davinci_pas_test_kit 0.12.2 → 0.13.0

data/lib/requirements_config.yaml

@@ -2,7 +2,7 @@ test_kit_id: davinci_pas_test_kit
 
 suites:
   - id: davinci_pas_client_suite_v201
-    class_name: DaVinciPASTestKit::ClientSuite
+    class_name: DaVinciPASTestKit::DaVinciPASV201::ClientSuite
     suite_actor: Client
   - id: davinci_pas_server_suite_v201
     class_name: DaVinciPASTestKit::DaVinciPASV201::ServerSuite

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: davinci_pas_test_kit
 version: !ruby/object:Gem::Version
-  version: 0.12.2
+  version: 0.13.0
 platform: ruby
 authors:
 - Inferno Team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-20 00:00:00.000000000 Z
+date: 2025-05-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: inferno_core
@@ -16,14 +16,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.6.4
+        version: 0.6.8
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.6.4
+        version: 0.6.8
+- !ruby/object:Gem::Dependency
+  name: smart_app_launch_test_kit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.6.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.6.2
 - !ruby/object:Gem::Dependency
   name: subscriptions_test_kit
   requirement: !ruby/object:Gem::Requirement
@@ -38,6 +52,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 0.11.0
+- !ruby/object:Gem::Dependency
+  name: udap_security_test_kit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.11.4
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.11.4
 - !ruby/object:Gem::Dependency
   name: database_cleaner-sequel
   requirement: !ruby/object:Gem::Requirement
@@ -104,9 +132,18 @@ files:
 - LICENSE
 - config/presets/pas_client_example.json
 - config/presets/pas_ri.json
+- config/presets/pas_server_subscription_creation_against_pas_client.json
 - lib/davinci_pas_test_kit.rb
+- lib/davinci_pas_test_kit/certs/InfernoCA.key
+- lib/davinci_pas_test_kit/certs/InfernoCA.pem
+- lib/davinci_pas_test_kit/certs/TestKit.pem
+- lib/davinci_pas_test_kit/certs/TestKitPrivateKey.key
 - lib/davinci_pas_test_kit/client_suite.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/claim_response_decision/pas_claim_response_decision_test.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_registration/configuration_other_display_test.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_registration/configuration_smart_display_test.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_registration/configuration_udap_display_test.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_registration/other_auth_attest_test.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_approval_submit_test.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_denial_submit_test.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_inquire_must_support_test.rb
@@ -119,8 +156,6 @@ files:
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_submit_must_support_test.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_subscription_create_test.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_subscription_pas_conformance_test.rb
-- lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_token_request_test.rb
-- lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_token_validation_test.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/error_tests/nonconformant_pas_bundle.json
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/error_tests/pas_inquiry_error_test.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/error_tests/pas_submission_error_test.rb
@@ -132,12 +167,22 @@ files:
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/must_support/service_request_metadata.yml
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/notification/pas_subscription_notification_test.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_approval_group.rb
-- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_authentication_group.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_auth_smart_group.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_auth_udap_group.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_denial_group.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_must_support_group.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_options.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_pended_group.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_registration_group.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_subscription_setup_group.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_workflows_group.rb
 - lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_error_group.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_server_subscription_input_conformance.rb
+- lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_server_subscription_setup.rb
+- lib/davinci_pas_test_kit/descriptions.rb
 - lib/davinci_pas_test_kit/docs/PAS Requirements Interpretation.xlsx
 - lib/davinci_pas_test_kit/docs/client_suite_description_v201.md
+- lib/davinci_pas_test_kit/docs/demo/PAS Client Suite Demonstration.postman_collection.json
 - lib/davinci_pas_test_kit/docs/server_suite_description_v201.md
 - lib/davinci_pas_test_kit/endpoints/claim_endpoint.rb
 - lib/davinci_pas_test_kit/endpoints/subscription_create_endpoint.rb
@@ -254,7 +299,6 @@ files:
 - lib/davinci_pas_test_kit/generator/ig_metadata_extractor.rb
 - lib/davinci_pas_test_kit/generator/ig_resources.rb
 - lib/davinci_pas_test_kit/generator/must_support_check_profiles.rb
-- lib/davinci_pas_test_kit/generator/must_support_metadata_extractor.rb
 - lib/davinci_pas_test_kit/generator/must_support_test_generator.rb
 - lib/davinci_pas_test_kit/generator/naming.rb
 - lib/davinci_pas_test_kit/generator/operation_test_generator.rb
@@ -276,10 +320,12 @@ files:
 - lib/davinci_pas_test_kit/metadata.rb
 - lib/davinci_pas_test_kit/must_support_test.rb
 - lib/davinci_pas_test_kit/pas_bundle_validation.rb
+- lib/davinci_pas_test_kit/pas_subscription_verification.rb
 - lib/davinci_pas_test_kit/requirements/davinci-pas-test-kit_out_of_scope_requirements.csv
 - lib/davinci_pas_test_kit/requirements/davinci-pas-test-kit_requirements.csv
 - lib/davinci_pas_test_kit/requirements/generated/davinci-pas-test-kit_requirements_coverage.csv
 - lib/davinci_pas_test_kit/response_generator.rb
+- lib/davinci_pas_test_kit/session_identification.rb
 - lib/davinci_pas_test_kit/tags.rb
 - lib/davinci_pas_test_kit/urls.rb
 - lib/davinci_pas_test_kit/user_input_response.rb

data/lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_token_request_test.rb

@@ -1,31 +0,0 @@
-require_relative '../../../urls'
-
-module DaVinciPASTestKit
-  module DaVinciPASV201
-    class PASClientTokenRequestTest < Inferno::Test
-      include URLs
-
-      id :pas_client_v201_token_request_test
-      title 'Client makes token request'
-      description %(
-        Inferno will wait for the client to make a token request.
-      )
-      input :client_id,
-            title: 'Client ID',
-            description: %(
-              Client ID that the client will use to request an access token.
-            )
-
-      run do
-        wait(
-          identifier: client_id,
-          message: %(
-            Submit your token request with client id `#{client_id}` to
-
-            `#{token_url}`
-          )
-        )
-      end
-    end
-  end
-end

data/lib/davinci_pas_test_kit/custom_groups/v2.0.1/client_tests/pas_client_token_validation_test.rb

@@ -1,18 +0,0 @@
-require_relative '../../../tags'
-
-module DaVinciPASTestKit
-  module DaVinciPASV201
-    class PASClientTokentRequestTest < Inferno::Test
-      id :pas_client_v201_token_validation_test
-      title 'Client token request is valid'
-      description 'Inferno will verify that an access token was successfully returned to the client under test.'
-      output :access_token
-
-      run do
-        load_tagged_requests(AUTH_TAG)
-        skip_if requests.empty?, 'No token requests were received'
-        output access_token: JSON.parse(requests.last.response_body)['access_token']
-      end
-    end
-  end
-end

data/lib/davinci_pas_test_kit/custom_groups/v2.0.1/pas_client_authentication_group.rb

@@ -1,49 +0,0 @@
-require_relative 'client_tests/pas_client_token_request_test'
-require_relative 'client_tests/pas_client_token_validation_test'
-
-module DaVinciPASTestKit
-  module DaVinciPASV201
-    class PASClientAuthenticationGroup < Inferno::TestGroup
-      id :pas_client_v201_authentication_group
-      title 'Demonstrate Authorization'
-      description %(
-        This group of tests allows Inferno to act as a OAuth server
-        and provide access tokens for the client under test to use
-        when making further requests.
-
-        The tests assume that the authentication workflow starts
-        after client registration. Upon clicking the "Run Tests" button
-        in the upper right, Inferno will ask for an input for the `client_id`
-        that was used for client registration, or manually configured in the
-        client.
-
-        Before submitting a token request, click the "Submit" button at the
-        bottom of the dialog to confirm the `client_id` that Inferno will
-        watch for.
-
-        Finally, make a valid token request that includes the specified `client_id`
-        to indicated token endpoint. This should be a POST of an `x-www-form-encoded`
-        body containing keys for `grant_type` with a value of `client_credentials` and
-        `client_id` with a value of the configured `client_id` value. For example, if
-        the `client_id` value was `123`, then the body of the request would be:
-
-        ```grant_type=client_credentials&client_id=123```
-
-        The response json object will include an `access_token` key, for example:
-
-        ```{"access_token":"97e792038d922bc3cf388b608e45c318","token_type":"bearer","expires_in":300}```
-
-        The value of the `access_token` key (`97e792038d922bc3cf388b608e45c318` in the example)
-        must be sent with every subsequent request to Inferno during this session in
-        the "Authorization" HTTP header with prefix "Bearer: ". In this example, the
-        Authorization HTTP header would have value:
-
-        ```Bearer 97e792038d922bc3cf388b608e45c318```
-      )
-      run_as_group
-
-      test from: :pas_client_v201_token_request_test
-      test from: :pas_client_v201_token_validation_test
-    end
-  end
-end

data/lib/davinci_pas_test_kit/generator/must_support_metadata_extractor.rb

@@ -1,327 +0,0 @@
-require 'pry'
-require_relative 'value_extractor'
-
-module DaVinciPASTestKit
-  class Generator
-    class MustSupportMetadataExtractor
-      attr_accessor :profile_elements, :profile, :resource, :ig_resources
-
-      def initialize(profile_elements, profile, resource, ig_resources)
-        self.profile_elements = profile_elements
-        self.profile = profile
-        self.resource = resource
-        self.ig_resources = ig_resources
-      end
-
-      def must_supports
-        @must_supports = {
-          extensions: must_support_extensions,
-          slices: must_support_slices,
-          elements: must_support_elements
-        }
-
-        @must_supports
-      end
-
-      def all_must_support_elements
-        profile_elements.select(&:mustSupport)
-      end
-
-      def must_support_extension_elements
-        all_must_support_elements.select { |element| element.path.end_with? 'extension' }
-      end
-
-      def must_support_extensions
-        must_support_extension_elements.map do |element|
-          {
-            id: element.id,
-            path: element.path.gsub("#{resource}.", ''),
-            url: element.type.first.profile.first
-          }
-        end
-      end
-
-      def must_support_slice_elements
-        all_must_support_elements.select do |element|
-          !element.path.end_with?('extension') && element.sliceName.present?
-        end
-      end
-
-      def sliced_element(slice)
-        profile_elements.find { |element| element.id == slice.path }
-      end
-
-      def discriminators(slice)
-        slice.slicing.discriminator
-      end
-
-      def must_support_pattern_slice_elements
-        must_support_slice_elements.select do |element|
-          discriminators(sliced_element(element)).first.type == 'pattern' unless sliced_element(element).slicing.nil?
-        end
-      end
-
-      def pattern_slices
-        must_support_pattern_slice_elements.map do |current_element|
-          {
-            name: current_element.id,
-            path: current_element.path.gsub("#{resource}.", '')
-          }.tap do |metadata|
-            discriminator = discriminators(sliced_element(current_element)).first
-            discriminator_path = discriminator.path
-            discriminator_path = '' if discriminator_path == '$this'
-            pattern_element =
-              if discriminator_path.present?
-                profile_elements.find { |element| element.id == "#{current_element.id}.#{discriminator_path}" }
-              else
-                current_element
-              end
-
-            metadata[:discriminator] =
-              if pattern_element.patternCodeableConcept.present?
-                {
-                  type: 'patternCodeableConcept',
-                  path: discriminator_path,
-                  code: pattern_element.patternCodeableConcept.coding.first.code,
-                  system: pattern_element.patternCodeableConcept.coding.first.system
-                }
-              elsif pattern_element.patternCoding.present?
-                {
-                  type: 'patternCoding',
-                  path: discriminator_path,
-                  code: pattern_element.patternCoding.code,
-                  system: pattern_element.patternCoding.system
-                }
-              elsif pattern_element.patternIdentifier.present?
-                {
-                  type: 'patternIdentifier',
-                  path: discriminator_path,
-                  system: pattern_element.patternIdentifier.system
-                }
-              elsif pattern_element.binding&.strength == 'required' &&
-                    pattern_element.binding&.valueSet.present?
-
-                value_extractor = ValueExactor.new(ig_resources, resource)
-
-                values = value_extractor.values_from_value_set_binding(pattern_element).presence ||
-                         value_extractor.values_from_resource_metadata([metadata[:path]]).presence || []
-
-                {
-                  type: 'requiredBinding',
-                  path: discriminator_path,
-                  values:
-                }
-              else
-                raise StandardError, 'Unsupported discriminator pattern type'
-              end
-          end
-        end
-      end
-
-      def must_support_type_slice_elements
-        must_support_slice_elements.select do |element|
-          discriminators(sliced_element(element)).first.type == 'type' unless sliced_element(element).slicing.nil?
-        end
-      end
-
-      def type_slices
-        must_support_type_slice_elements.map do |current_element|
-          discriminator = discriminators(sliced_element(current_element)).first
-          type_path = discriminator.path
-          type_path = '' if type_path == '$this'
-          type_element =
-            if type_path.present?
-              profile_elements.find { |element| element.id == "#{current_element.id}.#{type_path}" }
-            else
-              current_element
-            end
-
-          type_code = type_element.type.first.code
-
-          {
-            name: current_element.id,
-            path: current_element.path.gsub("#{resource}.", ''),
-            discriminator: {
-              type: 'type',
-              code: type_code.upcase_first
-            }
-          }
-        end
-      end
-
-      def must_support_value_slice_elements
-        must_support_slice_elements.select do |element|
-          discriminators(sliced_element(element)).first.type == 'value' unless sliced_element(element).slicing.nil?
-        end
-      end
-
-      def value_slices
-        must_support_value_slice_elements.map do |current_element|
-          {
-            name: current_element.id,
-            path: current_element.path.gsub("#{resource}.", ''),
-            discriminator: {
-              type: 'value'
-            }
-          }.tap do |metadata|
-            metadata[:discriminator][:values] = discriminators(sliced_element(current_element)).map do |discriminator|
-              fixed_element = profile_elements.find do |element|
-                element.id.starts_with?(current_element.id) &&
-                  element.path == "#{current_element.path}.#{discriminator.path}"
-              end
-
-              {
-                path: discriminator.path,
-                value: fixed_element&.fixedUri || fixed_element&.fixedCode
-              }
-            end
-          end
-        end
-      end
-
-      def must_support_slices
-        pattern_slices + type_slices + value_slices
-      end
-
-      def plain_must_support_elements
-        all_must_support_elements - must_support_extension_elements - must_support_slice_elements
-      end
-
-      def handle_fixed_values(metadata, element)
-        if element.fixedUri.present?
-          metadata[:fixed_value] = element.fixedUri
-        elsif element.patternCodeableConcept.present?
-          metadata[:fixed_value] = element.patternCodeableConcept.coding.first.code
-          metadata[:path] += '.coding.code'
-        elsif element.fixedCode.present?
-          metadata[:fixed_value] = element.fixedCode
-        elsif element.patternIdentifier.present?
-          metadata[:fixed_value] = element.patternIdentifier.system
-          metadata[:path] += '.system'
-        end
-      end
-
-      def type_must_support_extension?(extensions)
-        extensions&.any? do |extension|
-          extension.url == 'http://hl7.org/fhir/StructureDefinition/elementdefinition-type-must-support' &&
-            extension.valueBoolean
-        end
-      end
-
-      def save_type_code?(type)
-        type.code == 'Reference'
-      end
-
-      def get_type_must_support_metadata(current_metadata, current_element)
-        current_element.type.map do |type|
-          next unless type_must_support_extension?(type.extension)
-
-          metadata =
-            {
-              path: "#{current_metadata[:path].delete_suffix('[x]')}#{type.code.upcase_first}",
-              original_path: current_metadata[:path]
-            }
-          metadata[:type] = [type.code] if save_type_code?(type)
-          handle_type_must_support_target_profiles(type, metadata) if type.code == 'Reference'
-
-          metadata
-        end.compact
-      end
-
-      def handle_type_must_support_target_profiles(type, metadata)
-        index = 0
-        target_profiles = []
-
-        type.source_hash['_targetProfile']&.each do |hash|
-          if hash.present?
-            element = FHIR::Element.new(hash)
-            target_profiles << type.targetProfile[index] if type_must_support_extension?(element.extension)
-          end
-          index += 1
-        end
-
-        metadata[:target_profiles] = target_profiles if target_profiles.present?
-      end
-
-      def handle_choice_type_in_sliced_element(current_metadata, must_support_elements_metadata)
-        choice_element_metadata = must_support_elements_metadata.find do |metadata|
-          metadata[:original_path].present? &&
-            current_metadata[:path].include?(metadata[:original_path])
-        end
-
-        return unless choice_element_metadata.present?
-
-        current_metadata[:original_path] = current_metadata[:path]
-        current_metadata[:path] =
-          current_metadata[:path].sub(choice_element_metadata[:original_path], choice_element_metadata[:path])
-      end
-
-      def must_support_elements
-        plain_must_support_elements.each_with_object([]) do |current_element, must_support_elements_metadata|
-          {
-            path: current_element.path.gsub("#{resource}.", '')
-          }.tap do |current_metadata|
-            type_must_support_metadata = get_type_must_support_metadata(current_metadata, current_element)
-
-            if type_must_support_metadata.any?
-              must_support_elements_metadata.concat(type_must_support_metadata)
-            else
-              handle_choice_type_in_sliced_element(current_metadata, must_support_elements_metadata)
-
-              supported_types = current_element.type.select { |type| save_type_code?(type) }.map(&:code)
-              current_metadata[:types] = supported_types if supported_types.present?
-
-              if current_element.type.first&.code == 'Reference'
-                handle_type_must_support_target_profiles(current_element.type.first,
-                                                         current_metadata)
-              end
-
-              handle_fixed_values(current_metadata, current_element)
-
-              must_support_elements_metadata.delete_if do |metadata|
-                metadata[:path] == current_metadata[:path] && metadata[:fixed_value].blank?
-              end
-
-              must_support_elements_metadata << current_metadata
-            end
-          end
-        end.uniq
-      end
-
-      #### SPECIAL CASE ####
-
-      def vital_sign?
-        [
-          'http://hl7.org/fhir/StructureDefinition/vitalsigns',
-          'http://hl7.org/fhir/us/core/StructureDefinition/us-core-vital-signs'
-        ].include?(profile.baseDefinition)
-      end
-
-      def blood_pressure?
-        ['observation-bp', 'USCoreBloodPressureProfile'].include?(profile.name)
-      end
-
-      # ONC and US Core 4.0.0 both clarified that health IT developers that always provide HL7 FHIR "observation" values
-      # are not required to demonstrate Health IT Module support for "dataAbsentReason" elements.
-      # Remove MS check for dataAbsentReason and component.dataAbsentReason from vital sign profiles and observation lab
-      # profile.
-      # Smoking status profile does not have MS on dataAbsentReason. It is safe to use profile.type == 'Observation'
-
-      def remove_device_carrier
-        return unless profile.type == 'Device'
-
-        @must_supports[:elements].delete_if do |element|
-          ['udiCarrier.carrierAIDC', 'udiCarrier.carrierHRF'].include?(element[:path])
-        end
-      end
-
-      def remove_document_reference_attachment_data_url
-        return unless profile.type == 'DocumentReference'
-
-        @must_supports[:elements].delete_if do |element|
-          ['content.attachment.data', 'content.attachment.url'].include?(element[:path])
-        end
-      end
-    end
-  end
-end