An owner can now share a profile with another account; the recipient
reads the profile's metadata AND its data (medications, appointments,
health stats) under their own login. The server stays a blind store:
sharing uses an X25519 envelope — the owner wraps the profile DEK to
the recipient's identity public key via ECDH (fresh ephemeral key per
share), the recipient unwraps it with their identity private key.
Backend:
- models/profile_share.rs: ProfileShare + ProfileShareRepository
(find_for_recipient, find_for_profile, find_active [checks active +
expiry], delete, upsert). Indexed on (profileId, recipientUserId) and
recipientUserId.
- handlers/profile_share.rs: POST/GET /profiles/:id/shares,
DELETE /profiles/:id/shares/:recipient, GET /profiles/shared-with-me,
GET /users/public-key (public), and authorize_profile_read — the
share-gate that admits owner OR active-share recipient.
- The share-gate is wired into list/get for medications, appointments,
and health stats: when profile_id is specified, resolve the owner via
the gate and query as them. Data repos stay ownership-scoped.
- Removed the legacy Share system (ADR Open Q5): models/{share,
permission}.rs, handlers/{shares,permissions}.rs, middleware/
permission.rs (dead), the shares collection field + methods in
mongodb_impl.rs, the shares index, and the 5 /api/shares +
/api/permissions routes.
- share_tests.rs: full owner→recipient→revoke flow, ownership
isolation, share-to-self/nonexistent/keyless rejections, expired
share treated as absent.
Frontend:
- crypto/keys.ts: wrapProfileDekToRecipient /
unwrapProfileDekFromShare (ECDH envelope, ephemeral key per share).
- useProfileStore: loadSharedWithMe (unwrap each share's DEK with the
identity private key), shareProfile, revokeShare, loadProfileShares.
Shared profiles merge into the list with is_shared=true.
- ProfileSwitcher: shows shared profiles with a 'shared' chip.
- ProfileSharing (new) + ProfileEditor: owner UI to add a recipient by
email and revoke; shared profiles render read-only with owner info.
- ECDH round-trip test (owner wraps, recipient unwraps, stranger can't).
Verification: backend cargo build/clippy (-D warnings)/fmt clean, tests
compile (integration tests run in CI — Mongo is fixed there). Frontend
tsc clean, 31/31 tests pass.
⚠️ Backend integration tests not run locally (no Mongo/Docker in this
sandbox); CI will run them — I'll fix any failures immediately.
Phases C (hard revoke / re-key) and D (graduation) remain. Refs #3.
171 lines
6.7 KiB
Rust
171 lines
6.7 KiB
Rust
use mongodb::{bson::doc, options::IndexOptions, Collection, IndexModel};
|
|
|
|
use anyhow::Result;
|
|
|
|
/// Creates required collections and indexes. Best-effort by design: index
|
|
/// creation failures are logged as warnings and do not abort startup, matching
|
|
/// the existing swallow-on-warning style. Safe to run repeatedly (idempotent).
|
|
pub struct DatabaseInitializer {
|
|
db: mongodb::Database,
|
|
}
|
|
|
|
impl DatabaseInitializer {
|
|
pub fn new(db: mongodb::Database) -> Self {
|
|
Self { db }
|
|
}
|
|
|
|
pub async fn initialize(&self) -> Result<()> {
|
|
println!("[MongoDB] Initializing database collections and indexes...");
|
|
|
|
// Create users collection and index
|
|
{
|
|
let collection: Collection<mongodb::bson::Document> = self.db.collection("users");
|
|
|
|
// Create email index using the builder pattern
|
|
let index = IndexModel::builder()
|
|
.keys(doc! { "email": 1 })
|
|
.options(IndexOptions::builder().unique(true).build())
|
|
.build();
|
|
|
|
match collection.create_index(index, None).await {
|
|
Ok(_) => println!("✓ Created index on users.email"),
|
|
Err(e) => println!("Warning: Failed to create index on users.email: {}", e),
|
|
}
|
|
}
|
|
|
|
// Create families collection and indexes
|
|
{
|
|
let collection: Collection<mongodb::bson::Document> = self.db.collection("families");
|
|
|
|
let index1 = IndexModel::builder().keys(doc! { "userId": 1 }).build();
|
|
|
|
let index2 = IndexModel::builder().keys(doc! { "familyId": 1 }).build();
|
|
|
|
match collection.create_index(index1, None).await {
|
|
Ok(_) => println!("✓ Created index on families.userId"),
|
|
Err(e) => println!("Warning: Failed to create index on families.userId: {}", e),
|
|
}
|
|
|
|
match collection.create_index(index2, None).await {
|
|
Ok(_) => println!("✓ Created index on families.familyId"),
|
|
Err(e) => println!(
|
|
"Warning: Failed to create index on families.familyId: {}",
|
|
e
|
|
),
|
|
}
|
|
}
|
|
|
|
// Create profiles collection and index
|
|
{
|
|
let collection: Collection<mongodb::bson::Document> = self.db.collection("profiles");
|
|
|
|
let index = IndexModel::builder().keys(doc! { "familyId": 1 }).build();
|
|
|
|
match collection.create_index(index, None).await {
|
|
Ok(_) => println!("✓ Created index on profiles.familyId"),
|
|
Err(e) => println!(
|
|
"Warning: Failed to create index on profiles.familyId: {}",
|
|
e
|
|
),
|
|
}
|
|
}
|
|
|
|
// Create health_data collection
|
|
{
|
|
let _collection: Collection<mongodb::bson::Document> =
|
|
self.db.collection("health_data");
|
|
println!("✓ Created health_data collection");
|
|
}
|
|
|
|
// Create lab_results collection
|
|
{
|
|
let _collection: Collection<mongodb::bson::Document> =
|
|
self.db.collection("lab_results");
|
|
println!("✓ Created lab_results collection");
|
|
}
|
|
|
|
// Create medications collection
|
|
{
|
|
let _collection: Collection<mongodb::bson::Document> =
|
|
self.db.collection("medications");
|
|
println!("✓ Created medications collection");
|
|
}
|
|
|
|
// Create appointments collection
|
|
{
|
|
let _collection: Collection<mongodb::bson::Document> =
|
|
self.db.collection("appointments");
|
|
println!("✓ Created appointments collection");
|
|
}
|
|
|
|
// Create profile_shares collection and indexes (Phase B — replaces the
|
|
// legacy shares collection). Lookups are by (profileId, recipientUserId)
|
|
// and by recipientUserId alone (for /profiles/shared-with-me).
|
|
{
|
|
let collection: Collection<mongodb::bson::Document> =
|
|
self.db.collection("profile_shares");
|
|
|
|
let pair_index = IndexModel::builder()
|
|
.keys(doc! { "profileId": 1, "recipientUserId": 1 })
|
|
.build();
|
|
match collection.create_index(pair_index, None).await {
|
|
Ok(_) => println!("✓ Created index on profile_shares (profileId, recipientUserId)"),
|
|
Err(e) => println!("Warning: Failed to create profile_shares pair index: {}", e),
|
|
}
|
|
|
|
let recipient_index = IndexModel::builder()
|
|
.keys(doc! { "recipientUserId": 1 })
|
|
.build();
|
|
match collection.create_index(recipient_index, None).await {
|
|
Ok(_) => println!("✓ Created index on profile_shares.recipientUserId"),
|
|
Err(e) => println!(
|
|
"Warning: Failed to create profile_shares recipient index: {}",
|
|
e
|
|
),
|
|
}
|
|
}
|
|
|
|
// Create refresh_tokens collection and indexes.
|
|
// - unique index on tokenHash (the only thing we ever look tokens up by)
|
|
// - TTL index on expiresAt so expired tokens are auto-deleted by Mongo
|
|
{
|
|
let collection: Collection<mongodb::bson::Document> =
|
|
self.db.collection("refresh_tokens");
|
|
|
|
let unique_index = IndexModel::builder()
|
|
.keys(doc! { "tokenHash": 1 })
|
|
.options(IndexOptions::builder().unique(true).build())
|
|
.build();
|
|
|
|
// TTL: documents are deleted once their `expiresAt` timestamp passes.
|
|
// With expireAfterSeconds=0, Mongo removes each doc exactly when the
|
|
// datetime stored in `expiresAt` is reached.
|
|
let ttl_index = IndexModel::builder()
|
|
.keys(doc! { "expiresAt": 1 })
|
|
.options(
|
|
IndexOptions::builder()
|
|
.expire_after(std::time::Duration::from_secs(0))
|
|
.build(),
|
|
)
|
|
.build();
|
|
|
|
match collection.create_index(unique_index, None).await {
|
|
Ok(_) => println!("✓ Created unique index on refresh_tokens.tokenHash"),
|
|
Err(e) => println!(
|
|
"Warning: Failed to create index on refresh_tokens.tokenHash: {}",
|
|
e
|
|
),
|
|
}
|
|
match collection.create_index(ttl_index, None).await {
|
|
Ok(_) => println!("✓ Created TTL index on refresh_tokens.expiresAt"),
|
|
Err(e) => println!(
|
|
"Warning: Failed to create TTL index on refresh_tokens.expiresAt: {}",
|
|
e
|
|
),
|
|
}
|
|
}
|
|
|
|
println!("[MongoDB] Database initialization complete");
|
|
Ok(())
|
|
}
|
|
}
|