@icure/api 8.6.19 → 8.7.0

package/test/icc-x-api/auth/jwt-concurrency-test.js

@@ -1,112 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.sleep = sleep;
-require("isomorphic-fetch");
-const mocha_1 = require("mocha");
-const test_utils_1 = require("../../utils/test_utils");
-const TestApi_1 = require("../../utils/TestApi");
-const icc_x_api_1 = require("../../../icc-x-api");
-const crypto_1 = require("crypto");
-const chai_1 = require("chai");
-const icc_api_1 = require("../../../icc-api");
-const AuthenticationProvider_1 = require("../../../icc-x-api/auth/AuthenticationProvider");
-const types_1 = require("@icure/test-setup/types");
-(0, test_utils_1.setLocalStorage)(fetch);
-let env;
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
-describe('Jwt authentication concurrency test', () => {
-    (0, mocha_1.before)(function () {
-        return __awaiter(this, void 0, void 0, function* () {
-            this.timeout(600000);
-            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
-            env = yield initializer.execute((0, types_1.getEnvVariables)());
-        });
-    });
-    it('Can login simultaneously with the same user', () => __awaiter(void 0, void 0, void 0, function* () {
-        const api = yield (0, TestApi_1.TestApi)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password, crypto_1.webcrypto);
-        const users = yield Promise.all([...Array(5)].map(() => __awaiter(void 0, void 0, void 0, function* () {
-            return yield api.userApi.getCurrentUser();
-        })));
-        users.forEach((u) => {
-            (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
-        });
-    }));
-    it('After logging in, can make requests asynchronously', () => __awaiter(void 0, void 0, void 0, function* () {
-        const api = yield (0, TestApi_1.TestApi)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password, crypto_1.webcrypto);
-        yield api.userApi.getCurrentUser();
-        const users = yield Promise.all([...Array(5)].map(() => __awaiter(void 0, void 0, void 0, function* () {
-            return yield api.userApi.getCurrentUser();
-        })));
-        users.forEach((u) => {
-            (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
-        });
-    }));
-    it('It can refresh the token asynchronously', function () {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!process.env.TEST_ENVIRONMENT || process.env.TEST_ENVIRONMENT === 'acceptance') {
-                this.skip();
-            }
-            const api = yield (0, TestApi_1.TestApi)(env.iCureUrl, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password, crypto_1.webcrypto);
-            yield api.userApi.getCurrentUser();
-            yield sleep(20000);
-            const users = yield Promise.all([...Array(5)].map(() => __awaiter(this, void 0, void 0, function* () {
-                return yield api.userApi.getCurrentUser();
-            })));
-            users.forEach((u) => {
-                (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
-            });
-        });
-    });
-    it('Can instantiate a x-api without provider and get a 401', () => __awaiter(void 0, void 0, void 0, function* () {
-        const xUserApi = new icc_x_api_1.IccUserXApi(env.iCureUrl, {}, new AuthenticationProvider_1.NoAuthenticationProvider(), null);
-        xUserApi
-            .getCurrentUser()
-            .then(() => {
-            (0, chai_1.expect)(false).to.be.eq(true, 'I should not get here');
-        })
-            .catch((e) => {
-            (0, chai_1.expect)(e.statusCode).to.be.eq(401);
-        });
-    }));
-    it('Can instantiate a user-x-api with JWT provider and make requests', () => __awaiter(void 0, void 0, void 0, function* () {
-        const authApi = new icc_api_1.IccAuthApi(env.iCureUrl, {});
-        const provider = new AuthenticationProvider_1.JwtAuthenticationProvider(authApi, env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password);
-        const xUserApi = new icc_x_api_1.IccUserXApi(env.iCureUrl, {}, provider, null);
-        const users = yield Promise.all([...Array(5)].map(() => __awaiter(void 0, void 0, void 0, function* () {
-            return yield xUserApi.getCurrentUser();
-        })));
-        users.forEach((u) => {
-            (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
-        });
-        const tokens = yield provider.getIcureTokens();
-        (0, chai_1.expect)(tokens).to.not.be.undefined;
-        const tokenOnlyProvider = new AuthenticationProvider_1.JwtAuthenticationProvider(authApi, undefined, undefined, undefined, tokens);
-        const xUserApiTokenOnly = new icc_x_api_1.IccUserXApi(env.iCureUrl, {}, tokenOnlyProvider, null);
-        const usersTokenOnly = yield Promise.all([...Array(5)].map(() => __awaiter(void 0, void 0, void 0, function* () {
-            return yield xUserApiTokenOnly.getCurrentUser();
-        })));
-        usersTokenOnly.forEach((u) => {
-            (0, chai_1.expect)(u.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
-        });
-    }));
-    it('Can instantiate a user-x-api with Basic provider and make requests', () => __awaiter(void 0, void 0, void 0, function* () {
-        const a = new AuthenticationProvider_1.BasicAuthenticationProvider(env.dataOwnerDetails[test_utils_1.hcp1Username].user, env.dataOwnerDetails[test_utils_1.hcp1Username].password);
-        const xUserApi = new icc_x_api_1.IccUserXApi(env.iCureUrl, {}, a, null);
-        const currentUser = yield xUserApi.getCurrentUser();
-        (0, chai_1.expect)(currentUser.login).to.be.equal(env.dataOwnerDetails[test_utils_1.hcp1Username].user);
-        const fetchedUser = yield xUserApi.getUser(currentUser.id);
-        (0, chai_1.expect)(fetchedUser.id).to.be.equal(currentUser.id);
-    }));
-});
-//# sourceMappingURL=jwt-concurrency-test.js.map

package/test/icc-x-api/auth/jwt-concurrency-test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-concurrency-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/auth/jwt-concurrency-test.ts"],"names":[],"mappings":";;;;;;;;;;;AAgBA,sBAEC;AAlBD,4BAAyB;AACzB,iCAA8B;AAC9B,uDAAiG;AACjG,iDAA6C;AAC7C,kDAAgD;AAChD,mCAAkC;AAClC,+BAA6B;AAG7B,8CAA6C;AAC7C,2FAAiJ;AACjJ,mDAAmE;AAEnE,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AACtB,IAAI,GAAa,CAAA;AAEjB,SAAgB,KAAK,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,IAAA,cAAM,EAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAS,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAA,iBAAO,EACvB,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EACvC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,EAC3C,kBAA8B,CAC/B,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;YACnC,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAC3C,CAAC,CAAA,CAAC,CACH,CAAA;QACD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAClB,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAS,EAAE;QAClE,MAAM,GAAG,GAAG,MAAM,IAAA,iBAAO,EACvB,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EACvC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,EAC3C,kBAA8B,CAC/B,CAAA;QAED,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAElC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;YACnC,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAC3C,CAAC,CAAA,CAAC,CACH,CAAA;QACD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAClB,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE;;YAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;gBACnF,IAAI,CAAC,IAAI,EAAE,CAAA;YACb,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAA,iBAAO,EACvB,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EACvC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,EAC3C,kBAA8B,CAC/B,CAAA;YACD,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAElC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;YAElB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;gBACnC,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;YAC3C,CAAC,CAAA,CAAC,CACH,CAAA;YACD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClB,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;YACtE,CAAC,CAAC,CAAA;QACJ,CAAC;KAAA,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAS,EAAE;QACtE,MAAM,QAAQ,GAAG,IAAI,uBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,iDAAwB,EAAE,EAAE,IAAW,CAAC,CAAA;QAC/F,QAAQ;aACL,cAAc,EAAE;aAChB,IAAI,CAAC,GAAG,EAAE;YACT,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAA;QACvD,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAW,EAAE,EAAE;YACrB,IAAA,aAAM,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;IACN,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAS,EAAE;QAChF,MAAM,OAAO,GAAG,IAAI,oBAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAChD,MAAM,QAAQ,GAAG,IAAI,kDAAyB,CAAC,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC7I,MAAM,QAAQ,GAAG,IAAI,uBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAW,CAAC,CAAA;QAEzE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;YACnC,OAAO,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAA;QACxC,CAAC,CAAA,CAAC,CACH,CAAA;QACD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAClB,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAA;QAC9C,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QAClC,MAAM,iBAAiB,GAAG,IAAI,kDAAyB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QACzG,MAAM,iBAAiB,GAAG,IAAI,uBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAW,CAAC,CAAA;QAE3F,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,CAAC,GAAG,KAAK,CAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAS,EAAE;YACnC,OAAO,MAAM,iBAAiB,CAAC,cAAc,EAAE,CAAA;QACjD,CAAC,CAAA,CAAC,CACH,CAAA;QACD,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,IAAA,aAAM,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAS,EAAE;QAClF,MAAM,CAAC,GAAG,IAAI,oDAA2B,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC/H,MAAM,QAAQ,GAAG,IAAI,uBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,IAAW,CAAC,CAAA;QAElE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAA;QACnD,IAAA,aAAM,EAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,yBAAY,CAAC,CAAC,IAAI,CAAC,CAAA;QAE9E,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAG,CAAC,CAAA;QAC3D,IAAA,aAAM,EAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACpD,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import 'isomorphic-fetch'\nimport { before } from 'mocha'\nimport { getEnvironmentInitializer, hcp1Username, setLocalStorage } from '../../utils/test_utils'\nimport { TestApi } from '../../utils/TestApi'\nimport { IccUserXApi } from '../../../icc-x-api'\nimport { webcrypto } from 'crypto'\nimport { expect } from 'chai'\nimport { XHR } from '../../../icc-api/api/XHR'\nimport XHRError = XHR.XHRError\nimport { IccAuthApi } from '../../../icc-api'\nimport { NoAuthenticationProvider, BasicAuthenticationProvider, JwtAuthenticationProvider } from '../../../icc-x-api/auth/AuthenticationProvider'\nimport { getEnvVariables, TestVars } from '@icure/test-setup/types'\n\nsetLocalStorage(fetch)\nlet env: TestVars\n\nexport function sleep(ms: number): Promise<any> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\ndescribe('Jwt authentication concurrency test', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  it('Can login simultaneously with the same user', async () => {\n    const api = await TestApi(\n      env.iCureUrl,\n      env.dataOwnerDetails[hcp1Username].user,\n      env.dataOwnerDetails[hcp1Username].password,\n      webcrypto as unknown as Crypto\n    )\n    const users = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await api.userApi.getCurrentUser()\n      })\n    )\n    users.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n  })\n\n  it('After logging in, can make requests asynchronously', async () => {\n    const api = await TestApi(\n      env.iCureUrl,\n      env.dataOwnerDetails[hcp1Username].user,\n      env.dataOwnerDetails[hcp1Username].password,\n      webcrypto as unknown as Crypto\n    )\n\n    await api.userApi.getCurrentUser()\n\n    const users = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await api.userApi.getCurrentUser()\n      })\n    )\n    users.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n  })\n\n  it('It can refresh the token asynchronously', async function () {\n    if (!process.env.TEST_ENVIRONMENT || process.env.TEST_ENVIRONMENT === 'acceptance') {\n      this.skip()\n    }\n    const api = await TestApi(\n      env.iCureUrl,\n      env.dataOwnerDetails[hcp1Username].user,\n      env.dataOwnerDetails[hcp1Username].password,\n      webcrypto as unknown as Crypto\n    )\n    await api.userApi.getCurrentUser()\n\n    await sleep(20000)\n\n    const users = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await api.userApi.getCurrentUser()\n      })\n    )\n    users.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n  })\n\n  it('Can instantiate a x-api without provider and get a 401', async () => {\n    const xUserApi = new IccUserXApi(env.iCureUrl, {}, new NoAuthenticationProvider(), null as any)\n    xUserApi\n      .getCurrentUser()\n      .then(() => {\n        expect(false).to.be.eq(true, 'I should not get here')\n      })\n      .catch((e: XHRError) => {\n        expect(e.statusCode).to.be.eq(401)\n      })\n  })\n\n  it('Can instantiate a user-x-api with JWT provider and make requests', async () => {\n    const authApi = new IccAuthApi(env.iCureUrl, {})\n    const provider = new JwtAuthenticationProvider(authApi, env.dataOwnerDetails[hcp1Username].user, env.dataOwnerDetails[hcp1Username].password)\n    const xUserApi = new IccUserXApi(env.iCureUrl, {}, provider, null as any)\n\n    const users = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await xUserApi.getCurrentUser()\n      })\n    )\n    users.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n\n    const tokens = await provider.getIcureTokens()\n    expect(tokens).to.not.be.undefined\n    const tokenOnlyProvider = new JwtAuthenticationProvider(authApi, undefined, undefined, undefined, tokens)\n    const xUserApiTokenOnly = new IccUserXApi(env.iCureUrl, {}, tokenOnlyProvider, null as any)\n\n    const usersTokenOnly = await Promise.all(\n      [...Array<number>(5)].map(async () => {\n        return await xUserApiTokenOnly.getCurrentUser()\n      })\n    )\n    usersTokenOnly.forEach((u) => {\n      expect(u.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n    })\n  })\n\n  it('Can instantiate a user-x-api with Basic provider and make requests', async () => {\n    const a = new BasicAuthenticationProvider(env.dataOwnerDetails[hcp1Username].user, env.dataOwnerDetails[hcp1Username].password)\n    const xUserApi = new IccUserXApi(env.iCureUrl, {}, a, null as any)\n\n    const currentUser = await xUserApi.getCurrentUser()\n    expect(currentUser.login).to.be.equal(env.dataOwnerDetails[hcp1Username].user)\n\n    const fetchedUser = await xUserApi.getUser(currentUser.id!)\n    expect(fetchedUser.id).to.be.equal(currentUser.id)\n  })\n})\n"]}

package/test/icc-x-api/auth/jwt-provider-test.d.ts

@@ -1 +0,0 @@
-export {};

package/test/icc-x-api/auth/jwt-provider-test.js

@@ -1,197 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const icc_api_1 = require("../../../icc-api");
-const AuthenticationResponse_1 = require("../../../icc-api/model/AuthenticationResponse");
-const ModelHelper_1 = require("../../../icc-api/model/ModelHelper");
-const chai_1 = require("chai");
-const JwtBridgedAuthService_1 = require("../../../icc-x-api/auth/JwtBridgedAuthService");
-const JwtAuthService_1 = require("../../../icc-x-api/auth/JwtAuthService");
-const XHR_1 = require("../../../icc-api/api/XHR");
-var XHRError = XHR_1.XHR.XHRError;
-const JwtError_1 = require("../../../icc-x-api/auth/JwtError");
-const BasicAuthService_1 = require("../../../icc-x-api/auth/BasicAuthService");
-const EnsembleAuthService_1 = require("../../../icc-x-api/auth/EnsembleAuthService");
-const NoAuthService_1 = require("../../../icc-x-api/auth/NoAuthService");
-const SmartAuthProvider_1 = require("../../../icc-x-api/auth/SmartAuthProvider");
-describe('JWT provider resiliency test', () => {
-    function generateJwt() {
-        return `jwt.${(0, ModelHelper_1.b2a)(JSON.stringify({ exp: 1000 }))}.${Math.floor(100000 + Math.random() * 900000)}`;
-    }
-    function generateRefreshJwt() {
-        return `refreshJwt.${(0, ModelHelper_1.b2a)(JSON.stringify({ exp: new Date().getTime() * 10 }))}.${Math.floor(100000 + Math.random() * 900000)}`;
-    }
-    class FakeAuthApi extends icc_api_1.IccAuthApi {
-        constructor() {
-            super('', {});
-            this.jwt = `jwt.${(0, ModelHelper_1.b2a)(JSON.stringify({ exp: 1000 }))}.signature`;
-            this.refreshJwt = `refreshJwt.${(0, ModelHelper_1.b2a)(JSON.stringify({ exp: new Date().getTime() * 10 }))}.signature`;
-        }
-        login(body) {
-            if (!!this.loginException) {
-                throw this.loginException;
-            }
-            this.jwt = generateJwt();
-            this.refreshJwt = generateRefreshJwt();
-            return Promise.resolve(new AuthenticationResponse_1.AuthenticationResponse({
-                token: this.jwt,
-                refreshToken: this.refreshJwt,
-            }));
-        }
-        refreshAuthenticationJWT(refreshJWT) {
-            var _a;
-            if (!!this.refreshException) {
-                throw this.refreshException;
-            }
-            this.jwt = generateJwt();
-            return Promise.resolve(new AuthenticationResponse_1.AuthenticationResponse({
-                token: this.jwt,
-                refreshToken: (_a = this.refreshJwt) !== null && _a !== void 0 ? _a : generateRefreshJwt(),
-            }));
-        }
-    }
-    function expectThrowOnGetHeaders(service) {
-        return __awaiter(this, void 0, void 0, function* () {
-            let caught = null;
-            try {
-                yield service.getAuthHeaders();
-            }
-            catch (e) {
-                caught = e;
-            }
-            (0, chai_1.expect)(caught).not.to.be.null;
-            (0, chai_1.expect)(caught).to.be.instanceof(JwtError_1.JwtError);
-        });
-    }
-    it('JwtBridgedAuthService - If the login fails for any type of error it is possible to retry', () => __awaiter(void 0, void 0, void 0, function* () {
-        const errors = [
-            new Error('A generic error'),
-            new XHRError('', '', 403, 'FORBIDDEN', new Headers()),
-            new XHRError('', '', 503, 'TIMEOUT', new Headers()),
-        ];
-        for (const e of errors) {
-            const fakeAuthApi = new FakeAuthApi();
-            const authService = new JwtBridgedAuthService_1.JwtBridgedAuthService(fakeAuthApi, 'username', 'password', {}, undefined);
-            fakeAuthApi.loginException = e;
-            yield expectThrowOnGetHeaders(authService);
-            fakeAuthApi.loginException = null;
-            const firstHeader = yield authService.getAuthHeaders();
-            (0, chai_1.expect)(firstHeader[0].data).to.be.equal(`Bearer ${fakeAuthApi.jwt}`);
-        }
-    }));
-    function jwtBridgedTest(error, loginAfterError) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const fakeAuthApi = new FakeAuthApi();
-            const authService = new JwtBridgedAuthService_1.JwtBridgedAuthService(fakeAuthApi, 'username', 'password', {}, undefined);
-            fakeAuthApi.refreshException = null;
-            const firstHeader = yield authService.getAuthHeaders();
-            const initialJwt = fakeAuthApi.jwt;
-            const initialRefresh = fakeAuthApi.refreshJwt;
-            (0, chai_1.expect)(firstHeader[0].data).to.be.equal(`Bearer ${initialJwt}`);
-            fakeAuthApi.refreshException = error;
-            yield expectThrowOnGetHeaders(authService);
-            fakeAuthApi.refreshException = null;
-            const secondHeader = yield authService.getAuthHeaders();
-            const secondJwt = fakeAuthApi.jwt;
-            const secondRefresh = fakeAuthApi.refreshJwt;
-            (0, chai_1.expect)(secondHeader[0].data).to.be.equal(`Bearer ${secondJwt}`);
-            (0, chai_1.expect)(secondJwt).not.to.be.equal(initialJwt);
-            if (loginAfterError) {
-                (0, chai_1.expect)(secondRefresh).not.to.be.equal(initialRefresh);
-            }
-            else {
-                (0, chai_1.expect)(secondRefresh).to.be.equal(initialRefresh);
-            }
-        });
-    }
-    it('JwtBridgedAuthService - If the refresh fails for a generic error, it is possible to retry', () => __awaiter(void 0, void 0, void 0, function* () {
-        const error = new Error('A generic error');
-        yield jwtBridgedTest(error, false);
-    }));
-    it('JwtBridgedAuthService - If the refresh fails for a 500 error, the login is performed again', () => __awaiter(void 0, void 0, void 0, function* () {
-        const error = new XHRError('', '', 500, 'INTERNAL SERVER ERROR', new Headers());
-        yield jwtBridgedTest(error, false);
-    }));
-    it('JwtBridgedAuthService - If the refresh fails for a 400 error, the login is performed again', () => __awaiter(void 0, void 0, void 0, function* () {
-        const error = new XHRError('', '', 403, 'FORBIDDEN', new Headers());
-        yield jwtBridgedTest(error, true);
-    }));
-    it('JwtAuthService - If the refresh fails for an error, it is possible to retry', () => __awaiter(void 0, void 0, void 0, function* () {
-        const fakeAuthApi = new FakeAuthApi();
-        const error = new Error('A generic error');
-        const initialJwt = generateJwt();
-        const initialRefresh = generateRefreshJwt();
-        const authService = new JwtAuthService_1.JwtAuthService(fakeAuthApi, { authJwt: initialJwt, refreshJwt: initialRefresh });
-        fakeAuthApi.refreshException = error;
-        yield expectThrowOnGetHeaders(authService);
-        fakeAuthApi.refreshException = null;
-        const secondHeader = yield authService.getAuthHeaders();
-        const secondJwt = fakeAuthApi.jwt;
-        (0, chai_1.expect)(secondHeader[0].data).to.be.equal(`Bearer ${secondJwt}`);
-        (0, chai_1.expect)(secondJwt).not.to.be.equal(initialJwt);
-    }));
-    it('A BasicAuthService does not have a jwtGetter property', () => __awaiter(void 0, void 0, void 0, function* () {
-        const service = new BasicAuthService_1.BasicAuthService('username', 'password');
-        (0, chai_1.expect)(service.jwtGetter).to.be.undefined;
-    }));
-    it('A NoAuthService does not have a jwtGetter property', () => __awaiter(void 0, void 0, void 0, function* () {
-        const service = new NoAuthService_1.NoAuthService();
-        (0, chai_1.expect)(service.jwtGetter).to.be.undefined;
-    }));
-    it('A JwtBridgedAuthService supports the jwtGetter', () => __awaiter(void 0, void 0, void 0, function* () {
-        const fakeAuthApi = new FakeAuthApi();
-        const authService = new JwtBridgedAuthService_1.JwtBridgedAuthService(fakeAuthApi, 'username', 'password', {}, undefined);
-        (0, chai_1.expect)(authService.jwtGetter).not.to.be.undefined;
-        if (!!authService.jwtGetter) {
-            const token = yield authService.jwtGetter();
-            (0, chai_1.expect)(token === null || token === void 0 ? void 0 : token.token).to.be.equal(fakeAuthApi.jwt);
-        }
-    }));
-    it('A JwtAuthService supports the jwtGetter', () => __awaiter(void 0, void 0, void 0, function* () {
-        const initialJwt = generateJwt();
-        const initialRefresh = generateRefreshJwt();
-        const fakeAuthApi = new FakeAuthApi();
-        const jwtService = new JwtAuthService_1.JwtAuthService(fakeAuthApi, { authJwt: initialJwt, refreshJwt: initialRefresh });
-        (0, chai_1.expect)(jwtService.jwtGetter).not.to.be.undefined;
-        if (!!jwtService.jwtGetter) {
-            const token = yield jwtService.jwtGetter();
-            (0, chai_1.expect)(token === null || token === void 0 ? void 0 : token.token).to.be.equal(initialJwt);
-        }
-    }));
-    it('An EnsembleAuthService supports the jwtGetter', () => __awaiter(void 0, void 0, void 0, function* () {
-        const initialJwt = generateJwt();
-        const initialRefresh = generateRefreshJwt();
-        const fakeAuthApi = new FakeAuthApi();
-        const basic = new BasicAuthService_1.BasicAuthService('username', 'password');
-        const jwtService = new JwtAuthService_1.JwtAuthService(fakeAuthApi, { authJwt: initialJwt, refreshJwt: initialRefresh });
-        const service = new EnsembleAuthService_1.EnsembleAuthService(jwtService, new NoAuthService_1.NoAuthService(), basic);
-        (0, chai_1.expect)(service.jwtGetter).not.to.be.undefined;
-        if (!!service.jwtGetter) {
-            const token = yield service.jwtGetter();
-            (0, chai_1.expect)(token === null || token === void 0 ? void 0 : token.token).to.be.equal(initialJwt);
-        }
-    }));
-    it('A SmartAuthService supports the jwtGetter', () => __awaiter(void 0, void 0, void 0, function* () {
-        const authApi = new FakeAuthApi();
-        const authProvider = yield SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, 'username', {
-            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
-                return { value: 'wrong', secretType: SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN }; // pragma: allowlist secret
-            }),
-        });
-        const service = authProvider.getAuthService();
-        (0, chai_1.expect)(service.jwtGetter).not.to.be.undefined;
-        if (!!service.jwtGetter) {
-            const token = yield service.jwtGetter();
-            (0, chai_1.expect)(token === null || token === void 0 ? void 0 : token.token).to.be.equal(authApi.jwt);
-        }
-    }));
-});
-//# sourceMappingURL=jwt-provider-test.js.map

package/test/icc-x-api/auth/jwt-provider-test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-provider-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/auth/jwt-provider-test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,8CAA6C;AAE7C,0FAAsF;AACtF,oEAAwD;AACxD,+BAA6B;AAC7B,yFAAqF;AAErF,2EAAuE;AACvE,kDAA8C;AAC9C,IAAO,QAAQ,GAAG,SAAG,CAAC,QAAQ,CAAA;AAC9B,+DAA2D;AAC3D,+EAA2E;AAC3E,qFAAiF;AACjF,yEAAqE;AACrE,iFAAgH;AAEhH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,SAAS,WAAW;QAClB,OAAO,OAAO,IAAA,iBAAG,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAA;IACnG,CAAC;IAED,SAAS,kBAAkB;QACzB,OAAO,cAAc,IAAA,iBAAG,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAA;IAC/H,CAAC;IAED,MAAM,WAAY,SAAQ,oBAAU;QAMlC;YACE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YAJf,QAAG,GAAG,OAAO,IAAA,iBAAG,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAA;YAC3D,eAAU,GAAG,cAAc,IAAA,iBAAG,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAA;QAI9F,CAAC;QAED,KAAK,CAAC,IAAuB;YAC3B,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,cAAc,CAAA;YAC3B,CAAC;YAED,IAAI,CAAC,GAAG,GAAG,WAAW,EAAE,CAAA;YACxB,IAAI,CAAC,UAAU,GAAG,kBAAkB,EAAE,CAAA;YACtC,OAAO,OAAO,CAAC,OAAO,CACpB,IAAI,+CAAsB,CAAC;gBACzB,KAAK,EAAE,IAAI,CAAC,GAAG;gBACf,YAAY,EAAE,IAAI,CAAC,UAAU;aAC9B,CAAC,CACH,CAAA;QACH,CAAC;QAED,wBAAwB,CAAC,UAAkB;;YACzC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAA;YAC7B,CAAC;YAED,IAAI,CAAC,GAAG,GAAG,WAAW,EAAE,CAAA;YACxB,OAAO,OAAO,CAAC,OAAO,CACpB,IAAI,+CAAsB,CAAC;gBACzB,KAAK,EAAE,IAAI,CAAC,GAAG;gBACf,YAAY,EAAE,MAAA,IAAI,CAAC,UAAU,mCAAI,kBAAkB,EAAE;aACtD,CAAC,CACH,CAAA;QACH,CAAC;KACF;IAED,SAAe,uBAAuB,CAAC,OAAoB;;YACzD,IAAI,MAAM,GAAiB,IAAI,CAAA;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,cAAc,EAAE,CAAA;YAChC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,CAAU,CAAA;YACrB,CAAC;YACD,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAA;YAC7B,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,mBAAQ,CAAC,CAAA;QAC3C,CAAC;KAAA;IAED,EAAE,CAAC,0FAA0F,EAAE,GAAS,EAAE;QACxG,MAAM,MAAM,GAAY;YACtB,IAAI,KAAK,CAAC,iBAAiB,CAAC;YAC5B,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;YACrD,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,OAAO,EAAE,CAAC;SACpD,CAAA;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;YACrC,MAAM,WAAW,GAAG,IAAI,6CAAqB,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;YAEjG,WAAW,CAAC,cAAc,GAAG,CAAC,CAAA;YAC9B,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAA;YAE1C,WAAW,CAAC,cAAc,GAAG,IAAI,CAAA;YACjC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,cAAc,EAAE,CAAA;YACtD,IAAA,aAAM,EAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,WAAW,CAAC,GAAG,EAAE,CAAC,CAAA;QACtE,CAAC;IACH,CAAC,CAAA,CAAC,CAAA;IAEF,SAAe,cAAc,CAAC,KAAY,EAAE,eAAwB;;YAClE,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;YACrC,MAAM,WAAW,GAAG,IAAI,6CAAqB,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;YAEjG,WAAW,CAAC,gBAAgB,GAAG,IAAI,CAAA;YACnC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,cAAc,EAAE,CAAA;YACtD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAA;YAClC,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAA;YAC7C,IAAA,aAAM,EAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,UAAU,EAAE,CAAC,CAAA;YAE/D,WAAW,CAAC,gBAAgB,GAAG,KAAK,CAAA;YACpC,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAA;YAE1C,WAAW,CAAC,gBAAgB,GAAG,IAAI,CAAA;YACnC,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,cAAc,EAAE,CAAA;YACvD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAA;YACjC,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAA;YAC5C,IAAA,aAAM,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,SAAS,EAAE,CAAC,CAAA;YAC/D,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAC7C,IAAI,eAAe,EAAE,CAAC;gBACpB,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;YACvD,CAAC;iBAAM,CAAC;gBACN,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;YACnD,CAAC;QACH,CAAC;KAAA;IAED,EAAE,CAAC,2FAA2F,EAAE,GAAS,EAAE;QACzG,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC1C,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACpC,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,4FAA4F,EAAE,GAAS,EAAE;QAC1G,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACpC,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,4FAA4F,EAAE,GAAS,EAAE;QAC1G,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC,CAAA;QACnE,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACnC,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,GAAS,EAAE;QAC3F,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;QACrC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC1C,MAAM,UAAU,GAAG,WAAW,EAAE,CAAA;QAChC,MAAM,cAAc,GAAG,kBAAkB,EAAE,CAAA;QAC3C,MAAM,WAAW,GAAG,IAAI,+BAAc,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;QAExG,WAAW,CAAC,gBAAgB,GAAG,KAAK,CAAA;QACpC,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAA;QAE1C,WAAW,CAAC,gBAAgB,GAAG,IAAI,CAAA;QACnC,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,cAAc,EAAE,CAAA;QACvD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAA;QACjC,IAAA,aAAM,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,SAAS,EAAE,CAAC,CAAA;QAC/D,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC/C,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,GAAS,EAAE;QACrE,MAAM,OAAO,GAAG,IAAI,mCAAgB,CAAC,UAAU,EAAE,UAAU,CAAgB,CAAA;QAC3E,IAAA,aAAM,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;IAC3C,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAS,EAAE;QAClE,MAAM,OAAO,GAAG,IAAI,6BAAa,EAAiB,CAAA;QAClD,IAAA,aAAM,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;IAC3C,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAS,EAAE;QAC9D,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;QACrC,MAAM,WAAW,GAAG,IAAI,6CAAqB,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,CAAgB,CAAA;QAChH,IAAA,aAAM,EAAC,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;QAEjD,IAAI,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,CAAA;YAE3C,IAAA,aAAM,EAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACnD,CAAC;IACH,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAS,EAAE;QACvD,MAAM,UAAU,GAAG,WAAW,EAAE,CAAA;QAChC,MAAM,cAAc,GAAG,kBAAkB,EAAE,CAAA;QAC3C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;QACrC,MAAM,UAAU,GAAG,IAAI,+BAAc,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,CAAgB,CAAA;QACtH,IAAA,aAAM,EAAC,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;QAEhD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAA;YAE1C,IAAA,aAAM,EAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAS,EAAE;QAC7D,MAAM,UAAU,GAAG,WAAW,EAAE,CAAA;QAChC,MAAM,cAAc,GAAG,kBAAkB,EAAE,CAAA;QAC3C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;QACrC,MAAM,KAAK,GAAG,IAAI,mCAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAC1D,MAAM,UAAU,GAAG,IAAI,+BAAc,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;QACvG,MAAM,OAAO,GAAG,IAAI,yCAAmB,CAAC,UAAU,EAAE,IAAI,6BAAa,EAAE,EAAE,KAAK,CAAgB,CAAA;QAC9F,IAAA,aAAM,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;QAE7C,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAA;YAEvC,IAAA,aAAM,EAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAS,EAAE;QACzD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;QACjC,MAAM,YAAY,GAAG,MAAM,qCAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE;YAC3E,SAAS,EAAE,CAAO,eAAiC,EAAE,gBAAqC,EAAE,EAAE;gBAC5F,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,kCAAc,CAAC,gBAAgB,EAAE,CAAA,CAAC,2BAA2B;YACpG,CAAC,CAAA;SACF,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,YAAY,CAAC,cAAc,EAAE,CAAA;QAE7C,IAAA,aAAM,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAA;QAE7C,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAA;YAEvC,IAAA,aAAM,EAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { IccAuthApi } from '../../../icc-api'\nimport { LoginCredentials } from '../../../icc-api/model/LoginCredentials'\nimport { AuthenticationResponse } from '../../../icc-api/model/AuthenticationResponse'\nimport { b2a } from '../../../icc-api/model/ModelHelper'\nimport { expect } from 'chai'\nimport { JwtBridgedAuthService } from '../../../icc-x-api/auth/JwtBridgedAuthService'\nimport { AuthService } from '../../../icc-x-api/auth/AuthService'\nimport { JwtAuthService } from '../../../icc-x-api/auth/JwtAuthService'\nimport { XHR } from '../../../icc-api/api/XHR'\nimport XHRError = XHR.XHRError\nimport { JwtError } from '../../../icc-x-api/auth/JwtError'\nimport { BasicAuthService } from '../../../icc-x-api/auth/BasicAuthService'\nimport { EnsembleAuthService } from '../../../icc-x-api/auth/EnsembleAuthService'\nimport { NoAuthService } from '../../../icc-x-api/auth/NoAuthService'\nimport { AuthSecretDetails, AuthSecretType, SmartAuthProvider } from '../../../icc-x-api/auth/SmartAuthProvider'\n\ndescribe('JWT provider resiliency test', () => {\n  function generateJwt() {\n    return `jwt.${b2a(JSON.stringify({ exp: 1000 }))}.${Math.floor(100000 + Math.random() * 900000)}`\n  }\n\n  function generateRefreshJwt() {\n    return `refreshJwt.${b2a(JSON.stringify({ exp: new Date().getTime() * 10 }))}.${Math.floor(100000 + Math.random() * 900000)}`\n  }\n\n  class FakeAuthApi extends IccAuthApi {\n    refreshException: Error | undefined | null\n    loginException: Error | undefined | null\n    jwt = `jwt.${b2a(JSON.stringify({ exp: 1000 }))}.signature`\n    refreshJwt = `refreshJwt.${b2a(JSON.stringify({ exp: new Date().getTime() * 10 }))}.signature`\n\n    constructor() {\n      super('', {})\n    }\n\n    login(body?: LoginCredentials): Promise<AuthenticationResponse> {\n      if (!!this.loginException) {\n        throw this.loginException\n      }\n\n      this.jwt = generateJwt()\n      this.refreshJwt = generateRefreshJwt()\n      return Promise.resolve(\n        new AuthenticationResponse({\n          token: this.jwt,\n          refreshToken: this.refreshJwt,\n        })\n      )\n    }\n\n    refreshAuthenticationJWT(refreshJWT: string): Promise<AuthenticationResponse> {\n      if (!!this.refreshException) {\n        throw this.refreshException\n      }\n\n      this.jwt = generateJwt()\n      return Promise.resolve(\n        new AuthenticationResponse({\n          token: this.jwt,\n          refreshToken: this.refreshJwt ?? generateRefreshJwt(),\n        })\n      )\n    }\n  }\n\n  async function expectThrowOnGetHeaders(service: AuthService): Promise<void> {\n    let caught: Error | null = null\n    try {\n      await service.getAuthHeaders()\n    } catch (e) {\n      caught = e as Error\n    }\n    expect(caught).not.to.be.null\n    expect(caught).to.be.instanceof(JwtError)\n  }\n\n  it('JwtBridgedAuthService - If the login fails for any type of error it is possible to retry', async () => {\n    const errors: Error[] = [\n      new Error('A generic error'),\n      new XHRError('', '', 403, 'FORBIDDEN', new Headers()),\n      new XHRError('', '', 503, 'TIMEOUT', new Headers()),\n    ]\n    for (const e of errors) {\n      const fakeAuthApi = new FakeAuthApi()\n      const authService = new JwtBridgedAuthService(fakeAuthApi, 'username', 'password', {}, undefined)\n\n      fakeAuthApi.loginException = e\n      await expectThrowOnGetHeaders(authService)\n\n      fakeAuthApi.loginException = null\n      const firstHeader = await authService.getAuthHeaders()\n      expect(firstHeader[0].data).to.be.equal(`Bearer ${fakeAuthApi.jwt}`)\n    }\n  })\n\n  async function jwtBridgedTest(error: Error, loginAfterError: boolean) {\n    const fakeAuthApi = new FakeAuthApi()\n    const authService = new JwtBridgedAuthService(fakeAuthApi, 'username', 'password', {}, undefined)\n\n    fakeAuthApi.refreshException = null\n    const firstHeader = await authService.getAuthHeaders()\n    const initialJwt = fakeAuthApi.jwt\n    const initialRefresh = fakeAuthApi.refreshJwt\n    expect(firstHeader[0].data).to.be.equal(`Bearer ${initialJwt}`)\n\n    fakeAuthApi.refreshException = error\n    await expectThrowOnGetHeaders(authService)\n\n    fakeAuthApi.refreshException = null\n    const secondHeader = await authService.getAuthHeaders()\n    const secondJwt = fakeAuthApi.jwt\n    const secondRefresh = fakeAuthApi.refreshJwt\n    expect(secondHeader[0].data).to.be.equal(`Bearer ${secondJwt}`)\n    expect(secondJwt).not.to.be.equal(initialJwt)\n    if (loginAfterError) {\n      expect(secondRefresh).not.to.be.equal(initialRefresh)\n    } else {\n      expect(secondRefresh).to.be.equal(initialRefresh)\n    }\n  }\n\n  it('JwtBridgedAuthService - If the refresh fails for a generic error, it is possible to retry', async () => {\n    const error = new Error('A generic error')\n    await jwtBridgedTest(error, false)\n  })\n\n  it('JwtBridgedAuthService - If the refresh fails for a 500 error, the login is performed again', async () => {\n    const error = new XHRError('', '', 500, 'INTERNAL SERVER ERROR', new Headers())\n    await jwtBridgedTest(error, false)\n  })\n\n  it('JwtBridgedAuthService - If the refresh fails for a 400 error, the login is performed again', async () => {\n    const error = new XHRError('', '', 403, 'FORBIDDEN', new Headers())\n    await jwtBridgedTest(error, true)\n  })\n\n  it('JwtAuthService - If the refresh fails for an error, it is possible to retry', async () => {\n    const fakeAuthApi = new FakeAuthApi()\n    const error = new Error('A generic error')\n    const initialJwt = generateJwt()\n    const initialRefresh = generateRefreshJwt()\n    const authService = new JwtAuthService(fakeAuthApi, { authJwt: initialJwt, refreshJwt: initialRefresh })\n\n    fakeAuthApi.refreshException = error\n    await expectThrowOnGetHeaders(authService)\n\n    fakeAuthApi.refreshException = null\n    const secondHeader = await authService.getAuthHeaders()\n    const secondJwt = fakeAuthApi.jwt\n    expect(secondHeader[0].data).to.be.equal(`Bearer ${secondJwt}`)\n    expect(secondJwt).not.to.be.equal(initialJwt)\n  })\n\n  it('A BasicAuthService does not have a jwtGetter property', async () => {\n    const service = new BasicAuthService('username', 'password') as AuthService\n    expect(service.jwtGetter).to.be.undefined\n  })\n\n  it('A NoAuthService does not have a jwtGetter property', async () => {\n    const service = new NoAuthService() as AuthService\n    expect(service.jwtGetter).to.be.undefined\n  })\n\n  it('A JwtBridgedAuthService supports the jwtGetter', async () => {\n    const fakeAuthApi = new FakeAuthApi()\n    const authService = new JwtBridgedAuthService(fakeAuthApi, 'username', 'password', {}, undefined) as AuthService\n    expect(authService.jwtGetter).not.to.be.undefined\n\n    if (!!authService.jwtGetter) {\n      const token = await authService.jwtGetter()\n\n      expect(token?.token).to.be.equal(fakeAuthApi.jwt)\n    }\n  })\n\n  it('A JwtAuthService supports the jwtGetter', async () => {\n    const initialJwt = generateJwt()\n    const initialRefresh = generateRefreshJwt()\n    const fakeAuthApi = new FakeAuthApi()\n    const jwtService = new JwtAuthService(fakeAuthApi, { authJwt: initialJwt, refreshJwt: initialRefresh }) as AuthService\n    expect(jwtService.jwtGetter).not.to.be.undefined\n\n    if (!!jwtService.jwtGetter) {\n      const token = await jwtService.jwtGetter()\n\n      expect(token?.token).to.be.equal(initialJwt)\n    }\n  })\n\n  it('An EnsembleAuthService supports the jwtGetter', async () => {\n    const initialJwt = generateJwt()\n    const initialRefresh = generateRefreshJwt()\n    const fakeAuthApi = new FakeAuthApi()\n    const basic = new BasicAuthService('username', 'password')\n    const jwtService = new JwtAuthService(fakeAuthApi, { authJwt: initialJwt, refreshJwt: initialRefresh })\n    const service = new EnsembleAuthService(jwtService, new NoAuthService(), basic) as AuthService\n    expect(service.jwtGetter).not.to.be.undefined\n\n    if (!!service.jwtGetter) {\n      const token = await service.jwtGetter()\n\n      expect(token?.token).to.be.equal(initialJwt)\n    }\n  })\n\n  it('A SmartAuthService supports the jwtGetter', async () => {\n    const authApi = new FakeAuthApi()\n    const authProvider = await SmartAuthProvider.initialise(authApi, 'username', {\n      getSecret: async (acceptedSecrets: AuthSecretType[], previousAttempts: AuthSecretDetails[]) => {\n        return { value: 'wrong', secretType: AuthSecretType.LONG_LIVED_TOKEN } // pragma: allowlist secret\n      },\n    })\n    const service = authProvider.getAuthService()\n\n    expect(service.jwtGetter).not.to.be.undefined\n\n    if (!!service.jwtGetter) {\n      const token = await service.jwtGetter()\n\n      expect(token?.token).to.be.equal(authApi.jwt)\n    }\n  })\n})\n"]}

package/test/icc-x-api/auth/smart-auth-provider-test.d.ts

@@ -1 +0,0 @@
-import 'isomorphic-fetch';

package/test/icc-x-api/auth/smart-auth-provider-test.js

@@ -1,224 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const types_1 = require("@icure/test-setup/types");
-const mocha_1 = require("mocha");
-const test_utils_1 = require("../../utils/test_utils");
-const icc_x_api_1 = require("../../../icc-x-api");
-const icc_api_1 = require("../../../icc-api");
-require("isomorphic-fetch");
-const SmartAuthProvider_1 = require("../../../icc-x-api/auth/SmartAuthProvider");
-const chai_1 = require("chai");
-const crypto_1 = require("crypto");
-var initMasterApi = test_utils_1.TestUtils.initMasterApi;
-const assert_1 = require("assert");
-const otpauth_1 = require("otpauth");
-(0, test_utils_1.setLocalStorage)(fetch);
-let env;
-let authApi;
-describe('Smart authentication provider', () => {
-    (0, mocha_1.before)(function () {
-        return __awaiter(this, void 0, void 0, function* () {
-            this.timeout(600000);
-            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
-            env = yield initializer.execute((0, types_1.getEnvVariables)());
-            authApi = new icc_api_1.IccAuthApi(env.iCureUrl, {}, new icc_x_api_1.NoAuthenticationProvider(), fetch);
-        });
-    });
-    function userApiWithProvider(authProvider) {
-        return new icc_api_1.IccUserApi(env.iCureUrl, {}, authProvider, fetch);
-    }
-    it('Should automatically ask for secret to get a new token, and reasks the secret if it is not valid', () => __awaiter(void 0, void 0, void 0, function* () {
-        const { credentials } = yield (0, test_utils_1.createNewHcpApi)(env);
-        let calls = 0;
-        const authProvider = yield SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, credentials.user, {
-            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
-                (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
-                (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
-                (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.SHORT_LIVED_TOKEN);
-                (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN);
-                if (calls == 0) {
-                    (0, chai_1.expect)(previousAttempts).to.be.empty;
-                }
-                else if (calls == 1) {
-                    (0, chai_1.expect)(previousAttempts).to.have.length(1);
-                    (0, chai_1.expect)(previousAttempts[0].value).to.equal('wrong');
-                    (0, chai_1.expect)(previousAttempts[0].secretType).to.equal(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
-                }
-                else
-                    (0, assert_1.fail)(`Unexpected number of calls: ${calls}`);
-                return calls++ == 0
-                    ? { value: 'wrong', secretType: SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN } // pragma: allowlist secret
-                    : { value: credentials.password, secretType: SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN };
-            }),
-        });
-        const userApi = userApiWithProvider(authProvider);
-        const user = yield userApi.getCurrentUser();
-        (0, chai_1.expect)(user.healthcarePartyId).to.equal(credentials.dataOwnerId);
-        (0, chai_1.expect)(calls).to.equal(2);
-    }));
-    (0, test_utils_1.itNoLite)('Should automatically ask for a more powerful secret to perform elevated-security operations if the available secret/token is not good enough', () => __awaiter(void 0, void 0, void 0, function* () {
-        const { credentials, api } = yield (0, test_utils_1.createNewHcpApi)(env);
-        const initialUser = yield api.userApi.getCurrentUser();
-        const masterApi = yield initMasterApi(env);
-        const userToken = (0, crypto_1.randomUUID)();
-        const userPw = (0, crypto_1.randomUUID)();
-        const userWithLongTokenAndPw = yield masterApi.userApi.modifyUser(Object.assign(Object.assign({}, initialUser), { passwordHash: userPw, authenticationTokens: {
-                'test-long-lived-token': {
-                    token: userToken,
-                    creationTime: Date.now(),
-                    validity: 60 * 60 * 24 * 7,
-                },
-            } }));
-        let calls = 0;
-        const authProvider = yield SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, credentials.user, {
-            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
-                if (calls == 0) {
-                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
-                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
-                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.SHORT_LIVED_TOKEN);
-                    (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN);
-                    (0, chai_1.expect)(previousAttempts).to.be.empty;
-                    calls++;
-                    return { value: userToken, secretType: SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN };
-                }
-                else if (calls == 1) {
-                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
-                    (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
-                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.SHORT_LIVED_TOKEN);
-                    (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN);
-                    (0, chai_1.expect)(previousAttempts).to.be.empty;
-                    calls++;
-                    return { value: userPw, secretType: SmartAuthProvider_1.AuthSecretType.PASSWORD };
-                }
-                else
-                    throw new Error(`Unexpected number of calls: ${calls}`);
-            }),
-        });
-        const userApi = userApiWithProvider(authProvider);
-        (0, chai_1.expect)((yield userApi.getCurrentUser()).rev).to.equal(userWithLongTokenAndPw.rev);
-        (0, chai_1.expect)(calls).to.equal(1);
-        const newPw = (0, crypto_1.randomUUID)();
-        const userWithNewPw = yield userApi.modifyUser(Object.assign(Object.assign({}, userWithLongTokenAndPw), { passwordHash: newPw }));
-        (0, chai_1.expect)(userWithNewPw.rev).to.not.equal(userWithLongTokenAndPw.rev);
-        (0, chai_1.expect)(calls).to.equal(2);
-        const retrievedWithNewPw = yield userApiWithProvider(new icc_x_api_1.BasicAuthenticationProvider(credentials.user, newPw)).getCurrentUser();
-        (0, chai_1.expect)(retrievedWithNewPw.rev).to.equal(userWithNewPw.rev);
-        const couldRetrieveWithOldPw = yield userApiWithProvider(new icc_x_api_1.BasicAuthenticationProvider(credentials.user, userPw))
-            .getCurrentUser()
-            .then(() => true, () => false);
-        (0, chai_1.expect)(couldRetrieveWithOldPw).to.be.false;
-    }));
-    (0, test_utils_1.itNoLite)('Should automatically ask for TOTP after password if user has 2fa enabled', () => __awaiter(void 0, void 0, void 0, function* () {
-        const { credentials, api } = yield (0, test_utils_1.createNewHcpApi)(env);
-        const initialUser = yield api.userApi.getCurrentUser();
-        const masterApi = yield initMasterApi(env);
-        const totpSecret = 'AAPX7PW2RJIGZ3D4'; // pragma: allowlist secret (fake secret generated only for test)
-        const totp = new otpauth_1.TOTP({
-            algorithm: 'SHA1',
-            digits: 6,
-            period: 30,
-            secret: totpSecret,
-        });
-        const userPw = (0, crypto_1.randomUUID)();
-        yield masterApi.userApi.enable2fa(initialUser.id, totpSecret);
-        const userWithPwAnd2fa = yield masterApi.userApi.modifyUser(Object.assign(Object.assign({}, initialUser), { passwordHash: userPw }));
-        let calls = 0;
-        const authProvider = yield SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, credentials.user, {
-            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
-                if (calls == 0) {
-                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
-                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.LONG_LIVED_TOKEN);
-                    (0, chai_1.expect)(acceptedSecrets).to.include(SmartAuthProvider_1.AuthSecretType.SHORT_LIVED_TOKEN);
-                    (0, chai_1.expect)(acceptedSecrets).to.not.include(SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN);
-                    (0, chai_1.expect)(previousAttempts).to.be.empty;
-                    calls++;
-                    return { value: userPw, secretType: SmartAuthProvider_1.AuthSecretType.PASSWORD };
-                }
-                else if (calls == 1 || calls == 2) {
-                    (0, chai_1.expect)(acceptedSecrets).to.have.members([SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN]);
-                    if (calls == 1)
-                        (0, chai_1.expect)(previousAttempts).to.be.empty;
-                    if (calls == 2)
-                        (0, chai_1.expect)(previousAttempts).to.have.length(1);
-                    return calls++ == 1
-                        ? { value: totp.generate() + '13', secretType: SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN }
-                        : { value: totp.generate(), secretType: SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN };
-                }
-                else
-                    throw new Error(`Unexpected number of calls: ${calls}`);
-            }),
-        });
-        const userApi = userApiWithProvider(authProvider);
-        (0, chai_1.expect)((yield userApi.getCurrentUser()).rev).to.equal(userWithPwAnd2fa.rev);
-        (0, chai_1.expect)(calls).to.equal(3);
-    }));
-    (0, test_utils_1.itNoLite)('Should ask for TOTP directly if password is cached', () => __awaiter(void 0, void 0, void 0, function* () {
-        const { credentials, api } = yield (0, test_utils_1.createNewHcpApi)(env);
-        const initialUser = yield api.userApi.getCurrentUser();
-        const masterApi = yield initMasterApi(env);
-        const totpSecret = 'AAPX7PW2RJIGZ3D4'; // pragma: allowlist secret (fake secret generated only for test)
-        const totp = new otpauth_1.TOTP({
-            algorithm: 'SHA1',
-            digits: 6,
-            period: 30,
-            secret: totpSecret,
-        });
-        const userPw = (0, crypto_1.randomUUID)();
-        yield masterApi.userApi.enable2fa(initialUser.id, totpSecret);
-        const userWithPwAnd2fa = yield masterApi.userApi.modifyUser(Object.assign(Object.assign({}, initialUser), { passwordHash: userPw }));
-        let calls = 0;
-        const authProvider = yield SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, credentials.user, {
-            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
-                (0, chai_1.expect)(acceptedSecrets).to.have.members([SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN]);
-                (0, chai_1.expect)(previousAttempts).to.be.empty;
-                (0, chai_1.expect)(calls++).to.equal(0);
-                return { value: totp.generate(), secretType: SmartAuthProvider_1.AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN };
-            }),
-        }, {
-            initialSecret: { password: userPw },
-        });
-        const userApi = userApiWithProvider(authProvider);
-        (0, chai_1.expect)((yield userApi.getCurrentUser()).rev).to.equal(userWithPwAnd2fa.rev);
-        (0, chai_1.expect)(calls).to.equal(1);
-    }));
-    (0, test_utils_1.itNoLite)('Switched provider should keep cached secrets and should be able to have elevated security context', () => __awaiter(void 0, void 0, void 0, function* () {
-        var _a;
-        const details = yield (0, test_utils_1.createUserInMultipleGroups)(env);
-        let calls = 0;
-        const authProvider = yield SmartAuthProvider_1.SmartAuthProvider.initialise(authApi, details.userLogin, {
-            getSecret: (acceptedSecrets, previousAttempts) => __awaiter(void 0, void 0, void 0, function* () {
-                (0, chai_1.expect)(acceptedSecrets).to.have.include(SmartAuthProvider_1.AuthSecretType.PASSWORD);
-                (0, chai_1.expect)(previousAttempts).to.be.empty;
-                (0, chai_1.expect)(calls++).to.equal(0);
-                return { value: details.userPw12, secretType: SmartAuthProvider_1.AuthSecretType.PASSWORD };
-            }),
-        });
-        const defaultGroupUserApi = userApiWithProvider(authProvider);
-        const defaultGroupUser = yield defaultGroupUserApi.getCurrentUser();
-        const otherGroupId = details.group1.id == defaultGroupUser.groupId ? details.group2.id : details.group1.id;
-        const matches = yield defaultGroupUserApi.getMatchingUsers();
-        const switchedUserApi = userApiWithProvider(yield authProvider.switchGroup(otherGroupId, matches));
-        const switchedUser = yield switchedUserApi.getCurrentUser();
-        (0, chai_1.expect)(switchedUser.id).to.not.equal(defaultGroupUser.id);
-        (0, chai_1.expect)(switchedUser.groupId).to.equal(otherGroupId);
-        const updatedDefault = yield switchedUserApi.modifyUser(Object.assign(Object.assign({}, switchedUser), { authenticationTokens: {
-                'new-token': {
-                    token: (0, crypto_1.randomUUID)(),
-                    creationTime: Date.now(),
-                    validity: 60 * 60 * 24 * 7,
-                },
-            } }));
-        (0, chai_1.expect)(updatedDefault.rev).to.not.equal(switchedUser.rev);
-        (0, chai_1.expect)(Object.keys((_a = updatedDefault.authenticationTokens) !== null && _a !== void 0 ? _a : {})).to.not.be.empty;
-    }));
-});
-//# sourceMappingURL=smart-auth-provider-test.js.map