normogen/backend/src/db/init.rs
goose 04520539aa
Some checks failed
Lint and Build / format (pull_request) Successful in 35s
Lint and Build / clippy (pull_request) Successful in 1m41s
Lint and Build / build (pull_request) Successful in 3m51s
Lint and Build / test (pull_request) Failing after 3m41s
feat: profile sharing via X25519 envelope (Phase B, #3)
An owner can now share a profile with another account; the recipient
reads the profile's metadata AND its data (medications, appointments,
health stats) under their own login. The server stays a blind store:
sharing uses an X25519 envelope — the owner wraps the profile DEK to
the recipient's identity public key via ECDH (fresh ephemeral key per
share), the recipient unwraps it with their identity private key.

Backend:
- models/profile_share.rs: ProfileShare + ProfileShareRepository
  (find_for_recipient, find_for_profile, find_active [checks active +
  expiry], delete, upsert). Indexed on (profileId, recipientUserId) and
  recipientUserId.
- handlers/profile_share.rs: POST/GET /profiles/:id/shares,
  DELETE /profiles/:id/shares/:recipient, GET /profiles/shared-with-me,
  GET /users/public-key (public), and authorize_profile_read — the
  share-gate that admits owner OR active-share recipient.
- The share-gate is wired into list/get for medications, appointments,
  and health stats: when profile_id is specified, resolve the owner via
  the gate and query as them. Data repos stay ownership-scoped.
- Removed the legacy Share system (ADR Open Q5): models/{share,
  permission}.rs, handlers/{shares,permissions}.rs, middleware/
  permission.rs (dead), the shares collection field + methods in
  mongodb_impl.rs, the shares index, and the 5 /api/shares +
  /api/permissions routes.
- share_tests.rs: full owner→recipient→revoke flow, ownership
  isolation, share-to-self/nonexistent/keyless rejections, expired
  share treated as absent.

Frontend:
- crypto/keys.ts: wrapProfileDekToRecipient /
  unwrapProfileDekFromShare (ECDH envelope, ephemeral key per share).
- useProfileStore: loadSharedWithMe (unwrap each share's DEK with the
  identity private key), shareProfile, revokeShare, loadProfileShares.
  Shared profiles merge into the list with is_shared=true.
- ProfileSwitcher: shows shared profiles with a 'shared' chip.
- ProfileSharing (new) + ProfileEditor: owner UI to add a recipient by
  email and revoke; shared profiles render read-only with owner info.
- ECDH round-trip test (owner wraps, recipient unwraps, stranger can't).

Verification: backend cargo build/clippy (-D warnings)/fmt clean, tests
compile (integration tests run in CI — Mongo is fixed there). Frontend
tsc clean, 31/31 tests pass.

⚠️ Backend integration tests not run locally (no Mongo/Docker in this
sandbox); CI will run them — I'll fix any failures immediately.

Phases C (hard revoke / re-key) and D (graduation) remain. Refs #3.
2026-07-19 07:21:11 -03:00

171 lines
6.7 KiB
Rust

use mongodb::{bson::doc, options::IndexOptions, Collection, IndexModel};
use anyhow::Result;
/// Creates required collections and indexes. Best-effort by design: index
/// creation failures are logged as warnings and do not abort startup, matching
/// the existing swallow-on-warning style. Safe to run repeatedly (idempotent).
pub struct DatabaseInitializer {
db: mongodb::Database,
}
impl DatabaseInitializer {
pub fn new(db: mongodb::Database) -> Self {
Self { db }
}
pub async fn initialize(&self) -> Result<()> {
println!("[MongoDB] Initializing database collections and indexes...");
// Create users collection and index
{
let collection: Collection<mongodb::bson::Document> = self.db.collection("users");
// Create email index using the builder pattern
let index = IndexModel::builder()
.keys(doc! { "email": 1 })
.options(IndexOptions::builder().unique(true).build())
.build();
match collection.create_index(index, None).await {
Ok(_) => println!("✓ Created index on users.email"),
Err(e) => println!("Warning: Failed to create index on users.email: {}", e),
}
}
// Create families collection and indexes
{
let collection: Collection<mongodb::bson::Document> = self.db.collection("families");
let index1 = IndexModel::builder().keys(doc! { "userId": 1 }).build();
let index2 = IndexModel::builder().keys(doc! { "familyId": 1 }).build();
match collection.create_index(index1, None).await {
Ok(_) => println!("✓ Created index on families.userId"),
Err(e) => println!("Warning: Failed to create index on families.userId: {}", e),
}
match collection.create_index(index2, None).await {
Ok(_) => println!("✓ Created index on families.familyId"),
Err(e) => println!(
"Warning: Failed to create index on families.familyId: {}",
e
),
}
}
// Create profiles collection and index
{
let collection: Collection<mongodb::bson::Document> = self.db.collection("profiles");
let index = IndexModel::builder().keys(doc! { "familyId": 1 }).build();
match collection.create_index(index, None).await {
Ok(_) => println!("✓ Created index on profiles.familyId"),
Err(e) => println!(
"Warning: Failed to create index on profiles.familyId: {}",
e
),
}
}
// Create health_data collection
{
let _collection: Collection<mongodb::bson::Document> =
self.db.collection("health_data");
println!("✓ Created health_data collection");
}
// Create lab_results collection
{
let _collection: Collection<mongodb::bson::Document> =
self.db.collection("lab_results");
println!("✓ Created lab_results collection");
}
// Create medications collection
{
let _collection: Collection<mongodb::bson::Document> =
self.db.collection("medications");
println!("✓ Created medications collection");
}
// Create appointments collection
{
let _collection: Collection<mongodb::bson::Document> =
self.db.collection("appointments");
println!("✓ Created appointments collection");
}
// Create profile_shares collection and indexes (Phase B — replaces the
// legacy shares collection). Lookups are by (profileId, recipientUserId)
// and by recipientUserId alone (for /profiles/shared-with-me).
{
let collection: Collection<mongodb::bson::Document> =
self.db.collection("profile_shares");
let pair_index = IndexModel::builder()
.keys(doc! { "profileId": 1, "recipientUserId": 1 })
.build();
match collection.create_index(pair_index, None).await {
Ok(_) => println!("✓ Created index on profile_shares (profileId, recipientUserId)"),
Err(e) => println!("Warning: Failed to create profile_shares pair index: {}", e),
}
let recipient_index = IndexModel::builder()
.keys(doc! { "recipientUserId": 1 })
.build();
match collection.create_index(recipient_index, None).await {
Ok(_) => println!("✓ Created index on profile_shares.recipientUserId"),
Err(e) => println!(
"Warning: Failed to create profile_shares recipient index: {}",
e
),
}
}
// Create refresh_tokens collection and indexes.
// - unique index on tokenHash (the only thing we ever look tokens up by)
// - TTL index on expiresAt so expired tokens are auto-deleted by Mongo
{
let collection: Collection<mongodb::bson::Document> =
self.db.collection("refresh_tokens");
let unique_index = IndexModel::builder()
.keys(doc! { "tokenHash": 1 })
.options(IndexOptions::builder().unique(true).build())
.build();
// TTL: documents are deleted once their `expiresAt` timestamp passes.
// With expireAfterSeconds=0, Mongo removes each doc exactly when the
// datetime stored in `expiresAt` is reached.
let ttl_index = IndexModel::builder()
.keys(doc! { "expiresAt": 1 })
.options(
IndexOptions::builder()
.expire_after(std::time::Duration::from_secs(0))
.build(),
)
.build();
match collection.create_index(unique_index, None).await {
Ok(_) => println!("✓ Created unique index on refresh_tokens.tokenHash"),
Err(e) => println!(
"Warning: Failed to create index on refresh_tokens.tokenHash: {}",
e
),
}
match collection.create_index(ttl_index, None).await {
Ok(_) => println!("✓ Created TTL index on refresh_tokens.expiresAt"),
Err(e) => println!(
"Warning: Failed to create TTL index on refresh_tokens.expiresAt: {}",
e
),
}
}
println!("[MongoDB] Database initialization complete");
Ok(())
}
}