@lifeready/core 1.0.2 → 1.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (225) hide show
  1. package/README.md +62 -62
  2. package/bundles/lifeready-core.umd.js +15445 -15445
  3. package/bundles/lifeready-core.umd.js.map +1 -1
  4. package/bundles/lifeready-core.umd.min.js.map +1 -1
  5. package/esm2015/lib/_common/ast.js +40 -40
  6. package/esm2015/lib/_common/deferred-promise.js +24 -24
  7. package/esm2015/lib/_common/exceptions.js +157 -157
  8. package/esm2015/lib/_common/queries.gql.js +190 -190
  9. package/esm2015/lib/_common/run-outside-angular.js +79 -79
  10. package/esm2015/lib/_common/types.js +1 -1
  11. package/esm2015/lib/_common/utils.js +44 -44
  12. package/esm2015/lib/api/contact-card.gql.js +79 -79
  13. package/esm2015/lib/api/contact-card.service.js +154 -154
  14. package/esm2015/lib/api/contact-card2.gql.js +60 -60
  15. package/esm2015/lib/api/contact-card2.service.js +103 -103
  16. package/esm2015/lib/api/file.service.js +74 -74
  17. package/esm2015/lib/api/item2.gql.js +110 -110
  18. package/esm2015/lib/api/item2.service.js +311 -311
  19. package/esm2015/lib/api/key-exchange.gql.js +188 -188
  20. package/esm2015/lib/api/key-exchange.service.js +442 -442
  21. package/esm2015/lib/api/key-exchange.types.js +18 -18
  22. package/esm2015/lib/api/key-exchange2.gql.js +171 -171
  23. package/esm2015/lib/api/key-exchange2.service.js +479 -479
  24. package/esm2015/lib/api/lock.gql.js +40 -40
  25. package/esm2015/lib/api/lock.service.js +64 -64
  26. package/esm2015/lib/api/lr-apollo.service.js +46 -46
  27. package/esm2015/lib/api/lr-graphql/index.js +6 -6
  28. package/esm2015/lib/api/lr-graphql/lr-graphql.service.js +155 -155
  29. package/esm2015/lib/api/lr-graphql/lr-merged-mutation.js +213 -213
  30. package/esm2015/lib/api/lr-graphql/lr-mutation-base.js +51 -51
  31. package/esm2015/lib/api/lr-graphql/lr-mutation.js +48 -48
  32. package/esm2015/lib/api/lr-graphql/lr.service.js +18 -18
  33. package/esm2015/lib/api/message.service.js +138 -138
  34. package/esm2015/lib/api/persist.service.js +181 -181
  35. package/esm2015/lib/api/query-processor/common-processors.service.js +93 -93
  36. package/esm2015/lib/api/query-processor/index.js +3 -3
  37. package/esm2015/lib/api/query-processor/query-processor.service.js +192 -192
  38. package/esm2015/lib/api/query-processor/tp-password-reset-processor.service.js +109 -109
  39. package/esm2015/lib/api/shared-contact-card.service.js +119 -119
  40. package/esm2015/lib/api/shared-contact-card2.gql.js +41 -41
  41. package/esm2015/lib/api/shared-contact-card2.service.js +117 -117
  42. package/esm2015/lib/api/time.service.js +146 -146
  43. package/esm2015/lib/api/types/graphql.types.js +7 -7
  44. package/esm2015/lib/api/types/index.js +3 -3
  45. package/esm2015/lib/api/types/lr-graphql.types.js +71 -71
  46. package/esm2015/lib/auth/auth.config.js +57 -57
  47. package/esm2015/lib/auth/auth.gql.js +48 -48
  48. package/esm2015/lib/auth/auth.types.js +27 -27
  49. package/esm2015/lib/auth/idle.service.js +168 -168
  50. package/esm2015/lib/auth/idle.types.js +7 -7
  51. package/esm2015/lib/auth/lbop.service.js +355 -355
  52. package/esm2015/lib/auth/life-ready-auth.service.js +500 -500
  53. package/esm2015/lib/auth/password.service.js +320 -320
  54. package/esm2015/lib/auth/register.service.js +172 -172
  55. package/esm2015/lib/auth/two-factor.service.js +74 -74
  56. package/esm2015/lib/category/category-meta.service.js +99 -99
  57. package/esm2015/lib/category/category.gql.js +406 -406
  58. package/esm2015/lib/category/category.service.js +390 -390
  59. package/esm2015/lib/category/category.types.js +29 -29
  60. package/esm2015/lib/cryptography/cryptography.types.js +11 -11
  61. package/esm2015/lib/cryptography/encryption.service.js +189 -189
  62. package/esm2015/lib/cryptography/key-factory.service.js +237 -237
  63. package/esm2015/lib/cryptography/key-graph.service.js +280 -280
  64. package/esm2015/lib/cryptography/key-meta.service.js +200 -200
  65. package/esm2015/lib/cryptography/key.service.js +124 -124
  66. package/esm2015/lib/cryptography/slip39.service.js +169 -169
  67. package/esm2015/lib/cryptography/web-crypto.service.js +29 -29
  68. package/esm2015/lib/life-ready.config.js +84 -84
  69. package/esm2015/lib/life-ready.module.js +74 -74
  70. package/esm2015/lib/plan/plan.gql.js +123 -123
  71. package/esm2015/lib/plan/plan.service.js +149 -149
  72. package/esm2015/lib/plan/plan.types.js +11 -11
  73. package/esm2015/lib/record/record-attachment.service.js +101 -101
  74. package/esm2015/lib/record/record.gql.js +179 -179
  75. package/esm2015/lib/record/record.service.js +206 -206
  76. package/esm2015/lib/record/record.types.js +15 -15
  77. package/esm2015/lib/record-type/record-type.service.js +75 -75
  78. package/esm2015/lib/record-type/record-type.types.js +28 -28
  79. package/esm2015/lib/scenario/approvals/scenario-approval.gql.js +105 -105
  80. package/esm2015/lib/scenario/approvals/scenario-approval.types.js +1 -1
  81. package/esm2015/lib/scenario/approvals/scenario-approver.service.js +300 -300
  82. package/esm2015/lib/scenario/claimants/scenario-claimant.gql.js +52 -52
  83. package/esm2015/lib/scenario/claimants/scenario-claimant.service.js +97 -97
  84. package/esm2015/lib/scenario/claimants/scenario-claimant.types.js +1 -1
  85. package/esm2015/lib/scenario/receivers/scenario-receiver.gql.js +150 -150
  86. package/esm2015/lib/scenario/receivers/scenario-receiver.service.js +229 -229
  87. package/esm2015/lib/scenario/receivers/scenario-receiver.types.js +1 -1
  88. package/esm2015/lib/scenario/scenario-setup.service.js +269 -269
  89. package/esm2015/lib/scenario/scenario.gql.js +368 -368
  90. package/esm2015/lib/scenario/scenario.service.js +611 -611
  91. package/esm2015/lib/scenario/scenario.types.js +64 -64
  92. package/esm2015/lib/search/search.gql.js +62 -62
  93. package/esm2015/lib/search/search.service.js +156 -156
  94. package/esm2015/lib/search/search.types.js +6 -6
  95. package/esm2015/lib/trusted-parties/tp-password-reset-request.service.js +112 -112
  96. package/esm2015/lib/trusted-parties/tp-password-reset-user.service.js +129 -129
  97. package/esm2015/lib/trusted-parties/tp-password-reset.constants.js +4 -4
  98. package/esm2015/lib/trusted-parties/tp-password-reset.gql.js +232 -232
  99. package/esm2015/lib/trusted-parties/tp-password-reset.service.js +299 -299
  100. package/esm2015/lib/trusted-parties/trusted-party.gql.js +148 -148
  101. package/esm2015/lib/trusted-parties/trusted-party.service.js +326 -326
  102. package/esm2015/lib/trusted-parties/trusted-party.types.js +41 -41
  103. package/esm2015/lib/trusted-parties/trusted-party2.gql.js +87 -87
  104. package/esm2015/lib/trusted-parties/trusted-party2.service.js +215 -215
  105. package/esm2015/lib/users/profile-details.service.js +214 -214
  106. package/esm2015/lib/users/profile.gql.js +97 -97
  107. package/esm2015/lib/users/profile.service.js +169 -169
  108. package/esm2015/lib/users/profile.types.js +34 -34
  109. package/esm2015/lib/users/user.gql.js +60 -60
  110. package/esm2015/lib/users/user.service.js +79 -79
  111. package/esm2015/lib/users/user.types.js +5 -5
  112. package/esm2015/lifeready-core.js +10 -10
  113. package/esm2015/public-api.js +81 -81
  114. package/fesm2015/lifeready-core.js +13088 -13088
  115. package/fesm2015/lifeready-core.js.map +1 -1
  116. package/lib/_common/ast.d.ts +11 -11
  117. package/lib/_common/deferred-promise.d.ts +12 -12
  118. package/lib/_common/exceptions.d.ts +109 -109
  119. package/lib/_common/queries.gql.d.ts +10 -10
  120. package/lib/_common/run-outside-angular.d.ts +14 -14
  121. package/lib/_common/types.d.ts +10 -10
  122. package/lib/_common/utils.d.ts +3 -3
  123. package/lib/api/contact-card.gql.d.ts +7 -7
  124. package/lib/api/contact-card.service.d.ts +52 -52
  125. package/lib/api/contact-card2.gql.d.ts +34 -34
  126. package/lib/api/contact-card2.service.d.ts +49 -49
  127. package/lib/api/file.service.d.ts +18 -18
  128. package/lib/api/item2.gql.d.ts +96 -96
  129. package/lib/api/item2.service.d.ts +177 -177
  130. package/lib/api/key-exchange.gql.d.ts +9 -9
  131. package/lib/api/key-exchange.service.d.ts +39 -39
  132. package/lib/api/key-exchange.types.d.ts +196 -196
  133. package/lib/api/key-exchange2.gql.d.ts +125 -125
  134. package/lib/api/key-exchange2.service.d.ts +187 -187
  135. package/lib/api/lock.gql.d.ts +27 -27
  136. package/lib/api/lock.service.d.ts +25 -25
  137. package/lib/api/lr-apollo.service.d.ts +15 -15
  138. package/lib/api/lr-graphql/index.d.ts +5 -5
  139. package/lib/api/lr-graphql/lr-graphql.service.d.ts +60 -60
  140. package/lib/api/lr-graphql/lr-merged-mutation.d.ts +27 -27
  141. package/lib/api/lr-graphql/lr-mutation-base.d.ts +28 -28
  142. package/lib/api/lr-graphql/lr-mutation.d.ts +8 -8
  143. package/lib/api/lr-graphql/lr.service.d.ts +9 -9
  144. package/lib/api/message.service.d.ts +58 -58
  145. package/lib/api/persist.service.d.ts +31 -31
  146. package/lib/api/query-processor/common-processors.service.d.ts +36 -36
  147. package/lib/api/query-processor/index.d.ts +2 -2
  148. package/lib/api/query-processor/query-processor.service.d.ts +18 -18
  149. package/lib/api/query-processor/tp-password-reset-processor.service.d.ts +15 -15
  150. package/lib/api/shared-contact-card.service.d.ts +33 -33
  151. package/lib/api/shared-contact-card2.gql.d.ts +36 -36
  152. package/lib/api/shared-contact-card2.service.d.ts +45 -45
  153. package/lib/api/time.service.d.ts +16 -16
  154. package/lib/api/types/graphql.types.d.ts +29 -29
  155. package/lib/api/types/index.d.ts +2 -2
  156. package/lib/api/types/lr-graphql.types.d.ts +385 -385
  157. package/lib/auth/auth.config.d.ts +5 -5
  158. package/lib/auth/auth.gql.d.ts +15 -15
  159. package/lib/auth/auth.types.d.ts +66 -66
  160. package/lib/auth/idle.service.d.ts +40 -40
  161. package/lib/auth/idle.types.d.ts +10 -10
  162. package/lib/auth/lbop.service.d.ts +91 -91
  163. package/lib/auth/life-ready-auth.service.d.ts +59 -59
  164. package/lib/auth/password.service.d.ts +78 -78
  165. package/lib/auth/register.service.d.ts +25 -25
  166. package/lib/auth/two-factor.service.d.ts +15 -15
  167. package/lib/category/category-meta.service.d.ts +23 -23
  168. package/lib/category/category.gql.d.ts +45 -45
  169. package/lib/category/category.service.d.ts +67 -67
  170. package/lib/category/category.types.d.ts +79 -79
  171. package/lib/cryptography/cryptography.types.d.ts +83 -83
  172. package/lib/cryptography/encryption.service.d.ts +41 -41
  173. package/lib/cryptography/key-factory.service.d.ts +38 -38
  174. package/lib/cryptography/key-graph.service.d.ts +33 -33
  175. package/lib/cryptography/key-meta.service.d.ts +44 -44
  176. package/lib/cryptography/key.service.d.ts +36 -36
  177. package/lib/cryptography/slip39.service.d.ts +43 -43
  178. package/lib/cryptography/web-crypto.service.d.ts +5 -5
  179. package/lib/life-ready.config.d.ts +14 -14
  180. package/lib/life-ready.module.d.ts +5 -5
  181. package/lib/plan/plan.gql.d.ts +11 -11
  182. package/lib/plan/plan.service.d.ts +33 -33
  183. package/lib/plan/plan.types.d.ts +31 -31
  184. package/lib/record/record-attachment.service.d.ts +16 -16
  185. package/lib/record/record.gql.d.ts +14 -14
  186. package/lib/record/record.service.d.ts +25 -25
  187. package/lib/record/record.types.d.ts +57 -57
  188. package/lib/record-type/record-type.service.d.ts +11 -11
  189. package/lib/record-type/record-type.types.d.ts +50 -50
  190. package/lib/scenario/approvals/scenario-approval.gql.d.ts +7 -7
  191. package/lib/scenario/approvals/scenario-approval.types.d.ts +63 -63
  192. package/lib/scenario/approvals/scenario-approver.service.d.ts +32 -32
  193. package/lib/scenario/claimants/scenario-claimant.gql.d.ts +5 -5
  194. package/lib/scenario/claimants/scenario-claimant.service.d.ts +17 -17
  195. package/lib/scenario/claimants/scenario-claimant.types.d.ts +18 -18
  196. package/lib/scenario/receivers/scenario-receiver.gql.d.ts +8 -8
  197. package/lib/scenario/receivers/scenario-receiver.service.d.ts +30 -30
  198. package/lib/scenario/receivers/scenario-receiver.types.d.ts +54 -54
  199. package/lib/scenario/scenario-setup.service.d.ts +22 -22
  200. package/lib/scenario/scenario.gql.d.ts +34 -34
  201. package/lib/scenario/scenario.service.d.ts +58 -58
  202. package/lib/scenario/scenario.types.d.ts +217 -217
  203. package/lib/search/search.gql.d.ts +1 -1
  204. package/lib/search/search.service.d.ts +25 -25
  205. package/lib/search/search.types.d.ts +20 -20
  206. package/lib/trusted-parties/tp-password-reset-request.service.d.ts +20 -20
  207. package/lib/trusted-parties/tp-password-reset-user.service.d.ts +35 -35
  208. package/lib/trusted-parties/tp-password-reset.constants.d.ts +3 -3
  209. package/lib/trusted-parties/tp-password-reset.gql.d.ts +218 -218
  210. package/lib/trusted-parties/tp-password-reset.service.d.ts +130 -130
  211. package/lib/trusted-parties/trusted-party.gql.d.ts +9 -9
  212. package/lib/trusted-parties/trusted-party.service.d.ts +44 -44
  213. package/lib/trusted-parties/trusted-party.types.d.ts +102 -102
  214. package/lib/trusted-parties/trusted-party2.gql.d.ts +79 -79
  215. package/lib/trusted-parties/trusted-party2.service.d.ts +114 -114
  216. package/lib/users/profile-details.service.d.ts +21 -21
  217. package/lib/users/profile.gql.d.ts +11 -11
  218. package/lib/users/profile.service.d.ts +35 -35
  219. package/lib/users/profile.types.d.ts +96 -96
  220. package/lib/users/user.gql.d.ts +9 -9
  221. package/lib/users/user.service.d.ts +12 -12
  222. package/lib/users/user.types.d.ts +23 -23
  223. package/lifeready-core.d.ts +9 -9
  224. package/package.json +1 -1
  225. package/public-api.d.ts +77 -77
@@ -1,300 +1,300 @@
1
- import { __awaiter, __rest } from "tslib";
2
- import { Injectable } from '@angular/core';
3
- import { LrApolloService } from '../../api/lr-apollo.service';
4
- import { EncryptionService } from '../../cryptography/encryption.service';
5
- import { KeyFactoryService } from '../../cryptography/key-factory.service';
6
- import { KeyGraphService } from '../../cryptography/key-graph.service';
7
- import { KeyMetaService } from '../../cryptography/key-meta.service';
8
- import * as slip from '../../cryptography/slip39.service';
9
- import { TrustedPartyService } from '../../trusted-parties/trusted-party.service';
10
- import { CreateScenarioApproverAssemblyMutation, DeleteScenarioApproverAssemblyMutation, GetScenarioApproverQuery, UpdateScenarioApproverAssemblyMutation, UpdateScenarioApproverMutation, } from './scenario-approval.gql';
11
- import * as i0 from "@angular/core";
12
- import * as i1 from "../../api/lr-apollo.service";
13
- import * as i2 from "../../cryptography/key-factory.service";
14
- import * as i3 from "../../cryptography/key-meta.service";
15
- import * as i4 from "../../cryptography/key-graph.service";
16
- import * as i5 from "../../cryptography/slip39.service";
17
- import * as i6 from "../../cryptography/encryption.service";
18
- import * as i7 from "../../trusted-parties/trusted-party.service";
19
- export class ScenarioApproverService {
20
- constructor(lrApollo, keyFactory, keyMetaService, keyGraph, slip39Service, encryptionService, trustedPartyService) {
21
- this.lrApollo = lrApollo;
22
- this.keyFactory = keyFactory;
23
- this.keyMetaService = keyMetaService;
24
- this.keyGraph = keyGraph;
25
- this.slip39Service = slip39Service;
26
- this.encryptionService = encryptionService;
27
- this.trustedPartyService = trustedPartyService;
28
- }
29
- getApprover(approverId) {
30
- return __awaiter(this, void 0, void 0, function* () {
31
- const { scenarioApprover } = yield this.lrApollo.query({
32
- query: GetScenarioApproverQuery,
33
- variables: {
34
- id: approverId,
35
- },
36
- });
37
- return this.mapApprover(scenarioApprover);
38
- });
39
- }
40
- mapApproverGroup(group) {
41
- return __awaiter(this, void 0, void 0, function* () {
42
- const { name } = yield this.keyGraph.decryptFromString(group.assemblyKey.id, group.subAssemblyCipherData);
43
- return {
44
- id: group.id,
45
- keyId: group.assemblyKey.id,
46
- name,
47
- quorum: group.quorum,
48
- singleReject: group.singleReject,
49
- approvers: yield Promise.all(group.approvers.edges.map((x) => this.mapApprover(x.node))),
50
- };
51
- });
52
- }
53
- mapApprover(approver) {
54
- return __awaiter(this, void 0, void 0, function* () {
55
- const { message } = yield this.keyGraph.decryptFromString(approver.sharedKey.id, approver.sharedCipherData);
56
- return {
57
- id: approver.id,
58
- keyId: approver.sharedKey.id,
59
- trustedParty: yield this.trustedPartyService.mapTrustedParty(approver.tp),
60
- message,
61
- };
62
- });
63
- }
64
- updateApprover(approver) {
65
- return __awaiter(this, void 0, void 0, function* () {
66
- const sharedCipherData = yield this.keyGraph.encryptToString(approver.keyId, approver.plainSharedCipherData);
67
- yield this.lrApollo.mutate({
68
- mutation: UpdateScenarioApproverMutation,
69
- variables: {
70
- input: {
71
- approverId: approver.approverId,
72
- sharedKeyId: approver.keyId,
73
- sharedCipherData,
74
- sharedCipherApprovalData: '',
75
- },
76
- },
77
- });
78
- });
79
- }
80
- createScenarioApproverAssembly(input) {
81
- return __awaiter(this, void 0, void 0, function* () {
82
- const assemblyKey = yield this.keyFactory.createKey();
83
- const subjectKeyWrappedAssemblyKey = yield this.keyGraph.encryptToString(input.keyId, assemblyKey.toJSON(true));
84
- const assemblyCipherData = input.plainAssemblyCipherData
85
- ? yield this.keyGraph.encryptToString(assemblyKey, input.plainAssemblyCipherData)
86
- : '';
87
- const { createScenarioApproverAssembly } = yield this.lrApollo.mutate({
88
- mutation: CreateScenarioApproverAssemblyMutation,
89
- variables: {
90
- input: {
91
- scenarioId: input.scenarioId,
92
- singleReject: input.singleReject,
93
- quorum: input.quorum,
94
- subjectKeyId: input.keyId,
95
- subjectKeyWrappedAssemblyKey,
96
- assemblyCipherData,
97
- createSubAssemblies: (yield this.mapApprovalGroups(input.approvalGroups, input.quorum, assemblyKey)).map((x) => {
98
- const { updateApprovers, deleteApprovers } = x, subAssembly = __rest(x, ["updateApprovers", "deleteApprovers"]);
99
- return subAssembly;
100
- }),
101
- updateReceivers: yield this.rewrapReceivers(assemblyKey, input.event, input.receivers),
102
- },
103
- },
104
- });
105
- return createScenarioApproverAssembly.scenario.approverAssembly.assemblyKey
106
- .id;
107
- });
108
- }
109
- updateScenarioApproverAssembly(input) {
110
- return __awaiter(this, void 0, void 0, function* () {
111
- const assemblyKey = yield this.keyGraph.getKey(input.assemblyKeyId);
112
- const assemblyCipherData = input.plainAssemblyCipherData
113
- ? yield this.keyGraph.encryptToString(assemblyKey.jwk, input.plainAssemblyCipherData)
114
- : '';
115
- const approvalGroups = yield this.mapApprovalGroups(input.approvalGroups, input.quorum, assemblyKey.jwk);
116
- yield this.lrApollo.mutate({
117
- mutation: UpdateScenarioApproverAssemblyMutation,
118
- variables: {
119
- input: {
120
- scenarioId: input.scenarioId,
121
- singleReject: input.singleReject,
122
- quorum: input.quorum,
123
- assemblyKeyId: assemblyKey.id,
124
- assemblyCipherData,
125
- createSubAssemblies: approvalGroups
126
- .filter((x) => !x.subAssemblyId)
127
- .map((x) => {
128
- const { updateApprovers, deleteApprovers } = x, subAssembly = __rest(x, ["updateApprovers", "deleteApprovers"]);
129
- return subAssembly;
130
- }),
131
- updateSubAssemblies: approvalGroups.filter((x) => x.subAssemblyId),
132
- deleteSubAssemblies: input.deletedGroupIds,
133
- },
134
- },
135
- });
136
- });
137
- }
138
- deleteScenarioApproverAssembly(scenarioId, event, receivers) {
139
- return __awaiter(this, void 0, void 0, function* () {
140
- yield this.lrApollo.mutate({
141
- mutation: DeleteScenarioApproverAssemblyMutation,
142
- variables: {
143
- input: {
144
- scenarioId,
145
- updateReceivers: yield this.rewrapReceivers(null, event, receivers),
146
- },
147
- },
148
- });
149
- });
150
- }
151
- rewrapReceivers(assemblyKey, event, receivers) {
152
- return __awaiter(this, void 0, void 0, function* () {
153
- if (!receivers || !receivers.length) {
154
- return [];
155
- }
156
- return yield Promise.all(receivers.map((receiver) => __awaiter(this, void 0, void 0, function* () {
157
- const sharedKey = yield this.keyGraph.getKey(receiver.keyId);
158
- const prepareReceiverItem = (item, itemKeyId) => __awaiter(this, void 0, void 0, function* () {
159
- const itemKey = yield this.keyGraph.getKey(itemKeyId);
160
- let wrappedItemKey = yield this.keyGraph.encryptToString(sharedKey.jwk, itemKey.jwk.toJSON(true));
161
- if (assemblyKey) {
162
- wrappedItemKey = yield this.keyGraph.encryptToString(assemblyKey, wrappedItemKey);
163
- }
164
- return {
165
- accessRole: item.accessLevel,
166
- sharedKeyId: sharedKey.id,
167
- sharedCipherData: '',
168
- wrappedItemKey,
169
- };
170
- });
171
- // For each receiver-directory
172
- const receiverDirectories = yield Promise.all([
173
- ...receiver.categories.map((x) => __awaiter(this, void 0, void 0, function* () {
174
- return (Object.assign(Object.assign({}, (yield prepareReceiverItem(x, x.category.keyId))), { receiverDirectoryId: x.id }));
175
- })),
176
- ...receiver.records.map((x) => __awaiter(this, void 0, void 0, function* () {
177
- return (Object.assign(Object.assign({}, (yield prepareReceiverItem(x, x.record.keyId))), { receiverDirectoryId: x.id }));
178
- })),
179
- ]);
180
- return {
181
- receiverId: receiver.id,
182
- sharedKeyId: receiver.keyId,
183
- receiverDirectories,
184
- receiverFiles: [],
185
- sharedCipherData: yield this.keyGraph.encryptToString(sharedKey.jwk, {
186
- event,
187
- message: receiver.message,
188
- }),
189
- };
190
- })));
191
- });
192
- }
193
- mapApprovalGroups(approvalGroups, quorum, assemblyKey) {
194
- return __awaiter(this, void 0, void 0, function* () {
195
- const slipAssembly = yield this.createSlipAssembly(quorum, approvalGroups, assemblyKey.toJSON(true).k);
196
- return yield Promise.all(approvalGroups.map((x, index) => this.mapApprovalGroup(x, slipAssembly.subAssemblies[index], assemblyKey)));
197
- });
198
- }
199
- mapApprovalGroup(approvalGroup, subAssembly, assemblyKey) {
200
- return __awaiter(this, void 0, void 0, function* () {
201
- const approvers = yield this.mapApprovers(approvalGroup.approvers, approvalGroup.quorum, subAssembly, assemblyKey);
202
- return {
203
- subAssemblyId: approvalGroup.subAssemblyId,
204
- singleReject: approvalGroup.singleReject,
205
- quorum: approvalGroup.quorum,
206
- subAssemblyCipherData: yield this.keyGraph.encryptToString(assemblyKey, approvalGroup.plainSubAssemblyCipherData),
207
- createApprovers: approvers.filter((x) => !x.approverId),
208
- updateApprovers: approvers.filter((x) => x.approverId),
209
- deleteApprovers: approvalGroup.deletedApproverIds || [],
210
- };
211
- });
212
- }
213
- mapApprovers(approvers, quorum, subAssembly, assemblyKey) {
214
- return __awaiter(this, void 0, void 0, function* () {
215
- const _a = assemblyKey.toJSON(true), { k: rawAssemblyKey } = _a, assemblyKeyParams = __rest(_a, ["k"]);
216
- let shareIdx = 0;
217
- const nextPartialAssemblyKey = (sharedKeyJwk) => __awaiter(this, void 0, void 0, function* () {
218
- const share = subAssembly.shares[shareIdx];
219
- // If quorum is 1, then using the same share for every member.
220
- if (quorum !== 1) {
221
- ++shareIdx;
222
- }
223
- const partialAssemblyKey = {
224
- slip39: {
225
- share,
226
- subAssembly: {
227
- quorum,
228
- size: approvers.length,
229
- },
230
- },
231
- assemblyKeyParams,
232
- };
233
- return this.keyGraph.encryptToString(sharedKeyJwk, partialAssemblyKey);
234
- });
235
- return yield Promise.all(approvers.map((x) => __awaiter(this, void 0, void 0, function* () {
236
- if (x.approverId) {
237
- const sharedKey = yield this.keyGraph.getKey(x.keyId);
238
- const sharedCipherData = yield this.keyGraph.encryptToString(x.keyId, x.plainSharedCipherData);
239
- const sharedCipherApprovalData = yield this.keyGraph.encryptToString(x.keyId, x.approvalData);
240
- return {
241
- approverId: x.approverId,
242
- sharedKeyId: x.keyId,
243
- sharedCipherData: sharedCipherData || '',
244
- sharedCipherApprovalData: sharedCipherApprovalData || '',
245
- sharedCipherPartialAssemblyKey: yield nextPartialAssemblyKey(sharedKey.jwk),
246
- };
247
- }
248
- else {
249
- const wrappedContent = yield this.keyMetaService.wrapContentWithKey(x.plainSharedCipherData, x.trustedPartySharedKeyId);
250
- return {
251
- tpId: x.trustedPartyId,
252
- tpSharedKeyId: x.trustedPartySharedKeyId,
253
- tpSharedKeyWrappedSharedKey: wrappedContent.rootKey.wrappedKey,
254
- sharedCipherData: wrappedContent.cipherMeta,
255
- sharedCipherApprovalData: '',
256
- sharedCipherPartialAssemblyKey: yield nextPartialAssemblyKey(wrappedContent.key),
257
- };
258
- }
259
- })));
260
- });
261
- }
262
- // Split assembly key between all existing approvers.
263
- createSlipAssembly(quorum, approvalGroups, rawAssemblyKey) {
264
- return __awaiter(this, void 0, void 0, function* () {
265
- const slipAssembly = new slip.Assembly(quorum);
266
- approvalGroups.forEach((x, index) => {
267
- let approverCount = x.approvers.length;
268
- // slip39 restricts quorum == 1 to have only 1 member. So we just share the same
269
- // partial key for all sub assembly members.
270
- if (x.quorum === 1) {
271
- approverCount = 1;
272
- }
273
- slipAssembly.addSubAssembly(new slip.SubAssembly(index, x.quorum, approverCount));
274
- });
275
- // Is there enough sub assemblies to meet quorum
276
- if (slipAssembly.subAssemblies.length < quorum) {
277
- return null;
278
- }
279
- yield this.slip39Service.generateShares(rawAssemblyKey, ScenarioApproverService.SLIP39_PASSPHRASE, slipAssembly);
280
- return slipAssembly;
281
- });
282
- }
283
- }
284
- ScenarioApproverService.SLIP39_PASSPHRASE = 'lifeready';
285
- ScenarioApproverService.ɵprov = i0.ɵɵdefineInjectable({ factory: function ScenarioApproverService_Factory() { return new ScenarioApproverService(i0.ɵɵinject(i1.LrApolloService), i0.ɵɵinject(i2.KeyFactoryService), i0.ɵɵinject(i3.KeyMetaService), i0.ɵɵinject(i4.KeyGraphService), i0.ɵɵinject(i5.Slip39Service), i0.ɵɵinject(i6.EncryptionService), i0.ɵɵinject(i7.TrustedPartyService)); }, token: ScenarioApproverService, providedIn: "root" });
286
- ScenarioApproverService.decorators = [
287
- { type: Injectable, args: [{
288
- providedIn: 'root',
289
- },] }
290
- ];
291
- ScenarioApproverService.ctorParameters = () => [
292
- { type: LrApolloService },
293
- { type: KeyFactoryService },
294
- { type: KeyMetaService },
295
- { type: KeyGraphService },
296
- { type: slip.Slip39Service },
297
- { type: EncryptionService },
298
- { type: TrustedPartyService }
299
- ];
300
- //# sourceMappingURL=data:application/json;base64,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
1
+ import { __awaiter, __rest } from "tslib";
2
+ import { Injectable } from '@angular/core';
3
+ import { LrApolloService } from '../../api/lr-apollo.service';
4
+ import { EncryptionService } from '../../cryptography/encryption.service';
5
+ import { KeyFactoryService } from '../../cryptography/key-factory.service';
6
+ import { KeyGraphService } from '../../cryptography/key-graph.service';
7
+ import { KeyMetaService } from '../../cryptography/key-meta.service';
8
+ import * as slip from '../../cryptography/slip39.service';
9
+ import { TrustedPartyService } from '../../trusted-parties/trusted-party.service';
10
+ import { CreateScenarioApproverAssemblyMutation, DeleteScenarioApproverAssemblyMutation, GetScenarioApproverQuery, UpdateScenarioApproverAssemblyMutation, UpdateScenarioApproverMutation, } from './scenario-approval.gql';
11
+ import * as i0 from "@angular/core";
12
+ import * as i1 from "../../api/lr-apollo.service";
13
+ import * as i2 from "../../cryptography/key-factory.service";
14
+ import * as i3 from "../../cryptography/key-meta.service";
15
+ import * as i4 from "../../cryptography/key-graph.service";
16
+ import * as i5 from "../../cryptography/slip39.service";
17
+ import * as i6 from "../../cryptography/encryption.service";
18
+ import * as i7 from "../../trusted-parties/trusted-party.service";
19
+ export class ScenarioApproverService {
20
+ constructor(lrApollo, keyFactory, keyMetaService, keyGraph, slip39Service, encryptionService, trustedPartyService) {
21
+ this.lrApollo = lrApollo;
22
+ this.keyFactory = keyFactory;
23
+ this.keyMetaService = keyMetaService;
24
+ this.keyGraph = keyGraph;
25
+ this.slip39Service = slip39Service;
26
+ this.encryptionService = encryptionService;
27
+ this.trustedPartyService = trustedPartyService;
28
+ }
29
+ getApprover(approverId) {
30
+ return __awaiter(this, void 0, void 0, function* () {
31
+ const { scenarioApprover } = yield this.lrApollo.query({
32
+ query: GetScenarioApproverQuery,
33
+ variables: {
34
+ id: approverId,
35
+ },
36
+ });
37
+ return this.mapApprover(scenarioApprover);
38
+ });
39
+ }
40
+ mapApproverGroup(group) {
41
+ return __awaiter(this, void 0, void 0, function* () {
42
+ const { name } = yield this.keyGraph.decryptFromString(group.assemblyKey.id, group.subAssemblyCipherData);
43
+ return {
44
+ id: group.id,
45
+ keyId: group.assemblyKey.id,
46
+ name,
47
+ quorum: group.quorum,
48
+ singleReject: group.singleReject,
49
+ approvers: yield Promise.all(group.approvers.edges.map((x) => this.mapApprover(x.node))),
50
+ };
51
+ });
52
+ }
53
+ mapApprover(approver) {
54
+ return __awaiter(this, void 0, void 0, function* () {
55
+ const { message } = yield this.keyGraph.decryptFromString(approver.sharedKey.id, approver.sharedCipherData);
56
+ return {
57
+ id: approver.id,
58
+ keyId: approver.sharedKey.id,
59
+ trustedParty: yield this.trustedPartyService.mapTrustedParty(approver.tp),
60
+ message,
61
+ };
62
+ });
63
+ }
64
+ updateApprover(approver) {
65
+ return __awaiter(this, void 0, void 0, function* () {
66
+ const sharedCipherData = yield this.keyGraph.encryptToString(approver.keyId, approver.plainSharedCipherData);
67
+ yield this.lrApollo.mutate({
68
+ mutation: UpdateScenarioApproverMutation,
69
+ variables: {
70
+ input: {
71
+ approverId: approver.approverId,
72
+ sharedKeyId: approver.keyId,
73
+ sharedCipherData,
74
+ sharedCipherApprovalData: '',
75
+ },
76
+ },
77
+ });
78
+ });
79
+ }
80
+ createScenarioApproverAssembly(input) {
81
+ return __awaiter(this, void 0, void 0, function* () {
82
+ const assemblyKey = yield this.keyFactory.createKey();
83
+ const subjectKeyWrappedAssemblyKey = yield this.keyGraph.encryptToString(input.keyId, assemblyKey.toJSON(true));
84
+ const assemblyCipherData = input.plainAssemblyCipherData
85
+ ? yield this.keyGraph.encryptToString(assemblyKey, input.plainAssemblyCipherData)
86
+ : '';
87
+ const { createScenarioApproverAssembly } = yield this.lrApollo.mutate({
88
+ mutation: CreateScenarioApproverAssemblyMutation,
89
+ variables: {
90
+ input: {
91
+ scenarioId: input.scenarioId,
92
+ singleReject: input.singleReject,
93
+ quorum: input.quorum,
94
+ subjectKeyId: input.keyId,
95
+ subjectKeyWrappedAssemblyKey,
96
+ assemblyCipherData,
97
+ createSubAssemblies: (yield this.mapApprovalGroups(input.approvalGroups, input.quorum, assemblyKey)).map((x) => {
98
+ const { updateApprovers, deleteApprovers } = x, subAssembly = __rest(x, ["updateApprovers", "deleteApprovers"]);
99
+ return subAssembly;
100
+ }),
101
+ updateReceivers: yield this.rewrapReceivers(assemblyKey, input.event, input.receivers),
102
+ },
103
+ },
104
+ });
105
+ return createScenarioApproverAssembly.scenario.approverAssembly.assemblyKey
106
+ .id;
107
+ });
108
+ }
109
+ updateScenarioApproverAssembly(input) {
110
+ return __awaiter(this, void 0, void 0, function* () {
111
+ const assemblyKey = yield this.keyGraph.getKey(input.assemblyKeyId);
112
+ const assemblyCipherData = input.plainAssemblyCipherData
113
+ ? yield this.keyGraph.encryptToString(assemblyKey.jwk, input.plainAssemblyCipherData)
114
+ : '';
115
+ const approvalGroups = yield this.mapApprovalGroups(input.approvalGroups, input.quorum, assemblyKey.jwk);
116
+ yield this.lrApollo.mutate({
117
+ mutation: UpdateScenarioApproverAssemblyMutation,
118
+ variables: {
119
+ input: {
120
+ scenarioId: input.scenarioId,
121
+ singleReject: input.singleReject,
122
+ quorum: input.quorum,
123
+ assemblyKeyId: assemblyKey.id,
124
+ assemblyCipherData,
125
+ createSubAssemblies: approvalGroups
126
+ .filter((x) => !x.subAssemblyId)
127
+ .map((x) => {
128
+ const { updateApprovers, deleteApprovers } = x, subAssembly = __rest(x, ["updateApprovers", "deleteApprovers"]);
129
+ return subAssembly;
130
+ }),
131
+ updateSubAssemblies: approvalGroups.filter((x) => x.subAssemblyId),
132
+ deleteSubAssemblies: input.deletedGroupIds,
133
+ },
134
+ },
135
+ });
136
+ });
137
+ }
138
+ deleteScenarioApproverAssembly(scenarioId, event, receivers) {
139
+ return __awaiter(this, void 0, void 0, function* () {
140
+ yield this.lrApollo.mutate({
141
+ mutation: DeleteScenarioApproverAssemblyMutation,
142
+ variables: {
143
+ input: {
144
+ scenarioId,
145
+ updateReceivers: yield this.rewrapReceivers(null, event, receivers),
146
+ },
147
+ },
148
+ });
149
+ });
150
+ }
151
+ rewrapReceivers(assemblyKey, event, receivers) {
152
+ return __awaiter(this, void 0, void 0, function* () {
153
+ if (!receivers || !receivers.length) {
154
+ return [];
155
+ }
156
+ return yield Promise.all(receivers.map((receiver) => __awaiter(this, void 0, void 0, function* () {
157
+ const sharedKey = yield this.keyGraph.getKey(receiver.keyId);
158
+ const prepareReceiverItem = (item, itemKeyId) => __awaiter(this, void 0, void 0, function* () {
159
+ const itemKey = yield this.keyGraph.getKey(itemKeyId);
160
+ let wrappedItemKey = yield this.keyGraph.encryptToString(sharedKey.jwk, itemKey.jwk.toJSON(true));
161
+ if (assemblyKey) {
162
+ wrappedItemKey = yield this.keyGraph.encryptToString(assemblyKey, wrappedItemKey);
163
+ }
164
+ return {
165
+ accessRole: item.accessLevel,
166
+ sharedKeyId: sharedKey.id,
167
+ sharedCipherData: '',
168
+ wrappedItemKey,
169
+ };
170
+ });
171
+ // For each receiver-directory
172
+ const receiverDirectories = yield Promise.all([
173
+ ...receiver.categories.map((x) => __awaiter(this, void 0, void 0, function* () {
174
+ return (Object.assign(Object.assign({}, (yield prepareReceiverItem(x, x.category.keyId))), { receiverDirectoryId: x.id }));
175
+ })),
176
+ ...receiver.records.map((x) => __awaiter(this, void 0, void 0, function* () {
177
+ return (Object.assign(Object.assign({}, (yield prepareReceiverItem(x, x.record.keyId))), { receiverDirectoryId: x.id }));
178
+ })),
179
+ ]);
180
+ return {
181
+ receiverId: receiver.id,
182
+ sharedKeyId: receiver.keyId,
183
+ receiverDirectories,
184
+ receiverFiles: [],
185
+ sharedCipherData: yield this.keyGraph.encryptToString(sharedKey.jwk, {
186
+ event,
187
+ message: receiver.message,
188
+ }),
189
+ };
190
+ })));
191
+ });
192
+ }
193
+ mapApprovalGroups(approvalGroups, quorum, assemblyKey) {
194
+ return __awaiter(this, void 0, void 0, function* () {
195
+ const slipAssembly = yield this.createSlipAssembly(quorum, approvalGroups, assemblyKey.toJSON(true).k);
196
+ return yield Promise.all(approvalGroups.map((x, index) => this.mapApprovalGroup(x, slipAssembly.subAssemblies[index], assemblyKey)));
197
+ });
198
+ }
199
+ mapApprovalGroup(approvalGroup, subAssembly, assemblyKey) {
200
+ return __awaiter(this, void 0, void 0, function* () {
201
+ const approvers = yield this.mapApprovers(approvalGroup.approvers, approvalGroup.quorum, subAssembly, assemblyKey);
202
+ return {
203
+ subAssemblyId: approvalGroup.subAssemblyId,
204
+ singleReject: approvalGroup.singleReject,
205
+ quorum: approvalGroup.quorum,
206
+ subAssemblyCipherData: yield this.keyGraph.encryptToString(assemblyKey, approvalGroup.plainSubAssemblyCipherData),
207
+ createApprovers: approvers.filter((x) => !x.approverId),
208
+ updateApprovers: approvers.filter((x) => x.approverId),
209
+ deleteApprovers: approvalGroup.deletedApproverIds || [],
210
+ };
211
+ });
212
+ }
213
+ mapApprovers(approvers, quorum, subAssembly, assemblyKey) {
214
+ return __awaiter(this, void 0, void 0, function* () {
215
+ const _a = assemblyKey.toJSON(true), { k: rawAssemblyKey } = _a, assemblyKeyParams = __rest(_a, ["k"]);
216
+ let shareIdx = 0;
217
+ const nextPartialAssemblyKey = (sharedKeyJwk) => __awaiter(this, void 0, void 0, function* () {
218
+ const share = subAssembly.shares[shareIdx];
219
+ // If quorum is 1, then using the same share for every member.
220
+ if (quorum !== 1) {
221
+ ++shareIdx;
222
+ }
223
+ const partialAssemblyKey = {
224
+ slip39: {
225
+ share,
226
+ subAssembly: {
227
+ quorum,
228
+ size: approvers.length,
229
+ },
230
+ },
231
+ assemblyKeyParams,
232
+ };
233
+ return this.keyGraph.encryptToString(sharedKeyJwk, partialAssemblyKey);
234
+ });
235
+ return yield Promise.all(approvers.map((x) => __awaiter(this, void 0, void 0, function* () {
236
+ if (x.approverId) {
237
+ const sharedKey = yield this.keyGraph.getKey(x.keyId);
238
+ const sharedCipherData = yield this.keyGraph.encryptToString(x.keyId, x.plainSharedCipherData);
239
+ const sharedCipherApprovalData = yield this.keyGraph.encryptToString(x.keyId, x.approvalData);
240
+ return {
241
+ approverId: x.approverId,
242
+ sharedKeyId: x.keyId,
243
+ sharedCipherData: sharedCipherData || '',
244
+ sharedCipherApprovalData: sharedCipherApprovalData || '',
245
+ sharedCipherPartialAssemblyKey: yield nextPartialAssemblyKey(sharedKey.jwk),
246
+ };
247
+ }
248
+ else {
249
+ const wrappedContent = yield this.keyMetaService.wrapContentWithKey(x.plainSharedCipherData, x.trustedPartySharedKeyId);
250
+ return {
251
+ tpId: x.trustedPartyId,
252
+ tpSharedKeyId: x.trustedPartySharedKeyId,
253
+ tpSharedKeyWrappedSharedKey: wrappedContent.rootKey.wrappedKey,
254
+ sharedCipherData: wrappedContent.cipherMeta,
255
+ sharedCipherApprovalData: '',
256
+ sharedCipherPartialAssemblyKey: yield nextPartialAssemblyKey(wrappedContent.key),
257
+ };
258
+ }
259
+ })));
260
+ });
261
+ }
262
+ // Split assembly key between all existing approvers.
263
+ createSlipAssembly(quorum, approvalGroups, rawAssemblyKey) {
264
+ return __awaiter(this, void 0, void 0, function* () {
265
+ const slipAssembly = new slip.Assembly(quorum);
266
+ approvalGroups.forEach((x, index) => {
267
+ let approverCount = x.approvers.length;
268
+ // slip39 restricts quorum == 1 to have only 1 member. So we just share the same
269
+ // partial key for all sub assembly members.
270
+ if (x.quorum === 1) {
271
+ approverCount = 1;
272
+ }
273
+ slipAssembly.addSubAssembly(new slip.SubAssembly(index, x.quorum, approverCount));
274
+ });
275
+ // Is there enough sub assemblies to meet quorum
276
+ if (slipAssembly.subAssemblies.length < quorum) {
277
+ return null;
278
+ }
279
+ yield this.slip39Service.generateShares(rawAssemblyKey, ScenarioApproverService.SLIP39_PASSPHRASE, slipAssembly);
280
+ return slipAssembly;
281
+ });
282
+ }
283
+ }
284
+ ScenarioApproverService.SLIP39_PASSPHRASE = 'lifeready';
285
+ ScenarioApproverService.ɵprov = i0.ɵɵdefineInjectable({ factory: function ScenarioApproverService_Factory() { return new ScenarioApproverService(i0.ɵɵinject(i1.LrApolloService), i0.ɵɵinject(i2.KeyFactoryService), i0.ɵɵinject(i3.KeyMetaService), i0.ɵɵinject(i4.KeyGraphService), i0.ɵɵinject(i5.Slip39Service), i0.ɵɵinject(i6.EncryptionService), i0.ɵɵinject(i7.TrustedPartyService)); }, token: ScenarioApproverService, providedIn: "root" });
286
+ ScenarioApproverService.decorators = [
287
+ { type: Injectable, args: [{
288
+ providedIn: 'root',
289
+ },] }
290
+ ];
291
+ ScenarioApproverService.ctorParameters = () => [
292
+ { type: LrApolloService },
293
+ { type: KeyFactoryService },
294
+ { type: KeyMetaService },
295
+ { type: KeyGraphService },
296
+ { type: slip.Slip39Service },
297
+ { type: EncryptionService },
298
+ { type: TrustedPartyService }
299
+ ];
300
+ //# sourceMappingURL=data:application/json;base64,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