@icure/api 8.11.0 → 8.12.0

package/test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.js

@@ -1,166 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const icc_x_api_1 = require("../../../icc-x-api");
-const CalendarItem_1 = require("../../../icc-api/model/CalendarItem");
-const models_1 = require("../../../icc-api/model/models");
-const mocha_1 = require("mocha");
-const crypto_1 = require("crypto");
-require("isomorphic-fetch");
-const chai_1 = require("chai");
-const MaintenanceTaskAfterDateFilter_1 = require("../../../icc-x-api/filters/MaintenanceTaskAfterDateFilter");
-const test_utils_1 = require("../../utils/test_utils");
-const TestStorage_1 = require("../../utils/TestStorage");
-const TestCryptoStrategies_1 = require("../../utils/TestCryptoStrategies");
-const KeyPairUpdateRequest_1 = require("../../../icc-x-api/maintenance/KeyPairUpdateRequest");
-const SecureDelegation_1 = require("../../../icc-api/model/SecureDelegation");
-const types_1 = require("@icure/test-setup/types");
-var AccessLevel = SecureDelegation_1.SecureDelegation.AccessLevelEnum;
-function _getHcpKeyUpdateMaintenanceTask(delegateApi) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const delegateUser = yield delegateApi.userApi.getCurrentUser();
-        const notifications = yield delegateApi.maintenanceTaskApi.filterMaintenanceTasksByWithUser(delegateUser, undefined, undefined, new models_1.FilterChainMaintenanceTask({
-            filter: new MaintenanceTaskAfterDateFilter_1.MaintenanceTaskAfterDateFilter({
-                date: new Date().getTime() - 100000,
-            }),
-        }));
-        return notifications.rows.sort((a, b) => a.created - b.created)[notifications.rows.length - 1];
-    });
-}
-(0, test_utils_1.setLocalStorage)(fetch);
-let env;
-(0, mocha_1.describe)('Full battery of tests on crypto and keys', function () {
-    return __awaiter(this, void 0, void 0, function* () {
-        (0, mocha_1.before)(function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                this.timeout(600000);
-                const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
-                env = yield initializer.execute((0, types_1.getEnvVariables)());
-            });
-        });
-        // TODO should give access back to old and new keys
-        (0, mocha_1.it)(`Create calendar item as a patient and get access back`, () => __awaiter(this, void 0, void 0, function* () {
-            function decryptDataForPair(api, dataOwner1, dataOwner2) {
-                return __awaiter(this, void 0, void 0, function* () {
-                    const allExchangeData = [
-                        ...(yield api.cryptoApi.exchangeData.base.getExchangeDataByDelegatorDelegatePair(dataOwner1, dataOwner2)),
-                        ...(yield api.cryptoApi.exchangeData.base.getExchangeDataByDelegatorDelegatePair(dataOwner2, dataOwner1)),
-                    ];
-                    let failedDecryptionsCount = 0;
-                    const successfulDecryptions = [];
-                    for (const exchangeData of allExchangeData) {
-                        const decryptedKey = yield api.cryptoApi.exchangeData.base.tryDecryptExchangeKeys([exchangeData], api.cryptoApi.userKeysManager.getDecryptionKeys());
-                        const decryptedAccessControlSecret = yield api.cryptoApi.exchangeData.base.tryDecryptAccessControlSecret([exchangeData], api.cryptoApi.userKeysManager.getDecryptionKeys());
-                        if (decryptedKey.failedDecryptions.length > 0 || decryptedAccessControlSecret.failedDecryptions.length > 0) {
-                            failedDecryptionsCount++;
-                        }
-                        else {
-                            successfulDecryptions.push({
-                                rawKey: (0, icc_x_api_1.ua2hex)(yield api.cryptoApi.primitives.AES.exportKey(decryptedKey.successfulDecryptions[0], 'raw')),
-                                accessControlSecret: decryptedAccessControlSecret.successfulDecryptions[0],
-                            });
-                        }
-                    }
-                    return { failedDecryptionsCount, successfulDecryptions };
-                });
-            }
-            function checkDecryptedDataHas(decryptedData, expected) {
-                (0, chai_1.expect)(decryptedData.filter((d) => d.rawKey === expected.rawKey && d.accessControlSecret === expected.accessControlSecret)).to.have.length(1);
-            }
-            const previousPubKey = env.dataOwnerDetails[test_utils_1.patUsername].publicKey;
-            const api = yield (0, test_utils_1.getApiAndAddPrivateKeysForUser)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.patUsername]);
-            const u = yield api.userApi.getCurrentUser();
-            const delegateInfo = yield (0, test_utils_1.createNewHcpApi)(env);
-            const delegateApi = delegateInfo.api;
-            const delegateUser = delegateInfo.user;
-            const delegateHcp = yield delegateApi.healthcarePartyApi.getHealthcareParty(delegateUser.healthcarePartyId);
-            const patient = yield api.patientApi.getPatientWithUser(u, u.patientId);
-            // Create a Record to share with delegateHcp: this will trigger the creation of a new aes exchange key as well
-            const initialRecordToDelegate = yield api.calendarItemApi.createCalendarItemWithHcParty(u, yield api.calendarItemApi.newInstance(u, new CalendarItem_1.CalendarItem({ id: `${u.id}-ci-initial-to`, title: 'CI-INITIAL-TO' }), {
-                additionalDelegates: {
-                    [delegateHcp.id]: AccessLevel.WRITE,
-                },
-            }));
-            const initialRecordFromDelegate = yield delegateApi.calendarItemApi.createCalendarItemWithHcParty(u, yield delegateApi.calendarItemApi.newInstance(delegateUser, new CalendarItem_1.CalendarItem({ id: `${u.id}-ci-initial-from`, title: 'CI-INITIAL-FROM' }), {
-                additionalDelegates: {
-                    [u.patientId]: AccessLevel.WRITE,
-                },
-            }));
-            // Decrypting this AES Key to compare it with AES key decrypted with new key in the next steps
-            yield api.cryptoApi.forceReload();
-            const originalDecryptedData = yield decryptDataForPair(api, u.patientId, delegateUser.healthcarePartyId);
-            (0, chai_1.expect)(originalDecryptedData.failedDecryptionsCount).to.equal(0);
-            (0, chai_1.expect)(originalDecryptedData.successfulDecryptions.length).to.equal(2);
-            // And creates a new one
-            const newKey = yield api.cryptoApi.primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-            const publicKey = (0, icc_x_api_1.ua2hex)(yield api.cryptoApi.primitives.RSA.exportKey(newKey.publicKey, 'spki'));
-            const apiAfterNewKey = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, {
-                username: env.dataOwnerDetails[test_utils_1.patUsername].user,
-                password: env.dataOwnerDetails[test_utils_1.patUsername].password,
-            }, new TestCryptoStrategies_1.TestCryptoStrategies(newKey), crypto_1.webcrypto, fetch, {
-                storage: new TestStorage_1.TestStorage(),
-                keyStorage: new TestStorage_1.TestKeyStorage(),
-            });
-            const user = yield apiAfterNewKey.userApi.getCurrentUser();
-            yield apiAfterNewKey.icureMaintenanceTaskApi.createMaintenanceTasksForNewKeypair(user, newKey);
-            // User can get not encrypted information from iCure (HCP, ...)
-            const hcp = yield apiAfterNewKey.healthcarePartyApi.getHealthcareParty(delegateUser.healthcarePartyId);
-            // User can create new data, using its new keyPair
-            const newRecordToDelegate = yield apiAfterNewKey.calendarItemApi.createCalendarItemWithHcParty(u, yield apiAfterNewKey.calendarItemApi.newInstance(u, new CalendarItem_1.CalendarItem({ id: `${u.id}-ci-to`, title: 'CI-TO' }), {
-                additionalDelegates: {
-                    [hcp.id]: SecureDelegation_1.SecureDelegation.AccessLevelEnum.WRITE,
-                },
-            }));
-            (0, chai_1.expect)(newRecordToDelegate.id).to.be.not.null;
-            (0, chai_1.expect)(newRecordToDelegate.rev).to.be.not.null;
-            // But user can not decrypt data he previously created
-            const decryptedWithNewKey = yield decryptDataForPair(apiAfterNewKey, u.patientId, delegateUser.healthcarePartyId);
-            (0, chai_1.expect)(decryptedWithNewKey.failedDecryptionsCount).to.equal(2);
-            (0, chai_1.expect)(decryptedWithNewKey.successfulDecryptions.length).to.equal(1);
-            // Delegate user will therefore give user access back to data he previously created
-            // Hcp gets his maintenance tasks
-            yield delegateApi.cryptoApi.forceReload();
-            const maintenanceTask = KeyPairUpdateRequest_1.KeyPairUpdateRequest.fromMaintenanceTask(yield _getHcpKeyUpdateMaintenanceTask(delegateApi));
-            (0, chai_1.expect)(maintenanceTask.concernedDataOwnerId).equals(patient.id);
-            (0, chai_1.expect)(maintenanceTask.newPublicKey).equals(publicKey);
-            yield delegateApi.icureMaintenanceTaskApi.applyKeyPairUpdate(maintenanceTask);
-            const updatedDataOwner = yield delegateApi.dataOwnerApi.getCryptoActorStub(maintenanceTask.concernedDataOwnerId);
-            (0, chai_1.expect)(updatedDataOwner.type).to.be.equal('patient');
-            (0, chai_1.expect)(updatedDataOwner.stub).to.not.be.undefined;
-            (0, chai_1.expect)(updatedDataOwner.stub).to.not.be.null;
-            const apiAfterSharedBack = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, {
-                username: env.dataOwnerDetails[test_utils_1.patUsername].user,
-                password: env.dataOwnerDetails[test_utils_1.patUsername].password,
-            }, new TestCryptoStrategies_1.TestCryptoStrategies(newKey), crypto_1.webcrypto, fetch, {
-                storage: new TestStorage_1.TestStorage(),
-                keyStorage: new TestStorage_1.TestKeyStorage(),
-            });
-            // User can access his previous data again
-            yield apiAfterSharedBack.cryptoApi.forceReload();
-            const decryptedAfterShareBack = yield decryptDataForPair(apiAfterSharedBack, u.patientId, delegateUser.healthcarePartyId);
-            (0, chai_1.expect)(decryptedAfterShareBack.failedDecryptionsCount).to.equal(0);
-            (0, chai_1.expect)(decryptedAfterShareBack.successfulDecryptions.length).to.equal(3);
-            checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, originalDecryptedData.successfulDecryptions[0]);
-            checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, originalDecryptedData.successfulDecryptions[1]);
-            checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, decryptedWithNewKey.successfulDecryptions[0]);
-            const initialRecordFromDelegateAfterSharedBack = yield apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(u, initialRecordFromDelegate.id);
-            (0, chai_1.expect)(initialRecordFromDelegateAfterSharedBack.id).to.be.equal(initialRecordFromDelegate.id);
-            (0, chai_1.expect)(initialRecordFromDelegateAfterSharedBack.rev).to.be.equal(initialRecordFromDelegate.rev);
-            (0, chai_1.expect)(initialRecordFromDelegateAfterSharedBack.title).to.be.equal(initialRecordFromDelegate.title);
-            const initialRecordToDelegateAfterSharedBack = yield apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(u, initialRecordToDelegate.id);
-            (0, chai_1.expect)(initialRecordToDelegateAfterSharedBack.id).to.be.equal(initialRecordToDelegate.id);
-            (0, chai_1.expect)(initialRecordToDelegateAfterSharedBack.rev).to.be.equal(initialRecordToDelegate.rev);
-            (0, chai_1.expect)(initialRecordToDelegateAfterSharedBack.title).to.be.equal(initialRecordToDelegate.title);
-        }));
-    });
-});
-// TODO test that EXACTLY ONE maintenance task is created for each delegator AND delegate in a exchange key with the data owner with the new key
-//# sourceMappingURL=delegate-ci-to-patient-with-missing-keys-test.js.map

package/test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delegate-ci-to-patient-with-missing-keys-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/delegate-ci-to-patient-with-missing-keys-test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,kDAAuE;AACvE,sEAAkE;AAClE,0DAAyH;AACzH,iCAA4C;AAE5C,mCAAkC;AAClC,4BAAyB;AAEzB,+BAA6B;AAC7B,8GAA0G;AAC1G,uDAAiJ;AACjJ,yDAAqE;AACrE,2EAAuE;AACvE,8FAA0F;AAC1F,8EAA0E;AAC1E,mDAAmE;AACnE,IAAO,WAAW,GAAG,mCAAgB,CAAC,eAAe,CAAA;AAErD,SAAe,+BAA+B,CAAC,WAAiB;;QAC9D,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAC/D,MAAM,aAAa,GAAiC,MAAM,WAAW,CAAC,kBAAkB,CAAC,gCAAgC,CACvH,YAAa,EACb,SAAS,EACT,SAAS,EACT,IAAI,mCAA0B,CAAC;YAC7B,MAAM,EAAE,IAAI,+DAA8B,CAAC;gBACzC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM;aACpC,CAAC;SACH,CAAC,CACH,CAAA;QAED,OAAO,aAAa,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAQ,GAAG,CAAC,CAAC,OAAQ,CAAC,CAAC,aAAa,CAAC,IAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACpG,CAAC;CAAA;AAED,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AAEtB,IAAI,GAAa,CAAA;AAEjB,IAAA,gBAAQ,EAAC,0CAA0C,EAAE;;QACnD,IAAA,cAAM,EAAC;;gBACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;gBACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;YACpD,CAAC;SAAA,CAAC,CAAA;QAEF,mDAAmD;QACnD,IAAA,UAAE,EAAC,uDAAuD,EAAE,GAAS,EAAE;YACrE,SAAe,kBAAkB,CAC/B,GAAS,EACT,UAAkB,EAClB,UAAkB;;oBAKlB,MAAM,eAAe,GAAG;wBACtB,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,sCAAsC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;wBACzG,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,sCAAsC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;qBAC1G,CAAA;oBACD,IAAI,sBAAsB,GAAG,CAAC,CAAA;oBAC9B,MAAM,qBAAqB,GAAsD,EAAE,CAAA;oBACnF,KAAK,MAAM,YAAY,IAAI,eAAe,EAAE,CAAC;wBAC3C,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAC/E,CAAC,YAAY,CAAC,EACd,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAClD,CAAA;wBACD,MAAM,4BAA4B,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,6BAA6B,CACtG,CAAC,YAAY,CAAC,EACd,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAClD,CAAA;wBACD,IAAI,YAAY,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,4BAA4B,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC3G,sBAAsB,EAAE,CAAA;wBAC1B,CAAC;6BAAM,CAAC;4BACN,qBAAqB,CAAC,IAAI,CAAC;gCACzB,MAAM,EAAE,IAAA,kBAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gCAC1G,mBAAmB,EAAE,4BAA4B,CAAC,qBAAqB,CAAC,CAAC,CAAC;6BAC3E,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;oBACD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,CAAA;gBAC1D,CAAC;aAAA;YAED,SAAS,qBAAqB,CAC5B,aAAgE,EAChE,QAAyD;gBAEzD,IAAA,aAAM,EAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,mBAAmB,KAAK,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAC/I,CAAC;YAED,MAAM,cAAc,GAAG,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,SAAS,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,IAAA,2CAA8B,EAAC,GAAI,CAAC,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,CAAA;YACnG,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAE5C,MAAM,YAAY,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAI,CAAC,CAAA;YAChD,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAA;YACpC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAA;YACtC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,YAAY,CAAC,iBAAkB,CAAC,CAAA;YAE5G,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,SAAU,CAAC,CAAA;YAExE,8GAA8G;YAC9G,MAAM,uBAAuB,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,6BAA6B,CACrF,CAAC,EACD,MAAM,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,2BAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;gBAClH,mBAAmB,EAAE;oBACnB,CAAC,WAAY,CAAC,EAAG,CAAC,EAAE,WAAW,CAAC,KAAK;iBACtC;aACF,CAAC,CACH,CAAA;YACD,MAAM,yBAAyB,GAAG,MAAM,WAAW,CAAC,eAAe,CAAC,6BAA6B,CAC/F,CAAC,EACD,MAAM,WAAW,CAAC,eAAe,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,2BAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,EAAE;gBACzI,mBAAmB,EAAE;oBACnB,CAAC,CAAC,CAAC,SAAU,CAAC,EAAE,WAAW,CAAC,KAAK;iBAClC;aACF,CAAC,CACH,CAAA;YAED,8FAA8F;YAC9F,MAAM,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YACjC,MAAM,qBAAqB,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,SAAU,EAAE,YAAY,CAAC,iBAAkB,CAAC,CAAA;YAC1G,IAAA,aAAM,EAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAChE,IAAA,aAAM,EAAC,qBAAqB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAEtE,wBAAwB;YACxB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,sBAAU,CAAC,MAAM,CAAC,CAAA;YACpF,MAAM,SAAS,GAAG,IAAA,kBAAM,EAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YAChG,MAAM,cAAc,GAAG,MAAM,oBAAQ,CAAC,UAAU,CAC9C,GAAI,CAAC,QAAQ,EACb;gBACE,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,IAAI;gBACjD,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,QAAQ;aACtD,EACD,IAAI,2CAAoB,CAAC,MAAM,CAAC,EAChC,kBAA8B,EAC9B,KAAK,EACL;gBACE,OAAO,EAAE,IAAI,yBAAW,EAAE;gBAC1B,UAAU,EAAE,IAAI,4BAAc,EAAE;aACjC,CACF,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAC1D,MAAM,cAAc,CAAC,uBAAuB,CAAC,mCAAmC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAE9F,+DAA+D;YAC/D,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,YAAa,CAAC,iBAAkB,CAAC,CAAA;YAExG,kDAAkD;YAClD,MAAM,mBAAmB,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,6BAA6B,CAC5F,CAAC,EACD,MAAM,cAAc,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,2BAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;gBAC7G,mBAAmB,EAAE;oBACnB,CAAC,GAAI,CAAC,EAAG,CAAC,EAAE,mCAAgB,CAAC,eAAe,CAAC,KAAK;iBACnD;aACF,CAAC,CACH,CAAA;YACD,IAAA,aAAM,EAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAA;YAC7C,IAAA,aAAM,EAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAA;YAE9C,sDAAsD;YACtD,MAAM,mBAAmB,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,CAAC,CAAC,SAAU,EAAE,YAAY,CAAC,iBAAkB,CAAC,CAAA;YACnH,IAAA,aAAM,EAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC9D,IAAA,aAAM,EAAC,mBAAmB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAEpE,mFAAmF;YAEnF,iCAAiC;YACjC,MAAM,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YACzC,MAAM,eAAe,GAAG,2CAAoB,CAAC,mBAAmB,CAAC,MAAM,+BAA+B,CAAC,WAAW,CAAC,CAAC,CAAA;YAEpH,IAAA,aAAM,EAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC/D,IAAA,aAAM,EAAC,eAAe,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAEtD,MAAM,WAAW,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAA;YAC7E,MAAM,gBAAgB,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,kBAAkB,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;YAEhH,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;YACpD,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;YACjD,IAAA,aAAM,EAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAA;YAE5C,MAAM,kBAAkB,GAAG,MAAM,oBAAQ,CAAC,UAAU,CAClD,GAAI,CAAC,QAAQ,EACb;gBACE,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,IAAI;gBACjD,QAAQ,EAAE,GAAI,CAAC,gBAAgB,CAAC,wBAAW,CAAC,CAAC,QAAQ;aACtD,EACD,IAAI,2CAAoB,CAAC,MAAM,CAAC,EAChC,kBAA8B,EAC9B,KAAK,EACL;gBACE,OAAO,EAAE,IAAI,yBAAW,EAAE;gBAC1B,UAAU,EAAE,IAAI,4BAAc,EAAE;aACjC,CACF,CAAA;YACD,0CAA0C;YAC1C,MAAM,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;YAChD,MAAM,uBAAuB,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,EAAE,CAAC,CAAC,SAAU,EAAE,YAAY,CAAC,iBAAkB,CAAC,CAAA;YAC3H,IAAA,aAAM,EAAC,uBAAuB,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAClE,IAAA,aAAM,EAAC,uBAAuB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACxE,qBAAqB,CAAC,uBAAuB,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;YACpH,qBAAqB,CAAC,uBAAuB,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;YACpH,qBAAqB,CAAC,uBAAuB,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;YAElH,MAAM,wCAAwC,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,uBAAuB,CAC/G,CAAC,EACD,yBAAyB,CAAC,EAAG,CAC9B,CAAA;YACD,IAAA,aAAM,EAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAA;YAC7F,IAAA,aAAM,EAAC,wCAAwC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAA;YAC/F,IAAA,aAAM,EAAC,wCAAwC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;YACnG,MAAM,sCAAsC,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,EAAE,uBAAuB,CAAC,EAAG,CAAC,CAAA;YAC/I,IAAA,aAAM,EAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAA;YACzF,IAAA,aAAM,EAAC,sCAAsC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;YAC3F,IAAA,aAAM,EAAC,sCAAsC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAA;QACjG,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC;CAAA,CAAC,CAAA;AAEF,gJAAgJ","sourcesContent":["import { Apis, IcureApi, ShaVersion, ua2hex } from '../../../icc-x-api'\nimport { CalendarItem } from '../../../icc-api/model/CalendarItem'\nimport { FilterChainMaintenanceTask, MaintenanceTask, PaginatedListMaintenanceTask } from '../../../icc-api/model/models'\nimport { before, describe, it } from 'mocha'\n\nimport { webcrypto } from 'crypto'\nimport 'isomorphic-fetch'\n\nimport { expect } from 'chai'\nimport { MaintenanceTaskAfterDateFilter } from '../../../icc-x-api/filters/MaintenanceTaskAfterDateFilter'\nimport { createNewHcpApi, getApiAndAddPrivateKeysForUser, getEnvironmentInitializer, patUsername, setLocalStorage } from '../../utils/test_utils'\nimport { TestKeyStorage, TestStorage } from '../../utils/TestStorage'\nimport { TestCryptoStrategies } from '../../utils/TestCryptoStrategies'\nimport { KeyPairUpdateRequest } from '../../../icc-x-api/maintenance/KeyPairUpdateRequest'\nimport { SecureDelegation } from '../../../icc-api/model/SecureDelegation'\nimport { getEnvVariables, TestVars } from '@icure/test-setup/types'\nimport AccessLevel = SecureDelegation.AccessLevelEnum\n\nasync function _getHcpKeyUpdateMaintenanceTask(delegateApi: Apis): Promise<MaintenanceTask> {\n  const delegateUser = await delegateApi.userApi.getCurrentUser()\n  const notifications: PaginatedListMaintenanceTask = await delegateApi.maintenanceTaskApi.filterMaintenanceTasksByWithUser(\n    delegateUser!,\n    undefined,\n    undefined,\n    new FilterChainMaintenanceTask({\n      filter: new MaintenanceTaskAfterDateFilter({\n        date: new Date().getTime() - 100000,\n      }),\n    })\n  )\n\n  return notifications.rows!.sort((a, b) => a.created! - b.created!)[notifications.rows!.length - 1]\n}\n\nsetLocalStorage(fetch)\n\nlet env: TestVars\n\ndescribe('Full battery of tests on crypto and keys', async function () {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  // TODO should give access back to old and new keys\n  it(`Create calendar item as a patient and get access back`, async () => {\n    async function decryptDataForPair(\n      api: Apis,\n      dataOwner1: string,\n      dataOwner2: string\n    ): Promise<{\n      failedDecryptionsCount: number\n      successfulDecryptions: { rawKey: string; accessControlSecret: string }[]\n    }> {\n      const allExchangeData = [\n        ...(await api.cryptoApi.exchangeData.base.getExchangeDataByDelegatorDelegatePair(dataOwner1, dataOwner2)),\n        ...(await api.cryptoApi.exchangeData.base.getExchangeDataByDelegatorDelegatePair(dataOwner2, dataOwner1)),\n      ]\n      let failedDecryptionsCount = 0\n      const successfulDecryptions: { rawKey: string; accessControlSecret: string }[] = []\n      for (const exchangeData of allExchangeData) {\n        const decryptedKey = await api.cryptoApi.exchangeData.base.tryDecryptExchangeKeys(\n          [exchangeData],\n          api.cryptoApi.userKeysManager.getDecryptionKeys()\n        )\n        const decryptedAccessControlSecret = await api.cryptoApi.exchangeData.base.tryDecryptAccessControlSecret(\n          [exchangeData],\n          api.cryptoApi.userKeysManager.getDecryptionKeys()\n        )\n        if (decryptedKey.failedDecryptions.length > 0 || decryptedAccessControlSecret.failedDecryptions.length > 0) {\n          failedDecryptionsCount++\n        } else {\n          successfulDecryptions.push({\n            rawKey: ua2hex(await api.cryptoApi.primitives.AES.exportKey(decryptedKey.successfulDecryptions[0], 'raw')),\n            accessControlSecret: decryptedAccessControlSecret.successfulDecryptions[0],\n          })\n        }\n      }\n      return { failedDecryptionsCount, successfulDecryptions }\n    }\n\n    function checkDecryptedDataHas(\n      decryptedData: { rawKey: string; accessControlSecret: string }[],\n      expected: { rawKey: string; accessControlSecret: string }\n    ) {\n      expect(decryptedData.filter((d) => d.rawKey === expected.rawKey && d.accessControlSecret === expected.accessControlSecret)).to.have.length(1)\n    }\n\n    const previousPubKey = env!.dataOwnerDetails[patUsername].publicKey\n    const api = await getApiAndAddPrivateKeysForUser(env!.iCureUrl, env!.dataOwnerDetails[patUsername])\n    const u = await api.userApi.getCurrentUser()\n\n    const delegateInfo = await createNewHcpApi(env!)\n    const delegateApi = delegateInfo.api\n    const delegateUser = delegateInfo.user\n    const delegateHcp = await delegateApi.healthcarePartyApi.getHealthcareParty(delegateUser.healthcarePartyId!)\n\n    const patient = await api.patientApi.getPatientWithUser(u, u.patientId!)\n\n    // Create a Record to share with delegateHcp: this will trigger the creation of a new aes exchange key as well\n    const initialRecordToDelegate = await api.calendarItemApi.createCalendarItemWithHcParty(\n      u,\n      await api.calendarItemApi.newInstance(u, new CalendarItem({ id: `${u.id}-ci-initial-to`, title: 'CI-INITIAL-TO' }), {\n        additionalDelegates: {\n          [delegateHcp!.id!]: AccessLevel.WRITE,\n        },\n      })\n    )\n    const initialRecordFromDelegate = await delegateApi.calendarItemApi.createCalendarItemWithHcParty(\n      u,\n      await delegateApi.calendarItemApi.newInstance(delegateUser, new CalendarItem({ id: `${u.id}-ci-initial-from`, title: 'CI-INITIAL-FROM' }), {\n        additionalDelegates: {\n          [u.patientId!]: AccessLevel.WRITE,\n        },\n      })\n    )\n\n    // Decrypting this AES Key to compare it with AES key decrypted with new key in the next steps\n    await api.cryptoApi.forceReload()\n    const originalDecryptedData = await decryptDataForPair(api, u.patientId!, delegateUser.healthcarePartyId!)\n    expect(originalDecryptedData.failedDecryptionsCount).to.equal(0)\n    expect(originalDecryptedData.successfulDecryptions.length).to.equal(2)\n\n    // And creates a new one\n    const newKey = await api.cryptoApi.primitives.RSA.generateKeyPair(ShaVersion.Sha256)\n    const publicKey = ua2hex(await api.cryptoApi.primitives.RSA.exportKey(newKey.publicKey, 'spki'))\n    const apiAfterNewKey = await IcureApi.initialise(\n      env!.iCureUrl,\n      {\n        username: env!.dataOwnerDetails[patUsername].user,\n        password: env!.dataOwnerDetails[patUsername].password,\n      },\n      new TestCryptoStrategies(newKey),\n      webcrypto as unknown as Crypto,\n      fetch,\n      {\n        storage: new TestStorage(),\n        keyStorage: new TestKeyStorage(),\n      }\n    )\n    const user = await apiAfterNewKey.userApi.getCurrentUser()\n    await apiAfterNewKey.icureMaintenanceTaskApi.createMaintenanceTasksForNewKeypair(user, newKey)\n\n    // User can get not encrypted information from iCure (HCP, ...)\n    const hcp = await apiAfterNewKey.healthcarePartyApi.getHealthcareParty(delegateUser!.healthcarePartyId!)\n\n    // User can create new data, using its new keyPair\n    const newRecordToDelegate = await apiAfterNewKey.calendarItemApi.createCalendarItemWithHcParty(\n      u,\n      await apiAfterNewKey.calendarItemApi.newInstance(u, new CalendarItem({ id: `${u.id}-ci-to`, title: 'CI-TO' }), {\n        additionalDelegates: {\n          [hcp!.id!]: SecureDelegation.AccessLevelEnum.WRITE,\n        },\n      })\n    )\n    expect(newRecordToDelegate.id).to.be.not.null\n    expect(newRecordToDelegate.rev).to.be.not.null\n\n    // But user can not decrypt data he previously created\n    const decryptedWithNewKey = await decryptDataForPair(apiAfterNewKey, u.patientId!, delegateUser.healthcarePartyId!)\n    expect(decryptedWithNewKey.failedDecryptionsCount).to.equal(2)\n    expect(decryptedWithNewKey.successfulDecryptions.length).to.equal(1)\n\n    // Delegate user will therefore give user access back to data he previously created\n\n    // Hcp gets his maintenance tasks\n    await delegateApi.cryptoApi.forceReload()\n    const maintenanceTask = KeyPairUpdateRequest.fromMaintenanceTask(await _getHcpKeyUpdateMaintenanceTask(delegateApi))\n\n    expect(maintenanceTask.concernedDataOwnerId).equals(patient.id)\n    expect(maintenanceTask.newPublicKey).equals(publicKey)\n\n    await delegateApi.icureMaintenanceTaskApi.applyKeyPairUpdate(maintenanceTask)\n    const updatedDataOwner = await delegateApi.dataOwnerApi.getCryptoActorStub(maintenanceTask.concernedDataOwnerId)\n\n    expect(updatedDataOwner.type).to.be.equal('patient')\n    expect(updatedDataOwner.stub).to.not.be.undefined\n    expect(updatedDataOwner.stub).to.not.be.null\n\n    const apiAfterSharedBack = await IcureApi.initialise(\n      env!.iCureUrl,\n      {\n        username: env!.dataOwnerDetails[patUsername].user,\n        password: env!.dataOwnerDetails[patUsername].password,\n      },\n      new TestCryptoStrategies(newKey),\n      webcrypto as unknown as Crypto,\n      fetch,\n      {\n        storage: new TestStorage(),\n        keyStorage: new TestKeyStorage(),\n      }\n    )\n    // User can access his previous data again\n    await apiAfterSharedBack.cryptoApi.forceReload()\n    const decryptedAfterShareBack = await decryptDataForPair(apiAfterSharedBack, u.patientId!, delegateUser.healthcarePartyId!)\n    expect(decryptedAfterShareBack.failedDecryptionsCount).to.equal(0)\n    expect(decryptedAfterShareBack.successfulDecryptions.length).to.equal(3)\n    checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, originalDecryptedData.successfulDecryptions[0])\n    checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, originalDecryptedData.successfulDecryptions[1])\n    checkDecryptedDataHas(decryptedAfterShareBack.successfulDecryptions, decryptedWithNewKey.successfulDecryptions[0])\n\n    const initialRecordFromDelegateAfterSharedBack = await apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(\n      u,\n      initialRecordFromDelegate.id!\n    )\n    expect(initialRecordFromDelegateAfterSharedBack.id).to.be.equal(initialRecordFromDelegate.id)\n    expect(initialRecordFromDelegateAfterSharedBack.rev).to.be.equal(initialRecordFromDelegate.rev)\n    expect(initialRecordFromDelegateAfterSharedBack.title).to.be.equal(initialRecordFromDelegate.title)\n    const initialRecordToDelegateAfterSharedBack = await apiAfterSharedBack.calendarItemApi.getCalendarItemWithUser(u, initialRecordToDelegate.id!)\n    expect(initialRecordToDelegateAfterSharedBack.id).to.be.equal(initialRecordToDelegate.id)\n    expect(initialRecordToDelegateAfterSharedBack.rev).to.be.equal(initialRecordToDelegate.rev)\n    expect(initialRecordToDelegateAfterSharedBack.title).to.be.equal(initialRecordToDelegate.title)\n  })\n})\n\n// TODO test that EXACTLY ONE maintenance task is created for each delegator AND delegate in a exchange key with the data owner with the new key\n"]}

package/test/icc-x-api/crypto/exchange-data-manager-test.d.ts

@@ -1 +0,0 @@
-import 'isomorphic-fetch';