european_dcc_test.go

package mobilecore

import (
	"encoding/json"
	"fmt"
	hcertcommon "github.com/minvws/nl-covid19-coronacheck-hcert/common"
	"github.com/minvws/nl-covid19-coronacheck-hcert/verifier"
	"reflect"
	"strings"
	"testing"
	"time"
)

func TestHCerts(t *testing.T) {
	var validTime int64 = 1625000000
	var earlyTime int64 = 1615000000
	var lateTime int64 = 1635000000

	testCases := []hcertTestCase{
		{nil, validTime, false, true},
		{nil, earlyTime, false, false},
		{nil, lateTime, false, false},
		{singleStructChange(42, "ExpirationTime"), validTime, true, true},
		{singleStructChange(earlyTime, "ExpirationTime"), validTime, false, true},
	}

	for i, testCase := range testCases {
		hcert := getHcert("", testCase.changes)
		isSpecimen, err := validateHcert(hcert, time.Unix(testCase.unixTime, 0))
		if isSpecimen != testCase.isSpecimen {
			t.Fatal("Got wrong isSpecimen", isSpecimen, "for test case", i)
		}

		isValid := err == nil
		if isValid != testCase.isValid {
			t.Fatal("Got wrong isValid", isValid, "for test case", i)
		}
	}
}

func TestDCCs(t *testing.T) {
	validVaccTime := "2021-07-01"
	validVaccJanssenTime := "2021-07-06"
	validRecTime := "2021-08-15"
	validTestTime := "2021-07-23T08:00:00Z"

	rules := verifierConfig.EuropeanVerificationRules

	testCases := []dccTestCase{
		// Different amount of statements
		{"V", rules, nil, validVaccTime, true},
		{"", rules, nil, validVaccTime, false},
		{"VV", rules, nil, validVaccTime, false},
		{"VT", rules, nil, validVaccTime, false},

		// Date of birth
		{"V", rules, dobChange("1990-01"), validVaccTime, true},
		{"V", rules, dobChange("1990"), validVaccTime, true},
		{"V", rules, dobChange(""), validVaccTime, true},
		{"V", rules, dobChange("1890-01-01"), validVaccTime, false},
		{"V", rules, dobChange("1990-01--01"), validVaccTime, false},
		{"V", rules, dobChange("190-01-01"), validVaccTime, false},
		{"V", rules, dobChange("90-01-01"), validVaccTime, false},

		// Names
		{"V", rules, nameChange("", "StandardizedFamilyName"), validVaccTime, true},
		{"V", rules, nameChange("", "StandardizedGivenName"), validVaccTime, true},
		{"V", rules,
			append(
				nameChange("", "StandardizedFamilyName"),
				nameChange("", "StandardizedGivenName")...,
			),
			validVaccTime, false,
		},

		// Vaccination
		//
		// Vaccination, waiting time and valid until
		{"V", rules, nil, "2021-06-07", false},
		{"V", rules, nil, "2021-06-08", false},
		{"V", rules, nil, "2021-06-09", false},
		{"V", rules, nil, "2021-06-21", false},
		{"V", rules, nil, "2021-06-22", true},
		{"V", rules, nil, validVaccTime, true},
		{"V", rules, nil, "2022-03-04", true},
		{"V", rules, nil, "2022-03-05", false},
		{"V", rules, nil, "2023-01-01", false},

		// Waiting time on additional doses
		{"V", rules, vaccDoseChange(3, 3), "2021-06-07", false},
		{"V", rules, vaccDoseChange(3, 3), "2021-06-08", true},
		{"V", rules, vaccDoseChange(3, 3), "2021-06-20", true},

		{"V", rules, vaccDoseChange(4, 4), "2021-06-08", true},
		{"V", rules, vaccDoseChange(42, 42), "2021-06-08", true},
		{"V", rules, vaccDoseChange(3, 2), "2021-06-08", true},
		{"V", rules, vaccDoseChange(2, 1), "2021-06-08", true},

		{"V", rules, vaccJanssenDose(2, 2), "2021-06-07", false},
		{"V", rules, vaccJanssenDose(2, 2), "2021-06-08", true},
		{"V", rules, vaccJanssenDose(2, 2), "2021-06-20", true},

		{"V", rules, vaccJanssenDose(4, 4), "2021-06-08", true},
		{"V", rules, vaccJanssenDose(42, 42), "2021-06-08", true},
		{"V", rules, vaccJanssenDose(3, 2), "2021-06-08", true},
		{"V", rules, vaccJanssenDose(2, 1), "2021-06-08", true},

		// Valid until on additional doses
		{"V", rules, vaccJanssenDose(2, 2), "2022-03-04", true},
		{"V", rules, vaccJanssenDose(2, 2), "2022-03-05", false},

		{"V", rules, vaccJanssenDose(2, 1), "2022-03-04", true},
		{"V", rules, vaccJanssenDose(2, 1), "2022-03-05", false},

		{"V", rules, vaccDoseChange(3, 3), "2022-03-04", true},
		{"V", rules, vaccDoseChange(3, 3), "2022-03-05", false},

		{"V", rules, vaccDoseChange(3, 2), "2022-03-04", true},
		{"V", rules, vaccDoseChange(3, 2), "2022-03-05", false},

		// Valid until on primary doses with different birth dates
		{"V", rules, dobChange("2008-06-15"), "2026-06-14", true},
		{"V", rules, dobChange("2008-06-15"), "2026-06-15", false},
		{"V", rules, dobChange("2008-02-29"), "2026-02-28", true},
		{"V", rules, dobChange("2008-02-29"), "2026-03-01", false},
		{"V", rules, dobChange("2006-03-01"), "2024-02-29", true},
		{"V", rules, dobChange("2006-03-01"), "2024-03-01", false},

		{"V", rules, dobChange("2006-11"), "2024-11-29", true},
		{"V", rules, dobChange("2006-11"), "2024-11-30", false},
		{"V", rules, dobChange("2006-02"), "2024-02-27", true},
		{"V", rules, dobChange("2006-02"), "2024-02-28", false},
		{"V", rules, dobChange("2008-02"), "2026-02-28", true},
		{"V", rules, dobChange("2008-02"), "2026-03-01", false},

		{"V", rules, dobChange("2006"), "2024-12-30", true},
		{"V", rules, dobChange("2006"), "2024-12-31", false},

		{"V", rules, dobChange(""), "2024-01-01", false},

		// Disease targeted
		{"V", rules, vaccChange("840539007", "DiseaseTargeted"), validVaccTime, false},

		// Medicinal product
		{"V", rules, vaccChange("EU/1/20/1528", "MedicinalProduct"), validVaccTime, true},
		{"V", rules, vaccChange("EU/1/20/1507", "MedicinalProduct"), validVaccTime, true},
		{"V", rules, vaccChange("EU/1/21/1529", "MedicinalProduct"), validVaccTime, true},
		{"V", rules, vaccChange("EU/1/20/1525", "MedicinalProduct"), validVaccJanssenTime, true},
		{"V", rules, vaccChange("Sputnik-V", "MedicinalProduct"), validVaccTime, false},

		// Doses
		{"V", rules, vaccDoseChange(0, 0), validVaccTime, true},
		{"V", rules, vaccDoseChange(1, 1), validVaccTime, true},
		{"V", rules, vaccDoseChange(2, 2), validVaccTime, true},
		{"V", rules, vaccDoseChange(3, 2), validVaccTime, true},
		{"V", rules, vaccDoseChange(3, 3), validVaccTime, true},
		{"V", rules, vaccDoseChange(4, 2), validVaccTime, true},
		{"V", rules, vaccDoseChange(0, 1), validVaccTime, false},
		{"V", rules, vaccDoseChange(1, 2), validVaccTime, false},

		// Insufficient information in vaccination date
		{"V", rules, vaccChange("2021-06-1", "DateOfVaccination"), validVaccTime, false},
		{"V", rules, vaccChange("2021-06", "DateOfVaccination"), validVaccTime, false},
		{"V", rules, vaccChange("2021-1", "DateOfVaccination"), validVaccTime, false},
		{"V", rules, vaccChange("2021", "DateOfVaccination"), validVaccTime, false},
		{"V", rules, vaccChange("", "DateOfVaccination"), validVaccTime, false},

		// Janssen handling
		{"V", rules, vaccSingleJanssen(), "2021-06-22", false},
		{"V", rules, vaccSingleJanssen(), "2021-07-05", false},
		{"V", rules, vaccSingleJanssen(), "2021-07-06", true},

		// Recovery
		//
		{"R", rules, nil, "2021-07-11", false},
		{"R", rules, nil, "2021-07-12", true},
		{"R", rules, nil, validRecTime, true},
		{"R", rules, nil, "2021-09-11", true},
		{"R", rules, nil, "2021-09-12", false},
		{"R", rules, nil, "2022-01-01", false},

		// Disease targeted
		{"R", rules, recChange("840539007", "DiseaseTargeted"), validRecTime, false},

		//
		{"R", rules, recChange("2021-06-30", "DateOfFirstPositiveTest"), "2021-07-11", false},
		{"R", rules, recChange("2021-06-30", "DateOfFirstPositiveTest"), "2021-07-12", true},
		{"R", rules, recChange("2021-07-02", "DateOfFirstPositiveTest"), "2021-07-12", false},
		{"R", rules, recChange("2021-07-02", "DateOfFirstPositiveTest"), "2021-07-13", true},

		{"R", rules, recChange("2021-07-01", "CertificateValidFrom"), "2021-07-11", false},
		{"R", rules, recChange("2021-07-01", "CertificateValidFrom"), "2021-07-12", true},

		{"R", rules, recChange("2021-07-01", "CertificateValidUntil"), "2021-07-12", false},
		{"R", rules, recChange("2022-01-01", "CertificateValidUntil"), "2021-12-27", true},
		{"R", rules, recChange("2022-01-01", "CertificateValidUntil"), "2021-12-28", false},

		// Test
		//
		{"T", rules, nil, "2021-07-22", false},
		{"T", rules, nil, "2021-07-22T20:21:59Z", false},
		{"T", rules, nil, "2021-07-22T20:22:00Z", true},
		{"T", rules, nil, validTestTime, true},
		{"T", rules, nil, "2021-07-23T21:21:59Z", true},
		{"T", rules, nil, "2021-07-23T21:22:01Z", false},
		{"T", rules, nil, "2021-07-24", false},

		// Disease targeted
		{"T", rules, testChange("840539007", "DiseaseTargeted"), validTestTime, false},

		// Test type
		{"T", rules, testChange("LP217198-3", "TypeOfTest"), validTestTime, true},
		{"T", rules, testChange("LP317198-4", "TypeOfTest"), validTestTime, false},

		// Test result
		{"T", rules, testChange("260373001", "TestResult"), validTestTime, false},

		// Invalid datetime format
		{"T", rules, testChange("2021-07-23", "DateTimeOfCollection"), validTestTime, false},

		// Special case handling
		//
		// GR: Whitespaces in decoded mp field
		{"V", rules, vaccChange("  EU/1/20/1528    ", "MedicinalProduct"), validVaccTime, true},
		{"V", rules, vaccChange("\u00A0\u2001EU/1/20/1528\t", "MedicinalProduct"), validVaccTime, true},
		{"V", rules, vaccChange(" Sputnik-V ", "MedicinalProduct"), validVaccTime, false},

		// BG: Invalid information (like ISO8601 timestamps) in dates
		{"V", rules, dobChange("1990-01-01T01:30Z"), validVaccTime, true},
		{"V", rules, dobChange("1990-01-01meh"), validVaccTime, true},
		{"V", rules, vaccChange("2021-06-08T14:30Z", "DateOfVaccination"), validVaccTime, true},
	}

	for i, testCase := range testCases {
		now, err := time.Parse(time.RFC3339, testCase.now)
		if err != nil {
			now, err = time.Parse("2006-01-02", testCase.now)
			if err != nil {
				t.Fatal("Could not parse date")
			}

			// If the testcase contained only a date, add a single second to allow for realistic comparison
			now = now.Add(time.Duration(1) * time.Second)
		}

		// Create DCC and validate it
		hcert := getHcert(testCase.statements, testCase.changes)
		err = validateDCC(hcert.DCC, VERIFICATION_POLICY_3G, testCase.rules, now)
		isValid := err == nil
		if isValid != testCase.isValid {
			errStr := ""
			if err != nil {
				errStr = fmt.Sprintf("(%s)", err.Error())
			}

			t.Fatalf("Got wrong isValid %t for test case %d %s", isValid, i, errStr)
		}

		// Test against 1G verification policy
		err = validateDCC(hcert.DCC, VERIFICATION_POLICY_1G, testCase.rules, now)
		isValid = err == nil
		if testCase.statements != "T" {
			if isValid {
				t.Fatalf("Non-test with 1G verification policy should be invalid at test case %d", i)
			}
		} else if isValid != testCase.isValid {
			t.Fatalf("Test with 1G verification policy, got wrong isValid %t for test case %d", isValid, i)
		}
	}
}

func TestHcertResult(t *testing.T) {
	rules := &europeanVerificationRules{}

	baseResult := VerificationDetails{
		"1", "0", "NL", "A", "B", "13", "03",
	}

	// Rest of the test cases
	testCases := []resultTestCase{
		{
			nil,
			nil,
		},
		{
			nameChange("", "StandardizedFamilyName"),
			singleStructChange("", "LastNameInitial"),
		},
		{
			nameChange("", "StandardizedGivenName"),
			singleStructChange("", "FirstNameInitial"),
		},
		{
			dobChange("1950-03"),
			singleStructChange("XX", "BirthDay"),
		},
		{
			dobChange("1950"),
			append(
				singleStructChange("XX", "BirthDay"),
				singleStructChange("XX", "BirthMonth")...,
			),
		},
	}

	pk := &verifier.AnnotatedEuropeanPk{
		SubjectAltName: "NLD",
	}

	for i, testCase := range testCases {
		hcert := getHcert("V", testCase.hcertChanges)
		expectedResult := getDetails(baseResult, testCase.resultChanges)

		res, err := buildVerificationDetails(hcert, pk, rules, false)
		if err != nil {
			t.Fatal("Error when building result for test case", i)
		}

		if *res != *expectedResult {
			t.Fatal("Unexpected result for test case", i)
		}
	}
}

type hcertTestCase struct {
	changes    []structChange
	unixTime   int64
	isSpecimen bool
	isValid    bool
}

type dccTestCase struct {
	statements string
	rules      *europeanVerificationRules
	changes    []structChange
	now        string
	isValid    bool
}

type resultTestCase struct {
	hcertChanges  []structChange
	resultChanges []structChange
}

type structChange struct {
	path  []interface{}
	value interface{}
}

func dobChange(value interface{}) []structChange {
	path := []interface{}{"DCC", "DateOfBirth"}
	return singleStructChange(value, path...)
}

func nameChange(value interface{}, key string) []structChange {
	path := []interface{}{"DCC", "Name", key}
	return singleStructChange(value, path...)
}

func vaccChange(value interface{}, key string) []structChange {
	return vaccRecTestChange(value, "Vaccinations", key)
}

func recChange(value interface{}, key string) []structChange {
	return vaccRecTestChange(value, "Recoveries", key)
}

func testChange(value interface{}, key string) []structChange {
	return vaccRecTestChange(value, "Tests", key)
}

func vaccRecTestChange(value interface{}, kind string, key string) []structChange {
	path := []interface{}{"DCC", kind, 0, key}
	return singleStructChange(value, path...)
}

func vaccDoseChange(dn, sd int) []structChange {
	return append(
		vaccChange(dn, "DoseNumber"),
		vaccChange(sd, "TotalSeriesOfDoses")...,
	)
}

func vaccSingleJanssen() []structChange {
	return append(
		vaccChange("EU/1/20/1525", "MedicinalProduct"),
		vaccDoseChange(1, 1)...,
	)
}

func vaccJanssenDose(dn, sd int) []structChange {
	return append(
		vaccChange("EU/1/20/1525", "MedicinalProduct"),
		vaccDoseChange(dn, sd)...,
	)
}

func singleStructChange(value interface{}, path ...interface{}) []structChange {
	return []structChange{
		{path, value},
	}
}

func getHcert(statements string, changes []structChange) *hcertcommon.HealthCertificate {
	var hcert *hcertcommon.HealthCertificate
	_ = json.Unmarshal(baseHcertJson, &hcert)

	// Add vaccination, recovery or tests
	for _, statement := range strings.Split(statements, "") {
		if statement == "V" {
			var vacc *hcertcommon.DCCVaccination
			_ = json.Unmarshal(vaccinationJson, &vacc)
			hcert.DCC.Vaccinations = append(hcert.DCC.Vaccinations, vacc)
		} else if statement == "R" {
			var rec *hcertcommon.DCCRecovery
			_ = json.Unmarshal(recoveryJson, &rec)
			hcert.DCC.Recoveries = append(hcert.DCC.Recoveries, rec)
		} else if statement == "T" {
			var test *hcertcommon.DCCTest
			_ = json.Unmarshal(testJson, &test)
			hcert.DCC.Tests = append(hcert.DCC.Tests, test)
		} else {
			panic("Invalid statement identifier " + statement)
		}
	}

	return applyStructChanges(hcert, changes).(*hcertcommon.HealthCertificate)
}

func getDetails(res VerificationDetails, changes []structChange) *VerificationDetails {
	return applyStructChanges(&res, changes).(*VerificationDetails)
}

func applyStructChanges(s interface{}, changes []structChange) interface{} {
	// Make changes
	for _, change := range changes {
		// Walk the path, either a struct field or an slice index
		target := reflect.ValueOf(s).Elem()
		for _, pathElem := range change.path {
			target = reflect.Indirect(target)

			switch tp := pathElem.(type) {
			case string:
				target = target.FieldByName(tp)
			case int:
				target = target.Index(tp)
			}
		}

		// Set the value for the appropriate type
		switch tv := change.value.(type) {
		case string:
			target.SetString(tv)
		case int:
			target.SetInt(int64(tv))
		case float32:
			target.SetFloat(float64(tv))
		case float64:
			target.SetFloat(tv)
		}
	}

	return s
}

var baseHcertJson = []byte(`
{
  "credentialVersion": 1,
  "issuer": "NL",
  "issuedAt": 1620000000,
  "expirationTime": 1630000000,
  "dcc": {
    "ver": "1.0.0",
    "dob": "1950-03-13",
    "nam": {
      "fn": "Badelaar",
      "fnt": "BADELAAR",
      "gn": "Aaltje",
      "gnt": "AALTJE"
    },
    "v": null,
    "t": null,
    "r": null
  }
}
`)

var vaccinationJson = []byte(`{
  "tg": "840539006",
  "vp": "1119349007",
  "mp": "EU/1/20/1507",
  "ma": "ORG-100030215",
  "dn": 2,
  "sd": 2,
  "dt": "2021-06-08",
  "co": "NL",
  "is": "Ministry of Health Welfare and Sport",
  "ci": "URN:UCI:01:NL:ABCDEFGHIJKLMNOPQRST42#S"
}`)

var recoveryJson = []byte(`{
  "tg":"840539006",
  "fr":"2021-07-01",
  "co":"NL",
  "is":"Ministry of Health Welfare and Sport",
  "df":"2021-07-12",
  "du":"2021-09-12",
  "ci":"URN:UCI:01:NL:ABCDEFGHIJKLMNOPQRST42#S"
}`)

var testJson = []byte(`{
  "tg":"840539006",
  "tt":"LP6464-4",
  "nm":"",
  "ma":"",
  "sc":"2021-07-22T22:22:00+02:00",
  "dr":"",
  "tr":"260415000",
  "tc":"Facility approved by the State of The Netherlands",
  "co":"NL",
  "is":"Ministry of Health Welfare and Sport",
  "ci":"URN:UCI:01:NL:ABCDEFGHIJKLMNOPQRST42#S"
}`)