davinci_crd_test_kit 0.9.0 → 0.9.1

data/lib/davinci_crd_test_kit/client_tests/appointment_book_receive_request_test.rb

@@ -7,13 +7,13 @@ module DaVinciCRDTestKit
     id :crd_appointment_book_request
     title 'Request received for appointment-book hook'
     description %(
-        This test waits for an incoming [appointment-book](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#appointment-book)
-        hook request and responds to the client with the response types selected as an input. This hook is a 'primary'
+        This test waits for multiple incoming [appointment-book](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#appointment-book)
+        hook requests and responds to the client with the response types selected as an input. This hook is a 'primary'
         hook, meaning that CRD Servers SHALL, at minimum, return a [Coverage Information](https://hl7.org/fhir/us/davinci-crd/STU2/StructureDefinition-ext-coverage-information.html)
         system action for these hooks, even if the response indicates that further information is needed or that the
         level of detail provided is insufficient to determine coverage.
       )
-    receives_request :appointment_book
+    config options: { accepts_multiple_requests: true }
 
     input :iss
     input :appointment_book_selected_response_types,
@@ -23,7 +23,8 @@ module DaVinciCRDTestKit
             response type that will be returned for this hook is the `Coverage Information` card type.
           ),
           type: 'checkbox',
-          default: ['coverage_information'],
+          default: ['coverage_information', 'external_reference', 'instructions'],
+          optional: true,
           options: {
             list_options: [
               {
@@ -52,6 +53,14 @@ module DaVinciCRDTestKit
               }
             ]
           }
+    input :appointment_book_custom_response,
+          title: 'Custom response for appointment-book hook requests',
+          description: %(
+            A JSON string may be provided here to replace the normal response
+            from the hook request endpoint
+          ),
+          type: 'textarea',
+          optional: true
 
     run do
       wait(
@@ -59,11 +68,13 @@ module DaVinciCRDTestKit
         message: %(
           **Appointment Book CDS Service Test**:
 
-          Invoke the appointment-book hook and send a request to:
+          Invoke the appointment-book hook and send requests to:
 
           `#{appointment_book_url}`
 
-          Inferno will process the request and return CDS cards if successful.
+          Inferno will process the requests and return CDS cards if successful.
+
+          [Click here](#{resume_pass_url}?token=appointment-book%20#{iss}) when you have finished submitting requests.
         )
       )
     end

data/lib/davinci_crd_test_kit/client_tests/client_appointment_book_group.rb

@@ -0,0 +1,70 @@
+require_relative 'appointment_book_receive_request_test'
+require_relative 'client_display_cards_attest'
+require_relative 'decode_auth_token_test'
+require_relative 'hook_request_optional_fields_test'
+require_relative 'hook_request_required_fields_test'
+require_relative 'hook_request_valid_context_test'
+require_relative 'hook_request_valid_prefetch_test'
+require_relative 'retrieve_jwks_test'
+require_relative 'submitted_response_validation'
+require_relative 'token_header_test'
+require_relative 'token_payload_test'
+
+module DaVinciCRDTestKit
+  class ClientAppointmentBookGroup < Inferno::TestGroup
+    title 'appointment-book'
+    id :crd_client_appointment_book
+    description <<~DESCRIPTION
+      The appointment-book hook is invoked when the user is scheduling one or more future encounters/visits for the
+      patient. These tests are based on the following criteria:
+        * [CRD IG requirements for this hook](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#appointment-book),
+        which include the profiles that are expected to be used for the resources resolved to by `context` FHIR ID
+        fields
+        * Specific [appointment-book `context` requirements](https://cds-hooks.hl7.org/hooks/appointment-book/2023SepSTU1Ballot/appointment-book/)
+        defined in the CDS Hooks specification
+
+      This version of the CRD implementation guide refers to version 1.0 of the hook.
+    DESCRIPTION
+
+    run_as_group
+
+    config(
+      inputs: {
+        auth_token_headers_json: { name: :appointment_book_auth_token_headers_json },
+        auth_tokens: { name: :appointment_book_auth_tokens },
+        auth_tokens_jwk_json: { name: :appointment_book_auth_tokens_jwk_json },
+        client_access_token: { name: :appointment_book_client_access_token },
+        client_fhir_server: { name: :appointment_book_client_fhir_server },
+        crd_jwks_keys_json: { name: :appointment_book_crd_jwks_keys_json },
+        custom_response: { name: :appointment_book_custom_response },
+        selected_response_types: { name: :appointment_book_selected_response_types }
+      },
+      outputs: {
+        auth_token_headers_json: { name: :appointment_book_auth_token_headers_json },
+        auth_token_payloads_json: { name: :appointment_book_auth_token_payloads_json },
+        auth_tokens: { name: :appointment_book_auth_tokens },
+        auth_tokens_jwk_json: { name: :appointment_book_auth_tokens_jwk_json },
+        client_access_token: { name: :appointment_book_client_access_token },
+        client_fhir_server: { name: :appointment_book_client_fhir_server },
+        crd_jwks_json: { name: :appointment_book_crd_jwks_json },
+        crd_jwks_keys_json: { name: :appointment_book_crd_jwks_keys_json }
+      },
+      options: {
+        hook_name: 'appointment-book',
+        hook_path: APPOINTMENT_BOOK_PATH
+      }
+    )
+
+    test from: :crd_submitted_response_validation
+    test from: :crd_appointment_book_request
+    test from: :crd_decode_auth_token
+    test from: :crd_retrieve_jwks
+    test from: :crd_token_header
+    test from: :crd_token_payload
+    test from: :crd_hook_request_required_fields
+    test from: :crd_hook_request_optional_fields
+    test from: :crd_hook_request_valid_context
+    test from: :crd_hook_request_valid_prefetch
+    test from: :crd_card_display_attest_test
+  end
+end

data/lib/davinci_crd_test_kit/client_tests/client_encounter_discharge_group.rb

@@ -0,0 +1,71 @@
+require_relative 'encounter_discharge_receive_request_test'
+require_relative 'client_display_cards_attest'
+require_relative 'decode_auth_token_test'
+require_relative 'hook_request_optional_fields_test'
+require_relative 'hook_request_required_fields_test'
+require_relative 'hook_request_valid_context_test'
+require_relative 'hook_request_valid_prefetch_test'
+require_relative 'retrieve_jwks_test'
+require_relative 'submitted_response_validation'
+require_relative 'token_header_test'
+require_relative 'token_payload_test'
+
+module DaVinciCRDTestKit
+  class ClientEncounterDischargeGroup < Inferno::TestGroup
+    title 'encounter-discharge'
+    id :crd_client_encounter_discharge
+    description <<~DESCRIPTION
+      The encounter-discharge hook is invoked when the user is performing the discharge process for an encounter where
+      the notion of 'discharge' is relevant - typically an inpatient encounter. These tests are based on the
+      following criteria:
+        * [CRD IG requirements for this hook](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#encounter-discharge),
+        which includes the profiles that are expected to be used for the resources resolved to by `context`
+        FHIR ID fields
+        * Specific [encounter-discharge `context` requirements](https://cds-hooks.hl7.org/hooks/encounter-discharge/2023SepSTU1Ballot/encounter-discharge/)
+        defined in the CDS Hooks specification
+
+      This version of the CRD implementation guide refers to version 1.0 of the hook.
+    DESCRIPTION
+
+    run_as_group
+
+    config(
+      inputs: {
+        auth_token_headers_json: { name: :encounter_discharge_auth_token_headers_json },
+        auth_tokens: { name: :encounter_discharge_auth_tokens },
+        auth_tokens_jwk_json: { name: :encounter_discharge_auth_tokens_jwk_json },
+        client_access_token: { name: :encounter_discharge_client_access_token },
+        client_fhir_server: { name: :encounter_discharge_client_fhir_server },
+        crd_jwks_keys_json: { name: :encounter_discharge_crd_jwks_keys_json },
+        custom_response: { name: :encounter_discharge_custom_response },
+        selected_response_types: { name: :encounter_discharge_selected_response_types }
+      },
+      outputs: {
+        auth_token_headers_json: { name: :encounter_discharge_auth_token_headers_json },
+        auth_token_payloads_json: { name: :encounter_discharge_auth_token_payloads_json },
+        auth_tokens: { name: :encounter_discharge_auth_tokens },
+        auth_tokens_jwk_json: { name: :encounter_discharge_auth_tokens_jwk_json },
+        client_access_token: { name: :encounter_discharge_client_access_token },
+        client_fhir_server: { name: :encounter_discharge_client_fhir_server },
+        crd_jwks_json: { name: :encounter_discharge_crd_jwks_json },
+        crd_jwks_keys_json: { name: :encounter_discharge_crd_jwks_keys_json }
+      },
+      options: {
+        hook_name: 'encounter-discharge',
+        hook_path: ENCOUNTER_DISCHARGE_PATH
+      }
+    )
+
+    test from: :crd_submitted_response_validation
+    test from: :crd_encounter_discharge_request
+    test from: :crd_decode_auth_token
+    test from: :crd_retrieve_jwks
+    test from: :crd_token_header
+    test from: :crd_token_payload
+    test from: :crd_hook_request_required_fields
+    test from: :crd_hook_request_optional_fields
+    test from: :crd_hook_request_valid_context
+    test from: :crd_hook_request_valid_prefetch
+    test from: :crd_card_display_attest_test
+  end
+end

data/lib/davinci_crd_test_kit/client_tests/client_encounter_start_group.rb

@@ -0,0 +1,70 @@
+require_relative 'encounter_start_receive_request_test'
+require_relative 'client_display_cards_attest'
+require_relative 'decode_auth_token_test'
+require_relative 'hook_request_optional_fields_test'
+require_relative 'hook_request_required_fields_test'
+require_relative 'hook_request_valid_context_test'
+require_relative 'hook_request_valid_prefetch_test'
+require_relative 'retrieve_jwks_test'
+require_relative 'submitted_response_validation'
+require_relative 'token_header_test'
+require_relative 'token_payload_test'
+
+module DaVinciCRDTestKit
+  class ClientEncounterStartGroup < Inferno::TestGroup
+    title 'encounter-start'
+    id :crd_client_encounter_start
+    description <<~DESCRIPTION
+      The encounter-start hook is invoked when the user is initiating a new encounter. These tests are based on the
+      following criteria:
+        * [CRD IG requirements for this hook](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#encounter-start),
+        which include the profiles that are expected to be used for the resources resolved to by `context` FHIR ID
+        fields
+        * Specific [encounter-start `context` requirements](https://cds-hooks.hl7.org/hooks/encounter-start/2023SepSTU1Ballot/encounter-start/)
+        defined in the CDS Hooks specification
+
+      This version of the CRD implementation guide refers to version 1.0 of the hook.
+    DESCRIPTION
+
+    run_as_group
+
+    config(
+      inputs: {
+        auth_token_headers_json: { name: :encounter_start_auth_token_headers_json },
+        auth_tokens: { name: :encounter_start_auth_tokens },
+        auth_tokens_jwk_json: { name: :encounter_start_auth_tokens_jwk_json },
+        client_access_token: { name: :encounter_start_client_access_token },
+        client_fhir_server: { name: :encounter_start_client_fhir_server },
+        crd_jwks_keys_json: { name: :encounter_start_crd_jwks_keys_json },
+        custom_response: { name: :encounter_start_custom_response },
+        selected_response_types: { name: :encounter_start_selected_response_types }
+      },
+      outputs: {
+        auth_token_headers_json: { name: :encounter_start_auth_token_headers_json },
+        auth_token_payloads_json: { name: :encounter_start_auth_token_payloads_json },
+        auth_tokens: { name: :encounter_start_auth_tokens },
+        auth_tokens_jwk_json: { name: :encounter_start_auth_tokens_jwk_json },
+        client_access_token: { name: :encounter_start_client_access_token },
+        client_fhir_server: { name: :encounter_start_client_fhir_server },
+        crd_jwks_json: { name: :encounter_start_crd_jwks_json },
+        crd_jwks_keys_json: { name: :encounter_start_crd_jwks_keys_json }
+      },
+      options: {
+        hook_name: 'encounter-start',
+        hook_path: ENCOUNTER_START_PATH
+      }
+    )
+
+    test from: :crd_submitted_response_validation
+    test from: :crd_encounter_start_request
+    test from: :crd_decode_auth_token
+    test from: :crd_retrieve_jwks
+    test from: :crd_token_header
+    test from: :crd_token_payload
+    test from: :crd_hook_request_required_fields
+    test from: :crd_hook_request_optional_fields
+    test from: :crd_hook_request_valid_context
+    test from: :crd_hook_request_valid_prefetch
+    test from: :crd_card_display_attest_test
+  end
+end

data/lib/davinci_crd_test_kit/client_tests/client_order_dispatch_group.rb

@@ -0,0 +1,70 @@
+require_relative 'order_dispatch_receive_request_test'
+require_relative 'client_display_cards_attest'
+require_relative 'decode_auth_token_test'
+require_relative 'hook_request_optional_fields_test'
+require_relative 'hook_request_required_fields_test'
+require_relative 'hook_request_valid_context_test'
+require_relative 'hook_request_valid_prefetch_test'
+require_relative 'retrieve_jwks_test'
+require_relative 'submitted_response_validation'
+require_relative 'token_header_test'
+require_relative 'token_payload_test'
+
+module DaVinciCRDTestKit
+  class ClientOrderDispatchGroup < Inferno::TestGroup
+    title 'order-dispatch'
+    id :crd_client_order_dispatch
+    description <<~DESCRIPTION
+      The order-dispatch hook fires when a practitioner is selecting a candidate performer for a pre-existing order
+      that was not tied to a specific performer. These tests are based on the following criteria:
+        * [CRD IG requirements for this hook](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#order-dispatch),
+        which includes the profiles that are expected to be used for the resources resolved to by `context`
+        FHIR ID fields
+        * Specific [order-dispatch `context` requirements](https://cds-hooks.hl7.org/hooks/order-dispatch/2023SepSTU1Ballot/order-dispatch/)
+        defined in the CDS Hooks specification
+
+      This version of the CRD implementation guide refers to version 1.0 of the hook.
+    DESCRIPTION
+
+    run_as_group
+
+    config(
+      inputs: {
+        auth_token_headers_json: { name: :order_dispatch_auth_token_headers_json },
+        auth_tokens: { name: :order_dispatch_auth_tokens },
+        auth_tokens_jwk_json: { name: :order_dispatch_auth_tokens_jwk_json },
+        client_access_token: { name: :order_dispatch_client_access_token },
+        client_fhir_server: { name: :order_dispatch_client_fhir_server },
+        crd_jwks_keys_json: { name: :order_dispatch_crd_jwks_keys_json },
+        custom_response: { name: :order_dispatch_custom_response },
+        selected_response_types: { name: :order_dispatch_selected_response_types }
+      },
+      outputs: {
+        auth_token_headers_json: { name: :order_dispatch_auth_token_headers_json },
+        auth_token_payloads_json: { name: :order_dispatch_auth_token_payloads_json },
+        auth_tokens: { name: :order_dispatch_auth_tokens },
+        auth_tokens_jwk_json: { name: :order_dispatch_auth_tokens_jwk_json },
+        client_access_token: { name: :order_dispatch_client_access_token },
+        client_fhir_server: { name: :order_dispatch_client_fhir_server },
+        crd_jwks_json: { name: :order_dispatch_crd_jwks_json },
+        crd_jwks_keys_json: { name: :order_dispatch_crd_jwks_keys_json }
+      },
+      options: {
+        hook_name: 'order-dispatch',
+        hook_path: ORDER_DISPATCH_PATH
+      }
+    )
+
+    test from: :crd_submitted_response_validation
+    test from: :crd_order_dispatch_request
+    test from: :crd_decode_auth_token
+    test from: :crd_retrieve_jwks
+    test from: :crd_token_header
+    test from: :crd_token_payload
+    test from: :crd_hook_request_required_fields
+    test from: :crd_hook_request_optional_fields
+    test from: :crd_hook_request_valid_context
+    test from: :crd_hook_request_valid_prefetch
+    test from: :crd_card_display_attest_test
+  end
+end

data/lib/davinci_crd_test_kit/client_tests/client_order_select_group.rb

@@ -0,0 +1,72 @@
+require_relative 'order_select_receive_request_test'
+require_relative 'client_display_cards_attest'
+require_relative 'decode_auth_token_test'
+require_relative 'hook_request_optional_fields_test'
+require_relative 'hook_request_required_fields_test'
+require_relative 'hook_request_valid_context_test'
+require_relative 'hook_request_valid_prefetch_test'
+require_relative 'retrieve_jwks_test'
+require_relative 'submitted_response_validation'
+require_relative 'token_header_test'
+require_relative 'token_payload_test'
+
+module DaVinciCRDTestKit
+  class ClientOrderSelectGroup < Inferno::TestGroup
+    title 'order-select'
+    id :crd_client_order_select
+    description <<~DESCRIPTION
+      The order-select hook fires when a clinician selects one or more orders to place for a patient,
+      (including orders for medications, procedures, labs and other orders). If supported by the CDS Client, this
+      hook may also be invoked each time the clinician selects a detail regarding the order. These tests are based on
+      the following criteria:
+        * [CRD IG requirements for this hook](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#order-selecte),
+        which includes the profiles that are expected to be used for the resources resolved to by `context`
+        FHIR ID fields
+        * Specific [order-select `context` requirements](https://cds-hooks.hl7.org/hooks/order-select/2023SepSTU1Ballot/order-select/)
+        defined in the CDS Hooks specification
+
+      This version of the CRD implementation guide refers to version 1.0 of the hook.
+    DESCRIPTION
+
+    run_as_group
+
+    config(
+      inputs: {
+        auth_token_headers_json: { name: :order_select_auth_token_headers_json },
+        auth_tokens: { name: :order_select_auth_tokens },
+        auth_tokens_jwk_json: { name: :order_select_auth_tokens_jwk_json },
+        client_access_token: { name: :order_select_client_access_token },
+        client_fhir_server: { name: :order_select_client_fhir_server },
+        crd_jwks_keys_json: { name: :order_select_crd_jwks_keys_json },
+        custom_response: { name: :order_select_custom_response },
+        selected_response_types: { name: :order_select_selected_response_types }
+      },
+      outputs: {
+        auth_token_headers_json: { name: :order_select_auth_token_headers_json },
+        auth_token_payloads_json: { name: :order_select_auth_token_payloads_json },
+        auth_tokens: { name: :order_select_auth_tokens },
+        auth_tokens_jwk_json: { name: :order_select_auth_tokens_jwk_json },
+        client_access_token: { name: :order_select_client_access_token },
+        client_fhir_server: { name: :order_select_client_fhir_server },
+        crd_jwks_json: { name: :order_select_crd_jwks_json },
+        crd_jwks_keys_json: { name: :order_select_crd_jwks_keys_json }
+      },
+      options: {
+        hook_name: 'order-select',
+        hook_path: ORDER_SELECT_PATH
+      }
+    )
+
+    test from: :crd_submitted_response_validation
+    test from: :crd_order_select_request
+    test from: :crd_decode_auth_token
+    test from: :crd_retrieve_jwks
+    test from: :crd_token_header
+    test from: :crd_token_payload
+    test from: :crd_hook_request_required_fields
+    test from: :crd_hook_request_optional_fields
+    test from: :crd_hook_request_valid_context
+    test from: :crd_hook_request_valid_prefetch
+    test from: :crd_card_display_attest_test
+  end
+end

data/lib/davinci_crd_test_kit/client_tests/client_order_sign_group.rb

@@ -0,0 +1,71 @@
+require_relative 'order_sign_receive_request_test'
+require_relative 'client_display_cards_attest'
+require_relative 'decode_auth_token_test'
+require_relative 'hook_request_optional_fields_test'
+require_relative 'hook_request_required_fields_test'
+require_relative 'hook_request_valid_context_test'
+require_relative 'hook_request_valid_prefetch_test'
+require_relative 'retrieve_jwks_test'
+require_relative 'submitted_response_validation'
+require_relative 'token_header_test'
+require_relative 'token_payload_test'
+
+module DaVinciCRDTestKit
+  class ClientOrderSignGroup < Inferno::TestGroup
+    title 'order-sign'
+    id :crd_client_order_sign
+    description <<~DESCRIPTION
+      The order-sign hook fires when a clinician is ready to sign one or more orders for a patient, (including orders
+      for medications, procedures, labs and other orders). These tests are based on the following criteria:
+        * [CRD IG requirements for this hook](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#order-sign),
+        which includes the profiles that are expected to be used for the resources resolved to by `context`
+        FHIR ID fields
+        * Specific [order-sign `context` requirements](https://cds-hooks.org/hooks/order-sign/)
+        defined in the CDS Hooks specification
+
+      This version of the CRD implementation guide refers to version 1.1 of the hook which, at the time of publication,
+      was not available as a snapshot. Therefore the preceding link refers to the CDS hooks current build.
+    DESCRIPTION
+
+    run_as_group
+
+    config(
+      inputs: {
+        auth_token_headers_json: { name: :order_sign_auth_token_headers_json },
+        auth_tokens: { name: :order_sign_auth_tokens },
+        auth_tokens_jwk_json: { name: :order_sign_auth_tokens_jwk_json },
+        client_access_token: { name: :order_sign_client_access_token },
+        client_fhir_server: { name: :order_sign_client_fhir_server },
+        crd_jwks_keys_json: { name: :order_sign_crd_jwks_keys_json },
+        custom_response: { name: :order_sign_custom_response },
+        selected_response_types: { name: :order_sign_selected_response_types }
+      },
+      outputs: {
+        auth_token_headers_json: { name: :order_sign_auth_token_headers_json },
+        auth_token_payloads_json: { name: :order_sign_auth_token_payloads_json },
+        auth_tokens: { name: :order_sign_auth_tokens },
+        auth_tokens_jwk_json: { name: :order_sign_auth_tokens_jwk_json },
+        client_access_token: { name: :order_sign_client_access_token },
+        client_fhir_server: { name: :order_sign_client_fhir_server },
+        crd_jwks_json: { name: :order_sign_crd_jwks_json },
+        crd_jwks_keys_json: { name: :order_sign_crd_jwks_keys_json }
+      },
+      options: {
+        hook_name: 'order-sign',
+        hook_path: ORDER_SIGN_PATH
+      }
+    )
+
+    test from: :crd_submitted_response_validation
+    test from: :crd_order_sign_request
+    test from: :crd_decode_auth_token
+    test from: :crd_retrieve_jwks
+    test from: :crd_token_header
+    test from: :crd_token_payload
+    test from: :crd_hook_request_required_fields
+    test from: :crd_hook_request_optional_fields
+    test from: :crd_hook_request_valid_context
+    test from: :crd_hook_request_valid_prefetch
+    test from: :crd_card_display_attest_test
+  end
+end

data/lib/davinci_crd_test_kit/client_tests/decode_auth_token_test.rb

@@ -1,5 +1,8 @@
+require_relative '../client_hook_request_validation'
+
 module DaVinciCRDTestKit
   class DecodeAuthTokenTest < Inferno::Test
+    include ClientHookRequestValidation
     id :crd_decode_auth_token
     title 'Bearer token can be decoded'
     description %(
@@ -8,33 +11,50 @@ module DaVinciCRDTestKit
         include an Authorization header presenting the JWT as a "Bearer" token.
       )
 
-    output :auth_token, :auth_token_payload_json, :auth_token_header_json
+    output :auth_tokens, :auth_token_payloads_json, :auth_token_headers_json
 
-    uses_request :hook_request
+    def hook_name
+      config.options[:hook_name]
+    end
 
     run do
-      authorization_header = request.request_header('Authorization')&.value
-      skip_if authorization_header.blank?, 'Request does not include an Authorization header'
-
-      assert(authorization_header.start_with?('Bearer '),
-             'Authorization token must be a JWT presented as a `Bearer` token')
-
-      auth_token = authorization_header.delete_prefix('Bearer ')
-      output(auth_token:)
-
-      begin
-        payload, header =
-          JWT.decode(
-            auth_token,
-            nil,
-            false
-          )
-
-        output auth_token_payload_json: payload.to_json,
-               auth_token_header_json: header.to_json
-      rescue StandardError => e
-        assert false, "Token is not a properly constructed JWT: #{e.message}"
+      load_tagged_requests(hook_name)
+      skip_if requests.empty?, "No #{hook_name} requests were made in a previous test as expected."
+      auth_tokens = []
+      auth_token_payloads_json = []
+      auth_token_headers_json = []
+
+      requests.each_with_index do |request, index|
+        @request_number = index + 1
+
+        authorization_header = request.request_header('Authorization')&.value
+
+        unless authorization_header.start_with?('Bearer ')
+          add_message('error', "#{request_number}Authorization token must be a JWT presented as a `Bearer` token")
+        end
+
+        auth_token = authorization_header.delete_prefix('Bearer ')
+        auth_tokens << auth_token
+
+        begin
+          payload, header =
+            JWT.decode(
+              auth_token,
+              nil,
+              false
+            )
+
+          auth_token_payloads_json << payload.to_json
+          auth_token_headers_json << header.to_json
+        rescue StandardError => e
+          add_message('error', "#{request_number}Token is not a properly constructed JWT: #{e.message}")
+        end
       end
+      output auth_tokens: auth_tokens.to_json,
+             auth_token_payloads_json: auth_token_payloads_json.to_json,
+             auth_token_headers_json: auth_token_headers_json.to_json
+
+      no_error_validation('Decoding Authorization header Bearer tokens failed.')
     end
   end
 end

data/lib/davinci_crd_test_kit/client_tests/encounter_discharge_receive_request_test.rb

@@ -7,10 +7,11 @@ module DaVinciCRDTestKit
     id :crd_encounter_discharge_request
     title 'Request received for encounter-discharge hook'
     description %(
-        This test waits for an incoming [encounter-discharge](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#encounter-discharge)
-        hook request and responds to the client with the response types selected as an input.
+        This test waits for multiple incoming [encounter-discharge](https://hl7.org/fhir/us/davinci-crd/STU2/hooks.html#encounter-discharge)
+        hook requests and responds to the client with the response types selected as an input.
       )
-    receives_request :encounter_discharge
+
+    config options: { accepts_multiple_requests: true }
 
     input :iss
     input :encounter_discharge_selected_response_types,
@@ -20,7 +21,8 @@ module DaVinciCRDTestKit
             response type that will be returned for this hook is the `Instructions` card type.
           ),
           type: 'checkbox',
-          default: ['instructions'],
+          default: ['coverage_information', 'external_reference', 'instructions'],
+          optional: true,
           options: {
             list_options: [
               {
@@ -49,6 +51,14 @@ module DaVinciCRDTestKit
               }
             ]
           }
+    input :encounter_discharge_custom_response,
+          title: 'Custom response for encounter-discharge hook requests',
+          description: %(
+            A JSON string may be provided here to replace the normal response
+            from the hook request endpoint
+          ),
+          type: 'textarea',
+          optional: true
 
     run do
       wait(
@@ -56,11 +66,14 @@ module DaVinciCRDTestKit
         message: %(
           **Encounter Discharge CDS Service Test**:
 
-          Invoke the encounter-discharge hook and send a request to:
+          Invoke the encounter-discharge hook and send requests to:
 
           `#{encounter_discharge_url}`
 
-          Inferno will process the request and return CDS cards if successful.
+          Inferno will process the requests and return CDS cards if successful.
+
+          [Click here](#{resume_pass_url}?token=encounter-discharge%20#{iss}) when you have finished submitting
+          requests.
         )
       )
     end