@icure/api 8.0.8 → 8.0.10

package/test/icc-x-api/auth/jwt-concurrency-test.js

@@ -0,0 +1,113 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sleep = void 0;
+require("isomorphic-fetch");
+const mocha_1 = require("mocha");
+const test_utils_1 = require("../../utils/test_utils");
+const TestApi_1 = require("../../utils/TestApi");
+const icc_x_api_1 = require("../../../icc-x-api");
+const crypto_1 = require("crypto");
+const chai_1 = require("chai");
+const icc_api_1 = require("../../../icc-api");
+const AuthenticationProvider_1 = require("../../../icc-x-api/auth/AuthenticationProvider");
+const types_1 = require("@icure/test-setup/types");
+(0, test_utils_1.setLocalStorage)(fetch);
+let env;
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+exports.sleep = sleep;
+describe('Jwt authentication concurrency test', () => {
+    (0, mocha_1.before)(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    it('Can login simultaneously with the same user', () => __awaiter(void 0, void 0, void 0, function* () {
+        const api = yield (0, TestApi_1.TestApi)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password, crypto_1.webcrypto);
+        const users = yield Promise.all([...Array(5)].map(() => __awaiter(void 0, void 0, void 0, function* () {
+            return yield api.userApi.getCurrentUser();
+        })));
+        users.forEach((u) => {
+            (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
+        });
+    }));
+    it('After logging in, can make requests asynchronously', () => __awaiter(void 0, void 0, void 0, function* () {
+        const api = yield (0, TestApi_1.TestApi)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password, crypto_1.webcrypto);
+        yield api.userApi.getCurrentUser();
+        const users = yield Promise.all([...Array(5)].map(() => __awaiter(void 0, void 0, void 0, function* () {
+            return yield api.userApi.getCurrentUser();
+        })));
+        users.forEach((u) => {
+            (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
+        });
+    }));
+    it('It can refresh the token asynchronously', function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!process.env.TEST_ENVIRONMENT || process.env.TEST_ENVIRONMENT === 'acceptance') {
+                this.skip();
+            }
+            const api = yield (0, TestApi_1.TestApi)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password, crypto_1.webcrypto);
+            yield api.userApi.getCurrentUser();
+            yield sleep(20000);
+            const users = yield Promise.all([...Array(5)].map(() => __awaiter(this, void 0, void 0, function* () {
+                return yield api.userApi.getCurrentUser();
+            })));
+            users.forEach((u) => {
+                (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
+            });
+        });
+    });
+    it('Can instantiate a x-api without provider and get a 401', () => __awaiter(void 0, void 0, void 0, function* () {
+        const xUserApi = new icc_x_api_1.IccUserXApi(env.iCureUrl, {}, new AuthenticationProvider_1.NoAuthenticationProvider(), null);
+        xUserApi
+            .getCurrentUser()
+            .then(() => {
+            (0, chai_1.expect)(false).to.be.eq(true, 'I should not get here');
+        })
+            .catch((e) => {
+            (0, chai_1.expect)(e.statusCode).to.be.eq(401);
+        });
+    }));
+    it('Can instantiate a user-x-api with JWT provider and make requests', () => __awaiter(void 0, void 0, void 0, function* () {
+        const authApi = new icc_api_1.IccAuthApi(env.iCureUrl, {});
+        const provider = new AuthenticationProvider_1.JwtAuthenticationProvider(authApi, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password);
+        const xUserApi = new icc_x_api_1.IccUserXApi(env.iCureUrl, {}, provider, null);
+        const users = yield Promise.all([...Array(5)].map(() => __awaiter(void 0, void 0, void 0, function* () {
+            return yield xUserApi.getCurrentUser();
+        })));
+        users.forEach((u) => {
+            (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
+        });
+        const tokens = yield provider.getIcureTokens();
+        (0, chai_1.expect)(tokens).to.not.be.undefined;
+        const tokenOnlyProvider = new AuthenticationProvider_1.JwtAuthenticationProvider(authApi, undefined, undefined, undefined, tokens);
+        const xUserApiTokenOnly = new icc_x_api_1.IccUserXApi(env.iCureUrl, {}, tokenOnlyProvider, null);
+        const usersTokenOnly = yield Promise.all([...Array(5)].map(() => __awaiter(void 0, void 0, void 0, function* () {
+            return yield xUserApiTokenOnly.getCurrentUser();
+        })));
+        usersTokenOnly.forEach((u) => {
+            (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
+        });
+    }));
+    it('Can instantiate a user-x-api with Basic provider and make requests', () => __awaiter(void 0, void 0, void 0, function* () {
+        const a = new AuthenticationProvider_1.BasicAuthenticationProvider(env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password);
+        const xUserApi = new icc_x_api_1.IccUserXApi(env.iCureUrl, {}, a, null);
+        const currentUser = yield xUserApi.getCurrentUser();
+        (0, chai_1.expect)(currentUser.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
+        const fetchedUser = yield xUserApi.getUser(currentUser.id);
+        (0, chai_1.expect)(fetchedUser.id).to.be.equal(currentUser.id);
+    }));
+});
+//# sourceMappingURL=jwt-concurrency-test.js.map

package/test/icc-x-api/auth/jwt-concurrency-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-concurrency-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/auth/jwt-concurrency-test.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4BAAyB;AACzB,iCAA8B;AAC9B,uDAAiG;AACjG,iDAA6C;AAC7C,kDAAgD;AAChD,mCAAkC;AAClC,+BAA6B;AAG7B,8CAA6C;AAC7C,2FAAiJ;AACjJ,mDAAmE;AAEnE,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AACtB,IAAI,GAAa,CAAA;AAEjB,SAAgB,KAAK,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC;AAFD,sBAEC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,IAAA,cAAM,EAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAS,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAA,iBAAO,EACvB,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EACvC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,EAC3C,kBAA8B,CAC/B,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;YACnC,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAC3C,CAAC,CAAA,CAAC,CACH,CAAA;QACD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAClB,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAS,EAAE;QAClE,MAAM,GAAG,GAAG,MAAM,IAAA,iBAAO,EACvB,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EACvC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,EAC3C,kBAA8B,CAC/B,CAAA;QAED,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAElC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;YACnC,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAC3C,CAAC,CAAA,CAAC,CACH,CAAA;QACD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAClB,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE;;YAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,YAAY,EAAE;gBAClF,IAAI,CAAC,IAAI,EAAE,CAAA;aACZ;YACD,MAAM,GAAG,GAAG,MAAM,IAAA,iBAAO,EACvB,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EACvC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,EAC3C,kBAA8B,CAC/B,CAAA;YACD,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAElC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;YAElB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;gBACnC,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAC3C,CAAC,CAAA,CAAC,CACH,CAAA;YACD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClB,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;YACtE,CAAC,CAAC,CAAA;QACJ,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAS,EAAE;QACtE,MAAM,QAAQ,GAAG,IAAI,uBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,iDAAwB,EAAE,EAAE,IAAW,CAAC,CAAA;QAC/F,QAAQ;aACL,cAAc,EAAE;aAChB,IAAI,CAAC,GAAG,EAAE;YACT,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAA;QACvD,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAW,EAAE,EAAE;YACrB,IAAA,aAAM,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;IACN,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAS,EAAE;QAChF,MAAM,OAAO,GAAG,IAAI,oBAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAChD,MAAM,QAAQ,GAAG,IAAI,kDAAyB,CAAC,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC7I,MAAM,QAAQ,GAAG,IAAI,uBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAW,CAAC,CAAA;QAEzE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;YACnC,OAAO,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAA;QACxC,CAAC,CAAA,CAAC,CACH,CAAA;QACD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAClB,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAA;QAC9C,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QAClC,MAAM,iBAAiB,GAAG,IAAI,kDAAyB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QACzG,MAAM,iBAAiB,GAAG,IAAI,uBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAW,CAAC,CAAA;QAE3F,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;YACnC,OAAO,MAAM,iBAAiB,CAAC,cAAc,EAAE,CAAA;QACjD,CAAC,CAAA,CAAC,CACH,CAAA;QACD,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAS,EAAE;QAClF,MAAM,CAAC,GAAG,IAAI,oDAA2B,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC/H,MAAM,QAAQ,GAAG,IAAI,uBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,IAAW,CAAC,CAAA;QAElE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAA;QACnD,IAAA,aAAM,EAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QAE9E,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAG,CAAC,CAAA;QAC3D,IAAA,aAAM,EAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACpD,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import 'isomorphic-fetch'\nimport { before } from 'mocha'\nimport { getEnvironmentInitializer, hcp1Username, setLocalStorage } from '../../utils/test_utils'\nimport { TestApi } from '../../utils/TestApi'\nimport { IccUserXApi } from '../../../icc-x-api'\nimport { webcrypto } from 'crypto'\nimport { expect } from 'chai'\nimport { XHR } from '../../../icc-api/api/XHR'\nimport XHRError = XHR.XHRError\nimport { IccAuthApi } from '../../../icc-api'\nimport { NoAuthenticationProvider, BasicAuthenticationProvider, JwtAuthenticationProvider } from '../../../icc-x-api/auth/AuthenticationProvider'\nimport { getEnvVariables, TestVars } from '@icure/test-setup/types'\n\nsetLocalStorage(fetch)\nlet env: TestVars\n\nexport function sleep(ms: number): Promise<any> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\ndescribe('Jwt authentication concurrency test', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('Can login simultaneously with the same user', async () => {\n    const api = await TestApi(\n      env.iCureUrl,\n      env.dataOwnerDetails[hcp1Username].user,\n      env.dataOwnerDetails[hcp1Username].password,\n      webcrypto as unknown as Crypto\n    )\n    const users = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await api.userApi.getCurrentUser()\n      })\n    )\n    users.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n  })\n\n  it('After logging in, can make requests asynchronously', async () => {\n    const api = await TestApi(\n      env.iCureUrl,\n      env.dataOwnerDetails[hcp1Username].user,\n      env.dataOwnerDetails[hcp1Username].password,\n      webcrypto as unknown as Crypto\n    )\n\n    await api.userApi.getCurrentUser()\n\n    const users = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await api.userApi.getCurrentUser()\n      })\n    )\n    users.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n  })\n\n  it('It can refresh the token asynchronously', async function () {\n    if (!process.env.TEST_ENVIRONMENT || process.env.TEST_ENVIRONMENT === 'acceptance') {\n      this.skip()\n    }\n    const api = await TestApi(\n      env.iCureUrl,\n      env.dataOwnerDetails[hcp1Username].user,\n      env.dataOwnerDetails[hcp1Username].password,\n      webcrypto as unknown as Crypto\n    )\n    await api.userApi.getCurrentUser()\n\n    await sleep(20000)\n\n    const users = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await api.userApi.getCurrentUser()\n      })\n    )\n    users.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n  })\n\n  it('Can instantiate a x-api without provider and get a 401', async () => {\n    const xUserApi = new IccUserXApi(env.iCureUrl, {}, new NoAuthenticationProvider(), null as any)\n    xUserApi\n      .getCurrentUser()\n      .then(() => {\n        expect(false).to.be.eq(true, 'I should not get here')\n      })\n      .catch((e: XHRError) => {\n        expect(e.statusCode).to.be.eq(401)\n      })\n  })\n\n  it('Can instantiate a user-x-api with JWT provider and make requests', async () => {\n    const authApi = new IccAuthApi(env.iCureUrl, {})\n    const provider = new JwtAuthenticationProvider(authApi, env.dataOwnerDetails[hcp1Username].user, env.dataOwnerDetails[hcp1Username].password)\n    const xUserApi = new IccUserXApi(env.iCureUrl, {}, provider, null as any)\n\n    const users = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await xUserApi.getCurrentUser()\n      })\n    )\n    users.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n\n    const tokens = await provider.getIcureTokens()\n    expect(tokens).to.not.be.undefined\n    const tokenOnlyProvider = new JwtAuthenticationProvider(authApi, undefined, undefined, undefined, tokens)\n    const xUserApiTokenOnly = new IccUserXApi(env.iCureUrl, {}, tokenOnlyProvider, null as any)\n\n    const usersTokenOnly = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await xUserApiTokenOnly.getCurrentUser()\n      })\n    )\n    usersTokenOnly.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n  })\n\n  it('Can instantiate a user-x-api with Basic provider and make requests', async () => {\n    const a = new BasicAuthenticationProvider(env.dataOwnerDetails[hcp1Username].user, env.dataOwnerDetails[hcp1Username].password)\n    const xUserApi = new IccUserXApi(env.iCureUrl, {}, a, null as any)\n\n    const currentUser = await xUserApi.getCurrentUser()\n    expect(currentUser.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n\n    const fetchedUser = await xUserApi.getUser(currentUser.id!)\n    expect(fetchedUser.id).to.be.equal(currentUser.id)\n  })\n})\n"]}

package/test/icc-x-api/auth/smart-auth-provider-test.d.ts

@@ -0,0 +1 @@
+import 'isomorphic-fetch';

package/test/icc-x-api/auth/smart-auth-provider-test.js

@@ -0,0 +1,224 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const types_1 = require("@icure/test-setup/types");
+const mocha_1 = require("mocha");
+const test_utils_1 = require("../../utils/test_utils");
+const icc_x_api_1 = require("../../../icc-x-api");
+const icc_api_1 = require("../../../icc-api");
+require("isomorphic-fetch");
+const SmartAuthProvider_1 = require("../../../icc-x-api/auth/SmartAuthProvider");
+const chai_1 = require("chai");
+const crypto_1 = require("crypto");
+var initMasterApi = test_utils_1.TestUtils.initMasterApi;
+const assert_1 = require("assert");
+const otpauth_1 = require("otpauth");
+(0, test_utils_1.setLocalStorage)(fetch);
+let env;
+let authApi;
+describe('Smart authentication provider', () => {
+    (0, mocha_1.before)(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+            authApi = new icc_api_1.IccAuthApi(env.iCureUrl, {}, new icc_x_api_1.NoAuthenticationProvider(), fetch);
+        });
+    });
+    function userApiWithProvider(authProvider) {
+        return new icc_api_1.IccUserApi(env.iCureUrl, {}, authProvider, fetch);
+    }
+    it('Should automatically ask for secret to get a new token, and reasks the secret if it is not valid', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { credentials } = yield (0, test_utils_1.createNewHcpApi)(env);
+        let calls = 0;
+        const authProvider = SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, credentials.user, {
+            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
+                (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
+                (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
+                (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.SHORT_LIVED_TOKEN);
+                (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN);
+                if (calls == 0) {
+                    (0, chai_1.expect)(previousAttempts).to.be.empty;
+                }
+                else if (calls == 1) {
+                    (0, chai_1.expect)(previousAttempts).to.have.length(1);
+                    (0, chai_1.expect)(previousAttempts[0].value).to.equal('wrong');
+                    (0, chai_1.expect)(previousAttempts[0].secretType).to.equal(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
+                }
+                else
+                    (0, assert_1.fail)(`Unexpected number of calls: ${calls}`);
+                return calls++ == 0
+                    ? { value: 'wrong', secretType: SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN } // pragma: allowlist secret
+                    : { value: credentials.password, secretType: SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN };
+            }),
+        });
+        const userApi = userApiWithProvider(authProvider);
+        const user = yield userApi.getCurrentUser();
+        (0, chai_1.expect)(user.healthcarePartyId).to.equal(credentials.dataOwnerId);
+        (0, chai_1.expect)(calls).to.equal(2);
+    }));
+    (0, test_utils_1.itNoLite)('Should automatically ask for a more powerful secret to perform elevated-security operations if the available secret/token is not good enough', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { credentials, api } = yield (0, test_utils_1.createNewHcpApi)(env);
+        const initialUser = yield api.userApi.getCurrentUser();
+        const masterApi = yield initMasterApi(env);
+        const userToken = (0, crypto_1.randomUUID)();
+        const userPw = (0, crypto_1.randomUUID)();
+        const userWithLongTokenAndPw = yield masterApi.userApi.modifyUser(Object.assign(Object.assign({}, initialUser), { passwordHash: userPw, authenticationTokens: {
+                'test-long-lived-token': {
+                    token: userToken,
+                    creationTime: Date.now(),
+                    validity: 60 * 60 * 24 * 7,
+                },
+            } }));
+        let calls = 0;
+        const authProvider = SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, credentials.user, {
+            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
+                if (calls == 0) {
+                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
+                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
+                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.SHORT_LIVED_TOKEN);
+                    (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN);
+                    (0, chai_1.expect)(previousAttempts).to.be.empty;
+                    calls++;
+                    return { value: userToken, secretType: SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN };
+                }
+                else if (calls == 1) {
+                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
+                    (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
+                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.SHORT_LIVED_TOKEN);
+                    (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN);
+                    (0, chai_1.expect)(previousAttempts).to.be.empty;
+                    calls++;
+                    return { value: userPw, secretType: SmartAuthProvider_1.AuthSecretType.PASSWORD };
+                }
+                else
+                    throw new Error(`Unexpected number of calls: ${calls}`);
+            }),
+        });
+        const userApi = userApiWithProvider(authProvider);
+        (0, chai_1.expect)((yield userApi.getCurrentUser()).rev).to.equal(userWithLongTokenAndPw.rev);
+        (0, chai_1.expect)(calls).to.equal(1);
+        const newPw = (0, crypto_1.randomUUID)();
+        const userWithNewPw = yield userApi.modifyUser(Object.assign(Object.assign({}, userWithLongTokenAndPw), { passwordHash: newPw }));
+        (0, chai_1.expect)(userWithNewPw.rev).to.not.equal(userWithLongTokenAndPw.rev);
+        (0, chai_1.expect)(calls).to.equal(2);
+        const retrievedWithNewPw = yield userApiWithProvider(new icc_x_api_1.BasicAuthenticationProvider(credentials.user, newPw)).getCurrentUser();
+        (0, chai_1.expect)(retrievedWithNewPw.rev).to.equal(userWithNewPw.rev);
+        const couldRetrieveWithOldPw = yield userApiWithProvider(new icc_x_api_1.BasicAuthenticationProvider(credentials.user, userPw))
+            .getCurrentUser()
+            .then(() => true, () => false);
+        (0, chai_1.expect)(couldRetrieveWithOldPw).to.be.false;
+    }));
+    (0, test_utils_1.itNoLite)('Should automatically ask for TOTP after password if user has 2fa enabled', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { credentials, api } = yield (0, test_utils_1.createNewHcpApi)(env);
+        const initialUser = yield api.userApi.getCurrentUser();
+        const masterApi = yield initMasterApi(env);
+        const totpSecret = 'AAPX7PW2RJIGZ3D4'; // pragma: allowlist secret (fake secret generated only for test)
+        const totp = new otpauth_1.TOTP({
+            algorithm: 'SHA1',
+            digits: 6,
+            period: 30,
+            secret: totpSecret,
+        });
+        const userPw = (0, crypto_1.randomUUID)();
+        yield masterApi.userApi.enable2fa(initialUser.id, totpSecret);
+        const userWithPwAnd2fa = yield masterApi.userApi.modifyUser(Object.assign(Object.assign({}, initialUser), { passwordHash: userPw }));
+        let calls = 0;
+        const authProvider = SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, credentials.user, {
+            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
+                if (calls == 0) {
+                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
+                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
+                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.SHORT_LIVED_TOKEN);
+                    (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN);
+                    (0, chai_1.expect)(previousAttempts).to.be.empty;
+                    calls++;
+                    return { value: userPw, secretType: SmartAuthProvider_1.AuthSecretType.PASSWORD };
+                }
+                else if (calls == 1 || calls == 2) {
+                    (0, chai_1.expect)(acceptedSecrets).to.have.members([SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN]);
+                    if (calls == 1)
+                        (0, chai_1.expect)(previousAttempts).to.be.empty;
+                    if (calls == 2)
+                        (0, chai_1.expect)(previousAttempts).to.have.length(1);
+                    return calls++ == 1
+                        ? { value: totp.generate() + '13', secretType: SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN }
+                        : { value: totp.generate(), secretType: SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN };
+                }
+                else
+                    throw new Error(`Unexpected number of calls: ${calls}`);
+            }),
+        });
+        const userApi = userApiWithProvider(authProvider);
+        (0, chai_1.expect)((yield userApi.getCurrentUser()).rev).to.equal(userWithPwAnd2fa.rev);
+        (0, chai_1.expect)(calls).to.equal(3);
+    }));
+    (0, test_utils_1.itNoLite)('Should ask for TOTP directly if password is cached', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { credentials, api } = yield (0, test_utils_1.createNewHcpApi)(env);
+        const initialUser = yield api.userApi.getCurrentUser();
+        const masterApi = yield initMasterApi(env);
+        const totpSecret = 'AAPX7PW2RJIGZ3D4'; // pragma: allowlist secret (fake secret generated only for test)
+        const totp = new otpauth_1.TOTP({
+            algorithm: 'SHA1',
+            digits: 6,
+            period: 30,
+            secret: totpSecret,
+        });
+        const userPw = (0, crypto_1.randomUUID)();
+        yield masterApi.userApi.enable2fa(initialUser.id, totpSecret);
+        const userWithPwAnd2fa = yield masterApi.userApi.modifyUser(Object.assign(Object.assign({}, initialUser), { passwordHash: userPw }));
+        let calls = 0;
+        const authProvider = SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, credentials.user, {
+            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
+                (0, chai_1.expect)(acceptedSecrets).to.have.members([SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN]);
+                (0, chai_1.expect)(previousAttempts).to.be.empty;
+                (0, chai_1.expect)(calls++).to.equal(0);
+                return { value: totp.generate(), secretType: SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN };
+            }),
+        }, {
+            initialSecret: { plainSecret: userPw },
+        });
+        const userApi = userApiWithProvider(authProvider);
+        (0, chai_1.expect)((yield userApi.getCurrentUser()).rev).to.equal(userWithPwAnd2fa.rev);
+        (0, chai_1.expect)(calls).to.equal(1);
+    }));
+    (0, test_utils_1.itNoLite)('Switched provider should keep cached secrets and should be able to have elevated security context', () => __awaiter(void 0, void 0, void 0, function* () {
+        var _a;
+        const details = yield (0, test_utils_1.createUserInMultipleGroups)(env);
+        let calls = 0;
+        const authProvider = SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, details.userLogin, {
+            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
+                (0, chai_1.expect)(acceptedSecrets).to.have.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
+                (0, chai_1.expect)(previousAttempts).to.be.empty;
+                (0, chai_1.expect)(calls++).to.equal(0);
+                return { value: details.userPw12, secretType: SmartAuthProvider_1.AuthSecretType.PASSWORD };
+            }),
+        });
+        const defaultGroupUserApi = userApiWithProvider(authProvider);
+        const defaultGroupUser = yield defaultGroupUserApi.getCurrentUser();
+        const otherGroupId = details.group1.id == defaultGroupUser.groupId ? details.group2.id : details.group1.id;
+        const matches = yield defaultGroupUserApi.getMatchingUsers();
+        const switchedUserApi = userApiWithProvider(yield authProvider.switchGroup(otherGroupId, matches));
+        const switchedUser = yield switchedUserApi.getCurrentUser();
+        (0, chai_1.expect)(switchedUser.id).to.not.equal(defaultGroupUser.id);
+        (0, chai_1.expect)(switchedUser.groupId).to.equal(otherGroupId);
+        const updatedDefault = yield switchedUserApi.modifyUser(Object.assign(Object.assign({}, switchedUser), { authenticationTokens: {
+                'new-token': {
+                    token: (0, crypto_1.randomUUID)(),
+                    creationTime: Date.now(),
+                    validity: 60 * 60 * 24 * 7,
+                },
+            } }));
+        (0, chai_1.expect)(updatedDefault.rev).to.not.equal(switchedUser.rev);
+        (0, chai_1.expect)(Object.keys((_a = updatedDefault.authenticationTokens) !== null && _a !== void 0 ? _a : {})).to.not.be.empty;
+    }));
+});
+//# sourceMappingURL=smart-auth-provider-test.js.map

package/test/icc-x-api/auth/smart-auth-provider-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smart-auth-provider-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/auth/smart-auth-provider-test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,mDAAmE;AACnE,iCAA8B;AAC9B,uDAAqJ;AACrJ,kDAAkH;AAClH,8CAAyD;AACzD,4BAAyB;AACzB,iFAAgH;AAChH,+BAA6B;AAC7B,mCAAmC;AACnC,IAAO,aAAa,GAAG,sBAAS,CAAC,aAAa,CAAA;AAC9C,mCAA6B;AAC7B,qCAA8B;AAC9B,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AAEtB,IAAI,GAAa,CAAA;AACjB,IAAI,OAAmB,CAAA;AAEvB,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAA,cAAM,EAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;YAClD,OAAO,GAAG,IAAI,oBAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,oCAAwB,EAAE,EAAE,KAAK,CAAC,CAAA;QACnF,CAAC;KAAA,CAAC,CAAA;IAEF,SAAS,mBAAmB,CAAC,YAAoC;QAC/D,OAAO,IAAI,oBAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;IAC9D,CAAC;IAED,EAAE,CAAC,kGAAkG,EAAE,GAAS,EAAE;QAChH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAA;QAClD,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,MAAM,YAAY,GAAG,qCAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE;YAC3E,SAAS,EAAE,CAAO,eAAiC,EAAE,gBAAqC,EAAE,EAAE;gBAC5F,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,QAAQ,CAAC,CAAA;gBAC3D,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,gBAAgB,CAAC,CAAA;gBACnE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,iBAAiB,CAAC,CAAA;gBACpE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,kCAAc,CAAC,+BAA+B,CAAC,CAAA;gBACtF,IAAI,KAAK,IAAI,CAAC,EAAE;oBACd,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;iBACrC;qBAAM,IAAI,KAAK,IAAI,CAAC,EAAE;oBACrB,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;oBAC1C,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;oBACnD,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,kCAAc,CAAC,gBAAgB,CAAC,CAAA;iBACjF;;oBAAM,IAAA,aAAI,EAAC,+BAA+B,KAAK,EAAE,CAAC,CAAA;gBACnD,OAAO,KAAK,EAAE,IAAI,CAAC;oBACjB,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,kCAAc,CAAC,gBAAgB,EAAE,CAAC,2BAA2B;oBAC7F,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,kCAAc,CAAC,gBAAgB,EAAE,CAAA;YAClF,CAAC,CAAA;SACF,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAA;QAC3C,IAAA,aAAM,EAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;QAChE,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3B,CAAC,CAAA,CAAC,CAAA;IAEF,IAAA,qBAAQ,EACN,8IAA8I,EAC9I,GAAS,EAAE;QACT,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QACtD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,IAAA,mBAAU,GAAE,CAAA;QAC9B,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAA;QAC3B,MAAM,sBAAsB,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,iCAC5D,WAAW,KACd,YAAY,EAAE,MAAM,EACpB,oBAAoB,EAAE;gBACpB,uBAAuB,EAAE;oBACvB,KAAK,EAAE,SAAS;oBAChB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;oBACxB,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;iBAC3B;aACF,IACD,CAAA;QACF,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,MAAM,YAAY,GAAG,qCAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE;YAC3E,SAAS,EAAE,CAAO,eAAiC,EAAE,gBAAqC,EAAE,EAAE;gBAC5F,IAAI,KAAK,IAAI,CAAC,EAAE;oBACd,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,QAAQ,CAAC,CAAA;oBAC3D,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,gBAAgB,CAAC,CAAA;oBACnE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,iBAAiB,CAAC,CAAA;oBACpE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,kCAAc,CAAC,+BAA+B,CAAC,CAAA;oBACtF,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;oBACpC,KAAK,EAAE,CAAA;oBACP,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,kCAAc,CAAC,gBAAgB,EAAE,CAAA;iBACzE;qBAAM,IAAI,KAAK,IAAI,CAAC,EAAE;oBACrB,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,QAAQ,CAAC,CAAA;oBAC3D,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,kCAAc,CAAC,gBAAgB,CAAC,CAAA;oBACvE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,iBAAiB,CAAC,CAAA;oBACpE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,kCAAc,CAAC,+BAA+B,CAAC,CAAA;oBACtF,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;oBACpC,KAAK,EAAE,CAAA;oBACP,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,kCAAc,CAAC,QAAQ,EAAE,CAAA;iBAC9D;;oBAAM,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAA;YAChE,CAAC,CAAA;SACF,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAA;QACjD,IAAA,aAAM,EAAC,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAA;QACjF,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,KAAK,GAAG,IAAA,mBAAU,GAAE,CAAA;QAC1B,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,UAAU,iCAAM,sBAAsB,KAAE,YAAY,EAAE,KAAK,IAAG,CAAA;QAClG,IAAA,aAAM,EAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAA;QAClE,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,kBAAkB,GAAG,MAAM,mBAAmB,CAAC,IAAI,uCAA2B,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,CAAA;QAC/H,IAAA,aAAM,EAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAC1D,MAAM,sBAAsB,GAAG,MAAM,mBAAmB,CAAC,IAAI,uCAA2B,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;aAChH,cAAc,EAAE;aAChB,IAAI,CACH,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAA;QACH,IAAA,aAAM,EAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;IAC5C,CAAC,CAAA,CACF,CAAA;IAED,IAAA,qBAAQ,EAAC,0EAA0E,EAAE,GAAS,EAAE;QAC9F,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QACtD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QAC1C,MAAM,UAAU,GAAG,kBAAkB,CAAA,CAAC,iEAAiE;QACvG,MAAM,IAAI,GAAG,IAAI,cAAI,CAAC;YACpB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAA;QAC3B,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAG,EAAE,UAAU,CAAC,CAAA;QAC9D,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,iCACtD,WAAW,KACd,YAAY,EAAE,MAAM,IACpB,CAAA;QACF,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,MAAM,YAAY,GAAG,qCAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE;YAC3E,SAAS,EAAE,CAAO,eAAiC,EAAE,gBAAqC,EAAE,EAAE;gBAC5F,IAAI,KAAK,IAAI,CAAC,EAAE;oBACd,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,QAAQ,CAAC,CAAA;oBAC3D,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,gBAAgB,CAAC,CAAA;oBACnE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAc,CAAC,iBAAiB,CAAC,CAAA;oBACpE,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,kCAAc,CAAC,+BAA+B,CAAC,CAAA;oBACtF,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;oBACpC,KAAK,EAAE,CAAA;oBACP,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,kCAAc,CAAC,QAAQ,EAAE,CAAA;iBAC9D;qBAAM,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE;oBACnC,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,kCAAc,CAAC,+BAA+B,CAAC,CAAC,CAAA;oBACzF,IAAI,KAAK,IAAI,CAAC;wBAAE,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;oBACpD,IAAI,KAAK,IAAI,CAAC;wBAAE,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;oBAC1D,OAAO,KAAK,EAAE,IAAI,CAAC;wBACjB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,kCAAc,CAAC,+BAA+B,EAAE;wBAC/F,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,kCAAc,CAAC,+BAA+B,EAAE,CAAA;iBAC3F;;oBAAM,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAA;YAChE,CAAC,CAAA;SACF,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAA;QACjD,IAAA,aAAM,EAAC,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAC3E,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3B,CAAC,CAAA,CAAC,CAAA;IAEF,IAAA,qBAAQ,EAAC,oDAAoD,EAAE,GAAS,EAAE;QACxE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QACtD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QAC1C,MAAM,UAAU,GAAG,kBAAkB,CAAA,CAAC,iEAAiE;QACvG,MAAM,IAAI,GAAG,IAAI,cAAI,CAAC;YACpB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAA;QAC3B,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAG,EAAE,UAAU,CAAC,CAAA;QAC9D,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,iCACtD,WAAW,KACd,YAAY,EAAE,MAAM,IACpB,CAAA;QACF,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,MAAM,YAAY,GAAG,qCAAiB,CAAC,UAAU,CAC/C,OAAO,EACP,WAAW,CAAC,IAAI,EAChB;YACE,SAAS,EAAE,CAAO,eAAiC,EAAE,gBAAqC,EAAE,EAAE;gBAC5F,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,kCAAc,CAAC,+BAA+B,CAAC,CAAC,CAAA;gBACzF,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;gBACpC,IAAA,aAAM,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,kCAAc,CAAC,+BAA+B,EAAE,CAAA;YAC/F,CAAC,CAAA;SACF,EACD;YACE,aAAa,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;SACvC,CACF,CAAA;QACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAA;QACjD,IAAA,aAAM,EAAC,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAC3E,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3B,CAAC,CAAA,CAAC,CAAA;IAEF,IAAA,qBAAQ,EAAC,mGAAmG,EAAE,GAAS,EAAE;;QACvH,MAAM,OAAO,GAAG,MAAM,IAAA,uCAA0B,EAAC,GAAG,CAAC,CAAA;QACrD,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,MAAM,YAAY,GAAG,qCAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE;YAC5E,SAAS,EAAE,CAAO,eAAiC,EAAE,gBAAqC,EAAE,EAAE;gBAC5F,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,kCAAc,CAAC,QAAQ,CAAC,CAAA;gBAChE,IAAA,aAAM,EAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;gBACpC,IAAA,aAAM,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,kCAAc,CAAC,QAAQ,EAAE,CAAA;YACzE,CAAC,CAAA;SACF,CAAC,CAAA;QACF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAA;QAC7D,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,cAAc,EAAE,CAAA;QACnE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAA;QAC1G,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,gBAAgB,EAAE,CAAA;QAC5D,MAAM,eAAe,GAAG,mBAAmB,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,YAAa,EAAE,OAAO,CAAC,CAAC,CAAA;QACnG,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,cAAc,EAAE,CAAA;QAC3D,IAAA,aAAM,EAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;QACzD,IAAA,aAAM,EAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QACnD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,UAAU,iCAClD,YAAY,KACf,oBAAoB,EAAE;gBACpB,WAAW,EAAE;oBACX,KAAK,EAAE,IAAA,mBAAU,GAAE;oBACnB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;oBACxB,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;iBAC3B;aACF,IACD,CAAA;QACF,IAAA,aAAM,EAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;QACzD,IAAA,aAAM,EAAC,MAAM,CAAC,IAAI,CAAC,MAAA,cAAc,CAAC,oBAAoB,mCAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAA;IAChF,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { getEnvVariables, TestVars } from '@icure/test-setup/types'\nimport { before } from 'mocha'\nimport { createNewHcpApi, createUserInMultipleGroups, getEnvironmentInitializer, itNoLite, setLocalStorage, TestUtils } from '../../utils/test_utils'\nimport { AuthenticationProvider, BasicAuthenticationProvider, NoAuthenticationProvider } from '../../../icc-x-api'\nimport { IccAuthApi, IccUserApi } from '../../../icc-api'\nimport 'isomorphic-fetch'\nimport { AuthSecretDetails, AuthSecretType, SmartAuthProvider } from '../../../icc-x-api/auth/SmartAuthProvider'\nimport { expect } from 'chai'\nimport { randomUUID } from 'crypto'\nimport initMasterApi = TestUtils.initMasterApi\nimport { fail } from 'assert'\nimport { TOTP } from 'otpauth'\nsetLocalStorage(fetch)\n\nlet env: TestVars\nlet authApi: IccAuthApi\n\ndescribe('Smart authentication provider', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n    authApi = new IccAuthApi(env.iCureUrl, {}, new NoAuthenticationProvider(), fetch)\n  })\n\n  function userApiWithProvider(authProvider: AuthenticationProvider): IccUserApi {\n    return new IccUserApi(env.iCureUrl, {}, authProvider, fetch)\n  }\n\n  it('Should automatically ask for secret to get a new token, and reasks the secret if it is not valid', async () => {\n    const { credentials } = await createNewHcpApi(env)\n    let calls = 0\n    const authProvider = SmartAuthProvider.initialise(authApi, credentials.user, {\n      getSecret: async (acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[]) => {\n        expect(acceptedSecrets).to.include(AuthSecretType.PASSWORD)\n        expect(acceptedSecrets).to.include(AuthSecretType.LONG_LIVED_TOKEN)\n        expect(acceptedSecrets).to.include(AuthSecretType.SHORT_LIVED_TOKEN)\n        expect(acceptedSecrets).to.not.include(AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)\n        if (calls == 0) {\n          expect(previousAttempts).to.be.empty\n        } else if (calls == 1) {\n          expect(previousAttempts).to.have.length(1)\n          expect(previousAttempts[0].value).to.equal('wrong')\n          expect(previousAttempts[0].secretType).to.equal(AuthSecretType.LONG_LIVED_TOKEN)\n        } else fail(`Unexpected number of calls: ${calls}`)\n        return calls++ == 0\n          ? { value: 'wrong', secretType: AuthSecretType.LONG_LIVED_TOKEN } // pragma: allowlist secret\n          : { value: credentials.password, secretType: AuthSecretType.LONG_LIVED_TOKEN }\n      },\n    })\n    const userApi = userApiWithProvider(authProvider)\n    const user = await userApi.getCurrentUser()\n    expect(user.healthcarePartyId).to.equal(credentials.dataOwnerId)\n    expect(calls).to.equal(2)\n  })\n\n  itNoLite(\n    'Should automatically ask for a more powerful secret to perform elevated-security operations if the available secret/token is not good enough',\n    async () => {\n      const { credentials, api } = await createNewHcpApi(env)\n      const initialUser = await api.userApi.getCurrentUser()\n      const masterApi = await initMasterApi(env)\n      const userToken = randomUUID()\n      const userPw = randomUUID()\n      const userWithLongTokenAndPw = await masterApi.userApi.modifyUser({\n        ...initialUser,\n        passwordHash: userPw,\n        authenticationTokens: {\n          'test-long-lived-token': {\n            token: userToken,\n            creationTime: Date.now(),\n            validity: 60 * 60 * 24 * 7,\n          },\n        },\n      })\n      let calls = 0\n      const authProvider = SmartAuthProvider.initialise(authApi, credentials.user, {\n        getSecret: async (acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[]) => {\n          if (calls == 0) {\n            expect(acceptedSecrets).to.include(AuthSecretType.PASSWORD)\n            expect(acceptedSecrets).to.include(AuthSecretType.LONG_LIVED_TOKEN)\n            expect(acceptedSecrets).to.include(AuthSecretType.SHORT_LIVED_TOKEN)\n            expect(acceptedSecrets).to.not.include(AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)\n            expect(previousAttempts).to.be.empty\n            calls++\n            return { value: userToken, secretType: AuthSecretType.LONG_LIVED_TOKEN }\n          } else if (calls == 1) {\n            expect(acceptedSecrets).to.include(AuthSecretType.PASSWORD)\n            expect(acceptedSecrets).to.not.include(AuthSecretType.LONG_LIVED_TOKEN)\n            expect(acceptedSecrets).to.include(AuthSecretType.SHORT_LIVED_TOKEN)\n            expect(acceptedSecrets).to.not.include(AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)\n            expect(previousAttempts).to.be.empty\n            calls++\n            return { value: userPw, secretType: AuthSecretType.PASSWORD }\n          } else throw new Error(`Unexpected number of calls: ${calls}`)\n        },\n      })\n      const userApi = userApiWithProvider(authProvider)\n      expect((await userApi.getCurrentUser()).rev).to.equal(userWithLongTokenAndPw.rev)\n      expect(calls).to.equal(1)\n      const newPw = randomUUID()\n      const userWithNewPw = await userApi.modifyUser({ ...userWithLongTokenAndPw, passwordHash: newPw })\n      expect(userWithNewPw.rev).to.not.equal(userWithLongTokenAndPw.rev)\n      expect(calls).to.equal(2)\n      const retrievedWithNewPw = await userApiWithProvider(new BasicAuthenticationProvider(credentials.user, newPw)).getCurrentUser()\n      expect(retrievedWithNewPw.rev).to.equal(userWithNewPw.rev)\n      const couldRetrieveWithOldPw = await userApiWithProvider(new BasicAuthenticationProvider(credentials.user, userPw))\n        .getCurrentUser()\n        .then(\n          () => true,\n          () => false\n        )\n      expect(couldRetrieveWithOldPw).to.be.false\n    }\n  )\n\n  itNoLite('Should automatically ask for TOTP after password if user has 2fa enabled', async () => {\n    const { credentials, api } = await createNewHcpApi(env)\n    const initialUser = await api.userApi.getCurrentUser()\n    const masterApi = await initMasterApi(env)\n    const totpSecret = 'AAPX7PW2RJIGZ3D4' // pragma: allowlist secret (fake secret generated only for test)\n    const totp = new TOTP({\n      algorithm: 'SHA1',\n      digits: 6,\n      period: 30,\n      secret: totpSecret,\n    })\n    const userPw = randomUUID()\n    await masterApi.userApi.enable2fa(initialUser.id!, totpSecret)\n    const userWithPwAnd2fa = await masterApi.userApi.modifyUser({\n      ...initialUser,\n      passwordHash: userPw,\n    })\n    let calls = 0\n    const authProvider = SmartAuthProvider.initialise(authApi, credentials.user, {\n      getSecret: async (acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[]) => {\n        if (calls == 0) {\n          expect(acceptedSecrets).to.include(AuthSecretType.PASSWORD)\n          expect(acceptedSecrets).to.include(AuthSecretType.LONG_LIVED_TOKEN)\n          expect(acceptedSecrets).to.include(AuthSecretType.SHORT_LIVED_TOKEN)\n          expect(acceptedSecrets).to.not.include(AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)\n          expect(previousAttempts).to.be.empty\n          calls++\n          return { value: userPw, secretType: AuthSecretType.PASSWORD }\n        } else if (calls == 1 || calls == 2) {\n          expect(acceptedSecrets).to.have.members([AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN])\n          if (calls == 1) expect(previousAttempts).to.be.empty\n          if (calls == 2) expect(previousAttempts).to.have.length(1)\n          return calls++ == 1\n            ? { value: totp.generate() + '13', secretType: AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN }\n            : { value: totp.generate(), secretType: AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN }\n        } else throw new Error(`Unexpected number of calls: ${calls}`)\n      },\n    })\n    const userApi = userApiWithProvider(authProvider)\n    expect((await userApi.getCurrentUser()).rev).to.equal(userWithPwAnd2fa.rev)\n    expect(calls).to.equal(3)\n  })\n\n  itNoLite('Should ask for TOTP directly if password is cached', async () => {\n    const { credentials, api } = await createNewHcpApi(env)\n    const initialUser = await api.userApi.getCurrentUser()\n    const masterApi = await initMasterApi(env)\n    const totpSecret = 'AAPX7PW2RJIGZ3D4' // pragma: allowlist secret (fake secret generated only for test)\n    const totp = new TOTP({\n      algorithm: 'SHA1',\n      digits: 6,\n      period: 30,\n      secret: totpSecret,\n    })\n    const userPw = randomUUID()\n    await masterApi.userApi.enable2fa(initialUser.id!, totpSecret)\n    const userWithPwAnd2fa = await masterApi.userApi.modifyUser({\n      ...initialUser,\n      passwordHash: userPw,\n    })\n    let calls = 0\n    const authProvider = SmartAuthProvider.initialise(\n      authApi,\n      credentials.user,\n      {\n        getSecret: async (acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[]) => {\n          expect(acceptedSecrets).to.have.members([AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN])\n          expect(previousAttempts).to.be.empty\n          expect(calls++).to.equal(0)\n          return { value: totp.generate(), secretType: AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN }\n        },\n      },\n      {\n        initialSecret: { plainSecret: userPw },\n      }\n    )\n    const userApi = userApiWithProvider(authProvider)\n    expect((await userApi.getCurrentUser()).rev).to.equal(userWithPwAnd2fa.rev)\n    expect(calls).to.equal(1)\n  })\n\n  itNoLite('Switched provider should keep cached secrets and should be able to have elevated security context', async () => {\n    const details = await createUserInMultipleGroups(env)\n    let calls = 0\n    const authProvider = SmartAuthProvider.initialise(authApi, details.userLogin, {\n      getSecret: async (acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[]) => {\n        expect(acceptedSecrets).to.have.include(AuthSecretType.PASSWORD)\n        expect(previousAttempts).to.be.empty\n        expect(calls++).to.equal(0)\n        return { value: details.userPw12, secretType: AuthSecretType.PASSWORD }\n      },\n    })\n    const defaultGroupUserApi = userApiWithProvider(authProvider)\n    const defaultGroupUser = await defaultGroupUserApi.getCurrentUser()\n    const otherGroupId = details.group1.id == defaultGroupUser.groupId ? details.group2.id : details.group1.id\n    const matches = await defaultGroupUserApi.getMatchingUsers()\n    const switchedUserApi = userApiWithProvider(await authProvider.switchGroup(otherGroupId!, matches))\n    const switchedUser = await switchedUserApi.getCurrentUser()\n    expect(switchedUser.id).to.not.equal(defaultGroupUser.id)\n    expect(switchedUser.groupId).to.equal(otherGroupId)\n    const updatedDefault = await switchedUserApi.modifyUser({\n      ...switchedUser,\n      authenticationTokens: {\n        'new-token': {\n          token: randomUUID(),\n          creationTime: Date.now(),\n          validity: 60 * 60 * 24 * 7,\n        },\n      },\n    })\n    expect(updatedDefault.rev).to.not.equal(switchedUser.rev)\n    expect(Object.keys(updatedDefault.authenticationTokens ?? {})).to.not.be.empty\n  })\n})\n"]}

package/test/icc-x-api/autofix-anonymity-test.d.ts

@@ -0,0 +1 @@
+import 'isomorphic-fetch';

package/test/icc-x-api/autofix-anonymity-test.js

@@ -0,0 +1,108 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const mocha_1 = require("mocha");
+const test_utils_1 = require("../utils/test_utils");
+const types_1 = require("@icure/test-setup/types");
+const DataOwnerTypeEnum_1 = require("../../icc-api/model/DataOwnerTypeEnum");
+const icc_x_api_1 = require("../../icc-x-api");
+const chai_1 = require("chai");
+const TestStorage_1 = require("../utils/TestStorage");
+const crypto_1 = require("crypto");
+require("isomorphic-fetch");
+(0, test_utils_1.setLocalStorage)(fetch);
+let env;
+describe('Autofix anonymity tests', () => {
+    (0, mocha_1.before)(function () {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.timeout(600000);
+            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
+            env = yield initializer.execute((0, types_1.getEnvVariables)());
+        });
+    });
+    function initApi(dataOwnerType, isAnonymous) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const cryptoStrats = {
+                dataOwnerRequiresAnonymousDelegation(dataOwner) {
+                    if (isAnonymous)
+                        return dataOwner.type == dataOwnerType;
+                    else
+                        return false;
+                },
+                generateNewKeyForDataOwner(self, cryptoPrimitives) {
+                    throw new Error('This method should not be necessary for this test');
+                },
+                recoverAndVerifySelfHierarchyKeys(keysData, cryptoPrimitives) {
+                    throw new Error('This method should not be necessary for this test');
+                },
+                verifyDelegatePublicKeys(delegate, publicKeys, cryptoPrimitives) {
+                    return Promise.resolve(publicKeys);
+                },
+            };
+            let userDetails;
+            if (dataOwnerType == DataOwnerTypeEnum_1.DataOwnerTypeEnum.Patient) {
+                userDetails = (yield (0, test_utils_1.createNewPatientApi)(env)).credentials;
+            }
+            else if (dataOwnerType == DataOwnerTypeEnum_1.DataOwnerTypeEnum.Hcp) {
+                userDetails = (yield (0, test_utils_1.createNewHcpApi)(env)).credentials;
+            }
+            else
+                throw new Error('Unsupported data owner type');
+            const storage = yield (0, TestStorage_1.testStorageWithKeys)([
+                {
+                    dataOwnerId: userDetails.dataOwnerId,
+                    pairs: [{ keyPair: { publicKey: userDetails.publicKey, privateKey: userDetails.privateKey }, shaVersion: icc_x_api_1.ShaVersion.Sha1 }],
+                },
+            ]);
+            const api = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, { username: userDetails.user, password: userDetails.password }, cryptoStrats, crypto_1.webcrypto, fetch, {
+                keyStorage: storage.keyStorage,
+                entryKeysFactory: storage.keyFactory,
+                storage: storage.storage,
+            });
+            (0, chai_1.expect)((yield api.dataOwnerApi.getCurrentDataOwnerStub()).type).to.eq(dataOwnerType);
+            return api;
+        });
+    }
+    function doTest(dataOwnerType, isAnonymous) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const api = yield initApi(dataOwnerType, isAnonymous);
+            const user = yield api.userApi.getCurrentUser();
+            const createdWithNewInstance = yield api.patientApi.createPatientWithUser(user, yield api.patientApi.newInstance(user, { firstName: 'q', lastName: 'q' }));
+            const createdByBackend = yield api.agendaApi.createAgenda({ id: api.cryptoApi.primitives.randomUuid(), name: 'whatever' });
+            if (isAnonymous) {
+                (0, chai_1.expect)(createdWithNewInstance.author).to.eq('*');
+                (0, chai_1.expect)(createdWithNewInstance.responsible).to.eq('*');
+                (0, chai_1.expect)(createdByBackend.author).to.eq('*');
+                (0, chai_1.expect)(createdByBackend.responsible).to.eq('*');
+            }
+            else {
+                const doId = api.dataOwnerApi.getDataOwnerIdOf(user);
+                (0, chai_1.expect)(createdWithNewInstance.author).to.eq(user.id);
+                (0, chai_1.expect)(createdWithNewInstance.responsible).to.eq(doId);
+                (0, chai_1.expect)(createdByBackend.author).to.eq(user.id);
+                (0, chai_1.expect)(createdByBackend.responsible).to.eq(doId);
+            }
+        });
+    }
+    it('Entity created by a patient should omit author and responsible if crypto strategies require anonymous delegations for the user', () => __awaiter(void 0, void 0, void 0, function* () {
+        yield doTest(DataOwnerTypeEnum_1.DataOwnerTypeEnum.Patient, true);
+    }));
+    it('Entity created by a patient should autofix author and responsible if crypto strategies does not require anonymous delegations for the user', () => __awaiter(void 0, void 0, void 0, function* () {
+        yield doTest(DataOwnerTypeEnum_1.DataOwnerTypeEnum.Patient, false);
+    }));
+    it('Entity created by a HCP should omit author and responsible if crypto strategies require anonymous delegations for the user', () => __awaiter(void 0, void 0, void 0, function* () {
+        yield doTest(DataOwnerTypeEnum_1.DataOwnerTypeEnum.Hcp, true);
+    }));
+    it('Entity created by a HCP should autofix author and responsible if crypto strategies does not require anonymous delegations for the user', () => __awaiter(void 0, void 0, void 0, function* () {
+        yield doTest(DataOwnerTypeEnum_1.DataOwnerTypeEnum.Hcp, false);
+    }));
+});
+//# sourceMappingURL=autofix-anonymity-test.js.map

package/test/icc-x-api/autofix-anonymity-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofix-anonymity-test.js","sourceRoot":"","sources":["../../../test/icc-x-api/autofix-anonymity-test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,iCAA8B;AAC9B,oDAAsH;AACtH,mDAAgF;AAChF,6EAAyE;AACzE,+CAAmG;AACnG,+BAA6B;AAG7B,sDAA0D;AAC1D,mCAAkC;AAElC,4BAAyB;AAEzB,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AAEtB,IAAI,GAAa,CAAA;AAEjB,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,IAAA,cAAM,EAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,SAAe,OAAO,CAAC,aAAgC,EAAE,WAAoB;;YAC3E,MAAM,YAAY,GAAqB;gBACrC,oCAAoC,CAAC,SAAkC;oBACrE,IAAI,WAAW;wBAAE,OAAO,SAAS,CAAC,IAAI,IAAI,aAAa,CAAA;;wBAClD,OAAO,KAAK,CAAA;gBACnB,CAAC;gBACD,0BAA0B,CAAC,IAAuB,EAAE,gBAAkC;oBACpF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;gBACtE,CAAC;gBACD,iCAAiC,CAC/B,QAIG,EACH,gBAAkC;oBAIlC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;gBACtE,CAAC;gBACD,wBAAwB,CAAC,QAAiC,EAAE,UAAoB,EAAE,gBAAkC;oBAClH,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;gBACpC,CAAC;aACF,CAAA;YACD,IAAI,WAAwB,CAAA;YAC5B,IAAI,aAAa,IAAI,qCAAiB,CAAC,OAAO,EAAE;gBAC9C,WAAW,GAAG,CAAC,MAAM,IAAA,gCAAmB,EAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAA;aAC3D;iBAAM,IAAI,aAAa,IAAI,qCAAiB,CAAC,GAAG,EAAE;gBACjD,WAAW,GAAG,CAAC,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAA;aACvD;;gBAAM,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YACrD,MAAM,OAAO,GAAG,MAAM,IAAA,iCAAmB,EAAC;gBACxC;oBACE,WAAW,EAAE,WAAW,CAAC,WAAW;oBACpC,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,sBAAU,CAAC,IAAI,EAAE,CAAC;iBAC5H;aACF,CAAC,CAAA;YACF,MAAM,GAAG,GAAG,MAAM,oBAAQ,CAAC,UAAU,CACnC,GAAG,CAAC,QAAQ,EACZ,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,EAC9D,YAAY,EACZ,kBAAgB,EAChB,KAAK,EACL;gBACE,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,gBAAgB,EAAE,OAAO,CAAC,UAAU;gBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CACF,CAAA;YACD,IAAA,aAAM,EAAC,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAA;YACpF,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;IAED,SAAe,MAAM,CAAC,aAAgC,EAAE,WAAoB;;YAC1E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;YACrD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAC/C,MAAM,sBAAsB,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,qBAAqB,CACvE,IAAI,EACJ,MAAM,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAC1E,CAAA;YACD,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;YAC1H,IAAI,WAAW,EAAE;gBACf,IAAA,aAAM,EAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;gBAChD,IAAA,aAAM,EAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;gBACrD,IAAA,aAAM,EAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;gBAC1C,IAAA,aAAM,EAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;aAChD;iBAAM;gBACL,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;gBACpD,IAAA,aAAM,EAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACpD,IAAA,aAAM,EAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;gBACtD,IAAA,aAAM,EAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAC9C,IAAA,aAAM,EAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;aACjD;QACH,CAAC;KAAA;IAED,EAAE,CAAC,gIAAgI,EAAE,GAAS,EAAE;QAC9I,MAAM,MAAM,CAAC,qCAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,4IAA4I,EAAE,GAAS,EAAE;QAC1J,MAAM,MAAM,CAAC,qCAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAChD,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,4HAA4H,EAAE,GAAS,EAAE;QAC1I,MAAM,MAAM,CAAC,qCAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC3C,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,wIAAwI,EAAE,GAAS,EAAE;QACtJ,MAAM,MAAM,CAAC,qCAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC5C,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { before } from 'mocha'\nimport { createNewHcpApi, createNewPatientApi, getEnvironmentInitializer, setLocalStorage } from '../utils/test_utils'\nimport { getEnvVariables, TestVars, UserDetails } from '@icure/test-setup/types'\nimport { DataOwnerTypeEnum } from '../../icc-api/model/DataOwnerTypeEnum'\nimport { CryptoPrimitives, CryptoStrategies, IcureApi, KeyPair, ShaVersion } from '../../icc-x-api'\nimport { expect } from 'chai'\nimport { CryptoActorStubWithType } from '../../icc-api/model/CryptoActorStub'\nimport { DataOwnerWithType } from '../../icc-api/model/DataOwnerWithType'\nimport { testStorageWithKeys } from '../utils/TestStorage'\nimport { webcrypto } from 'crypto'\n\nimport 'isomorphic-fetch'\n\nsetLocalStorage(fetch)\n\nlet env: TestVars\n\ndescribe('Autofix anonymity tests', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  async function initApi(dataOwnerType: DataOwnerTypeEnum, isAnonymous: boolean): Promise<IcureApi> {\n    const cryptoStrats: CryptoStrategies = {\n      dataOwnerRequiresAnonymousDelegation(dataOwner: CryptoActorStubWithType): boolean {\n        if (isAnonymous) return dataOwner.type == dataOwnerType\n        else return false\n      },\n      generateNewKeyForDataOwner(self: DataOwnerWithType, cryptoPrimitives: CryptoPrimitives): Promise<KeyPair<CryptoKey> | boolean> {\n        throw new Error('This method should not be necessary for this test')\n      },\n      recoverAndVerifySelfHierarchyKeys(\n        keysData: {\n          dataOwner: DataOwnerWithType\n          unknownKeys: string[]\n          unavailableKeys: string[]\n        }[],\n        cryptoPrimitives: CryptoPrimitives\n      ): Promise<{\n        [p: string]: { recoveredKeys: { [p: string]: KeyPair<CryptoKey> }; keyAuthenticity: { [p: string]: boolean } }\n      }> {\n        throw new Error('This method should not be necessary for this test')\n      },\n      verifyDelegatePublicKeys(delegate: CryptoActorStubWithType, publicKeys: string[], cryptoPrimitives: CryptoPrimitives): Promise<string[]> {\n        return Promise.resolve(publicKeys)\n      },\n    }\n    let userDetails: UserDetails\n    if (dataOwnerType == DataOwnerTypeEnum.Patient) {\n      userDetails = (await createNewPatientApi(env)).credentials\n    } else if (dataOwnerType == DataOwnerTypeEnum.Hcp) {\n      userDetails = (await createNewHcpApi(env)).credentials\n    } else throw new Error('Unsupported data owner type')\n    const storage = await testStorageWithKeys([\n      {\n        dataOwnerId: userDetails.dataOwnerId,\n        pairs: [{ keyPair: { publicKey: userDetails.publicKey, privateKey: userDetails.privateKey }, shaVersion: ShaVersion.Sha1 }],\n      },\n    ])\n    const api = await IcureApi.initialise(\n      env.iCureUrl,\n      { username: userDetails.user, password: userDetails.password },\n      cryptoStrats,\n      webcrypto as any,\n      fetch,\n      {\n        keyStorage: storage.keyStorage,\n        entryKeysFactory: storage.keyFactory,\n        storage: storage.storage,\n      }\n    )\n    expect((await api.dataOwnerApi.getCurrentDataOwnerStub()).type).to.eq(dataOwnerType)\n    return api\n  }\n\n  async function doTest(dataOwnerType: DataOwnerTypeEnum, isAnonymous: boolean) {\n    const api = await initApi(dataOwnerType, isAnonymous)\n    const user = await api.userApi.getCurrentUser()\n    const createdWithNewInstance = await api.patientApi.createPatientWithUser(\n      user,\n      await api.patientApi.newInstance(user, { firstName: 'q', lastName: 'q' })\n    )\n    const createdByBackend = await api.agendaApi.createAgenda({ id: api.cryptoApi.primitives.randomUuid(), name: 'whatever' })\n    if (isAnonymous) {\n      expect(createdWithNewInstance.author).to.eq('*')\n      expect(createdWithNewInstance.responsible).to.eq('*')\n      expect(createdByBackend.author).to.eq('*')\n      expect(createdByBackend.responsible).to.eq('*')\n    } else {\n      const doId = api.dataOwnerApi.getDataOwnerIdOf(user)\n      expect(createdWithNewInstance.author).to.eq(user.id)\n      expect(createdWithNewInstance.responsible).to.eq(doId)\n      expect(createdByBackend.author).to.eq(user.id)\n      expect(createdByBackend.responsible).to.eq(doId)\n    }\n  }\n\n  it('Entity created by a patient should omit author and responsible if crypto strategies require anonymous delegations for the user', async () => {\n    await doTest(DataOwnerTypeEnum.Patient, true)\n  })\n\n  it('Entity created by a patient should autofix author and responsible if crypto strategies does not require anonymous delegations for the user', async () => {\n    await doTest(DataOwnerTypeEnum.Patient, false)\n  })\n\n  it('Entity created by a HCP should omit author and responsible if crypto strategies require anonymous delegations for the user', async () => {\n    await doTest(DataOwnerTypeEnum.Hcp, true)\n  })\n\n  it('Entity created by a HCP should autofix author and responsible if crypto strategies does not require anonymous delegations for the user', async () => {\n    await doTest(DataOwnerTypeEnum.Hcp, false)\n  })\n})\n"]}

package/test/icc-x-api/confidential-entities-test.d.ts

@@ -0,0 +1 @@
+import 'isomorphic-fetch';