@icure/api 8.3.5 → 8.4.0

package/icc-x-api/auth/SmartAuthProvider.d.ts

@@ -1,7 +1,7 @@
 import { AuthenticationProvider } from './AuthenticationProvider';
 import { UserGroup } from '../../icc-api/model/UserGroup';
 import { AuthService } from './AuthService';
-import { IccAuthApi, OAuthThirdParty } from '../../icc-api';
+import { DigitalIdProvider, IccAuthApi, OAuthThirdParty } from '../../icc-api';
 /**
  * Needed by a {@link SmartAuthProvider} to get the secrets (password, token, etc.) for authentication to the iCure SDK as needed.
  */
@@ -47,11 +47,19 @@ export interface AuthSecretProvider {
 }
 export type AuthSecretDetails = {
     value: string;
-    secretType: Exclude<AuthSecretType, AuthSecretType.EXTERNAL_AUTHENTICATION>;
+    secretType: Exclude<AuthSecretType, AuthSecretType.EXTERNAL_AUTHENTICATION | AuthSecretType.DIGITAL_ID | AuthSecretType.ICURE_CLOUD>;
 } | {
     value: string;
     secretType: AuthSecretType.EXTERNAL_AUTHENTICATION;
     oauthType: OAuthThirdParty;
+} | {
+    value: string;
+    secretType: AuthSecretType.DIGITAL_ID;
+    provider: DigitalIdProvider;
+} | {
+    value: string;
+    secretType: AuthSecretType.ICURE_CLOUD;
+    issuer: string;
 };
 /**
  * Represents a type of secret that can be used for authentication with iCure.
@@ -80,8 +88,31 @@ export declare enum AuthSecretType {
      * A token provided by an external authentication provider (e.g. Oauth/Google).
      * Not yet in use.
      */
-    EXTERNAL_AUTHENTICATION = "EXTERNAL_AUTHENTICATION"
+    EXTERNAL_AUTHENTICATION = "EXTERNAL_AUTHENTICATION",
+    /**
+     * A special case of external authentication where the provider is a digital identity provider.
+     */
+    DIGITAL_ID = "DIGITAL_ID",
+    /**
+     * The secret is an authentication token for a cloud instance of icure (kraken-cloud).
+     * Supported only on lite instances.
+     */
+    ICURE_CLOUD = "ICURE_CLOUD"
 }
+export type SmartAuthProviderInitialSecret = {
+    password: string;
+} | {
+    longToken: string;
+} | {
+    oauthToken: string;
+    oauthType: OAuthThirdParty;
+} | {
+    digitalIdToken: string;
+    provider: DigitalIdProvider;
+} | {
+    cloudToken: string;
+    issuer: string;
+};
 /**
  * @internal this class is meant for internal use only and may be changed without notice. The SmartAuthProvider will be initialised automatically
  * by the iCure api depending on the authentication options you provide.
@@ -112,20 +143,13 @@ export declare class SmartAuthProvider implements AuthenticationProvider {
      * @param secretProvider
      * @param props optional initialisation properties.
      */
-    static initialise(authApi: IccAuthApi, login: string, secretProvider: AuthSecretProvider, props?: {
-        initialSecret?: {
-            password: string;
-        } | {
-            longToken: string;
-        } | {
-            oauthToken: string;
-            oauthType: OAuthThirdParty;
-        };
+    static initialise(authApi: IccAuthApi, login: string | undefined, secretProvider: AuthSecretProvider, props?: {
+        initialSecret?: SmartAuthProviderInitialSecret;
         initialAuthToken?: string;
         initialRefreshToken?: string;
         loginGroupId?: string;
         debugLog?: boolean;
-    }): SmartAuthProvider;
+    }): Promise<SmartAuthProvider>;
     private constructor();
     getAuthService(): AuthService;
     switchGroup(newGroupId: string, matches: Array<UserGroup>): Promise<AuthenticationProvider>;

package/icc-x-api/auth/SmartAuthProvider.js

@@ -45,9 +45,13 @@ var AuthSecretType;
     AuthSecretType["EXTERNAL_AUTHENTICATION"] = "EXTERNAL_AUTHENTICATION";
     /**
      * A special case of external authentication where the provider is a digital identity provider.
-     * Not yet in use.
      */
-    // DIGITAL_ID = 'DIGITAL_ID',
+    AuthSecretType["DIGITAL_ID"] = "DIGITAL_ID";
+    /**
+     * The secret is an authentication token for a cloud instance of icure (kraken-cloud).
+     * Supported only on lite instances.
+     */
+    AuthSecretType["ICURE_CLOUD"] = "ICURE_CLOUD";
 })(AuthSecretType || (exports.AuthSecretType = AuthSecretType = {}));
 // Here starts internal entities that should not be used directly.
 /**
@@ -78,24 +82,70 @@ class SmartAuthProvider {
      * @param secretProvider
      * @param props optional initialisation properties.
      */
-    static initialise(authApi, login, secretProvider, props = {}) {
-        let initialSecret = undefined;
-        if (props.initialSecret) {
-            if ('password' in props.initialSecret) {
-                initialSecret = { value: props.initialSecret.password, type: ServerAuthenticationClass.PASSWORD };
-            }
-            else if ('longToken' in props.initialSecret) {
-                initialSecret = { value: props.initialSecret.longToken, type: ServerAuthenticationClass.LONG_LIVED_TOKEN };
-            }
-            else {
-                initialSecret = {
-                    value: props.initialSecret.oauthToken,
-                    type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,
-                    oauthType: props.initialSecret.oauthType,
-                };
+    static initialise(authApi_1, login_1, secretProvider_1) {
+        return __awaiter(this, arguments, void 0, function* (authApi, login, secretProvider, props = {}) {
+            let initialSecret = undefined;
+            let initialAuthToken = props.initialAuthToken;
+            let initialRefreshToken = props.initialRefreshToken;
+            if (props.initialSecret) {
+                if ('password' in props.initialSecret) {
+                    if (login == undefined)
+                        throw new Error('To use a password initial secret you must provide a login identifier');
+                    initialSecret = { value: props.initialSecret.password, type: ServerAuthenticationClass.PASSWORD };
+                }
+                else if ('longToken' in props.initialSecret) {
+                    if (login == undefined)
+                        throw new Error('To use a password initial secret you must provide a login identifier');
+                    initialSecret = { value: props.initialSecret.longToken, type: ServerAuthenticationClass.LONG_LIVED_TOKEN };
+                }
+                else if ('oauthToken' in props.initialSecret) {
+                    if (longLivedOAuthTokens.has(props.initialSecret.oauthType)) {
+                        initialSecret = {
+                            value: props.initialSecret.oauthToken,
+                            type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,
+                            oauthType: props.initialSecret.oauthType,
+                        };
+                    }
+                    else {
+                        try {
+                            const authResponse = yield authApi.loginWithThirdPartyToken(props.initialSecret.oauthType, props.initialSecret.oauthToken, props.loginGroupId);
+                            if (authResponse.token != undefined && authResponse.refreshToken != undefined) {
+                                initialAuthToken = authResponse.token;
+                                initialRefreshToken = authResponse.refreshToken;
+                            }
+                        }
+                        catch (_) {
+                            /* ignored */
+                        }
+                    }
+                }
+                else if ('digitalIdToken' in props.initialSecret) {
+                    try {
+                        const authResponse = yield authApi.loginWithThirdPartyToken(props.initialSecret.provider, props.initialSecret.digitalIdToken, props.loginGroupId);
+                        if (authResponse.token != undefined && authResponse.refreshToken != undefined) {
+                            initialAuthToken = authResponse.token;
+                            initialRefreshToken = authResponse.refreshToken;
+                        }
+                    }
+                    catch (_) {
+                        /* ignored */
+                    }
+                }
+                else {
+                    try {
+                        const authResponse = yield authApi.loginWithCloudToken(props.initialSecret.issuer, props.initialSecret.cloudToken);
+                        if (authResponse.token != undefined && authResponse.refreshToken != undefined) {
+                            initialAuthToken = authResponse.token;
+                            initialRefreshToken = authResponse.refreshToken;
+                        }
+                    }
+                    catch (_) {
+                        /* ignored */
+                    }
+                }
             }
-        }
-        return new SmartAuthProvider(new TokenProvider(login, props.loginGroupId, initialSecret, props.initialAuthToken, props.initialRefreshToken, authApi, secretProvider, props.debugLog != undefined ? props.debugLog : true), props.loginGroupId);
+            return new SmartAuthProvider(new TokenProvider(login, props.loginGroupId, initialSecret, initialAuthToken, initialRefreshToken, authApi, secretProvider, props.debugLog != undefined ? props.debugLog : true), props.loginGroupId);
+        });
     }
     constructor(tokenProvider, groupId) {
         this.tokenProvider = tokenProvider;
@@ -121,7 +171,7 @@ class SmartAuthProvider {
 exports.SmartAuthProvider = SmartAuthProvider;
 var ServerAuthenticationClass;
 (function (ServerAuthenticationClass) {
-    // DIGITAL_ID = 60,
+    ServerAuthenticationClass[ServerAuthenticationClass["DIGITAL_ID"] = 60] = "DIGITAL_ID";
     ServerAuthenticationClass[ServerAuthenticationClass["TWO_FACTOR_AUTHENTICATION"] = 50] = "TWO_FACTOR_AUTHENTICATION";
     ServerAuthenticationClass[ServerAuthenticationClass["SHORT_LIVED_TOKEN"] = 40] = "SHORT_LIVED_TOKEN";
     ServerAuthenticationClass[ServerAuthenticationClass["EXTERNAL_AUTHENTICATION"] = 30] = "EXTERNAL_AUTHENTICATION";
@@ -199,7 +249,7 @@ class TokenProvider {
             if (!!this.currentLongLivedSecret && (!this.currentLongLivedSecret.type || this.currentLongLivedSecret.type >= minimumAuthenticationClassLevel)) {
                 if (this.debugLog)
                     console.log('Using cached secret');
-                const resultWithCachedSecret = yield this.doGetTokenWithSecret(this.currentLongLivedSecret, minimumAuthenticationClassLevel);
+                const resultWithCachedSecret = yield this.doGetTokenWithSecret({ cached: this.currentLongLivedSecret }, minimumAuthenticationClassLevel);
                 if ('success' in resultWithCachedSecret) {
                     if (this.debugLog)
                         console.log('New token using cached secret success');
@@ -227,12 +277,20 @@ class TokenProvider {
     askSecretAndGetToken(minimumAuthenticationClassLevel, passwordIsValidAs2fa) {
         return __awaiter(this, void 0, void 0, function* () {
             const acceptedSecrets = [
-                minimumAuthenticationClassLevel <= ServerAuthenticationClass.LONG_LIVED_TOKEN ? [AuthSecretType.LONG_LIVED_TOKEN] : [],
-                minimumAuthenticationClassLevel <= ServerAuthenticationClass.SHORT_LIVED_TOKEN ? [AuthSecretType.SHORT_LIVED_TOKEN] : [],
+                minimumAuthenticationClassLevel <= ServerAuthenticationClass.LONG_LIVED_TOKEN && this.login != undefined
+                    ? [AuthSecretType.LONG_LIVED_TOKEN]
+                    : [],
+                minimumAuthenticationClassLevel <= ServerAuthenticationClass.SHORT_LIVED_TOKEN && this.login != undefined
+                    ? [AuthSecretType.SHORT_LIVED_TOKEN]
+                    : [],
                 minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION &&
+                    this.login != undefined &&
                     (passwordIsValidAs2fa || minimumAuthenticationClassLevel <= ServerAuthenticationClass.PASSWORD)
                     ? [AuthSecretType.PASSWORD]
                     : [],
+                minimumAuthenticationClassLevel <= 0 ? [AuthSecretType.ICURE_CLOUD] : [],
+                minimumAuthenticationClassLevel <= ServerAuthenticationClass.DIGITAL_ID ? [AuthSecretType.DIGITAL_ID] : [],
+                minimumAuthenticationClassLevel <= ServerAuthenticationClass.EXTERNAL_AUTHENTICATION ? [AuthSecretType.EXTERNAL_AUTHENTICATION] : [],
             ].flat();
             if (!acceptedSecrets.length)
                 throw new Error('Internal error: no secret type is accepted for this request. Group may be misconfigured, or client may be outdated.');
@@ -244,7 +302,7 @@ class TokenProvider {
                 if (!acceptedSecrets.includes(secretDetails.secretType))
                     throw new Error(`Accepted secret types are ${JSON.stringify(acceptedSecrets)}, but got a secret of type ${secretDetails.secretType}.`);
                 attempts.push(secretDetails);
-                const result = yield this.doGetTokenWithSecret(secretDetails, minimumAuthenticationClassLevel);
+                const result = yield this.doGetTokenWithSecret({ new: secretDetails }, minimumAuthenticationClassLevel);
                 if ('success' in result) {
                     this.updateCachedSecret(secretDetails);
                     return result.success;
@@ -269,7 +327,7 @@ class TokenProvider {
                 if (details.secretType != AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)
                     throw new Error(`Was expecting a 2fa token but got a secret of type ${details.secretType}.`);
                 attempts.push(details);
-                const result = yield this.doGetTokenWithSecret({ value: `${password}|${details.value}` }, minimumAuthenticationClassLevel);
+                const result = yield this.doGetTokenWithSecret({ new: { value: `${password}|${details.value}`, secretType: AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN } }, minimumAuthenticationClassLevel);
                 if ('success' in result) {
                     this.updateCachedSecret({ value: password, secretType: AuthSecretType.PASSWORD });
                     return result.success;
@@ -280,14 +338,32 @@ class TokenProvider {
             }
         });
     }
-    doGetTokenWithSecret(secret, minimumAuthenticationClassLevel) {
+    doGetTokenWithSecret(secretDetails, minimumAuthenticationClassLevel) {
         return __awaiter(this, void 0, void 0, function* () {
             let authResultPromise;
-            if ('oauthType' in secret && !!secret.oauthType) {
-                authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value); // TODO add group id
+            if ('cached' in secretDetails) {
+                const secret = secretDetails.cached;
+                if ('oauthType' in secret && !!secret.oauthType) {
+                    authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value, this.groupId);
+                }
+                else {
+                    authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId);
+                }
             }
             else {
-                authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId);
+                const secret = secretDetails.new;
+                if (secret.secretType == AuthSecretType.DIGITAL_ID) {
+                    authResultPromise = this.authApi.loginWithThirdPartyToken(secret.provider, secret.value, this.groupId);
+                }
+                else if (secret.secretType == AuthSecretType.EXTERNAL_AUTHENTICATION) {
+                    authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value, this.groupId);
+                }
+                else if (secret.secretType == AuthSecretType.ICURE_CLOUD) {
+                    authResultPromise = this.authApi.loginWithCloudToken(secret.issuer, secret.value);
+                }
+                else {
+                    authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId);
+                }
             }
             return authResultPromise.then((authResult) => {
                 const { token, refreshToken } = authResult;

package/icc-x-api/auth/SmartAuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"SmartAuthProvider.js","sourceRoot":"","sources":["../../../icc-x-api/auth/SmartAuthProvider.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,2CAA2D;AAC3D,+CAA2C;AAC3C,IAAO,QAAQ,GAAG,SAAG,CAAC,QAAQ,CAAA;AAC9B,yCAAmE;AAoDnE;;GAEG;AACH,IAAY,cA8BX;AA9BD,WAAY,cAAc;IACxB;;OAEG;IACH,uCAAqB,CAAA;IACrB;;;OAGG;IACH,qFAAmE,CAAA;IACnE;;;OAGG;IACH,yDAAuC,CAAA;IACvC;;;OAGG;IACH,uDAAqC,CAAA;IACrC;;;OAGG;IACH,qEAAmD,CAAA;IACnD;;;OAGG;IACH,6BAA6B;AAC/B,CAAC,EA9BW,cAAc,8BAAd,cAAc,QA8BzB;AAED,kEAAkE;AAElE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,iBAAiB;IAC5B;;;;;;OAMG;IACH,MAAM,CAAC,UAAU,CACf,OAAmB,EACnB,KAAa,EACb,cAAkC,EAClC,QAMI,EAAE;QAEN,IAAI,aAAa,GAAiC,SAAS,CAAA;QAC3D,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,UAAU,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACtC,aAAa,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAA;YACnG,CAAC;iBAAM,IAAI,WAAW,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC9C,aAAa,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB,EAAE,CAAA;YAC5G,CAAC;iBAAM,CAAC;gBACN,aAAa,GAAG;oBACd,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;oBACrC,IAAI,EAAE,yBAAyB,CAAC,uBAAuB;oBACvD,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS;iBACzC,CAAA;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,iBAAiB,CAC1B,IAAI,aAAa,CACf,KAAK,EACL,KAAK,CAAC,YAAY,EAClB,aAAa,EACb,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,mBAAmB,EACzB,OAAO,EACP,cAAc,EACd,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CACpD,EACD,KAAK,CAAC,YAAY,CACnB,CAAA;IACH,CAAC;IAED,YAAqC,aAA4B,EAAmB,OAA2B;QAA1E,kBAAa,GAAb,aAAa,CAAe;QAAmB,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnH,cAAc;QACZ,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACjD,CAAC;IAEK,WAAW,CAAC,UAAkB,EAAE,OAAyB;;YAC7D,IAAI,UAAU,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;YAChH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;YAC3E,OAAO,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9D,CAAC;KAAA;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,qBAAqB,EAAE,CAAA;IACnD,CAAC;CACF;AAjED,8CAiEC;AAED,IAAK,yBAOJ;AAPD,WAAK,yBAAyB;IAC5B,mBAAmB;IACnB,oHAA8B,CAAA;IAC9B,oGAAsB,CAAA;IACtB,gHAA4B,CAAA;IAC5B,kFAAa,CAAA;IACb,kGAAqB,CAAA;AACvB,CAAC,EAPI,yBAAyB,KAAzB,yBAAyB,QAO7B;AAMD,qJAAqJ;AACrJ,oCAAoC;AACpC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,yBAAe,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9D,MAAM,aAAa;IACjB,YACU,KAAa,EACb,OAA2B,EAC3B,sBAAoD,EACpD,WAA+B,EAC/B,kBAAsC,EAC7B,OAAmB,EACnB,kBAAsC,EACtC,QAAiB;QAP1B,UAAK,GAAL,KAAK,CAAQ;QACb,YAAO,GAAP,OAAO,CAAoB;QAC3B,2BAAsB,GAAtB,sBAAsB,CAA8B;QACpD,gBAAW,GAAX,WAAW,CAAoB;QAC/B,uBAAkB,GAAlB,kBAAkB,CAAoB;QAC7B,YAAO,GAAP,OAAO,CAAY;QACnB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,aAAQ,GAAR,QAAQ,CAAS;IACjC,CAAC;IAEI,cAAc;;QACpB,OAAO,0BAA0B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAA,0BAAe,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,0BACnG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAA,0BAAe,EAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAC9E,sBAAsB,CAAA,MAAA,IAAI,CAAC,sBAAsB,0CAAE,KAAK,KAAI,SAAS,2BAA2B,MAAA,IAAI,CAAC,sBAAsB,0CAAE,IAAI,EAAE,CAAA;IACrI,CAAC;IAEK,8BAA8B;;YAClC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAA,gCAAqB,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,kBAAkB,CAAC,MAAM,EAAE,CAAA;YACrE,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAA,gCAAqB,EAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACxF,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;YAC3D,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAA;YAC3F,CAAC;QACH,CAAC;KAAA;IAEK,qBAAqB;;YACzB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAClD,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;YAC3C,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAY,EAAE,YAAY,EAAE,IAAI,CAAC,kBAAmB,EAAE,CAAA;QAC7E,CAAC;KAAA;IAEK,oBAAoB,CAAC,0BAAkC;;YAC3D,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,0BAA0B,CAAC,CAAA;QACnE,CAAC;KAAA;IAEa,mBAAmB,CAAC,+BAAmD;;YACnF,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,+BAA+B,aAA/B,+BAA+B,cAA/B,+BAA+B,GAAI,CAAC,CAAC,CAAA;YAC5F,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;YACxB,IAAI,CAAC,kBAAkB,GAAG,YAAY,CAAA;YACtC,OAAO,KAAK,CAAA;QACd,CAAC;KAAA;IAEa,oBAAoB,CAAC,YAAoB;;YACrD,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;YAC7F,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CACnE,CAAC,UAAU,EAAE,EAAE;gBACb,IAAI,CAAC,UAAU,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAA;gBACnI,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,KAAK,CAAA;gBACnC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAA;YACxE,CAAC,EACD,GAAS,EAAE,gDAAC,OAAA,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAA,GAAA,CACjG,CAAA;QACH,CAAC;KAAA;IAEa,WAAW,CAAC,+BAAuC;;YAC/D,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,8CAA8C,+BAA+B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;YACxI,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,+BAA+B,CAAC,EAAE,CAAC;gBAChJ,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;gBACrD,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,sBAAsB,EAAE,+BAA+B,CAAC,CAAA;gBAC5H,IAAI,SAAS,IAAI,sBAAsB,EAAE,CAAC;oBACxC,IAAI,IAAI,CAAC,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAA;oBACvE,OAAO,sBAAsB,CAAC,OAAO,CAAA;gBACvC,CAAC;qBAAM,IACL,sBAAsB,CAAC,OAAO,KAAK,6BAA6B,CAAC,SAAS;oBAC1E,+BAA+B,IAAI,yBAAyB,CAAC,yBAAyB,EACtF,CAAC;oBACD,IAAI,IAAI,CAAC,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAA;oBAC5E,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAA;gBACpG,CAAC;qBAAM,CAAC;oBACN,IAAI,IAAI,CAAC,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAA;oBACtE,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;gBACzE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAA;gBACnF,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;KAAA;IAEa,oBAAoB,CAChC,+BAAuC,EACvC,oBAA6B;;YAE7B,MAAM,eAAe,GAAG;gBACtB,+BAA+B,IAAI,yBAAyB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE;gBACtH,+BAA+B,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;gBACxH,+BAA+B,IAAI,yBAAyB,CAAC,yBAAyB;oBACtF,CAAC,oBAAoB,IAAI,+BAA+B,IAAI,yBAAyB,CAAC,QAAQ,CAAC;oBAC7F,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAC3B,CAAC,CAAC,EAAE;aACP,CAAC,IAAI,EAAE,CAAA;YACR,IAAI,CAAC,eAAe,CAAC,MAAM;gBACzB,MAAM,IAAI,KAAK,CAAC,qHAAqH,CAAC,CAAA;YACxI,MAAM,QAAQ,GAAwB,EAAE,CAAA;YACxC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,sDAAsD,+BAA+B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;YAChJ,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,eAAe,CAAC,EAAE,QAAQ,EAAE,+BAA+B,GAAG,CAAC,CAAC,CAAA;gBAClI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,8BAA8B,aAAa,CAAC,UAAU,GAAG,CAAC,CAAA;gBACxI,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;gBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAA;gBAC9F,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;oBACxB,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;oBACtC,OAAO,MAAM,CAAC,OAAO,CAAA;gBACvB,CAAC;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,SAAS,EAAE,CAAC;oBACrE,OAAO,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAA;gBACtF,CAAC;qBAAM,IAAI,aAAa,CAAC,KAAK,IAAI,cAAc,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,wBAAwB,EAAE,CAAC;oBACtI,wHAAwH;oBACxH,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;gBAC1E,CAAC,CAAC,aAAa;YACjB,CAAC;QACH,CAAC;KAAA;IAEa,kBAAkB,CAAC,QAAgB,EAAE,+BAAuC;;YACxF,IAAI,+BAA+B,GAAG,yBAAyB,CAAC,yBAAyB;gBACvF,MAAM,IAAI,KAAK,CACb,gIAAgI,CACjI,CAAA;YACH,MAAM,QAAQ,GAAwB,EAAE,CAAA;YACxC,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,+BAA+B,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;gBAC1H,IAAI,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,+BAA+B;oBACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,OAAO,CAAC,UAAU,GAAG,CAAC,CAAA;gBAC9F,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,GAAG,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAA;gBAC1H,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;oBACxB,IAAI,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAA;oBACjF,OAAO,MAAM,CAAC,OAAO,CAAA;gBACvB,CAAC;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,WAAW,EAAE,CAAC;oBACvE,MAAM,IAAI,KAAK,CAAC,yFAAyF,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;gBAC7H,CAAC,CAAC,aAAa;YACjB,CAAC;QACH,CAAC;KAAA;IAEa,oBAAoB,CAChC,MAAsD,EACtD,+BAAuC;;YAEvC,IAAI,iBAAkD,CAAA;YACtD,IAAI,WAAW,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAChD,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,oBAAoB;YAChH,CAAC;iBAAM,CAAC;gBACN,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YACxG,CAAC;YACD,OAAO,iBAAiB,CAAC,IAAI,CAC3B,CAAC,UAAU,EAAE,EAAE;gBACb,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,UAAU,CAAA;gBAC1C,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;gBACvI,MAAM,MAAM,GAAG,IAAA,0BAAe,EAAC,KAAK,CAAC,CAAA;gBACrC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;gBACpC,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;oBAC1D,IAAI,+BAA+B,GAAG,CAAC,EAAE,CAAC;wBACxC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;oBACjG,CAAC;;wBAAM,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAA;gBACpD,CAAC;gBACD,IAAI,cAAc,GAAG,+BAA+B,EAAE,CAAC;oBACrD,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,wBAAwB,EAAE,CAAA;gBAC5E,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAA;gBAC7C,CAAC;YACH,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAA;gBAC7C,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBACvD,gEAAgE;oBAChE,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,mBAAmB,EAAE,CAAA;gBACvE,CAAC;qBAAM,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBACnC,4CAA4C;oBAC5C,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,WAAW,EAAE,CAAA;gBAC/D,CAAC;qBAAM,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBACnC,kFAAkF;oBAClF,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,SAAS,EAAE,CAAA;gBAC7D,CAAC;;oBAAM,MAAM,KAAK,CAAA;YACpB,CAAC,CACF,CAAA;QACH,CAAC;KAAA;IAEK,aAAa,CAAC,UAAkB;;YACpC,MAAM,mBAAmB,GAAG,IAAI,CAAC,kBAAkB;gBACjD,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC,IAAI,CACtE,CAAC,QAAQ,EAAE,EAAE;oBACX,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY;wBAC3C,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;oBACnH,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAA;gBACvE,CAAC,EACD,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CACtD;gBACH,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;YACjD,OAAO,IAAI,aAAa,CACtB,IAAI,CAAC,KAAK,EACV,UAAU,EACV,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,EACvG,mBAAmB,CAAC,KAAK,EACzB,mBAAmB,CAAC,YAAY,EAChC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,QAAQ,CACd,CAAA;QACH,CAAC;KAAA;IAEO,kBAAkB,CAAC,OAA0B;QACnD,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3B,KAAK,cAAc,CAAC,QAAQ;gBAC1B,IAAI,CAAC,sBAAsB,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAA;gBAChG,MAAK;YACP,KAAK,cAAc,CAAC,gBAAgB;gBAClC,IAAI,CAAC,sBAAsB,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB,EAAE,CAAA;gBACxG,MAAK;YACP,KAAK,cAAc,CAAC,uBAAuB;gBACzC,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,sBAAsB,GAAG;wBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,IAAI,EAAE,yBAAyB,CAAC,uBAAuB;wBACvD,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAA;gBACH,CAAC;gBACD,MAAK;QACT,CAAC;IACH,CAAC;CACF;AAED,IAAK,6BAKJ;AALD,WAAK,6BAA6B;IAChC,2FAAS,CAAA;IACT,+FAAW,CAAA;IACX,+GAAmB,CAAA;IACnB,yHAAwB,CAAA;AAC1B,CAAC,EALI,6BAA6B,KAA7B,6BAA6B,QAKjC;AACD,IAAK,kBAIJ;AAJD,WAAK,kBAAkB;IACrB,+DAAM,CAAA;IACN,qEAAS,CAAA;IACT,yDAAG,CAAA;AACL,CAAC,EAJI,kBAAkB,KAAlB,kBAAkB,QAItB;AAED,IAAK,qBAQJ;AARD,WAAK,qBAAqB;IACxB,uEAAO,CAAA;IACP,iFAAY,CAAA;IACZ,2EAAS,CAAA;IACT,6HAAkC,CAAA;IAClC,6IAA0C,CAAA;IAC1C,uIAAuC,CAAA;IACvC,qFAAc,CAAA;AAChB,CAAC,EARI,qBAAqB,KAArB,qBAAqB,QAQzB;AACD,MAAM,gBAAgB;IAUpB,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QATjD,iBAAY,GAO6C,EAAE,EAAE,EAAE,qBAAqB,CAAC,OAAO,EAAE,CAAA;IAE1C,CAAC;IAEvD,SAAS;;YACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;YAChD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;QAC3C,CAAC;KAAA;IAEK,cAAc,CAAC,+BAAmD;;YACtE,OAAO,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAA;QAChH,CAAC;KAAA;IAEa,YAAY,CAAC,+BAAmD;;YAC5E,QAAQ,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBAC7B,KAAK,qBAAqB,CAAC,OAAO;oBAChC,IAAI,+BAA+B,IAAI,SAAS,EAAE,CAAC;wBACjD,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;oBAC5G,CAAC;yBAAM,CAAC;wBACN,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,8BAA8B,EAAE,CAAA;wBAC3E,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;wBACnF,OAAO,KAAK,CAAA;oBACd,CAAC;gBACH,KAAK,qBAAqB,CAAC,SAAS;oBAClC,IAAI,+BAA+B,IAAI,SAAS,EAAE,CAAC;wBACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;wBAC5F,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,0CAA0C,EAAE,CAAA;wBAC5F,OAAO,KAAK,CAAA;oBACd,CAAC;yBAAM,CAAC;wBACN,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,8BAA8B,EAAE,CAAA;wBAC3E,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY;4BAAE,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAA;wBACjF,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,kCAAkC,EAAE,CAAA;wBACpF,OAAO,KAAK,CAAA;oBACd,CAAC;gBACH,KAAK,qBAAqB,CAAC,uCAAuC;oBAChE,IAAI,+BAA+B,IAAI,SAAS,EAAE,CAAC;wBACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;wBAC5F,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,0CAA0C,EAAE,CAAA;wBAC5F,OAAO,KAAK,CAAA;oBACd,CAAC;;wBAAM,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAA;gBAClD,KAAK,qBAAqB,CAAC,cAAc;oBACvC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAA;gBAC/B;oBACE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;YACxF,CAAC;QACH,CAAC;KAAA;IAED,gBAAgB,CAAC,KAAY;QAC3B,QAAQ,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YAC7B,KAAK,qBAAqB,CAAC,YAAY;gBACrC,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;gBAC9H,MAAK;YACP,KAAK,qBAAqB,CAAC,kCAAkC;gBAC3D,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,uCAAuC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAA;gBACnH,MAAK;YACP,KAAK,qBAAqB,CAAC,0CAA0C;gBACnE,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;gBAC9E,MAAK;YACP;gBACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;QAChG,CAAC;IACH,CAAC;CACF","sourcesContent":["import { AuthenticationProvider } from './AuthenticationProvider'\nimport { UserGroup } from '../../icc-api/model/UserGroup'\nimport { AuthService } from './AuthService'\nimport { IccAuthApi, OAuthThirdParty } from '../../icc-api'\nimport { XHR } from '../../icc-api/api/XHR'\nimport XHRError = XHR.XHRError\nimport { decodeJwtClaims, isJwtInvalidOrExpired } from './JwtUtils'\nimport { AuthenticationResponse } from '../../icc-api/model/AuthenticationResponse'\n\n/**\n * Needed by a {@link SmartAuthProvider} to get the secrets (password, token, etc.) for authentication to the iCure SDK as needed.\n */\nexport interface AuthSecretProvider {\n  /**\n   * Provides a secret for authentication to the iCure SDK.\n   *\n   * ## Accepted secrets\n   *\n   * The method will be provided with an array of the secrets types that are acceptable (`acceptedSecrets`). Usually this array will contain multiple\n   * elements, but this depends on the group configuration, the user (if he has 2fa setup or not), or the operation being performed. For groups using\n   * default configurations and for patients without 2fa enabled for example the array will always contain the {@link AuthSecretType.PASSWORD} element.\n   * Usually the array contain also the {@link AuthSecretType.LONG_LIVED_TOKEN} element, but if the user is attempting to perform a sensitive operations\n   * such as changing his password the default group configuration does not allow for the user to authenticate using a JWT obtained from a long-lived\n   * token for this operation, meaning the array will not contain the {@link AuthSecretType.LONG_LIVED_TOKEN} element.\n   *\n   * Regardless of the number of elements in the array only one secret of the accepted types is sufficient for the operation to succeed.\n   *\n   * ## TWO_FACTOR_AUTHENTICATION_TOKEN secret type\n   *\n   * The {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN} secret type is only used when the user has 2fa enabled. In this case the SDK will call\n   * this method twice, once containing the {@link AuthSecretType.PASSWORD} element in the `acceptedSecrets` array, and if the provided secret is a\n   * valid password the SDK will immediately call this method again, this time containing the {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN}\n   * instead of the {@link AuthSecretType.PASSWORD} element.\n   *\n   * Any future call to this method from the same provider instance will not contain the {@link AuthSecretType.PASSWORD} element anymore, as it is\n   * cached, but it may contain the {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN} element instead.\n   *\n   * Note that the 2fa token is not needed for logging in through a long-lived or short-lived token, it is only used in combination with a password.\n   * If the user is using 2fa, and you get in input as `acceptedSecrets` an array `[PASSWORD, LONG_LIVED_TOKEN, SHORT_LIVED_TOKEN]`, and you pass to\n   * authenticate a long-lived token, the SDK will not call this method again to ask for the 2fa token.\n   *\n   * @param acceptedSecrets the types of secrets that are acceptable for the operation being performed.\n   * @param previousAttempts the secrets that were previously attempted by the SDK for this operation. This array will be empty the first time this\n   * method is called for a given operation, but it may contain multiple elements if the SDK has already called this method multiple times because the\n   * previously returned secrets were not valid. The first element is the first secret that was attempted, and the last element is the most recently\n   * attempted.\n   * @param isUpgradeRequest specifies if the secret was requested to upgrade an existing and valid jwt.\n   * @return a promise that resolves with the secret and the secret type to use for authentication. If the promise rejects then the ongoing SDK\n   * operation will fail without being re-attempted.\n   */\n  getSecret(acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[], isUpgradeRequest: boolean): Promise<AuthSecretDetails>\n}\n\n// We may want to add some onSuccess callback in future or similar\nexport type AuthSecretDetails =\n  | { value: string; secretType: Exclude<AuthSecretType, AuthSecretType.EXTERNAL_AUTHENTICATION> }\n  | { value: string; secretType: AuthSecretType.EXTERNAL_AUTHENTICATION; oauthType: OAuthThirdParty }\n\n/**\n * Represents a type of secret that can be used for authentication with iCure.\n */\nexport enum AuthSecretType {\n  /**\n   * Password chosen by the user.\n   */\n  PASSWORD = 'PASSWORD', // pragma: allowlist secret\n  /**\n   * Time based one time password provided by authenticator applications, generated on the basis of a timestamp and a shared secret between the iCure\n   * server and the authenticator application.\n   */\n  TWO_FACTOR_AUTHENTICATION_TOKEN = 'TWO_FACTOR_AUTHENTICATION_TOKEN',\n  /**\n   * A short-lived iCure token, an internal authentication token that lasts 5 minutes or less. Unlike passwords these tokens usually are generated by\n   * some component of iCure, and are not chosen by the user.\n   */\n  SHORT_LIVED_TOKEN = 'SHORT_LIVED_TOKEN',\n  /**\n   * A long-lived iCure token, an internal authentication token that lasts longer than 5 minutes. Unlike passwords these tokens usually are generated\n   * by some component of iCure, and are not chosen by the user.\n   */\n  LONG_LIVED_TOKEN = 'LONG_LIVED_TOKEN',\n  /**\n   * A token provided by an external authentication provider (e.g. Oauth/Google).\n   * Not yet in use.\n   */\n  EXTERNAL_AUTHENTICATION = 'EXTERNAL_AUTHENTICATION',\n  /**\n   * A special case of external authentication where the provider is a digital identity provider.\n   * Not yet in use.\n   */\n  // DIGITAL_ID = 'DIGITAL_ID',\n}\n\n// Here starts internal entities that should not be used directly.\n\n/**\n * @internal this class is meant for internal use only and may be changed without notice. The SmartAuthProvider will be initialised automatically\n * by the iCure api depending on the authentication options you provide.\n *\n * An authentication provider that automatically requests secrets for authentication as needed.\n *\n * This authentication provider can be initialised already with some secrets or tokens, and the provider will cache them and use them as needed for\n * as long as they remain valid. If at any point however the provider needs an updated secret or a secret of a different kind it will automatically\n * request this to the {@link SmartAuthProvider} to get the secret.\n *\n * An advantage of using this provider over others is that in case all the cached tokens and secrets were to expire while performing a request,\n * instead of having the request fail the provider will ask for new secrets from the {@link SmartAuthProvider} and the request will automatically\n * be retried with the new secret. Additionally, the provider may request updated secrets also for performing some sensitive operations (e.g. changing\n * password of the user) even if the cached tokens and/or did not expire. This could be the case for example if the cached secret is a long-lived\n * token, but in order to change the password the user needs to provide his current password.\n *\n * Note that in this context the cache of secrets and token is in memory only, and is not persisted in any way. Different instances of this provider\n * will not share the same cache.\n *\n */\nexport class SmartAuthProvider implements AuthenticationProvider {\n  /**\n   * Initialises a {@link SmartAuthProvider}.\n   * @param authApi an \"anonymous\" {@link IccAuthApi} to use for authentication.\n   * @param login\n   * @param secretProvider\n   * @param props optional initialisation properties.\n   */\n  static initialise(\n    authApi: IccAuthApi,\n    login: string,\n    secretProvider: AuthSecretProvider,\n    props: {\n      initialSecret?: { password: string } | { longToken: string } | { oauthToken: string; oauthType: OAuthThirdParty }\n      initialAuthToken?: string\n      initialRefreshToken?: string\n      loginGroupId?: string\n      debugLog?: boolean\n    } = {}\n  ): SmartAuthProvider {\n    let initialSecret: CachedSecretType | undefined = undefined\n    if (props.initialSecret) {\n      if ('password' in props.initialSecret) {\n        initialSecret = { value: props.initialSecret.password, type: ServerAuthenticationClass.PASSWORD }\n      } else if ('longToken' in props.initialSecret) {\n        initialSecret = { value: props.initialSecret.longToken, type: ServerAuthenticationClass.LONG_LIVED_TOKEN }\n      } else {\n        initialSecret = {\n          value: props.initialSecret.oauthToken,\n          type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,\n          oauthType: props.initialSecret.oauthType,\n        }\n      }\n    }\n    return new SmartAuthProvider(\n      new TokenProvider(\n        login,\n        props.loginGroupId,\n        initialSecret,\n        props.initialAuthToken,\n        props.initialRefreshToken,\n        authApi,\n        secretProvider,\n        props.debugLog != undefined ? props.debugLog : true\n      ),\n      props.loginGroupId\n    )\n  }\n\n  private constructor(private readonly tokenProvider: TokenProvider, private readonly groupId: string | undefined) {}\n\n  getAuthService(): AuthService {\n    return new SmartAuthService(this.tokenProvider)\n  }\n\n  async switchGroup(newGroupId: string, matches: Array<UserGroup>): Promise<AuthenticationProvider> {\n    if (newGroupId == this.groupId) return Promise.resolve(this)\n    if (!matches.find((match) => match.groupId == newGroupId)) throw new Error('New group id not found in matches.')\n    const switchedProvider = await this.tokenProvider.switchedGroup(newGroupId)\n    return new SmartAuthProvider(switchedProvider, this.groupId)\n  }\n\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined> {\n    return this.tokenProvider.getCachedTokensOrLoad()\n  }\n}\n\nenum ServerAuthenticationClass {\n  // DIGITAL_ID = 60,\n  TWO_FACTOR_AUTHENTICATION = 50,\n  SHORT_LIVED_TOKEN = 40,\n  EXTERNAL_AUTHENTICATION = 30,\n  PASSWORD = 20,\n  LONG_LIVED_TOKEN = 10,\n}\n// Secrets lasting more than 5 minutes -> makes sense to reuse them to get an elevated security jwt\ntype LongLivedSecretType = ServerAuthenticationClass.LONG_LIVED_TOKEN | ServerAuthenticationClass.PASSWORD\ntype CachedSecretType =\n  | { value: string; type: LongLivedSecretType | undefined }\n  | { value: string; type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION; oauthType: OAuthThirdParty }\n// In some providers Oauth tokens may have short duration or may be usable only once. We only want to cache them if they are going to be reusable and\n// if they last more than 5 minutes.\nconst longLivedOAuthTokens = new Set([OAuthThirdParty.GOOGLE])\nclass TokenProvider {\n  constructor(\n    private login: string,\n    private groupId: string | undefined,\n    private currentLongLivedSecret: CachedSecretType | undefined,\n    private cachedToken: string | undefined,\n    private cachedRefreshToken: string | undefined,\n    private readonly authApi: IccAuthApi,\n    private readonly authSecretProvider: AuthSecretProvider,\n    private readonly debugLog: boolean\n  ) {}\n\n  private debugCacheInfo(): String {\n    return `\\n\\tcached bearer exp: ${this.cachedToken ? decodeJwtClaims(this.cachedToken)['exp'] : 'none'}\\n\\tcached refresh exp ${\n      this.cachedRefreshToken ? decodeJwtClaims(this.cachedRefreshToken)['exp'] : 'none'\n    }\\n\\tcached secret: ${this.currentLongLivedSecret?.value != undefined}\\n\\tcached secret type: ${this.currentLongLivedSecret?.type}`\n  }\n\n  async getCachedOrRefreshedOrNewToken(): Promise<{ token: string; type: RetrievedTokenType }> {\n    if (!!this.cachedToken && !isJwtInvalidOrExpired(this.cachedToken)) {\n      return { token: this.cachedToken, type: RetrievedTokenType.CACHED }\n    } else if (!!this.cachedRefreshToken && !isJwtInvalidOrExpired(this.cachedRefreshToken)) {\n      return this.refreshAndCacheToken(this.cachedRefreshToken)\n    } else {\n      return { token: await this.getAndCacheNewToken(undefined), type: RetrievedTokenType.NEW }\n    }\n  }\n\n  async getCachedTokensOrLoad(): Promise<{ token: string; refreshToken: string }> {\n    if (!this.cachedToken || !this.cachedRefreshToken) {\n      await this.getAndCacheNewToken(undefined)\n    }\n    return { token: this.cachedToken!, refreshToken: this.cachedRefreshToken! }\n  }\n\n  async getNewTokenWithClass(minimumAuthenticationClass: number): Promise<string> {\n    return await this.getAndCacheNewToken(minimumAuthenticationClass)\n  }\n\n  private async getAndCacheNewToken(minimumAuthenticationClassLevel: number | undefined): Promise<string> {\n    const { token, refreshToken } = await this.getNewToken(minimumAuthenticationClassLevel ?? 0)\n    this.cachedToken = token\n    this.cachedRefreshToken = refreshToken\n    return token\n  }\n\n  private async refreshAndCacheToken(refreshToken: string): Promise<{ token: string; type: RetrievedTokenType }> {\n    if (this.debugLog) console.log(`Attempting to refresh bearer token ${this.debugCacheInfo()}`)\n    return await this.authApi.refreshAuthenticationJWT(refreshToken).then(\n      (authResult) => {\n        if (!authResult.token) throw new Error('Internal error: refresh succeeded but no token was returned. Unsupported backend version?')\n        this.cachedToken = authResult.token\n        return { token: authResult.token, type: RetrievedTokenType.REFRESHED }\n      },\n      async () => ({ token: await this.getAndCacheNewToken(undefined), type: RetrievedTokenType.NEW })\n    )\n  }\n\n  private async getNewToken(minimumAuthenticationClassLevel: number): Promise<{ token: string; refreshToken: string }> {\n    if (this.debugLog) console.log(`Attempting to get new token for auth class ${minimumAuthenticationClassLevel} ${this.debugCacheInfo()}`)\n    if (!!this.currentLongLivedSecret && (!this.currentLongLivedSecret.type || this.currentLongLivedSecret.type >= minimumAuthenticationClassLevel)) {\n      if (this.debugLog) console.log('Using cached secret')\n      const resultWithCachedSecret = await this.doGetTokenWithSecret(this.currentLongLivedSecret, minimumAuthenticationClassLevel)\n      if ('success' in resultWithCachedSecret) {\n        if (this.debugLog) console.log('New token using cached secret success')\n        return resultWithCachedSecret.success\n      } else if (\n        resultWithCachedSecret.failure === DoGetTokenResultFailureReason.NEEDS_2FA &&\n        minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION\n      ) {\n        if (this.debugLog) console.log('New token using cached secret requires 2fa')\n        return this.askTotpAndGetToken(this.currentLongLivedSecret.value, minimumAuthenticationClassLevel)\n      } else {\n        if (this.debugLog) console.log('New token using cached secret failed')\n        return this.askSecretAndGetToken(minimumAuthenticationClassLevel, true)\n      }\n    } else {\n      if (this.debugLog) console.log('No cached credentials of correct auth class found')\n      return this.askSecretAndGetToken(minimumAuthenticationClassLevel, true)\n    }\n  }\n\n  private async askSecretAndGetToken(\n    minimumAuthenticationClassLevel: number,\n    passwordIsValidAs2fa: boolean\n  ): Promise<{ token: string; refreshToken: string }> {\n    const acceptedSecrets = [\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.LONG_LIVED_TOKEN ? [AuthSecretType.LONG_LIVED_TOKEN] : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.SHORT_LIVED_TOKEN ? [AuthSecretType.SHORT_LIVED_TOKEN] : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION &&\n      (passwordIsValidAs2fa || minimumAuthenticationClassLevel <= ServerAuthenticationClass.PASSWORD)\n        ? [AuthSecretType.PASSWORD]\n        : [],\n    ].flat()\n    if (!acceptedSecrets.length)\n      throw new Error('Internal error: no secret type is accepted for this request. Group may be misconfigured, or client may be outdated.')\n    const attempts: AuthSecretDetails[] = []\n    if (this.debugLog) console.log(`Asking for secret and getting token for auth class ${minimumAuthenticationClassLevel} ${this.debugCacheInfo()}`)\n    while (true) {\n      const secretDetails = await this.authSecretProvider.getSecret([...acceptedSecrets], attempts, minimumAuthenticationClassLevel > 0)\n      if (!acceptedSecrets.includes(secretDetails.secretType))\n        throw new Error(`Accepted secret types are ${JSON.stringify(acceptedSecrets)}, but got a secret of type ${secretDetails.secretType}.`)\n      attempts.push(secretDetails)\n      const result = await this.doGetTokenWithSecret(secretDetails, minimumAuthenticationClassLevel)\n      if ('success' in result) {\n        this.updateCachedSecret(secretDetails)\n        return result.success\n      } else if (result.failure == DoGetTokenResultFailureReason.NEEDS_2FA) {\n        return this.askTotpAndGetToken(secretDetails.value, minimumAuthenticationClassLevel)\n      } else if (secretDetails.value == AuthSecretType.PASSWORD && result.failure == DoGetTokenResultFailureReason.INVALID_AUTH_CLASS_LEVEL) {\n        // If we tried a password, and it turns out that the user has 2fa not enabled next time we don't consider password valid\n        return this.askSecretAndGetToken(minimumAuthenticationClassLevel, false)\n      } // else retry\n    }\n  }\n\n  private async askTotpAndGetToken(password: string, minimumAuthenticationClassLevel: number): Promise<{ token: string; refreshToken: string }> {\n    if (minimumAuthenticationClassLevel > ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION)\n      throw new Error(\n        \"Internal error: asking for totp to login but minimumAuthenticationClassLevel is higher than TWO_FACTOR_AUTHENTICATION's level.\"\n      )\n    const attempts: AuthSecretDetails[] = []\n    while (true) {\n      const details = await this.authSecretProvider.getSecret([AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN], attempts, false)\n      if (details.secretType != AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)\n        throw new Error(`Was expecting a 2fa token but got a secret of type ${details.secretType}.`)\n      attempts.push(details)\n      const result = await this.doGetTokenWithSecret({ value: `${password}|${details.value}` }, minimumAuthenticationClassLevel)\n      if ('success' in result) {\n        this.updateCachedSecret({ value: password, secretType: AuthSecretType.PASSWORD })\n        return result.success\n      } else if (result.failure != DoGetTokenResultFailureReason.INVALID_2FA) {\n        throw new Error(`Unexpected error while trying to login with (previously) valid password and 2fa token ${result.failure}.`)\n      } // else retry\n    }\n  }\n\n  private async doGetTokenWithSecret(\n    secret: { value: string; oauthType?: OAuthThirdParty },\n    minimumAuthenticationClassLevel: number\n  ): Promise<DoGetTokenResult> {\n    let authResultPromise: Promise<AuthenticationResponse>\n    if ('oauthType' in secret && !!secret.oauthType) {\n      authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value) // TODO add group id\n    } else {\n      authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId)\n    }\n    return authResultPromise.then(\n      (authResult) => {\n        const { token, refreshToken } = authResult\n        if (!token || !refreshToken) throw new Error('Internal error: login succeeded but no token was returned. Unsupported backend version?')\n        const claims = decodeJwtClaims(token)\n        const authClassLevel = claims['tac']\n        if (!authClassLevel || typeof authClassLevel !== 'number') {\n          if (minimumAuthenticationClassLevel > 0) {\n            throw new Error('Internal error: authClassLevel is not a number. Unsupported backend version?')\n          } else return { success: { token, refreshToken } }\n        }\n        if (authClassLevel < minimumAuthenticationClassLevel) {\n          return { failure: DoGetTokenResultFailureReason.INVALID_AUTH_CLASS_LEVEL }\n        } else {\n          return { success: { token, refreshToken } }\n        }\n      },\n      (error) => {\n        if (!(error instanceof XHRError)) throw error\n        if (error.statusCode == 401 || error.statusCode == 412) {\n          // Password is wrong (401) or unacceptable (e.g. too short, 412)\n          return { failure: DoGetTokenResultFailureReason.INVALID_PW_OR_TOKEN }\n        } else if (error.statusCode == 406) {\n          // Password is correct, but 2fa token is not\n          return { failure: DoGetTokenResultFailureReason.INVALID_2FA }\n        } else if (error.statusCode == 417) {\n          // Password is correct, but the user has 2fa enabled and no 2fa token was provided\n          return { failure: DoGetTokenResultFailureReason.NEEDS_2FA }\n        } else throw error\n      }\n    )\n  }\n\n  async switchedGroup(newGroupId: string): Promise<TokenProvider> {\n    const groupSwitchedTokens = this.cachedRefreshToken\n      ? await this.authApi.switchGroup(this.cachedRefreshToken, newGroupId).then(\n          (response) => {\n            if (!response.token || !response.refreshToken)\n              throw new Error('Internal error: group switch succeeded but no token was returned. Unsupported backend version?')\n            return { token: response.token, refreshToken: response.refreshToken }\n          },\n          () => ({ token: undefined, refreshToken: undefined })\n        )\n      : { token: undefined, refreshToken: undefined }\n    return new TokenProvider(\n      this.login,\n      newGroupId,\n      this.currentLongLivedSecret ? { value: this.currentLongLivedSecret.value, type: undefined } : undefined,\n      groupSwitchedTokens.token,\n      groupSwitchedTokens.refreshToken,\n      this.authApi,\n      this.authSecretProvider,\n      this.debugLog\n    )\n  }\n\n  private updateCachedSecret(details: AuthSecretDetails) {\n    switch (details.secretType) {\n      case AuthSecretType.PASSWORD:\n        this.currentLongLivedSecret = { value: details.value, type: ServerAuthenticationClass.PASSWORD }\n        break\n      case AuthSecretType.LONG_LIVED_TOKEN:\n        this.currentLongLivedSecret = { value: details.value, type: ServerAuthenticationClass.LONG_LIVED_TOKEN }\n        break\n      case AuthSecretType.EXTERNAL_AUTHENTICATION:\n        if (longLivedOAuthTokens.has(details.oauthType)) {\n          this.currentLongLivedSecret = {\n            value: details.value,\n            type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,\n            oauthType: details.oauthType,\n          }\n        }\n        break\n    }\n  }\n}\ntype DoGetTokenResult = { success: { token: string; refreshToken: string } } | { failure: DoGetTokenResultFailureReason }\nenum DoGetTokenResultFailureReason {\n  NEEDS_2FA,\n  INVALID_2FA,\n  INVALID_PW_OR_TOKEN,\n  INVALID_AUTH_CLASS_LEVEL,\n}\nenum RetrievedTokenType {\n  CACHED,\n  REFRESHED,\n  NEW,\n}\n\nenum SmartAuthServiceState {\n  INITIAL,\n  DONE_INITIAL,\n  REATTEMPT,\n  REATTEMPTED_WITH_NEW_UNBOUND_TOKEN,\n  REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN,\n  EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS,\n  TERMINAL_ERROR,\n}\nclass SmartAuthService implements AuthService {\n  private currentState:\n    | { id: SmartAuthServiceState.INITIAL }\n    | { id: SmartAuthServiceState.DONE_INITIAL; initialToken: string }\n    | { id: SmartAuthServiceState.REATTEMPT; initialToken: string; initialError: Error }\n    | { id: SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN }\n    | { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n    | { id: SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS; errorFromNewToken: Error }\n    | { id: SmartAuthServiceState.TERMINAL_ERROR; error: Error } = { id: SmartAuthServiceState.INITIAL }\n\n  constructor(private readonly tokenProvider: TokenProvider) {}\n\n  async jwtGetter(): Promise<{ token: string; refreshToken: string | undefined }> {\n    const token = await this.getAuthToken(undefined)\n    return { token, refreshToken: undefined }\n  }\n\n  async getAuthHeaders(minimumAuthenticationClassLevel: number | undefined): Promise<Array<XHR.Header>> {\n    return [new XHR.Header('Authorization', `Bearer ${await this.getAuthToken(minimumAuthenticationClassLevel)}`)]\n  }\n\n  private async getAuthToken(minimumAuthenticationClassLevel: number | undefined): Promise<string> {\n    switch (this.currentState.id) {\n      case SmartAuthServiceState.INITIAL:\n        if (minimumAuthenticationClassLevel != undefined) {\n          throw new Error('Illegal state: cannot ask for a specific auth class level at the first request attempt.')\n        } else {\n          const { token } = await this.tokenProvider.getCachedOrRefreshedOrNewToken()\n          this.currentState = { id: SmartAuthServiceState.DONE_INITIAL, initialToken: token }\n          return token\n        }\n      case SmartAuthServiceState.REATTEMPT:\n        if (minimumAuthenticationClassLevel != undefined) {\n          const token = await this.tokenProvider.getNewTokenWithClass(minimumAuthenticationClassLevel)\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n          return token\n        } else {\n          const { token } = await this.tokenProvider.getCachedOrRefreshedOrNewToken()\n          if (token == this.currentState.initialToken) throw this.currentState.initialError\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN }\n          return token\n        }\n      case SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS:\n        if (minimumAuthenticationClassLevel != undefined) {\n          const token = await this.tokenProvider.getNewTokenWithClass(minimumAuthenticationClassLevel)\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n          return token\n        } else throw this.currentState.errorFromNewToken\n      case SmartAuthServiceState.TERMINAL_ERROR:\n        throw this.currentState.error\n      default:\n        throw new Error(`Illegal state: cannot get token in state ${this.currentState.id}.`)\n    }\n  }\n\n  invalidateHeader(error: Error): void {\n    switch (this.currentState.id) {\n      case SmartAuthServiceState.DONE_INITIAL:\n        this.currentState = { id: SmartAuthServiceState.REATTEMPT, initialToken: this.currentState.initialToken, initialError: error }\n        break\n      case SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN:\n        this.currentState = { id: SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS, errorFromNewToken: error }\n        break\n      case SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN:\n        this.currentState = { id: SmartAuthServiceState.TERMINAL_ERROR, error: error }\n        break\n      default:\n        throw new Error(`Illegal state: cannot invalidate header in state ${this.currentState.id}.`)\n    }\n  }\n}\n"]}
+{"version":3,"file":"SmartAuthProvider.js","sourceRoot":"","sources":["../../../icc-x-api/auth/SmartAuthProvider.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,2CAA8E;AAC9E,+CAA2C;AAC3C,IAAO,QAAQ,GAAG,SAAG,CAAC,QAAQ,CAAA;AAC9B,yCAAmE;AAyDnE;;GAEG;AACH,IAAY,cAkCX;AAlCD,WAAY,cAAc;IACxB;;OAEG;IACH,uCAAqB,CAAA;IACrB;;;OAGG;IACH,qFAAmE,CAAA;IACnE;;;OAGG;IACH,yDAAuC,CAAA;IACvC;;;OAGG;IACH,uDAAqC,CAAA;IACrC;;;OAGG;IACH,qEAAmD,CAAA;IACnD;;OAEG;IACH,2CAAyB,CAAA;IACzB;;;OAGG;IACH,6CAA2B,CAAA;AAC7B,CAAC,EAlCW,cAAc,8BAAd,cAAc,QAkCzB;AASD,kEAAkE;AAElE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,iBAAiB;IAC5B;;;;;;OAMG;IACH,MAAM,CAAO,UAAU;6DACrB,OAAmB,EACnB,KAAyB,EACzB,cAAkC,EAClC,QAMI,EAAE;YAEN,IAAI,aAAa,GAAiC,SAAS,CAAA;YAC3D,IAAI,gBAAgB,GAAuB,KAAK,CAAC,gBAAgB,CAAA;YACjE,IAAI,mBAAmB,GAAuB,KAAK,CAAC,mBAAmB,CAAA;YACvE,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACxB,IAAI,UAAU,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;oBACtC,IAAI,KAAK,IAAI,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;oBAC/G,aAAa,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAA;gBACnG,CAAC;qBAAM,IAAI,WAAW,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;oBAC9C,IAAI,KAAK,IAAI,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;oBAC/G,aAAa,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB,EAAE,CAAA;gBAC5G,CAAC;qBAAM,IAAI,YAAY,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;oBAC/C,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC5D,aAAa,GAAG;4BACd,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;4BACrC,IAAI,EAAE,yBAAyB,CAAC,uBAAuB;4BACvD,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS;yBACzC,CAAA;oBACH,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC;4BACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,wBAAwB,CACzD,KAAK,CAAC,aAAa,CAAC,SAAS,EAC7B,KAAK,CAAC,aAAa,CAAC,UAAU,EAC9B,KAAK,CAAC,YAAY,CACnB,CAAA;4BACD,IAAI,YAAY,CAAC,KAAK,IAAI,SAAS,IAAI,YAAY,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC;gCAC9E,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAA;gCACrC,mBAAmB,GAAG,YAAY,CAAC,YAAY,CAAA;4BACjD,CAAC;wBACH,CAAC;wBAAC,OAAO,CAAC,EAAE,CAAC;4BACX,aAAa;wBACf,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,IAAI,gBAAgB,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;oBACnD,IAAI,CAAC;wBACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,wBAAwB,CACzD,KAAK,CAAC,aAAa,CAAC,QAAQ,EAC5B,KAAK,CAAC,aAAa,CAAC,cAAc,EAClC,KAAK,CAAC,YAAY,CACnB,CAAA;wBACD,IAAI,YAAY,CAAC,KAAK,IAAI,SAAS,IAAI,YAAY,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC;4BAC9E,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAA;4BACrC,mBAAmB,GAAG,YAAY,CAAC,YAAY,CAAA;wBACjD,CAAC;oBACH,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,aAAa;oBACf,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC;wBACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;wBAClH,IAAI,YAAY,CAAC,KAAK,IAAI,SAAS,IAAI,YAAY,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC;4BAC9E,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAA;4BACrC,mBAAmB,GAAG,YAAY,CAAC,YAAY,CAAA;wBACjD,CAAC;oBACH,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,aAAa;oBACf,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,IAAI,iBAAiB,CAC1B,IAAI,aAAa,CACf,KAAK,EACL,KAAK,CAAC,YAAY,EAClB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,OAAO,EACP,cAAc,EACd,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CACpD,EACD,KAAK,CAAC,YAAY,CACnB,CAAA;QACH,CAAC;KAAA;IAED,YAAqC,aAA4B,EAAmB,OAA2B;QAA1E,kBAAa,GAAb,aAAa,CAAe;QAAmB,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnH,cAAc;QACZ,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACjD,CAAC;IAEK,WAAW,CAAC,UAAkB,EAAE,OAAyB;;YAC7D,IAAI,UAAU,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;YAChH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;YAC3E,OAAO,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9D,CAAC;KAAA;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,qBAAqB,EAAE,CAAA;IACnD,CAAC;CACF;AA7GD,8CA6GC;AAED,IAAK,yBAOJ;AAPD,WAAK,yBAAyB;IAC5B,sFAAe,CAAA;IACf,oHAA8B,CAAA;IAC9B,oGAAsB,CAAA;IACtB,gHAA4B,CAAA;IAC5B,kFAAa,CAAA;IACb,kGAAqB,CAAA;AACvB,CAAC,EAPI,yBAAyB,KAAzB,yBAAyB,QAO7B;AAMD,qJAAqJ;AACrJ,oCAAoC;AACpC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,yBAAe,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9D,MAAM,aAAa;IACjB,YACU,KAAyB,EACzB,OAA2B,EAC3B,sBAAoD,EACpD,WAA+B,EAC/B,kBAAsC,EAC7B,OAAmB,EACnB,kBAAsC,EACtC,QAAiB;QAP1B,UAAK,GAAL,KAAK,CAAoB;QACzB,YAAO,GAAP,OAAO,CAAoB;QAC3B,2BAAsB,GAAtB,sBAAsB,CAA8B;QACpD,gBAAW,GAAX,WAAW,CAAoB;QAC/B,uBAAkB,GAAlB,kBAAkB,CAAoB;QAC7B,YAAO,GAAP,OAAO,CAAY;QACnB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,aAAQ,GAAR,QAAQ,CAAS;IACjC,CAAC;IAEI,cAAc;;QACpB,OAAO,0BAA0B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAA,0BAAe,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,0BACnG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAA,0BAAe,EAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAC9E,sBAAsB,CAAA,MAAA,IAAI,CAAC,sBAAsB,0CAAE,KAAK,KAAI,SAAS,2BAA2B,MAAA,IAAI,CAAC,sBAAsB,0CAAE,IAAI,EAAE,CAAA;IACrI,CAAC;IAEK,8BAA8B;;YAClC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAA,gCAAqB,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,kBAAkB,CAAC,MAAM,EAAE,CAAA;YACrE,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAA,gCAAqB,EAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACxF,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;YAC3D,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAA;YAC3F,CAAC;QACH,CAAC;KAAA;IAEK,qBAAqB;;YACzB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAClD,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;YAC3C,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAY,EAAE,YAAY,EAAE,IAAI,CAAC,kBAAmB,EAAE,CAAA;QAC7E,CAAC;KAAA;IAEK,oBAAoB,CAAC,0BAAkC;;YAC3D,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,0BAA0B,CAAC,CAAA;QACnE,CAAC;KAAA;IAEa,mBAAmB,CAAC,+BAAmD;;YACnF,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,+BAA+B,aAA/B,+BAA+B,cAA/B,+BAA+B,GAAI,CAAC,CAAC,CAAA;YAC5F,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;YACxB,IAAI,CAAC,kBAAkB,GAAG,YAAY,CAAA;YACtC,OAAO,KAAK,CAAA;QACd,CAAC;KAAA;IAEa,oBAAoB,CAAC,YAAoB;;YACrD,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;YAC7F,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CACnE,CAAC,UAAU,EAAE,EAAE;gBACb,IAAI,CAAC,UAAU,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAA;gBACnI,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,KAAK,CAAA;gBACnC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAA;YACxE,CAAC,EACD,GAAS,EAAE,gDAAC,OAAA,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAA,GAAA,CACjG,CAAA;QACH,CAAC;KAAA;IAEa,WAAW,CAAC,+BAAuC;;YAC/D,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,8CAA8C,+BAA+B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;YACxI,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,+BAA+B,CAAC,EAAE,CAAC;gBAChJ,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;gBACrD,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,sBAAsB,EAAE,EAAE,+BAA+B,CAAC,CAAA;gBACxI,IAAI,SAAS,IAAI,sBAAsB,EAAE,CAAC;oBACxC,IAAI,IAAI,CAAC,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAA;oBACvE,OAAO,sBAAsB,CAAC,OAAO,CAAA;gBACvC,CAAC;qBAAM,IACL,sBAAsB,CAAC,OAAO,KAAK,6BAA6B,CAAC,SAAS;oBAC1E,+BAA+B,IAAI,yBAAyB,CAAC,yBAAyB,EACtF,CAAC;oBACD,IAAI,IAAI,CAAC,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAA;oBAC5E,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAA;gBACpG,CAAC;qBAAM,CAAC;oBACN,IAAI,IAAI,CAAC,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAA;oBACtE,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;gBACzE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAA;gBACnF,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;KAAA;IAEa,oBAAoB,CAChC,+BAAuC,EACvC,oBAA6B;;YAE7B,MAAM,eAAe,GAAG;gBACtB,+BAA+B,IAAI,yBAAyB,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,IAAI,SAAS;oBACtG,CAAC,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC;oBACnC,CAAC,CAAC,EAAE;gBACN,+BAA+B,IAAI,yBAAyB,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,SAAS;oBACvG,CAAC,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC;oBACpC,CAAC,CAAC,EAAE;gBACN,+BAA+B,IAAI,yBAAyB,CAAC,yBAAyB;oBACtF,IAAI,CAAC,KAAK,IAAI,SAAS;oBACvB,CAAC,oBAAoB,IAAI,+BAA+B,IAAI,yBAAyB,CAAC,QAAQ,CAAC;oBAC7F,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAC3B,CAAC,CAAC,EAAE;gBACN,+BAA+B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;gBACxE,+BAA+B,IAAI,yBAAyB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC1G,+BAA+B,IAAI,yBAAyB,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE;aACrI,CAAC,IAAI,EAAE,CAAA;YACR,IAAI,CAAC,eAAe,CAAC,MAAM;gBACzB,MAAM,IAAI,KAAK,CAAC,qHAAqH,CAAC,CAAA;YACxI,MAAM,QAAQ,GAAwB,EAAE,CAAA;YACxC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,sDAAsD,+BAA+B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;YAChJ,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,eAAe,CAAC,EAAE,QAAQ,EAAE,+BAA+B,GAAG,CAAC,CAAC,CAAA;gBAClI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,8BAA8B,aAAa,CAAC,UAAU,GAAG,CAAC,CAAA;gBACxI,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;gBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,+BAA+B,CAAC,CAAA;gBACvG,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;oBACxB,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;oBACtC,OAAO,MAAM,CAAC,OAAO,CAAA;gBACvB,CAAC;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,SAAS,EAAE,CAAC;oBACrE,OAAO,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAA;gBACtF,CAAC;qBAAM,IAAI,aAAa,CAAC,KAAK,IAAI,cAAc,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,wBAAwB,EAAE,CAAC;oBACtI,wHAAwH;oBACxH,OAAO,IAAI,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;gBAC1E,CAAC,CAAC,aAAa;YACjB,CAAC;QACH,CAAC;KAAA;IAEa,kBAAkB,CAAC,QAAgB,EAAE,+BAAuC;;YACxF,IAAI,+BAA+B,GAAG,yBAAyB,CAAC,yBAAyB;gBACvF,MAAM,IAAI,KAAK,CACb,gIAAgI,CACjI,CAAA;YACH,MAAM,QAAQ,GAAwB,EAAE,CAAA;YACxC,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,+BAA+B,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;gBAC1H,IAAI,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,+BAA+B;oBACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,OAAO,CAAC,UAAU,GAAG,CAAC,CAAA;gBAC9F,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC5C,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,+BAA+B,EAAE,EAAE,EAC9G,+BAA+B,CAChC,CAAA;gBACD,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;oBACxB,IAAI,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAA;oBACjF,OAAO,MAAM,CAAC,OAAO,CAAA;gBACvB,CAAC;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,WAAW,EAAE,CAAC;oBACvE,MAAM,IAAI,KAAK,CAAC,yFAAyF,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;gBAC7H,CAAC,CAAC,aAAa;YACjB,CAAC;QACH,CAAC;KAAA;IAEa,oBAAoB,CAChC,aAAwE,EACxE,+BAAuC;;YAEvC,IAAI,iBAAkD,CAAA;YACtD,IAAI,QAAQ,IAAI,aAAa,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAA;gBACnC,IAAI,WAAW,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBAChD,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;gBACzG,CAAC;qBAAM,CAAC;oBACN,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;gBACxG,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAA;gBAChC,IAAI,MAAM,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;oBACnD,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;gBACxG,CAAC;qBAAM,IAAI,MAAM,CAAC,UAAU,IAAI,cAAc,CAAC,uBAAuB,EAAE,CAAC;oBACvE,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;gBACzG,CAAC;qBAAM,IAAI,MAAM,CAAC,UAAU,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;oBAC3D,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;gBACnF,CAAC;qBAAM,CAAC;oBACN,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;gBACxG,CAAC;YACH,CAAC;YACD,OAAO,iBAAiB,CAAC,IAAI,CAC3B,CAAC,UAAU,EAAE,EAAE;gBACb,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,UAAU,CAAA;gBAC1C,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;gBACvI,MAAM,MAAM,GAAG,IAAA,0BAAe,EAAC,KAAK,CAAC,CAAA;gBACrC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;gBACpC,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;oBAC1D,IAAI,+BAA+B,GAAG,CAAC,EAAE,CAAC;wBACxC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;oBACjG,CAAC;;wBAAM,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAA;gBACpD,CAAC;gBACD,IAAI,cAAc,GAAG,+BAA+B,EAAE,CAAC;oBACrD,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,wBAAwB,EAAE,CAAA;gBAC5E,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAA;gBAC7C,CAAC;YACH,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAA;gBAC7C,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBACvD,gEAAgE;oBAChE,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,mBAAmB,EAAE,CAAA;gBACvE,CAAC;qBAAM,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBACnC,4CAA4C;oBAC5C,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,WAAW,EAAE,CAAA;gBAC/D,CAAC;qBAAM,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBACnC,kFAAkF;oBAClF,OAAO,EAAE,OAAO,EAAE,6BAA6B,CAAC,SAAS,EAAE,CAAA;gBAC7D,CAAC;;oBAAM,MAAM,KAAK,CAAA;YACpB,CAAC,CACF,CAAA;QACH,CAAC;KAAA;IAEK,aAAa,CAAC,UAAkB;;YACpC,MAAM,mBAAmB,GAAG,IAAI,CAAC,kBAAkB;gBACjD,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC,IAAI,CACtE,CAAC,QAAQ,EAAE,EAAE;oBACX,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY;wBAC3C,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;oBACnH,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAA;gBACvE,CAAC,EACD,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CACtD;gBACH,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;YACjD,OAAO,IAAI,aAAa,CACtB,IAAI,CAAC,KAAK,EACV,UAAU,EACV,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,EACvG,mBAAmB,CAAC,KAAK,EACzB,mBAAmB,CAAC,YAAY,EAChC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,QAAQ,CACd,CAAA;QACH,CAAC;KAAA;IAEO,kBAAkB,CAAC,OAA0B;QACnD,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3B,KAAK,cAAc,CAAC,QAAQ;gBAC1B,IAAI,CAAC,sBAAsB,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAA;gBAChG,MAAK;YACP,KAAK,cAAc,CAAC,gBAAgB;gBAClC,IAAI,CAAC,sBAAsB,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB,EAAE,CAAA;gBACxG,MAAK;YACP,KAAK,cAAc,CAAC,uBAAuB;gBACzC,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,sBAAsB,GAAG;wBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,IAAI,EAAE,yBAAyB,CAAC,uBAAuB;wBACvD,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAA;gBACH,CAAC;gBACD,MAAK;QACT,CAAC;IACH,CAAC;CACF;AAED,IAAK,6BAKJ;AALD,WAAK,6BAA6B;IAChC,2FAAS,CAAA;IACT,+FAAW,CAAA;IACX,+GAAmB,CAAA;IACnB,yHAAwB,CAAA;AAC1B,CAAC,EALI,6BAA6B,KAA7B,6BAA6B,QAKjC;AACD,IAAK,kBAIJ;AAJD,WAAK,kBAAkB;IACrB,+DAAM,CAAA;IACN,qEAAS,CAAA;IACT,yDAAG,CAAA;AACL,CAAC,EAJI,kBAAkB,KAAlB,kBAAkB,QAItB;AAED,IAAK,qBAQJ;AARD,WAAK,qBAAqB;IACxB,uEAAO,CAAA;IACP,iFAAY,CAAA;IACZ,2EAAS,CAAA;IACT,6HAAkC,CAAA;IAClC,6IAA0C,CAAA;IAC1C,uIAAuC,CAAA;IACvC,qFAAc,CAAA;AAChB,CAAC,EARI,qBAAqB,KAArB,qBAAqB,QAQzB;AACD,MAAM,gBAAgB;IAUpB,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QATjD,iBAAY,GAO6C,EAAE,EAAE,EAAE,qBAAqB,CAAC,OAAO,EAAE,CAAA;IAE1C,CAAC;IAEvD,SAAS;;YACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;YAChD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;QAC3C,CAAC;KAAA;IAEK,cAAc,CAAC,+BAAmD;;YACtE,OAAO,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAA;QAChH,CAAC;KAAA;IAEa,YAAY,CAAC,+BAAmD;;YAC5E,QAAQ,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBAC7B,KAAK,qBAAqB,CAAC,OAAO;oBAChC,IAAI,+BAA+B,IAAI,SAAS,EAAE,CAAC;wBACjD,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAA;oBAC5G,CAAC;yBAAM,CAAC;wBACN,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,8BAA8B,EAAE,CAAA;wBAC3E,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;wBACnF,OAAO,KAAK,CAAA;oBACd,CAAC;gBACH,KAAK,qBAAqB,CAAC,SAAS;oBAClC,IAAI,+BAA+B,IAAI,SAAS,EAAE,CAAC;wBACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;wBAC5F,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,0CAA0C,EAAE,CAAA;wBAC5F,OAAO,KAAK,CAAA;oBACd,CAAC;yBAAM,CAAC;wBACN,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,8BAA8B,EAAE,CAAA;wBAC3E,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY;4BAAE,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAA;wBACjF,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,kCAAkC,EAAE,CAAA;wBACpF,OAAO,KAAK,CAAA;oBACd,CAAC;gBACH,KAAK,qBAAqB,CAAC,uCAAuC;oBAChE,IAAI,+BAA+B,IAAI,SAAS,EAAE,CAAC;wBACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAA;wBAC5F,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,0CAA0C,EAAE,CAAA;wBAC5F,OAAO,KAAK,CAAA;oBACd,CAAC;;wBAAM,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAA;gBAClD,KAAK,qBAAqB,CAAC,cAAc;oBACvC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAA;gBAC/B;oBACE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;YACxF,CAAC;QACH,CAAC;KAAA;IAED,gBAAgB,CAAC,KAAY;QAC3B,QAAQ,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YAC7B,KAAK,qBAAqB,CAAC,YAAY;gBACrC,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;gBAC9H,MAAK;YACP,KAAK,qBAAqB,CAAC,kCAAkC;gBAC3D,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,uCAAuC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAA;gBACnH,MAAK;YACP,KAAK,qBAAqB,CAAC,0CAA0C;gBACnE,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,qBAAqB,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;gBAC9E,MAAK;YACP;gBACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;QAChG,CAAC;IACH,CAAC;CACF","sourcesContent":["import { AuthenticationProvider } from './AuthenticationProvider'\nimport { UserGroup } from '../../icc-api/model/UserGroup'\nimport { AuthService } from './AuthService'\nimport { DigitalIdProvider, IccAuthApi, OAuthThirdParty } from '../../icc-api'\nimport { XHR } from '../../icc-api/api/XHR'\nimport XHRError = XHR.XHRError\nimport { decodeJwtClaims, isJwtInvalidOrExpired } from './JwtUtils'\nimport { AuthenticationResponse } from '../../icc-api/model/AuthenticationResponse'\n\n/**\n * Needed by a {@link SmartAuthProvider} to get the secrets (password, token, etc.) for authentication to the iCure SDK as needed.\n */\nexport interface AuthSecretProvider {\n  /**\n   * Provides a secret for authentication to the iCure SDK.\n   *\n   * ## Accepted secrets\n   *\n   * The method will be provided with an array of the secrets types that are acceptable (`acceptedSecrets`). Usually this array will contain multiple\n   * elements, but this depends on the group configuration, the user (if he has 2fa setup or not), or the operation being performed. For groups using\n   * default configurations and for patients without 2fa enabled for example the array will always contain the {@link AuthSecretType.PASSWORD} element.\n   * Usually the array contain also the {@link AuthSecretType.LONG_LIVED_TOKEN} element, but if the user is attempting to perform a sensitive operations\n   * such as changing his password the default group configuration does not allow for the user to authenticate using a JWT obtained from a long-lived\n   * token for this operation, meaning the array will not contain the {@link AuthSecretType.LONG_LIVED_TOKEN} element.\n   *\n   * Regardless of the number of elements in the array only one secret of the accepted types is sufficient for the operation to succeed.\n   *\n   * ## TWO_FACTOR_AUTHENTICATION_TOKEN secret type\n   *\n   * The {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN} secret type is only used when the user has 2fa enabled. In this case the SDK will call\n   * this method twice, once containing the {@link AuthSecretType.PASSWORD} element in the `acceptedSecrets` array, and if the provided secret is a\n   * valid password the SDK will immediately call this method again, this time containing the {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN}\n   * instead of the {@link AuthSecretType.PASSWORD} element.\n   *\n   * Any future call to this method from the same provider instance will not contain the {@link AuthSecretType.PASSWORD} element anymore, as it is\n   * cached, but it may contain the {@link AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN} element instead.\n   *\n   * Note that the 2fa token is not needed for logging in through a long-lived or short-lived token, it is only used in combination with a password.\n   * If the user is using 2fa, and you get in input as `acceptedSecrets` an array `[PASSWORD, LONG_LIVED_TOKEN, SHORT_LIVED_TOKEN]`, and you pass to\n   * authenticate a long-lived token, the SDK will not call this method again to ask for the 2fa token.\n   *\n   * @param acceptedSecrets the types of secrets that are acceptable for the operation being performed.\n   * @param previousAttempts the secrets that were previously attempted by the SDK for this operation. This array will be empty the first time this\n   * method is called for a given operation, but it may contain multiple elements if the SDK has already called this method multiple times because the\n   * previously returned secrets were not valid. The first element is the first secret that was attempted, and the last element is the most recently\n   * attempted.\n   * @param isUpgradeRequest specifies if the secret was requested to upgrade an existing and valid jwt.\n   * @return a promise that resolves with the secret and the secret type to use for authentication. If the promise rejects then the ongoing SDK\n   * operation will fail without being re-attempted.\n   */\n  getSecret(acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[], isUpgradeRequest: boolean): Promise<AuthSecretDetails>\n}\n\n// We may want to add some onSuccess callback in future or similar\nexport type AuthSecretDetails =\n  | {\n      value: string\n      secretType: Exclude<AuthSecretType, AuthSecretType.EXTERNAL_AUTHENTICATION | AuthSecretType.DIGITAL_ID | AuthSecretType.ICURE_CLOUD>\n    }\n  | { value: string; secretType: AuthSecretType.EXTERNAL_AUTHENTICATION; oauthType: OAuthThirdParty }\n  | { value: string; secretType: AuthSecretType.DIGITAL_ID; provider: DigitalIdProvider }\n  | { value: string; secretType: AuthSecretType.ICURE_CLOUD; issuer: string }\n\n/**\n * Represents a type of secret that can be used for authentication with iCure.\n */\nexport enum AuthSecretType {\n  /**\n   * Password chosen by the user.\n   */\n  PASSWORD = 'PASSWORD', // pragma: allowlist secret\n  /**\n   * Time based one time password provided by authenticator applications, generated on the basis of a timestamp and a shared secret between the iCure\n   * server and the authenticator application.\n   */\n  TWO_FACTOR_AUTHENTICATION_TOKEN = 'TWO_FACTOR_AUTHENTICATION_TOKEN',\n  /**\n   * A short-lived iCure token, an internal authentication token that lasts 5 minutes or less. Unlike passwords these tokens usually are generated by\n   * some component of iCure, and are not chosen by the user.\n   */\n  SHORT_LIVED_TOKEN = 'SHORT_LIVED_TOKEN',\n  /**\n   * A long-lived iCure token, an internal authentication token that lasts longer than 5 minutes. Unlike passwords these tokens usually are generated\n   * by some component of iCure, and are not chosen by the user.\n   */\n  LONG_LIVED_TOKEN = 'LONG_LIVED_TOKEN',\n  /**\n   * A token provided by an external authentication provider (e.g. Oauth/Google).\n   * Not yet in use.\n   */\n  EXTERNAL_AUTHENTICATION = 'EXTERNAL_AUTHENTICATION',\n  /**\n   * A special case of external authentication where the provider is a digital identity provider.\n   */\n  DIGITAL_ID = 'DIGITAL_ID',\n  /**\n   * The secret is an authentication token for a cloud instance of icure (kraken-cloud).\n   * Supported only on lite instances.\n   */\n  ICURE_CLOUD = 'ICURE_CLOUD',\n}\n\nexport type SmartAuthProviderInitialSecret =\n  | { password: string }\n  | { longToken: string }\n  | { oauthToken: string; oauthType: OAuthThirdParty }\n  | { digitalIdToken: string; provider: DigitalIdProvider }\n  | { cloudToken: string; issuer: string }\n\n// Here starts internal entities that should not be used directly.\n\n/**\n * @internal this class is meant for internal use only and may be changed without notice. The SmartAuthProvider will be initialised automatically\n * by the iCure api depending on the authentication options you provide.\n *\n * An authentication provider that automatically requests secrets for authentication as needed.\n *\n * This authentication provider can be initialised already with some secrets or tokens, and the provider will cache them and use them as needed for\n * as long as they remain valid. If at any point however the provider needs an updated secret or a secret of a different kind it will automatically\n * request this to the {@link SmartAuthProvider} to get the secret.\n *\n * An advantage of using this provider over others is that in case all the cached tokens and secrets were to expire while performing a request,\n * instead of having the request fail the provider will ask for new secrets from the {@link SmartAuthProvider} and the request will automatically\n * be retried with the new secret. Additionally, the provider may request updated secrets also for performing some sensitive operations (e.g. changing\n * password of the user) even if the cached tokens and/or did not expire. This could be the case for example if the cached secret is a long-lived\n * token, but in order to change the password the user needs to provide his current password.\n *\n * Note that in this context the cache of secrets and token is in memory only, and is not persisted in any way. Different instances of this provider\n * will not share the same cache.\n *\n */\nexport class SmartAuthProvider implements AuthenticationProvider {\n  /**\n   * Initialises a {@link SmartAuthProvider}.\n   * @param authApi an \"anonymous\" {@link IccAuthApi} to use for authentication.\n   * @param login\n   * @param secretProvider\n   * @param props optional initialisation properties.\n   */\n  static async initialise(\n    authApi: IccAuthApi,\n    login: string | undefined,\n    secretProvider: AuthSecretProvider,\n    props: {\n      initialSecret?: SmartAuthProviderInitialSecret\n      initialAuthToken?: string\n      initialRefreshToken?: string\n      loginGroupId?: string\n      debugLog?: boolean\n    } = {}\n  ): Promise<SmartAuthProvider> {\n    let initialSecret: CachedSecretType | undefined = undefined\n    let initialAuthToken: string | undefined = props.initialAuthToken\n    let initialRefreshToken: string | undefined = props.initialRefreshToken\n    if (props.initialSecret) {\n      if ('password' in props.initialSecret) {\n        if (login == undefined) throw new Error('To use a password initial secret you must provide a login identifier')\n        initialSecret = { value: props.initialSecret.password, type: ServerAuthenticationClass.PASSWORD }\n      } else if ('longToken' in props.initialSecret) {\n        if (login == undefined) throw new Error('To use a password initial secret you must provide a login identifier')\n        initialSecret = { value: props.initialSecret.longToken, type: ServerAuthenticationClass.LONG_LIVED_TOKEN }\n      } else if ('oauthToken' in props.initialSecret) {\n        if (longLivedOAuthTokens.has(props.initialSecret.oauthType)) {\n          initialSecret = {\n            value: props.initialSecret.oauthToken,\n            type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,\n            oauthType: props.initialSecret.oauthType,\n          }\n        } else {\n          try {\n            const authResponse = await authApi.loginWithThirdPartyToken(\n              props.initialSecret.oauthType,\n              props.initialSecret.oauthToken,\n              props.loginGroupId\n            )\n            if (authResponse.token != undefined && authResponse.refreshToken != undefined) {\n              initialAuthToken = authResponse.token\n              initialRefreshToken = authResponse.refreshToken\n            }\n          } catch (_) {\n            /* ignored */\n          }\n        }\n      } else if ('digitalIdToken' in props.initialSecret) {\n        try {\n          const authResponse = await authApi.loginWithThirdPartyToken(\n            props.initialSecret.provider,\n            props.initialSecret.digitalIdToken,\n            props.loginGroupId\n          )\n          if (authResponse.token != undefined && authResponse.refreshToken != undefined) {\n            initialAuthToken = authResponse.token\n            initialRefreshToken = authResponse.refreshToken\n          }\n        } catch (_) {\n          /* ignored */\n        }\n      } else {\n        try {\n          const authResponse = await authApi.loginWithCloudToken(props.initialSecret.issuer, props.initialSecret.cloudToken)\n          if (authResponse.token != undefined && authResponse.refreshToken != undefined) {\n            initialAuthToken = authResponse.token\n            initialRefreshToken = authResponse.refreshToken\n          }\n        } catch (_) {\n          /* ignored */\n        }\n      }\n    }\n    return new SmartAuthProvider(\n      new TokenProvider(\n        login,\n        props.loginGroupId,\n        initialSecret,\n        initialAuthToken,\n        initialRefreshToken,\n        authApi,\n        secretProvider,\n        props.debugLog != undefined ? props.debugLog : true\n      ),\n      props.loginGroupId\n    )\n  }\n\n  private constructor(private readonly tokenProvider: TokenProvider, private readonly groupId: string | undefined) {}\n\n  getAuthService(): AuthService {\n    return new SmartAuthService(this.tokenProvider)\n  }\n\n  async switchGroup(newGroupId: string, matches: Array<UserGroup>): Promise<AuthenticationProvider> {\n    if (newGroupId == this.groupId) return Promise.resolve(this)\n    if (!matches.find((match) => match.groupId == newGroupId)) throw new Error('New group id not found in matches.')\n    const switchedProvider = await this.tokenProvider.switchedGroup(newGroupId)\n    return new SmartAuthProvider(switchedProvider, this.groupId)\n  }\n\n  getIcureTokens(): Promise<{ token: string; refreshToken: string } | undefined> {\n    return this.tokenProvider.getCachedTokensOrLoad()\n  }\n}\n\nenum ServerAuthenticationClass {\n  DIGITAL_ID = 60,\n  TWO_FACTOR_AUTHENTICATION = 50,\n  SHORT_LIVED_TOKEN = 40,\n  EXTERNAL_AUTHENTICATION = 30,\n  PASSWORD = 20,\n  LONG_LIVED_TOKEN = 10,\n}\n// Secrets lasting more than 5 minutes -> makes sense to reuse them to get an elevated security jwt\ntype LongLivedSecretType = ServerAuthenticationClass.LONG_LIVED_TOKEN | ServerAuthenticationClass.PASSWORD\ntype CachedSecretType =\n  | { value: string; type: LongLivedSecretType | undefined }\n  | { value: string; type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION; oauthType: OAuthThirdParty }\n// In some providers Oauth tokens may have short duration or may be usable only once. We only want to cache them if they are going to be reusable and\n// if they last more than 5 minutes.\nconst longLivedOAuthTokens = new Set([OAuthThirdParty.GOOGLE])\nclass TokenProvider {\n  constructor(\n    private login: string | undefined,\n    private groupId: string | undefined,\n    private currentLongLivedSecret: CachedSecretType | undefined,\n    private cachedToken: string | undefined,\n    private cachedRefreshToken: string | undefined,\n    private readonly authApi: IccAuthApi,\n    private readonly authSecretProvider: AuthSecretProvider,\n    private readonly debugLog: boolean\n  ) {}\n\n  private debugCacheInfo(): String {\n    return `\\n\\tcached bearer exp: ${this.cachedToken ? decodeJwtClaims(this.cachedToken)['exp'] : 'none'}\\n\\tcached refresh exp ${\n      this.cachedRefreshToken ? decodeJwtClaims(this.cachedRefreshToken)['exp'] : 'none'\n    }\\n\\tcached secret: ${this.currentLongLivedSecret?.value != undefined}\\n\\tcached secret type: ${this.currentLongLivedSecret?.type}`\n  }\n\n  async getCachedOrRefreshedOrNewToken(): Promise<{ token: string; type: RetrievedTokenType }> {\n    if (!!this.cachedToken && !isJwtInvalidOrExpired(this.cachedToken)) {\n      return { token: this.cachedToken, type: RetrievedTokenType.CACHED }\n    } else if (!!this.cachedRefreshToken && !isJwtInvalidOrExpired(this.cachedRefreshToken)) {\n      return this.refreshAndCacheToken(this.cachedRefreshToken)\n    } else {\n      return { token: await this.getAndCacheNewToken(undefined), type: RetrievedTokenType.NEW }\n    }\n  }\n\n  async getCachedTokensOrLoad(): Promise<{ token: string; refreshToken: string }> {\n    if (!this.cachedToken || !this.cachedRefreshToken) {\n      await this.getAndCacheNewToken(undefined)\n    }\n    return { token: this.cachedToken!, refreshToken: this.cachedRefreshToken! }\n  }\n\n  async getNewTokenWithClass(minimumAuthenticationClass: number): Promise<string> {\n    return await this.getAndCacheNewToken(minimumAuthenticationClass)\n  }\n\n  private async getAndCacheNewToken(minimumAuthenticationClassLevel: number | undefined): Promise<string> {\n    const { token, refreshToken } = await this.getNewToken(minimumAuthenticationClassLevel ?? 0)\n    this.cachedToken = token\n    this.cachedRefreshToken = refreshToken\n    return token\n  }\n\n  private async refreshAndCacheToken(refreshToken: string): Promise<{ token: string; type: RetrievedTokenType }> {\n    if (this.debugLog) console.log(`Attempting to refresh bearer token ${this.debugCacheInfo()}`)\n    return await this.authApi.refreshAuthenticationJWT(refreshToken).then(\n      (authResult) => {\n        if (!authResult.token) throw new Error('Internal error: refresh succeeded but no token was returned. Unsupported backend version?')\n        this.cachedToken = authResult.token\n        return { token: authResult.token, type: RetrievedTokenType.REFRESHED }\n      },\n      async () => ({ token: await this.getAndCacheNewToken(undefined), type: RetrievedTokenType.NEW })\n    )\n  }\n\n  private async getNewToken(minimumAuthenticationClassLevel: number): Promise<{ token: string; refreshToken: string }> {\n    if (this.debugLog) console.log(`Attempting to get new token for auth class ${minimumAuthenticationClassLevel} ${this.debugCacheInfo()}`)\n    if (!!this.currentLongLivedSecret && (!this.currentLongLivedSecret.type || this.currentLongLivedSecret.type >= minimumAuthenticationClassLevel)) {\n      if (this.debugLog) console.log('Using cached secret')\n      const resultWithCachedSecret = await this.doGetTokenWithSecret({ cached: this.currentLongLivedSecret }, minimumAuthenticationClassLevel)\n      if ('success' in resultWithCachedSecret) {\n        if (this.debugLog) console.log('New token using cached secret success')\n        return resultWithCachedSecret.success\n      } else if (\n        resultWithCachedSecret.failure === DoGetTokenResultFailureReason.NEEDS_2FA &&\n        minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION\n      ) {\n        if (this.debugLog) console.log('New token using cached secret requires 2fa')\n        return this.askTotpAndGetToken(this.currentLongLivedSecret.value, minimumAuthenticationClassLevel)\n      } else {\n        if (this.debugLog) console.log('New token using cached secret failed')\n        return this.askSecretAndGetToken(minimumAuthenticationClassLevel, true)\n      }\n    } else {\n      if (this.debugLog) console.log('No cached credentials of correct auth class found')\n      return this.askSecretAndGetToken(minimumAuthenticationClassLevel, true)\n    }\n  }\n\n  private async askSecretAndGetToken(\n    minimumAuthenticationClassLevel: number,\n    passwordIsValidAs2fa: boolean\n  ): Promise<{ token: string; refreshToken: string }> {\n    const acceptedSecrets = [\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.LONG_LIVED_TOKEN && this.login != undefined\n        ? [AuthSecretType.LONG_LIVED_TOKEN]\n        : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.SHORT_LIVED_TOKEN && this.login != undefined\n        ? [AuthSecretType.SHORT_LIVED_TOKEN]\n        : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION &&\n      this.login != undefined &&\n      (passwordIsValidAs2fa || minimumAuthenticationClassLevel <= ServerAuthenticationClass.PASSWORD)\n        ? [AuthSecretType.PASSWORD]\n        : [],\n      minimumAuthenticationClassLevel <= 0 ? [AuthSecretType.ICURE_CLOUD] : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.DIGITAL_ID ? [AuthSecretType.DIGITAL_ID] : [],\n      minimumAuthenticationClassLevel <= ServerAuthenticationClass.EXTERNAL_AUTHENTICATION ? [AuthSecretType.EXTERNAL_AUTHENTICATION] : [],\n    ].flat()\n    if (!acceptedSecrets.length)\n      throw new Error('Internal error: no secret type is accepted for this request. Group may be misconfigured, or client may be outdated.')\n    const attempts: AuthSecretDetails[] = []\n    if (this.debugLog) console.log(`Asking for secret and getting token for auth class ${minimumAuthenticationClassLevel} ${this.debugCacheInfo()}`)\n    while (true) {\n      const secretDetails = await this.authSecretProvider.getSecret([...acceptedSecrets], attempts, minimumAuthenticationClassLevel > 0)\n      if (!acceptedSecrets.includes(secretDetails.secretType))\n        throw new Error(`Accepted secret types are ${JSON.stringify(acceptedSecrets)}, but got a secret of type ${secretDetails.secretType}.`)\n      attempts.push(secretDetails)\n      const result = await this.doGetTokenWithSecret({ new: secretDetails }, minimumAuthenticationClassLevel)\n      if ('success' in result) {\n        this.updateCachedSecret(secretDetails)\n        return result.success\n      } else if (result.failure == DoGetTokenResultFailureReason.NEEDS_2FA) {\n        return this.askTotpAndGetToken(secretDetails.value, minimumAuthenticationClassLevel)\n      } else if (secretDetails.value == AuthSecretType.PASSWORD && result.failure == DoGetTokenResultFailureReason.INVALID_AUTH_CLASS_LEVEL) {\n        // If we tried a password, and it turns out that the user has 2fa not enabled next time we don't consider password valid\n        return this.askSecretAndGetToken(minimumAuthenticationClassLevel, false)\n      } // else retry\n    }\n  }\n\n  private async askTotpAndGetToken(password: string, minimumAuthenticationClassLevel: number): Promise<{ token: string; refreshToken: string }> {\n    if (minimumAuthenticationClassLevel > ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION)\n      throw new Error(\n        \"Internal error: asking for totp to login but minimumAuthenticationClassLevel is higher than TWO_FACTOR_AUTHENTICATION's level.\"\n      )\n    const attempts: AuthSecretDetails[] = []\n    while (true) {\n      const details = await this.authSecretProvider.getSecret([AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN], attempts, false)\n      if (details.secretType != AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)\n        throw new Error(`Was expecting a 2fa token but got a secret of type ${details.secretType}.`)\n      attempts.push(details)\n      const result = await this.doGetTokenWithSecret(\n        { new: { value: `${password}|${details.value}`, secretType: AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN } },\n        minimumAuthenticationClassLevel\n      )\n      if ('success' in result) {\n        this.updateCachedSecret({ value: password, secretType: AuthSecretType.PASSWORD })\n        return result.success\n      } else if (result.failure != DoGetTokenResultFailureReason.INVALID_2FA) {\n        throw new Error(`Unexpected error while trying to login with (previously) valid password and 2fa token ${result.failure}.`)\n      } // else retry\n    }\n  }\n\n  private async doGetTokenWithSecret(\n    secretDetails: { new: AuthSecretDetails } | { cached: CachedSecretType },\n    minimumAuthenticationClassLevel: number\n  ): Promise<DoGetTokenResult> {\n    let authResultPromise: Promise<AuthenticationResponse>\n    if ('cached' in secretDetails) {\n      const secret = secretDetails.cached\n      if ('oauthType' in secret && !!secret.oauthType) {\n        authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value, this.groupId)\n      } else {\n        authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId)\n      }\n    } else {\n      const secret = secretDetails.new\n      if (secret.secretType == AuthSecretType.DIGITAL_ID) {\n        authResultPromise = this.authApi.loginWithThirdPartyToken(secret.provider, secret.value, this.groupId)\n      } else if (secret.secretType == AuthSecretType.EXTERNAL_AUTHENTICATION) {\n        authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value, this.groupId)\n      } else if (secret.secretType == AuthSecretType.ICURE_CLOUD) {\n        authResultPromise = this.authApi.loginWithCloudToken(secret.issuer, secret.value)\n      } else {\n        authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId)\n      }\n    }\n    return authResultPromise.then(\n      (authResult) => {\n        const { token, refreshToken } = authResult\n        if (!token || !refreshToken) throw new Error('Internal error: login succeeded but no token was returned. Unsupported backend version?')\n        const claims = decodeJwtClaims(token)\n        const authClassLevel = claims['tac']\n        if (!authClassLevel || typeof authClassLevel !== 'number') {\n          if (minimumAuthenticationClassLevel > 0) {\n            throw new Error('Internal error: authClassLevel is not a number. Unsupported backend version?')\n          } else return { success: { token, refreshToken } }\n        }\n        if (authClassLevel < minimumAuthenticationClassLevel) {\n          return { failure: DoGetTokenResultFailureReason.INVALID_AUTH_CLASS_LEVEL }\n        } else {\n          return { success: { token, refreshToken } }\n        }\n      },\n      (error) => {\n        if (!(error instanceof XHRError)) throw error\n        if (error.statusCode == 401 || error.statusCode == 412) {\n          // Password is wrong (401) or unacceptable (e.g. too short, 412)\n          return { failure: DoGetTokenResultFailureReason.INVALID_PW_OR_TOKEN }\n        } else if (error.statusCode == 406) {\n          // Password is correct, but 2fa token is not\n          return { failure: DoGetTokenResultFailureReason.INVALID_2FA }\n        } else if (error.statusCode == 417) {\n          // Password is correct, but the user has 2fa enabled and no 2fa token was provided\n          return { failure: DoGetTokenResultFailureReason.NEEDS_2FA }\n        } else throw error\n      }\n    )\n  }\n\n  async switchedGroup(newGroupId: string): Promise<TokenProvider> {\n    const groupSwitchedTokens = this.cachedRefreshToken\n      ? await this.authApi.switchGroup(this.cachedRefreshToken, newGroupId).then(\n          (response) => {\n            if (!response.token || !response.refreshToken)\n              throw new Error('Internal error: group switch succeeded but no token was returned. Unsupported backend version?')\n            return { token: response.token, refreshToken: response.refreshToken }\n          },\n          () => ({ token: undefined, refreshToken: undefined })\n        )\n      : { token: undefined, refreshToken: undefined }\n    return new TokenProvider(\n      this.login,\n      newGroupId,\n      this.currentLongLivedSecret ? { value: this.currentLongLivedSecret.value, type: undefined } : undefined,\n      groupSwitchedTokens.token,\n      groupSwitchedTokens.refreshToken,\n      this.authApi,\n      this.authSecretProvider,\n      this.debugLog\n    )\n  }\n\n  private updateCachedSecret(details: AuthSecretDetails) {\n    switch (details.secretType) {\n      case AuthSecretType.PASSWORD:\n        this.currentLongLivedSecret = { value: details.value, type: ServerAuthenticationClass.PASSWORD }\n        break\n      case AuthSecretType.LONG_LIVED_TOKEN:\n        this.currentLongLivedSecret = { value: details.value, type: ServerAuthenticationClass.LONG_LIVED_TOKEN }\n        break\n      case AuthSecretType.EXTERNAL_AUTHENTICATION:\n        if (longLivedOAuthTokens.has(details.oauthType)) {\n          this.currentLongLivedSecret = {\n            value: details.value,\n            type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,\n            oauthType: details.oauthType,\n          }\n        }\n        break\n    }\n  }\n}\ntype DoGetTokenResult = { success: { token: string; refreshToken: string } } | { failure: DoGetTokenResultFailureReason }\nenum DoGetTokenResultFailureReason {\n  NEEDS_2FA,\n  INVALID_2FA,\n  INVALID_PW_OR_TOKEN,\n  INVALID_AUTH_CLASS_LEVEL,\n}\nenum RetrievedTokenType {\n  CACHED,\n  REFRESHED,\n  NEW,\n}\n\nenum SmartAuthServiceState {\n  INITIAL,\n  DONE_INITIAL,\n  REATTEMPT,\n  REATTEMPTED_WITH_NEW_UNBOUND_TOKEN,\n  REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN,\n  EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS,\n  TERMINAL_ERROR,\n}\nclass SmartAuthService implements AuthService {\n  private currentState:\n    | { id: SmartAuthServiceState.INITIAL }\n    | { id: SmartAuthServiceState.DONE_INITIAL; initialToken: string }\n    | { id: SmartAuthServiceState.REATTEMPT; initialToken: string; initialError: Error }\n    | { id: SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN }\n    | { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n    | { id: SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS; errorFromNewToken: Error }\n    | { id: SmartAuthServiceState.TERMINAL_ERROR; error: Error } = { id: SmartAuthServiceState.INITIAL }\n\n  constructor(private readonly tokenProvider: TokenProvider) {}\n\n  async jwtGetter(): Promise<{ token: string; refreshToken: string | undefined }> {\n    const token = await this.getAuthToken(undefined)\n    return { token, refreshToken: undefined }\n  }\n\n  async getAuthHeaders(minimumAuthenticationClassLevel: number | undefined): Promise<Array<XHR.Header>> {\n    return [new XHR.Header('Authorization', `Bearer ${await this.getAuthToken(minimumAuthenticationClassLevel)}`)]\n  }\n\n  private async getAuthToken(minimumAuthenticationClassLevel: number | undefined): Promise<string> {\n    switch (this.currentState.id) {\n      case SmartAuthServiceState.INITIAL:\n        if (minimumAuthenticationClassLevel != undefined) {\n          throw new Error('Illegal state: cannot ask for a specific auth class level at the first request attempt.')\n        } else {\n          const { token } = await this.tokenProvider.getCachedOrRefreshedOrNewToken()\n          this.currentState = { id: SmartAuthServiceState.DONE_INITIAL, initialToken: token }\n          return token\n        }\n      case SmartAuthServiceState.REATTEMPT:\n        if (minimumAuthenticationClassLevel != undefined) {\n          const token = await this.tokenProvider.getNewTokenWithClass(minimumAuthenticationClassLevel)\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n          return token\n        } else {\n          const { token } = await this.tokenProvider.getCachedOrRefreshedOrNewToken()\n          if (token == this.currentState.initialToken) throw this.currentState.initialError\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN }\n          return token\n        }\n      case SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS:\n        if (minimumAuthenticationClassLevel != undefined) {\n          const token = await this.tokenProvider.getNewTokenWithClass(minimumAuthenticationClassLevel)\n          this.currentState = { id: SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN }\n          return token\n        } else throw this.currentState.errorFromNewToken\n      case SmartAuthServiceState.TERMINAL_ERROR:\n        throw this.currentState.error\n      default:\n        throw new Error(`Illegal state: cannot get token in state ${this.currentState.id}.`)\n    }\n  }\n\n  invalidateHeader(error: Error): void {\n    switch (this.currentState.id) {\n      case SmartAuthServiceState.DONE_INITIAL:\n        this.currentState = { id: SmartAuthServiceState.REATTEMPT, initialToken: this.currentState.initialToken, initialError: error }\n        break\n      case SmartAuthServiceState.REATTEMPTED_WITH_NEW_UNBOUND_TOKEN:\n        this.currentState = { id: SmartAuthServiceState.EXPECT_REQUEST_WITH_SPECIFIC_AUTH_CLASS, errorFromNewToken: error }\n        break\n      case SmartAuthServiceState.REATTEMPTED_WITH_AUTH_CLASS_SPECIFIC_TOKEN:\n        this.currentState = { id: SmartAuthServiceState.TERMINAL_ERROR, error: error }\n        break\n      default:\n        throw new Error(`Illegal state: cannot invalidate header in state ${this.currentState.id}.`)\n    }\n  }\n}\n"]}

package/icc-x-api/icc-bekmehr-x-api.js

@@ -80,7 +80,8 @@ class IccBekmehrXApi extends icc_api_1.IccBekmehrApi {
                 }
                 else if (msg.type === 'DocumentDto') {
                     that.documentApi
-                        .decrypt(healthcarePartyId, msg.body.map((d) => new models_1.Document(d)))
+                        .decrypt(msg.body.map((d) => new models_1.Document(d)))
+                        .then((res) => res.map((x) => x.entity))
                         .then((res) => patchers
                         .filter((p) => p.type === 'DocumentDto')
                         .reduce((p, patcher) => __awaiter(this, void 0, void 0, function* () { return patcher.patch(yield p); }), Promise.resolve(res)))

package/icc-x-api/icc-bekmehr-x-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"icc-bekmehr-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-bekmehr-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AACA,wCAA0C;AAI1C,uDAA0D;AAC1D,oDAAmF;AACnF,0EAAgG;AAoBhG,MAAa,cAAe,SAAQ,uBAAa;IAM/C,YACE,IAAY,EACZ,OAAkC,EAClC,MAAsB,EACtB,WAA4B,EAC5B,WAA4B,EAC5B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAE9B,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI;aACrG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;aACtB,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;IAClC,CAAC;IAEa,MAAM;;YAClB,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAAA;YAChE,IAAI,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,CAAA;gBAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;gBAChC,CAAC;gBACD,OAAO,MAAM,CAAC,KAAK,CAAA;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;YAChE,CAAC;QACH,CAAC;KAAA;IAED,mBAAmB,CACjB,MAAiB,EACjB,iBAAyB,EACzB,OAA8B,EAC9B,MAA8B,EAC9B,QAAmB,EACnB,gBAA6C;QAE7C,MAAM,IAAI,GAAG,IAAI,CAAA;QAEjB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,IAAS,EAAE,EAAE;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAA,uBAAQ,EAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACjE,CAAC,CAAA;QAED,MAAM,cAAc,GAAG,CAAC,GAAQ,EAAE,KAAU,EAAE,EAAE;YAC9C,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9B,IAAI,CAAC,MAAM;yBACR,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC;yBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,QAAQ;yBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;yBACtC,MAAM,CAAC,CAAO,CAAC,EAAE,OAAO,EAAE,EAAE,gDAAC,OAAC,OAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,GAAA,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAClG;yBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;gBAC1D,CAAC;qBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAC3C,IAAI,CAAC,WAAW;yBACb,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC;yBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,QAAQ;yBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC;yBAC5C,MAAM,CAAC,CAAO,CAAC,EAAE,OAAO,EAAE,EAAE,gDAAC,OAAC,OAAgC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,GAAA,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CACxG;yBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;gBAC1D,CAAC;qBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACtC,IAAI,CAAC,WAAW;yBACb,OAAO,CACN,iBAAiB,EACjB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAO,EAAE,EAAE,CAAC,IAAI,iBAAQ,CAAC,CAAC,CAAC,CAAC,CAC3C;yBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,QAAQ;yBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC;yBACvC,MAAM,CAAC,CAAO,CAAC,EAAE,OAAO,EAAE,EAAE,gDAAC,OAAC,OAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,GAAA,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CACnG;yBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,IAAI,CACF,iBAAiB,EACjB,GAAG,CAAC,IAAI,EACR,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;wBACb,MAAM,EAAE,GAAG,CAAC,CAAC,mBAAmB,CAAA;wBAChC,MAAM,EAAE,mBAAmB,KAAkB,CAAC,EAAd,QAAQ,UAAK,CAAC,EAAxC,uBAAoC,CAAI,CAAA;wBAC9C,OAAO,EAAE,CAAC,CAAC,iCAAM,QAAQ,KAAE,mBAAmB,EAAE,IAAI,CAAC,IAAA,wBAAS,EAAC,EAAE,CAAC,CAAC,IAAG,CAAC,CAAC,QAAQ,CAAA;oBAClF,CAAC,CAAC,CACH,CACF,CAAA;gBACL,CAAC;qBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACrC,IAAI,CAAC,MAAM;yBACR,eAAe,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC;yBAC5C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,QAAQ;yBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;yBACtC,MAAM,CAAC,CAAO,CAAC,EAAE,OAAO,EAAE,EAAE,gDAAC,OAAC,OAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,GAAA,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAClG;yBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;gBAC1D,CAAC;YACH,CAAC;iBAAM,IAAI,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBACtC,IAAI,gBAAgB,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChD,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;gBACxC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC1D,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;gBACxC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;YACrC,CAAC;QACH,CAAC,CAAA;QAED,OAAO,CAAC,KAAmB,EAAE,EAAE;YAC7B,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAClC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAC5B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAS,KAAK,CAAC,IAAI,CAAA;gBAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBAChC,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAA;gBAC3B,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC;oBACrB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,UAAU,CAAE,CAAC,CAAC,MAAc,CAAC,MAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;oBAExF,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;wBACvB,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAA;wBAC3B,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC;4BACrB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAE,CAAC,CAAC,MAAc,CAAC,MAAgB,CAAC,CAAA;4BACtE,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;wBAC5B,CAAC,CAAA;wBACD,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;oBAC7B,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC,CAAA;wBACb,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;oBAC1B,CAAC;gBACH,CAAC,CAAA;gBACD,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED,sCAAsC,CACpC,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,IAAsC,EACtC,gBAA6C,EAC7C,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,6BAA6B,GAAG,EAAE,CAAC,CAAA;YAC/E,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrE,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAA;QACtI,CAAC,CAAC,CACL,CAAA;IACH,CAAC;IAED,yCAAyC,CACvC,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,IAA6B,EAC7B,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,gCAAgC,GAAG,EAAE,CAAC,CAAA;YAClF,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrE,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CACL,CAAA;IACH,CAAC;IAED,2CAA2C,CACzC,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,IAA6B,EAC7B,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,kCAAkC,GAAG,EAAE,CAAC,CAAA;YACpF,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrE,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CACL,CAAA;IACH,CAAC;IAED,4CAA4C,CAC1C,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,IAA6B,EAC7B,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,mCAAmC,GAAG,EAAE,CAAC,CAAA;YACrF,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrE,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CACL,CAAA;IACH,CAAC;IAED,6CAA6C,CAC3C,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,aAAqB,EACrB,OAAe,EACf,IAAuC,EACvC,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,0CAA0C,GAAG,EAAE,CAAC,CAAA;YAC5F,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE;wBACV,SAAS,EAAE,SAAS;wBACpB,QAAQ,EAAE,QAAQ;wBAClB,aAAa,EAAE,aAAa;wBAC5B,OAAO,EAAE,OAAO;wBAChB,IAAI,EAAE,IAAI;qBACX;iBACF,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CACL,CAAA;IACH,CAAC;CACF;AApRD,wCAoRC","sourcesContent":["import * as models from '../icc-api/model/models'\nimport { IccBekmehrApi } from '../icc-api'\nimport { IccContactXApi } from './icc-contact-x-api'\nimport { IccDocumentXApi } from './icc-document-x-api'\nimport { IccHelementXApi } from './icc-helement-x-api'\nimport { ua2string, utf8_2ua } from './utils/binary-utils'\nimport { Contact, Document, HealthElement, Service } from '../icc-api/model/models'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\n\nexport type Patcher = ContactPatcher | HealthElementPatcher | DocumentPatcher | ServicePatcher\nexport interface ContactPatcher {\n  type: 'ContactDto'\n  patch: (contacts: Contact[]) => Promise<Contact[]>\n}\nexport interface HealthElementPatcher {\n  type: 'HealthElementDto'\n  patch: (patients: HealthElement[]) => Promise<HealthElement[]>\n}\nexport interface DocumentPatcher {\n  type: 'DocumentDto'\n  patch: (documents: Document[]) => Promise<Document[]>\n}\nexport interface ServicePatcher {\n  type: 'ServiceDto'\n  patch: (documents: Service[]) => Promise<Service[]>\n}\n\nexport class IccBekmehrXApi extends IccBekmehrApi {\n  private readonly ctcApi: IccContactXApi\n  private readonly helementApi: IccHelementXApi\n  private readonly documentApi: IccDocumentXApi\n  private readonly wssHost: string\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    ctcApi: IccContactXApi,\n    helementApi: IccHelementXApi,\n    documentApi: IccDocumentXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.ctcApi = ctcApi\n    this.helementApi = helementApi\n    this.documentApi = documentApi\n\n    this.wssHost = new URL(this.host, typeof window !== 'undefined' ? window.location.href : undefined).href\n      .replace(/^http/, 'ws')\n      .replace(/\\/rest\\/v.+/, '/ws')\n  }\n\n  private async getJwt(): Promise<string> {\n    const authService = this.authenticationProvider.getAuthService()\n    if (!!authService.jwtGetter) {\n      const tokens = await authService.jwtGetter()\n      if (!tokens) {\n        throw new Error('Missing JWT')\n      }\n      return tokens.token\n    } else {\n      throw new Error('The existing provider is not a JWT provider')\n    }\n  }\n\n  socketEventListener(\n    socket: WebSocket,\n    healthcarePartyId: string,\n    resolve: (value: Blob) => void,\n    reject: (reason?: any) => void,\n    patchers: Patcher[],\n    progressCallback?: (progress: number) => void\n  ) {\n    const that = this\n\n    const send = (command: string, uuid: string, body: any) => {\n      const data = JSON.stringify({ command, uuid, body })\n      socket.send(data.length > 65000 ? utf8_2ua(data).buffer : data)\n    }\n\n    const messageHandler = (msg: any, event: any) => {\n      if (msg.command === 'decrypt') {\n        if (msg.type === 'ContactDto') {\n          that.ctcApi\n            .decrypt(healthcarePartyId, msg.body)\n            .then((res) =>\n              patchers\n                .filter((p) => p.type === 'ContactDto')\n                .reduce(async (p, patcher) => (patcher as ContactPatcher).patch(await p), Promise.resolve(res))\n            )\n            .then((res) => send('decryptResponse', msg.uuid, res))\n        } else if (msg.type === 'HealthElementDto') {\n          that.helementApi\n            .decrypt(healthcarePartyId, msg.body)\n            .then((res) =>\n              patchers\n                .filter((p) => p.type === 'HealthElementDto')\n                .reduce(async (p, patcher) => (patcher as HealthElementPatcher).patch(await p), Promise.resolve(res))\n            )\n            .then((res) => send('decryptResponse', msg.uuid, res))\n        } else if (msg.type === 'DocumentDto') {\n          that.documentApi\n            .decrypt(\n              healthcarePartyId,\n              msg.body.map((d: JSON) => new Document(d))\n            )\n            .then((res) =>\n              patchers\n                .filter((p) => p.type === 'DocumentDto')\n                .reduce(async (p, patcher) => (patcher as DocumentPatcher).patch(await p), Promise.resolve(res))\n            )\n            .then((res) =>\n              send(\n                'decryptResponse',\n                msg.uuid,\n                res?.map((d) => {\n                  const de = d.decryptedAttachment\n                  const { encryptedAttachment, ...stripped } = d\n                  return de ? { ...stripped, decryptedAttachment: btoa(ua2string(de)) } : stripped\n                })\n              )\n            )\n        } else if (msg.type === 'ServiceDto') {\n          that.ctcApi\n            .decryptServices(healthcarePartyId, msg.body)\n            .then((res) =>\n              patchers\n                .filter((p) => p.type === 'ServiceDto')\n                .reduce(async (p, patcher) => (patcher as ServicePatcher).patch(await p), Promise.resolve(res))\n            )\n            .then((res) => send('decryptResponse', msg.uuid, res))\n        }\n      } else if (msg.command === 'progress') {\n        if (progressCallback && msg.body && msg.body[0]) {\n          progressCallback(msg.body[0].progress)\n        }\n      } else {\n        console.error('error received from backend:' + event.data)\n        reject('websocket error: ' + event.data)\n        socket.close(4000, 'backend error')\n      }\n    }\n\n    return (event: MessageEvent) => {\n      if (typeof event.data === 'string') {\n        const msg = JSON.parse(event.data)\n        messageHandler(msg, event)\n      } else {\n        const blob: Blob = event.data\n        const subBlob = blob.slice(0, 1)\n        const br = new FileReader()\n        br.onload = function (e) {\n          const firstChar = e.target && new Uint8Array((e.target as any).result as ArrayBuffer)[0]\n\n          if (firstChar === 0x7b) {\n            const tr = new FileReader()\n            tr.onload = function (e) {\n              const msg = e.target && JSON.parse((e.target as any).result as string)\n              messageHandler(msg, event)\n            }\n            tr.readAsBinaryString(blob)\n          } else {\n            resolve(blob)\n            socket.close(1000, 'Ok')\n          }\n        }\n        br.readAsArrayBuffer(subBlob)\n      }\n    }\n  }\n\n  generateSmfExportWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    body: models.SoftwareMedicalFileExport,\n    progressCallback?: (progress: number) => void,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateSmf?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: { patientId: patientId, language: language, info: body },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers, progressCallback))\n        })\n    )\n  }\n\n  generateSumehrExportWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    body: models.SumehrExportInfo,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateSumehr?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: { patientId: patientId, language: language, info: body },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers))\n        })\n    )\n  }\n\n  generateSumehrV2ExportWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    body: models.SumehrExportInfo,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateSumehrV2?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: { patientId: patientId, language: language, info: body },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers))\n        })\n    )\n  }\n\n  generateDiaryNoteExportWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    body: models.SumehrExportInfo,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateDiaryNote?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: { patientId: patientId, language: language, info: body },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers))\n        })\n    )\n  }\n\n  generateMedicationSchemeWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    recipientSafe: string,\n    version: number,\n    body: models.MedicationSchemeExportInfo,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateMedicationScheme?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: {\n                  patientId: patientId,\n                  language: language,\n                  recipientSafe: recipientSafe,\n                  version: version,\n                  info: body,\n                },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers))\n        })\n    )\n  }\n}\n"]}
+{"version":3,"file":"icc-bekmehr-x-api.js","sourceRoot":"","sources":["../../icc-x-api/icc-bekmehr-x-api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AACA,wCAA0C;AAI1C,uDAA0D;AAC1D,oDAAmF;AACnF,0EAAgG;AAoBhG,MAAa,cAAe,SAAQ,uBAAa;IAM/C,YACE,IAAY,EACZ,OAAkC,EAClC,MAAsB,EACtB,WAA4B,EAC5B,WAA4B,EAC5B,yBAAiD,IAAI,iDAAwB,EAAE,EAC/E,YAA2E,OAAO,MAAM,KAAK,WAAW;QACtG,CAAC,CAAC,MAAM,CAAC,KAAK;QACd,CAAC,CAAC,OAAO,IAAI,KAAK,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,KAAK;QAET,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAE9B,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI;aACrG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;aACtB,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;IAClC,CAAC;IAEa,MAAM;;YAClB,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAAA;YAChE,IAAI,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,CAAA;gBAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;gBAChC,CAAC;gBACD,OAAO,MAAM,CAAC,KAAK,CAAA;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;YAChE,CAAC;QACH,CAAC;KAAA;IAED,mBAAmB,CACjB,MAAiB,EACjB,iBAAyB,EACzB,OAA8B,EAC9B,MAA8B,EAC9B,QAAmB,EACnB,gBAA6C;QAE7C,MAAM,IAAI,GAAG,IAAI,CAAA;QAEjB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,IAAS,EAAE,EAAE;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAA,uBAAQ,EAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACjE,CAAC,CAAA;QAED,MAAM,cAAc,GAAG,CAAC,GAAQ,EAAE,KAAU,EAAE,EAAE;YAC9C,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9B,IAAI,CAAC,MAAM;yBACR,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC;yBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,QAAQ;yBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;yBACtC,MAAM,CAAC,CAAO,CAAC,EAAE,OAAO,EAAE,EAAE,gDAAC,OAAC,OAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,GAAA,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAClG;yBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;gBAC1D,CAAC;qBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAC3C,IAAI,CAAC,WAAW;yBACb,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC;yBACpC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,QAAQ;yBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC;yBAC5C,MAAM,CAAC,CAAO,CAAC,EAAE,OAAO,EAAE,EAAE,gDAAC,OAAC,OAAgC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,GAAA,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CACxG;yBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;gBAC1D,CAAC;qBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACtC,IAAI,CAAC,WAAW;yBACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAO,EAAE,EAAE,CAAC,IAAI,iBAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;yBACnD,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;yBACvC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,QAAQ;yBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC;yBACvC,MAAM,CAAC,CAAO,CAAC,EAAE,OAAO,EAAE,EAAE,gDAAC,OAAC,OAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,GAAA,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CACnG;yBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,IAAI,CACF,iBAAiB,EACjB,GAAG,CAAC,IAAI,EACR,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;wBACb,MAAM,EAAE,GAAG,CAAC,CAAC,mBAAmB,CAAA;wBAChC,MAAM,EAAE,mBAAmB,KAAkB,CAAC,EAAd,QAAQ,UAAK,CAAC,EAAxC,uBAAoC,CAAI,CAAA;wBAC9C,OAAO,EAAE,CAAC,CAAC,iCAAM,QAAQ,KAAE,mBAAmB,EAAE,IAAI,CAAC,IAAA,wBAAS,EAAC,EAAE,CAAC,CAAC,IAAG,CAAC,CAAC,QAAQ,CAAA;oBAClF,CAAC,CAAC,CACH,CACF,CAAA;gBACL,CAAC;qBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACrC,IAAI,CAAC,MAAM;yBACR,eAAe,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC;yBAC5C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,QAAQ;yBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;yBACtC,MAAM,CAAC,CAAO,CAAC,EAAE,OAAO,EAAE,EAAE,gDAAC,OAAC,OAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,GAAA,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAClG;yBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;gBAC1D,CAAC;YACH,CAAC;iBAAM,IAAI,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBACtC,IAAI,gBAAgB,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChD,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;gBACxC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC1D,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;gBACxC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;YACrC,CAAC;QACH,CAAC,CAAA;QAED,OAAO,CAAC,KAAmB,EAAE,EAAE;YAC7B,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAClC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAC5B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAS,KAAK,CAAC,IAAI,CAAA;gBAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBAChC,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAA;gBAC3B,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC;oBACrB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,UAAU,CAAE,CAAC,CAAC,MAAc,CAAC,MAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;oBAExF,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;wBACvB,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAA;wBAC3B,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC;4BACrB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAE,CAAC,CAAC,MAAc,CAAC,MAAgB,CAAC,CAAA;4BACtE,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;wBAC5B,CAAC,CAAA;wBACD,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;oBAC7B,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC,CAAA;wBACb,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;oBAC1B,CAAC;gBACH,CAAC,CAAA;gBACD,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED,sCAAsC,CACpC,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,IAAsC,EACtC,gBAA6C,EAC7C,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,6BAA6B,GAAG,EAAE,CAAC,CAAA;YAC/E,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrE,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAA;QACtI,CAAC,CAAC,CACL,CAAA;IACH,CAAC;IAED,yCAAyC,CACvC,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,IAA6B,EAC7B,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,gCAAgC,GAAG,EAAE,CAAC,CAAA;YAClF,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrE,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CACL,CAAA;IACH,CAAC;IAED,2CAA2C,CACzC,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,IAA6B,EAC7B,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,kCAAkC,GAAG,EAAE,CAAC,CAAA;YACpF,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrE,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CACL,CAAA;IACH,CAAC;IAED,4CAA4C,CAC1C,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,IAA6B,EAC7B,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,mCAAmC,GAAG,EAAE,CAAC,CAAA;YACrF,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrE,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CACL,CAAA;IACH,CAAC;IAED,6CAA6C,CAC3C,SAAiB,EACjB,iBAAyB,EACzB,QAAgB,EAChB,aAAqB,EACrB,OAAe,EACf,IAAuC,EACvC,WAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,0CAA0C,GAAG,EAAE,CAAC,CAAA;YAC5F,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE;wBACV,SAAS,EAAE,SAAS;wBACpB,QAAQ,EAAE,QAAQ;wBAClB,aAAa,EAAE,aAAa;wBAC5B,OAAO,EAAE,OAAO;wBAChB,IAAI,EAAE,IAAI;qBACX;iBACF,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;YACF,sBAAsB;YACtB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CACL,CAAA;IACH,CAAC;CACF;AAlRD,wCAkRC","sourcesContent":["import * as models from '../icc-api/model/models'\nimport { IccBekmehrApi } from '../icc-api'\nimport { IccContactXApi } from './icc-contact-x-api'\nimport { IccDocumentXApi } from './icc-document-x-api'\nimport { IccHelementXApi } from './icc-helement-x-api'\nimport { ua2string, utf8_2ua } from './utils/binary-utils'\nimport { Contact, Document, HealthElement, Service } from '../icc-api/model/models'\nimport { AuthenticationProvider, NoAuthenticationProvider } from './auth/AuthenticationProvider'\n\nexport type Patcher = ContactPatcher | HealthElementPatcher | DocumentPatcher | ServicePatcher\nexport interface ContactPatcher {\n  type: 'ContactDto'\n  patch: (contacts: Contact[]) => Promise<Contact[]>\n}\nexport interface HealthElementPatcher {\n  type: 'HealthElementDto'\n  patch: (patients: HealthElement[]) => Promise<HealthElement[]>\n}\nexport interface DocumentPatcher {\n  type: 'DocumentDto'\n  patch: (documents: Document[]) => Promise<Document[]>\n}\nexport interface ServicePatcher {\n  type: 'ServiceDto'\n  patch: (documents: Service[]) => Promise<Service[]>\n}\n\nexport class IccBekmehrXApi extends IccBekmehrApi {\n  private readonly ctcApi: IccContactXApi\n  private readonly helementApi: IccHelementXApi\n  private readonly documentApi: IccDocumentXApi\n  private readonly wssHost: string\n\n  constructor(\n    host: string,\n    headers: { [key: string]: string },\n    ctcApi: IccContactXApi,\n    helementApi: IccHelementXApi,\n    documentApi: IccDocumentXApi,\n    authenticationProvider: AuthenticationProvider = new NoAuthenticationProvider(),\n    fetchImpl: (input: RequestInfo, init?: RequestInit) => Promise<Response> = typeof window !== 'undefined'\n      ? window.fetch\n      : typeof self !== 'undefined'\n      ? self.fetch\n      : fetch\n  ) {\n    super(host, headers, authenticationProvider, fetchImpl)\n    this.ctcApi = ctcApi\n    this.helementApi = helementApi\n    this.documentApi = documentApi\n\n    this.wssHost = new URL(this.host, typeof window !== 'undefined' ? window.location.href : undefined).href\n      .replace(/^http/, 'ws')\n      .replace(/\\/rest\\/v.+/, '/ws')\n  }\n\n  private async getJwt(): Promise<string> {\n    const authService = this.authenticationProvider.getAuthService()\n    if (!!authService.jwtGetter) {\n      const tokens = await authService.jwtGetter()\n      if (!tokens) {\n        throw new Error('Missing JWT')\n      }\n      return tokens.token\n    } else {\n      throw new Error('The existing provider is not a JWT provider')\n    }\n  }\n\n  socketEventListener(\n    socket: WebSocket,\n    healthcarePartyId: string,\n    resolve: (value: Blob) => void,\n    reject: (reason?: any) => void,\n    patchers: Patcher[],\n    progressCallback?: (progress: number) => void\n  ) {\n    const that = this\n\n    const send = (command: string, uuid: string, body: any) => {\n      const data = JSON.stringify({ command, uuid, body })\n      socket.send(data.length > 65000 ? utf8_2ua(data).buffer : data)\n    }\n\n    const messageHandler = (msg: any, event: any) => {\n      if (msg.command === 'decrypt') {\n        if (msg.type === 'ContactDto') {\n          that.ctcApi\n            .decrypt(healthcarePartyId, msg.body)\n            .then((res) =>\n              patchers\n                .filter((p) => p.type === 'ContactDto')\n                .reduce(async (p, patcher) => (patcher as ContactPatcher).patch(await p), Promise.resolve(res))\n            )\n            .then((res) => send('decryptResponse', msg.uuid, res))\n        } else if (msg.type === 'HealthElementDto') {\n          that.helementApi\n            .decrypt(healthcarePartyId, msg.body)\n            .then((res) =>\n              patchers\n                .filter((p) => p.type === 'HealthElementDto')\n                .reduce(async (p, patcher) => (patcher as HealthElementPatcher).patch(await p), Promise.resolve(res))\n            )\n            .then((res) => send('decryptResponse', msg.uuid, res))\n        } else if (msg.type === 'DocumentDto') {\n          that.documentApi\n            .decrypt(msg.body.map((d: JSON) => new Document(d)))\n            .then((res) => res.map((x) => x.entity))\n            .then((res) =>\n              patchers\n                .filter((p) => p.type === 'DocumentDto')\n                .reduce(async (p, patcher) => (patcher as DocumentPatcher).patch(await p), Promise.resolve(res))\n            )\n            .then((res) =>\n              send(\n                'decryptResponse',\n                msg.uuid,\n                res?.map((d) => {\n                  const de = d.decryptedAttachment\n                  const { encryptedAttachment, ...stripped } = d\n                  return de ? { ...stripped, decryptedAttachment: btoa(ua2string(de)) } : stripped\n                })\n              )\n            )\n        } else if (msg.type === 'ServiceDto') {\n          that.ctcApi\n            .decryptServices(healthcarePartyId, msg.body)\n            .then((res) =>\n              patchers\n                .filter((p) => p.type === 'ServiceDto')\n                .reduce(async (p, patcher) => (patcher as ServicePatcher).patch(await p), Promise.resolve(res))\n            )\n            .then((res) => send('decryptResponse', msg.uuid, res))\n        }\n      } else if (msg.command === 'progress') {\n        if (progressCallback && msg.body && msg.body[0]) {\n          progressCallback(msg.body[0].progress)\n        }\n      } else {\n        console.error('error received from backend:' + event.data)\n        reject('websocket error: ' + event.data)\n        socket.close(4000, 'backend error')\n      }\n    }\n\n    return (event: MessageEvent) => {\n      if (typeof event.data === 'string') {\n        const msg = JSON.parse(event.data)\n        messageHandler(msg, event)\n      } else {\n        const blob: Blob = event.data\n        const subBlob = blob.slice(0, 1)\n        const br = new FileReader()\n        br.onload = function (e) {\n          const firstChar = e.target && new Uint8Array((e.target as any).result as ArrayBuffer)[0]\n\n          if (firstChar === 0x7b) {\n            const tr = new FileReader()\n            tr.onload = function (e) {\n              const msg = e.target && JSON.parse((e.target as any).result as string)\n              messageHandler(msg, event)\n            }\n            tr.readAsBinaryString(blob)\n          } else {\n            resolve(blob)\n            socket.close(1000, 'Ok')\n          }\n        }\n        br.readAsArrayBuffer(subBlob)\n      }\n    }\n  }\n\n  generateSmfExportWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    body: models.SoftwareMedicalFileExport,\n    progressCallback?: (progress: number) => void,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateSmf?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: { patientId: patientId, language: language, info: body },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers, progressCallback))\n        })\n    )\n  }\n\n  generateSumehrExportWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    body: models.SumehrExportInfo,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateSumehr?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: { patientId: patientId, language: language, info: body },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers))\n        })\n    )\n  }\n\n  generateSumehrV2ExportWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    body: models.SumehrExportInfo,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateSumehrV2?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: { patientId: patientId, language: language, info: body },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers))\n        })\n    )\n  }\n\n  generateDiaryNoteExportWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    body: models.SumehrExportInfo,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateDiaryNote?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: { patientId: patientId, language: language, info: body },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers))\n        })\n    )\n  }\n\n  generateMedicationSchemeWithEncryptionSupport(\n    patientId: string,\n    healthcarePartyId: string,\n    language: string,\n    recipientSafe: string,\n    version: number,\n    body: models.MedicationSchemeExportInfo,\n    patchers: Patcher[] = []\n  ): Promise<Blob | undefined> {\n    return this.getJwt().then(\n      (jwt) =>\n        new Promise<Blob | undefined>((resolve, reject) => {\n          const socket = new WebSocket(`${this.wssHost}/be_kmehr/generateMedicationScheme?jwt=${jwt}`)\n          socket.addEventListener('open', function () {\n            socket.send(\n              JSON.stringify({\n                parameters: {\n                  patientId: patientId,\n                  language: language,\n                  recipientSafe: recipientSafe,\n                  version: version,\n                  info: body,\n                },\n              })\n            )\n          })\n          // Listen for messages\n          socket.addEventListener('message', this.socketEventListener(socket, healthcarePartyId, resolve, reject, patchers))\n        })\n    )\n  }\n}\n"]}