davinci_pas_test_kit 0.14.0 → 0.15.0

data/lib/davinci_pas_test_kit/{jobs → client/jobs}/send_pas_subscription_notification.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
-require_relative '../tags'
-require_relative '../urls'
+require_relative '../../cross_suite/tags'
+require_relative '../client_urls'
 require 'subscriptions_test_kit'
 
 module DaVinciPASTestKit
@@ -9,17 +9,19 @@ module DaVinciPASTestKit
     class SendPASSubscriptionNotification
       include Sidekiq::Job
       include SubscriptionsTestKit::SubscriptionsR5BackportR4Client::SubscriptionSimulationUtils
-      include URLs
+      include ClientURLs
 
-      # override the one from URLs
+      # provide a suite_id definition to use with the ClientURLs module
       def suite_id
         @notification_suite_id
       end
 
+      attr_reader :ig_version
+
       sidekiq_options retry: false
 
       def perform(test_run_id, test_session_id, result_id, notification_bearer_token, notification_json, resume_token,
-                  notification_suite_id)
+                  notification_suite_id, ig_version = 'v2.0.1')
         @test_run_id = test_run_id
         @test_session_id = test_session_id
         @result_id = result_id
@@ -27,6 +29,7 @@ module DaVinciPASTestKit
         @notification_json = notification_json
         @resume_token = resume_token
         @notification_suite_id = notification_suite_id
+        @ig_version = ig_version
 
         await_subscription_creation # NOTE: currently must exist - see PASClientPendedSubmitTest
         sleep 1
@@ -100,7 +103,8 @@ module DaVinciPASTestKit
       end
 
       def send_event_notification
-        event_json = derive_event_notification(@notification_json, subscription_full_url, subscription_topic, 1).to_json
+        event_json = derive_event_notification(@notification_json, subscription_full_url, subscription_topic,
+                                               1).to_json
         response = send_notification(event_json)
         persist_notification_request(response, [REST_HOOK_EVENT_NOTIFICATION_TAG])
       end
@@ -111,7 +115,8 @@ module DaVinciPASTestKit
         # Warning: This is a hack. If there is an error with the request such that we never get a response, we have
         #          no clean way to persist that information for the Inferno test to check later. The solution here
         #          is to persist the request anyway with a status of nil, using the error message as response body
-        Faraday::Response.new(response_body: e.message, url: rest_hook_connection.url_prefix.to_s)
+        Faraday::Response.new(response_body: e.message, url: rest_hook_connection.url_prefix.to_s,
+                              request_body:, request_headers: headers)
       end
 
       def persist_notification_request(response, tags)

data/lib/davinci_pas_test_kit/{jobs → client/jobs}/send_subscription_handshake.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-require_relative '../tags'
+require_relative '../../cross_suite/tags'
 require 'subscriptions_test_kit'
 
 module DaVinciPASTestKit

data/lib/davinci_pas_test_kit/client/metadata/mock_pas_server.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+module DaVinciPASTestKit
+  # Serves the simulated PAS payer server's CapabilityStatement so that
+  # clients under test can discover its capabilities, including subscription support, as
+  # required by the PAS IG.
+  module MockPASServer
+    CAPABILITY_STATEMENT_PATH = File.join(__dir__, 'pas_server_capability_statement.json').freeze
+
+    class << self
+      # @return [String] the simulated server's CapabilityStatement as a JSON string
+      def capability_statement_json
+        @capability_statement_json ||= File.read(CAPABILITY_STATEMENT_PATH)
+      end
+
+      # Rack response for a FHIR `GET [base]/metadata` request
+      def capability_statement_response(_env = nil)
+        [
+          200,
+          { 'Content-Type' => 'application/fhir+json', 'Access-Control-Allow-Origin' => '*' },
+          [capability_statement_json]
+        ]
+      end
+    end
+  end
+end

data/lib/davinci_pas_test_kit/client/metadata/pas_server_capability_statement.json

@@ -0,0 +1,60 @@
+{
+  "resourceType" : "CapabilityStatement",
+  "name" : "DaVinciPASClientSuiteV221SimulatedPayerServer",
+  "title" : "Da Vinci PAS Client Suite v2.2.1 Simulated Payer Server",
+  "status" : "active",
+  "experimental" : false,
+  "date" : "2026-06-15",
+  "description" : "CapabilityStatement for the Da Vinci PAS Client Suite v2.2.1 simulated payer/intermediary server. Declares support for the PAS $submit and $inquire operations on Claim and Subscription create/update/delete so that clients under test can discover subscription support.",
+  "kind" : "instance",
+  "software" : {
+    "name" : "DaVinciPASClientSuiteV221SimulatedPayerServer"
+  },
+  "implementation" : {
+    "description" : "Inferno Da Vinci PAS Client Suite v2.2.1 Simulated Payer Server"
+  },
+  "fhirVersion" : "4.0.1",
+  "format" : [
+    "json"
+  ],
+  "rest" : [
+    {
+      "mode" : "server",
+      "resource" : [
+        {
+          "type" : "Claim",
+          "operation" : [
+            {
+              "name" : "PAS Claim Request",
+              "definition" : "http://hl7.org/fhir/us/davinci-pas/OperationDefinition/Claim-submit|2.2.1"
+            },
+            {
+              "name" : "PAS Claim Inquiry",
+              "definition" : "http://hl7.org/fhir/us/davinci-pas/OperationDefinition/Claim-inquiry|2.2.1"
+            }
+          ]
+        },
+        {
+          "extension" : [
+            {
+              "url" : "http://hl7.org/fhir/uv/subscriptions-backport/StructureDefinition/capabilitystatement-subscriptiontopic-canonical",
+              "valueCanonical" : "http://hl7.org/fhir/us/davinci-pas/SubscriptionTopic/PASSubscriptionTopic"
+            }
+          ],
+          "type" : "Subscription",
+          "interaction" : [
+            {
+              "code" : "create"
+            },
+            {
+              "code" : "update"
+            },
+            {
+              "code" : "delete"
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

data/lib/davinci_pas_test_kit/client/pas_client_options.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+require 'smart_app_launch_test_kit'
+require 'udap_security_test_kit'
+require_relative '../cross_suite/tags'
+
+module DaVinciPASTestKit
+  module PASClientOptions
+    module_function
+
+    SMART_BACKEND_SERVICES_CONFIDENTIAL_ASYMMETRIC =
+      SMARTAppLaunch::SMARTClientOptions::SMART_BACKEND_SERVICES_CONFIDENTIAL_ASYMMETRIC
+    UDAP_CLIENT_CREDENTIALS =
+      UDAPSecurityTestKit::UDAPClientOptions::UDAP_CLIENT_CREDENTIALS
+    OTHER_AUTH = OTHER_AUTH_TAG
+
+    def recursive_remove_input(runnable, input)
+      runnable.inputs.delete(input)
+      runnable.input_order.delete(input)
+      runnable.children.each { |child_runnable| recursive_remove_input(child_runnable, input) }
+    end
+  end
+end

data/lib/davinci_pas_test_kit/client/pas_client_subscription_pas_conformance_test.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+require_relative '../cross_suite/pas_subscription_verification'
+
+module DaVinciPASTestKit
+  class SubscriptionPASConformanceTest < Inferno::Test
+    include PASSubscriptionVerification
+
+    id :pas_client_subscription_pas_conformance_test
+    title 'Subscription creation request has the correct structure and content'
+    description %(
+      This test verifies that the Subscription created by the client under test
+      is conformant to PAS requirements on the Subscription, including
+      - The use of the [PAS-defined Subscription
+        Topic](https://hl7.org/fhir/us/davinci-pas/STU2/SubscriptionTopic-PASSubscriptionTopic.html), and
+      - Inclusion of filter criteria for the client's organization.
+    )
+
+    verifies_requirements 'hl7.fhir.us.davinci-pas_2.2.1@spec-62'
+
+    def ig_version
+      config.options[:ig_version]
+    end
+
+    run do
+      load_tagged_requests(SUBSCRIPTION_CREATE_TAG)
+      skip_if(requests.none?, 'Inferno did not receive a Subscription creation request')
+      subscription_resource = request.request_body
+
+      verify_pas_subscription(subscription_resource, ig_version:)
+    end
+  end
+end

data/lib/davinci_pas_test_kit/client/registration/abstract_configuration_other_display_test.rb

@@ -0,0 +1,45 @@
+module DaVinciPASTestKit
+  class AbstractRegistrationConfigurationOtherDisplay < Inferno::Test
+    id :pas_client_reg_config_other_display
+    title 'PAS client registers Inferno as a PAS server'
+    description %(
+      This test provides all the information needed for testers to configure
+      the client under test to communicate with Inferno's simulated PAS server
+      using dedicated endpoints.
+    )
+    attestation
+
+    input :session_url_path,
+          title: 'Session-specific URL path extension',
+          type: 'text',
+          optional: true,
+          description: %(
+            Inferno will use this value to setup dedicated session-specific FHIR endpoints
+            to use during these tests. If not provided a value will be generated.
+          )
+    output :session_url_path
+    output :confirmation_url
+
+    run do
+      if session_url_path.blank?
+        new_session_url_path = test_session_id
+        output(session_url_path: new_session_url_path)
+      end
+      wait_identifier = session_url_path || new_session_url_path
+      confirmation_url = "#{resume_pass_url}?token=#{wait_identifier}"
+      output(confirmation_url:)
+
+      wait(
+        identifier: wait_identifier,
+        message: %(
+          **Inferno Simulated Server Details**:
+
+          FHIR Base URL: `#{session_fhir_base_url(wait_identifier)}`
+
+          [Click here](#{confirmation_url}) once you have configured
+          the client to connect to Inferno at the above endpoints.
+        )
+      )
+    end
+  end
+end

data/lib/davinci_pas_test_kit/client/registration/abstract_configuration_smart_display_test.rb

@@ -0,0 +1,37 @@
+module DaVinciPASTestKit
+  class AbstractRegistrationConfigurationSMARTDisplay < Inferno::Test
+    id :pas_client_reg_config_smart_display
+    title 'PAS client registers Inferno as a PAS server'
+    description %(
+      This test provides all the information needed for testers to configure
+      the client under test to communicate with Inferno's simulated PAS server
+      including SMART endpoints to obtain access tokens.
+    )
+    attestation
+
+    input :client_id
+    output :confirmation_url
+
+    run do
+      identifier = client_id
+      confirmation_url = "#{resume_pass_url}?token=#{identifier}"
+      output(confirmation_url:)
+
+      wait(
+        identifier:,
+        message: %(
+          **Inferno Simulated Server Details**:
+
+          FHIR Base URL: `#{fhir_base_url}`
+
+          Authentication Details:
+          - SMART Client Id: `#{client_id}`
+          - Token endpoint: `#{token_url}`
+
+          [Click here](#{confirmation_url}) once you have configured
+          the client to connect to Inferno at the above endpoints.
+        )
+      )
+    end
+  end
+end

data/lib/davinci_pas_test_kit/client/registration/abstract_configuration_udap_display_test.rb

@@ -0,0 +1,37 @@
+module DaVinciPASTestKit
+  class AbstractRegistrationConfigurationUDAPDisplay < Inferno::Test
+    id :pas_client_reg_config_udap_display
+    title 'PAS client registers Inferno as a PAS server'
+    description %(
+      This test provides all the information needed for testers to configure
+      the client under test to communicate with Inferno's simulated PAS server
+      including UDAP endpoints to obtain access tokens.
+    )
+    attestation
+
+    input :client_id
+    output :confirmation_url
+
+    run do
+      identifier = client_id
+      confirmation_url = "#{resume_pass_url}?token=#{identifier}"
+      output(confirmation_url:)
+
+      wait(
+        identifier:,
+        message: %(
+          **Inferno Simulated Server Details**:
+
+          FHIR Base URL: `#{fhir_base_url}`
+
+          Authentication Details:
+          - UDAP Client Id: `#{client_id}`
+          - Token endpoint: `#{token_url}`
+
+          [Click here](#{confirmation_url}) once you have configured
+          the client to connect to Inferno at the above endpoints.
+        )
+      )
+    end
+  end
+end

data/lib/davinci_pas_test_kit/client/registration/abstract_other_auth_attest_test.rb

@@ -0,0 +1,39 @@
+module DaVinciPASTestKit
+  class AbstractRegistrationOtherAuthAttest < Inferno::Test
+    id :pas_client_reg_other_auth_attest
+    title 'PAS client supports a non-standard approach for authenticating with the PAS server'
+    description %(
+      Since a standard auth approach was not chosen for this session, this test provides testers with an
+      opportunity to attest to their client's ability to authenticate itself to a server
+      using a method that this Inferno test suite does not support, such as mutual authentication
+      TLS.
+    )
+    attestation
+
+    output :attest_true_url
+    output :attest_false_url
+
+    run do
+      identifier = test_session_id
+      attest_true_url = "#{resume_pass_url}?token=#{identifier}"
+      output(attest_true_url:)
+      attest_false_url = "#{resume_fail_url}?token=#{identifier}"
+      output(attest_false_url:)
+
+      wait(
+        identifier:,
+        message: %(
+          **Other Authentication Attestation**:
+
+          I attest that the client system can authenticate itself with a PAS server using
+          a mechanism other than the SMART Backend Services or UDAP B2B client credentials
+          flows.
+
+          [Click here](#{attest_true_url}) if the above statement is true.
+
+          [Click here](#{attest_false_url}) if the above statement is false.
+        )
+      )
+    end
+  end
+end