davinci_pdex_test_kit 0.12.0 → 0.12.1

data/lib/davinci_pdex_test_kit/pdex_payer_client/client_workflow_interaction_test.rb

@@ -1,3 +1,5 @@
+require 'smart_app_launch_test_kit'
+
 module DaVinciPDexTestKit
   module PDexPayerClient
     class PDexClientWorkflowInteractionTest < Inferno::Test
@@ -10,21 +12,48 @@ module DaVinciPDexTestKit
         - clinical data requests, including resource read and searches, patient-level $everything,
           and group-level $export.
       )
-      input :access_token
+      input :client_id,
+            title: 'Client Id',
+            type: 'text',
+            optional: true,
+            locked: true,
+            description: SMARTAppLaunch::INPUT_CLIENT_ID_DESCRIPTION_LOCKED
+      input :smart_launch_urls,
+            title: 'SMART App Launch URL(s)',
+            type: 'textarea',
+            locked: true,
+            optional: true,
+            description: SMARTAppLaunch::INPUT_SMART_LAUNCH_URLS_DESCRIPTION_LOCKED
+      input :launch_context,
+            title: 'Launch Context',
+            type: 'textarea',
+            optional: true,
+            description: SMARTAppLaunch::INPUT_LAUNCH_CONTEXT_DESCRIPTION       
+      input :fhir_user_relative_reference,
+            title: 'FHIR User Relative Reference',
+            type: 'text',
+            optional: true,
+            description: SMARTAppLaunch::INPUT_FHIR_USER_RELATIVE_REFERENCE
+      input_order :launch_context, :fhir_user_relative_reference, :smart_launch_urls, :client_id
+      output :launch_key
       config options: { accepts_multiple_requests: true }
 
       verifies_requirements 'hl7.fhir.us.davinci-pdex_2.0.0@27', 'hl7.fhir.us.davinci-pdex_2.0.0@41'
 
       run do
         wait(
-          identifier: access_token,
+          identifier: client_id,
           message: %(
             Submit PDex requests to find a matching member and retrieve clinical data covering the
             complete scope of [member health history data defined by
-            PDex](https://hl7.org/fhir/us/davinci-pdex/STU2/introduction.html#member-health-history).
-            Available APIs under the Inferno base FHIR include:
+            PDex](https://hl7.org/fhir/us/davinci-pdex/STU2/introduction.html#member-health-history)
+            to the simulated FHIR server at
+
+            `#{fhir_base_url}`
+            
+            Available APIs include:
             * Single patient $member-match: `#{member_match_url}`
-            * Single Resource read and search API: `#{submit_url}`, with `:endpoint` replaced with
+            * Single Resource read and search API: `#{resource_url}`, with `:endpoint` replaced with
               the target resource type.
             * Patient-level $everything: `#{everything_url}`, with `:patient` replaced with the
               id for the target patient.
@@ -37,9 +66,10 @@ module DaVinciPDexTestKit
                 in the JSON manifest returned with the export status request when the job is completed.
                 Note that the `Accept` header should be `application/fhir+ndjson` on these requests.
 
-            All requests must include the `Authorization` header with value `Bearer #{access_token}`.
+            All requests must include the `Authorization` header with value `Bearer <access_token>`
+            where `<access_token>` is a token obtained using the registered client id `#{client_id}`.
 
-            [Click here](#{resume_clinical_data_url}?token=#{access_token}) when finished making requests
+            [Click here](#{resume_clinical_data_url}?token=#{client_id}) when finished making requests
             for Inferno to evaluate.
           ),
           timeout: 900

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/allergyintolerance_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type AllergyIntollerance
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :AllergyIntolerance

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/careplan_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type CarePlan
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :CarePlan

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/careteam_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type CareTeam
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :CareTeam

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/condition_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Condition
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Condition

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/device_clinical_data_request_test.rb

@@ -11,8 +11,7 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Device
         were fetched by the client.
       )
-      input :access_token
-  
+
       def target_resource_type
         :Device
       end

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/diagnosticreport_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type DiagnosticReport
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :DiagnosticReport

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/documentreference_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type DocumentReference
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :DocumentReference

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/encounter_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Encounter
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Encounter

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/explanationofbenefit_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type ExplanationOfBenefit
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :ExplanationOfBenefit

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/goal_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Goal
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Goal

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/immunization_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Immunization
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Immunization

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/location_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Location
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Location

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/medicationdispense_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type MedicationDispense
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :MedicationDispense

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/medicationrequest_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type MedicationRequest
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :MedicationRequest

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/observation_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Observation
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Observation

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/organization_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Organization
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Organization

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/patient_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Patient
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Patient

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/practitioner_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Practitioner
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Practitioner

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/practitionerrole_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type PractitionerRole
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :PractitionerRole

data/lib/davinci_pdex_test_kit/pdex_payer_client/clinical_data_request_tests/procedure_clinical_data_request_test.rb

@@ -11,7 +11,6 @@ module DaVinciPDexTestKit
         This test verify that the expected instances of resource type Procedure
         were fetched by the client.
       )
-      input :access_token
 
       def target_resource_type
         :Procedure

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_server/export_endpoint.rb

@@ -15,7 +15,7 @@ module DaVinciPDexTestKit
             req.url 'Group/pdex-Group/$export' # TODO: change from static response
             req.headers = http_headers_as_hash.merge(server_proxy.headers)
           end
-          response.headers["content-location"] = server_response.headers["content-location"]&.gsub(/(.*)\?/, "#{base_fhir_url}/$export-poll-status?")
+          response.headers["content-location"] = server_response.headers["content-location"]&.gsub(/(.*)\?/, "#{fhir_base_url}/$export-poll-status?")
           response.body = server_response.body
         end
     

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_server/export_status_endpoint.rb

@@ -27,7 +27,7 @@ module DaVinciPDexTestKit
         end
 
         def replace_export_urls(export_status_output)
-          export_status_output['output'].map! { |binary| {type: binary["type"], url: binary["url"].gsub(fhir_reference_server, base_fhir_url)} }
+          export_status_output['output'].map! { |binary| {type: binary["type"], url: binary["url"].gsub(fhir_reference_server, fhir_base_url)} }
           export_status_output['request'] = export_url
           export_status_output
         end

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_server/next_page_endpoint.rb

@@ -9,12 +9,19 @@ module DaVinciPDexTestKit
         def make_response
           server_response = server_proxy.get('', JSON.parse(request.params.to_json))
           response.status = server_response.status
+          fhir_response = FHIR.from_contents(server_response.body)
+          return unless fhir_response.present?
+
           response.format = 'application/fhir+json'
-          response.body = replace_bundle_urls(FHIR.from_contents(server_response.body)).to_json
+          if fhir_response.is_a?(FHIR::Bundle)
+            response.body = replace_bundle_urls(fhir_response).to_json
+          else
+            response.body = fhir_response.to_json
+          end
         end
     
         def tags
-          [RESOURCE_REQUEST_TAG]
+          [RESOURCE_API_TAG]
         end
     
       end

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_server/patient_endpoint.rb

@@ -13,7 +13,7 @@ module DaVinciPDexTestKit
         end
 
         def tags
-          tags = [RESOURCE_REQUEST_TAG]
+          tags = [RESOURCE_ID_TAG]
           tags << PATIENT_ID_REQUEST_TAG if request.url.include?('99999')
           
           tags

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_server/proxy_endpoint.rb

@@ -1,5 +1,6 @@
 require 'faraday'
 require 'faraday_middleware'
+require 'smart_app_launch_test_kit'
 
 require_relative '../urls'
 
@@ -15,7 +16,11 @@ module DaVinciPDexTestKit
         include ::DaVinciPDexTestKit::PDexPayerClient::URLs
   
         def test_run_identifier
-          request.headers['authorization']&.delete_prefix('Bearer ')
+          return request.params[:session_path] if request.params[:session_path].present?
+
+          SMARTAppLaunch::MockSMARTServer.issued_token_to_client_id(
+            request.headers['authorization']&.delete_prefix('Bearer ')
+          )
         end
   
         def make_response
@@ -84,10 +89,14 @@ module DaVinciPDexTestKit
           /custom\/pdex_payer_client\/fhir\/([a-zA-Z_-]+)([\/\?].*)?/.match(url)&.to_a&.at(1)
         end
 
+        def supported_searches
+          @supported_searchs ||= SEARCHES_BY_PRIORITY
+        end
+
         # Filter request parameters to only include those allowed by PDex API (hardcoded in collections.rb)
         # @return [Hash]
         def match_request_to_expectation(endpoint, params)
-          matched_search = SEARCHES_BY_PRIORITY[endpoint.to_sym]&.find {|expectation| (params.keys.map{|key| key.to_s} & expectation).sort == expectation}
+          matched_search = supported_searches[endpoint.to_sym]&.find {|expectation| (params.keys.map{|key| key.to_s} & expectation).sort == expectation}
     
           if matched_search
             params.select {|key, value| matched_search.include?(key.to_s) || key == "_revInclude" || key == "_include"}
@@ -128,12 +137,12 @@ module DaVinciPDexTestKit
           elsif is_json?(server_response.body)
             response.format = 'application/json'
             # Uncomment to recklessly replace all proxy urls with our urls:
-            # response.body = server_response.body.gsub(fhir_reference_server, base_fhir_url)
+            # response.body = server_response.body.gsub(fhir_reference_server, fhir_base_url)
             response.body = server_response.body
 
           else
             # Uncomment to recklessly replace all proxy urls with our urls:
-            # response.body = server_response.body.gsub(fhir_reference_server, base_fhir_url)
+            # response.body = server_response.body.gsub(fhir_reference_server, fhir_base_url)
             response.body = server_response.body
           end
 
@@ -155,10 +164,10 @@ module DaVinciPDexTestKit
         end
 
         def replace_bundle_urls(bundle)
-          bundle&.link.map! {|link| {relation: link.relation, url: link.url.gsub(fhir_reference_server, base_fhir_url)}}
+          bundle&.link.map! {|link| {relation: link.relation, url: link.url.gsub(fhir_reference_server, fhir_base_url)}}
           bundle&.entry&.map! do |bundled_resource| 
             {
-             fullUrl: bundled_resource.fullUrl.gsub(fhir_reference_server, base_fhir_url),
+             fullUrl: bundled_resource.fullUrl.gsub(fhir_reference_server, fhir_base_url),
              resource: bundled_resource.resource,
              search: bundled_resource.search
             }

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_server/resource_read_endpoint.rb

@@ -12,7 +12,7 @@ module DaVinciPDexTestKit
         end
     
         def tags
-          [RESOURCE_REQUEST_TAG]
+          [RESOURCE_ID_TAG]
         end
     
       end

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_server/resource_search_endpoint.rb

@@ -13,7 +13,7 @@ module DaVinciPDexTestKit
         end
     
         def tags
-          [RESOURCE_REQUEST_TAG]
+          [RESOURCE_API_TAG]
         end
     
       end

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_server.rb

@@ -1,4 +1,5 @@
-require_relative 'mock_server/token_endpoint'
+require 'smart_app_launch_test_kit'
+
 require_relative 'mock_server/resource_search_endpoint'
 require_relative 'mock_server/resource_read_endpoint'
 require_relative 'mock_server/patient_endpoint'
@@ -8,6 +9,8 @@ require_relative 'mock_server/export_endpoint'
 require_relative 'mock_server/export_status_endpoint'
 require_relative 'mock_server/member_match_endpoint'
 require_relative 'mock_server/next_page_endpoint'
+require_relative 'mock_udap_smart_server/authorization_endpoint'
+require_relative 'mock_udap_smart_server/token_endpoint'
 
 require_relative '../user_input_response'
 require_relative 'urls'
@@ -35,7 +38,29 @@ module DaVinciPDexTestKit
               File.readlines(File.expand_path('mock_server/resources/mock_capability_statement.json', __dir__))
             ]
           }
-          suite_endpoint :post, TOKEN_PATH, TokenEndpoint
+
+          # SMART App Launch / Backend Services server simulation
+          route(:get, SMARTAppLaunch::SMART_DISCOVERY_PATH, lambda { |_env|
+            SMARTAppLaunch::MockSMARTServer.smart_server_metadata(id)
+          })
+          route(:get, UDAPSecurityTestKit::UDAP_DISCOVERY_PATH, lambda { |_env|
+            UDAPSecurityTestKit::MockUDAPServer.udap_server_metadata(id)
+          })
+          route(:get, SMARTAppLaunch::OIDC_DISCOVERY_PATH, ->(_env) {SMARTAppLaunch::MockSMARTServer.openid_connect_metadata(id) }) 
+          route(
+            :get,
+            SMARTAppLaunch::OIDC_JWKS_PATH,
+            ->(_env) { [200, { 'Content-Type' => 'application/json' }, [SMARTAppLaunch::OIDCJWKS.jwks_json]] }
+          )
+          suite_endpoint :post, UDAPSecurityTestKit::REGISTRATION_PATH,
+                                  UDAPSecurityTestKit::MockUDAPServer::RegistrationEndpoint
+          suite_endpoint :post, UDAPSecurityTestKit::TOKEN_PATH, 
+                                DaVinciPDexTestKit::PDexPayerClient::MockUdapSmartServer::TokenEndpoint
+          suite_endpoint :get,  UDAPSecurityTestKit::AUTHORIZATION_PATH,
+                                DaVinciPDexTestKit::PDexPayerClient::MockUdapSmartServer::AuthorizationEndpoint
+          suite_endpoint :post, UDAPSecurityTestKit::AUTHORIZATION_PATH,
+                                DaVinciPDexTestKit::PDexPayerClient::MockUdapSmartServer::AuthorizationEndpoint
+
           suite_endpoint :post, MEMBER_MATCH_PATH, MemberMatchEndpoint
           suite_endpoint :get, EVERYTHING_PATH, PatientEverythingEndpoint
           suite_endpoint :get, EXPORT_PATH, ExportEndpoint
@@ -44,6 +69,7 @@ module DaVinciPDexTestKit
           suite_endpoint :get, PATIENT_PATH, PatientEndpoint # PDex Patient query needs its own endpoint
           suite_endpoint :get, RESOURCE_PATH, ResourceSearchEndpoint
           suite_endpoint :get, INSTANCE_PATH, ResourceReadEndpoint
+          suite_endpoint :get, PATIENT_INSTANCE_PATH, ResourceReadEndpoint
           suite_endpoint :get, BASE_FHIR_PATH, NextPageEndpoint # TODO: better pagination route?
 
         end

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_udap_smart_server/authorization_endpoint.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+require 'udap_security_test_kit'
+require 'smart_app_launch_test_kit'
+require_relative '../urls'
+require_relative '../tags'
+require_relative '../pdex_client_options'
+
+module DaVinciPDexTestKit
+  module PDexPayerClient
+    module MockUdapSmartServer
+      class AuthorizationEndpoint < Inferno::DSL::SuiteEndpoint
+        include SMARTAppLaunch::MockSMARTServer::SMARTAuthorizationResponseCreation
+        include UDAPSecurityTestKit::MockUDAPServer::UDAPAuthorizationResponseCreation
+        include PDexClientOptions
+
+        def test_run_identifier
+          request.params[:client_id]
+        end
+
+        def suite_options
+          @suite_options ||=
+            Inferno::Repositories::TestSessions.new.find(result.test_session_id)
+              &.suite_options&.map { |so| [so.id, so.value] }&.to_h
+        end
+
+        def make_response
+          if selected_security_ig(suite_options) == UDAPSecurityTestKit::UDAP_TAG
+            make_udap_authorization_response
+          else
+            make_smart_authorization_response
+          end
+        end
+
+        def update_result
+          nil # never update for now
+        end
+
+        def tags
+          tags = [UDAPSecurityTestKit::AUTHORIZATION_TAG, UDAPSecurityTestKit::AUTHORIZATION_CODE_TAG]
+          tags <<
+            if selected_security_ig(suite_options) == UDAPSecurityTestKit::UDAP_TAG
+              UDAPSecurityTestKit::UDAP_TAG
+            else
+              SMARTAppLaunch::SMART_TAG
+            end
+
+          tags
+        end
+      end
+    end
+  end
+end

data/lib/davinci_pdex_test_kit/pdex_payer_client/mock_udap_smart_server/token_endpoint.rb

@@ -0,0 +1,85 @@
+# frozen_string_literal: true
+
+require 'udap_security_test_kit'
+require 'smart_app_launch_test_kit'
+require_relative '../urls'
+
+module DaVinciPDexTestKit
+  module PDexPayerClient
+    module MockUdapSmartServer
+      class TokenEndpoint < Inferno::DSL::SuiteEndpoint
+        include SMARTAppLaunch::MockSMARTServer::SMARTTokenResponseCreation
+        include UDAPSecurityTestKit::MockUDAPServer::UDAPTokenResponseCreation
+        include URLs
+
+        def test_run_identifier
+          case request.params[:grant_type]
+          when UDAPSecurityTestKit::CLIENT_CREDENTIALS_TAG
+            UDAPSecurityTestKit::MockUDAPServer.client_id_from_client_assertion(request.params[:client_assertion])
+          when UDAPSecurityTestKit::AUTHORIZATION_CODE_TAG
+            UDAPSecurityTestKit::MockUDAPServer.issued_token_to_client_id(request.params[:code])
+          when UDAPSecurityTestKit::REFRESH_TOKEN_TAG
+            UDAPSecurityTestKit::MockUDAPServer.issued_token_to_client_id(
+              UDAPSecurityTestKit::MockUDAPServer.refresh_token_to_authorization_code(request.params[:refresh_token])
+            )
+          end
+        end
+
+        def make_response
+          if request.params[:udap].present?
+            case request.params[:grant_type]
+            when UDAPSecurityTestKit::CLIENT_CREDENTIALS_TAG
+              make_udap_client_credential_token_response
+            when UDAPSecurityTestKit::AUTHORIZATION_CODE_TAG
+              make_udap_authorization_code_token_response
+            when UDAPSecurityTestKit::REFRESH_TOKEN_TAG
+              make_udap_refresh_token_response
+            else
+              UDAPSecurityTestKit::MockUDAPServer.update_response_for_invalid_assertion(
+                response,
+                "unsupported grant_type: #{request.params[:grant_type]}"
+              )
+            end
+          else
+            if request.params[:grant_type] == SMARTAppLaunch::CLIENT_CREDENTIALS_TAG
+              return make_smart_client_credential_token_response
+            end
+            
+            suite_options_list = Inferno::Repositories::TestSessions.new.find(result.test_session_id)&.suite_options
+            suite_options_hash = suite_options_list&.map { |option| [option.id, option.value] }&.to_h
+            smart_authentication_approach =
+              SMARTAppLaunch::SMARTClientOptions.smart_authentication_approach(suite_options_hash)
+            
+            case request.params[:grant_type]
+            when SMARTAppLaunch::AUTHORIZATION_CODE_TAG
+              make_smart_authorization_code_token_response(smart_authentication_approach)
+            when SMARTAppLaunch::REFRESH_TOKEN_TAG
+              make_smart_refresh_token_response(smart_authentication_approach)
+            else
+              SMARTAppLaunch::MockSMARTServer.update_response_for_invalid_assertion(
+                response,
+                "unsupported grant_type: #{request.params[:grant_type]}"
+              )
+            end
+          end
+        end
+
+        def update_result
+          nil # never update for now
+        end
+
+        def tags
+          tags = [UDAPSecurityTestKit::TOKEN_TAG]
+          tags << (request.params[:udap].present? ? UDAPSecurityTestKit::UDAP_TAG : SMARTAppLaunch::SMART_TAG)
+          if [UDAPSecurityTestKit::CLIENT_CREDENTIALS_TAG, 
+              UDAPSecurityTestKit::AUTHORIZATION_CODE_TAG, 
+              UDAPSecurityTestKit::REFRESH_TOKEN_TAG].include?(request.params[:grant_type])
+            tags << request.params[:grant_type]
+          end
+
+          tags
+        end
+      end
+    end
+  end
+end

data/lib/davinci_pdex_test_kit/pdex_payer_client/pdex_client_options.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require 'smart_app_launch_test_kit'
+require 'udap_security_test_kit'
+
+module DaVinciPDexTestKit
+  module PDexPayerClient
+    module PDexClientOptions
+      SMART_APP_LAUNCH_PUBLIC = SMARTAppLaunch::SMARTClientOptions::SMART_APP_LAUNCH_PUBLIC
+      SMART_APP_LAUNCH_CONFIDENTIAL_SYMMETRIC =
+        SMARTAppLaunch::SMARTClientOptions::SMART_APP_LAUNCH_CONFIDENTIAL_SYMMETRIC
+      SMART_APP_LAUNCH_CONFIDENTIAL_ASYMMETRIC =
+        SMARTAppLaunch::SMARTClientOptions::SMART_APP_LAUNCH_CONFIDENTIAL_ASYMMETRIC
+      UDAP_AUTHORIZATION_CODE = 
+        UDAPSecurityTestKit::UDAPClientOptions::UDAP_AUTHORIZATION_CODE
+
+      def selected_security_ig(suite_options)
+        if suite_options[:client_type].include?(UDAPSecurityTestKit::UDAP_TAG)
+          UDAPSecurityTestKit::UDAP_TAG
+        else 
+          SMARTAppLaunch::SMART_TAG
+        end
+      end
+    end
+  end
+end

data/lib/davinci_pdex_test_kit/pdex_payer_client/tags.rb

@@ -2,14 +2,13 @@
 
 module DaVinciPDexTestKit
   module PDexPayerClient
-    AUTH_TAG = 'pdex_auth'
-    RESOURCE_REQUEST_TAG = 'pdex_resource_request'
-    PATIENT_ID_REQUEST_TAG = 'pdex_patient_id_request'
-    BINARY_TAG = 'pdex_binary'
-    EXPORT_TAG = 'pdex_export'
-    EXPORT_STATUS_TAG = 'pdex_export_status'
-    EVERYTHING_TAG = 'pdex_everything'
-    MEMBER_MATCH_TAG = 'pdex_member_match'
-
+    RESOURCE_API_TAG = 'resource_api'
+    RESOURCE_ID_TAG = 'resource_id'
+    PATIENT_ID_REQUEST_TAG = 'patient_id_request'
+    BINARY_TAG = 'binary'
+    EXPORT_TAG = 'export'
+    EXPORT_STATUS_TAG = 'export_status'
+    EVERYTHING_TAG = 'everything'
+    MEMBER_MATCH_TAG = 'member_match'
   end
 end