@icure/api 8.6.19 → 8.7.0

package/test/icc-x-api/crypto/legacy-metadata-migration-test.js

@@ -1,379 +0,0 @@
-"use strict";
-/*
- * Participants: A, B children hcp of P ; X external hcp, not related to A/B/P.
- *
-
- * Situation 2:
- * Entity E with legacy metadata created by A and shared with P.
- * There is also a confidential secret id (known by A but not P).
- * A wants to share with X as read only.
- * Expected outcome:
- * - A root secure delegation for A
- * - A->A includes the confidential secret id known by A
- * - A delegation from A to P
- * - Through the delegation A->P A and P can access all the legacy metadata available to P (but not the confidential secret id)
- */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const icc_x_api_1 = require("../../../icc-x-api");
-const crypto_1 = require("crypto");
-const test_utils_1 = require("../../utils/test_utils");
-const types_1 = require("@icure/test-setup/types");
-const User_1 = require("../../../icc-api/model/User");
-const TestStorage_1 = require("../../utils/TestStorage");
-const TestCryptoStrategies_1 = require("../../utils/TestCryptoStrategies");
-const icc_api_1 = require("../../../icc-api");
-const chai_1 = require("chai");
-const EntityShareRequest_1 = require("../../../icc-api/model/requests/EntityShareRequest");
-var initMasterApi = test_utils_1.TestUtils.initMasterApi;
-var RequestedPermissionEnum = EntityShareRequest_1.EntityShareRequest.RequestedPermissionEnum;
-(0, test_utils_1.setLocalStorage)(fetch);
-let env;
-describe('Legacy delegations migration test', () => {
-    before(function () {
-        return __awaiter(this, void 0, void 0, function* () {
-            this.timeout(600000);
-            const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
-            env = yield initializer.execute((0, types_1.getEnvVariables)());
-        });
-    });
-    /**
-     * Participants:
-     *
-     * A, B children hcp of P
-     * X, X2 are external hcps, not related to A/B/P.
-     */
-    // prettier-ignore
-    function createTestDataAndApis() {
-        return __awaiter(this, arguments, void 0, function* (useFakeKeyForAesExchangeKeyEntry = false) {
-            // The following data was created for test purposes only and does not contain any real key / secrets.
-            const pId = (0, crypto_1.randomUUID)();
-            const pLogin = `parent-${(0, crypto_1.randomUUID)()}`;
-            const pPassword = (0, crypto_1.randomUUID)();
-            const pPrivateKey = '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'; // pragma: allowlist secret
-            const pHcpBase = {
-                id: pId,
-                lastName: '8ed642',
-                firstName: 'c9d727',
-                publicKey: '30820122300d06092a864886f70d01010105000382010f003082010a0282010100b8f7e992be3973d42954ca27da89259961c93cca31c6494b074f6f5992ce7ba1d95fdfaf043d5047b6e492c735d68344e0348f08683f1dae728d1e86c439c8498613ec7c8fb54930afbb9f45c74f4d312ecf5d989cb2edd96f887551792094ddd2d18a4c2dc2107c9b044b755f93f8d63e956e1ff0299fa9ed190845f7f5f69dc510df005bd929fb4fed33b30d6e699e0632485cc4180cf5a130357cf64233a680a1a1cc6b6761188192734916cabda14bb954ba3807b84c92f078fe83eea31260390356a8d53853148191144a4584fef02d28bc8353d3c33a87b156396e5fcb7994165da48138db3a3b986fe1c12d46273a218af63b42514690fbb161a5179d0203010001', // pragma: allowlist secret
-            };
-            const pUserBase = {
-                id: (0, crypto_1.randomUUID)(),
-                name: pLogin,
-                status: User_1.User.StatusEnum.ACTIVE,
-                login: pLogin,
-                passwordHash: pPassword,
-                healthcarePartyId: pId,
-                email: `${pLogin}@icure.com`
-            };
-            const aId = (0, crypto_1.randomUUID)();
-            const aLogin = `childA-${(0, crypto_1.randomUUID)()}`;
-            const aPassword = (0, crypto_1.randomUUID)();
-            const aPrivateKey = '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'; // pragma: allowlist secret
-            const aHcpBase = {
-                id: aId,
-                lastName: '6144e2',
-                firstName: '6ca3b4',
-                parentId: pId,
-                aesExchangeKeys: {
-                    [useFakeKeyForAesExchangeKeyEntry ? 'x0' : '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']: // pragma: allowlist secret
-                    {
-                        [pId]: {
-                            '3b42514690fbb161a5179d0203010001': // pragma: allowlist secret
-                            '4ca457e66519a3f403e089f56f3838a18af16e47029d33ca40eca6a24d1f213809851920b8d159e3879284e5e8d1e0c64be874261d3e0003c43a21ddab9301f8a54161911d3bebe3b1ee6d2a040ec88caa484b6ffd46200bc6eb1a767f309e960f977b9e82d81a0b4961b517e89f24cbc9d0133f955a8d6f792486b1e5dcd9088fe5ecc07b11230b1960013c914041e5de3e9b3c37fa4c2a44dcf2136aae57e000acfe824dacd900bf6be5f6b4f3c41534237a01e14d728065c586dbfd3eeb81ad070218be3e2f70757e9ca5d940afa0b67e02d41e68c1c10935157bc6bd3c06eda95f23c10ca60b649a5ec32903c2a995c0b97fb40cdf454c53621304b0d5b0', // pragma: allowlist secret
-                            b59b1e44efebd4db537ced0203010001: '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', // pragma: allowlist secret
-                        },
-                        [aId]: {
-                            b59b1e44efebd4db537ced0203010001: '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', // pragma: allowlist secret
-                        },
-                    },
-                },
-                publicKey: '30820122300d06092a864886f70d01010105000382010f003082010a0282010100e92f6acc40dbf839fa26e14579fcb68b5e8530f7bfada96338d4f986936cf177e242a458cb1811c2c49c469fa84d2c6ba0c0f34ba6e28babfaff863ff9f3938741d4a41b936143adcff5b396ce12f253e1af424ebd75aa133bdf606b1be51142ee4f5310f4ab46b7a7d706034028f81c462a758f0243d3791d27758bcc8af8010116ee70f1e61eb4526d05d245d631459974eea86b500ad0083e7f196ab9c4926487d92aa2849878f2e4093691d0539b9e880ff6717dbe5e7903141aaf796d74100c42c4d33ac2356df7e3e037accf4495c05f2caf57ae47130b1833f95397e1e9324f2abc1e6af56d7297cf48ea2ba0d990cff2f3b59b1e44efebd4db537ced0203010001', // pragma: allowlist secret
-            };
-            const aUserBase = {
-                id: (0, crypto_1.randomUUID)(),
-                name: aLogin,
-                status: User_1.User.StatusEnum.ACTIVE,
-                login: aLogin,
-                passwordHash: aPassword,
-                healthcarePartyId: aId,
-                autoDelegations: {
-                    all: [pId],
-                },
-                email: `${aLogin}@icure.com`
-            };
-            const bId = (0, crypto_1.randomUUID)();
-            const bLogin = `childB-${(0, crypto_1.randomUUID)()}`;
-            const bPassword = (0, crypto_1.randomUUID)();
-            const bPrivateKey = '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'; // pragma: allowlist secret
-            const bHcpBase = {
-                id: bId,
-                lastName: '95ee22',
-                firstName: '2af696',
-                parentId: pId,
-                aesExchangeKeys: {
-                    [useFakeKeyForAesExchangeKeyEntry ? 'x0' : '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']: // pragma: allowlist secret
-                    {
-                        [pId]: {
-                            '3b42514690fbb161a5179d0203010001': // pragma: allowlist secret
-                            '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', // pragma: allowlist secret
-                            '36108978e3371e9aa0ae8f0203010001': // pragma: allowlist secret
-                            '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', // pragma: allowlist secret
-                        },
-                    },
-                },
-                publicKey: '30820122300d06092a864886f70d01010105000382010f003082010a0282010100982330dc464b3e9c583affbfece209976bc045f07b22fb44bcb0ebc27bc9d8406b54e380d195e107c1728499a64012b3251c1c85a2516e73b89a07b1929f0c12d44828677135082e8170b9831dd4ff9e988d098731eadd1443813cb5f6af2fe4c2a2706ba6aeb5bb6bb7889be51eebd83bebbb2a0b55a6d69fdeb66894af47edd6f82a8d30629814b82f17cfd1ef75f47d192eb9577c58f14a5e0d2782b13b796b5a3be780a38b0f69f3d00179d13cc23fcec1e919ac05d88c08c693c711384ad9fc7a21ed28d0e5d3865c15db239a5d727d4c52a344975c97379cc5a195ff4f8c1aacbaa67d6d0fd358b6b5d1a4d0575bc57b2d7736108978e3371e9aa0ae8f0203010001', // pragma: allowlist secret
-            };
-            const bUserBase = {
-                id: (0, crypto_1.randomUUID)(),
-                name: bLogin,
-                status: User_1.User.StatusEnum.ACTIVE,
-                login: bLogin,
-                passwordHash: bPassword,
-                groupId: 'test-group',
-                healthcarePartyId: bId,
-                autoDelegations: {
-                    all: [pId],
-                },
-                email: `${bLogin}@icure.com`
-            };
-            const patientConfidentialSecretId = '24cd8cf5-0958-4ee9-8e90-95f3d25a47d7';
-            const patientBase = {
-                id: (0, crypto_1.randomUUID)(),
-                firstName: 'John',
-                lastName: 'Doe',
-                delegations: {
-                    [aId]: [
-                        {
-                            owner: aId,
-                            delegatedTo: aId,
-                            key: '4bd1316d494e858496f1d6c1200726cb76c7ff98fb47eddb1c0bf5b79712230db3f02bdf60599816e0601628ee349674a0509720e9972d87b2370b60bcbbb19adb2980bc1ab5bab8b9c8adc5516d39d0cf2d6c373fe7285ce0f1018058e52fcc', // pragma: allowlist secret
-                            tags: ['confidential'],
-                        },
-                        {
-                            owner: aId,
-                            delegatedTo: aId,
-                            key: '6121912dea437ddaf92c41a43deba576976a2b7c10c1cbba79624634ded8bb5d0210db5e339e3e26d33e6e2d18d6b8acc91f8415e5ab488b9227f7c6f6f370873f1d5b5ff3afd28dfe6e47ed10b0cb435676a4db039469a50547f3e1e515fc63', // pragma: allowlist secret
-                        },
-                    ],
-                    [pId]: [
-                        {
-                            owner: aId,
-                            delegatedTo: pId,
-                            key: '0b293a861d76b21928c6689fb80c373f16bfbe8269ef201b5af35ff4634e51af1c5d3c535c384efea3126acee3572b815db950c52298b1ee99868041641110100c51ad3bc6d0bafddd5021b50b8e0fd16c44f5fd05617eae4f5a00c090c0ccfb', // pragma: allowlist secret
-                        },
-                    ],
-                },
-                encryptionKeys: {
-                    [aId]: [
-                        {
-                            owner: aId,
-                            delegatedTo: aId,
-                            key: '42e625cb8930ca763f6b604d08775b4231e9414fa953feeafbd7cfc6acc138bdbf5013aa211935f9f429a627db5d41efa617b2ae9d46f93d83db73b36dab7892c07b03408ee4ab50974b0d4081162b4e9a2a448ce00e35d05aac4d7e675e99b3', // pragma: allowlist secret
-                        },
-                    ],
-                    [pId]: [
-                        {
-                            owner: aId,
-                            delegatedTo: pId,
-                            key: '194ee902b4780178fd88ffddd1e0744537ddf952d306dfe1123b14bec4405dc1f6b9aea7444cc74f5acca0d18062c0e12d7d9bb6c7b7bff27efb681c7e5ca52f25797f45207f63c13778637a40a541a2e33d79dc1660d7f898d69c92a93aedcf', // pragma: allowlist secret
-                        },
-                    ],
-                },
-                encryptedSelf: 'jgAFAlmd2QStXpOt3LnIhs4upJv2e10fp0u6/PburW7mq1r3vo/Q5/a4Yk7EWXG7oydMWb2i1UCCiNN80czGdA==', // pragma: allowlist secret
-            };
-            const testSetupApi = yield initMasterApi(env);
-            yield testSetupApi.healthcarePartyApi.createHealthcareParty(pHcpBase);
-            const pUser = yield testSetupApi.userApi.createUser(pUserBase);
-            yield testSetupApi.healthcarePartyApi.createHealthcareParty(aHcpBase);
-            const aUser = yield testSetupApi.userApi.createUser(aUserBase);
-            yield testSetupApi.healthcarePartyApi.createHealthcareParty(bHcpBase);
-            const bUser = yield testSetupApi.userApi.createUser(bUserBase);
-            const pStorage = yield (0, TestStorage_1.testStorageWithKeys)([
-                {
-                    dataOwnerId: pHcpBase.id,
-                    pairs: [{ keyPair: { privateKey: pPrivateKey, publicKey: pHcpBase.publicKey }, shaVersion: icc_x_api_1.ShaVersion.Sha1 }],
-                },
-            ]);
-            const aStorage = yield (0, TestStorage_1.testStorageWithKeys)([
-                {
-                    dataOwnerId: aHcpBase.id,
-                    pairs: [{ keyPair: { privateKey: aPrivateKey, publicKey: aHcpBase.publicKey }, shaVersion: icc_x_api_1.ShaVersion.Sha1 }],
-                },
-                {
-                    dataOwnerId: pHcpBase.id,
-                    pairs: [{ keyPair: { privateKey: pPrivateKey, publicKey: pHcpBase.publicKey }, shaVersion: icc_x_api_1.ShaVersion.Sha1 }],
-                },
-            ]);
-            const bStorage = yield (0, TestStorage_1.testStorageWithKeys)([
-                {
-                    dataOwnerId: bHcpBase.id,
-                    pairs: [{ keyPair: { privateKey: bPrivateKey, publicKey: bHcpBase.publicKey }, shaVersion: icc_x_api_1.ShaVersion.Sha1 }],
-                },
-                {
-                    dataOwnerId: pHcpBase.id,
-                    pairs: [{ keyPair: { privateKey: pPrivateKey, publicKey: pHcpBase.publicKey }, shaVersion: icc_x_api_1.ShaVersion.Sha1 }],
-                },
-            ]);
-            const pApi = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, { username: pLogin, password: pPassword }, new TestCryptoStrategies_1.TestCryptoStrategies(), crypto_1.webcrypto, fetch, {
-                storage: pStorage.storage,
-                keyStorage: pStorage.keyStorage,
-                entryKeysFactory: pStorage.keyFactory,
-                disableParentKeysInitialisation: false,
-            });
-            const aApi = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, { username: aLogin, password: aPassword }, new TestCryptoStrategies_1.TestCryptoStrategies(), crypto_1.webcrypto, fetch, {
-                storage: aStorage.storage,
-                keyStorage: aStorage.keyStorage,
-                entryKeysFactory: aStorage.keyFactory,
-                disableParentKeysInitialisation: false,
-            });
-            const bApi = yield icc_x_api_1.IcureApi.initialise(env.iCureUrl, { username: bLogin, password: bPassword }, new TestCryptoStrategies_1.TestCryptoStrategies(), crypto_1.webcrypto, fetch, {
-                storage: bStorage.storage,
-                keyStorage: bStorage.keyStorage,
-                entryKeysFactory: bStorage.keyFactory,
-                disableParentKeysInitialisation: false,
-            });
-            const xInfo = yield (0, test_utils_1.createNewHcpApi)(env);
-            const x2Info = yield (0, test_utils_1.createNewHcpApi)(env);
-            const apis = { a: aApi, b: bApi, p: pApi, x: xInfo.api, x2: x2Info.api };
-            const xUser = xInfo.user;
-            const xCredentials = xInfo.credentials;
-            const x2User = x2Info.user;
-            const x2Credentials = x2Info.credentials;
-            const patient = yield new icc_api_1.IccPatientApi(env.iCureUrl, {}, aApi.authApi.authenticationProvider, fetch).createPatient(patientBase);
-            const ids = {
-                a: aId,
-                b: bId,
-                p: pId,
-                x: xCredentials.dataOwnerId,
-                x2: x2Credentials.dataOwnerId,
-            };
-            console.log(JSON.stringify(ids, undefined, 2));
-            return {
-                apis,
-                ids,
-                users: {
-                    a: aUser,
-                    b: bUser,
-                    p: pUser,
-                    x: xUser,
-                    x2: x2User,
-                },
-                patient,
-                patientConfidentialSecretId,
-                patientNote: 'This is just a test patient',
-            };
-        });
-    }
-    /*
-     * Entity E with legacy metadata created by A and shared with P.
-     * There is also a confidential secret id (known by A but not P).
-     * B wants to share with X as read only.
-     * Expected outcome:
-     * - A root secure delegation B->B
-     * - A delegation B->P
-     * - Through the delegation B->P A and P can access all the legacy metadata available to P (but not the confidential secret id known by A)
-     * - A delegation from B->X
-     * - Through B->X X can access only the shared information and has read access only
-     *
-     * Now A wants to share with X2.
-     * Expected outcome:
-     * - A new root secure delegation A->A is available, which gives access to the confidential secret id
-     * - A delegation A->X2 with the shared information.
-     * - Parents of the new delegation are the new A->A root delegation and the existing A->P delegation.
-     * - B and P still can't access the confidential secret id.
-     */
-    it('sharing data as a child of a parent with legacy access should work', () => __awaiter(void 0, void 0, void 0, function* () {
-        var _a, _b, _c, _d;
-        console.log('Creating test data');
-        const { apis, ids, patient, patientConfidentialSecretId, users, patientNote } = yield createTestDataAndApis();
-        console.log('Starting test');
-        const secretIdsKnownByA = new Set(yield apis.a.patientApi.decryptSecretIdsOf(patient));
-        const secretIdsKnownByB = new Set(yield apis.b.patientApi.decryptSecretIdsOf(patient));
-        (0, chai_1.expect)(secretIdsKnownByB.size).to.eq(1);
-        (0, chai_1.expect)(secretIdsKnownByB.has(patientConfidentialSecretId)).to.be.false;
-        (0, chai_1.expect)(secretIdsKnownByA.size).to.eq(2);
-        (0, chai_1.expect)(secretIdsKnownByA.has(patientConfidentialSecretId)).to.be.true;
-        (0, chai_1.expect)(secretIdsKnownByA.has([...secretIdsKnownByB][0])).to.be.true;
-        const sharedPatient = yield apis.b.patientApi.shareWith(ids.x, patient, [...secretIdsKnownByB], {
-            requestedPermissions: RequestedPermissionEnum.FULL_READ,
-        });
-        const secureDelegations = Object.values((_b = (_a = sharedPatient.securityMetadata) === null || _a === void 0 ? void 0 : _a.secureDelegations) !== null && _b !== void 0 ? _b : {});
-        (0, chai_1.expect)(secureDelegations).to.have.length(3);
-        (0, chai_1.expect)(secureDelegations.find((d) => d.delegator === ids.b && d.delegate === ids.b)).to.not.be.undefined;
-        (0, chai_1.expect)(secureDelegations.find((d) => d.delegator === ids.b && d.delegate === ids.p)).to.not.be.undefined;
-        const sharedPatientWithoutLegacyDetails = Object.assign(Object.assign({}, sharedPatient), { delegations: {}, encryptionKeys: {} });
-        (0, chai_1.expect)(yield apis.a.patientApi.getEncryptionKeysOf(sharedPatientWithoutLegacyDetails)).to.have.length(1);
-        (0, chai_1.expect)(yield apis.a.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails)).to.have.members([...secretIdsKnownByB]);
-        (0, chai_1.expect)(secureDelegations.find((d) => d.delegator === ids.b && d.delegate === ids.x)).to.not.be.undefined;
-        (0, chai_1.expect)((yield apis.x.patientApi.getPatientWithUser(users.x, patient.id)).note).to.eq(patientNote);
-        (0, chai_1.expect)(yield apis.x.cryptoApi.xapi.hasWriteAccess({ entity: sharedPatient, type: icc_x_api_1.EntityWithDelegationTypeName.Patient })).to.be.false;
-        (0, chai_1.expect)(yield apis.x.patientApi.modifyPatientWithUser(users.x, Object.assign(Object.assign({}, sharedPatient), { firstName: 'New name' })).then(() => true, () => false)).to.be.false;
-        (0, chai_1.expect)(yield apis.x.patientApi.decryptSecretIdsOf(sharedPatient)).to.have.members([...secretIdsKnownByB]);
-        const sharedPatient2 = yield apis.a.patientApi.shareWith(ids.x2, sharedPatient, [...secretIdsKnownByB], {
-            requestedPermissions: RequestedPermissionEnum.FULL_READ,
-        });
-        const secureDelegations2 = Object.values((_d = (_c = sharedPatient2.securityMetadata) === null || _c === void 0 ? void 0 : _c.secureDelegations) !== null && _d !== void 0 ? _d : {});
-        (0, chai_1.expect)(secureDelegations2).to.have.length(5);
-        (0, chai_1.expect)(secureDelegations2.find((d) => d.delegator === ids.a && d.delegate === ids.a)).to.not.be.undefined;
-        const secureDelegationAtoX2 = secureDelegations2.find((d) => d.delegator === ids.a && d.delegate === ids.x2);
-        (0, chai_1.expect)(secureDelegationAtoX2).to.not.be.undefined;
-        (0, chai_1.expect)(secureDelegationAtoX2 === null || secureDelegationAtoX2 === void 0 ? void 0 : secureDelegationAtoX2.parentDelegations).to.have.length(2);
-        (0, chai_1.expect)(yield apis.b.patientApi.decryptSecretIdsOf(sharedPatient2)).to.have.members([...secretIdsKnownByB]);
-    }));
-    /*
-     * Entity E with legacy metadata created by A and shared with P.
-     * There is also a confidential secret id (known by A but not P).
-     * A wants to share with X as read only.
-     * Expected outcome:
-     * - A root secure delegation for A
-     * - A->A includes the confidential secret id known by A
-     * - A delegation from A to P
-     * - Through the delegation A->P A and P can access all the legacy metadata available to P (but not the confidential secret id)
-     */
-    it('sharing data created with legacy api by the same user ', () => __awaiter(void 0, void 0, void 0, function* () {
-        var _a, _b;
-        console.log('Creating test data');
-        const { apis, ids, patient, patientConfidentialSecretId, users, patientNote } = yield createTestDataAndApis();
-        console.log('Starting test');
-        const secretIdsKnownByA = new Set(yield apis.a.patientApi.decryptSecretIdsOf(patient));
-        const secretIdsKnownByB = new Set(yield apis.b.patientApi.decryptSecretIdsOf(patient));
-        const sharedPatient = yield apis.a.patientApi.shareWith(ids.x, patient, [...secretIdsKnownByB], {
-            requestedPermissions: RequestedPermissionEnum.FULL_READ,
-        });
-        const secureDelegations = Object.values((_b = (_a = sharedPatient.securityMetadata) === null || _a === void 0 ? void 0 : _a.secureDelegations) !== null && _b !== void 0 ? _b : {});
-        (0, chai_1.expect)(secureDelegations).to.have.length(3);
-        (0, chai_1.expect)(secureDelegations.find((d) => d.delegator === ids.a && d.delegate === ids.a)).to.not.be.undefined;
-        (0, chai_1.expect)(secureDelegations.find((d) => d.delegator === ids.a && d.delegate === ids.p)).to.not.be.undefined;
-        (0, chai_1.expect)(secureDelegations.find((d) => d.delegator === ids.a && d.delegate === ids.x)).to.not.be.undefined;
-        const sharedPatientWithoutLegacyDetails = Object.assign(Object.assign({}, sharedPatient), { delegations: {}, encryptionKeys: {} });
-        console.log(yield apis.a.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails));
-        console.log(yield apis.b.patientApi.decryptSecretIdsOf(sharedPatient));
-        console.log(yield apis.b.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails));
-        console.log(yield apis.x.patientApi.decryptSecretIdsOf(sharedPatient));
-        (0, chai_1.expect)(yield apis.a.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails)).to.have.members([...secretIdsKnownByA]);
-        (0, chai_1.expect)(yield apis.b.patientApi.decryptSecretIdsOf(sharedPatient)).to.have.members([...secretIdsKnownByB]);
-        (0, chai_1.expect)(yield apis.b.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails)).to.have.members([...secretIdsKnownByB]);
-        (0, chai_1.expect)(yield apis.x.patientApi.decryptSecretIdsOf(sharedPatient)).to.have.members([...secretIdsKnownByB]);
-        console.log(JSON.stringify(sharedPatient, undefined, 2));
-    }));
-    it('should be able to use aesExchangeKeysEntries with fake public key', () => __awaiter(void 0, void 0, void 0, function* () {
-        console.log('Creating test data');
-        const { apis, ids, patient, patientConfidentialSecretId, users, patientNote } = yield createTestDataAndApis(true);
-        console.log('Starting test');
-        console.log(users.a.healthcarePartyId);
-        console.log(users.b.healthcarePartyId);
-        console.log(patient.id);
-        (0, chai_1.expect)((yield apis.a.patientApi.getPatientWithUser(users.a, patient.id)).note).to.equal(patientNote);
-        (0, chai_1.expect)((yield apis.b.patientApi.getPatientWithUser(users.a, patient.id)).note).to.equal(patientNote);
-    }));
-});
-//# sourceMappingURL=legacy-metadata-migration-test.js.map

package/test/icc-x-api/crypto/legacy-metadata-migration-test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"legacy-metadata-migration-test.js","sourceRoot":"","sources":["../../../../test/icc-x-api/crypto/legacy-metadata-migration-test.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;AAEH,kDAAuF;AACvF,mCAA8C;AAC9C,uDAA+G;AAC/G,mDAAmE;AACnE,sDAAkD;AAGlD,yDAA6D;AAC7D,2EAAuE;AACvE,8CAAgD;AAChD,+BAA6B;AAC7B,2FAAuF;AACvF,IAAO,aAAa,GAAG,sBAAS,CAAC,aAAa,CAAA;AAC9C,IAAO,uBAAuB,GAAG,uCAAkB,CAAC,uBAAuB,CAAA;AAE3E,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;AAEtB,IAAI,GAAa,CAAA;AAEjB,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,MAAM,CAAC;;YACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAyB,GAAE,CAAA;YACrD,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAA,uBAAe,GAAE,CAAC,CAAA;QACpD,CAAC;KAAA,CAAC,CAAA;IAEF;;;;;OAKG;IACH,kBAAkB;IAClB,SAAe,qBAAqB;6DAClC,mCAA4C,KAAK;YASjD,qGAAqG;YACrG,MAAM,GAAG,GAAG,IAAA,mBAAU,GAAE,CAAA;YACxB,MAAM,MAAM,GAAG,UAAU,IAAA,mBAAU,GAAE,EAAE,CAAA;YACvC,MAAM,SAAS,GAAG,IAAA,mBAAU,GAAE,CAAA;YAC9B,MAAM,WAAW,GACf,s4EAAs4E,CAAA,CAAC,2BAA2B;YACp6E,MAAM,QAAQ,GAAoB;gBAChC,EAAE,EAAE,GAAG;gBACP,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,QAAQ;gBACnB,SAAS,EACP,8kBAA8kB,EAAE,2BAA2B;aAC9mB,CAAA;YACD,MAAM,SAAS,GAAS;gBACtB,EAAE,EAAE,IAAA,mBAAU,GAAE;gBAChB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,WAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,KAAK,EAAE,MAAM;gBACb,YAAY,EAAE,SAAS;gBACvB,iBAAiB,EAAE,GAAG;gBACtB,KAAK,EAAE,GAAG,MAAM,YAAY;aAC7B,CAAA;YACD,MAAM,GAAG,GAAG,IAAA,mBAAU,GAAE,CAAA;YACxB,MAAM,MAAM,GAAG,UAAU,IAAA,mBAAU,GAAE,EAAE,CAAA;YACvC,MAAM,SAAS,GAAG,IAAA,mBAAU,GAAE,CAAA;YAC9B,MAAM,WAAW,GACf,o4EAAo4E,CAAA,CAAC,2BAA2B;YACl6E,MAAM,QAAQ,GAAoB;gBAChC,EAAE,EAAE,GAAG;gBACP,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,GAAG;gBACb,eAAe,EAAE;oBACf,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,8kBAA8kB,CAAC,EAAE,2BAA2B;oBACrpB;wBACE,CAAC,GAAG,CAAC,EAAE;4BACL,kCAAkC,EAAE,2BAA2B;4BAC7D,kgBAAkgB,EAAE,2BAA2B;4BACjiB,gCAAgC,EAC9B,kgBAAkgB,EAAE,2BAA2B;yBACliB;wBACD,CAAC,GAAG,CAAC,EAAE;4BACL,gCAAgC,EAC9B,kgBAAkgB,EAAE,2BAA2B;yBACliB;qBACF;iBACJ;gBACD,SAAS,EACP,8kBAA8kB,EAAE,2BAA2B;aAC9mB,CAAA;YACD,MAAM,SAAS,GAAS;gBACtB,EAAE,EAAE,IAAA,mBAAU,GAAE;gBAChB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,WAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,KAAK,EAAE,MAAM;gBACb,YAAY,EAAE,SAAS;gBACvB,iBAAiB,EAAE,GAAG;gBACtB,eAAe,EAAE;oBACf,GAAG,EAAE,CAAC,GAAG,CAAC;iBACX;gBACD,KAAK,EAAE,GAAG,MAAM,YAAY;aAC7B,CAAA;YACD,MAAM,GAAG,GAAG,IAAA,mBAAU,GAAE,CAAA;YACxB,MAAM,MAAM,GAAG,UAAU,IAAA,mBAAU,GAAE,EAAE,CAAA;YACvC,MAAM,SAAS,GAAG,IAAA,mBAAU,GAAE,CAAA;YAC9B,MAAM,WAAW,GACf,k4EAAk4E,CAAA,CAAC,2BAA2B;YACh6E,MAAM,QAAQ,GAAoB;gBAChC,EAAE,EAAE,GAAG;gBACP,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,GAAG;gBACb,eAAe,EAAE;oBACf,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,8kBAA8kB,CAAC,EAAE,2BAA2B;oBACrpB;wBACE,CAAC,GAAG,CAAC,EAAE;4BACL,kCAAkC,EAAE,2BAA2B;4BAC7D,kgBAAkgB,EAAE,2BAA2B;4BACjiB,kCAAkC,EAAE,2BAA2B;4BAC7D,kgBAAkgB,EAAE,2BAA2B;yBACliB;qBACF;iBACJ;gBACD,SAAS,EACP,8kBAA8kB,EAAE,2BAA2B;aAC9mB,CAAA;YACD,MAAM,SAAS,GAAS;gBACtB,EAAE,EAAE,IAAA,mBAAU,GAAE;gBAChB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,WAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,KAAK,EAAE,MAAM;gBACb,YAAY,EAAE,SAAS;gBACvB,OAAO,EAAE,YAAY;gBACrB,iBAAiB,EAAE,GAAG;gBACtB,eAAe,EAAE;oBACf,GAAG,EAAE,CAAC,GAAG,CAAC;iBACX;gBACD,KAAK,EAAE,GAAG,MAAM,YAAY;aAC7B,CAAA;YACD,MAAM,2BAA2B,GAAG,sCAAsC,CAAA;YAC1E,MAAM,WAAW,GAAY;gBAC3B,EAAE,EAAE,IAAA,mBAAU,GAAE;gBAChB,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE;oBACX,CAAC,GAAG,CAAC,EAAE;wBACL;4BACE,KAAK,EAAE,GAAG;4BACV,WAAW,EAAE,GAAG;4BAChB,GAAG,EAAE,kMAAkM,EAAE,2BAA2B;4BACpO,IAAI,EAAE,CAAC,cAAc,CAAC;yBACvB;wBACD;4BACE,KAAK,EAAE,GAAG;4BACV,WAAW,EAAE,GAAG;4BAChB,GAAG,EAAE,kMAAkM,EAAE,2BAA2B;yBACrO;qBACF;oBACD,CAAC,GAAG,CAAC,EAAE;wBACL;4BACE,KAAK,EAAE,GAAG;4BACV,WAAW,EAAE,GAAG;4BAChB,GAAG,EAAE,kMAAkM,EAAE,2BAA2B;yBACrO;qBACF;iBACF;gBACD,cAAc,EAAE;oBACd,CAAC,GAAG,CAAC,EAAE;wBACL;4BACE,KAAK,EAAE,GAAG;4BACV,WAAW,EAAE,GAAG;4BAChB,GAAG,EAAE,kMAAkM,EAAE,2BAA2B;yBACrO;qBACF;oBACD,CAAC,GAAG,CAAC,EAAE;wBACL;4BACE,KAAK,EAAE,GAAG;4BACV,WAAW,EAAE,GAAG;4BAChB,GAAG,EAAE,kMAAkM,EAAE,2BAA2B;yBACrO;qBACF;iBACF;gBACD,aAAa,EAAE,0FAA0F,EAAE,2BAA2B;aACvI,CAAA;YAED,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;YAC7C,MAAM,YAAY,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAA;YACrE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;YAC9D,MAAM,YAAY,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAA;YACrE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;YAC9D,MAAM,YAAY,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAA;YACrE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;YAC9D,MAAM,QAAQ,GAAG,MAAM,IAAA,iCAAmB,EAAC;gBACzC;oBACE,WAAW,EAAE,QAAQ,CAAC,EAAG;oBACzB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAU,EAAE,EAAE,UAAU,EAAE,sBAAU,CAAC,IAAI,EAAE,CAAC;iBAC/G;aACF,CAAC,CAAA;YACF,MAAM,QAAQ,GAAG,MAAM,IAAA,iCAAmB,EAAC;gBACzC;oBACE,WAAW,EAAE,QAAQ,CAAC,EAAG;oBACzB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAU,EAAE,EAAE,UAAU,EAAE,sBAAU,CAAC,IAAI,EAAE,CAAC;iBAC/G;gBACD;oBACE,WAAW,EAAE,QAAQ,CAAC,EAAG;oBACzB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAU,EAAE,EAAE,UAAU,EAAE,sBAAU,CAAC,IAAI,EAAE,CAAC;iBAC/G;aACF,CAAC,CAAA;YACF,MAAM,QAAQ,GAAG,MAAM,IAAA,iCAAmB,EAAC;gBACzC;oBACE,WAAW,EAAE,QAAQ,CAAC,EAAG;oBACzB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAU,EAAE,EAAE,UAAU,EAAE,sBAAU,CAAC,IAAI,EAAE,CAAC;iBAC/G;gBACD;oBACE,WAAW,EAAE,QAAQ,CAAC,EAAG;oBACzB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAU,EAAE,EAAE,UAAU,EAAE,sBAAU,CAAC,IAAI,EAAE,CAAC;iBAC/G;aACF,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,MAAM,oBAAQ,CAAC,UAAU,CACpC,GAAG,CAAC,QAAQ,EACZ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EACzC,IAAI,2CAAoB,EAAE,EAC1B,kBAAgB,EAChB,KAAK,EACL;gBACE,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,gBAAgB,EAAE,QAAQ,CAAC,UAAU;gBACrC,+BAA+B,EAAE,KAAK;aACvC,CACF,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,oBAAQ,CAAC,UAAU,CACpC,GAAG,CAAC,QAAQ,EACZ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EACzC,IAAI,2CAAoB,EAAE,EAC1B,kBAAgB,EAChB,KAAK,EACL;gBACE,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,gBAAgB,EAAE,QAAQ,CAAC,UAAU;gBACrC,+BAA+B,EAAE,KAAK;aACvC,CACF,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,oBAAQ,CAAC,UAAU,CACpC,GAAG,CAAC,QAAQ,EACZ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EACzC,IAAI,2CAAoB,EAAE,EAC1B,kBAAgB,EAChB,KAAK,EACL;gBACE,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,gBAAgB,EAAE,QAAQ,CAAC,UAAU;gBACrC,+BAA+B,EAAE,KAAK;aACvC,CACF,CAAA;YACD,MAAM,KAAK,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAA;YACzC,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;YACxE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAA;YACxB,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,CAAA;YACtC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAA;YAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAA;YACxC,MAAM,OAAO,GAAG,MAAM,IAAI,uBAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;YAChI,MAAM,GAAG,GAAG;gBACV,CAAC,EAAE,GAAG;gBACN,CAAC,EAAE,GAAG;gBACN,CAAC,EAAE,GAAG;gBACN,CAAC,EAAE,YAAY,CAAC,WAAW;gBAC3B,EAAE,EAAE,aAAa,CAAC,WAAW;aAC9B,CAAA;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAA;YAC9C,OAAO;gBACL,IAAI;gBACJ,GAAG;gBACH,KAAK,EAAE;oBACL,CAAC,EAAE,KAAK;oBACR,CAAC,EAAE,KAAK;oBACR,CAAC,EAAE,KAAK;oBACR,CAAC,EAAE,KAAK;oBACR,EAAE,EAAE,MAAM;iBACX;gBACD,OAAO;gBACP,2BAA2B;gBAC3B,WAAW,EAAE,6BAA6B;aAC3C,CAAA;QACH,CAAC;KAAA;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,EAAE,CAAC,oEAAoE,EAAE,GAAS,EAAE;;QAClF,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,2BAA2B,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,qBAAqB,EAAE,CAAA;QAC7G,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC5B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAA;QACtF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAA;QACtF,IAAA,aAAM,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACvC,IAAA,aAAM,EAAC,iBAAiB,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;QACtE,IAAA,aAAM,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACvC,IAAA,aAAM,EAAC,iBAAiB,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAA;QACrE,IAAA,aAAM,EAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAA;QACnE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE;YAC9F,oBAAoB,EAAE,uBAAuB,CAAC,SAAS;SACxD,CAAC,CAAA;QACF,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAA,MAAA,aAAa,CAAC,gBAAgB,0CAAE,iBAAiB,mCAAI,EAAE,CAAC,CAAA;QAChG,IAAA,aAAM,EAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC3C,IAAA,aAAM,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QACxG,IAAA,aAAM,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QACxG,MAAM,iCAAiC,mCAAiB,aAAa,KAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,GAAE,CAAA;QAC5G,IAAA,aAAM,EAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACxG,IAAA,aAAM,EAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QAC7H,IAAA,aAAM,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QACxG,IAAA,aAAM,EAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;QAClG,IAAA,aAAM,EAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,wCAA4B,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;QACrI,IAAA,aAAM,EACJ,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,kCAAO,aAAa,KAAE,SAAS,EAAE,UAAU,IAAG,CAAC,IAAI,CACtG,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CACF,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAA;QACb,IAAA,aAAM,EAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QACzG,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE;YACtG,oBAAoB,EAAE,uBAAuB,CAAC,SAAS;SACxD,CAAC,CAAA;QACF,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAA,MAAA,cAAc,CAAC,gBAAgB,0CAAE,iBAAiB,mCAAI,EAAE,CAAC,CAAA;QAClG,IAAA,aAAM,EAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC5C,IAAA,aAAM,EAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QACzG,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5G,IAAA,aAAM,EAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QACjD,IAAA,aAAM,EAAC,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAClE,IAAA,aAAM,EAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;IAC5G,CAAC,CAAA,CAAC,CAAA;IAEF;;;;;;;;;OASG;IACH,EAAE,CAAC,wDAAwD,EAAE,GAAS,EAAE;;QACtE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,2BAA2B,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,qBAAqB,EAAE,CAAA;QAC7G,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC5B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAA;QACtF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAA;QACtF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE;YAC9F,oBAAoB,EAAE,uBAAuB,CAAC,SAAS;SACxD,CAAC,CAAA;QACF,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAA,MAAA,aAAa,CAAC,gBAAgB,0CAAE,iBAAiB,mCAAI,EAAE,CAAC,CAAA;QAChG,IAAA,aAAM,EAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC3C,IAAA,aAAM,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QACxG,IAAA,aAAM,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QACxG,IAAA,aAAM,EAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAA;QACxG,MAAM,iCAAiC,mCAAiB,aAAa,KAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,GAAE,CAAA;QAC5G,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAA;QAC1F,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAA;QACtE,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAA;QAC1F,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAA;QACtE,IAAA,aAAM,EAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QAC7H,IAAA,aAAM,EAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QACzG,IAAA,aAAM,EAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QAC7H,IAAA,aAAM,EAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QACzG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1D,CAAC,CAAA,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAS,EAAE;QACjF,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,2BAA2B,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAA;QACjH,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;QACtC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACvB,IAAA,aAAM,EAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACrG,IAAA,aAAM,EAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACvG,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["/*\n * Participants: A, B children hcp of P ; X external hcp, not related to A/B/P.\n *\n\n * Situation 2:\n * Entity E with legacy metadata created by A and shared with P.\n * There is also a confidential secret id (known by A but not P).\n * A wants to share with X as read only.\n * Expected outcome:\n * - A root secure delegation for A\n * - A->A includes the confidential secret id known by A\n * - A delegation from A to P\n * - Through the delegation A->P A and P can access all the legacy metadata available to P (but not the confidential secret id)\n */\n\nimport { EntityWithDelegationTypeName, IcureApi, ShaVersion } from '../../../icc-x-api'\nimport { randomUUID, webcrypto } from 'crypto'\nimport { createNewHcpApi, getEnvironmentInitializer, setLocalStorage, TestUtils } from '../../utils/test_utils'\nimport { getEnvVariables, TestVars } from '@icure/test-setup/types'\nimport { User } from '../../../icc-api/model/User'\nimport { HealthcareParty } from '../../../icc-api/model/HealthcareParty'\nimport { Patient } from '../../../icc-api/model/Patient'\nimport { testStorageWithKeys } from '../../utils/TestStorage'\nimport { TestCryptoStrategies } from '../../utils/TestCryptoStrategies'\nimport { IccPatientApi } from '../../../icc-api'\nimport { expect } from 'chai'\nimport { EntityShareRequest } from '../../../icc-api/model/requests/EntityShareRequest'\nimport initMasterApi = TestUtils.initMasterApi\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\n\nsetLocalStorage(fetch)\n\nlet env: TestVars\n\ndescribe('Legacy delegations migration test', () => {\n  before(async function () {\n    this.timeout(600000)\n    const initializer = await getEnvironmentInitializer()\n    env = await initializer.execute(getEnvVariables())\n  })\n\n  /**\n   * Participants:\n   *\n   * A, B children hcp of P\n   * X, X2 are external hcps, not related to A/B/P.\n   */\n  // prettier-ignore\n  async function createTestDataAndApis(\n    useFakeKeyForAesExchangeKeyEntry: boolean = false\n  ): Promise<{\n    patientConfidentialSecretId: string\n    apis: { a: IcureApi; b: IcureApi; p: IcureApi; x: IcureApi; x2: IcureApi }\n    users: { a: User; b: User; p: User; x: User; x2: User }\n    patient: Patient\n    patientNote: string\n    ids: { p: string; a: string; b: string; x: string; x2: string }\n  }> {\n    // The following data was created for test purposes only and does not contain any real key / secrets.\n    const pId = randomUUID()\n    const pLogin = `parent-${randomUUID()}`\n    const pPassword = randomUUID()\n    const pPrivateKey =\n      '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' // pragma: allowlist secret\n    const pHcpBase: HealthcareParty = {\n      id: pId,\n      lastName: '8ed642',\n      firstName: 'c9d727',\n      publicKey:\n        '30820122300d06092a864886f70d01010105000382010f003082010a0282010100b8f7e992be3973d42954ca27da89259961c93cca31c6494b074f6f5992ce7ba1d95fdfaf043d5047b6e492c735d68344e0348f08683f1dae728d1e86c439c8498613ec7c8fb54930afbb9f45c74f4d312ecf5d989cb2edd96f887551792094ddd2d18a4c2dc2107c9b044b755f93f8d63e956e1ff0299fa9ed190845f7f5f69dc510df005bd929fb4fed33b30d6e699e0632485cc4180cf5a130357cf64233a680a1a1cc6b6761188192734916cabda14bb954ba3807b84c92f078fe83eea31260390356a8d53853148191144a4584fef02d28bc8353d3c33a87b156396e5fcb7994165da48138db3a3b986fe1c12d46273a218af63b42514690fbb161a5179d0203010001', // pragma: allowlist secret\n    }\n    const pUserBase: User = {\n      id: randomUUID(),\n      name: pLogin,\n      status: User.StatusEnum.ACTIVE,\n      login: pLogin,\n      passwordHash: pPassword,\n      healthcarePartyId: pId,\n      email: `${pLogin}@icure.com`\n    }\n    const aId = randomUUID()\n    const aLogin = `childA-${randomUUID()}`\n    const aPassword = randomUUID()\n    const aPrivateKey =\n      '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' // pragma: allowlist secret\n    const aHcpBase: HealthcareParty = {\n      id: aId,\n      lastName: '6144e2',\n      firstName: '6ca3b4',\n      parentId: pId,\n      aesExchangeKeys: {\n        [useFakeKeyForAesExchangeKeyEntry ? 'x0' : '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']: // pragma: allowlist secret\n          {\n            [pId]: {\n              '3b42514690fbb161a5179d0203010001': // pragma: allowlist secret\n                '4ca457e66519a3f403e089f56f3838a18af16e47029d33ca40eca6a24d1f213809851920b8d159e3879284e5e8d1e0c64be874261d3e0003c43a21ddab9301f8a54161911d3bebe3b1ee6d2a040ec88caa484b6ffd46200bc6eb1a767f309e960f977b9e82d81a0b4961b517e89f24cbc9d0133f955a8d6f792486b1e5dcd9088fe5ecc07b11230b1960013c914041e5de3e9b3c37fa4c2a44dcf2136aae57e000acfe824dacd900bf6be5f6b4f3c41534237a01e14d728065c586dbfd3eeb81ad070218be3e2f70757e9ca5d940afa0b67e02d41e68c1c10935157bc6bd3c06eda95f23c10ca60b649a5ec32903c2a995c0b97fb40cdf454c53621304b0d5b0', // pragma: allowlist secret\n              b59b1e44efebd4db537ced0203010001:\n                '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', // pragma: allowlist secret\n            },\n            [aId]: {\n              b59b1e44efebd4db537ced0203010001:\n                '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', // pragma: allowlist secret\n            },\n          },\n      },\n      publicKey:\n        '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', // pragma: allowlist secret\n    }\n    const aUserBase: User = {\n      id: randomUUID(),\n      name: aLogin,\n      status: User.StatusEnum.ACTIVE,\n      login: aLogin,\n      passwordHash: aPassword,\n      healthcarePartyId: aId,\n      autoDelegations: {\n        all: [pId],\n      },\n      email: `${aLogin}@icure.com`\n    }\n    const bId = randomUUID()\n    const bLogin = `childB-${randomUUID()}`\n    const bPassword = randomUUID()\n    const bPrivateKey =\n      '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' // pragma: allowlist secret\n    const bHcpBase: HealthcareParty = {\n      id: bId,\n      lastName: '95ee22',\n      firstName: '2af696',\n      parentId: pId,\n      aesExchangeKeys: {\n        [useFakeKeyForAesExchangeKeyEntry ? 'x0' : '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']: // pragma: allowlist secret\n          {\n            [pId]: {\n              '3b42514690fbb161a5179d0203010001': // pragma: allowlist secret\n                '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', // pragma: allowlist secret\n              '36108978e3371e9aa0ae8f0203010001': // pragma: allowlist secret\n                '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', // pragma: allowlist secret\n            },\n          },\n      },\n      publicKey:\n        '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', // pragma: allowlist secret\n    }\n    const bUserBase: User = {\n      id: randomUUID(),\n      name: bLogin,\n      status: User.StatusEnum.ACTIVE,\n      login: bLogin,\n      passwordHash: bPassword,\n      groupId: 'test-group',\n      healthcarePartyId: bId,\n      autoDelegations: {\n        all: [pId],\n      },\n      email: `${bLogin}@icure.com`\n    }\n    const patientConfidentialSecretId = '24cd8cf5-0958-4ee9-8e90-95f3d25a47d7'\n    const patientBase: Patient = {\n      id: randomUUID(),\n      firstName: 'John',\n      lastName: 'Doe',\n      delegations: {\n        [aId]: [\n          {\n            owner: aId,\n            delegatedTo: aId,\n            key: '4bd1316d494e858496f1d6c1200726cb76c7ff98fb47eddb1c0bf5b79712230db3f02bdf60599816e0601628ee349674a0509720e9972d87b2370b60bcbbb19adb2980bc1ab5bab8b9c8adc5516d39d0cf2d6c373fe7285ce0f1018058e52fcc', // pragma: allowlist secret\n            tags: ['confidential'],\n          },\n          {\n            owner: aId,\n            delegatedTo: aId,\n            key: '6121912dea437ddaf92c41a43deba576976a2b7c10c1cbba79624634ded8bb5d0210db5e339e3e26d33e6e2d18d6b8acc91f8415e5ab488b9227f7c6f6f370873f1d5b5ff3afd28dfe6e47ed10b0cb435676a4db039469a50547f3e1e515fc63', // pragma: allowlist secret\n          },\n        ],\n        [pId]: [\n          {\n            owner: aId,\n            delegatedTo: pId,\n            key: '0b293a861d76b21928c6689fb80c373f16bfbe8269ef201b5af35ff4634e51af1c5d3c535c384efea3126acee3572b815db950c52298b1ee99868041641110100c51ad3bc6d0bafddd5021b50b8e0fd16c44f5fd05617eae4f5a00c090c0ccfb', // pragma: allowlist secret\n          },\n        ],\n      },\n      encryptionKeys: {\n        [aId]: [\n          {\n            owner: aId,\n            delegatedTo: aId,\n            key: '42e625cb8930ca763f6b604d08775b4231e9414fa953feeafbd7cfc6acc138bdbf5013aa211935f9f429a627db5d41efa617b2ae9d46f93d83db73b36dab7892c07b03408ee4ab50974b0d4081162b4e9a2a448ce00e35d05aac4d7e675e99b3', // pragma: allowlist secret\n          },\n        ],\n        [pId]: [\n          {\n            owner: aId,\n            delegatedTo: pId,\n            key: '194ee902b4780178fd88ffddd1e0744537ddf952d306dfe1123b14bec4405dc1f6b9aea7444cc74f5acca0d18062c0e12d7d9bb6c7b7bff27efb681c7e5ca52f25797f45207f63c13778637a40a541a2e33d79dc1660d7f898d69c92a93aedcf', // pragma: allowlist secret\n          },\n        ],\n      },\n      encryptedSelf: 'jgAFAlmd2QStXpOt3LnIhs4upJv2e10fp0u6/PburW7mq1r3vo/Q5/a4Yk7EWXG7oydMWb2i1UCCiNN80czGdA==', // pragma: allowlist secret\n    }\n\n    const testSetupApi = await initMasterApi(env)\n    await testSetupApi.healthcarePartyApi.createHealthcareParty(pHcpBase)\n    const pUser = await testSetupApi.userApi.createUser(pUserBase)\n    await testSetupApi.healthcarePartyApi.createHealthcareParty(aHcpBase)\n    const aUser = await testSetupApi.userApi.createUser(aUserBase)\n    await testSetupApi.healthcarePartyApi.createHealthcareParty(bHcpBase)\n    const bUser = await testSetupApi.userApi.createUser(bUserBase)\n    const pStorage = await testStorageWithKeys([\n      {\n        dataOwnerId: pHcpBase.id!,\n        pairs: [{ keyPair: { privateKey: pPrivateKey, publicKey: pHcpBase.publicKey! }, shaVersion: ShaVersion.Sha1 }],\n      },\n    ])\n    const aStorage = await testStorageWithKeys([\n      {\n        dataOwnerId: aHcpBase.id!,\n        pairs: [{ keyPair: { privateKey: aPrivateKey, publicKey: aHcpBase.publicKey! }, shaVersion: ShaVersion.Sha1 }],\n      },\n      {\n        dataOwnerId: pHcpBase.id!,\n        pairs: [{ keyPair: { privateKey: pPrivateKey, publicKey: pHcpBase.publicKey! }, shaVersion: ShaVersion.Sha1 }],\n      },\n    ])\n    const bStorage = await testStorageWithKeys([\n      {\n        dataOwnerId: bHcpBase.id!,\n        pairs: [{ keyPair: { privateKey: bPrivateKey, publicKey: bHcpBase.publicKey! }, shaVersion: ShaVersion.Sha1 }],\n      },\n      {\n        dataOwnerId: pHcpBase.id!,\n        pairs: [{ keyPair: { privateKey: pPrivateKey, publicKey: pHcpBase.publicKey! }, shaVersion: ShaVersion.Sha1 }],\n      },\n    ])\n    const pApi = await IcureApi.initialise(\n      env.iCureUrl,\n      { username: pLogin, password: pPassword },\n      new TestCryptoStrategies(),\n      webcrypto as any,\n      fetch,\n      {\n        storage: pStorage.storage,\n        keyStorage: pStorage.keyStorage,\n        entryKeysFactory: pStorage.keyFactory,\n        disableParentKeysInitialisation: false,\n      }\n    )\n    const aApi = await IcureApi.initialise(\n      env.iCureUrl,\n      { username: aLogin, password: aPassword },\n      new TestCryptoStrategies(),\n      webcrypto as any,\n      fetch,\n      {\n        storage: aStorage.storage,\n        keyStorage: aStorage.keyStorage,\n        entryKeysFactory: aStorage.keyFactory,\n        disableParentKeysInitialisation: false,\n      }\n    )\n    const bApi = await IcureApi.initialise(\n      env.iCureUrl,\n      { username: bLogin, password: bPassword },\n      new TestCryptoStrategies(),\n      webcrypto as any,\n      fetch,\n      {\n        storage: bStorage.storage,\n        keyStorage: bStorage.keyStorage,\n        entryKeysFactory: bStorage.keyFactory,\n        disableParentKeysInitialisation: false,\n      }\n    )\n    const xInfo = await createNewHcpApi(env)\n    const x2Info = await createNewHcpApi(env)\n    const apis = { a: aApi, b: bApi, p: pApi, x: xInfo.api, x2: x2Info.api }\n    const xUser = xInfo.user\n    const xCredentials = xInfo.credentials\n    const x2User = x2Info.user\n    const x2Credentials = x2Info.credentials\n    const patient = await new IccPatientApi(env.iCureUrl, {}, aApi.authApi.authenticationProvider, fetch).createPatient(patientBase)\n    const ids = {\n      a: aId,\n      b: bId,\n      p: pId,\n      x: xCredentials.dataOwnerId,\n      x2: x2Credentials.dataOwnerId,\n    }\n    console.log(JSON.stringify(ids, undefined, 2))\n    return {\n      apis,\n      ids,\n      users: {\n        a: aUser,\n        b: bUser,\n        p: pUser,\n        x: xUser,\n        x2: x2User,\n      },\n      patient,\n      patientConfidentialSecretId,\n      patientNote: 'This is just a test patient',\n    }\n  }\n\n  /*\n   * Entity E with legacy metadata created by A and shared with P.\n   * There is also a confidential secret id (known by A but not P).\n   * B wants to share with X as read only.\n   * Expected outcome:\n   * - A root secure delegation B->B\n   * - A delegation B->P\n   * - Through the delegation B->P A and P can access all the legacy metadata available to P (but not the confidential secret id known by A)\n   * - A delegation from B->X\n   * - Through B->X X can access only the shared information and has read access only\n   *\n   * Now A wants to share with X2.\n   * Expected outcome:\n   * - A new root secure delegation A->A is available, which gives access to the confidential secret id\n   * - A delegation A->X2 with the shared information.\n   * - Parents of the new delegation are the new A->A root delegation and the existing A->P delegation.\n   * - B and P still can't access the confidential secret id.\n   */\n  it('sharing data as a child of a parent with legacy access should work', async () => {\n    console.log('Creating test data')\n    const { apis, ids, patient, patientConfidentialSecretId, users, patientNote } = await createTestDataAndApis()\n    console.log('Starting test')\n    const secretIdsKnownByA = new Set(await apis.a.patientApi.decryptSecretIdsOf(patient))\n    const secretIdsKnownByB = new Set(await apis.b.patientApi.decryptSecretIdsOf(patient))\n    expect(secretIdsKnownByB.size).to.eq(1)\n    expect(secretIdsKnownByB.has(patientConfidentialSecretId)).to.be.false\n    expect(secretIdsKnownByA.size).to.eq(2)\n    expect(secretIdsKnownByA.has(patientConfidentialSecretId)).to.be.true\n    expect(secretIdsKnownByA.has([...secretIdsKnownByB][0])).to.be.true\n    const sharedPatient = await apis.b.patientApi.shareWith(ids.x, patient, [...secretIdsKnownByB], {\n      requestedPermissions: RequestedPermissionEnum.FULL_READ,\n    })\n    const secureDelegations = Object.values(sharedPatient.securityMetadata?.secureDelegations ?? {})\n    expect(secureDelegations).to.have.length(3)\n    expect(secureDelegations.find((d) => d.delegator === ids.b && d.delegate === ids.b)).to.not.be.undefined\n    expect(secureDelegations.find((d) => d.delegator === ids.b && d.delegate === ids.p)).to.not.be.undefined\n    const sharedPatientWithoutLegacyDetails: Patient = { ...sharedPatient, delegations: {}, encryptionKeys: {} }\n    expect(await apis.a.patientApi.getEncryptionKeysOf(sharedPatientWithoutLegacyDetails)).to.have.length(1)\n    expect(await apis.a.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails)).to.have.members([...secretIdsKnownByB])\n    expect(secureDelegations.find((d) => d.delegator === ids.b && d.delegate === ids.x)).to.not.be.undefined\n    expect((await apis.x.patientApi.getPatientWithUser(users.x, patient.id!)).note).to.eq(patientNote)\n    expect(await apis.x.cryptoApi.xapi.hasWriteAccess({ entity: sharedPatient, type: EntityWithDelegationTypeName.Patient })).to.be.false\n    expect(\n      await apis.x.patientApi.modifyPatientWithUser(users.x, { ...sharedPatient, firstName: 'New name' }).then(\n        () => true,\n        () => false\n      )\n    ).to.be.false\n    expect(await apis.x.patientApi.decryptSecretIdsOf(sharedPatient)).to.have.members([...secretIdsKnownByB])\n    const sharedPatient2 = await apis.a.patientApi.shareWith(ids.x2, sharedPatient, [...secretIdsKnownByB], {\n      requestedPermissions: RequestedPermissionEnum.FULL_READ,\n    })\n    const secureDelegations2 = Object.values(sharedPatient2.securityMetadata?.secureDelegations ?? {})\n    expect(secureDelegations2).to.have.length(5)\n    expect(secureDelegations2.find((d) => d.delegator === ids.a && d.delegate === ids.a)).to.not.be.undefined\n    const secureDelegationAtoX2 = secureDelegations2.find((d) => d.delegator === ids.a && d.delegate === ids.x2)\n    expect(secureDelegationAtoX2).to.not.be.undefined\n    expect(secureDelegationAtoX2?.parentDelegations).to.have.length(2)\n    expect(await apis.b.patientApi.decryptSecretIdsOf(sharedPatient2)).to.have.members([...secretIdsKnownByB])\n  })\n\n  /*\n   * Entity E with legacy metadata created by A and shared with P.\n   * There is also a confidential secret id (known by A but not P).\n   * A wants to share with X as read only.\n   * Expected outcome:\n   * - A root secure delegation for A\n   * - A->A includes the confidential secret id known by A\n   * - A delegation from A to P\n   * - Through the delegation A->P A and P can access all the legacy metadata available to P (but not the confidential secret id)\n   */\n  it('sharing data created with legacy api by the same user ', async () => {\n    console.log('Creating test data')\n    const { apis, ids, patient, patientConfidentialSecretId, users, patientNote } = await createTestDataAndApis()\n    console.log('Starting test')\n    const secretIdsKnownByA = new Set(await apis.a.patientApi.decryptSecretIdsOf(patient))\n    const secretIdsKnownByB = new Set(await apis.b.patientApi.decryptSecretIdsOf(patient))\n    const sharedPatient = await apis.a.patientApi.shareWith(ids.x, patient, [...secretIdsKnownByB], {\n      requestedPermissions: RequestedPermissionEnum.FULL_READ,\n    })\n    const secureDelegations = Object.values(sharedPatient.securityMetadata?.secureDelegations ?? {})\n    expect(secureDelegations).to.have.length(3)\n    expect(secureDelegations.find((d) => d.delegator === ids.a && d.delegate === ids.a)).to.not.be.undefined\n    expect(secureDelegations.find((d) => d.delegator === ids.a && d.delegate === ids.p)).to.not.be.undefined\n    expect(secureDelegations.find((d) => d.delegator === ids.a && d.delegate === ids.x)).to.not.be.undefined\n    const sharedPatientWithoutLegacyDetails: Patient = { ...sharedPatient, delegations: {}, encryptionKeys: {} }\n    console.log(await apis.a.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails))\n    console.log(await apis.b.patientApi.decryptSecretIdsOf(sharedPatient))\n    console.log(await apis.b.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails))\n    console.log(await apis.x.patientApi.decryptSecretIdsOf(sharedPatient))\n    expect(await apis.a.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails)).to.have.members([...secretIdsKnownByA])\n    expect(await apis.b.patientApi.decryptSecretIdsOf(sharedPatient)).to.have.members([...secretIdsKnownByB])\n    expect(await apis.b.patientApi.decryptSecretIdsOf(sharedPatientWithoutLegacyDetails)).to.have.members([...secretIdsKnownByB])\n    expect(await apis.x.patientApi.decryptSecretIdsOf(sharedPatient)).to.have.members([...secretIdsKnownByB])\n    console.log(JSON.stringify(sharedPatient, undefined, 2))\n  })\n\n  it('should be able to use aesExchangeKeysEntries with fake public key', async () => {\n    console.log('Creating test data')\n    const { apis, ids, patient, patientConfidentialSecretId, users, patientNote } = await createTestDataAndApis(true)\n    console.log('Starting test')\n    console.log(users.a.healthcarePartyId)\n    console.log(users.b.healthcarePartyId)\n    console.log(patient.id)\n    expect((await apis.a.patientApi.getPatientWithUser(users.a, patient.id!)).note).to.equal(patientNote)\n    expect((await apis.b.patientApi.getPatientWithUser(users.a, patient.id!)).note).to.equal(patientNote)\n  })\n})\n"]}

package/test/icc-x-api/crypto/secure-delegations-manager-test.d.ts

@@ -1 +0,0 @@
-export {};