakeExchangeDataMapManager();
-                secureDelegationsEncryption = new SecureDelegationsEncryption_1.SecureDelegationsEncryption(encryptionKeysManager, primitives);
-                decryptor = new SecureDelegationsSecurityMetadataDecryptor_1.SecureDelegationsSecurityMetadataDecryptor(exchangeData, exchangeDataMap, secureDelegationsEncryption, undefined); // data owner api not used in these tests
-            });
-        }
-        function randomHash() {
-            return __awaiter(this, void 0, void 0, function* () {
-                return (0, icc_x_api_1.ua2hex)(yield primitives.sha256(primitives.randomBytes(4)));
-            });
-        }
-        function createExchangeDataAndSecureDelegationEncryptedData(exchangeDataDelegator, exchangeDataDelegate) {
-            return __awaiter(this, void 0, void 0, function* () {
-                const exchangeKey = yield primitives.AES.generateCryptoKey(false);
-                const exchangeData = new ExchangeData_1.ExchangeData({
-                    id: primitives.randomUuid(),
-                    delegator: exchangeDataDelegator,
-                    delegate: exchangeDataDelegate,
-                    exchangeKey: { ignored: 'in this test' },
-                    accessControlSecret: { ignored: 'in this test' },
-                    sharedSignatureKey: { ignored: 'in this test' },
-                    delegatorSignature: { ignored: 'in this test' },
-                    sharedSignature: 'ignored in this test',
-                });
-                const expectedDecryptedData = {
-                    secretIds: [primitives.randomUuid(), primitives.randomUuid()],
-                    encryptionKeys: [yield primitives.AES.generateCryptoKey(true), yield primitives.AES.generateCryptoKey(true)],
-                    owningEntityIds: [primitives.randomUuid(), primitives.randomUuid()],
-                };
-                const secureDelegationEncryptedData = {
-                    secretIds: yield Promise.all(expectedDecryptedData.secretIds.map((x) => secureDelegationsEncryption.encryptSecretId(x, exchangeKey))),
-                    encryptionKeys: yield Promise.all(expectedDecryptedData.encryptionKeys.map((x) => secureDelegationsEncryption.encryptEncryptionKey(x, exchangeKey))),
-                    owningEntityIds: yield Promise.all(expectedDecryptedData.owningEntityIds.map((x) => secureDelegationsEncryption.encryptOwningEntityId(x, exchangeKey))),
-                };
-                return { exchangeKey, exchangeData, expectedDecryptedData, secureDelegationEncryptedData };
-            });
-        }
-        function entityWithSecurityMetadata(securityMetadata) {
-            return {
-                entity: new IcureStub_1.IcureStub({
-                    secretForeignKeys: expectedSfks,
-                    securityMetadata,
-                }),
-                type: expectedType,
-            };
-        }
-        function toSortedJson(data) {
-            return JSON.stringify({
-                decrypted: data.decrypted,
-                dataOwnersWithAccess: [...data.dataOwnersWithAccess].sort(),
-            });
-        }
-        function verifyCanDecryptEntityData(entity, dataOwnerHierarchySubset, expected) {
-            return __awaiter(this, void 0, void 0, function* () {
-                const actualSecretIds = (yield (0, collection_utils_1.asyncGeneratorToArray)(decryptor.decryptSecretIdsOf(entity, dataOwnerHierarchySubset))).map(toSortedJson);
-                const actualOwningEntityIds = (yield (0, collection_utils_1.asyncGeneratorToArray)(decryptor.decryptOwningEntityIdsOf(entity, dataOwnerHierarchySubset))).map(toSortedJson);
-                const actualEncryptionKeys = (yield (0, collection_utils_1.asyncGeneratorToArray)(decryptor.decryptEncryptionKeysOf(entity, dataOwnerHierarchySubset))).map(toSortedJson);
-                const expectedSecretIds = [];
-                const expectedOwningEntityIds = [];
-                const expectedEncryptionKeys = [];
-                for (const data of expected) {
-                    data.expectedDecryptedData.secretIds.forEach((x) => expectedSecretIds.push(toSortedJson({ decrypted: x, dataOwnersWithAccess: [data.exchangeData.delegate, data.exchangeData.delegator] })));
-                    data.expectedDecryptedData.owningEntityIds.forEach((x) => expectedOwningEntityIds.push(toSortedJson({ decrypted: x, dataOwnersWithAccess: [data.exchangeData.delegate, data.exchangeData.delegator] })));
-                    data.expectedDecryptedData.encryptionKeys.forEach((x) => expectedEncryptionKeys.push(toSortedJson({ decrypted: x, dataOwnersWithAccess: [data.exchangeData.delegate, data.exchangeData.delegator] })));
-                }
-                (0, chai_1.expect)(actualSecretIds).to.have.members(expectedSecretIds);
-                (0, chai_1.expect)(actualOwningEntityIds).to.have.members(expectedOwningEntityIds);
-                (0, chai_1.expect)(actualEncryptionKeys).to.have.members(expectedEncryptionKeys);
-            });
-        }
-        it('should be able to decrypt data from a secure delegation accessible by hash if the hash is cached', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents();
-                const self = primitives.randomUuid();
-                const createdData1 = yield createExchangeDataAndSecureDelegationEncryptedData(self, primitives.randomUuid());
-                const createdData2 = yield createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), self);
-                const delegation1 = new SecureDelegation_1.SecureDelegation(Object.assign(Object.assign({}, createdData1.secureDelegationEncryptedData), { delegator: undefined, delegate: undefined, exchangeDataId: undefined, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const delegation2 = new SecureDelegation_1.SecureDelegation(Object.assign(Object.assign({}, createdData2.secureDelegationEncryptedData), { delegator: undefined, delegate: undefined, exchangeDataId: undefined, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const hash1 = yield randomHash();
-                const hash2 = yield randomHash();
-                const hash3 = yield randomHash();
-                const entity = entityWithSecurityMetadata(new SecurityMetadata_1.SecurityMetadata({
-                    secureDelegations: { [hash1]: delegation1, [hash2]: delegation2 },
-                    keysEquivalences: { [hash3]: hash2 },
-                }));
-                exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [hash1] });
-                exchangeData.cacheFakeData(createdData2.exchangeData, { exchangeKey: createdData2.exchangeKey, hashes: [hash3] });
-                yield verifyCanDecryptEntityData(entity, [self], [createdData1, createdData2]);
-            });
-        });
-        it('should be able to decrypt data from a secure delegation with clear text id where the delegator or delegate are in dataOwnersHierarchySubset', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents();
-                const self = primitives.randomUuid();
-                const other1 = primitives.randomUuid();
-                const other2 = primitives.randomUuid();
-                const createdData1 = yield createExchangeDataAndSecureDelegationEncryptedData(self, other1);
-                const createdData2 = yield createExchangeDataAndSecureDelegationEncryptedData(other2, self);
-                const delegation1 = new SecureDelegation_1.SecureDelegation(Object.assign(Object.assign({}, createdData1.secureDelegationEncryptedData), { delegator: self, delegate: other1, exchangeDataId: createdData1.exchangeData.id, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const delegation2 = new SecureDelegation_1.SecureDelegation(Object.assign(Object.assign({}, createdData2.secureDelegationEncryptedData), { delegator: other2, delegate: self, exchangeDataId: createdData2.exchangeData.id, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const entity = entityWithSecurityMetadata(new SecurityMetadata_1.SecurityMetadata({
-                    secureDelegations: { [yield randomHash()]: delegation1, [yield randomHash()]: delegation2 },
-                }));
-                exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [] }, true);
-                exchangeData.cacheFakeData(createdData2.exchangeData, { exchangeKey: createdData2.exchangeKey, hashes: [] });
-                yield verifyCanDecryptEntityData(entity, [self], [createdData1, createdData2]);
-            });
-        });
-        it('should be able to decrypt data from a secure delegation with encrypted id if the keys to decrypt the id are available and the delegator or delegate is in dataOwnersHierarchySubset', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents();
-                const self = primitives.randomUuid();
-                const createdData1 = yield createExchangeDataAndSecureDelegationEncryptedData(self, primitives.randomUuid());
-                const createdData2 = yield createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), self);
-                const encryptionKeys = Object.fromEntries(Object.entries(encryptionKeysManager.getDecryptionKeys()).map(([fp, pair]) => [fp, pair.publicKey]));
-                const delegation1 = new SecureDelegationWithEncryptedExchangeId(Object.assign(Object.assign({}, createdData1.secureDelegationEncryptedData), { delegator: self, encryptedExchangeDataId: yield secureDelegationsEncryption.encryptExchangeDataId(createdData1.exchangeData.id, encryptionKeys), permissions: AccessLevel.WRITE }));
-                const delegation2 = new SecureDelegationWithEncryptedExchangeId(Object.assign(Object.assign({}, createdData2.secureDelegationEncryptedData), { delegate: self, encryptedExchangeDataId: yield secureDelegationsEncryption.encryptExchangeDataId(createdData2.exchangeData.id, encryptionKeys), permissions: AccessLevel.WRITE }));
-                const secureDelegations = { [yield randomHash()]: delegation1, [yield randomHash()]: delegation2 };
-                const entity = entityWithSecurityMetadata(new SecurityMetadata_1.SecurityMetadata({
-                    secureDelegations: secureDelegations,
-                }));
-                exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [] }, true);
-                exchangeData.cacheFakeData(createdData2.exchangeData, { exchangeKey: createdData2.exchangeKey, hashes: [] });
-                yield cacheExchangeDataMaps(secureDelegations);
-                yield verifyCanDecryptEntityData(entity, [self], [createdData1, createdData2]);
-            });
-        });
-        it('should be able to decrypt data from secure delegations accessible by encrypted or cleartext id', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents();
-                const self = primitives.randomUuid();
-                const other1 = primitives.randomUuid();
-                const other2 = primitives.randomUuid();
-                const createdData1 = yield createExchangeDataAndSecureDelegationEncryptedData(self, other1);
-                const createdData2 = yield createExchangeDataAndSecureDelegationEncryptedData(other2, self);
-                const createdData3 = yield createExchangeDataAndSecureDelegationEncryptedData(self, primitives.randomUuid());
-                const createdData4 = yield createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), self);
-                const encryptionKeys = Object.fromEntries(Object.entries(encryptionKeysManager.getDecryptionKeys()).map(([fp, pair]) => [fp, pair.publicKey]));
-                const delegation1 = new SecureDelegationWithEncryptedExchangeId(Object.assign(Object.assign({}, createdData1.secureDelegationEncryptedData), { delegator: self, delegate: other1, exchangeDataId: createdData1.exchangeData.id, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const delegation2 = new SecureDelegationWithEncryptedExchangeId(Object.assign(Object.assign({}, createdData2.secureDelegationEncryptedData), { delegator: other2, delegate: self, exchangeDataId: createdData2.exchangeData.id, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const delegation3 = new SecureDelegationWithEncryptedExchangeId(Object.assign(Object.assign({}, createdData3.secureDelegationEncryptedData), { delegator: self, encryptedExchangeDataId: yield secureDelegationsEncryption.encryptExchangeDataId(createdData3.exchangeData.id, encryptionKeys), permissions: AccessLevel.WRITE }));
-                const delegation4 = new SecureDelegationWithEncryptedExchangeId(Object.assign(Object.assign({}, createdData4.secureDelegationEncryptedData), { delegate: self, encryptedExchangeDataId: yield secureDelegationsEncryption.encryptExchangeDataId(createdData4.exchangeData.id, encryptionKeys), permissions: AccessLevel.WRITE }));
-                const secureDelegations = {
-                    [yield randomHash()]: delegation1,
-                    [yield randomHash()]: delegation2,
-                    [yield randomHash()]: delegation3,
-                    [yield randomHash()]: delegation4,
-                };
-                const entity = entityWithSecurityMetadata(new SecurityMetadata_1.SecurityMetadata({
-                    secureDelegations: secureDelegations,
-                }));
-                exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [] }, true);
-                exchangeData.cacheFakeData(createdData2.exchangeData, { exchangeKey: createdData2.exchangeKey, hashes: [] });
-                exchangeData.cacheFakeData(createdData3.exchangeData, { exchangeKey: createdData3.exchangeKey, hashes: [] }, true);
-                exchangeData.cacheFakeData(createdData4.exchangeData, { exchangeKey: createdData4.exchangeKey, hashes: [] });
-                yield cacheExchangeDataMaps(secureDelegations);
-                yield verifyCanDecryptEntityData(entity, [self], [createdData1, createdData2, createdData3, createdData4]);
-            });
-        });
-        // Note: mixed scenario where part of secure delegation is accessible by hash and part by id (clear-text or encrypted) is not realistic and not tested
-        it('should ignore delegations accessible by id where the neither the delegator nor delegate are in dataOwnersHierarchySubset', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents();
-                const createdData1 = yield createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), primitives.randomUuid());
-                const createdData2 = yield createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), primitives.randomUuid());
-                const delegation1 = new SecureDelegation_1.SecureDelegation(Object.assign(Object.assign({}, createdData1.secureDelegationEncryptedData), { delegator: primitives.randomUuid(), delegate: primitives.randomUuid(), exchangeDataId: createdData1.exchangeData.id, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const delegation2 = new SecureDelegation_1.SecureDelegation(Object.assign(Object.assign({}, createdData2.secureDelegationEncryptedData), { delegator: primitives.randomUuid(), delegate: primitives.randomUuid(), exchangeDataId: createdData2.exchangeData.id, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const entity = entityWithSecurityMetadata(new SecurityMetadata_1.SecurityMetadata({
-                    secureDelegations: { [yield randomHash()]: delegation1, [yield randomHash()]: delegation2 },
-                }));
-                yield verifyCanDecryptEntityData(entity, [primitives.randomUuid()], []);
-            });
-        });
-        it('should ignore secure delegation with encrypted id if the keys to decrypt the id are not available', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents();
-                const self = primitives.randomUuid();
-                const createdData = yield createExchangeDataAndSecureDelegationEncryptedData(self, primitives.randomUuid());
-                const newKey = yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                const newKeyFp = (0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(newKey.publicKey, 'spki')).slice(-32);
-                const delegation = new SecureDelegationWithEncryptedExchangeId(Object.assign(Object.assign({}, createdData.secureDelegationEncryptedData), { delegator: self, encryptedExchangeDataId: yield secureDelegationsEncryption.encryptExchangeDataId(createdData.exchangeData.id, {
-                        [newKeyFp]: newKey.publicKey,
-                    }), permissions: AccessLevel.WRITE }));
-                const secureDelegation = { [yield randomHash()]: delegation };
-                const entity = entityWithSecurityMetadata(new SecurityMetadata_1.SecurityMetadata({
-                    secureDelegations: secureDelegation,
-                }));
-                exchangeData.cacheFakeData(createdData.exchangeData, { exchangeKey: createdData.exchangeKey, hashes: [] });
-                yield cacheExchangeDataMaps(secureDelegation);
-                yield verifyCanDecryptEntityData(entity, [self], []);
-            });
-        });
-        it('should ignore secure delegations corresponding to exchange data which could not be decrypted', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents();
-                const self = primitives.randomUuid();
-                const other1 = primitives.randomUuid();
-                const other2 = primitives.randomUuid();
-                const createdData1 = yield createExchangeDataAndSecureDelegationEncryptedData(self, other1);
-                const createdData2 = yield createExchangeDataAndSecureDelegationEncryptedData(other2, self);
-                const delegation1 = new SecureDelegation_1.SecureDelegation(Object.assign(Object.assign({}, createdData1.secureDelegationEncryptedData), { delegator: self, delegate: other1, exchangeDataId: createdData1.exchangeData.id, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const delegation2 = new SecureDelegation_1.SecureDelegation(Object.assign(Object.assign({}, createdData2.secureDelegationEncryptedData), { delegator: other2, delegate: self, exchangeDataId: createdData2.exchangeData.id, encryptedExchangeDataId: undefined, permissions: AccessLevel.WRITE }));
-                const entity = entityWithSecurityMetadata(new SecurityMetadata_1.SecurityMetadata({
-                    secureDelegations: { [yield randomHash()]: delegation1, [yield randomHash()]: delegation2 },
-                }));
-                exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [] });
-                exchangeData.cacheFakeData(createdData2.exchangeData, undefined);
-                yield verifyCanDecryptEntityData(entity, [self], [createdData1]);
-            });
-        });
-        it('should give an error if dataOwnersHierarchySubset is empty', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents();
-                const entity = {
-                    entity: new IcureStub_1.IcureStub({ secretForeignKeys: expectedSfks }),
-                    type: expectedType,
-                };
-                let failed = 0;
-                try {
-                    decryptor.decryptEncryptionKeysOf(entity, []);
-                }
-                catch (e) {
-                    console.log(e);
-                    failed++;
-                }
-                try {
-                    decryptor.decryptSecretIdsOf(entity, []);
-                }
-                catch (e) {
-                    console.log(e);
-                    failed++;
-                }
-                try {
-                    decryptor.decryptOwningEntityIdsOf(entity, []);
-                }
-                catch (e) {
-                    console.log(e);
-                    failed++;
-                }
-                try {
-                    yield decryptor.getEntityAccessLevel(entity, []);
-                }
-                catch (e) {
-                    console.log(e);
-                    failed++;
-                }
-                (0, chai_1.expect)(failed).to.equal(4);
-            });
-        });
-        it('should return the best access level with directly accessible secure delegations', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents();
-                const dataOwnerA = primitives.randomUuid();
-                const dataOwnerB = primitives.randomUuid();
-                const secureDelegationWriteA = new SecureDelegation_1.SecureDelegation({ delegator: dataOwnerA, permissions: AccessLevel.WRITE });
-                const secureDelegationReadA = new SecureDelegation_1.SecureDelegation({ delegate: dataOwnerA, permissions: AccessLevel.READ });
-                const secureDelegationWriteB = new SecureDelegation_1.SecureDelegation({ delegate: dataOwnerB, permissions: AccessLevel.WRITE });
-                const secureDelegationReadB = new SecureDelegation_1.SecureDelegation({ delegator: dataOwnerB, permissions: AccessLevel.READ });
-                const secureDelegationWriteOther = new SecureDelegation_1.SecureDelegation({ delegator: primitives.randomUuid(), permissions: AccessLevel.WRITE });
-                const secureDelegationReadOther = new SecureDelegation_1.SecureDelegation({ delegator: primitives.randomUuid(), permissions: AccessLevel.READ });
-                (0, chai_1.expect)(yield decryptor.getEntityAccessLevel(entityWithSecurityMetadata({
-                    secureDelegations: {
-                        [yield randomHash()]: secureDelegationReadA,
-                        [yield randomHash()]: secureDelegationWriteOther,
-                        [yield randomHash()]: secureDelegationWriteB,
-                    },
-                }), [dataOwnerA])).to.equal(AccessLevel.READ);
-                (0, chai_1.expect)(yield decryptor.getEntityAccessLevel(entityWithSecurityMetadata({
-                    secureDelegations: {
-                        [yield randomHash()]: secureDelegationReadA,
-                        [yield randomHash()]: secureDelegationWriteOther,
-                        [yield randomHash()]: secureDelegationWriteB,
-                    },
-                }), [dataOwnerB])).to.equal(AccessLevel.WRITE);
-                (0, chai_1.expect)(yield decryptor.getEntityAccessLevel(entityWithSecurityMetadata({
-                    secureDelegations: {
-                        [yield randomHash()]: secureDelegationReadOther,
-                        [yield randomHash()]: secureDelegationWriteB,
-                    },
-                }), [dataOwnerA])).to.equal(undefined);
-                (0, chai_1.expect)(yield decryptor.getEntityAccessLevel(entityWithSecurityMetadata({
-                    secureDelegations: {
-                        [yield randomHash()]: secureDelegationReadA,
-                        [yield randomHash()]: secureDelegationWriteOther,
-                        [yield randomHash()]: secureDelegationWriteB,
-                    },
-                }), [dataOwnerA, dataOwnerB])).to.equal(AccessLevel.WRITE);
-                (0, chai_1.expect)(yield decryptor.getEntityAccessLevel(entityWithSecurityMetadata({
-                    secureDelegations: {
-                        [yield randomHash()]: secureDelegationReadA,
-                        [yield randomHash()]: secureDelegationReadB,
-                        [yield randomHash()]: secureDelegationWriteOther,
-                    },
-                }), [dataOwnerA, dataOwnerB])).to.equal(AccessLevel.READ);
-                (0, chai_1.expect)(yield decryptor.getEntityAccessLevel(entityWithSecurityMetadata({
-                    secureDelegations: {
-                        [yield randomHash()]: secureDelegationWriteA,
-                    },
-                }), [dataOwnerA, dataOwnerB])).to.equal(AccessLevel.WRITE);
-            });
-        });
-        it('should return the best access level with secure delegations accessible through hash', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                const hashA = yield randomHash();
-                const hashB = yield randomHash();
-                const secureDelegationWriteA = [hashA, new SecureDelegation_1.SecureDelegation({ permissions: AccessLevel.WRITE })];
-                const secureDelegationReadA = [hashA, new SecureDelegation_1.SecureDelegation({ permissions: AccessLevel.READ })];
-                const secureDelegationWriteB = [hashB, new SecureDelegation_1.SecureDelegation({ permissions: AccessLevel.WRITE })];
-                const secureDelegationReadB = [hashB, new SecureDelegation_1.SecureDelegation({ permissions: AccessLevel.READ })];
-                const secureDelegationWriteOther = [
-                    yield randomHash(),
-                    new SecureDelegation_1.SecureDelegation({ delegator: primitives.randomUuid(), permissions: AccessLevel.WRITE }),
-                ];
-                const secureDelegationReadOther = [
-                    yield randomHash(),
-                    new SecureDelegation_1.SecureDelegation({ delegator: primitives.randomUuid(), permissions: AccessLevel.READ }),
-                ];
-                function testWithEntriesAndHashes(entries, hashes, expectedLevel) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents();
-                        for (const hash of hashes) {
-                            exchangeData.cacheFakeData({}, { exchangeKey: {}, hashes: [hash] });
-                        }
-                        (0, chai_1.expect)(yield decryptor.getEntityAccessLevel(entityWithSecurityMetadata({
-                            secureDelegations: Object.fromEntries(entries),
-                        }), [primitives.randomUuid()])).to.equal(expectedLevel);
-                    });
-                }
-                yield testWithEntriesAndHashes([secureDelegationReadA, secureDelegationWriteB, secureDelegationWriteOther], [hashA], AccessLevel.READ);
-                yield testWithEntriesAndHashes([secureDelegationReadA, secureDelegationWriteB, secureDelegationWriteOther], [hashB], AccessLevel.WRITE);
-                yield testWithEntriesAndHashes([secureDelegationWriteB, secureDelegationReadOther], [hashA], undefined);
-                yield testWithEntriesAndHashes([secureDelegationReadA, secureDelegationWriteB, secureDelegationWriteOther], [hashA, hashB], AccessLevel.WRITE);
-                yield testWithEntriesAndHashes([secureDelegationReadA, secureDelegationReadB, secureDelegationWriteOther], [hashA, hashB], AccessLevel.READ);
-                yield testWithEntriesAndHashes([secureDelegationWriteA], [hashA, hashB], AccessLevel.WRITE);
-            });
-        });
-    });
-});
-//# sourceMappingURL=secure-delegations-metadata-decryptor-test.js.map

package/test/icc-x-api/crypto/secure-delegations-metadata-decryptor-test.js.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"secure-delegations-metadata-decryptor-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/secure-delegations-metadata-decryptor-test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,iCAAgC;AAChC,iFAAkG;AAClG,mCAAkC;AAClC,qFAAiF;AACjF,qIAAiI;AACjI,uGAAmG;AACnG,iFAAuF;AACvF,wGAA6H;AAC7H,+EAA2E;AAC3E,+BAA6B;AAC7B,gEAA4D;AAC5D,8EAA0E;AAC1E,kDAAuD;AACvD,8EAA0E;AAC1E,gFAAiF;AACjF,uFAAmF;AACnF,IAAO,WAAW,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAErD,IAAA,gBAAQ,EAAC,gDAAgD,EAAE;;QACzD,MAAM,UAAU,GAAG,IAAI,sCAAmB,CAAC,kBAAgB,CAAC,CAAA;QAC5D,MAAM,YAAY,GAAiC,2DAA4B,CAAC,SAAS,CAAA;QACzF,MAAM,YAAY,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;QACvE,IAAI,qBAAgD,CAAA;QACpD,IAAI,YAA+C,CAAA;QACnD,IAAI,eAA2C,CAAA;QAC/C,IAAI,SAAqD,CAAA;QACzD,IAAI,2BAAwD,CAAA;QAE5D,MAAM,uCAAwC,SAAQ,mCAAgB;YACpE,YAAY,IAAgB;gBAC1B,KAAK,CAAC,IAAI,CAAC,CAAA;gBACX,MAAM,CAAC,MAAM,CAAC,IAA+C,EAAE,IAAI,CAAC,CAAA;YACtE,CAAC;SAGF;QAED,SAAe,qBAAqB,CAAC,iBAA8E;;gBACjH,MAAM,eAAe,CAAC,sBAAsB,CAC1C,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;oBAC7D,uCACK,CAAC,KACJ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,uBAAuB,IACvC;gBACH,CAAC,EAAE,EAAkD,CAAC,CACvD,CAAA;YACH,CAAC;SAAA;QAED,SAAe,oBAAoB;;gBACjC,qBAAqB,GAAG,MAAM,qDAAyB,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,sBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBACzI,YAAY,GAAG,IAAI,2DAAiC,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,sCAAmB,CAAC,kBAAgB,CAAC,CAAC,CAAA;gBAC3H,eAAe,GAAG,IAAI,uDAA0B,EAAE,CAAA;gBAClD,2BAA2B,GAAG,IAAI,yDAA2B,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAA;gBAChG,SAAS,GAAG,IAAI,uFAA0C,CAAC,YAAY,EAAE,eAAe,EAAE,2BAA2B,EAAE,SAAgB,CAAC,CAAA,CAAC,yCAAyC;YACpL,CAAC;SAAA;QAED,SAAe,UAAU;;gBACvB,OAAO,IAAA,kBAAM,EAAC,MAAM,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACnE,CAAC;SAAA;QAED,SAAe,kDAAkD,CAC/D,qBAA6B,EAC7B,oBAA4B;;gBAe5B,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;gBACjE,MAAM,YAAY,GAAG,IAAI,2BAAY,CAAC;oBACpC,EAAE,EAAE,UAAU,CAAC,UAAU,EAAE;oBAC3B,SAAS,EAAE,qBAAqB;oBAChC,QAAQ,EAAE,oBAAoB;oBAC9B,WAAW,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;oBACxC,mBAAmB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;oBAChD,kBAAkB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;oBAC/C,kBAAkB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;oBAC/C,eAAe,EAAE,sBAAsB;iBACxC,CAAC,CAAA;gBACF,MAAM,qBAAqB,GAAG;oBAC5B,SAAS,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;oBAC7D,cAAc,EAAE,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;oBAC5G,eAAe,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;iBACpE,CAAA;gBACD,MAAM,6BAA6B,GAAG;oBACpC,SAAS,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,eAAe,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;oBACrI,cAAc,EAAE,MAAM,OAAO,CAAC,GAAG,CAC/B,qBAAqB,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,oBAAoB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAClH;oBACD,eAAe,EAAE,MAAM,OAAO,CAAC,GAAG,CAChC,qBAAqB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CACpH;iBACF,CAAA;gBACD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,CAAA;YAC5F,CAAC;SAAA;QAED,SAAS,0BAA0B,CAAC,gBAAkC;YACpE,OAAO;gBACL,MAAM,EAAE,IAAI,qBAAS,CAAC;oBACpB,iBAAiB,EAAE,YAAY;oBAC/B,gBAAgB;iBACjB,CAAC;gBACF,IAAI,EAAE,YAAY;aACnB,CAAA;QACH,CAAC;QAED,SAAS,YAAY,CAAC,IAA2D;YAC/E,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,oBAAoB,EAAE,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE;aAC5D,CAAC,CAAA;QACJ,CAAC;QAED,SAAe,0BAA0B,CACvC,MAA+B,EAC/B,wBAAkC,EAClC,QAOG;;gBAEH,MAAM,eAAe,GAAG,CAAC,MAAM,IAAA,wCAAqB,EAAC,SAAS,CAAC,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;gBACvI,MAAM,qBAAqB,GAAG,CAAC,MAAM,IAAA,wCAAqB,EAAC,SAAS,CAAC,wBAAwB,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,GAAG,CACnI,YAAY,CACb,CAAA;gBACD,MAAM,oBAAoB,GAAG,CAAC,MAAM,IAAA,wCAAqB,EAAC,SAAS,CAAC,uBAAuB,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;gBACjJ,MAAM,iBAAiB,GAAa,EAAE,CAAA;gBACtC,MAAM,uBAAuB,GAAa,EAAE,CAAA;gBAC5C,MAAM,sBAAsB,GAAa,EAAE,CAAA;gBAC3C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE;oBAC3B,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACjD,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CACxI,CAAA;oBACD,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACvD,uBAAuB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAC9I,CAAA;oBACD,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACtD,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAC7I,CAAA;iBACF;gBACD,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;gBAC1D,IAAA,aAAM,EAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;gBACtE,IAAA,aAAM,EAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;YACtE,CAAC;SAAA;QAED,EAAE,CAAC,kGAAkG,EAAE;;gBACrG,MAAM,oBAAoB,EAAE,CAAA;gBAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACpC,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC5G,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAA;gBAC5G,MAAM,WAAW,GAAG,IAAI,mCAAgB,iCACnC,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,SAAS,EACnB,cAAc,EAAE,SAAS,EACzB,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,WAAW,GAAG,IAAI,mCAAgB,iCACnC,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,SAAS,EACnB,cAAc,EAAE,SAAS,EACzB,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAA;gBAChC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAA;gBAChC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAA;gBAChC,MAAM,MAAM,GAAG,0BAA0B,CACvC,IAAI,mCAAgB,CAAC;oBACnB,iBAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE;oBACjE,gBAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE;iBACrC,CAAC,CACH,CAAA;gBACD,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACjH,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACjH,MAAM,0BAA0B,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;YAChF,CAAC;SAAA,CAAC,CAAA;QAEF,EAAE,CAAC,6IAA6I,EAAE;;gBAChJ,MAAM,oBAAoB,EAAE,CAAA;gBAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACpC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACtC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACtC,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gBAC3F,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBAC3F,MAAM,WAAW,GAAG,IAAI,mCAAgB,iCACnC,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,IAAI,EACf,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,EAC5C,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,WAAW,GAAG,IAAI,mCAAgB,iCACnC,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,IAAI,EACd,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,EAC5C,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,MAAM,GAAG,0BAA0B,CACvC,IAAI,mCAAgB,CAAC;oBACnB,iBAAiB,EAAE,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE;iBAC5F,CAAC,CACH,CAAA;gBACD,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAClH,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC5G,MAAM,0BAA0B,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;YAChF,CAAC;SAAA,CAAC,CAAA;QAEF,EAAE,CAAC,qLAAqL,EAAE;;gBACxL,MAAM,oBAAoB,EAAE,CAAA;gBAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACpC,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC5G,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAA;gBAC5G,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;gBAC9I,MAAM,WAAW,GAAG,IAAI,uCAAuC,iCAC1D,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,IAAI,EACf,uBAAuB,EAAE,MAAM,2BAA2B,CAAC,qBAAqB,CAAC,YAAY,CAAC,YAAY,CAAC,EAAG,EAAE,cAAc,CAAC,EAC/H,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,WAAW,GAAG,IAAI,uCAAuC,iCAC1D,YAAY,CAAC,6BAA6B,KAC7C,QAAQ,EAAE,IAAI,EACd,uBAAuB,EAAE,MAAM,2BAA2B,CAAC,qBAAqB,CAAC,YAAY,CAAC,YAAY,CAAC,EAAG,EAAE,cAAc,CAAC,EAC/H,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,iBAAiB,GAAG,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAA;gBAClG,MAAM,MAAM,GAAG,0BAA0B,CACvC,IAAI,mCAAgB,CAAC;oBACnB,iBAAiB,EAAE,iBAAiB;iBACrC,CAAC,CACH,CAAA;gBACD,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAClH,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC5G,MAAM,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;gBAC9C,MAAM,0BAA0B,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;YAChF,CAAC;SAAA,CAAC,CAAA;QAEF,EAAE,CAAC,gGAAgG,EAAE;;gBACnG,MAAM,oBAAoB,EAAE,CAAA;gBAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACpC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACtC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACtC,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gBAC3F,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBAC3F,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC5G,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAA;gBAC5G,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;gBAC9I,MAAM,WAAW,GAAG,IAAI,uCAAuC,iCAC1D,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,IAAI,EACf,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,EAC5C,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,WAAW,GAAG,IAAI,uCAAuC,iCAC1D,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,IAAI,EACd,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,EAC5C,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,WAAW,GAAG,IAAI,uCAAuC,iCAC1D,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,IAAI,EACf,uBAAuB,EAAE,MAAM,2BAA2B,CAAC,qBAAqB,CAAC,YAAY,CAAC,YAAY,CAAC,EAAG,EAAE,cAAc,CAAC,EAC/H,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,WAAW,GAAG,IAAI,uCAAuC,iCAC1D,YAAY,CAAC,6BAA6B,KAC7C,QAAQ,EAAE,IAAI,EACd,uBAAuB,EAAE,MAAM,2BAA2B,CAAC,qBAAqB,CAAC,YAAY,CAAC,YAAY,CAAC,EAAG,EAAE,cAAc,CAAC,EAC/H,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,iBAAiB,GAAG;oBACxB,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW;oBACjC,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW;oBACjC,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW;oBACjC,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW;iBAClC,CAAA;gBACD,MAAM,MAAM,GAAG,0BAA0B,CACvC,IAAI,mCAAgB,CAAC;oBACnB,iBAAiB,EAAE,iBAAiB;iBACrC,CAAC,CACH,CAAA;gBACD,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAClH,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC5G,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAClH,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC5G,MAAM,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;gBAC9C,MAAM,0BAA0B,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;YAC5G,CAAC;SAAA,CAAC,CAAA;QAEF,sJAAsJ;QAEtJ,EAAE,CAAC,0HAA0H,EAAE;;gBAC7H,MAAM,oBAAoB,EAAE,CAAA;gBAC5B,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC/H,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC/H,MAAM,WAAW,GAAG,IAAI,mCAAgB,iCACnC,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,EAClC,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,EACjC,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,EAC5C,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,WAAW,GAAG,IAAI,mCAAgB,iCACnC,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,EAClC,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,EACjC,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,EAC5C,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,MAAM,GAAG,0BAA0B,CACvC,IAAI,mCAAgB,CAAC;oBACnB,iBAAiB,EAAE,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE;iBAC5F,CAAC,CACH,CAAA;gBACD,MAAM,0BAA0B,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;YACzE,CAAC;SAAA,CAAC,CAAA;QAEF,EAAE,CAAC,mGAAmG,EAAE;;gBACtG,MAAM,oBAAoB,EAAE,CAAA;gBAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACpC,MAAM,WAAW,GAAG,MAAM,kDAAkD,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC3G,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,sBAAU,CAAC,MAAM,CAAC,CAAA;gBACtE,MAAM,QAAQ,GAAG,IAAA,kBAAM,EAAC,MAAM,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAA;gBAC5F,MAAM,UAAU,GAAG,IAAI,uCAAuC,iCACzD,WAAW,CAAC,6BAA6B,KAC5C,SAAS,EAAE,IAAI,EACf,uBAAuB,EAAE,MAAM,2BAA2B,CAAC,qBAAqB,CAAC,WAAW,CAAC,YAAY,CAAC,EAAG,EAAE;wBAC7G,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,SAAS;qBAC7B,CAAC,EACF,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,gBAAgB,GAAG,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAA;gBAC7D,MAAM,MAAM,GAAG,0BAA0B,CACvC,IAAI,mCAAgB,CAAC;oBACnB,iBAAiB,EAAE,gBAAgB;iBACpC,CAAC,CACH,CAAA;gBACD,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC1G,MAAM,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;gBAC7C,MAAM,0BAA0B,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YACtD,CAAC;SAAA,CAAC,CAAA;QAEF,EAAE,CAAC,8FAA8F,EAAE;;gBACjG,MAAM,oBAAoB,EAAE,CAAA;gBAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACpC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACtC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBACtC,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gBAC3F,MAAM,YAAY,GAAG,MAAM,kDAAkD,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBAC3F,MAAM,WAAW,GAAG,IAAI,mCAAgB,iCACnC,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,IAAI,EACf,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,EAC5C,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,WAAW,GAAG,IAAI,mCAAgB,iCACnC,YAAY,CAAC,6BAA6B,KAC7C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,IAAI,EACd,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,EAC5C,uBAAuB,EAAE,SAAS,EAClC,WAAW,EAAE,WAAW,CAAC,KAAK,IAC9B,CAAA;gBACF,MAAM,MAAM,GAAG,0BAA0B,CACvC,IAAI,mCAAgB,CAAC;oBACnB,iBAAiB,EAAE,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE;iBAC5F,CAAC,CACH,CAAA;gBACD,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC5G,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;gBAChE,MAAM,0BAA0B,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;YAClE,CAAC;SAAA,CAAC,CAAA;QAEF,EAAE,CAAC,4DAA4D,EAAE;;gBAC/D,MAAM,oBAAoB,EAAE,CAAA;gBAC5B,MAAM,MAAM,GAAG;oBACb,MAAM,EAAE,IAAI,qBAAS,CAAC,EAAE,iBAAiB,EAAE,YAAY,EAAE,CAAC;oBAC1D,IAAI,EAAE,YAAY;iBACnB,CAAA;gBACD,IAAI,MAAM,GAAG,CAAC,CAAA;gBACd,IAAI;oBACF,SAAS,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;iBAC9C;gBAAC,OAAO,CAAC,EAAE;oBACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBACd,MAAM,EAAE,CAAA;iBACT;gBACD,IAAI;oBACF,SAAS,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;iBACzC;gBAAC,OAAO,CAAC,EAAE;oBACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBACd,MAAM,EAAE,CAAA;iBACT;gBACD,IAAI;oBACF,SAAS,CAAC,wBAAwB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;iBAC/C;gBAAC,OAAO,CAAC,EAAE;oBACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBACd,MAAM,EAAE,CAAA;iBACT;gBACD,IAAI;oBACF,MAAM,SAAS,CAAC,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;iBACjD;gBAAC,OAAO,CAAC,EAAE;oBACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBACd,MAAM,EAAE,CAAA;iBACT;gBACD,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC5B,CAAC;SAAA,CAAC,CAAA;QAEF,EAAE,CAAC,iFAAiF,EAAE;;gBACpF,MAAM,oBAAoB,EAAE,CAAA;gBAC5B,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBAC1C,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,CAAA;gBAC1C,MAAM,sBAAsB,GAAG,IAAI,mCAAgB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAA;gBAC9G,MAAM,qBAAqB,GAAG,IAAI,mCAAgB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC3G,MAAM,sBAAsB,GAAG,IAAI,mCAAgB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAA;gBAC7G,MAAM,qBAAqB,GAAG,IAAI,mCAAgB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC5G,MAAM,0BAA0B,GAAG,IAAI,mCAAgB,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAA;gBAC/H,MAAM,yBAAyB,GAAG,IAAI,mCAAgB,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC7H,IAAA,aAAM,EACJ,MAAM,SAAS,CAAC,oBAAoB,CAClC,0BAA0B,CAAC;oBACzB,iBAAiB,EAAE;wBACjB,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,qBAAqB;wBAC3C,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,0BAA0B;wBAChD,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,sBAAsB;qBAC7C;iBACF,CAAC,EACF,CAAC,UAAU,CAAC,CACb,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;gBAC5B,IAAA,aAAM,EACJ,MAAM,SAAS,CAAC,oBAAoB,CAClC,0BAA0B,CAAC;oBACzB,iBAAiB,EAAE;wBACjB,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,qBAAqB;wBAC3C,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,0BAA0B;wBAChD,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,sBAAsB;qBAC7C;iBACF,CAAC,EACF,CAAC,UAAU,CAAC,CACb,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;gBAC7B,IAAA,aAAM,EACJ,MAAM,SAAS,CAAC,oBAAoB,CAClC,0BAA0B,CAAC;oBACzB,iBAAiB,EAAE;wBACjB,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,yBAAyB;wBAC/C,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,sBAAsB;qBAC7C;iBACF,CAAC,EACF,CAAC,UAAU,CAAC,CACb,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;gBACrB,IAAA,aAAM,EACJ,MAAM,SAAS,CAAC,oBAAoB,CAClC,0BAA0B,CAAC;oBACzB,iBAAiB,EAAE;wBACjB,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,qBAAqB;wBAC3C,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,0BAA0B;wBAChD,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,sBAAsB;qBAC7C;iBACF,CAAC,EACF,CAAC,UAAU,EAAE,UAAU,CAAC,CACzB,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;gBAC7B,IAAA,aAAM,EACJ,MAAM,SAAS,CAAC,oBAAoB,CAClC,0BAA0B,CAAC;oBACzB,iBAAiB,EAAE;wBACjB,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,qBAAqB;wBAC3C,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,qBAAqB;wBAC3C,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,0BAA0B;qBACjD;iBACF,CAAC,EACF,CAAC,UAAU,EAAE,UAAU,CAAC,CACzB,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;gBAC5B,IAAA,aAAM,EACJ,MAAM,SAAS,CAAC,oBAAoB,CAClC,0BAA0B,CAAC;oBACzB,iBAAiB,EAAE;wBACjB,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,sBAAsB;qBAC7C;iBACF,CAAC,EACF,CAAC,UAAU,EAAE,UAAU,CAAC,CACzB,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YAC/B,CAAC;SAAA,CAAC,CAAA;QAEF,EAAE,CAAC,qFAAqF,EAAE;;gBACxF,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAA;gBAChC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAA;gBAChC,MAAM,sBAAsB,GAA+B,CAAC,KAAK,EAAE,IAAI,mCAAgB,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBAC5H,MAAM,qBAAqB,GAA+B,CAAC,KAAK,EAAE,IAAI,mCAAgB,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBAC1H,MAAM,sBAAsB,GAA+B,CAAC,KAAK,EAAE,IAAI,mCAAgB,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBAC5H,MAAM,qBAAqB,GAA+B,CAAC,KAAK,EAAE,IAAI,mCAAgB,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBAC1H,MAAM,0BAA0B,GAA+B;oBAC7D,MAAM,UAAU,EAAE;oBAClB,IAAI,mCAAgB,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;iBAC7F,CAAA;gBACD,MAAM,yBAAyB,GAA+B;oBAC5D,MAAM,UAAU,EAAE;oBAClB,IAAI,mCAAgB,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;iBAC5F,CAAA;gBAED,SAAe,wBAAwB,CAAC,OAAqC,EAAE,MAAgB,EAAE,aAAsC;;wBACrI,MAAM,oBAAoB,EAAE,CAAA;wBAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE;4BACzB,YAAY,CAAC,aAAa,CAAC,EAAS,EAAE,EAAE,WAAW,EAAE,EAAS,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;yBAClF;wBACD,IAAA,aAAM,EACJ,MAAM,SAAS,CAAC,oBAAoB,CAClC,0BAA0B,CAAC;4BACzB,iBAAiB,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;yBAC/C,CAAC,EACF,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAC1B,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;oBAC3B,CAAC;iBAAA;gBAED,MAAM,wBAAwB,CAAC,CAAC,qBAAqB,EAAE,sBAAsB,EAAE,0BAA0B,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CAAA;gBACtI,MAAM,wBAAwB,CAAC,CAAC,qBAAqB,EAAE,sBAAsB,EAAE,0BAA0B,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;gBACvI,MAAM,wBAAwB,CAAC,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAA;gBACvG,MAAM,wBAAwB,CAAC,CAAC,qBAAqB,EAAE,sBAAsB,EAAE,0BAA0B,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;gBAC9I,MAAM,wBAAwB,CAAC,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,0BAA0B,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CAAA;gBAC5I,MAAM,wBAAwB,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;YAC7F,CAAC;SAAA,CAAC,CAAA;IACJ,CAAC;CAAA,CAAC,CAAA","sourcesContent":["import { describe } from 'mocha'\nimport { CryptoPrimitives, WebCryptoPrimitives } from '../../../icc-x-api/crypto/CryptoPrimitives'\nimport { webcrypto } from 'crypto'\nimport { FakeEncryptionKeysManager } from '../../utils/FakeEncryptionKeysManager'\nimport { SecureDelegationsSecurityMetadataDecryptor } from '../../../icc-x-api/crypto/SecureDelegationsSecurityMetadataDecryptor'\nimport { SecureDelegationsEncryption } from '../../../icc-x-api/crypto/SecureDelegationsEncryption'\nimport { FakeDecryptionExchangeDataManager } from '../../utils/FakeExchangeDataManager'\nimport { EncryptedEntityWithType, EntityWithDelegationTypeName } from '../../../icc-x-api/utils/EntityWithDelegationTypeName'\nimport { ExchangeData } from '../../../icc-api/model/internal/ExchangeData'\nimport { expect } from 'chai'\nimport { IcureStub } from '../../../icc-api/model/IcureStub'\nimport { SecureDelegation } from '../../../icc-api/model/SecureDelegation'\nimport { ShaVersion, ua2hex } from '../../../icc-x-api'\nimport { SecurityMetadata } from '../../../icc-api/model/SecurityMetadata'\nimport { asyncGeneratorToArray } from '../../../icc-x-api/utils/collection-utils'\nimport { FakeExchangeDataMapManager } from '../../utils/FakeExchangeDataMapManager'\nimport AccessLevel = SecureDelegation.AccessLevelEnum\n\ndescribe('Secure delegations security metadata decryptor', async function () {\n const primitives = new WebCryptoPrimitives(webcrypto as any)\n const expectedType: EntityWithDelegationTypeName = EntityWithDelegationTypeName.AccessLog\n const expectedSfks = [primitives.randomUuid(), primitives.randomUuid()]\n let encryptionKeysManager: FakeEncryptionKeysManager\n let exchangeData: FakeDecryptionExchangeDataManager\n let exchangeDataMap: FakeExchangeDataMapManager\n let decryptor: SecureDelegationsSecurityMetadataDecryptor\n let secureDelegationsEncryption: SecureDelegationsEncryption\n\n class SecureDelegationWithEncryptedExchangeId extends SecureDelegation {\n constructor(json: JSON | any) {\n super(json)\n Object.assign(this as SecureDelegationWithEncryptedExchangeId, json)\n }\n\n encryptedExchangeDataId!: { [fp: string]: string }\n }\n\n async function cacheExchangeDataMaps(secureDelegations: { [hash: string]: SecureDelegationWithEncryptedExchangeId }) {\n await exchangeDataMap.createExchangeDataMaps(\n Object.entries(secureDelegations).reduce((p, [hash, secDel]) => {\n return {\n ...p,\n [hash]: secDel.encryptedExchangeDataId,\n }\n }, {} as { [hash: string]: { [fp: string]: string } })\n )\n }\n\n async function initialiseComponents() {\n encryptionKeysManager = await FakeEncryptionKeysManager.create(primitives, [], [await primitives.RSA.generateKeyPair(ShaVersion.Sha256)])\n exchangeData = new FakeDecryptionExchangeDataManager(expectedType, expectedSfks, new WebCryptoPrimitives(webcrypto as any))\n exchangeDataMap = new FakeExchangeDataMapManager()\n secureDelegationsEncryption = new SecureDelegationsEncryption(encryptionKeysManager, primitives)\n decryptor = new SecureDelegationsSecurityMetadataDecryptor(exchangeData, exchangeDataMap, secureDelegationsEncryption, undefined as any) // data owner api not used in these tests\n }\n\n async function randomHash(): Promise<string> {\n return ua2hex(await primitives.sha256(primitives.randomBytes(4)))\n }\n\n async function createExchangeDataAndSecureDelegationEncryptedData(\n exchangeDataDelegator: string,\n exchangeDataDelegate: string\n ): Promise<{\n exchangeData: ExchangeData\n exchangeKey: CryptoKey\n secureDelegationEncryptedData: {\n secretIds: string[]\n encryptionKeys: string[]\n owningEntityIds: string[]\n }\n expectedDecryptedData: {\n secretIds: string[]\n encryptionKeys: string[]\n owningEntityIds: string[]\n }\n }> {\n const exchangeKey = await primitives.AES.generateCryptoKey(false)\n const exchangeData = new ExchangeData({\n id: primitives.randomUuid(),\n delegator: exchangeDataDelegator,\n delegate: exchangeDataDelegate,\n exchangeKey: { ignored: 'in this test' },\n accessControlSecret: { ignored: 'in this test' },\n sharedSignatureKey: { ignored: 'in this test' },\n delegatorSignature: { ignored: 'in this test' },\n sharedSignature: 'ignored in this test',\n })\n const expectedDecryptedData = {\n secretIds: [primitives.randomUuid(), primitives.randomUuid()],\n encryptionKeys: [await primitives.AES.generateCryptoKey(true), await primitives.AES.generateCryptoKey(true)],\n owningEntityIds: [primitives.randomUuid(), primitives.randomUuid()],\n }\n const secureDelegationEncryptedData = {\n secretIds: await Promise.all(expectedDecryptedData.secretIds.map((x) => secureDelegationsEncryption.encryptSecretId(x, exchangeKey))),\n encryptionKeys: await Promise.all(\n expectedDecryptedData.encryptionKeys.map((x) => secureDelegationsEncryption.encryptEncryptionKey(x, exchangeKey))\n ),\n owningEntityIds: await Promise.all(\n expectedDecryptedData.owningEntityIds.map((x) => secureDelegationsEncryption.encryptOwningEntityId(x, exchangeKey))\n ),\n }\n return { exchangeKey, exchangeData, expectedDecryptedData, secureDelegationEncryptedData }\n }\n\n function entityWithSecurityMetadata(securityMetadata: SecurityMetadata): EncryptedEntityWithType {\n return {\n entity: new IcureStub({\n secretForeignKeys: expectedSfks,\n securityMetadata,\n }),\n type: expectedType,\n }\n }\n\n function toSortedJson(data: { decrypted: string; dataOwnersWithAccess: string[] }): string {\n return JSON.stringify({\n decrypted: data.decrypted,\n dataOwnersWithAccess: [...data.dataOwnersWithAccess].sort(),\n })\n }\n\n async function verifyCanDecryptEntityData(\n entity: EncryptedEntityWithType,\n dataOwnerHierarchySubset: string[],\n expected: {\n exchangeData: ExchangeData\n expectedDecryptedData: {\n secretIds: string[]\n encryptionKeys: string[]\n owningEntityIds: string[]\n }\n }[]\n ) {\n const actualSecretIds = (await asyncGeneratorToArray(decryptor.decryptSecretIdsOf(entity, dataOwnerHierarchySubset))).map(toSortedJson)\n const actualOwningEntityIds = (await asyncGeneratorToArray(decryptor.decryptOwningEntityIdsOf(entity, dataOwnerHierarchySubset))).map(\n toSortedJson\n )\n const actualEncryptionKeys = (await asyncGeneratorToArray(decryptor.decryptEncryptionKeysOf(entity, dataOwnerHierarchySubset))).map(toSortedJson)\n const expectedSecretIds: string[] = []\n const expectedOwningEntityIds: string[] = []\n const expectedEncryptionKeys: string[] = []\n for (const data of expected) {\n data.expectedDecryptedData.secretIds.forEach((x) =>\n expectedSecretIds.push(toSortedJson({ decrypted: x, dataOwnersWithAccess: [data.exchangeData.delegate, data.exchangeData.delegator] }))\n )\n data.expectedDecryptedData.owningEntityIds.forEach((x) =>\n expectedOwningEntityIds.push(toSortedJson({ decrypted: x, dataOwnersWithAccess: [data.exchangeData.delegate, data.exchangeData.delegator] }))\n )\n data.expectedDecryptedData.encryptionKeys.forEach((x) =>\n expectedEncryptionKeys.push(toSortedJson({ decrypted: x, dataOwnersWithAccess: [data.exchangeData.delegate, data.exchangeData.delegator] }))\n )\n }\n expect(actualSecretIds).to.have.members(expectedSecretIds)\n expect(actualOwningEntityIds).to.have.members(expectedOwningEntityIds)\n expect(actualEncryptionKeys).to.have.members(expectedEncryptionKeys)\n }\n\n it('should be able to decrypt data from a secure delegation accessible by hash if the hash is cached', async function () {\n await initialiseComponents()\n const self = primitives.randomUuid()\n const createdData1 = await createExchangeDataAndSecureDelegationEncryptedData(self, primitives.randomUuid())\n const createdData2 = await createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), self)\n const delegation1 = new SecureDelegation({\n ...createdData1.secureDelegationEncryptedData,\n delegator: undefined,\n delegate: undefined,\n exchangeDataId: undefined,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const delegation2 = new SecureDelegation({\n ...createdData2.secureDelegationEncryptedData,\n delegator: undefined,\n delegate: undefined,\n exchangeDataId: undefined,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const hash1 = await randomHash()\n const hash2 = await randomHash()\n const hash3 = await randomHash()\n const entity = entityWithSecurityMetadata(\n new SecurityMetadata({\n secureDelegations: { [hash1]: delegation1, [hash2]: delegation2 },\n keysEquivalences: { [hash3]: hash2 },\n })\n )\n exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [hash1] })\n exchangeData.cacheFakeData(createdData2.exchangeData, { exchangeKey: createdData2.exchangeKey, hashes: [hash3] })\n await verifyCanDecryptEntityData(entity, [self], [createdData1, createdData2])\n })\n\n it('should be able to decrypt data from a secure delegation with clear text id where the delegator or delegate are in dataOwnersHierarchySubset', async function () {\n await initialiseComponents()\n const self = primitives.randomUuid()\n const other1 = primitives.randomUuid()\n const other2 = primitives.randomUuid()\n const createdData1 = await createExchangeDataAndSecureDelegationEncryptedData(self, other1)\n const createdData2 = await createExchangeDataAndSecureDelegationEncryptedData(other2, self)\n const delegation1 = new SecureDelegation({\n ...createdData1.secureDelegationEncryptedData,\n delegator: self,\n delegate: other1,\n exchangeDataId: createdData1.exchangeData.id,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const delegation2 = new SecureDelegation({\n ...createdData2.secureDelegationEncryptedData,\n delegator: other2,\n delegate: self,\n exchangeDataId: createdData2.exchangeData.id,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const entity = entityWithSecurityMetadata(\n new SecurityMetadata({\n secureDelegations: { [await randomHash()]: delegation1, [await randomHash()]: delegation2 },\n })\n )\n exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [] }, true)\n exchangeData.cacheFakeData(createdData2.exchangeData, { exchangeKey: createdData2.exchangeKey, hashes: [] })\n await verifyCanDecryptEntityData(entity, [self], [createdData1, createdData2])\n })\n\n it('should be able to decrypt data from a secure delegation with encrypted id if the keys to decrypt the id are available and the delegator or delegate is in dataOwnersHierarchySubset', async function () {\n await initialiseComponents()\n const self = primitives.randomUuid()\n const createdData1 = await createExchangeDataAndSecureDelegationEncryptedData(self, primitives.randomUuid())\n const createdData2 = await createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), self)\n const encryptionKeys = Object.fromEntries(Object.entries(encryptionKeysManager.getDecryptionKeys()).map(([fp, pair]) => [fp, pair.publicKey]))\n const delegation1 = new SecureDelegationWithEncryptedExchangeId({\n ...createdData1.secureDelegationEncryptedData,\n delegator: self,\n encryptedExchangeDataId: await secureDelegationsEncryption.encryptExchangeDataId(createdData1.exchangeData.id!, encryptionKeys),\n permissions: AccessLevel.WRITE,\n })\n const delegation2 = new SecureDelegationWithEncryptedExchangeId({\n ...createdData2.secureDelegationEncryptedData,\n delegate: self,\n encryptedExchangeDataId: await secureDelegationsEncryption.encryptExchangeDataId(createdData2.exchangeData.id!, encryptionKeys),\n permissions: AccessLevel.WRITE,\n })\n const secureDelegations = { [await randomHash()]: delegation1, [await randomHash()]: delegation2 }\n const entity = entityWithSecurityMetadata(\n new SecurityMetadata({\n secureDelegations: secureDelegations,\n })\n )\n exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [] }, true)\n exchangeData.cacheFakeData(createdData2.exchangeData, { exchangeKey: createdData2.exchangeKey, hashes: [] })\n await cacheExchangeDataMaps(secureDelegations)\n await verifyCanDecryptEntityData(entity, [self], [createdData1, createdData2])\n })\n\n it('should be able to decrypt data from secure delegations accessible by encrypted or cleartext id', async function () {\n await initialiseComponents()\n const self = primitives.randomUuid()\n const other1 = primitives.randomUuid()\n const other2 = primitives.randomUuid()\n const createdData1 = await createExchangeDataAndSecureDelegationEncryptedData(self, other1)\n const createdData2 = await createExchangeDataAndSecureDelegationEncryptedData(other2, self)\n const createdData3 = await createExchangeDataAndSecureDelegationEncryptedData(self, primitives.randomUuid())\n const createdData4 = await createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), self)\n const encryptionKeys = Object.fromEntries(Object.entries(encryptionKeysManager.getDecryptionKeys()).map(([fp, pair]) => [fp, pair.publicKey]))\n const delegation1 = new SecureDelegationWithEncryptedExchangeId({\n ...createdData1.secureDelegationEncryptedData,\n delegator: self,\n delegate: other1,\n exchangeDataId: createdData1.exchangeData.id,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const delegation2 = new SecureDelegationWithEncryptedExchangeId({\n ...createdData2.secureDelegationEncryptedData,\n delegator: other2,\n delegate: self,\n exchangeDataId: createdData2.exchangeData.id,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const delegation3 = new SecureDelegationWithEncryptedExchangeId({\n ...createdData3.secureDelegationEncryptedData,\n delegator: self,\n encryptedExchangeDataId: await secureDelegationsEncryption.encryptExchangeDataId(createdData3.exchangeData.id!, encryptionKeys),\n permissions: AccessLevel.WRITE,\n })\n const delegation4 = new SecureDelegationWithEncryptedExchangeId({\n ...createdData4.secureDelegationEncryptedData,\n delegate: self,\n encryptedExchangeDataId: await secureDelegationsEncryption.encryptExchangeDataId(createdData4.exchangeData.id!, encryptionKeys),\n permissions: AccessLevel.WRITE,\n })\n const secureDelegations = {\n [await randomHash()]: delegation1,\n [await randomHash()]: delegation2,\n [await randomHash()]: delegation3,\n [await randomHash()]: delegation4,\n }\n const entity = entityWithSecurityMetadata(\n new SecurityMetadata({\n secureDelegations: secureDelegations,\n })\n )\n exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [] }, true)\n exchangeData.cacheFakeData(createdData2.exchangeData, { exchangeKey: createdData2.exchangeKey, hashes: [] })\n exchangeData.cacheFakeData(createdData3.exchangeData, { exchangeKey: createdData3.exchangeKey, hashes: [] }, true)\n exchangeData.cacheFakeData(createdData4.exchangeData, { exchangeKey: createdData4.exchangeKey, hashes: [] })\n await cacheExchangeDataMaps(secureDelegations)\n await verifyCanDecryptEntityData(entity, [self], [createdData1, createdData2, createdData3, createdData4])\n })\n\n // Note: mixed scenario where part of secure delegation is accessible by hash and part by id (clear-text or encrypted) is not realistic and not tested\n\n it('should ignore delegations accessible by id where the neither the delegator nor delegate are in dataOwnersHierarchySubset', async function () {\n await initialiseComponents()\n const createdData1 = await createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), primitives.randomUuid())\n const createdData2 = await createExchangeDataAndSecureDelegationEncryptedData(primitives.randomUuid(), primitives.randomUuid())\n const delegation1 = new SecureDelegation({\n ...createdData1.secureDelegationEncryptedData,\n delegator: primitives.randomUuid(),\n delegate: primitives.randomUuid(),\n exchangeDataId: createdData1.exchangeData.id,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const delegation2 = new SecureDelegation({\n ...createdData2.secureDelegationEncryptedData,\n delegator: primitives.randomUuid(),\n delegate: primitives.randomUuid(),\n exchangeDataId: createdData2.exchangeData.id,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const entity = entityWithSecurityMetadata(\n new SecurityMetadata({\n secureDelegations: { [await randomHash()]: delegation1, [await randomHash()]: delegation2 },\n })\n )\n await verifyCanDecryptEntityData(entity, [primitives.randomUuid()], [])\n })\n\n it('should ignore secure delegation with encrypted id if the keys to decrypt the id are not available', async function () {\n await initialiseComponents()\n const self = primitives.randomUuid()\n const createdData = await createExchangeDataAndSecureDelegationEncryptedData(self, primitives.randomUuid())\n const newKey = await primitives.RSA.generateKeyPair(ShaVersion.Sha256)\n const newKeyFp = ua2hex(await primitives.RSA.exportKey(newKey.publicKey, 'spki')).slice(-32)\n const delegation = new SecureDelegationWithEncryptedExchangeId({\n ...createdData.secureDelegationEncryptedData,\n delegator: self,\n encryptedExchangeDataId: await secureDelegationsEncryption.encryptExchangeDataId(createdData.exchangeData.id!, {\n [newKeyFp]: newKey.publicKey,\n }),\n permissions: AccessLevel.WRITE,\n })\n const secureDelegation = { [await randomHash()]: delegation }\n const entity = entityWithSecurityMetadata(\n new SecurityMetadata({\n secureDelegations: secureDelegation,\n })\n )\n exchangeData.cacheFakeData(createdData.exchangeData, { exchangeKey: createdData.exchangeKey, hashes: [] })\n await cacheExchangeDataMaps(secureDelegation)\n await verifyCanDecryptEntityData(entity, [self], [])\n })\n\n it('should ignore secure delegations corresponding to exchange data which could not be decrypted', async function () {\n await initialiseComponents()\n const self = primitives.randomUuid()\n const other1 = primitives.randomUuid()\n const other2 = primitives.randomUuid()\n const createdData1 = await createExchangeDataAndSecureDelegationEncryptedData(self, other1)\n const createdData2 = await createExchangeDataAndSecureDelegationEncryptedData(other2, self)\n const delegation1 = new SecureDelegation({\n ...createdData1.secureDelegationEncryptedData,\n delegator: self,\n delegate: other1,\n exchangeDataId: createdData1.exchangeData.id,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const delegation2 = new SecureDelegation({\n ...createdData2.secureDelegationEncryptedData,\n delegator: other2,\n delegate: self,\n exchangeDataId: createdData2.exchangeData.id,\n encryptedExchangeDataId: undefined,\n permissions: AccessLevel.WRITE,\n })\n const entity = entityWithSecurityMetadata(\n new SecurityMetadata({\n secureDelegations: { [await randomHash()]: delegation1, [await randomHash()]: delegation2 },\n })\n )\n exchangeData.cacheFakeData(createdData1.exchangeData, { exchangeKey: createdData1.exchangeKey, hashes: [] })\n exchangeData.cacheFakeData(createdData2.exchangeData, undefined)\n await verifyCanDecryptEntityData(entity, [self], [createdData1])\n })\n\n it('should give an error if dataOwnersHierarchySubset is empty', async function () {\n await initialiseComponents()\n const entity = {\n entity: new IcureStub({ secretForeignKeys: expectedSfks }),\n type: expectedType,\n }\n let failed = 0\n try {\n decryptor.decryptEncryptionKeysOf(entity, [])\n } catch (e) {\n console.log(e)\n failed++\n }\n try {\n decryptor.decryptSecretIdsOf(entity, [])\n } catch (e) {\n console.log(e)\n failed++\n }\n try {\n decryptor.decryptOwningEntityIdsOf(entity, [])\n } catch (e) {\n console.log(e)\n failed++\n }\n try {\n await decryptor.getEntityAccessLevel(entity, [])\n } catch (e) {\n console.log(e)\n failed++\n }\n expect(failed).to.equal(4)\n })\n\n it('should return the best access level with directly accessible secure delegations', async function () {\n await initialiseComponents()\n const dataOwnerA = primitives.randomUuid()\n const dataOwnerB = primitives.randomUuid()\n const secureDelegationWriteA = new SecureDelegation({ delegator: dataOwnerA, permissions: AccessLevel.WRITE })\n const secureDelegationReadA = new SecureDelegation({ delegate: dataOwnerA, permissions: AccessLevel.READ })\n const secureDelegationWriteB = new SecureDelegation({ delegate: dataOwnerB, permissions: AccessLevel.WRITE })\n const secureDelegationReadB = new SecureDelegation({ delegator: dataOwnerB, permissions: AccessLevel.READ })\n const secureDelegationWriteOther = new SecureDelegation({ delegator: primitives.randomUuid(), permissions: AccessLevel.WRITE })\n const secureDelegationReadOther = new SecureDelegation({ delegator: primitives.randomUuid(), permissions: AccessLevel.READ })\n expect(\n await decryptor.getEntityAccessLevel(\n entityWithSecurityMetadata({\n secureDelegations: {\n [await randomHash()]: secureDelegationReadA,\n [await randomHash()]: secureDelegationWriteOther,\n [await randomHash()]: secureDelegationWriteB,\n },\n }),\n [dataOwnerA]\n )\n ).to.equal(AccessLevel.READ)\n expect(\n await decryptor.getEntityAccessLevel(\n entityWithSecurityMetadata({\n secureDelegations: {\n [await randomHash()]: secureDelegationReadA,\n [await randomHash()]: secureDelegationWriteOther,\n [await randomHash()]: secureDelegationWriteB,\n },\n }),\n [dataOwnerB]\n )\n ).to.equal(AccessLevel.WRITE)\n expect(\n await decryptor.getEntityAccessLevel(\n entityWithSecurityMetadata({\n secureDelegations: {\n [await randomHash()]: secureDelegationReadOther,\n [await randomHash()]: secureDelegationWriteB,\n },\n }),\n [dataOwnerA]\n )\n ).to.equal(undefined)\n expect(\n await decryptor.getEntityAccessLevel(\n entityWithSecurityMetadata({\n secureDelegations: {\n [await randomHash()]: secureDelegationReadA,\n [await randomHash()]: secureDelegationWriteOther,\n [await randomHash()]: secureDelegationWriteB,\n },\n }),\n [dataOwnerA, dataOwnerB]\n )\n ).to.equal(AccessLevel.WRITE)\n expect(\n await decryptor.getEntityAccessLevel(\n entityWithSecurityMetadata({\n secureDelegations: {\n [await randomHash()]: secureDelegationReadA,\n [await randomHash()]: secureDelegationReadB,\n [await randomHash()]: secureDelegationWriteOther,\n },\n }),\n [dataOwnerA, dataOwnerB]\n )\n ).to.equal(AccessLevel.READ)\n expect(\n await decryptor.getEntityAccessLevel(\n entityWithSecurityMetadata({\n secureDelegations: {\n [await randomHash()]: secureDelegationWriteA,\n },\n }),\n [dataOwnerA, dataOwnerB]\n )\n ).to.equal(AccessLevel.WRITE)\n })\n\n it('should return the best access level with secure delegations accessible through hash', async function () {\n const hashA = await randomHash()\n const hashB = await randomHash()\n const secureDelegationWriteA: [string, SecureDelegation] = [hashA, new SecureDelegation({ permissions: AccessLevel.WRITE })]\n const secureDelegationReadA: [string, SecureDelegation] = [hashA, new SecureDelegation({ permissions: AccessLevel.READ })]\n const secureDelegationWriteB: [string, SecureDelegation] = [hashB, new SecureDelegation({ permissions: AccessLevel.WRITE })]\n const secureDelegationReadB: [string, SecureDelegation] = [hashB, new SecureDelegation({ permissions: AccessLevel.READ })]\n const secureDelegationWriteOther: [string, SecureDelegation] = [\n await randomHash(),\n new SecureDelegation({ delegator: primitives.randomUuid(), permissions: AccessLevel.WRITE }),\n ]\n const secureDelegationReadOther: [string, SecureDelegation] = [\n await randomHash(),\n new SecureDelegation({ delegator: primitives.randomUuid(), permissions: AccessLevel.READ }),\n ]\n\n async function testWithEntriesAndHashes(entries: [string, SecureDelegation][], hashes: string[], expectedLevel: AccessLevel | undefined) {\n await initialiseComponents()\n for (const hash of hashes) {\n exchangeData.cacheFakeData({} as any, { exchangeKey: {} as any, hashes: [hash] })\n }\n expect(\n await decryptor.getEntityAccessLevel(\n entityWithSecurityMetadata({\n secureDelegations: Object.fromEntries(entries),\n }),\n [primitives.randomUuid()]\n )\n ).to.equal(expectedLevel)\n }\n\n await testWithEntriesAndHashes([secureDelegationReadA, secureDelegationWriteB, secureDelegationWriteOther], [hashA], AccessLevel.READ)\n await testWithEntriesAndHashes([secureDelegationReadA, secureDelegationWriteB, secureDelegationWriteOther], [hashB], AccessLevel.WRITE)\n await testWithEntriesAndHashes([secureDelegationWriteB, secureDelegationReadOther], [hashA], undefined)\n await testWithEntriesAndHashes([secureDelegationReadA, secureDelegationWriteB, secureDelegationWriteOther], [hashA, hashB], AccessLevel.WRITE)\n await testWithEntriesAndHashes([secureDelegationReadA, secureDelegationReadB, secureDelegationWriteOther], [hashA, hashB], AccessLevel.READ)\n await testWithEntriesAndHashes([secureDelegationWriteA], [hashA, hashB], AccessLevel.WRITE)\n })\n})\n"]}

package/test/icc-x-api/crypto/security-metadata-decryptor-chain-test.d.ts DELETED Viewed

	@@ -1 +0,0 @@
1	- export {};