@icure/api 8.6.19 → 8.7.1

package/test/icc-x-api/crypto/exchange-data-manager-test.js

@@ -1,674 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const mocha_1 = require("mocha");
-const ExchangeDataManager_1 = require("../../../icc-x-api/crypto/ExchangeDataManager");
-const CryptoPrimitives_1 = require("../../../icc-x-api/crypto/CryptoPrimitives");
-const crypto_1 = require("crypto");
-const BaseExchangeDataManager_1 = require("../../../icc-x-api/crypto/BaseExchangeDataManager");
-const FakeExchangeDataApi_1 = require("../../utils/FakeExchangeDataApi");
-const FakeDataOwnerApi_1 = require("../../utils/FakeDataOwnerApi");
-const TestCryptoStrategies_1 = require("../../utils/TestCryptoStrategies");
-const icc_x_api_1 = require("../../../icc-x-api");
-const FakeEncryptionKeysManager_1 = require("../../utils/FakeEncryptionKeysManager");
-const AccessControlSecretUtils_1 = require("../../../icc-x-api/crypto/AccessControlSecretUtils");
-const ExchangeData_1 = require("../../../icc-api/model/internal/ExchangeData");
-const chai_1 = require("chai");
-const collection_utils_1 = require("../../../icc-x-api/utils/collection-utils");
-const _ = require("lodash");
-const utils_1 = require("../../../icc-x-api/crypto/utils");
-const DataOwnerTypeEnum_1 = require("../../../icc-api/model/DataOwnerTypeEnum");
-const types_1 = require("@icure/test-setup/types");
-const test_utils_1 = require("../../utils/test_utils");
-require("isomorphic-fetch");
-const IccExchangeDataApi_1 = require("../../../icc-api/api/internal/IccExchangeDataApi");
-(0, test_utils_1.setLocalStorage)(fetch);
-(0, mocha_1.describe)('Exchange data manager - unit', function () {
-    return __awaiter(this, void 0, void 0, function* () {
-        const primitives = new CryptoPrimitives_1.WebCryptoPrimitives(crypto_1.webcrypto);
-        const accessControlSecretUtils = new AccessControlSecretUtils_1.AccessControlSecretUtils(primitives);
-        let selfId;
-        let selfKeyFpV1;
-        let selfKeyFpV2;
-        let selfKeypair;
-        let delegateId;
-        let delegateKeyFp;
-        let delegateKeypair;
-        let delegate2Id;
-        let delegate2KeyFp;
-        let delegate2Keypair;
-        let dataOwnerApi;
-        let exchangeDataApi;
-        let baseExchangeData;
-        let exchangeData;
-        let encryptionKeysManager;
-        function initialiseComponents(allowFullExchangeDataLoad_1) {
-            return __awaiter(this, arguments, void 0, function* (allowFullExchangeDataLoad, optionalParameters = {}) {
-                const dataOwnerType = allowFullExchangeDataLoad ? DataOwnerTypeEnum_1.DataOwnerTypeEnum.Patient : DataOwnerTypeEnum_1.DataOwnerTypeEnum.Hcp;
-                selfId = primitives.randomUuid();
-                selfKeypair = yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                selfKeyFpV1 = (0, utils_1.fingerprintV1)((0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(selfKeypair.publicKey, 'spki')));
-                selfKeyFpV2 = (0, utils_1.fingerprintV1toV2)(selfKeyFpV1);
-                delegateId = primitives.randomUuid();
-                delegateKeypair = yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                delegateKeyFp = (0, utils_1.fingerprintV1)((0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(delegateKeypair.publicKey, 'spki')));
-                delegate2Id = primitives.randomUuid();
-                delegate2Keypair = yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                delegate2KeyFp = (0, utils_1.fingerprintV1)((0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(delegate2Keypair.publicKey, 'spki')));
-                dataOwnerApi = new FakeDataOwnerApi_1.FakeDataOwnerApi({
-                    id: selfId,
-                    type: dataOwnerType,
-                    publicKeysForOaepWithSha256: [(0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(selfKeypair.publicKey, 'spki'))],
-                }, [
-                    {
-                        id: delegateId,
-                        type: dataOwnerType,
-                        publicKeysForOaepWithSha256: [(0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(delegateKeypair.publicKey, 'spki'))],
-                    },
-                    {
-                        id: delegate2Id,
-                        type: dataOwnerType,
-                        publicKeysForOaepWithSha256: [(0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(delegate2Keypair.publicKey, 'spki'))],
-                    },
-                ]);
-                const cryptoStrategies = new TestCryptoStrategies_1.TestCryptoStrategies(undefined, undefined, optionalParameters.verifiedDelegateKeys);
-                exchangeDataApi = new FakeExchangeDataApi_1.FakeExchangeDataApi();
-                baseExchangeData = new BaseExchangeDataManager_1.BaseExchangeDataManager(exchangeDataApi, dataOwnerApi, primitives, allowFullExchangeDataLoad, false);
-                encryptionKeysManager = yield FakeEncryptionKeysManager_1.FakeEncryptionKeysManager.create(primitives, [selfKeypair]);
-                exchangeData = yield (0, ExchangeDataManager_1.initialiseExchangeDataManagerForCurrentDataOwner)(baseExchangeData, encryptionKeysManager, accessControlSecretUtils, cryptoStrategies, dataOwnerApi, primitives, true, optionalParameters);
-            });
-        }
-        function checkDataEqual(actual, expected) {
-            return __awaiter(this, void 0, void 0, function* () {
-                (0, chai_1.expect)(actual).to.not.be.undefined;
-                (0, chai_1.expect)(_.isEqual(_.omit(expected.exchangeData, ['rev']), _.omit(actual.exchangeData, ['rev']))).to.equal(true, `Data should be equivalent\nExpected: ${JSON.stringify(expected.exchangeData, undefined, 2)}\nActual: ${JSON.stringify(actual.exchangeData, undefined, 2)}\n`);
-                (0, chai_1.expect)(expected.accessControlSecret).to.equal(actual.accessControlSecret);
-                yield checkAesKeysEquality(actual.exchangeKey, expected.exchangeKey);
-            });
-        }
-        function checkAesKeysEquality(actual, expected) {
-            return __awaiter(this, void 0, void 0, function* () {
-                if (!actual && !expected)
-                    return;
-                (0, chai_1.expect)(!actual).to.equal(!expected, !expected ? 'Key should not have been decrypted' : 'Key should have been decrypted');
-                (0, chai_1.expect)((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(expected, 'raw'))).to.equal((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(actual, 'raw')));
-            });
-        }
-        function createDataFromRandomToSelf() {
-            return __awaiter(this, void 0, void 0, function* () {
-                const encryptionKey = yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                const encryptionFp = (0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(encryptionKey.publicKey, 'spki')).slice(-32);
-                const signatureKey = yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha1);
-                const signatureFp = (0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(signatureKey.publicKey, 'spki')).slice(-32);
-                const created = yield baseExchangeData.createExchangeData(selfId, { [signatureFp]: signatureKey.privateKey }, { [encryptionFp]: encryptionKey.publicKey, [selfKeyFpV1]: selfKeypair.publicKey });
-                const modified = yield exchangeDataApi.modifyExchangeData(new ExchangeData_1.ExchangeData(Object.assign(Object.assign({}, created.exchangeData), { delegator: primitives.randomUuid() })));
-                return { exchangeData: modified, exchangeKey: created.exchangeKey, accessControlSecret: created.accessControlSecret };
-            });
-        }
-        function generateEncryptionKeys(n) {
-            return __awaiter(this, void 0, void 0, function* () {
-                return yield Promise.all(Array(n)
-                    .fill(null)
-                    .map(() => __awaiter(this, void 0, void 0, function* () {
-                    const pair = yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                    const hexPub = (0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(pair.publicKey, 'spki'));
-                    const fingerprint = (0, utils_1.fingerprintV2)(hexPub);
-                    return { pair, fingerprintV2: fingerprint, hexPub };
-                })));
-            });
-        }
-        it('base should be able to retrieve all exchange data for the current data owner if allowed by the crypto strategies', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const expectedData = yield Promise.all(Array.from(Array(3500), (_, i) => __awaiter(this, void 0, void 0, function* () {
-                            const data = new ExchangeData_1.ExchangeData({
-                                id: primitives.randomUuid(),
-                                delegate: i % 2 === 0 ? selfId : primitives.randomUuid(),
-                                delegator: i % 2 === 0 ? primitives.randomUuid() : selfId,
-                                exchangeKey: { not: 'important' },
-                                accessControlSecret: { not: 'important' },
-                                sharedSignatureKey: { not: 'important' },
-                                delegatorSignature: { not: 'important' },
-                                sharedSignature: 'not important',
-                            });
-                            yield exchangeDataApi.createExchangeData(data);
-                            return data;
-                        })));
-                        yield Promise.all(Array.from(Array(500), () => __awaiter(this, void 0, void 0, function* () {
-                            // Should not be in result
-                            const data = new ExchangeData_1.ExchangeData({
-                                id: primitives.randomUuid(),
-                                delegate: primitives.randomUuid(),
-                                delegator: primitives.randomUuid(),
-                                exchangeKey: { not: 'important' },
-                                accessControlSecret: { not: 'important' },
-                                sharedSignatureKey: { not: 'important' },
-                                delegatorSignature: { not: 'important' },
-                                sharedSignature: 'not important',
-                            });
-                            yield exchangeDataApi.createExchangeData(data);
-                        })));
-                        const retrieved = yield baseExchangeData.getAllExchangeDataForCurrentDataOwnerIfAllowed();
-                        if (allowFullExchangeDataLoad) {
-                            (0, chai_1.expect)(retrieved).to.not.be.undefined;
-                            (0, chai_1.expect)(retrieved).to.have.length(expectedData.length);
-                            (0, chai_1.expect)((0, collection_utils_1.setEquals)(new Set(expectedData.map((x) => x.id)), new Set(retrieved.map((x) => x.id))), 'Retrieved and expected ids').to.be.true;
-                        }
-                        else {
-                            (0, chai_1.expect)(retrieved).to.be.undefined;
-                        }
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('should create new encryption keys when none is available', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        var _a;
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const sfk = primitives.randomUuid();
-                        const initialisedCount = exchangeDataApi.callCount;
-                        const createdData = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        const retrievedCachedData = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        exchangeDataApi.compareCallCountFromBaseline(initialisedCount, {
-                            createExchangeData: 1,
-                            // If we could fully preload we already know whether the exchange key already exists or not, otherwise we have to request from the api
-                            getExchangeDataByDelegatorDelegate: allowFullExchangeDataLoad ? 0 : 1,
-                            modifyExchangeData: 0,
-                            getExchangeDataByIds: 0,
-                            getExchangeDataByParticipant: 0,
-                        });
-                        yield checkDataEqual(retrievedCachedData, createdData);
-                        const decryptedKeyByDelegate = yield baseExchangeData.tryDecryptExchangeKeys([createdData.exchangeData], { [delegateKeyFp]: delegateKeypair });
-                        const decryptedAccessControlSecretByDelegate = yield baseExchangeData.tryDecryptAccessControlSecret([createdData.exchangeData], {
-                            [delegateKeyFp]: delegateKeypair,
-                        });
-                        yield checkAesKeysEquality(decryptedKeyByDelegate.successfulDecryptions[0], createdData.exchangeKey);
-                        (0, chai_1.expect)(decryptedAccessControlSecretByDelegate.successfulDecryptions[0]).to.equal(createdData.accessControlSecret);
-                        (0, chai_1.expect)(retrievedCachedData.exchangeData.delegator).to.equal(selfId);
-                        (0, chai_1.expect)(retrievedCachedData.exchangeData.delegate).to.equal(delegateId);
-                        (0, chai_1.expect)(Object.keys((_a = retrievedCachedData.exchangeData.delegatorSignature) !== null && _a !== void 0 ? _a : {})).to.have.length(1);
-                        (0, chai_1.expect)(Object.keys(retrievedCachedData.exchangeData.exchangeKey)).to.have.length(2);
-                        (0, chai_1.expect)(Object.keys(retrievedCachedData.exchangeData.accessControlSecret)).to.have.length(2);
-                        (0, chai_1.expect)(Object.keys(retrievedCachedData.exchangeData.sharedSignatureKey)).to.have.length(2);
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('should create encryption keys to self when none is available', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        var _a;
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const createdData = yield exchangeData.getOrCreateEncryptionDataTo(selfId);
-                        (0, chai_1.expect)(createdData.exchangeData.delegator).to.equal(selfId);
-                        (0, chai_1.expect)(createdData.exchangeData.delegate).to.equal(selfId);
-                        (0, chai_1.expect)(Object.keys((_a = createdData.exchangeData.delegatorSignature) !== null && _a !== void 0 ? _a : {})).to.have.length(1);
-                        (0, chai_1.expect)(Object.keys(createdData.exchangeData.sharedSignatureKey)).to.have.length(1);
-                        (0, chai_1.expect)(Object.keys(createdData.exchangeData.exchangeKey)).to.have.length(1);
-                        (0, chai_1.expect)(Object.keys(createdData.exchangeData.accessControlSecret)).to.have.length(1);
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('should ignore unverified keys when creating new exchange data', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        const delegateVerifiedKeys = yield generateEncryptionKeys(5);
-                        const extraDelegateUnverifiedKeys = yield generateEncryptionKeys(5);
-                        const extraDelegatorVerifiedKeys = yield generateEncryptionKeys(5);
-                        const delegatorUnverifiedKeys = yield generateEncryptionKeys(5);
-                        yield initialiseComponents(allowFullExchangeDataLoad, { verifiedDelegateKeys: new Set(delegateVerifiedKeys.map((x) => x.hexPub)) });
-                        for (const keyData of [...delegateVerifiedKeys, ...extraDelegateUnverifiedKeys]) {
-                            yield dataOwnerApi.addPublicKeyForOwner(delegateId, keyData.pair);
-                        }
-                        for (const keyData of extraDelegatorVerifiedKeys) {
-                            yield dataOwnerApi.addPublicKeyForOwner(selfId, keyData.pair);
-                            yield encryptionKeysManager.addOrUpdateKey(primitives, keyData.pair, true);
-                        }
-                        for (const keyData of delegatorUnverifiedKeys) {
-                            yield dataOwnerApi.addPublicKeyForOwner(selfId, keyData.pair);
-                            yield encryptionKeysManager.addOrUpdateKey(primitives, keyData.pair, false);
-                        }
-                        const created = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        (0, chai_1.expect)((0, collection_utils_1.setEquals)(new Set(Object.keys(created.exchangeData.exchangeKey)), new Set(Object.keys(created.exchangeData.accessControlSecret))), 'Keys used for encryption of exchange key and access control secret must be the same.').to.be.true;
-                        (0, chai_1.expect)((0, collection_utils_1.setEquals)(new Set(Object.keys(created.exchangeData.exchangeKey)), new Set([...delegateVerifiedKeys.map((x) => x.fingerprintV2), ...extraDelegatorVerifiedKeys.map((x) => x.fingerprintV2), selfKeyFpV2])), 'Only verified keys of delegate and delegator should be used for encryption of exchange key and access control secret.').to.be.true;
-                        for (const keyData of [{ pair: selfKeypair, fingerprintV2: selfKeyFpV1 }, ...extraDelegatorVerifiedKeys, ...delegateVerifiedKeys]) {
-                            yield checkAesKeysEquality((yield baseExchangeData.tryDecryptExchangeKeys([created.exchangeData], { [keyData.fingerprintV2]: keyData.pair })).successfulDecryptions[0], created.exchangeKey);
-                            (0, chai_1.expect)((yield baseExchangeData.tryDecryptAccessControlSecret([created.exchangeData], { [keyData.fingerprintV2]: keyData.pair }))
-                                .successfulDecryptions[0]).to.equal(created.accessControlSecret);
-                        }
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('should reuse existing exchange data for encryption when it can be verified', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const createdData = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        yield exchangeData.clearOrRepopulateCache();
-                        const countAfterCacheClear = exchangeDataApi.callCount;
-                        const reloadedData = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        exchangeDataApi.compareCallCountFromBaseline(countAfterCacheClear, {
-                            createExchangeData: 0,
-                            getExchangeDataByDelegatorDelegate: allowFullExchangeDataLoad ? 0 : 1,
-                            modifyExchangeData: 0,
-                            getExchangeDataByIds: 0,
-                            getExchangeDataByParticipant: 0,
-                        });
-                        yield checkDataEqual(reloadedData, createdData);
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('should create new exchange data for encryption when the existing data can not be verified due to unavailable verification key', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const createdData = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        yield encryptionKeysManager.unverifyExistingKeysAndCreateNewVerified(primitives);
-                        yield exchangeData.clearOrRepopulateCache();
-                        const countAfterCacheClear = exchangeDataApi.callCount;
-                        const newData = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        exchangeDataApi.compareCallCountFromBaseline(countAfterCacheClear, {
-                            createExchangeData: 1,
-                            getExchangeDataByDelegatorDelegate: allowFullExchangeDataLoad ? 0 : 1,
-                            modifyExchangeData: 0,
-                            getExchangeDataByIds: 0,
-                            getExchangeDataByParticipant: 0,
-                        });
-                        (0, chai_1.expect)(_.isEqual(_.omit(createdData.exchangeData, ['rev']), _.omit(newData.exchangeData, ['rev']))).to.equal(false, 'Exchange data manager should have created new exchange data for encryption');
-                        (0, chai_1.expect)((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(createdData.exchangeKey, 'raw'))).to.not.equal((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(newData.exchangeKey, 'raw')));
-                        (0, chai_1.expect)(createdData.accessControlSecret).to.not.equal(newData.accessControlSecret);
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('should create new exchange data for encryption when the existing data can not be verified due to tampering of the encrypted access control secret and/or encrypted exchange key', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad, tamper) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const sfk = primitives.randomUuid();
-                        const createdData = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        // Tamper with exchange data
-                        yield exchangeDataApi.modifyExchangeData(yield tamper(createdData.exchangeData, selfKeypair, selfKeyFpV2));
-                        yield exchangeData.clearOrRepopulateCache();
-                        const countAfterCacheClear = exchangeDataApi.callCount;
-                        const newData = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        exchangeDataApi.compareCallCountFromBaseline(countAfterCacheClear, {
-                            createExchangeData: 1,
-                            getExchangeDataByDelegatorDelegate: allowFullExchangeDataLoad ? 0 : 1,
-                            modifyExchangeData: 0,
-                            getExchangeDataByIds: 0,
-                            getExchangeDataByParticipant: 0,
-                        });
-                        (0, chai_1.expect)(createdData.exchangeData.id).not.to.equal(newData.exchangeData.id, 'Exchange data manager should have created new exchange data for encryption');
-                        (0, chai_1.expect)((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(createdData.exchangeKey, 'raw'))).to.not.equal((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(newData.exchangeKey, 'raw')));
-                        (0, chai_1.expect)(createdData.accessControlSecret).to.not.equal(newData.accessControlSecret);
-                        const updatedUnverifiedOldData = (yield exchangeData.getDecryptionDataKeyByIds([createdData.exchangeData.id], true))[createdData.exchangeData.id];
-                        (0, chai_1.expect)(updatedUnverifiedOldData).to.not.be.undefined;
-                    });
-                }
-                const extraKeyPair = yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                const extraKeyPairFp = (0, utils_1.fingerprintV2)((0, icc_x_api_1.ua2hex)(yield primitives.RSA.exportKey(extraKeyPair.publicKey, 'spki')));
-                const fakeKey = primitives.randomBytes(16);
-                const tamperByChangingEncryptionKey = (exchangeData, selfKeyPair, selfKeyFp) => __awaiter(this, void 0, void 0, function* () {
-                    return new ExchangeData_1.ExchangeData(Object.assign(Object.assign({}, exchangeData), { exchangeKey: Object.assign(Object.assign({}, exchangeData.exchangeKey), { [selfKeyFp]: (0, icc_x_api_1.ua2b64)(yield primitives.RSA.encrypt(selfKeyPair.publicKey, fakeKey)) }) }));
-                });
-                const tamperByChangingAccessControlSecret = (exchangeData, selfKeyPair, selfKeyFp) => __awaiter(this, void 0, void 0, function* () {
-                    return new ExchangeData_1.ExchangeData(Object.assign(Object.assign({}, exchangeData), { accessControlSecret: Object.assign(Object.assign({}, exchangeData.accessControlSecret), { [selfKeyFp]: (0, icc_x_api_1.ua2b64)(yield primitives.RSA.encrypt(selfKeyPair.publicKey, fakeKey)) }) }));
-                });
-                const tamperByChangingBoth = (exchangeData, selfKeyPair, selfKeyFp) => __awaiter(this, void 0, void 0, function* () { return tamperByChangingEncryptionKey(yield tamperByChangingAccessControlSecret(exchangeData, selfKeyPair, selfKeyFp), selfKeyPair, selfKeyFp); });
-                const tamperByAddingEncryptionKey = (exchangeData) => __awaiter(this, void 0, void 0, function* () {
-                    return new ExchangeData_1.ExchangeData(Object.assign(Object.assign({}, exchangeData), { exchangeKey: Object.assign(Object.assign({}, exchangeData.exchangeKey), { [extraKeyPairFp]: (0, icc_x_api_1.ua2b64)(yield primitives.RSA.encrypt(extraKeyPair.publicKey, fakeKey)) }) }));
-                });
-                yield doTest(true, tamperByChangingEncryptionKey);
-                yield doTest(false, tamperByChangingEncryptionKey);
-                yield doTest(true, tamperByChangingAccessControlSecret);
-                yield doTest(false, tamperByChangingAccessControlSecret);
-                yield doTest(true, tamperByChangingBoth);
-                yield doTest(false, tamperByChangingBoth);
-                yield doTest(true, tamperByAddingEncryptionKey);
-                yield doTest(false, tamperByAddingEncryptionKey);
-            });
-        });
-        it('should create new exchange data for encryption when the existing data can not be verified due to tampering of the delegate id', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const createdData = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        // Tamper with exchange data
-                        yield exchangeDataApi.modifyExchangeData(Object.assign(Object.assign({}, createdData.exchangeData), { delegate: delegate2Id }));
-                        yield exchangeData.clearOrRepopulateCache();
-                        const countAfterCacheClear = exchangeDataApi.callCount;
-                        const newDataToDelegate = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        const newDataToDelegate2 = yield exchangeData.getOrCreateEncryptionDataTo(delegate2Id);
-                        exchangeDataApi.compareCallCountFromBaseline(countAfterCacheClear, {
-                            createExchangeData: 2,
-                            getExchangeDataByDelegatorDelegate: allowFullExchangeDataLoad ? 0 : 2,
-                            modifyExchangeData: 0,
-                            getExchangeDataByIds: 0,
-                            getExchangeDataByParticipant: 0,
-                        });
-                        (0, chai_1.expect)(createdData.exchangeData.id).to.not.equal(newDataToDelegate.exchangeData.id, 'Exchange data manager should have created new exchange data for encryption to delegate');
-                        (0, chai_1.expect)(createdData.exchangeData.id).to.not.equal(newDataToDelegate2.exchangeData.id, 'Exchange data manager should have created new exchange data for encryption to delegate 2');
-                        (0, chai_1.expect)((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(createdData.exchangeKey, 'raw'))).to.not.equal((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(newDataToDelegate.exchangeKey, 'raw')));
-                        (0, chai_1.expect)((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(createdData.exchangeKey, 'raw'))).to.not.equal((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(newDataToDelegate2.exchangeKey, 'raw')));
-                        (0, chai_1.expect)(createdData.accessControlSecret).to.not.equal(newDataToDelegate.accessControlSecret);
-                        (0, chai_1.expect)(createdData.accessControlSecret).to.not.equal(newDataToDelegate2.accessControlSecret);
-                        const updatedUnverifiedOldData = (yield exchangeData.getDecryptionDataKeyByIds([createdData.exchangeData.id], true))[createdData.exchangeData.id];
-                        (0, chai_1.expect)(updatedUnverifiedOldData).to.not.be.undefined;
-                        (0, chai_1.expect)((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(updatedUnverifiedOldData.exchangeKey, 'raw'))).to.equal((0, icc_x_api_1.ua2hex)(yield primitives.AES.exportKey(createdData.exchangeKey, 'raw')));
-                        (0, chai_1.expect)(updatedUnverifiedOldData.accessControlSecret).to.equal(createdData.accessControlSecret);
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('should return existing exchange data keys for decryption even if the data authenticity could not be verified', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const createdData1 = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        const createdData2 = yield createDataFromRandomToSelf();
-                        yield encryptionKeysManager.unverifyExistingKeysAndCreateNewVerified(primitives);
-                        yield exchangeData.clearOrRepopulateCache();
-                        yield checkDataEqual((yield exchangeData.getDecryptionDataKeyByIds([createdData1.exchangeData.id], true))[createdData1.exchangeData.id], createdData1);
-                        yield checkDataEqual((yield exchangeData.getDecryptionDataKeyByIds([createdData2.exchangeData.id], true))[createdData2.exchangeData.id], createdData2);
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('newly created data or data retrieved by id should be cached and retrievable by hash', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const createdData1 = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                        const hashes1 = yield accessControlSecretUtils.allSecureDelegationKeysFor(createdData1.accessControlSecret);
-                        const retrievedKeys1 = yield exchangeData.getCachedDecryptionDataKeyByAccessControlHash(hashes1);
-                        for (const hash of hashes1) {
-                            yield checkDataEqual(retrievedKeys1[hash], createdData1);
-                        }
-                        if (!allowFullExchangeDataLoad) {
-                            const createdData2 = yield createDataFromRandomToSelf();
-                            const hashes2 = yield accessControlSecretUtils.allSecureDelegationKeysFor(createdData2.accessControlSecret);
-                            yield checkDataEqual((yield exchangeData.getDecryptionDataKeyByIds([createdData2.exchangeData.id], true))[createdData2.exchangeData.id], createdData2);
-                            const retrievedKeys2 = yield exchangeData.getCachedDecryptionDataKeyByAccessControlHash([...hashes1, ...hashes2]);
-                            for (const hash of hashes2) {
-                                yield checkDataEqual(retrievedKeys2[hash], createdData2);
-                            }
-                        }
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('if data can not be decrypted the retrieval method should return undefined', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const createdBySelf = yield exchangeData.getOrCreateEncryptionDataTo(selfId);
-                        const createdByOther = yield createDataFromRandomToSelf();
-                        const newKey = yield primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                        yield dataOwnerApi.addPublicKeyForOwner(selfId, newKey);
-                        // Simulate loss of key
-                        encryptionKeysManager.deleteKey(selfKeyFpV1);
-                        yield encryptionKeysManager.addOrUpdateKey(primitives, newKey, true);
-                        yield exchangeData.clearOrRepopulateCache();
-                        yield checkDataEqual((yield exchangeData.getDecryptionDataKeyByIds([createdBySelf.exchangeData.id], true))[createdBySelf.exchangeData.id], {
-                            exchangeData: createdBySelf.exchangeData,
-                            exchangeKey: undefined,
-                        });
-                        yield checkDataEqual((yield exchangeData.getDecryptionDataKeyByIds([createdByOther.exchangeData.id], true))[createdByOther.exchangeData.id], {
-                            exchangeData: createdByOther.exchangeData,
-                            exchangeKey: undefined,
-                        });
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('unverified keys should still be usable for decryption of data', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                function doTest(allowFullExchangeDataLoad) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield initialiseComponents(allowFullExchangeDataLoad);
-                        const createdBySelf = yield exchangeData.getOrCreateEncryptionDataTo(selfId);
-                        const createdByOther = yield createDataFromRandomToSelf();
-                        yield encryptionKeysManager.addOrUpdateKey(primitives, selfKeypair, false);
-                        yield exchangeData.clearOrRepopulateCache();
-                        yield checkDataEqual((yield exchangeData.getDecryptionDataKeyByIds([createdBySelf.exchangeData.id], true))[createdBySelf.exchangeData.id], createdBySelf);
-                        yield checkDataEqual((yield exchangeData.getDecryptionDataKeyByIds([createdByOther.exchangeData.id], true))[createdByOther.exchangeData.id], createdByOther);
-                    });
-                }
-                yield doTest(true);
-                yield doTest(false);
-            });
-        });
-        it('implementation with limited cache should trigger eviction of delegate and hash cache on eviction of data by id cache', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents(false, { lruCacheSize: 3 });
-                const entityType = icc_x_api_1.EntityWithDelegationTypeName.Contact;
-                const sfks = [primitives.randomUuid(), primitives.randomUuid(), primitives.randomUuid()];
-                function verifyCached(data) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        const apiCallsBaseline = exchangeDataApi.callCount;
-                        const hashes = yield accessControlSecretUtils.allSecureDelegationKeysFor(data.accessControlSecret);
-                        for (const hash of hashes) {
-                            yield checkDataEqual((yield exchangeData.getCachedDecryptionDataKeyByAccessControlHash([hash]))[hash], data);
-                        }
-                        if (data.exchangeData.delegator === selfId) {
-                            yield checkDataEqual(yield exchangeData.getOrCreateEncryptionDataTo(data.exchangeData.delegate), data);
-                        }
-                        yield checkDataEqual((yield exchangeData.getDecryptionDataKeyByIds([data.exchangeData.id], true))[data.exchangeData.id], data);
-                        exchangeDataApi.compareCallCountFromBaseline(apiCallsBaseline, {
-                            getExchangeDataByIds: 0,
-                            createExchangeData: 0,
-                            modifyExchangeData: 0,
-                            getExchangeDataByParticipant: 0,
-                            getExchangeDataByDelegatorDelegate: 0,
-                        });
-                    });
-                }
-                function verifyNotCachedThenCache(data) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        const apiCallsBaseline = exchangeDataApi.callCount;
-                        const hashes = [yield accessControlSecretUtils.secureDelegationKeyFor(data.accessControlSecret, entityType)];
-                        for (const hash of hashes) {
-                            (0, chai_1.expect)(Object.keys(yield exchangeData.getCachedDecryptionDataKeyByAccessControlHash([hash]))).to.have.length(0);
-                        }
-                        if (data.exchangeData.delegator === selfId) {
-                            yield checkDataEqual(yield exchangeData.getOrCreateEncryptionDataTo(data.exchangeData.delegate), data);
-                            exchangeDataApi.compareCallCountFromBaseline(apiCallsBaseline, {
-                                getExchangeDataByIds: 0,
-                                createExchangeData: 0,
-                                modifyExchangeData: 0,
-                                getExchangeDataByParticipant: 0,
-                                getExchangeDataByDelegatorDelegate: 1,
-                            });
-                        }
-                        else {
-                            yield checkDataEqual((yield exchangeData.getDecryptionDataKeyByIds([data.exchangeData.id], true))[data.exchangeData.id], data);
-                            exchangeDataApi.compareCallCountFromBaseline(apiCallsBaseline, {
-                                getExchangeDataByIds: 1,
-                                createExchangeData: 0,
-                                modifyExchangeData: 0,
-                                getExchangeDataByParticipant: 0,
-                                getExchangeDataByDelegatorDelegate: 0,
-                            });
-                        }
-                    });
-                }
-                const createdBySelf1 = yield exchangeData.getOrCreateEncryptionDataTo(selfId);
-                const createdBySelf2 = yield exchangeData.getOrCreateEncryptionDataTo(delegateId);
-                const createdByOther1 = yield createDataFromRandomToSelf(); // Not automatically cached: created by someone else
-                const createdByOther2 = yield createDataFromRandomToSelf(); // Not automatically cached: created by someone else
-                // noinspection DuplicatedCode
-                yield verifyCached(createdBySelf1);
-                yield verifyCached(createdBySelf2);
-                yield verifyNotCachedThenCache(createdByOther1);
-                yield verifyCached(createdBySelf1);
-                yield verifyCached(createdBySelf2);
-                yield verifyCached(createdByOther1);
-                yield verifyNotCachedThenCache(createdByOther2);
-                yield verifyCached(createdBySelf2);
-                yield verifyCached(createdByOther1);
-                yield verifyCached(createdByOther2);
-                yield verifyNotCachedThenCache(createdBySelf1);
-                yield verifyCached(createdByOther1);
-                yield verifyCached(createdByOther2);
-                yield verifyCached(createdBySelf1);
-                yield verifyNotCachedThenCache(createdBySelf2);
-                yield verifyCached(createdByOther2);
-                // noinspection DuplicatedCode
-                yield verifyCached(createdBySelf1);
-                yield verifyCached(createdBySelf2);
-                yield verifyNotCachedThenCache(createdByOther1);
-                yield verifyCached(createdBySelf1);
-                yield verifyCached(createdBySelf2);
-                yield verifyCached(createdByOther1);
-                yield verifyNotCachedThenCache(createdByOther2);
-                yield verifyCached(createdBySelf2);
-                yield verifyCached(createdByOther1);
-                yield verifyCached(createdByOther2);
-            });
-        });
-        it('implementation with unlimited cache should preload all existing exchange data on creation', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                yield initialiseComponents(true);
-                const createdBySelf = yield exchangeData.getOrCreateEncryptionDataTo(selfId);
-                const createdByOther = yield createDataFromRandomToSelf();
-                const recreatedExchangeData = yield (0, ExchangeDataManager_1.initialiseExchangeDataManagerForCurrentDataOwner)(baseExchangeData, encryptionKeysManager, accessControlSecretUtils, new TestCryptoStrategies_1.TestCryptoStrategies(), dataOwnerApi, primitives, true);
-                const apiCallsAfterCreation = exchangeDataApi.callCount;
-                yield checkDataEqual((yield recreatedExchangeData.getDecryptionDataKeyByIds([createdBySelf.exchangeData.id], false))[createdBySelf.exchangeData.id], createdBySelf);
-                yield checkDataEqual((yield recreatedExchangeData.getDecryptionDataKeyByIds([createdByOther.exchangeData.id], false))[createdByOther.exchangeData.id], createdByOther);
-                exchangeDataApi.compareCallCountFromBaseline(apiCallsAfterCreation, {
-                    getExchangeDataByIds: 0,
-                    createExchangeData: 0,
-                    modifyExchangeData: 0,
-                    getExchangeDataByParticipant: 0,
-                    getExchangeDataByDelegatorDelegate: 0,
-                });
-            });
-        });
-    });
-});
-let env;
-(0, mocha_1.describe)('Exchange data manager - e2e', function () {
-    return __awaiter(this, void 0, void 0, function* () {
-        before(function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                this.timeout(600000);
-                const initializer = yield (0, test_utils_1.getEnvironmentInitializer)();
-                env = yield initializer.execute((0, types_1.getEnvVariables)());
-            });
-        });
-        it('give access back should not invalidate existing and valid exchange data', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                const hcp1Details = yield (0, test_utils_1.createNewHcpApi)(env);
-                const hcp2Details = yield (0, test_utils_1.createNewHcpApi)(env);
-                const ed1to2 = yield hcp1Details.api.cryptoApi.exchangeData.getOrCreateEncryptionDataTo(hcp2Details.credentials.dataOwnerId);
-                const ed2to1 = yield hcp2Details.api.cryptoApi.exchangeData.getOrCreateEncryptionDataTo(hcp1Details.credentials.dataOwnerId);
-                yield hcp1Details.api.cryptoApi.exchangeData.clearOrRepopulateCache();
-                yield hcp2Details.api.cryptoApi.exchangeData.clearOrRepopulateCache();
-                const newKeyPair = yield hcp1Details.api.cryptoApi.primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                const exportedPub = (0, icc_x_api_1.ua2hex)(yield hcp1Details.api.cryptoApi.primitives.RSA.exportKey(newKeyPair.publicKey, 'spki'));
-                const hcp2 = yield hcp2Details.api.healthcarePartyApi.getHealthcareParty(hcp2Details.credentials.dataOwnerId);
-                yield hcp2Details.api.healthcarePartyApi.modifyHealthcareParty(Object.assign(Object.assign({}, hcp2), { publicKeysForOaepWithSha256: [...hcp2.publicKeysForOaepWithSha256, exportedPub] }));
-                yield hcp1Details.api.cryptoApi.exchangeData.giveAccessBackTo(hcp2Details.credentials.dataOwnerId, exportedPub);
-                yield hcp1Details.api.cryptoApi.exchangeData.clearOrRepopulateCache();
-                yield hcp2Details.api.cryptoApi.exchangeData.clearOrRepopulateCache();
-                const updatedEd1to2 = yield hcp1Details.api.cryptoApi.exchangeData.getOrCreateEncryptionDataTo(hcp2Details.credentials.dataOwnerId);
-                const updatedEd2to1 = yield hcp2Details.api.cryptoApi.exchangeData.getOrCreateEncryptionDataTo(hcp1Details.credentials.dataOwnerId);
-                (0, chai_1.expect)(updatedEd1to2.exchangeData.id).to.equal(ed1to2.exchangeData.id);
-                (0, chai_1.expect)(Object.keys(updatedEd2to1.exchangeData.exchangeKey).length).to.be.greaterThan(Object.keys(ed2to1.exchangeData.exchangeKey).length);
-                (0, chai_1.expect)(Object.keys(updatedEd2to1.exchangeData.exchangeKey).length).to.equal(Object.keys(updatedEd2to1.exchangeData.accessControlSecret).length);
-                (0, chai_1.expect)(Object.keys(updatedEd2to1.exchangeData.exchangeKey).length).to.equal(Object.keys(updatedEd2to1.exchangeData.sharedSignatureKey).length);
-                (0, chai_1.expect)(updatedEd2to1.exchangeData.id).to.equal(ed2to1.exchangeData.id);
-                (0, chai_1.expect)(Object.keys(updatedEd1to2.exchangeData.exchangeKey).length).to.be.greaterThan(Object.keys(ed1to2.exchangeData.exchangeKey).length);
-                (0, chai_1.expect)(Object.keys(updatedEd1to2.exchangeData.exchangeKey).length).to.equal(Object.keys(updatedEd1to2.exchangeData.accessControlSecret).length);
-                (0, chai_1.expect)(Object.keys(updatedEd1to2.exchangeData.exchangeKey).length).to.equal(Object.keys(updatedEd1to2.exchangeData.sharedSignatureKey).length);
-            });
-        });
-        it('invalid exchange data should not be re-validated by give access back', function () {
-            return __awaiter(this, void 0, void 0, function* () {
-                const hcp1Details = yield (0, test_utils_1.createNewHcpApi)(env);
-                const hcp2Details = yield (0, test_utils_1.createNewHcpApi)(env);
-                const ed1to2 = yield hcp1Details.api.cryptoApi.exchangeData.getOrCreateEncryptionDataTo(hcp2Details.credentials.dataOwnerId);
-                const ed2to1 = yield hcp2Details.api.cryptoApi.exchangeData.getOrCreateEncryptionDataTo(hcp1Details.credentials.dataOwnerId);
-                yield hcp1Details.api.cryptoApi.exchangeData.clearOrRepopulateCache();
-                yield hcp2Details.api.cryptoApi.exchangeData.clearOrRepopulateCache();
-                const exchangeDataApi = new IccExchangeDataApi_1.IccExchangeDataApi(env.iCureUrl, {}, hcp1Details.api.authApi.authenticationProvider, fetch);
-                const extraKeyPair = yield hcp1Details.api.cryptoApi.primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                const extraKeyPairPub = (0, icc_x_api_1.ua2hex)(yield hcp1Details.api.cryptoApi.primitives.RSA.exportKey(extraKeyPair.publicKey, 'spki'));
-                const extraKeyPairFp = (0, utils_1.fingerprintV2)(extraKeyPairPub);
-                const fakeData = yield hcp1Details.api.cryptoApi.primitives.randomBytes(16);
-                function tamperWithData(data) {
-                    return __awaiter(this, void 0, void 0, function* () {
-                        yield exchangeDataApi.modifyExchangeData(Object.assign(Object.assign({}, data), { exchangeKey: Object.assign(Object.assign({}, data.exchangeKey), { [extraKeyPairFp]: (0, icc_x_api_1.ua2b64)(yield hcp1Details.api.cryptoApi.primitives.RSA.encrypt(extraKeyPair.publicKey, fakeData)) }), accessControlSecret: Object.assign(Object.assign({}, data.accessControlSecret), { [extraKeyPairFp]: (0, icc_x_api_1.ua2b64)(yield hcp1Details.api.cryptoApi.primitives.RSA.encrypt(extraKeyPair.publicKey, fakeData)) }), sharedSignatureKey: Object.assign(Object.assign({}, data.sharedSignatureKey), { [extraKeyPairFp]: (0, icc_x_api_1.ua2b64)(yield hcp1Details.api.cryptoApi.primitives.RSA.encrypt(extraKeyPair.publicKey, fakeData)) }) }));
-                    });
-                }
-                yield tamperWithData(ed1to2.exchangeData);
-                yield tamperWithData(ed2to1.exchangeData);
-                const newKeyPair = yield hcp1Details.api.cryptoApi.primitives.RSA.generateKeyPair(icc_x_api_1.ShaVersion.Sha256);
-                const exportedPub = (0, icc_x_api_1.ua2hex)(yield hcp1Details.api.cryptoApi.primitives.RSA.exportKey(newKeyPair.publicKey, 'spki'));
-                const hcp2 = yield hcp2Details.api.healthcarePartyApi.getHealthcareParty(hcp2Details.credentials.dataOwnerId);
-                yield hcp2Details.api.healthcarePartyApi.modifyHealthcareParty(Object.assign(Object.assign({}, hcp2), { publicKeysForOaepWithSha256: [...hcp2.publicKeysForOaepWithSha256, exportedPub, extraKeyPairPub] }));
-                yield hcp1Details.api.cryptoApi.exchangeData.giveAccessBackTo(hcp2Details.credentials.dataOwnerId, exportedPub);
-                yield hcp1Details.api.cryptoApi.exchangeData.clearOrRepopulateCache();
-                yield hcp2Details.api.cryptoApi.exchangeData.clearOrRepopulateCache();
-                const updatedEd1to2 = yield hcp1Details.api.cryptoApi.exchangeData.getOrCreateEncryptionDataTo(hcp2Details.credentials.dataOwnerId);
-                const updatedEd2to1 = yield hcp2Details.api.cryptoApi.exchangeData.getOrCreateEncryptionDataTo(hcp1Details.credentials.dataOwnerId);
-                (0, chai_1.expect)(updatedEd1to2.exchangeData.id).to.not.equal(ed1to2.exchangeData.id);
-                (0, chai_1.expect)(updatedEd2to1.exchangeData.id).to.not.equal(ed2to1.exchangeData.id);
-                const decData1to2 = (yield hcp1Details.api.cryptoApi.exchangeData.getDecryptionDataKeyByIds([ed1to2.exchangeData.id], true))[ed1to2.exchangeData.id];
-                (0, chai_1.expect)(decData1to2).to.not.be.undefined;
-                (0, chai_1.expect)(decData1to2.exchangeKey).to.not.be.undefined;
-                (0, chai_1.expect)(decData1to2.accessControlSecret).to.not.be.undefined;
-                const decData2to1 = (yield hcp2Details.api.cryptoApi.exchangeData.getDecryptionDataKeyByIds([ed2to1.exchangeData.id], true))[ed2to1.exchangeData.id];
-                (0, chai_1.expect)(decData2to1).to.not.be.undefined;
-                (0, chai_1.expect)(decData2to1.exchangeKey).to.not.be.undefined;
-                (0, chai_1.expect)(decData2to1.accessControlSecret).to.not.be.undefined;
-            });
-        });
-    });
-});
-//# sourceMappingURL=exchange-data-manager-test.js.map