@tellescope/sdk 1.256.13 → 1.256.14

package/lib/cjs/tests/api_tests/organization_signup.test.d.ts

@@ -0,0 +1,20 @@
+import { Check } from "../setup_isolated";
+/**
+ * Covers the self-service organization signup chain, which had ZERO test coverage:
+ * `users.register` -> `users.submit_email_verification` -> `organizations.create_and_join`.
+ *
+ * That gap is why F-0191 nearly shipped a schema `adminOnly` flag on create_and_join that would have
+ * 401'd every new organization — a freshly registered user has no `roles`, because create_and_join is
+ * itself what grants Admin. This test is the regression guard for that.
+ *
+ * It also covers the new test-support provisioning module, including the assertion that matters most:
+ * teardown refuses any organization it did not create.
+ *
+ * Uses a `dontsend...@tellescope.com` address so the verification email is dropped at
+ * forCommunications before it is ever enqueued (locally the worker consumes the same test queue the
+ * API writes to, so an unsuppressed registration really does send mail).
+ */
+export declare const organization_signup_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
+export declare const organization_signup_tests: () => Promise<void>;
+//# sourceMappingURL=organization_signup.test.d.ts.map

package/lib/cjs/tests/api_tests/organization_signup.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization_signup.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/api_tests/organization_signup.test.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,EAIN,MAAM,mBAAmB,CAAA;AAS1B;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,0BAA0B,QAAa,QAAQ,KAAK,EAAE,CAwLlE,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,qBAErC,CAAA"}

package/lib/cjs/tests/api_tests/organization_signup.test.js

@@ -0,0 +1,272 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.organization_signup_tests = exports.organization_signup_checks = void 0;
+require('source-map-support').install();
+var axios_1 = __importDefault(require("axios"));
+var sdk_1 = require("../../sdk");
+var testing_1 = require("@tellescope/testing");
+var setup_isolated_1 = require("../setup_isolated");
+var host = process.env.API_URL || 'http://localhost:8080';
+var RAND = function () { return Math.random().toString(36).slice(2, 10); };
+// legacy shared fixture — teardown must refuse it
+var SEEDED_TEST_BUSINESS_ID = '60398b1131a295e64f084ff6';
+/**
+ * Covers the self-service organization signup chain, which had ZERO test coverage:
+ * `users.register` -> `users.submit_email_verification` -> `organizations.create_and_join`.
+ *
+ * That gap is why F-0191 nearly shipped a schema `adminOnly` flag on create_and_join that would have
+ * 401'd every new organization — a freshly registered user has no `roles`, because create_and_join is
+ * itself what grants Admin. This test is the regression guard for that.
+ *
+ * It also covers the new test-support provisioning module, including the assertion that matters most:
+ * teardown refuses any organization it did not create.
+ *
+ * Uses a `dontsend...@tellescope.com` address so the verification email is dropped at
+ * forCommunications before it is ever enqueued (locally the worker consumes the same test queue the
+ * API writes to, so an unsuppressed registration really does send mail).
+ */
+var organization_signup_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var checks, record, bootstrapUserId, createdBusinessId, provisioned, keyDetail, keyPass, keySession, e_1, enduser, refusal, email, password, registerResult, preVerifyLogin, unverifiedAttempt, code, verified, subdomain, joined, second, disposable, disposableKey, secondTeardown, revokedDetail, revokedPass, e_2, e_3, _a;
+    var _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _0, _1, _2, _3, _4, _5, _6, _7, _8, _9, _10, _11;
+    return __generator(this, function (_12) {
+        switch (_12.label) {
+            case 0:
+                checks = [];
+                record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
+                bootstrapUserId = '';
+                createdBusinessId = '';
+                _12.label = 1;
+            case 1:
+                _12.trys.push([1, , 25, 34]);
+                return [4 /*yield*/, (0, setup_isolated_1.setup_isolated_tenant)()];
+            case 2:
+                /* ===== A: provisioning works with no seeded database ===== */
+                provisioned = _12.sent();
+                record('A1: provision-tenant returns a usable admin session', !!provisioned.businessId && ((_b = provisioned.sdk.userInfo) === null || _b === void 0 ? void 0 : _b.businessId) === provisioned.businessId, "businessId=".concat(provisioned.businessId, " session businessId=").concat((_c = provisioned.sdk.userInfo) === null || _c === void 0 ? void 0 : _c.businessId));
+                keyDetail = '';
+                keyPass = false;
+                _12.label = 3;
+            case 3:
+                _12.trys.push([3, 5, , 6]);
+                keySession = new sdk_1.Session({ host: host, apiKey: provisioned.apiKeys[0] });
+                return [4 /*yield*/, keySession.test_authenticated()];
+            case 4:
+                keyDetail = _12.sent();
+                keyPass = keyDetail === 'Authenticated!';
+                return [3 /*break*/, 6];
+            case 5:
+                e_1 = _12.sent();
+                keyDetail = "rejected: ".concat((e_1 === null || e_1 === void 0 ? void 0 : e_1.message) || (e_1 === null || e_1 === void 0 ? void 0 : e_1.toString()));
+                return [3 /*break*/, 6];
+            case 6:
+                record('A2: a provisioned API key authenticates', keyPass, "test_authenticated -> ".concat(keyDetail));
+                return [4 /*yield*/, provisioned.sdk.api.endusers.createOne({ fname: 'Provisioned', lname: 'Patient' })];
+            case 7:
+                enduser = _12.sent();
+                record('A3: the provisioned tenant accepts writes', !!enduser.id, "enduserId=".concat(enduser.id));
+                return [4 /*yield*/, (0, setup_isolated_1.test_support_request)('/teardown-tenant', { businessId: SEEDED_TEST_BUSINESS_ID })];
+            case 8:
+                refusal = _12.sent();
+                record('B1: teardown REFUSES an organization without the provenance marker', refusal.status === 403, "status=".concat(refusal.status, " ").concat(JSON.stringify(refusal.body), " (expected 403)"));
+                email = "dontsend-signup-".concat(RAND(), "@tellescope.com");
+                password = "Signup-".concat(RAND(), "-A1!");
+                return [4 /*yield*/, axios_1.default.request({
+                        method: 'post', url: "".concat(host, "/v1/users/register"),
+                        data: { email: email, password: password, termsVersion: '1' },
+                        validateStatus: function () { return true; },
+                    })];
+            case 9:
+                registerResult = _12.sent();
+                record('C1: register accepts a new org-less user', registerResult.status === 204, "status=".concat(registerResult.status, " ").concat(JSON.stringify((_d = registerResult.data) !== null && _d !== void 0 ? _d : '')));
+                return [4 /*yield*/, (0, testing_1.wait)(undefined, 1200)
+                    // login works before verification, which is how a test learns the new user's id
+                ]; // register is IP-limited to ~1/sec
+            case 10:
+                _12.sent(); // register is IP-limited to ~1/sec
+                return [4 /*yield*/, axios_1.default.request({
+                        method: 'post', url: "".concat(host, "/v1/users/login"),
+                        data: { email: email, password: password },
+                        validateStatus: function () { return true; },
+                    })];
+            case 11:
+                preVerifyLogin = _12.sent();
+                bootstrapUserId = (_g = (_f = (_e = preVerifyLogin.data) === null || _e === void 0 ? void 0 : _e.user) === null || _f === void 0 ? void 0 : _f.id) !== null && _g !== void 0 ? _g : '';
+                record('C2: the unverified user can log in (and is org-less)', preVerifyLogin.status === 200 && !!bootstrapUserId && !((_j = (_h = preVerifyLogin.data) === null || _h === void 0 ? void 0 : _h.user) === null || _j === void 0 ? void 0 : _j.businessId), "status=".concat(preVerifyLogin.status, " id=").concat(bootstrapUserId, " businessId=").concat((_m = (_l = (_k = preVerifyLogin.data) === null || _k === void 0 ? void 0 : _k.user) === null || _l === void 0 ? void 0 : _l.businessId) !== null && _m !== void 0 ? _m : '(none)'));
+                return [4 /*yield*/, axios_1.default.request({
+                        method: 'post', url: "".concat(host, "/v1/organizations/create-and-join"),
+                        data: { name: 'Should Not Work', subdomain: "nope-".concat(RAND()) },
+                        headers: { Authorization: "Bearer ".concat((_o = preVerifyLogin.data) === null || _o === void 0 ? void 0 : _o.authToken) },
+                        validateStatus: function () { return true; },
+                    })];
+            case 12:
+                unverifiedAttempt = _12.sent();
+                record('C3: create_and_join is rejected before email verification', unverifiedAttempt.status === 400, "status=".concat(unverifiedAttempt.status, " ").concat(JSON.stringify((_p = unverifiedAttempt.data) !== null && _p !== void 0 ? _p : '')));
+                code = "verify-".concat(RAND());
+                return [4 /*yield*/, (0, setup_isolated_1.set_email_verification_code)(email, code)];
+            case 13:
+                _12.sent();
+                return [4 /*yield*/, axios_1.default.request({
+                        method: 'post', url: "".concat(host, "/v1/users/submit-email-verification"),
+                        data: { email: email, code: code },
+                        validateStatus: function () { return true; },
+                    })];
+            case 14:
+                verified = _12.sent();
+                record('C4: submit_email_verification accepts the code and mints a token', verified.status === 200 && !!((_q = verified.data) === null || _q === void 0 ? void 0 : _q.authToken), "status=".concat(verified.status, " authToken=").concat(!!((_r = verified.data) === null || _r === void 0 ? void 0 : _r.authToken)));
+                subdomain = "signup-".concat(RAND());
+                return [4 /*yield*/, axios_1.default.request({
+                        method: 'post', url: "".concat(host, "/v1/organizations/create-and-join"),
+                        data: { name: "Signup Test ".concat(RAND()), subdomain: subdomain },
+                        headers: { Authorization: "Bearer ".concat((_s = verified.data) === null || _s === void 0 ? void 0 : _s.authToken) },
+                        validateStatus: function () { return true; },
+                    })];
+            case 15:
+                joined = _12.sent();
+                createdBusinessId = (_v = (_u = (_t = joined.data) === null || _t === void 0 ? void 0 : _t.organization) === null || _u === void 0 ? void 0 : _u.id) !== null && _v !== void 0 ? _v : '';
+                record('D1: a freshly verified, org-less user can create and join an organization', joined.status === 200 && !!createdBusinessId, "status=".concat(joined.status, " organizationId=").concat(createdBusinessId, " ").concat(joined.status !== 200 ? JSON.stringify(joined.data) : ''));
+                record('D2: the handler grants Admin and sets businessId (the roles bootstrap)', ((_y = (_x = (_w = joined.data) === null || _w === void 0 ? void 0 : _w.user) === null || _x === void 0 ? void 0 : _x.roles) === null || _y === void 0 ? void 0 : _y.includes('Admin')) && ((_0 = (_z = joined.data) === null || _z === void 0 ? void 0 : _z.user) === null || _0 === void 0 ? void 0 : _0.businessId) === createdBusinessId, "roles=".concat(JSON.stringify((_2 = (_1 = joined.data) === null || _1 === void 0 ? void 0 : _1.user) === null || _2 === void 0 ? void 0 : _2.roles), " businessId=").concat((_4 = (_3 = joined.data) === null || _3 === void 0 ? void 0 : _3.user) === null || _4 === void 0 ? void 0 : _4.businessId));
+                record('D3: a fresh token is returned', !!((_5 = joined.data) === null || _5 === void 0 ? void 0 : _5.authToken) && joined.data.authToken !== ((_6 = verified.data) === null || _6 === void 0 ? void 0 : _6.authToken), "token returned=".concat(!!((_7 = joined.data) === null || _7 === void 0 ? void 0 : _7.authToken), ", rotated=").concat(((_8 = joined.data) === null || _8 === void 0 ? void 0 : _8.authToken) !== ((_9 = verified.data) === null || _9 === void 0 ? void 0 : _9.authToken)));
+                return [4 /*yield*/, axios_1.default.request({
+                        method: 'post', url: "".concat(host, "/v1/organizations/create-and-join"),
+                        data: { name: 'Second Org', subdomain: "signup-".concat(RAND()) },
+                        headers: { Authorization: "Bearer ".concat((_10 = joined.data) === null || _10 === void 0 ? void 0 : _10.authToken) },
+                        validateStatus: function () { return true; },
+                    })];
+            case 16:
+                second = _12.sent();
+                record('D4: a user already in an organization cannot create another', second.status === 400, "status=".concat(second.status, " ").concat(JSON.stringify((_11 = second.data) !== null && _11 !== void 0 ? _11 : '')));
+                return [4 /*yield*/, (0, setup_isolated_1.setup_isolated_tenant)({ users: [{ isAdmin: true }], apiKeys: 1 })];
+            case 17:
+                disposable = _12.sent();
+                disposableKey = disposable.apiKeys[0];
+                return [4 /*yield*/, disposable.sdk.api.endusers.createOne({ fname: 'Disposable', lname: 'Patient' })];
+            case 18:
+                _12.sent();
+                return [4 /*yield*/, disposable.teardown()];
+            case 19:
+                _12.sent();
+                return [4 /*yield*/, (0, setup_isolated_1.test_support_request)('/teardown-tenant', { businessId: disposable.businessId })];
+            case 20:
+                secondTeardown = _12.sent();
+                record('E1: teardown removes the organization record itself', secondTeardown.status === 404, "re-teardown status=".concat(secondTeardown.status, " ").concat(JSON.stringify(secondTeardown.body), " (expected 404 \u2014 org gone)"));
+                revokedDetail = '';
+                revokedPass = false;
+                _12.label = 21;
+            case 21:
+                _12.trys.push([21, 23, , 24]);
+                return [4 /*yield*/, (new sdk_1.Session({ host: host, apiKey: disposableKey })).test_authenticated()];
+            case 22:
+                revokedDetail = _12.sent();
+                return [3 /*break*/, 24];
+            case 23:
+                e_2 = _12.sent();
+                revokedPass = true;
+                revokedDetail = "rejected: ".concat((e_2 === null || e_2 === void 0 ? void 0 : e_2.message) || (e_2 === null || e_2 === void 0 ? void 0 : e_2.toString()));
+                return [3 /*break*/, 24];
+            case 24:
+                record('E2: the torn-down tenant\'s API key no longer authenticates', revokedPass, revokedDetail);
+                return [3 /*break*/, 34];
+            case 25:
+                if (!provisioned) return [3 /*break*/, 29];
+                _12.label = 26;
+            case 26:
+                _12.trys.push([26, 28, , 29]);
+                return [4 /*yield*/, provisioned.teardown()];
+            case 27:
+                _12.sent();
+                return [3 /*break*/, 29];
+            case 28:
+                e_3 = _12.sent();
+                console.error('teardown failed', e_3);
+                return [3 /*break*/, 29];
+            case 29:
+                if (!bootstrapUserId) return [3 /*break*/, 33];
+                _12.label = 30;
+            case 30:
+                _12.trys.push([30, 32, , 33]);
+                return [4 /*yield*/, (0, setup_isolated_1.test_support_request)('/delete-user', { userId: bootstrapUserId })];
+            case 31:
+                _12.sent();
+                return [3 /*break*/, 33];
+            case 32:
+                _a = _12.sent();
+                return [3 /*break*/, 33];
+            case 33:
+                if (createdBusinessId) {
+                    console.log("  note: organization ".concat(createdBusinessId, " was created by the signup flow and is left behind (nothing can delete an org record)"));
+                }
+                return [7 /*endfinally*/];
+            case 34: return [2 /*return*/, checks];
+        }
+    });
+}); };
+exports.organization_signup_checks = organization_signup_checks;
+/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
+var organization_signup_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _a = setup_isolated_1.assert_checks;
+                _b = ['Organization signup'];
+                return [4 /*yield*/, (0, exports.organization_signup_checks)()];
+            case 1:
+                _a.apply(void 0, _b.concat([_c.sent()]));
+                return [2 /*return*/];
+        }
+    });
+}); };
+exports.organization_signup_tests = organization_signup_tests;
+// Allow running this test file independently
+if (require.main === module) {
+    console.log("\uD83C\uDF10 Using API URL: ".concat(host));
+    (0, exports.organization_signup_tests)()
+        .then(function () {
+        console.log("✅ Organization signup test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ Organization signup test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=organization_signup.test.js.map

package/lib/cjs/tests/api_tests/organization_signup.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization_signup.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/organization_signup.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,gDAAyB;AAEzB,iCAAmC;AACnC,+CAA0C;AAC1C,oDAM0B;AAE1B,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D,kDAAkD;AAClD,IAAM,uBAAuB,GAAG,0BAA0B,CAAA;AAE1D;;;;;;;;;;;;;;GAcG;AACI,IAAM,0BAA0B,GAAG;;;;;;gBAClC,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;gBAEjG,eAAe,GAAG,EAAE,CAAA;gBACpB,iBAAiB,GAAG,EAAE,CAAA;;;;gBAMV,qBAAM,IAAA,sCAAqB,GAAE,EAAA;;gBAF3C,+DAA+D;gBAE/D,WAAW,GAAG,UAA6B,CAAA;gBAC3C,MAAM,CACJ,qDAAqD,EACrD,CAAC,CAAC,WAAW,CAAC,UAAU,IAAI,CAAA,MAAA,WAAW,CAAC,GAAG,CAAC,QAAQ,0CAAE,UAAU,MAAK,WAAW,CAAC,UAAU,EAC3F,qBAAc,WAAW,CAAC,UAAU,iCAAuB,MAAA,WAAW,CAAC,GAAG,CAAC,QAAQ,0CAAE,UAAU,CAAE,CAClG,CAAA;gBAIG,SAAS,GAAG,EAAE,CAAA;gBACd,OAAO,GAAG,KAAK,CAAA;;;;gBAEX,UAAU,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBAC5D,qBAAM,UAAU,CAAC,kBAAkB,EAAE,EAAA;;gBAAjD,SAAS,GAAG,UAAqC,CAAA;gBACjD,OAAO,GAAG,SAAS,KAAK,gBAAgB,CAAA;;;;gBAExC,SAAS,GAAG,oBAAa,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,OAAO,MAAI,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,QAAQ,EAAE,CAAA,CAAE,CAAA;;;gBAExD,MAAM,CAAC,yCAAyC,EAAE,OAAO,EAAE,gCAAyB,SAAS,CAAE,CAAC,CAAA;gBAGhF,qBAAM,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;gBAAlG,OAAO,GAAG,UAAwF;gBACxG,MAAM,CAAC,2CAA2C,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,oBAAa,OAAO,CAAC,EAAE,CAAE,CAAC,CAAA;gBAI5E,qBAAM,IAAA,qCAAoB,EAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC,EAAA;;gBAAjG,OAAO,GAAG,UAAuF;gBACvG,MAAM,CACJ,oEAAoE,EACpE,OAAO,CAAC,MAAM,KAAK,GAAG,EACtB,iBAAU,OAAO,CAAC,MAAM,cAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAiB,CAC1E,CAAA;gBAIK,KAAK,GAAG,0BAAmB,IAAI,EAAE,oBAAiB,CAAA;gBAClD,QAAQ,GAAG,iBAAU,IAAI,EAAE,SAAM,CAAA;gBAEhB,qBAAM,eAAK,CAAC,OAAO,CAAC;wBACzC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAG,IAAI,uBAAoB;wBAChD,IAAI,EAAE,EAAE,KAAK,OAAA,EAAE,QAAQ,UAAA,EAAE,YAAY,EAAE,GAAG,EAAE;wBAC5C,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;qBAC3B,CAAC,EAAA;;gBAJI,cAAc,GAAG,UAIrB;gBACF,MAAM,CACJ,0CAA0C,EAC1C,cAAc,CAAC,MAAM,KAAK,GAAG,EAC7B,iBAAU,cAAc,CAAC,MAAM,cAAI,IAAI,CAAC,SAAS,CAAC,MAAA,cAAc,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAE,CAC/E,CAAA;gBACD,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC;oBAE3B,gFAAgF;kBAFrD,CAAC,mCAAmC;;gBAA/D,UAA2B,CAAA,CAAC,mCAAmC;gBAGxC,qBAAM,eAAK,CAAC,OAAO,CAAC;wBACzC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAG,IAAI,oBAAiB;wBAC7C,IAAI,EAAE,EAAE,KAAK,OAAA,EAAE,QAAQ,UAAA,EAAE;wBACzB,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;qBAC3B,CAAC,EAAA;;gBAJI,cAAc,GAAG,UAIrB;gBACF,eAAe,GAAG,MAAA,MAAA,MAAA,cAAc,CAAC,IAAI,0CAAE,IAAI,0CAAE,EAAE,mCAAI,EAAE,CAAA;gBACrD,MAAM,CACJ,sDAAsD,EACtD,cAAc,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAA,MAAA,MAAA,cAAc,CAAC,IAAI,0CAAE,IAAI,0CAAE,UAAU,CAAA,EAC5F,iBAAU,cAAc,CAAC,MAAM,iBAAO,eAAe,yBAAe,MAAA,MAAA,MAAA,cAAc,CAAC,IAAI,0CAAE,IAAI,0CAAE,UAAU,mCAAI,QAAQ,CAAE,CACxH,CAAA;gBAGyB,qBAAM,eAAK,CAAC,OAAO,CAAC;wBAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAG,IAAI,sCAAmC;wBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAQ,IAAI,EAAE,CAAE,EAAE;wBAC9D,OAAO,EAAE,EAAE,aAAa,EAAE,iBAAU,MAAA,cAAc,CAAC,IAAI,0CAAE,SAAS,CAAE,EAAE;wBACtE,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;qBAC3B,CAAC,EAAA;;gBALI,iBAAiB,GAAG,UAKxB;gBACF,MAAM,CACJ,2DAA2D,EAC3D,iBAAiB,CAAC,MAAM,KAAK,GAAG,EAChC,iBAAU,iBAAiB,CAAC,MAAM,cAAI,IAAI,CAAC,SAAS,CAAC,MAAA,iBAAiB,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAE,CACrF,CAAA;gBAGK,IAAI,GAAG,iBAAU,IAAI,EAAE,CAAE,CAAA;gBAC/B,qBAAM,IAAA,4CAA2B,EAAC,KAAK,EAAE,IAAI,CAAC,EAAA;;gBAA9C,UAA8C,CAAA;gBAE7B,qBAAM,eAAK,CAAC,OAAO,CAAC;wBACnC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAG,IAAI,wCAAqC;wBACjE,IAAI,EAAE,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE;wBACrB,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;qBAC3B,CAAC,EAAA;;gBAJI,QAAQ,GAAG,UAIf;gBACF,MAAM,CACJ,kEAAkE,EAClE,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,SAAS,CAAA,EACrD,iBAAU,QAAQ,CAAC,MAAM,wBAAc,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,SAAS,CAAA,CAAE,CACpE,CAAA;gBAIK,SAAS,GAAG,iBAAU,IAAI,EAAE,CAAE,CAAA;gBACrB,qBAAM,eAAK,CAAC,OAAO,CAAC;wBACjC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAG,IAAI,sCAAmC;wBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,sBAAe,IAAI,EAAE,CAAE,EAAE,SAAS,WAAA,EAAE;wBAClD,OAAO,EAAE,EAAE,aAAa,EAAE,iBAAU,MAAA,QAAQ,CAAC,IAAI,0CAAE,SAAS,CAAE,EAAE;wBAChE,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;qBAC3B,CAAC,EAAA;;gBALI,MAAM,GAAG,UAKb;gBACF,iBAAiB,GAAG,MAAA,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,YAAY,0CAAE,EAAE,mCAAI,EAAE,CAAA;gBACvD,MAAM,CACJ,2EAA2E,EAC3E,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,iBAAiB,EAC5C,iBAAU,MAAM,CAAC,MAAM,6BAAmB,iBAAiB,cAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAE,CAC1H,CAAA;gBACD,MAAM,CACJ,wEAAwE,EACxE,CAAA,MAAA,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,IAAI,0CAAE,KAAK,0CAAE,QAAQ,CAAC,OAAO,CAAC,KAAI,CAAA,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,IAAI,0CAAE,UAAU,MAAK,iBAAiB,EAClG,gBAAS,IAAI,CAAC,SAAS,CAAC,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,IAAI,0CAAE,KAAK,CAAC,yBAAe,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,IAAI,0CAAE,UAAU,CAAE,CAChG,CAAA;gBACD,MAAM,CACJ,+BAA+B,EAC/B,CAAC,CAAC,CAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,SAAS,CAAA,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,MAAK,MAAA,QAAQ,CAAC,IAAI,0CAAE,SAAS,CAAA,EAC9E,yBAAkB,CAAC,CAAC,CAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,SAAS,CAAA,uBAAa,CAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,SAAS,OAAK,MAAA,QAAQ,CAAC,IAAI,0CAAE,SAAS,CAAA,CAAE,CAC7G,CAAA;gBAEc,qBAAM,eAAK,CAAC,OAAO,CAAC;wBACjC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAG,IAAI,sCAAmC;wBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,iBAAU,IAAI,EAAE,CAAE,EAAE;wBAC3D,OAAO,EAAE,EAAE,aAAa,EAAE,iBAAU,OAAA,MAAM,CAAC,IAAI,4CAAE,SAAS,CAAE,EAAE;wBAC9D,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;qBAC3B,CAAC,EAAA;;gBALI,MAAM,GAAG,UAKb;gBACF,MAAM,CACJ,6DAA6D,EAC7D,MAAM,CAAC,MAAM,KAAK,GAAG,EACrB,iBAAU,MAAM,CAAC,MAAM,cAAI,IAAI,CAAC,SAAS,CAAC,OAAA,MAAM,CAAC,IAAI,qCAAI,EAAE,CAAC,CAAE,CAC/D,CAAA;gBAKkB,qBAAM,IAAA,sCAAqB,EAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAApF,UAAU,GAAG,UAAuE;gBACpF,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;gBAC3C,qBAAM,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;gBAAtF,UAAsF,CAAA;gBACtF,qBAAM,UAAU,CAAC,QAAQ,EAAE,EAAA;;gBAA3B,UAA2B,CAAA;gBAEJ,qBAAM,IAAA,qCAAoB,EAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,EAAA;;gBAAtG,cAAc,GAAG,UAAqF;gBAC5G,MAAM,CACJ,qDAAqD,EACrD,cAAc,CAAC,MAAM,KAAK,GAAG,EAC7B,6BAAsB,cAAc,CAAC,MAAM,cAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,oCAA4B,CAC/G,CAAA;gBAEG,aAAa,GAAG,EAAE,CAAA;gBAClB,WAAW,GAAG,KAAK,CAAA;;;;gBAEL,qBAAM,CAAC,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,EAAA;;gBAAzF,aAAa,GAAG,UAAyE,CAAA;;;;gBAEzF,WAAW,GAAG,IAAI,CAAA;gBAClB,aAAa,GAAG,oBAAa,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,OAAO,MAAI,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,QAAQ,EAAE,CAAA,CAAE,CAAA;;;gBAE5D,MAAM,CACJ,6DAA6D,EAC7D,WAAW,EACX,aAAa,CACd,CAAA;;;qBAGG,WAAW,EAAX,yBAAW;;;;gBAAU,qBAAM,WAAW,CAAC,QAAQ,EAAE,EAAA;;gBAA5B,UAA4B,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAKnG,eAAe,EAAf,yBAAe;;;;gBACX,qBAAM,IAAA,qCAAoB,EAAC,cAAc,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,EAAA;;gBAAvE,UAAuE,CAAA;;;;;;gBAE/E,IAAI,iBAAiB,EAAE;oBACrB,OAAO,CAAC,GAAG,CAAC,+BAAwB,iBAAiB,0FAAuF,CAAC,CAAA;iBAC9I;;qBAGH,sBAAO,MAAM,EAAA;;;KACd,CAAA;AAxLY,QAAA,0BAA0B,8BAwLtC;AAED,kFAAkF;AAC3E,IAAM,yBAAyB,GAAG;;;;;gBACvC,KAAA,8BAAa,CAAA;sBAAC,qBAAqB;gBAAE,qBAAM,IAAA,kCAA0B,GAAE,EAAA;;gBAAvE,4BAAqC,SAAkC,GAAC,CAAA;;;;KACzE,CAAA;AAFY,QAAA,yBAAyB,6BAErC;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAA,iCAAyB,GAAE;SACxB,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAA;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAA;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/security/F-0179-booking-info-idor-token-mint.test.d.ts

@@ -0,0 +1,30 @@
+import { Session } from "../../../sdk";
+/**
+ * Regression test for F-0179
+ * (security-audit/findings/F-0179-booking-info-idor-token-mint.md).
+ *
+ * `form_fields.booking_info` resolved its target patient as
+ * `DB.endusers.findById(enduserId || req.session.id)` with no ownership check for enduser
+ * sessions. The enduser DB branch builds the endusers collection with `enduserAccess: true`
+ * (database.ts), so a FOREIGN in-tenant id resolves — and the handler then writes
+ * `enduserFields.state` onto that record and calls `login_enduser` with
+ * `sessionScopes: ['appointment-booking']`, returning a live 24h token for the victim inside
+ * `bookingURL`. booking_info is enduser-callable AND granted to the 'public-form' scope, so a
+ * portal patient or an anonymous form-filler could mint a working session as any co-tenant patient.
+ *
+ * The fix mirrors `prepare_form_response` (api.ts): reject when an enduser session supplies an
+ * `enduserId` other than its own, before the booking-page lookup and before the `state` write.
+ *
+ * RED (pre-fix): A1 and A2 fail — the exploit returns 200 with a bookingURL whose token decodes to
+ * the VICTIM's id, and the victim's `state` is overwritten. B/C (positive controls) pass pre-fix.
+ * GREEN (post-fix): all six checks pass.
+ *
+ * Checks are collected and printed before any assert runs: the testing harness has
+ * EXIT_ON_FIRST_ERROR, so asserting inline would kill the process before the evidence table and
+ * before `finally` cleanup.
+ */
+export declare const booking_info_idor_tests: ({ sdk }: {
+    sdk: Session;
+    sdkNonAdmin: Session;
+}) => Promise<void>;
+//# sourceMappingURL=F-0179-booking-info-idor-token-mint.test.d.ts.map

package/lib/cjs/tests/api_tests/security/F-0179-booking-info-idor-token-mint.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"F-0179-booking-info-idor-token-mint.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/F-0179-booking-info-idor-token-mint.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAkB,MAAM,cAAc,CAAA;AAqBtD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,uBAAuB;SAA2B,OAAO;iBAAe,OAAO;mBA2J3F,CAAA"}