npm - @tellescope/sdk - Versions diffs - 1.256.15 → 2.0.0-beta.0 - Mend

@tellescope/sdk 1.256.15 → 2.0.0-beta.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (299) hide show

package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js CHANGED Viewed

@@ -39,7 +39,7 @@ import { Session, EnduserSession } from "../../../sdk";
 import { async_test, log_header, } from "@tellescope/testing";
 import { setup_tests } from "../../setup";
 var host = process.env.API_URL || 'http://localhost:8080';
-var businessId = '60398b1131a295e64f084ff6';
+var businessId = process.env.TEST_BUSINESS_ID || '60398b1131a295e64f084ff6';
 var ENDUSER_PASSWORD = 'F0116TestPassword!123';
 var CROSS_ENDUSER_MESSAGE = "enduserId does not match creator id for enduser session";
 /**

package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"enduser-cross-create.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/enduser-cross-create.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EACL,UAAU,EACV,UAAU,GACX,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AACpE,IAAM,UAAU,GAAG,0BAA0B,CAAA;~~AAE7C~~,IAAM,gBAAgB,GAAG,uBAAuB,CAAA;AAEhD,IAAM,qBAAqB,GAAG,yDAAyD,CAAA;AAEvF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,IAAM,0BAA0B,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;oBACpD,UAAU,CAAC,oCAAoC,CAAC,CAAA;oBAI1C,qBAAqB,GAAa,EAAE,CAAA;oBACpC,eAAe,GAAa,EAAE,CAAA;oBAC9B,iBAAiB,GAAa,EAAE,CAAA;oBAChC,cAAc,GAAa,EAAE,CAAA;;;;oBAI3B,aAAa,GAAG,yBAAkB,IAAI,CAAC,GAAG,EAAE,iBAAc,CAAA;oBAC1D,WAAW,GAAG,uBAAgB,IAAI,CAAC,GAAG,EAAE,iBAAc,CAAA;oBAC3C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAAxG,QAAQ,GAAG,SAA6F;oBAC9G,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;oBACT,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAA;;oBAAlG,MAAM,GAAG,SAAyF;oBACxG,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAA;oBACpB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,EAAA;;oBAApF,SAAoF,CAAA;oBAE9E,gBAAc,IAAI,cAAc,CAAC,EAAE,IAAI,MAAA,EAAE,UAAU,YAAA,EAAE,CAAC,CAAA;oBAC5D,qBAAM,aAAW,CAAC,YAAY,CAAC,aAAa,EAAE,gBAAgB,CAAC;wBAE/D,+DAA+D;wBAC/D,uBAAuB;wBACvB,+DAA+D;sBAJA;;oBAA/D,SAA+D,CAAA;oBAE/D,+DAA+D;oBAC/D,uBAAuB;oBACvB,+DAA+D;oBAC/D,qBAAM,UAAU,CACd,kEAAkE,EAClE,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,QAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;4BAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE;yBACnC,CAAC,EAHH,CAGG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,qBAAqB,EAAnC,CAAmC,EAAE,CACzE,EAAA;;oBAVD,+DAA+D;oBAC/D,uBAAuB;oBACvB,+DAA+D;oBAC/D,SAOC,CAAA;oBACD,qBAAM,UAAU,CACd,mEAAmE,EACnE,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;gCACrD,SAAS,EAAE,QAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;gCAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE;6BAC1C,CAAQ,CAAC,EAHJ,CAGI,EACV,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,qBAAqB,EAAnC,CAAmC,EAAE,CACzE;wBAED,0EAA0E;sBAFzE;;oBAPD,SAOC,CAAA;oBAED,0EAA0E;oBAC1E,qBAAM,UAAU,CACd,oDAAoD,EACpD,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,UAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;4BAChE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE;yBACnC,CAAC,EAHH,CAGG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,MAAK,UAAU,CAAA,CAAC,CAAC,EAAE,CAC9G;wBACD,0EAA0E;sBADzE;;oBARD,0EAA0E;oBAC1E,SAOC,CAAA;oBACD,0EAA0E;oBAC1E,qBAAM,UAAU,CACd,mDAAmD,EACnD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BAC3C,SAAS,EAAE,QAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;4BAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE;yBACnC,CAAC,EAHH,CAGG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,MAAK,QAAQ,CAAA,CAAC,CAAC,EAAE,CAC5G;wBAED,+DAA+D;wBAC/D,iBAAiB;wBACjB,+DAA+D;sBAJ9D;;oBARD,0EAA0E;oBAC1E,SAOC,CAAA;oBAKK,iBAAe,UAAC,SAAiB,IAAK,OAAA,CAAC;wBAC3C,SAAS,WAAA;wBAAE,UAAU,EAAE,gBAAS,IAAI,CAAC,GAAG,EAAE,CAAE,EAAE,MAAM,EAAE,cAAc;wBACpE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS;qBACxC,CAAC,EAH0C,CAG1C,CAAA;oBACF,qBAAM,UAAU,CACd,gDAAgD,EAChD,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,QAAS,CAAQ,CAAC,EAAxE,CAAwE,EAC9E,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,qBAAqB,EAAnC,CAAmC,EAAE,CACzE,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,8CAA8C,EAC9C,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,UAAW,CAAQ,CAAC,EAA1E,CAA0E,EAChF,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,MAAK,UAAU,CAAA,CAAC,CAAC,EAAE,CACxG,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,6CAA6C,EAC7C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,QAAS,CAAQ,CAAC,EAAhE,CAAgE,EACtE,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,MAAK,QAAQ,CAAA,CAAC,CAAC,EAAE,CACtG;wBAED,+DAA+D;wBAC/D,0BAA0B;wBAC1B,+DAA+D;sBAJ9D;;oBAJD,SAIC,CAAA;oBAED,+DAA+D;oBAC/D,0BAA0B;oBAC1B,+DAA+D;oBAC/D,qBAAM,UAAU,CACd,+DAA+D,EAC/D,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI;yBACrE,CAAC,EAFH,CAEG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,sDAAsD,EAApE,CAAoE,EAAE,CAC1G,EAAA;;oBATD,+DAA+D;oBAC/D,0BAA0B;oBAC1B,+DAA+D;oBAC/D,SAMC,CAAA;oBACD,qBAAM,UAAU,CACd,+CAA+C,EAC/C,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI;yBACtD,CAAC,EAFH,CAEG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,sCAAsC,EAApD,CAAoD,EAAE,CAC1F,EAAA;;oBAND,SAMC,CAAA;oBACD,qBAAM,UAAU,CACd,wDAAwD,EACxD,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,QAAS;yBACtD,CAAC,EAFH,CAEG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,qBAAqB,EAAnC,CAAmC,EAAE,CACzE,EAAA;;oBAND,SAMC,CAAA;oBACD,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO;yBACjC,CAAC,EAFH,CAEG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,CAAA,IAAI,CAAC,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,0BAA0B,CAAA,CAAA,CAAC,CAAC,EAAE,CAC/H,EAAA;;oBAND,SAMC,CAAA;oBACD,qBAAM,UAAU,CACd,uCAAuC,EACvC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BAC9C,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI;yBACzD,CAAC,EAFH,CAEG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,MAAK,IAAI,CAAA,CAAC,CAAC,EAAE,CACrG;wBAED,+DAA+D;wBAC/D,0EAA0E;wBAC1E,+DAA+D;sBAJ9D;;oBAND,SAMC,CAAA;oBAKK,YAAU,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAA;oBAC/B,qBAAM,UAAU,CACd,gEAAgE,EAChE,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;4BACzC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,UAAW,EAAE,QAAS,CAAC,EAAE,OAAO,EAAE,CAAC,SAAO,CAAC;yBACpE,CAAC,EAFH,CAEG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,6DAA6D,EAA3E,CAA2E,EAAE,CACjH;wBACD,6FAA6F;sBAD5F;;oBAND,SAMC,CAAA;oBACD,6FAA6F;oBAC7F,qBAAM,UAAU,CACd,mDAAmD,EACnD,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;4BACzC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,UAAW,CAAC,EAAE,OAAO,EAAE,CAAC,SAAO,CAAC;yBACzD,CAAC,EAFH,CAEG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,gBAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,0CAAE,MAAM,MAAK,CAAC,KAAI,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,0CAAE,QAAQ,CAAC,SAAO,CAAC,CAAA,CAAA,CAAC,CAAC,EAAE,CACxI;wBACD,+DAA+D;sBAD9D;;oBAPD,6FAA6F;oBAC7F,SAMC,CAAA;oBACD,+DAA+D;oBAC/D,qBAAM,UAAU,CACd,sDAAsD,EACtD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;4BACjC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,UAAW,EAAE,QAAS,CAAC,EAAE,OAAO,EAAE,CAAC,SAAO,CAAC;yBACpE,CAAC,EAFH,CAEG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,YAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,0CAAE,MAAM,MAAK,CAAC,CAAA,CAAC,CAAC,EAAE,CACvG,EAAA;;oBAPD,+DAA+D;oBAC/D,SAMC,CAAA;;;0BAE8B,EAAd,iCAAc;;;yBAAd,CAAA,4BAAc,CAAA;oBAApB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAtC,SAAsC,CAAA;;;;;;oBAD7B,IAAc,CAAA;;;0BAGG,EAAjB,uCAAiB;;;yBAAjB,CAAA,+BAAiB,CAAA;oBAAvB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;;;;;;oBAD1C,IAAiB,CAAA;;;0BAGI,EAArB,+CAAqB;;;yBAArB,CAAA,mCAAqB,CAAA;oBAA3B,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAgD,CAAA;;;;;;oBADvC,IAAqB,CAAA;;;0BAGN,EAAf,mCAAe;;;yBAAf,CAAA,6BAAe,CAAA;oBAArB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA1C,SAA0C,CAAA;;;;;;oBADjC,IAAe,CAAA;;;yBAG5B,UAAU,EAAV,yBAAU;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;oBAA5C,SAA4C,CAAA;;;;;;yBAChE,QAAQ,EAAR,yBAAQ;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAA;;oBAA1C,SAA0C,CAAA;;;;;;;;;;CAEnE,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,0BAA0B,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAtD,SAAsD,CAAA;;;;SACvD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAA;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAA;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
1	+ {"version":3,"file":"enduser-cross-create.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/enduser-cross-create.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EACL,UAAU,EACV,UAAU,GACX,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AACpE,IAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,0BAA0B,CAAA;AAE7E,IAAM,gBAAgB,GAAG,uBAAuB,CAAA;AAEhD,IAAM,qBAAqB,GAAG,yDAAyD,CAAA;AAEvF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,IAAM,0BAA0B,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;oBACpD,UAAU,CAAC,oCAAoC,CAAC,CAAA;oBAI1C,qBAAqB,GAAa,EAAE,CAAA;oBACpC,eAAe,GAAa,EAAE,CAAA;oBAC9B,iBAAiB,GAAa,EAAE,CAAA;oBAChC,cAAc,GAAa,EAAE,CAAA;;;;oBAI3B,aAAa,GAAG,yBAAkB,IAAI,CAAC,GAAG,EAAE,iBAAc,CAAA;oBAC1D,WAAW,GAAG,uBAAgB,IAAI,CAAC,GAAG,EAAE,iBAAc,CAAA;oBAC3C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAAxG,QAAQ,GAAG,SAA6F;oBAC9G,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;oBACT,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAA;;oBAAlG,MAAM,GAAG,SAAyF;oBACxG,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAA;oBACpB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,EAAA;;oBAApF,SAAoF,CAAA;oBAE9E,gBAAc,IAAI,cAAc,CAAC,EAAE,IAAI,MAAA,EAAE,UAAU,YAAA,EAAE,CAAC,CAAA;oBAC5D,qBAAM,aAAW,CAAC,YAAY,CAAC,aAAa,EAAE,gBAAgB,CAAC;wBAE/D,+DAA+D;wBAC/D,uBAAuB;wBACvB,+DAA+D;sBAJA;;oBAA/D,SAA+D,CAAA;oBAE/D,+DAA+D;oBAC/D,uBAAuB;oBACvB,+DAA+D;oBAC/D,qBAAM,UAAU,CACd,kEAAkE,EAClE,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,QAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;4BAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE;yBACnC,CAAC,EAHH,CAGG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,qBAAqB,EAAnC,CAAmC,EAAE,CACzE,EAAA;;oBAVD,+DAA+D;oBAC/D,uBAAuB;oBACvB,+DAA+D;oBAC/D,SAOC,CAAA;oBACD,qBAAM,UAAU,CACd,mEAAmE,EACnE,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;gCACrD,SAAS,EAAE,QAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;gCAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE;6BAC1C,CAAQ,CAAC,EAHJ,CAGI,EACV,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,qBAAqB,EAAnC,CAAmC,EAAE,CACzE;wBAED,0EAA0E;sBAFzE;;oBAPD,SAOC,CAAA;oBAED,0EAA0E;oBAC1E,qBAAM,UAAU,CACd,oDAAoD,EACpD,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,UAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;4BAChE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE;yBACnC,CAAC,EAHH,CAGG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,MAAK,UAAU,CAAA,CAAC,CAAC,EAAE,CAC9G;wBACD,0EAA0E;sBADzE;;oBARD,0EAA0E;oBAC1E,SAOC,CAAA;oBACD,0EAA0E;oBAC1E,qBAAM,UAAU,CACd,mDAAmD,EACnD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BAC3C,SAAS,EAAE,QAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;4BAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE;yBACnC,CAAC,EAHH,CAGG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,MAAK,QAAQ,CAAA,CAAC,CAAC,EAAE,CAC5G;wBAED,+DAA+D;wBAC/D,iBAAiB;wBACjB,+DAA+D;sBAJ9D;;oBARD,0EAA0E;oBAC1E,SAOC,CAAA;oBAKK,iBAAe,UAAC,SAAiB,IAAK,OAAA,CAAC;wBAC3C,SAAS,WAAA;wBAAE,UAAU,EAAE,gBAAS,IAAI,CAAC,GAAG,EAAE,CAAE,EAAE,MAAM,EAAE,cAAc;wBACpE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS;qBACxC,CAAC,EAH0C,CAG1C,CAAA;oBACF,qBAAM,UAAU,CACd,gDAAgD,EAChD,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,QAAS,CAAQ,CAAC,EAAxE,CAAwE,EAC9E,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,qBAAqB,EAAnC,CAAmC,EAAE,CACzE,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,8CAA8C,EAC9C,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,UAAW,CAAQ,CAAC,EAA1E,CAA0E,EAChF,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,MAAK,UAAU,CAAA,CAAC,CAAC,EAAE,CACxG,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,6CAA6C,EAC7C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,QAAS,CAAQ,CAAC,EAAhE,CAAgE,EACtE,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,SAAS,MAAK,QAAQ,CAAA,CAAC,CAAC,EAAE,CACtG;wBAED,+DAA+D;wBAC/D,0BAA0B;wBAC1B,+DAA+D;sBAJ9D;;oBAJD,SAIC,CAAA;oBAED,+DAA+D;oBAC/D,0BAA0B;oBAC1B,+DAA+D;oBAC/D,qBAAM,UAAU,CACd,+DAA+D,EAC/D,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI;yBACrE,CAAC,EAFH,CAEG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,sDAAsD,EAApE,CAAoE,EAAE,CAC1G,EAAA;;oBATD,+DAA+D;oBAC/D,0BAA0B;oBAC1B,+DAA+D;oBAC/D,SAMC,CAAA;oBACD,qBAAM,UAAU,CACd,+CAA+C,EAC/C,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI;yBACtD,CAAC,EAFH,CAEG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,sCAAsC,EAApD,CAAoD,EAAE,CAC1F,EAAA;;oBAND,SAMC,CAAA;oBACD,qBAAM,UAAU,CACd,wDAAwD,EACxD,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,QAAS;yBACtD,CAAC,EAFH,CAEG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,qBAAqB,EAAnC,CAAmC,EAAE,CACzE,EAAA;;oBAND,SAMC,CAAA;oBACD,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO;yBACjC,CAAC,EAFH,CAEG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,CAAA,IAAI,CAAC,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,0BAA0B,CAAA,CAAA,CAAC,CAAC,EAAE,CAC/H,EAAA;;oBAND,SAMC,CAAA;oBACD,qBAAM,UAAU,CACd,uCAAuC,EACvC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BAC9C,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI;yBACzD,CAAC,EAFH,CAEG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,MAAK,IAAI,CAAA,CAAC,CAAC,EAAE,CACrG;wBAED,+DAA+D;wBAC/D,0EAA0E;wBAC1E,+DAA+D;sBAJ9D;;oBAND,SAMC,CAAA;oBAKK,YAAU,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAA;oBAC/B,qBAAM,UAAU,CACd,gEAAgE,EAChE,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;4BACzC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,UAAW,EAAE,QAAS,CAAC,EAAE,OAAO,EAAE,CAAC,SAAO,CAAC;yBACpE,CAAC,EAFH,CAEG,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,6DAA6D,EAA3E,CAA2E,EAAE,CACjH;wBACD,6FAA6F;sBAD5F;;oBAND,SAMC,CAAA;oBACD,6FAA6F;oBAC7F,qBAAM,UAAU,CACd,mDAAmD,EACnD,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;4BACzC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,UAAW,CAAC,EAAE,OAAO,EAAE,CAAC,SAAO,CAAC;yBACzD,CAAC,EAFH,CAEG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,gBAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,0CAAE,MAAM,MAAK,CAAC,KAAI,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,0CAAE,QAAQ,CAAC,SAAO,CAAC,CAAA,CAAA,CAAC,CAAC,EAAE,CACxI;wBACD,+DAA+D;sBAD9D;;oBAPD,6FAA6F;oBAC7F,SAMC,CAAA;oBACD,+DAA+D;oBAC/D,qBAAM,UAAU,CACd,sDAAsD,EACtD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;4BACjC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,UAAW,EAAE,QAAS,CAAC,EAAE,OAAO,EAAE,CAAC,SAAO,CAAC;yBACpE,CAAC,EAFH,CAEG,EACT,EAAE,QAAQ,EAAE,UAAC,CAAM,YAAO,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,EAAE;gCAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,UAAU,0CAAE,MAAM,MAAK,CAAC,CAAA,CAAC,CAAC,EAAE,CACvG,EAAA;;oBAPD,+DAA+D;oBAC/D,SAMC,CAAA;;;0BAE8B,EAAd,iCAAc;;;yBAAd,CAAA,4BAAc,CAAA;oBAApB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAtC,SAAsC,CAAA;;;;;;oBAD7B,IAAc,CAAA;;;0BAGG,EAAjB,uCAAiB;;;yBAAjB,CAAA,+BAAiB,CAAA;oBAAvB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;;;;;;oBAD1C,IAAiB,CAAA;;;0BAGI,EAArB,+CAAqB;;;yBAArB,CAAA,mCAAqB,CAAA;oBAA3B,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAgD,CAAA;;;;;;oBADvC,IAAqB,CAAA;;;0BAGN,EAAf,mCAAe;;;yBAAf,CAAA,6BAAe,CAAA;oBAArB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA1C,SAA0C,CAAA;;;;;;oBADjC,IAAe,CAAA;;;yBAG5B,UAAU,EAAV,yBAAU;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;oBAA5C,SAA4C,CAAA;;;;;;yBAChE,QAAQ,EAAR,yBAAQ;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAA;;oBAA1C,SAA0C,CAAA;;;;;;;;;;CAEnE,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,0BAA0B,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAtD,SAAsD,CAAA;;;;SACvD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAA;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAA;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js CHANGED Viewed

@@ -39,7 +39,7 @@ import { Session, EnduserSession } from "../../../sdk";
 import { async_test, log_header, } from "@tellescope/testing";
 import { setup_tests } from "../../setup";
 var host = process.env.API_URL || 'http://localhost:8080';
-var businessId = '60398b1131a295e64f084ff6';
+var businessId = process.env.TEST_BUSINESS_ID || '60398b1131a295e64f084ff6';
 var ENDUSER_PASSWORD = 'F0106TestPassword!123';
 // Every endusers field marked enduserUpdatesDisabled in schema.ts, with a
 // validator-passing sample value so the only rejection in play is the

package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"enduser-write-restrictions.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/enduser-write-restrictions.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EACL,UAAU,EACV,UAAU,GACX,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AACpE,IAAM,UAAU,GAAG,0BAA0B,CAAA;~~AAE7C~~,IAAM,gBAAgB,GAAG,uBAAuB,CAAA;AAEhD,0EAA0E;AAC1E,sEAAsE;AACtE,4CAA4C;AAC5C,IAAM,wBAAwB,GAAG,UAAC,OAAe,EAAE,OAAe;;IAA0B,OAAA,CAAC;QAC3F,UAAU,EAAE,4BAA4B;QACxC,IAAI,EAAE,CAAC,oBAAoB,CAAC;QAC5B,UAAU,EAAE,CAAC,2BAA2B,CAAC;QACzC,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,YAAY,EAAE,OAAO;QACrB,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,0BAA0B,EAAE,CAAC;QAC/D,uBAAuB,EAAE,EAAE;QAC3B,QAAQ,YAAI,GAAC,OAAO,IAAG,OAAO,KAAE;QAChC,eAAe,EAAE,OAAO;QACxB,MAAM,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE;QACtC,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE;QAChD,kBAAkB,EAAE,EAAE,QAAQ,EAAE,yBAAyB,EAAE;QAC3D,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC5B,gBAAgB,EAAE,KAAK;QACvB,oBAAoB,EAAE,IAAI;QAC1B,kBAAkB,EAAE,YAAY;QAChC,gBAAgB,EAAE,gBAAgB;QAClC,YAAY,EAAE,kBAAkB;QAChC,qBAAqB,EAAE,gBAAgB;QACvC,gBAAgB,EAAE,uBAAuB;QACzC,SAAS,EAAE,kBAAkB;KAC9B,CAAC;AAzB0F,CAyB1F,CAAA;AAEF,yEAAyE;AACzE,8FAA8F;AAC9F,8FAA8F;AAC9F,mDAAmD;AACnD,IAAM,6BAA6B,GAAG,UAAC,OAAe,EAAE,cAAsB,IAA0B,OAAA,CAAC;IACvG,iBAAiB,EAAE,IAAI;IACvB,yEAAyE;IACzE,6FAA6F;IAC7F,2FAA2F;IAC3F,SAAS,EAAE,cAAc;IACzB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;IAC7C,wBAAwB,EAAE,IAAI;IAC9B,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC7C,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAClF,gBAAgB,EAAE,sDAAsD;IACxE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACpF,cAAc,EAAE,IAAI;IACpB,QAAQ,EAAE,IAAI,IAAI,EAAE;IACpB,kBAAkB,EAAE,IAAI;IACxB,QAAQ,EAAE,IAAI,IAAI,EAAE;IACpB,IAAI,EAAE,CAAC,oBAAoB,CAAC;IAC5B,SAAS,EAAE,oBAAoB;IAC/B,SAAS,EAAE,2BAA2B;IACtC,OAAO,EAAE,uCAAuC;IAChD,UAAU,EAAE,GAAG;CAChB,CAAC,EAtBsG,CAsBtG,CAAA;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,IAAM,gCAAgC,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;oBAC1D,UAAU,CAAC,qDAAqD,CAAC,CAAA;;;;oBASzD,YAAY,GAAG,wBAAiB,IAAI,CAAC,GAAG,EAAE,iBAAc,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAA;;oBAAxG,YAAU,SAA8F;oBAC9G,SAAS,GAAG,SAAO,CAAC,EAAE,CAAA;oBAGD,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BACpD,KAAK,EAAE,sBAAe,IAAI,CAAC,GAAG,EAAE,iBAAc,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;yBAC/E,CAAC,EAAA;;oBAFI,iBAAe,SAEnB;oBACF,cAAc,GAAG,cAAY,CAAC,EAAE,CAAA;oBAChC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,SAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,EAAA;;oBAAnF,SAAmF,CAAA;oBAE7E,eAAa,IAAI,cAAc,CAAC,EAAE,IAAI,MAAA,EAAE,UAAU,YAAA,EAAE,CAAC,CAAA;oBAC3D,qBAAM,YAAU,CAAC,YAAY,CAAC,YAAY,EAAE,gBAAgB,CAAC,EAAA;;oBAA7D,SAA6D,CAAA;oBAEhD,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,EAAA;;oBAA9E,IAAI,GAAG,SAAuE;oBACpF,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;oBACmB,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,qBAAqB,CAAC;4BACpF,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,SAAS,EAAE,SAAO,CAAC,EAAE;yBACtB,CAAC,EAAA;;oBAHM,iBAA2B,CAAA,SAGjC,CAAA,SAH4B;oBAI9B,cAAc,GAAG,cAAY,CAAC,EAAE,CAAA;wCAGpB,KAAK,EAAE,KAAK;;;wCACtB,qBAAM,UAAU,CACd,8CAAuC,KAAK,CAAE,EAC9C;;wCAAM,OAAA,YAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAO,CAAC,EAAE,EAAE,CAAA,SAAE,GAAC,KAAK,IAAG,KAAK,IAAS,CAAA,CAAC;oCAAxE,CAAwE,EAC9E,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,UAAG,KAAK,mCAAgC,EAAtD,CAAsD,EAAE,CAC5F,EAAA;;oCAJD,SAIC,CAAA;;;;;0BAL+F,EAArE,KAAA,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAO,CAAC,EAAE,CAAC,CAAC;;;yBAArE,CAAA,cAAqE,CAAA;oBAAvF,WAAc,EAAb,KAAK,QAAA,EAAE,KAAK,QAAA;kDAAZ,KAAK,EAAE,KAAK;;;;;oBAAK,IAAqE,CAAA;;;gBAQlG,sEAAsE;gBACtE,4CAA4C;gBAC5C,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAO,CAAC,EAAE,CAAC,EAAnC,CAAmC,EACzC,EAAE,QAAQ,EAAE,UAAA,CAAC,gBAAI,OAAA,CAAC,CAAA,MAAA,CAAC,CAAC,UAAU,0CAAE,MAAM,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,MAAM,CAAA,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,CAAA,EAAA,EAAE,CAC1F;oBAED,6EAA6E;kBAF5E;;oBAND,sEAAsE;oBACtE,4CAA4C;oBAC5C,SAIC,CAAA;wCAGW,KAAK,EAAE,KAAK;;;wCACtB,qBAAM,UAAU,CACd,oDAA6C,KAAK,CAAE,EACpD;;wCAAM,OAAA,YAAU,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE,CAAA,SAAE,GAAC,KAAK,IAAG,KAAK,IAAS,CAAA,CAAC;oCAAnF,CAAmF,EACzF,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,UAAG,KAAK,mCAAgC,EAAtD,CAAsD,EAAE,CAC5F,EAAA;;oCAJD,SAIC,CAAA;;;;;0BALyG,EAA/E,KAAA,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAY,CAAC,EAAE,CAAC,CAAC;;;yBAA/E,CAAA,cAA+E,CAAA;oBAAjG,WAAc,EAAb,KAAK,QAAA,EAAE,KAAK,QAAA;kDAAZ,KAAK,EAAE,KAAK;;;;;oBAAK,IAA+E,CAAA;;yBAQ5G,qBAAM,UAAU,CACd,6FAA6F,EAC7F,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,cAAY,CAAC,EAAE,CAAC,EAA9C,CAA8C,EACpD,EAAE,QAAQ,EAAE,UAAA,EAAE;;4BAAI,OAAA,CAChB,CAAC,EAAE,CAAC,iBAAiB,IAAI,CAAC,CAAA,MAAA,EAAE,CAAC,cAAc,0CAAE,MAAM,CAAA,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS;gCACnF,2FAA2F;mCACxF,EAAE,CAAC,SAAS,KAAK,SAAO,CAAC,EAAE,CAC/B,CAAA;yBAAA,EAAE,CACJ;oBAED,wEAAwE;kBAFvE;;oBARD,SAQC,CAAA;oBAED,wEAAwE;oBACxE,qBAAM,UAAU,CACd,2DAA2D,EAC3D,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAA1F,CAA0F,EAChG,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,KAAK,KAAK,cAAc,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAnD,CAAmD,EAAE,CACvE,EAAA;;oBALD,wEAAwE;oBACxE,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,0FAA0F,EAC1F,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,EAAzF,CAAyF,EAC/F,EAAE,QAAQ,EAAE,UAAA,EAAE,IAAI,OAAA,EAAE,CAAC,qBAAqB,KAAK,IAAI,EAAjC,CAAiC,EAAE,CACtD;wBAED,uFAAuF;sBAFtF;;oBAJD,SAIC,CAAA;oBAED,uFAAuF;oBACvF,qBAAM,UAAU,CACd,gGAAgG,EAChG,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAO,CAAC,EAAE,EAAE;4BAC3C,IAAI,EAAE,CAAC,eAAe,CAAC;4BACvB,UAAU,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC7B,UAAU,EAAE,uBAAuB;4BACnC,IAAI,EAAE,gBAAgB;4BACtB,MAAM,EAAE,kBAAkB;yBAC3B,CAAC,EANI,CAMJ,EACF,EAAE,QAAQ,EAAE,UAAA,CAAC;;gCAAI,OAAA,CACf,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;uCAChC,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,UAAU,0CAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;uCACzC,CAAC,CAAC,UAAU,KAAK,uBAAuB,CAC5C,CAAA;6BAAA,EAAE,CACJ,EAAA;;oBAfD,uFAAuF;oBACvF,SAcC,CAAA;oBACD,qBAAM,UAAU,CACd,gGAAgG,EAChG,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE;4BACtD,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;4BAC7C,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;4BACvF,IAAI,EAAE,CAAC,eAAe,CAAC;yBACxB,CAAC,EAJI,CAIJ,EACF,EAAE,QAAQ,EAAE,UAAA,EAAE;;gCAAI,OAAA,CAChB,CAAA,MAAA,MAAA,EAAE,CAAC,cAAc,0CAAG,CAAC,CAAC,0CAAE,IAAI,MAAK,OAAO;uCACrC,CAAA,MAAA,MAAA,EAAE,CAAC,cAAc,0CAAG,CAAC,CAAC,0CAAE,IAAI,MAAK,OAAO;uCACxC,CAAC,CAAC,CAAA,MAAA,EAAE,CAAC,IAAI,0CAAE,QAAQ,CAAC,eAAe,CAAC,CAAA,CACxC,CAAA;6BAAA,EAAE,CACJ;wBAED,6FAA6F;wBAC7F,4FAA4F;sBAH3F;;oBAZD,SAYC,CAAA;oBAED,6FAA6F;oBAC7F,4FAA4F;oBAC5F,qBAAM,UAAU,CACd,qEAAqE,EACrE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,cAAY,CAAC,EAAE,EAAE,CAAC,EAAjF,CAAiF,EACvF,EAAE,QAAQ,EAAE,UAAA,EAAE,IAAI,OAAA,EAAE,CAAC,SAAS,KAAK,cAAY,CAAC,EAAE,EAAhC,CAAgC,EAAE,CACrD,EAAA;;oBAND,6FAA6F;oBAC7F,4FAA4F;oBAC5F,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,iDAAiD,EACjD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,SAAO,CAAC,EAAE,EAAE,CAAC,EAA5E,CAA4E,EAClF,EAAE,QAAQ,EAAE,UAAA,EAAE,IAAI,OAAA,EAAE,CAAC,SAAS,KAAK,SAAO,CAAC,EAAE,EAA3B,CAA2B,EAAE,CAChD,EAAA;;oBAJD,SAIC,CAAA;;;yBAEG,cAAc,EAAd,yBAAc;;;;oBACV,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAAtD,SAAsD,CAAA;;;;;;yBAE1D,MAAM,EAAN,yBAAM;;;;oBACF,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAA;;oBAArC,SAAqC,CAAA;;;;;;yBAEzC,SAAS,EAAT,yBAAS;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAA;;oBAA3C,SAA2C,CAAA;;;;;;yBAE/C,cAAc,EAAd,yBAAc;;;;oBACV,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAAhD,SAAgD,CAAA;;;;;;;;;;CAG3D,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,gCAAgC,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAA5D,SAA4D,CAAA;;;;SAC7D,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAA;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAA;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
1	+ {"version":3,"file":"enduser-write-restrictions.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/enduser-write-restrictions.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EACL,UAAU,EACV,UAAU,GACX,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AACpE,IAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,0BAA0B,CAAA;AAE7E,IAAM,gBAAgB,GAAG,uBAAuB,CAAA;AAEhD,0EAA0E;AAC1E,sEAAsE;AACtE,4CAA4C;AAC5C,IAAM,wBAAwB,GAAG,UAAC,OAAe,EAAE,OAAe;;IAA0B,OAAA,CAAC;QAC3F,UAAU,EAAE,4BAA4B;QACxC,IAAI,EAAE,CAAC,oBAAoB,CAAC;QAC5B,UAAU,EAAE,CAAC,2BAA2B,CAAC;QACzC,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,YAAY,EAAE,OAAO;QACrB,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,0BAA0B,EAAE,CAAC;QAC/D,uBAAuB,EAAE,EAAE;QAC3B,QAAQ,YAAI,GAAC,OAAO,IAAG,OAAO,KAAE;QAChC,eAAe,EAAE,OAAO;QACxB,MAAM,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE;QACtC,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE;QAChD,kBAAkB,EAAE,EAAE,QAAQ,EAAE,yBAAyB,EAAE;QAC3D,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC5B,gBAAgB,EAAE,KAAK;QACvB,oBAAoB,EAAE,IAAI;QAC1B,kBAAkB,EAAE,YAAY;QAChC,gBAAgB,EAAE,gBAAgB;QAClC,YAAY,EAAE,kBAAkB;QAChC,qBAAqB,EAAE,gBAAgB;QACvC,gBAAgB,EAAE,uBAAuB;QACzC,SAAS,EAAE,kBAAkB;KAC9B,CAAC;AAzB0F,CAyB1F,CAAA;AAEF,yEAAyE;AACzE,8FAA8F;AAC9F,8FAA8F;AAC9F,mDAAmD;AACnD,IAAM,6BAA6B,GAAG,UAAC,OAAe,EAAE,cAAsB,IAA0B,OAAA,CAAC;IACvG,iBAAiB,EAAE,IAAI;IACvB,yEAAyE;IACzE,6FAA6F;IAC7F,2FAA2F;IAC3F,SAAS,EAAE,cAAc;IACzB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;IAC7C,wBAAwB,EAAE,IAAI;IAC9B,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC7C,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAClF,gBAAgB,EAAE,sDAAsD;IACxE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACpF,cAAc,EAAE,IAAI;IACpB,QAAQ,EAAE,IAAI,IAAI,EAAE;IACpB,kBAAkB,EAAE,IAAI;IACxB,QAAQ,EAAE,IAAI,IAAI,EAAE;IACpB,IAAI,EAAE,CAAC,oBAAoB,CAAC;IAC5B,SAAS,EAAE,oBAAoB;IAC/B,SAAS,EAAE,2BAA2B;IACtC,OAAO,EAAE,uCAAuC;IAChD,UAAU,EAAE,GAAG;CAChB,CAAC,EAtBsG,CAsBtG,CAAA;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,IAAM,gCAAgC,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;oBAC1D,UAAU,CAAC,qDAAqD,CAAC,CAAA;;;;oBASzD,YAAY,GAAG,wBAAiB,IAAI,CAAC,GAAG,EAAE,iBAAc,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAA;;oBAAxG,YAAU,SAA8F;oBAC9G,SAAS,GAAG,SAAO,CAAC,EAAE,CAAA;oBAGD,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BACpD,KAAK,EAAE,sBAAe,IAAI,CAAC,GAAG,EAAE,iBAAc,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;yBAC/E,CAAC,EAAA;;oBAFI,iBAAe,SAEnB;oBACF,cAAc,GAAG,cAAY,CAAC,EAAE,CAAA;oBAChC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,SAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,EAAA;;oBAAnF,SAAmF,CAAA;oBAE7E,eAAa,IAAI,cAAc,CAAC,EAAE,IAAI,MAAA,EAAE,UAAU,YAAA,EAAE,CAAC,CAAA;oBAC3D,qBAAM,YAAU,CAAC,YAAY,CAAC,YAAY,EAAE,gBAAgB,CAAC,EAAA;;oBAA7D,SAA6D,CAAA;oBAEhD,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,EAAA;;oBAA9E,IAAI,GAAG,SAAuE;oBACpF,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;oBACmB,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,qBAAqB,CAAC;4BACpF,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,SAAS,EAAE,SAAO,CAAC,EAAE;yBACtB,CAAC,EAAA;;oBAHM,iBAA2B,CAAA,SAGjC,CAAA,SAH4B;oBAI9B,cAAc,GAAG,cAAY,CAAC,EAAE,CAAA;wCAGpB,KAAK,EAAE,KAAK;;;wCACtB,qBAAM,UAAU,CACd,8CAAuC,KAAK,CAAE,EAC9C;;wCAAM,OAAA,YAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAO,CAAC,EAAE,EAAE,CAAA,SAAE,GAAC,KAAK,IAAG,KAAK,IAAS,CAAA,CAAC;oCAAxE,CAAwE,EAC9E,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,UAAG,KAAK,mCAAgC,EAAtD,CAAsD,EAAE,CAC5F,EAAA;;oCAJD,SAIC,CAAA;;;;;0BAL+F,EAArE,KAAA,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAO,CAAC,EAAE,CAAC,CAAC;;;yBAArE,CAAA,cAAqE,CAAA;oBAAvF,WAAc,EAAb,KAAK,QAAA,EAAE,KAAK,QAAA;kDAAZ,KAAK,EAAE,KAAK;;;;;oBAAK,IAAqE,CAAA;;;gBAQlG,sEAAsE;gBACtE,4CAA4C;gBAC5C,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAO,CAAC,EAAE,CAAC,EAAnC,CAAmC,EACzC,EAAE,QAAQ,EAAE,UAAA,CAAC,gBAAI,OAAA,CAAC,CAAA,MAAA,CAAC,CAAC,UAAU,0CAAE,MAAM,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,MAAM,CAAA,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,CAAA,EAAA,EAAE,CAC1F;oBAED,6EAA6E;kBAF5E;;oBAND,sEAAsE;oBACtE,4CAA4C;oBAC5C,SAIC,CAAA;wCAGW,KAAK,EAAE,KAAK;;;wCACtB,qBAAM,UAAU,CACd,oDAA6C,KAAK,CAAE,EACpD;;wCAAM,OAAA,YAAU,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE,CAAA,SAAE,GAAC,KAAK,IAAG,KAAK,IAAS,CAAA,CAAC;oCAAnF,CAAmF,EACzF,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,OAAO,KAAK,UAAG,KAAK,mCAAgC,EAAtD,CAAsD,EAAE,CAC5F,EAAA;;oCAJD,SAIC,CAAA;;;;;0BALyG,EAA/E,KAAA,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAY,CAAC,EAAE,CAAC,CAAC;;;yBAA/E,CAAA,cAA+E,CAAA;oBAAjG,WAAc,EAAb,KAAK,QAAA,EAAE,KAAK,QAAA;kDAAZ,KAAK,EAAE,KAAK;;;;;oBAAK,IAA+E,CAAA;;yBAQ5G,qBAAM,UAAU,CACd,6FAA6F,EAC7F,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,cAAY,CAAC,EAAE,CAAC,EAA9C,CAA8C,EACpD,EAAE,QAAQ,EAAE,UAAA,EAAE;;4BAAI,OAAA,CAChB,CAAC,EAAE,CAAC,iBAAiB,IAAI,CAAC,CAAA,MAAA,EAAE,CAAC,cAAc,0CAAE,MAAM,CAAA,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS;gCACnF,2FAA2F;mCACxF,EAAE,CAAC,SAAS,KAAK,SAAO,CAAC,EAAE,CAC/B,CAAA;yBAAA,EAAE,CACJ;oBAED,wEAAwE;kBAFvE;;oBARD,SAQC,CAAA;oBAED,wEAAwE;oBACxE,qBAAM,UAAU,CACd,2DAA2D,EAC3D,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAA1F,CAA0F,EAChG,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,KAAK,KAAK,cAAc,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAnD,CAAmD,EAAE,CACvE,EAAA;;oBALD,wEAAwE;oBACxE,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,0FAA0F,EAC1F,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,EAAzF,CAAyF,EAC/F,EAAE,QAAQ,EAAE,UAAA,EAAE,IAAI,OAAA,EAAE,CAAC,qBAAqB,KAAK,IAAI,EAAjC,CAAiC,EAAE,CACtD;wBAED,uFAAuF;sBAFtF;;oBAJD,SAIC,CAAA;oBAED,uFAAuF;oBACvF,qBAAM,UAAU,CACd,gGAAgG,EAChG,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAO,CAAC,EAAE,EAAE;4BAC3C,IAAI,EAAE,CAAC,eAAe,CAAC;4BACvB,UAAU,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC7B,UAAU,EAAE,uBAAuB;4BACnC,IAAI,EAAE,gBAAgB;4BACtB,MAAM,EAAE,kBAAkB;yBAC3B,CAAC,EANI,CAMJ,EACF,EAAE,QAAQ,EAAE,UAAA,CAAC;;gCAAI,OAAA,CACf,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;uCAChC,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,UAAU,0CAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;uCACzC,CAAC,CAAC,UAAU,KAAK,uBAAuB,CAC5C,CAAA;6BAAA,EAAE,CACJ,EAAA;;oBAfD,uFAAuF;oBACvF,SAcC,CAAA;oBACD,qBAAM,UAAU,CACd,gGAAgG,EAChG,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE;4BACtD,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;4BAC7C,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;4BACvF,IAAI,EAAE,CAAC,eAAe,CAAC;yBACxB,CAAC,EAJI,CAIJ,EACF,EAAE,QAAQ,EAAE,UAAA,EAAE;;gCAAI,OAAA,CAChB,CAAA,MAAA,MAAA,EAAE,CAAC,cAAc,0CAAG,CAAC,CAAC,0CAAE,IAAI,MAAK,OAAO;uCACrC,CAAA,MAAA,MAAA,EAAE,CAAC,cAAc,0CAAG,CAAC,CAAC,0CAAE,IAAI,MAAK,OAAO;uCACxC,CAAC,CAAC,CAAA,MAAA,EAAE,CAAC,IAAI,0CAAE,QAAQ,CAAC,eAAe,CAAC,CAAA,CACxC,CAAA;6BAAA,EAAE,CACJ;wBAED,6FAA6F;wBAC7F,4FAA4F;sBAH3F;;oBAZD,SAYC,CAAA;oBAED,6FAA6F;oBAC7F,4FAA4F;oBAC5F,qBAAM,UAAU,CACd,qEAAqE,EACrE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,cAAY,CAAC,EAAE,EAAE,CAAC,EAAjF,CAAiF,EACvF,EAAE,QAAQ,EAAE,UAAA,EAAE,IAAI,OAAA,EAAE,CAAC,SAAS,KAAK,cAAY,CAAC,EAAE,EAAhC,CAAgC,EAAE,CACrD,EAAA;;oBAND,6FAA6F;oBAC7F,4FAA4F;oBAC5F,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,iDAAiD,EACjD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,SAAO,CAAC,EAAE,EAAE,CAAC,EAA5E,CAA4E,EAClF,EAAE,QAAQ,EAAE,UAAA,EAAE,IAAI,OAAA,EAAE,CAAC,SAAS,KAAK,SAAO,CAAC,EAAE,EAA3B,CAA2B,EAAE,CAChD,EAAA;;oBAJD,SAIC,CAAA;;;yBAEG,cAAc,EAAd,yBAAc;;;;oBACV,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAAtD,SAAsD,CAAA;;;;;;yBAE1D,MAAM,EAAN,yBAAM;;;;oBACF,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAA;;oBAArC,SAAqC,CAAA;;;;;;yBAEzC,SAAS,EAAT,yBAAS;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAA;;oBAA3C,SAA2C,CAAA;;;;;;yBAE/C,cAAc,EAAd,yBAAc;;;;oBACV,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAAhD,SAAgD,CAAA;;;;;;;;;;CAG3D,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,gCAAgC,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAA5D,SAA4D,CAAA;;;;SAC7D,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAA;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAA;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.d.ts ADDED Viewed

@@ -0,0 +1,5 @@
+import { Check } from "../../setup_isolated";
+export declare const file_link_session_confinement_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
+export declare const file_link_session_confinement_tests: () => Promise<void>;
+//# sourceMappingURL=file-link-session-confinement.test.d.ts.map

package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"file-link-session-confinement.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/file-link-session-confinement.test.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,EAEN,MAAM,sBAAsB,CAAA;AA2D7B,eAAO,MAAM,oCAAoC,QAAa,QAAQ,KAAK,EAAE,CA4M5E,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,mCAAmC,qBAE/C,CAAA"}

package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.js ADDED Viewed

@@ -0,0 +1,349 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+require('source-map-support').install();
+import axios from "axios";
+import { assert_checks, setup_isolated_tenant, } from "../../setup_isolated";
+var host = process.env.API_URL || 'http://localhost:8080';
+var RAND = function () { return Math.random().toString(36).slice(2, 10); };
+var probe = function (method, path, o) {
+    if (o === void 0) { o = {}; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        var r;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, axios.request({
+                        method: method,
+                        url: "".concat(host, "/v1").concat(path),
+                        params: o.params,
+                        data: o.data,
+                        headers: o.token ? { Authorization: "Bearer ".concat(o.token) } : undefined,
+                        validateStatus: function () { return true; },
+                    })];
+                case 1:
+                    r = _a.sent();
+                    return [2 /*return*/, { status: r.status, body: r.data }];
+            }
+        });
+    });
+};
+export var file_link_session_confinement_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var checks, record, tenant, sdk_1, enduser_1, newFile, fileA_1, fileB_1, mint, adminFiles, confinement_probes, plain, shared, methods, send, verify, _a, header, payload, decoded, forged, forgedSend, send, e_1;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                checks = [];
+                record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
+                _b.label = 1;
+            case 1:
+                _b.trys.push([1, , 22, 27]);
+                return [4 /*yield*/, setup_isolated_tenant({
+                        name: "FileLink ".concat(RAND()), users: [{ isAdmin: true }], apiKeys: 0,
+                    })];
+            case 2:
+                tenant = _b.sent();
+                sdk_1 = tenant.sdk;
+                return [4 /*yield*/, sdk_1.api.endusers.createOne({
+                        fname: 'FileLink', lname: 'Recipient',
+                        email: "dontsend-filelink-".concat(RAND(), "@tellescope.com"),
+                        phone: '+15555550100',
+                        dateOfBirth: '01-01-1990',
+                    })
+                    // No S3 upload needed: prepare_file_upload inserts the files record with its secureName
+                    // immediately, and file_download_URL only SIGNS a GET url — it never checks the object exists.
+                ];
+            case 3:
+                enduser_1 = _b.sent();
+                newFile = function (name) { return __awaiter(void 0, void 0, void 0, function () {
+                    return __generator(this, function (_a) {
+                        switch (_a.label) {
+                            case 0: return [4 /*yield*/, sdk_1.api.files.prepare_file_upload({
+                                    name: name,
+                                    type: 'application/pdf', size: 1000, enduserId: enduser_1.id,
+                                })];
+                            case 1: return [2 /*return*/, ((_a.sent()).file)];
+                        }
+                    });
+                }); };
+                return [4 /*yield*/, newFile("shared-".concat(RAND(), ".pdf"))]; // the one that gets shared
+            case 4:
+                fileA_1 = _b.sent() // the one that gets shared
+                ;
+                return [4 /*yield*/, newFile("private-".concat(RAND(), ".pdf"))
+                    /**
+                     * Mints a token exactly the way a real send does — get_templated_message is the endpoint the
+                     * worker calls (worker/app.js handleOutgoingEmail).
+                     *
+                     * replaceLinks always rewrites the resolved link into a tracking redirect, so `plaintext` holds
+                     * `doc (${API_URL}/r/<redirectToken>)` rather than the portal URL. Follow the 302 to recover it.
+                     */
+                ]; // the rest of the patient's chart
+            case 5:
+                fileB_1 = _b.sent() // the rest of the patient's chart
+                ;
+                mint = function (verb) { return __awaiter(void 0, void 0, void 0, function () {
+                    var plaintext, redirectURL, r, location, token;
+                    var _a, _b;
+                    return __generator(this, function (_c) {
+                        switch (_c.label) {
+                            case 0: return [4 /*yield*/, sdk_1.api.templates.get_templated_message({
+                                    channel: 'Email',
+                                    userId: tenant.users[0].id,
+                                    enduserId: enduser_1.id,
+                                    message: "{{files.".concat(fileA_1.id, ".").concat(verb, ":doc}}"),
+                                })];
+                            case 1:
+                                plaintext = (_c.sent()).plaintext;
+                                redirectURL = (_a = plaintext.match(/\((https?:\/\/[^)\s]+)\)/)) === null || _a === void 0 ? void 0 : _a[1];
+                                if (!redirectURL)
+                                    return [2 /*return*/, { token: undefined, detail: "no link resolved from: ".concat(plaintext) }];
+                                return [4 /*yield*/, axios.get(redirectURL, { maxRedirects: 0, validateStatus: function () { return true; } })];
+                            case 2:
+                                r = _c.sent();
+                                location = r.headers['location'];
+                                if (!location)
+                                    return [2 /*return*/, { token: undefined, detail: "redirect did not 302 (".concat(r.status, ")") }];
+                                token = (_b = new URL(location).searchParams.get('token')) !== null && _b !== void 0 ? _b : undefined;
+                                return [2 /*return*/, { token: token, detail: token ? 'minted' : "no token in ".concat(location) }];
+                        }
+                    });
+                }); };
+                return [4 /*yield*/, probe('get', '/files', { token: tenant.users[0].authToken })];
+            case 6:
+                adminFiles = _b.sent();
+                record('control: admin session lists files', adminFiles.status === 200, "status ".concat(adminFiles.status));
+                confinement_probes = function (variant, token) { return __awaiter(void 0, void 0, void 0, function () {
+                    var p, _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, refreshed, leaked, refreshedToken, _s, _t, _u, _v;
+                    var _w;
+                    return __generator(this, function (_x) {
+                        switch (_x.label) {
+                            case 0:
+                                p = function (label, expected, r) { return record("".concat(variant, " \u2014 ").concat(label), r.status === expected, "status ".concat(r.status, " (expected ").concat(expected, ")")); };
+                                _a = p;
+                                _b = ['1: downloads the shared file', 200];
+                                return [4 /*yield*/, probe('get', '/file-download-URL', { token: token, params: { secureName: fileA_1.secureName } })];
+                            case 1:
+                                _a.apply(void 0, _b.concat([_x.sent()]));
+                                _c = p;
+                                _d = ['2: cannot download another file on the same patient', 403];
+                                return [4 /*yield*/, probe('get', '/file-download-URL', { token: token, params: { secureName: fileB_1.secureName } })];
+                            case 2:
+                                _c.apply(void 0, _d.concat([_x.sent()]));
+                                // validateInput merges query, then body, then params — body wins over query, so a pin checked
+                                // against req.query rather than req.validated would be sidesteppable exactly like this.
+                                _e = p;
+                                _f = ['3: cannot smuggle another secureName through the body', 403];
+                                return [4 /*yield*/, probe('get', '/file-download-URL', {
+                                        token: token,
+                                        params: { secureName: fileA_1.secureName }, data: { secureName: fileB_1.secureName },
+                                    })];
+                            case 3:
+                                // validateInput merges query, then body, then params — body wins over query, so a pin checked
+                                // against req.query rather than req.validated would be sidesteppable exactly like this.
+                                _e.apply(void 0, _f.concat([_x.sent()]));
+                                // a listing would turn the pin into a directory of the patient's chart
+                                _g = p;
+                                _h = ['4: cannot list files', 403];
+                                return [4 /*yield*/, probe('get', '/files', { token: token })];
+                            case 4:
+                                // a listing would turn the pin into a directory of the patient's chart
+                                _g.apply(void 0, _h.concat([_x.sent()]));
+                                _j = p;
+                                _k = ['5a: cannot read chats', 403];
+                                return [4 /*yield*/, probe('get', '/chats', { token: token })];
+                            case 5:
+                                _j.apply(void 0, _k.concat([_x.sent()]));
+                                _l = p;
+                                _m = ['5b: cannot read form responses', 403];
+                                return [4 /*yield*/, probe('get', '/form-responses', { token: token })];
+                            case 6:
+                                _l.apply(void 0, _m.concat([_x.sent()]));
+                                _o = p;
+                                _p = ['5c: cannot read observations', 403];
+                                return [4 /*yield*/, probe('get', '/enduser-observations', { token: token })];
+                            case 7:
+                                _o.apply(void 0, _p.concat([_x.sent()]));
+                                _q = p;
+                                _r = ['6: cannot update the patient', 403];
+                                return [4 /*yield*/, probe('patch', "/enduser/".concat(enduser_1.id), { token: token, data: { updates: { fname: 'Overwritten' } } })];
+                            case 8:
+                                _q.apply(void 0, _r.concat([_x.sent()]));
+                                return [4 /*yield*/, probe('post', '/refresh-enduser-session', { token: token })];
+                            case 9:
+                                refreshed = _x.sent();
+                                p('7: can refresh its own session', 200, refreshed);
+                                leaked = ['dateOfBirth', 'email', 'phone', 'fields', 'insurance', 'lname']
+                                    .filter(function (f) { var _a, _b; return ((_b = (_a = refreshed.body) === null || _a === void 0 ? void 0 : _a.enduser) !== null && _b !== void 0 ? _b : {})[f] !== undefined; });
+                                record("".concat(variant, " \u2014 7b: refresh response withholds patient fields"), refreshed.status === 200 && leaked.length === 0, leaked.length ? "leaked: ".concat(leaked.join(', ')) : 'no patient fields in payload');
+                                refreshedToken = (_w = refreshed.body) === null || _w === void 0 ? void 0 : _w.authToken;
+                                if (!(typeof refreshedToken === 'string' && refreshedToken)) return [3 /*break*/, 12];
+                                _s = p;
+                                _t = ['8a: refreshed token still cannot download another file', 403];
+                                return [4 /*yield*/, probe('get', '/file-download-URL', {
+                                        token: refreshedToken, params: { secureName: fileB_1.secureName },
+                                    })];
+                            case 10:
+                                _s.apply(void 0, _t.concat([_x.sent()]));
+                                _u = p;
+                                _v = ['8b: refreshed token still cannot update the patient', 403];
+                                return [4 /*yield*/, probe('patch', "/enduser/".concat(enduser_1.id), {
+                                        token: refreshedToken, data: { updates: { fname: 'Overwritten' } },
+                                    })];
+                            case 11:
+                                _u.apply(void 0, _v.concat([_x.sent()]));
+                                return [3 /*break*/, 13];
+                            case 12:
+                                record("".concat(variant, " \u2014 8: refreshed token available"), false, 'refresh returned no authToken');
+                                _x.label = 13;
+                            case 13: return [2 /*return*/];
+                        }
+                    });
+                }); };
+                return [4 /*yield*/, mint('link')];
+            case 7:
+                plain = _b.sent();
+                if (!plain.token) return [3 /*break*/, 9];
+                return [4 /*yield*/, confinement_probes('link', plain.token)];
+            case 8:
+                _b.sent();
+                return [3 /*break*/, 10];
+            case 9:
+                record('link — minted', false, plain.detail);
+                _b.label = 10;
+            case 10: return [4 /*yield*/, mint('shared-link')];
+            case 11:
+                shared = _b.sent();
+                if (!shared.token) return [3 /*break*/, 13];
+                return [4 /*yield*/, confinement_probes('shared-link', shared.token)];
+            case 12:
+                _b.sent();
+                return [3 /*break*/, 14];
+            case 13:
+                // Before the shared-link verb exists the merge field does not resolve. Record it and skip the
+                // shared probes rather than throwing, so the first run reports the whole picture at once.
+                record('shared-link — minted', false, shared.detail);
+                _b.label = 14;
+            case 14:
+                if (!shared.token) return [3 /*break*/, 19];
+                return [4 /*yield*/, probe('get', '/endusers/otp-methods', { params: { token: shared.token } })];
+            case 15:
+                methods = _b.sent();
+                record('shared-link — 9: OTP methods are not offered', methods.status === 403, "status ".concat(methods.status, " (expected 403)"));
+                return [4 /*yield*/, probe('post', '/endusers/send-otp-code', {
+                        data: { token: shared.token, method: 'email' },
+                    })];
+            case 16:
+                send = _b.sent();
+                record('shared-link — 10: cannot make us send the patient a login code', send.status === 403, "status ".concat(send.status, " (expected 403)"));
+                return [4 /*yield*/, probe('post', '/endusers/verify-otp-code', {
+                        data: { token: shared.token, code: '000000' },
+                    })];
+            case 17:
+                verify = _b.sent();
+                record('shared-link — 11: OTP verification refuses the scope before checking the code', verify.status === 403, "status ".concat(verify.status, " (expected 403, 400 = reached the code check)"));
+                _a = shared.token.split('.'), header = _a[0], payload = _a[1];
+                decoded = JSON.parse(Buffer.from(payload, 'base64url').toString());
+                delete decoded.sessionScopes;
+                delete decoded.scopeContext;
+                forged = [
+                    header,
+                    Buffer.from(JSON.stringify(decoded)).toString('base64url'),
+                    'not-a-real-signature',
+                ].join('.');
+                return [4 /*yield*/, probe('post', '/endusers/send-otp-code', {
+                        data: { token: forged, method: 'email' },
+                    })];
+            case 18:
+                forgedSend = _b.sent();
+                record('shared-link — 12: a forged token cannot strip the scope to unlock OTP', forgedSend.status === 403 || forgedSend.status === 401 || forgedSend.status === 404, "status ".concat(forgedSend.status, " (expected 401/403/404; 204 = signature never verified)"));
+                _b.label = 19;
+            case 19:
+                if (!plain.token) return [3 /*break*/, 21];
+                return [4 /*yield*/, probe('post', '/endusers/send-otp-code', {
+                        data: { token: plain.token, method: 'email' },
+                    })];
+            case 20:
+                send = _b.sent();
+                record('link — 13: patient OTP recovery still works', send.status === 204, "status ".concat(send.status, " (expected 204)"));
+                _b.label = 21;
+            case 21: return [3 /*break*/, 27];
+            case 22:
+                if (!tenant) return [3 /*break*/, 26];
+                _b.label = 23;
+            case 23:
+                _b.trys.push([23, 25, , 26]);
+                return [4 /*yield*/, tenant.teardown()];
+            case 24:
+                _b.sent();
+                return [3 /*break*/, 26];
+            case 25:
+                e_1 = _b.sent();
+                console.error('teardown failed', e_1);
+                return [3 /*break*/, 26];
+            case 26: return [7 /*endfinally*/];
+            case 27: return [2 /*return*/, checks];
+        }
+    });
+}); };
+/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
+export var file_link_session_confinement_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _a = assert_checks;
+                _b = ['Shared file link session confinement'];
+                return [4 /*yield*/, file_link_session_confinement_checks()];
+            case 1:
+                _a.apply(void 0, _b.concat([_c.sent()]));
+                return [2 /*return*/];
+        }
+    });
+}); };
+// Allow running this test file independently
+if (require.main === module) {
+    console.log("\uD83C\uDF10 Using API URL: ".concat(host));
+    file_link_session_confinement_tests()
+        .then(function () {
+        console.log("✅ file link session confinement test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ file link session confinement test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=file-link-session-confinement.test.js.map

package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"file-link-session-confinement.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/file-link-session-confinement.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,OAAO,EACL,aAAa,EAEb,qBAAqB,GACtB,MAAM,sBAAsB,CAAA;AAE7B,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAuC1D,IAAM,KAAK,GAAG,UACZ,MAAgC,EAChC,IAAY,EACZ,CAA0D;IAA1D,kBAAA,EAAA,MAA0D;;;;;wBAEhD,qBAAM,KAAK,CAAC,OAAO,CAAC;wBAC5B,MAAM,QAAA;wBACN,GAAG,EAAE,UAAG,IAAI,gBAAM,IAAI,CAAE;wBACxB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,iBAAU,CAAC,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,CAAC,SAAS;wBACrE,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;qBAC3B,CAAC,EAAA;;oBAPI,CAAC,GAAG,SAOR;oBACF,sBAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAA;;;;CAC1C,CAAA;AAED,MAAM,CAAC,IAAM,oCAAoC,GAAG;;;;;gBAC5C,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;;;;gBAK1F,qBAAM,qBAAqB,CAAC;wBACnC,IAAI,EAAE,mBAAY,IAAI,EAAE,CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;qBACnE,CAAC,EAAA;;gBAFF,MAAM,GAAG,SAEP,CAAA;gBACI,QAAM,MAAM,CAAC,GAAG,CAAA;gBAGN,qBAAM,KAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;wBAC/C,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW;wBACrC,KAAK,EAAE,4BAAqB,IAAI,EAAE,oBAAiB;wBACnD,KAAK,EAAE,cAAc;wBACrB,WAAW,EAAE,YAAY;qBAC1B,CAAC;oBAEF,wFAAwF;oBACxF,+FAA+F;kBAH7F;;gBALI,YAAU,SAKd;gBAII,OAAO,GAAG,UAAO,IAAY;;;oCAChC,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC;oCACvC,IAAI,MAAA;oCAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAO,CAAC,EAAE;iCACjE,CAAC,EAAA;oCAHoC,sBAAA,CACtC,CAAC,SAEC,CAAC,CAAC,IAAI,CACT,EAAA;;;qBAAA,CAAA;gBACa,qBAAM,OAAO,CAAC,iBAAU,IAAI,EAAE,SAAM,CAAC,EAAA,CAAG,2BAA2B;;gBAA3E,UAAQ,SAAqC,CAAG,2BAA2B;gBAA9B;gBACrC,qBAAM,OAAO,CAAC,kBAAW,IAAI,EAAE,SAAM,CAAC;oBAEpD;;;;;;uBAMG;kBARiD,CAAE,kCAAkC;;gBAAlF,UAAQ,SAAsC,CAAE,kCAAkC;gBAApC;gBAS9C,IAAI,GAAG,UAAO,IAA4B;;;;;oCACxB,qBAAM,KAAG,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC;oCAClE,OAAO,EAAE,OAAO;oCAChB,MAAM,EAAE,MAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;oCAC3B,SAAS,EAAE,SAAO,CAAC,EAAE;oCACrB,OAAO,EAAE,kBAAW,OAAK,CAAC,EAAE,cAAI,IAAI,WAAQ;iCAC7C,CAAC,EAAA;;gCALM,SAAS,GAAK,CAAA,SAKpB,CAAA,UALe;gCAOX,WAAW,GAAG,MAAA,SAAS,CAAC,KAAK,CAAC,0BAA0B,CAAC,0CAAG,CAAC,CAAC,CAAA;gCACpE,IAAI,CAAC,WAAW;oCAAE,sBAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,iCAA0B,SAAS,CAAE,EAAE,EAAA;gCAElF,qBAAM,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAAC,EAAA;;gCAAjF,CAAC,GAAG,SAA6E;gCACjF,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;gCACtC,IAAI,CAAC,QAAQ;oCAAE,sBAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,gCAAyB,CAAC,CAAC,MAAM,MAAG,EAAE,EAAA;gCAElF,KAAK,GAAG,MAAA,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAI,SAAS,CAAA;gCACtE,sBAAO,EAAE,KAAK,OAAA,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAe,QAAQ,CAAE,EAAE,EAAA;;;qBACvE,CAAA;gBAKkB,qBAAM,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,EAAA;;gBAA/E,UAAU,GAAG,SAAkE;gBACrF,MAAM,CACJ,oCAAoC,EACpC,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,iBAAU,UAAU,CAAC,MAAM,CAAE,CACzD,CAAA;gBAEK,kBAAkB,GAAG,UAAO,OAA+B,EAAE,KAAa;;;;;;gCACxE,CAAC,GAAG,UAAC,KAAa,EAAE,QAAgB,EAAE,CAAQ,IAAK,OAAA,MAAM,CAC7D,UAAG,OAAO,qBAAM,KAAK,CAAE,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,iBAAU,CAAC,CAAC,MAAM,wBAAc,QAAQ,MAAG,CAC5F,EAFwD,CAExD,CAAA;gCAED,KAAA,CAAC,CAAA;sCAAC,8BAA8B,EAAE,GAAG;gCACnC,qBAAM,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE,EAAE,KAAK,OAAA,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,OAAK,CAAC,UAAU,EAAE,EAAE,CAAC,EAAA;;gCAD/F,4BACE,SAA6F,GAAC,CAAA;gCAEhG,KAAA,CAAC,CAAA;sCAAC,qDAAqD,EAAE,GAAG;gCAC1D,qBAAM,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE,EAAE,KAAK,OAAA,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,OAAK,CAAC,UAAU,EAAE,EAAE,CAAC,EAAA;;gCAD/F,4BACE,SAA6F,GAAC,CAAA;gCAEhG,8FAA8F;gCAC9F,wFAAwF;gCACxF,KAAA,CAAC,CAAA;sCAAC,uDAAuD,EAAE,GAAG;gCAC5D,qBAAM,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE;wCACvC,KAAK,OAAA;wCAAE,MAAM,EAAE,EAAE,UAAU,EAAE,OAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,OAAK,CAAC,UAAU,EAAE;qCACxF,CAAC,EAAA;;gCALJ,8FAA8F;gCAC9F,wFAAwF;gCACxF,4BACE,SAEE,GAAC,CAAA;gCAEL,uEAAuE;gCACvE,KAAA,CAAC,CAAA;sCAAC,sBAAsB,EAAE,GAAG;gCAAE,qBAAM,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gCADtE,uEAAuE;gCACvE,4BAA+B,SAAuC,GAAC,CAAA;gCAEvE,KAAA,CAAC,CAAA;sCAAC,uBAAuB,EAAE,GAAG;gCAAE,qBAAM,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gCAAvE,4BAAgC,SAAuC,GAAC,CAAA;gCACxE,KAAA,CAAC,CAAA;sCAAC,gCAAgC,EAAE,GAAG;gCAAE,qBAAM,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gCAAzF,4BAAyC,SAAgD,GAAC,CAAA;gCAC1F,KAAA,CAAC,CAAA;sCAAC,8BAA8B,EAAE,GAAG;gCAAE,qBAAM,KAAK,CAAC,KAAK,EAAE,uBAAuB,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gCAA7F,4BAAuC,SAAsD,GAAC,CAAA;gCAE9F,KAAA,CAAC,CAAA;sCAAC,8BAA8B,EAAE,GAAG;gCACnC,qBAAM,KAAK,CAAC,OAAO,EAAE,mBAAY,SAAO,CAAC,EAAE,CAAE,EAAE,EAAE,KAAK,OAAA,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,EAAA;;gCADxG,4BACE,SAAsG,GAAC,CAAA;gCAEvF,qBAAM,KAAK,CAAC,MAAM,EAAE,0BAA0B,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gCAAtE,SAAS,GAAG,SAA0D;gCAC5E,CAAC,CAAC,gCAAgC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;gCAG7C,MAAM,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC;qCAC7E,MAAM,CAAC,UAAA,CAAC,gBAAI,OAAA,CAAC,MAAA,MAAA,SAAS,CAAC,IAAI,0CAAE,OAAO,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAA,EAAA,CAAC,CAAA;gCAChE,MAAM,CACJ,UAAG,OAAO,0DAAkD,EAC5D,SAAS,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAAC,CAAC,CAAC,8BAA8B,CAChF,CAAA;gCAGK,cAAc,GAAG,MAAA,SAAS,CAAC,IAAI,0CAAE,SAAS,CAAA;qCAC5C,CAAA,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAA,EAApD,yBAAoD;gCACtD,KAAA,CAAC,CAAA;sCAAC,wDAAwD,EAAE,GAAG;gCAC7D,qBAAM,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE;wCACvC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,OAAK,CAAC,UAAU,EAAE;qCAChE,CAAC,EAAA;;gCAHJ,4BACE,SAEE,GAAC,CAAA;gCACL,KAAA,CAAC,CAAA;sCAAC,qDAAqD,EAAE,GAAG;gCAC1D,qBAAM,KAAK,CAAC,OAAO,EAAE,mBAAY,SAAO,CAAC,EAAE,CAAE,EAAE;wCAC7C,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;qCACnE,CAAC,EAAA;;gCAHJ,4BACE,SAEE,GAAC,CAAA;;;gCAEL,MAAM,CAAC,UAAG,OAAO,yCAAiC,EAAE,KAAK,EAAE,+BAA+B,CAAC,CAAA;;;;;qBAE9F,CAAA;gBAEa,qBAAM,IAAI,CAAC,MAAM,CAAC,EAAA;;gBAA1B,KAAK,GAAG,SAAkB;qBAC5B,KAAK,CAAC,KAAK,EAAX,wBAAW;gBACb,qBAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAAA;;gBAA7C,SAA6C,CAAA;;;gBAE7C,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;;qBAG/B,qBAAM,IAAI,CAAC,aAAa,CAAC,EAAA;;gBAAlC,MAAM,GAAG,SAAyB;qBACpC,MAAM,CAAC,KAAK,EAAZ,yBAAY;gBACd,qBAAM,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,EAAA;;gBAArD,SAAqD,CAAA;;;gBAErD,8FAA8F;gBAC9F,0FAA0F;gBAC1F,MAAM,CAAC,sBAAsB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;;;qBAKlD,MAAM,CAAC,KAAK,EAAZ,yBAAY;gBACE,qBAAM,KAAK,CAAC,KAAK,EAAE,uBAAuB,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,EAAA;;gBAA1F,OAAO,GAAG,SAAgF;gBAChG,MAAM,CACJ,8CAA8C,EAC9C,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,iBAAU,OAAO,CAAC,MAAM,oBAAiB,CAClE,CAAA;gBAEY,qBAAM,KAAK,CAAC,MAAM,EAAE,yBAAyB,EAAE;wBAC1D,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;qBAC/C,CAAC,EAAA;;gBAFI,IAAI,GAAG,SAEX;gBACF,MAAM,CACJ,gEAAgE,EAChE,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,iBAAU,IAAI,CAAC,MAAM,oBAAiB,CAC5D,CAAA;gBAGc,qBAAM,KAAK,CAAC,MAAM,EAAE,2BAA2B,EAAE;wBAC9D,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC9C,CAAC,EAAA;;gBAFI,MAAM,GAAG,SAEb;gBACF,MAAM,CACJ,+EAA+E,EAC/E,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,iBAAU,MAAM,CAAC,MAAM,kDAA+C,CAC9F,CAAA;gBAKK,KAAoB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAA1C,MAAM,QAAA,EAAE,OAAO,QAAA,CAA2B;gBAC3C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;gBACxE,OAAO,OAAO,CAAC,aAAa,CAAA;gBAC5B,OAAO,OAAO,CAAC,YAAY,CAAA;gBACrB,MAAM,GAAG;oBACb,MAAM;oBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAC1D,sBAAsB;iBACvB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAEQ,qBAAM,KAAK,CAAC,MAAM,EAAE,yBAAyB,EAAE;wBAChE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;qBACzC,CAAC,EAAA;;gBAFI,UAAU,GAAG,SAEjB;gBACF,MAAM,CACJ,uEAAuE,EACvE,UAAU,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EACnF,iBAAU,UAAU,CAAC,MAAM,4DAAyD,CACrF,CAAA;;;qBAGC,KAAK,CAAC,KAAK,EAAX,yBAAW;gBAGA,qBAAM,KAAK,CAAC,MAAM,EAAE,yBAAyB,EAAE;wBAC1D,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;qBAC9C,CAAC,EAAA;;gBAFI,IAAI,GAAG,SAEX;gBACF,MAAM,CACJ,6CAA6C,EAC7C,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,iBAAU,IAAI,CAAC,MAAM,oBAAiB,CAC5D,CAAA;;;;qBAKC,MAAM,EAAN,yBAAM;;;;gBAAU,qBAAM,MAAM,CAAC,QAAQ,EAAE,EAAA;;gBAAvB,SAAuB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAG/F,sBAAO,MAAM,EAAA;;;KACd,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,IAAM,mCAAmC,GAAG;;;;;gBACjD,KAAA,aAAa,CAAA;sBAAC,sCAAsC;gBAAE,qBAAM,oCAAoC,EAAE,EAAA;;gBAAlG,4BAAsD,SAA4C,GAAC,CAAA;;;;KACpG,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,mCAAmC,EAAE;SAClC,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAA;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAA;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js CHANGED Viewed

@@ -38,7 +38,7 @@ require('source-map-support').install();
 import axios from "axios";
 import { Session } from "../../../sdk";
 import { async_test, log_header, wait, } from "@tellescope/testing";
-import { setup_tests } from "../../setup";
+import { reset_test_tenant, setup_tests } from "../../setup";
 var host = process.env.API_URL || 'http://localhost:8080';
 var CROSS_ORG_API_KEY = process.env.CROSS_ORG_API_KEY;
 var CROSS_ORG_TARGET_BUSINESS_ID = process.env.CROSS_ORG_TARGET_BUSINESS_ID;
@@ -99,7 +99,7 @@ export var invite_user_enumeration_tests = function (_a) {
                 case 0:
                     log_header("users.invite_user cross-tenant enumeration regression");
                     // Reset state so prior tests' rate-limit accounting doesn't leak in.
-                    return [4 /*yield*/, sdk.reset_db()];
+                    return [4 /*yield*/, reset_test_tenant(sdk)];
                 case 1:
                     // Reset state so prior tests' rate-limit accounting doesn't leak in.
                     _f.sent();
@@ -155,7 +155,7 @@ export var invite_user_enumeration_tests = function (_a) {
                     // ====================================================================
                     // Let rate limit decay so this single call isn't blocked.
                     _f.sent();
-                    return [4 /*yield*/, sdk.reset_db()];
+                    return [4 /*yield*/, reset_test_tenant(sdk)];
                 case 8:
                     _f.sent();
                     return [4 /*yield*/, post('/v1/invite-user-to-organization', {

package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"invite-user-enumeration.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/invite-user-enumeration.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EACL,UAAU,EACV,UAAU,EACV,IAAI,GACL,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;~~AAEzC~~,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;AACvD,IAAM,4BAA4B,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;AAE7E,IAAM,IAAI,GAAG,UAAO,IAAY,EAAE,IAAS,EAAE,OAAoC;IAApC,wBAAA,EAAA,YAAoC;;;;;;;;oBAEjE,qBAAM,KAAK,CAAC,IAAI,CAAC,UAAG,IAAI,SAAG,IAAI,CAAE,EAAE,IAAI,EAAE;4BACnD,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;4BAC1B,OAAO,SAAA;yBACR,CAAC,EAAA;;oBAHI,GAAG,GAAG,SAGV;oBACF,sBAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAA;;;oBAE7C,sBAAO,EAAE,MAAM,EAAE,MAAA,KAAG,aAAH,KAAG,uBAAH,KAAG,CAAE,QAAQ,0CAAE,MAAM,EAAE,IAAI,EAAE,MAAA,KAAG,aAAH,KAAG,uBAAH,KAAG,CAAE,QAAQ,0CAAE,IAAI,EAAE,EAAA;;;;;CAEtE,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,IAAM,6BAA6B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;;oBACpE,UAAU,CAAC,uDAAuD,CAAC,CAAA;oBAEnE,qEAAqE;oBACrE,qBAAM,~~GAAG~~,CAAC,~~QAAQ~~,~~EAAE~~,EAAA;;~~oBADpB~~,qEAAqE;oBACrE,~~SAAoB~~,CAAA;~~oBAEd~~,cAAc,GAAG,MAAA,MAAA,GAAG,CAAC,QAAQ,CAAC,eAAe,0CAAG,CAAC,CAAC,mCAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAA;oBAI7E,uBAAuB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAW,CAAA;oBAQnD,aAAa,GAAG,CAAC,CAAC,CAAA;oBACb,CAAC,GAAG,CAAC;;;yBAAE,CAAA,CAAC,GAAG,EAAE,CAAA;oBACV,qBAAM,IAAI,CAClB,iCAAiC,EACjC;4BACE,KAAK,EAAE,uBAAuB;4BAC9B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW;4BAClC,cAAc,gBAAA;yBACf,EACD,EAAE,aAAa,EAAE,iBAAU,GAAG,CAAC,SAAS,CAAE,EAAE,CAC7C,EAAA;;oBARK,CAAC,GAAG,SAQT;oBACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE;wBACpB,aAAa,GAAG,CAAC,CAAA;wBACjB,wBAAK;qBACN;;;oBAbqB,CAAC,EAAE,CAAA;;wBAgB3B,qBAAM,UAAU,CACd,uFAAuF,EACvF;wBAAY,sBAAA,CAAC,EAAE,aAAa,eAAA,EAAE,CAAC,EAAA;6BAAA,EAC/B,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,EAAE,EAA7C,CAA6C,EAAE,CACjE;oBAED,uEAAuE;oBACvE,mEAAmE;oBACnE,oEAAoE;oBACpE,qEAAqE;oBACrE,kCAAkC;oBAClC,uEAAuE;oBACvE,0DAA0D;kBARzD;;oBAJD,SAIC,CAAA;oBAED,uEAAuE;oBACvE,mEAAmE;oBACnE,oEAAoE;oBACpE,qEAAqE;oBACrE,kCAAkC;oBAClC,uEAAuE;oBACvE,0DAA0D;oBAC1D,qBAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;oBAP3B,uEAAuE;oBACvE,mEAAmE;oBACnE,oEAAoE;oBACpE,qEAAqE;oBACrE,kCAAkC;oBAClC,uEAAuE;oBACvE,0DAA0D;oBAC1D,SAA2B,CAAA;oBAC3B,qBAAM,~~GAAG~~,CAAC,~~QAAQ~~,~~EAAE~~,EAAA;;~~oBAApB~~,~~SAAoB~~,CAAA;~~oBAEE~~,qBAAM,IAAI,CAC9B,iCAAiC,EACjC;4BACE,KAAK,EAAE,uBAAuB;4BAC9B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY;4BACnC,cAAc,gBAAA;yBACf,EACD,EAAE,aAAa,EAAE,iBAAU,GAAG,CAAC,SAAS,CAAE,EAAE,CAC7C,EAAA;;oBARK,aAAa,GAAG,SAQrB;oBAED,qBAAM,UAAU,CACd,4EAA4E,EAC5E;;;gCAAY,sBAAA,CAAC;wCACX,MAAM,EAAE,aAAa,CAAC,MAAM;wCAC5B,OAAO,EAAE,MAAA,MAAA,aAAa,CAAC,IAAI,0CAAE,OAAO,mCAAI,EAAE;qCAC3C,CAAC,EAAA;;6BAAA,EACF,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAtE,CAAsE,EAAE,CAC1F;wBAED,uEAAuE;wBACvE,gEAAgE;wBAChE,0DAA0D;wBAC1D,uEAAuE;sBALtE;;oBAPD,SAOC,CAAA;oBAED,uEAAuE;oBACvE,gEAAgE;oBAChE,0DAA0D;oBAC1D,uEAAuE;oBACvE,IAAI,CAAC,CAAC,iBAAiB,IAAI,4BAA4B,CAAC,EAAE;wBACxD,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAA;wBAC5F,sBAAM;qBACP;oBAOK,WAAW,GAAG,IAAI,OAAO,CAAC;wBAC9B,IAAI,MAAA;wBACJ,MAAM,EAAE,iBAAiB;wBACzB,OAAO,EAAE,EAAE,2BAA2B,EAAE,4BAA4B,EAAE;qBACvE,CAAC,CAAA;oBAGE,WAAW,GAAG,4BAA4B,CAAA;;;;oBAE/B,qBAAM,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAhE,IAAI,GAAG,SAAyD;oBACtE,IAAI,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,EAAE;wBAAE,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;;;;;yBAG5B,qBAAM,IAAI,CACzB,iCAAiC,EACjC;wBACE,KAAK,EAAE,uBAAuB;wBAC9B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB;wBACzC,cAAc,EAAE,WAAW;qBAC5B,EACD;wBACE,aAAa,EAAE,kBAAW,iBAAiB,CAAE;wBAC7C,2BAA2B,EAAE,4BAA4B;qBAC1D,CACF,EAAA;;oBAXK,QAAQ,GAAG,SAWhB;oBAED,qBAAM,UAAU,CACd,yFAAyF,EACzF;;;gCAAY,sBAAA,CAAC;wCACX,MAAM,EAAE,QAAQ,CAAC,MAAM;wCACvB,OAAO,EAAE,MAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,OAAO,mCAAI,EAAE;wCACrC,eAAe,EAAE,CAAC,CAAC,CAAA,MAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,OAAO,0CAAE,EAAE,CAAA;qCAC9C,CAAC,EAAA;;6BAAA,EACF;4BACE,QAAQ,EAAE,UAAA,CAAC;gCACT,kFAAkF;gCAClF,qFAAqF;gCACrF,gFAAgF;gCAChF,OAAA,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;4BAAnD,CAAmD;yBACtD,CACF,EAAA;;oBAdD,SAcC,CAAA;;;;;CACF,CAAA;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,6BAA6B,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAzD,SAAyD,CAAA;;;;SAC1D,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAA;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAA;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
1	+ {"version":3,"file":"invite-user-enumeration.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/invite-user-enumeration.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EACL,UAAU,EACV,UAAU,EACV,IAAI,GACL,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE5D,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;AACvD,IAAM,4BAA4B,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;AAE7E,IAAM,IAAI,GAAG,UAAO,IAAY,EAAE,IAAS,EAAE,OAAoC;IAApC,wBAAA,EAAA,YAAoC;;;;;;;;oBAEjE,qBAAM,KAAK,CAAC,IAAI,CAAC,UAAG,IAAI,SAAG,IAAI,CAAE,EAAE,IAAI,EAAE;4BACnD,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;4BAC1B,OAAO,SAAA;yBACR,CAAC,EAAA;;oBAHI,GAAG,GAAG,SAGV;oBACF,sBAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAA;;;oBAE7C,sBAAO,EAAE,MAAM,EAAE,MAAA,KAAG,aAAH,KAAG,uBAAH,KAAG,CAAE,QAAQ,0CAAE,MAAM,EAAE,IAAI,EAAE,MAAA,KAAG,aAAH,KAAG,uBAAH,KAAG,CAAE,QAAQ,0CAAE,IAAI,EAAE,EAAA;;;;;CAEtE,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,IAAM,6BAA6B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;;oBACpE,UAAU,CAAC,uDAAuD,CAAC,CAAA;oBAEnE,qEAAqE;oBACrE,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAD5B,qEAAqE;oBACrE,SAA4B,CAAA;oBAEtB,cAAc,GAAG,MAAA,MAAA,GAAG,CAAC,QAAQ,CAAC,eAAe,0CAAG,CAAC,CAAC,mCAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAA;oBAI7E,uBAAuB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAW,CAAA;oBAQnD,aAAa,GAAG,CAAC,CAAC,CAAA;oBACb,CAAC,GAAG,CAAC;;;yBAAE,CAAA,CAAC,GAAG,EAAE,CAAA;oBACV,qBAAM,IAAI,CAClB,iCAAiC,EACjC;4BACE,KAAK,EAAE,uBAAuB;4BAC9B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW;4BAClC,cAAc,gBAAA;yBACf,EACD,EAAE,aAAa,EAAE,iBAAU,GAAG,CAAC,SAAS,CAAE,EAAE,CAC7C,EAAA;;oBARK,CAAC,GAAG,SAQT;oBACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE;wBACpB,aAAa,GAAG,CAAC,CAAA;wBACjB,wBAAK;qBACN;;;oBAbqB,CAAC,EAAE,CAAA;;wBAgB3B,qBAAM,UAAU,CACd,uFAAuF,EACvF;wBAAY,sBAAA,CAAC,EAAE,aAAa,eAAA,EAAE,CAAC,EAAA;6BAAA,EAC/B,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,EAAE,EAA7C,CAA6C,EAAE,CACjE;oBAED,uEAAuE;oBACvE,mEAAmE;oBACnE,oEAAoE;oBACpE,qEAAqE;oBACrE,kCAAkC;oBAClC,uEAAuE;oBACvE,0DAA0D;kBARzD;;oBAJD,SAIC,CAAA;oBAED,uEAAuE;oBACvE,mEAAmE;oBACnE,oEAAoE;oBACpE,qEAAqE;oBACrE,kCAAkC;oBAClC,uEAAuE;oBACvE,0DAA0D;oBAC1D,qBAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;oBAP3B,uEAAuE;oBACvE,mEAAmE;oBACnE,oEAAoE;oBACpE,qEAAqE;oBACrE,kCAAkC;oBAClC,uEAAuE;oBACvE,0DAA0D;oBAC1D,SAA2B,CAAA;oBAC3B,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAA5B,SAA4B,CAAA;oBAEN,qBAAM,IAAI,CAC9B,iCAAiC,EACjC;4BACE,KAAK,EAAE,uBAAuB;4BAC9B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY;4BACnC,cAAc,gBAAA;yBACf,EACD,EAAE,aAAa,EAAE,iBAAU,GAAG,CAAC,SAAS,CAAE,EAAE,CAC7C,EAAA;;oBARK,aAAa,GAAG,SAQrB;oBAED,qBAAM,UAAU,CACd,4EAA4E,EAC5E;;;gCAAY,sBAAA,CAAC;wCACX,MAAM,EAAE,aAAa,CAAC,MAAM;wCAC5B,OAAO,EAAE,MAAA,MAAA,aAAa,CAAC,IAAI,0CAAE,OAAO,mCAAI,EAAE;qCAC3C,CAAC,EAAA;;6BAAA,EACF,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAtE,CAAsE,EAAE,CAC1F;wBAED,uEAAuE;wBACvE,gEAAgE;wBAChE,0DAA0D;wBAC1D,uEAAuE;sBALtE;;oBAPD,SAOC,CAAA;oBAED,uEAAuE;oBACvE,gEAAgE;oBAChE,0DAA0D;oBAC1D,uEAAuE;oBACvE,IAAI,CAAC,CAAC,iBAAiB,IAAI,4BAA4B,CAAC,EAAE;wBACxD,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAA;wBAC5F,sBAAM;qBACP;oBAOK,WAAW,GAAG,IAAI,OAAO,CAAC;wBAC9B,IAAI,MAAA;wBACJ,MAAM,EAAE,iBAAiB;wBACzB,OAAO,EAAE,EAAE,2BAA2B,EAAE,4BAA4B,EAAE;qBACvE,CAAC,CAAA;oBAGE,WAAW,GAAG,4BAA4B,CAAA;;;;oBAE/B,qBAAM,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAhE,IAAI,GAAG,SAAyD;oBACtE,IAAI,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,EAAE;wBAAE,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;;;;;yBAG5B,qBAAM,IAAI,CACzB,iCAAiC,EACjC;wBACE,KAAK,EAAE,uBAAuB;wBAC9B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB;wBACzC,cAAc,EAAE,WAAW;qBAC5B,EACD;wBACE,aAAa,EAAE,kBAAW,iBAAiB,CAAE;wBAC7C,2BAA2B,EAAE,4BAA4B;qBAC1D,CACF,EAAA;;oBAXK,QAAQ,GAAG,SAWhB;oBAED,qBAAM,UAAU,CACd,yFAAyF,EACzF;;;gCAAY,sBAAA,CAAC;wCACX,MAAM,EAAE,QAAQ,CAAC,MAAM;wCACvB,OAAO,EAAE,MAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,OAAO,mCAAI,EAAE;wCACrC,eAAe,EAAE,CAAC,CAAC,CAAA,MAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,OAAO,0CAAE,EAAE,CAAA;qCAC9C,CAAC,EAAA;;6BAAA,EACF;4BACE,QAAQ,EAAE,UAAA,CAAC;gCACT,kFAAkF;gCAClF,qFAAqF;gCACrF,gFAAgF;gCAChF,OAAA,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;4BAAnD,CAAmD;yBACtD,CACF,EAAA;;oBAdD,SAcC,CAAA;;;;;CACF,CAAA;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,6BAA6B,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAzD,SAAyD,CAAA;;;;SAC1D,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAA;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAA;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/esm/tests/api_tests/security/rich-text-answer-sanitized-on-write.test.d.ts ADDED Viewed

@@ -0,0 +1,32 @@
+import { Check } from "../../setup_isolated";
+/**
+ * Form "Rich Text" answers must be sanitized when they are stored, not only when they are rendered.
+ *
+ * A Rich Text answer is HTML authored by whoever fills the form — including an unauthenticated
+ * visitor on a public intake page — and it is stored verbatim by the generic write path (the only
+ * thing it strips is `<script>`). Every read path re-sanitizes before `dangerouslySetInnerHTML`,
+ * but the staff-side rich text *editor* did not: `@tellescope/react-components`'s `RichTextInput`
+ * fed the stored answer straight into `html-to-draftjs`, whose `<iframe>` handling produces a
+ * Draft.js EMBEDDED_LINK block that `react-draft-wysiwyg` renders as a real, unsandboxed iframe.
+ * So an enduser could submit `<iframe src="javascript:…">` in an answer and have it execute in the
+ * session of the staff member who opened that response for editing (enduser -> staff stored XSS,
+ * i.e. a PHI-egress class). The editor was fixed to sanitize before parsing; this test covers the
+ * second layer: the answer is sanitized once, on write, so exports, PDFs, integrations, AI
+ * summaries and any future consumer inherit it instead of each having to remember.
+ *
+ * Every client write of answers goes through `formResponseValidator` — generic create/update
+ * (endusers may PATCH `responses`), `submit_form_response` and `save_field_response` — so all three
+ * are exercised here. The server-side writers that bypass validation (Formsort, Healthie sync, AI
+ * form filling) never construct a `'Rich Text'` answer; see the note on the validator in
+ * `@tellescope/validation`.
+ *
+ * The negative checks are paired with positive ones: formatting and legitimate external links must
+ * survive, or a "sanitized" result could just mean the answer was discarded. The last two checks
+ * guard the two ways this change could break normal use: an empty answer must round-trip
+ * unchanged (the portal compares against `''` / `'<p></p>'`), and a long answer must not be
+ * rejected because the sanitizer's own `target`/`rel` additions pushed it over the length limit.
+ */
+export declare const rich_text_answer_sanitized_on_write_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
+export declare const rich_text_answer_sanitized_on_write_tests: () => Promise<void>;
+//# sourceMappingURL=rich-text-answer-sanitized-on-write.test.d.ts.map

package/lib/esm/tests/api_tests/security/rich-text-answer-sanitized-on-write.test.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"rich-text-answer-sanitized-on-write.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/rich-text-answer-sanitized-on-write.test.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,EAEN,MAAM,sBAAsB,CAAA;AAM7B;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,0CAA0C,QAAa,QAAQ,KAAK,EAAE,CAyIlF,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,yCAAyC,qBAErD,CAAA"}