onc_certification_g10_test_kit 2.0.0.rc1

data/lib/onc_certification_g10_test_kit/bulk_data_group_export_validation.rb

@@ -0,0 +1,474 @@
+require_relative 'bulk_export_validation_tester'
+
+module ONCCertificationG10TestKit
+  class BulkDataGroupExportValidation < Inferno::TestGroup
+    title 'Group Compartment Export Validation Tests'
+    short_description 'Verify that the exported data conforms to the US Core Implementation Guide.'
+    description <<~DESCRIPTION
+      Verify that Group compartment export from the Bulk Data server follow US Core Implementation Guide
+    DESCRIPTION
+
+    id :bulk_data_group_export_validation
+
+    input :status_output, :requires_access_token, :bearer_token, :bulk_download_url
+    input :lines_to_validate,
+          title: 'Limit validation to a maximum resource count',
+          description: 'To validate all, leave blank.',
+          optional: true
+    input :bulk_patient_ids_in_group,
+          title: 'Patient IDs in exported Group',
+          description: 'Comma separated list of every Patient ID that is in the specified Group. This information is
+          provided by the system under test to verify that data returned matches expectations. Leave blank to not
+          verify Group inclusion.'
+    input :bulk_device_types_in_group,
+          title: 'Implantable Device Type Codes in exported Group',
+          description: 'Comma separated list of every Implantable Device type that is in the specified Group. This
+          information is provided by the system under test to verify that data returned matches expectations. Leave
+          blank to verify all Device resources against the Implantable Device profile.',
+          optional: true
+
+    test from: :tls_version_test do
+      title 'Bulk Data Server is secured by transport layer security'
+      description <<~DESCRIPTION
+        [§170.315(g)(10) Test Procedure]
+        (https://www.healthit.gov/test-method/standardized-api-patient-and-population-services)
+        requires that all exchanges described herein between a client and a
+        server SHALL be secured using Transport Layer Security  (TLS)
+        Protocol Version 1.2 (RFC5246).
+      DESCRIPTION
+      id :g10_bulk_file_server_tls_version
+
+      config(
+        inputs: { url: { name: :bulk_download_url } },
+        options: { minimum_allowed_version: OpenSSL::SSL::TLS1_2_VERSION }
+      )
+    end
+
+    test do
+      title 'NDJSON download requires access token if requireAccessToken is true'
+      description <<~DESCRIPTION
+        If the requiresAccessToken field in the Complete Status body is set to true, the request SHALL include a valid#{' '}
+        access token.
+
+        [FHIR R4 Security](http://build.fhir.org/security.html#AccessDenied) and
+        [The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://tools.ietf.org/html/rfc6750#section-3.1)
+        recommend using HTTP status code 401 for invalid token but also allow the actual result be controlled by policy#{' '}
+        and context.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/uv/bulkdata/export/index.html#file-request'
+
+      input :bulk_download_url
+
+      run do
+        skip_if bulk_download_url.blank?, 'Could not verify this functionality when no download link was provided'
+        skip_if requires_access_token.blank?,
+                'Could not verify this functionality when requiresAccessToken is not provided'
+        omit_if requires_access_token == 'false',
+                'Could not verify this functionality when requiresAccessToken is false'
+        skip_if bearer_token.blank?, 'Could not verify this functionality when Bearer Token is not provided'
+
+        get(bulk_download_url, headers: { accept: 'application/fhir+ndjson' })
+        assert_response_status([400, 401])
+      end
+    end
+
+    test do
+      title 'Patient resources returned conform to the US Core Patient Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This#{' '}
+        includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-patient'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Patient'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Group export has at least two patients'
+      description <<~DESCRIPTION
+        This test verifies that the Group export has at least two patients.
+      DESCRIPTION
+      # link 'http://ndjson.org/'
+
+      include BulkExportValidationTester
+
+      run do
+        skip 'No Patient resources processed from bulk data export.' unless patient_ids_seen.present?
+
+        assert patient_ids_seen.length >= BulkExportValidationTester::MIN_RESOURCE_COUNT,
+               'Bulk data export did not have multiple Patient resources.'
+      end
+    end
+
+    test do
+      title 'Patient IDs match those expected in Group'
+      description <<~DESCRIPTION
+        This test checks that the list of patient IDs that are expected match those that are returned.
+        If no patient ids are provided to the test, then the test will be omitted.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-patient'
+
+      include BulkExportValidationTester
+
+      run do
+        omit 'No patient ids were given.' unless bulk_patient_ids_in_group.present?
+
+        expected_ids = Set.new(bulk_patient_ids_in_group.split(',').map(&:strip))
+
+        assert patient_ids_seen.sort == expected_ids.sort,
+               "Mismatch between patient ids seen (#{patient_ids_seen.to_a.join(', ')}) " \
+               "and patient ids expected (#{bulk_patient_ids_in_group})"
+      end
+    end
+
+    test do
+      title 'AllergyIntolerance resources returned conform to the US Core AllergyIntolerance Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-allergyintolerance'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'AllergyIntolerance'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'CarePlan resources returned conform to the US Core CarePlan Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-careplan'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'CarePlan'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'CareTeam resources returned conform to the US Core CareTeam Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-careteam'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'CareTeam'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Condition resources returned conform to the US Core Condition Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-condition'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Condition'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Device resources returned conform to the US Core Implantable Device Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-implantable-device'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Device'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'DiagnosticReport resources returned conform to the US Core DiagnosticReport Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the following US Core profiles. This includes checking for missing data elements and value set verification.
+
+        * http://hl7.org/fhir/us/core/StructureDefinition/us-core-diagnosticreport-lab
+        * http://hl7.org/fhir/us/core/StructureDefinition/us-core-diagnosticreport-note
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-diagnosticreport-l'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'DiagnosticReport'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'DocumentReference resources returned conform to the US Core DocumentReference Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-documentreference'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'DocumentReference'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Goal resources returned conform to the US Core Goal Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-goal'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Goal'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Immunization resources returned conform to the US Core Immunization Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-Immunization'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Immunization'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'MedicationRequest resources returned conform to the US Core MedicationRequest Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-medicationrequest'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'MedicationRequest'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Observation resources returned conform to the US Core Observation Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data
+        export conform to the following US Core profiles. This includes
+        checking for missing data elements and value set verification.
+
+        * http://hl7.org/fhir/us/core/StructureDefinition/pediatric-bmi-for-age
+        * http://hl7.org/fhir/us/core/StructureDefinition/pediatric-weight-for-height
+        * http://hl7.org/fhir/us/core/StructureDefinition/us-core-observation-lab
+        * http://hl7.org/fhir/us/core/StructureDefinition/us-core-pulse-oximetry
+        * http://hl7.org/fhir/us/core/StructureDefinition/us-core-smokingstatus
+        * http://hl7.org/fhir/us/core/StructureDefinition/head-occipital-frontal-circumference-percentile
+        * http://hl7.org/fhir/StructureDefinition/bp
+        * http://hl7.org/fhir/StructureDefinition/bodyheight
+        * http://hl7.org/fhir/StructureDefinition/bodytemp
+        * http://hl7.org/fhir/StructureDefinition/bodyweight
+        * http://hl7.org/fhir/StructureDefinition/heartrate
+        * http://hl7.org/fhir/StructureDefinition/resprate
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-observation-lab'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Observation'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Procedure resources returned conform to the US Core Procedure Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-procedure'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Procedure'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Encounter resources returned conform to the US Core Encounter Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-encounter'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Encounter'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Organization resources returned conform to the US Core Organization Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-organization'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Organization'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Practitioner resources returned conform to the US Core Practitioner Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-practitioner'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Practitioner'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Provenance resources returned conform to the US Core Provenance Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-provenance'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Provenance'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Location resources returned conform to the US Core Location Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-location'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Location'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+
+    test do
+      title 'Medication resources returned conform to the US Core Medication Profile'
+      description <<~DESCRIPTION
+        This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification.
+      DESCRIPTION
+      # link 'http://hl7.org/fhir/us/core/StructureDefinition/us-core-medication'
+
+      include BulkExportValidationTester
+
+      def resource_type
+        'Medication'
+      end
+
+      run do
+        perform_bulk_export_validation
+      end
+    end
+  end
+end

data/lib/onc_certification_g10_test_kit/bulk_data_jwks.json

@@ -0,0 +1,58 @@
+{
+	"keys": 
+	[{
+		"kty": "EC",
+		"crv": "P-384",
+		"x": "JQKTsV6PT5Szf4QtDA1qrs0EJ1pbimQmM2SKvzOlIAqlph3h1OHmZ2i7MXahIF2C",
+		"y": "bRWWQRJBgDa6CTgwofYrHjVGcO-A7WNEnu4oJA5OUJPPPpczgx1g2NsfinK-D2Rw",
+		"use": "sig",
+		"key_ops": [
+			"verify"
+		],
+		"ext": true,
+		"kid": "4b49a739d1eb115b3225f4cf9beb6d1b",
+		"alg": "ES384"
+	},
+	{
+		"kty": "EC",
+		"crv": "P-384",
+		"d": "kDkn55p7gryKk2tj6z2ij7ExUnhi0ngxXosvqa73y7epwgthFqaJwApmiXXU2yhK",
+		"x": "JQKTsV6PT5Szf4QtDA1qrs0EJ1pbimQmM2SKvzOlIAqlph3h1OHmZ2i7MXahIF2C",
+		"y": "bRWWQRJBgDa6CTgwofYrHjVGcO-A7WNEnu4oJA5OUJPPPpczgx1g2NsfinK-D2Rw",
+		"key_ops": [
+			"sign"
+		],
+		"ext": true,
+		"kid": "4b49a739d1eb115b3225f4cf9beb6d1b",
+		"alg": "ES384"
+	},
+	{
+		"kty": "RSA",
+		"alg": "RS384",
+		"n": "vjbIzTqiY8K8zApeNng5ekNNIxJfXAue9BjoMrZ9Qy9m7yIA-tf6muEupEXWhq70tC7vIGLqJJ4O8m7yiH8H2qklX2mCAMg3xG3nbykY2X7JXtW9P8VIdG0sAMt5aZQnUGCgSS3n0qaooGn2LUlTGIR88Qi-4Nrao9_3Ki3UCiICeCiAE224jGCg0OlQU6qj2gEB3o-DWJFlG_dz1y-Mxo5ivaeM0vWuodjDrp-aiabJcSF_dx26sdC9dZdBKXFDq0t19I9S9AyGpGDJwzGRtWHY6LsskNHLvo8Zb5AsJ9eRZKpnh30SYBZI9WHtzU85M9WQqdScR69Vyp-6Uhfbvw",
+		"e": "AQAB",
+		"use": "sig",
+		"key_ops": [
+			"verify"
+		],
+		"ext": true,
+		"kid": "b41528b6f37a9500edb8a905a595bdd7"
+	},
+	{
+		"kty": "RSA",
+		"alg": "RS384",
+		"n": "vjbIzTqiY8K8zApeNng5ekNNIxJfXAue9BjoMrZ9Qy9m7yIA-tf6muEupEXWhq70tC7vIGLqJJ4O8m7yiH8H2qklX2mCAMg3xG3nbykY2X7JXtW9P8VIdG0sAMt5aZQnUGCgSS3n0qaooGn2LUlTGIR88Qi-4Nrao9_3Ki3UCiICeCiAE224jGCg0OlQU6qj2gEB3o-DWJFlG_dz1y-Mxo5ivaeM0vWuodjDrp-aiabJcSF_dx26sdC9dZdBKXFDq0t19I9S9AyGpGDJwzGRtWHY6LsskNHLvo8Zb5AsJ9eRZKpnh30SYBZI9WHtzU85M9WQqdScR69Vyp-6Uhfbvw",
+		"e": "AQAB",
+		"d": "rriV9GYimi5by7TOW4xNh6_gYBHVRDBsft2OFF8qapdVHt2GNuRDDxc_B6ga6TY2Enh2MLKLTr1dD3W4FIdTCJiMerrorp07FJS7nJEMgWQDxrfgkX4_EqrhW42L5d4vypYnRXEEW6u4gzkx5uFOkdvJBIK7CsIdSaBFYhochnynNgvbKWasi4rl2hayEH8tdf3B7Z6OIH9alspBTaq3j_zJt_KkrpYEzIUb4UgALB5NTWn5YKr0Avk_asOg8YfjViQwO9ASGaWjQeJ2Rx8OEQwBMQHSDMCSWNiWmYOu9PcwSZFc1vLxqzyIM8QrQSJHCCMo_wGYgke_r0CLeONHEQ",
+		"p": "5hH_QApWGeobRi1n7XbMfJYohB8K3JDPa0MspfplHpJ-17JiGG2sNoBdBcpaPRf9OX48P8VqO0qrSSRAk-I-uO6OO9BHbIukXJILqnY2JmurYzbcYbt5FVbknlHRJojkF6-7sFBazpueUlOnXCw7X7Z_SkfNE4QX5Ejm2Zm5mek",
+		"q": "06bZz7c7K9s1-aEZsxYnLJ9eTpKlt1tIBDA_LwIh5W3w259pes2kUtimbnkyOf-V2ZIERsFCh5s-S9IOEMvAIa6M5j9GW1ILNT7AcHIUfcyFcH-FF8BU_KJdRP5PXnIXFdYcylvsdoIdchy1AaUIzyiKRCU3HBYI75hez0l_F2c",
+		"dp": "h_sVIXW6hCCRND48EedIX06k7conMkxIu_39ErDXOWWeoMAnKIcR5TijQnviL__QxD1vQMXezuKIMHfDz2RGbClbWdD1lhtG7wvG515tDPJQXxia0wzqOQmdoFF9S8hXAAT26vPjaAAkaEZXQaxG_4Au5elgNWu6b0wDXZN1Vpk",
+		"dq": "GqS0YpuUTU8JGmWXUJ4HTGy7eHSpe8134V8ZdRd1oOYYHe2RX64nc25mdR24nuh3uq3Q7_9AGsYGL5E_yAl-JD9O6WUpvDE1y_wcSYty3Os0GRdUb8r8Z9kgmKDS6Pa_xTXw5eBwgfKbNlQ6zPwzgbB-x1lP-K8lbNPni3ybDR0",
+		"qi": "cqQfoi0sM5Su8ZOhznmdWrDIQB28H6fBKiabgaIKkbWZV4e0nwFvLquHjPOvv4Ao8iEGU5dyhvg0n5BKYPi-4mp6M6OA1sy0NrTr7EsKSYGyu2pBq9rw4oAYTM2LXKg6K-awgUUlkc451IwxHBAe15PWCBM3kvLQeijNid0Vz5I",
+		"key_ops": [
+			"sign"
+		],
+		"ext": true,
+		"kid": "b41528b6f37a9500edb8a905a595bdd7"
+	}]
+}