onc_certification_g10_test_kit 7.0.3 → 7.2.0

data/lib/onc_certification_g10_test_kit/smart_standalone_patient_app_group.rb

@@ -1,5 +1,6 @@
 require_relative 'base_token_refresh_group'
 require_relative 'patient_context_test'
+require_relative 'scope_constants'
 require_relative 'smart_invalid_token_refresh_test'
 require_relative 'smart_scopes_test'
 require_relative 'unauthorized_access_test'
@@ -9,13 +10,15 @@ require_relative 'incorrectly_permitted_tls_versions_messages_setup_test'
 
 module ONCCertificationG10TestKit
   class SmartStandalonePatientAppGroup < Inferno::TestGroup
+    include ScopeConstants
+
     title 'Standalone Patient App - Full Access'
     short_title 'Standalone Patient App'
 
     input_instructions %(
       Register Inferno as a standalone application using the following information:
 
-      * Redirect URI: `#{SMARTAppLaunch::AppRedirectTest.config.options[:redirect_uri]}`
+      * Redirect URI: `#{REDIRECT_URI}`
 
       Enter in the appropriate scope to enable patient-level access to all
       relevant resources. In addition, support for the OpenID Connect (openid
@@ -40,7 +43,7 @@ module ONCCertificationG10TestKit
         Prior to running the scenario, register Inferno as a confidential client
         with the following information:
 
-        * Redirect URI: `#{SMARTAppLaunch::AppRedirectTest.config.options[:redirect_uri]}`
+        * Redirect URI: `#{REDIRECT_URI}`
 
         The following implementation specifications are relevant to this scenario:
 
@@ -56,26 +59,41 @@ module ONCCertificationG10TestKit
 
     config(
       inputs: {
-        client_secret: {
-          optional: false,
-          name: :standalone_client_secret
+        smart_auth_info: {
+          name: :standalone_smart_auth_info,
+          title: 'Standalone Launch Credentials',
+          options: {
+            mode: 'auth',
+            components: [
+              {
+                name: :auth_type,
+                default: 'symmetric',
+                locked: true
+              },
+              {
+                name: :auth_request_method,
+                default: 'GET',
+                locked: true
+              },
+              {
+                name: :use_discovery,
+                locked: true
+              }
+            ]
+          }
         }
       }
     )
 
-    input_order :url,
-                :standalone_client_id,
-                :standalone_client_secret,
-                :standalone_requested_scopes,
-                :use_pkce,
-                :pkce_code_challenge_method,
-                :standalone_authorization_method,
-                :client_auth_type,
-                :client_auth_encryption_method
-
     group from: :smart_discovery do
       required_suite_options(G10Options::SMART_1_REQUIREMENT)
 
+      config(
+        outputs: {
+          smart_auth_info: { name: :standalone_smart_auth_info }
+        }
+      )
+
       test from: 'g10_smart_well_known_capabilities',
            config: {
              options: {
@@ -121,6 +139,12 @@ module ONCCertificationG10TestKit
     group from: :smart_discovery_stu2 do
       required_suite_options(G10Options::SMART_2_REQUIREMENT)
 
+      config(
+        outputs: {
+          smart_auth_info: { name: :standalone_smart_auth_info }
+        }
+      )
+
       test from: 'g10_smart_well_known_capabilities',
            config: {
              options: {
@@ -143,6 +167,13 @@ module ONCCertificationG10TestKit
 
     group from: :smart_discovery_stu2_2 do # rubocop:disable Naming/VariableNumber
       required_suite_options(G10Options::SMART_2_2_REQUIREMENT)
+
+      config(
+        outputs: {
+          smart_auth_info: { name: :standalone_smart_auth_info }
+        }
+      )
+
       test from: 'g10_smart_well_known_capabilities',
            config: {
              options: {
@@ -194,19 +225,16 @@ module ONCCertificationG10TestKit
 
       config(
         inputs: {
-          requested_scopes: {
-            default: %(
-              launch/patient openid fhirUser offline_access
-              patient/Medication.read patient/AllergyIntolerance.read
-              patient/CarePlan.read patient/CareTeam.read patient/Condition.read
-              patient/Device.read patient/DiagnosticReport.read
-              patient/DocumentReference.read patient/Encounter.read
-              patient/Goal.read patient/Immunization.read patient/Location.read
-              patient/MedicationRequest.read patient/Observation.read
-              patient/Organization.read patient/Patient.read
-              patient/Practitioner.read patient/Procedure.read
-              patient/Provenance.read patient/PractitionerRole.read
-            ).gsub(/\s{2,}/, ' ').strip
+          smart_auth_info: {
+            name: :standalone_smart_auth_info,
+            options: {
+              components: [
+                {
+                  name: :requested_scopes,
+                  default: STANDALONE_SMART_1_SCOPES
+                }
+              ]
+            }
           }
         }
       )
@@ -214,7 +242,6 @@ module ONCCertificationG10TestKit
       test from: :g10_smart_scopes do
         config(
           inputs: {
-            requested_scopes: { name: :standalone_requested_scopes },
             received_scopes: { name: :standalone_received_scopes }
           },
           options: {
@@ -236,7 +263,7 @@ module ONCCertificationG10TestKit
            config: {
              inputs: {
                patient_id: { name: :standalone_patient_id },
-               smart_credentials: { name: :standalone_smart_credentials }
+               smart_auth_info: { name: :standalone_smart_auth_info }
              }
            }
 
@@ -257,27 +284,7 @@ module ONCCertificationG10TestKit
       )
     end
 
-    group from: :smart_standalone_launch_stu2,
-          config: {
-            inputs: {
-              use_pkce: {
-                default: 'true',
-                locked: true
-              },
-              pkce_code_challenge_method: {
-                locked: true
-              },
-              authorization_method: {
-                name: :standalone_authorization_method,
-                default: 'get',
-                locked: true
-              },
-              client_auth_type: {
-                locked: true,
-                default: 'confidential_symmetric'
-              }
-            }
-          } do
+    group from: :smart_standalone_launch_stu2 do
       required_suite_options(G10Options::SMART_2_REQUIREMENT)
 
       title 'Standalone Launch With Patient Scope'
@@ -308,19 +315,16 @@ module ONCCertificationG10TestKit
 
       config(
         inputs: {
-          requested_scopes: {
-            default: %(
-              launch/patient openid fhirUser offline_access
-              patient/Medication.rs patient/AllergyIntolerance.rs
-              patient/CarePlan.rs patient/CareTeam.rs patient/Condition.rs
-              patient/Device.rs patient/DiagnosticReport.rs
-              patient/DocumentReference.rs patient/Encounter.rs
-              patient/Goal.rs patient/Immunization.rs patient/Location.rs
-              patient/MedicationRequest.rs patient/Observation.rs
-              patient/Organization.rs patient/Patient.rs
-              patient/Practitioner.rs patient/Procedure.rs
-              patient/Provenance.rs patient/PractitionerRole.rs
-            ).gsub(/\s{2,}/, ' ').strip
+          smart_auth_info: {
+            name: :standalone_smart_auth_info,
+            options: {
+              components: [
+                {
+                  name: :requested_scopes,
+                  default: STANDALONE_SMART_2_SCOPES
+                }
+              ]
+            }
           }
         }
       )
@@ -350,7 +354,7 @@ module ONCCertificationG10TestKit
            config: {
              inputs: {
                patient_id: { name: :standalone_patient_id },
-               smart_credentials: { name: :standalone_smart_credentials }
+               smart_auth_info: { name: :standalone_smart_auth_info }
              }
            }
 
@@ -371,27 +375,7 @@ module ONCCertificationG10TestKit
       )
     end
 
-    group from: :smart_standalone_launch_stu2_2, # rubocop:disable Naming/VariableNumber
-          config: {
-            inputs: {
-              use_pkce: {
-                default: 'true',
-                locked: true
-              },
-              pkce_code_challenge_method: {
-                locked: true
-              },
-              authorization_method: {
-                name: :standalone_authorization_method,
-                default: 'get',
-                locked: true
-              },
-              client_auth_type: {
-                locked: true,
-                default: 'confidential_symmetric'
-              }
-            }
-          } do
+    group from: :smart_standalone_launch_stu2_2 do # rubocop:disable Naming/VariableNumber
       required_suite_options(G10Options::SMART_2_2_REQUIREMENT)
       title 'Standalone Launch With Patient Scope'
       description %(
@@ -421,19 +405,16 @@ module ONCCertificationG10TestKit
 
       config(
         inputs: {
-          requested_scopes: {
-            default: %(
-              launch/patient openid fhirUser offline_access
-              patient/Medication.rs patient/AllergyIntolerance.rs
-              patient/CarePlan.rs patient/CareTeam.rs patient/Condition.rs
-              patient/Device.rs patient/DiagnosticReport.rs
-              patient/DocumentReference.rs patient/Encounter.rs
-              patient/Goal.rs patient/Immunization.rs patient/Location.rs
-              patient/MedicationRequest.rs patient/Observation.rs
-              patient/Organization.rs patient/Patient.rs
-              patient/Practitioner.rs patient/Procedure.rs
-              patient/Provenance.rs patient/PractitionerRole.rs
-            ).gsub(/\s{2,}/, ' ').strip
+          smart_auth_info: {
+            name: :standalone_smart_auth_info,
+            options: {
+              components: [
+                {
+                  name: :requested_scopes,
+                  default: STANDALONE_SMART_2_SCOPES
+                }
+              ]
+            }
           }
         }
       )
@@ -463,7 +444,7 @@ module ONCCertificationG10TestKit
            config: {
              inputs: {
                patient_id: { name: :standalone_patient_id },
-               smart_credentials: { name: :standalone_smart_credentials }
+               smart_auth_info: { name: :standalone_smart_auth_info }
              }
            }
 
@@ -489,9 +470,7 @@ module ONCCertificationG10TestKit
           config: {
             inputs: {
               id_token: { name: :standalone_id_token },
-              client_id: { name: :standalone_client_id },
-              requested_scopes: { name: :standalone_requested_scopes },
-              smart_credentials: { name: :standalone_smart_credentials }
+              smart_auth_info: { name: :standalone_smart_auth_info }
             }
           }
 
@@ -501,9 +480,7 @@ module ONCCertificationG10TestKit
           config: {
             inputs: {
               id_token: { name: :standalone_id_token },
-              client_id: { name: :standalone_client_id },
-              requested_scopes: { name: :standalone_requested_scopes },
-              smart_credentials: { name: :standalone_smart_credentials }
+              smart_auth_info: { name: :standalone_smart_auth_info }
             }
           }
 
@@ -512,9 +489,7 @@ module ONCCertificationG10TestKit
           config: {
             inputs: {
               id_token: { name: :standalone_id_token },
-              client_id: { name: :standalone_client_id },
-              requested_scopes: { name: :standalone_requested_scopes },
-              smart_credentials: { name: :standalone_smart_credentials }
+              smart_auth_info: { name: :standalone_smart_auth_info }
             }
           }
 
@@ -523,9 +498,6 @@ module ONCCertificationG10TestKit
 
       config(
         inputs: {
-          refresh_token: { name: :standalone_refresh_token },
-          client_id: { name: :standalone_client_id },
-          client_secret: { name: :standalone_client_secret },
           received_scopes: { name: :standalone_received_scopes }
         },
         outputs: {
@@ -534,7 +506,7 @@ module ONCCertificationG10TestKit
           access_token: { name: :standalone_access_token },
           token_retrieval_time: { name: :standalone_token_retrieval_time },
           expires_in: { name: :standalone_expires_in },
-          smart_credentials: { name: :standalone_smart_credentials }
+          smart_auth_info: { name: :standalone_smart_auth_info }
         }
       )
 
@@ -542,7 +514,7 @@ module ONCCertificationG10TestKit
         config(
           inputs: {
             patient_id: { name: :standalone_patient_id },
-            smart_credentials: { name: :standalone_smart_credentials }
+            smart_auth_info: { name: :standalone_smart_auth_info }
           },
           options: {
             refresh_test: true
@@ -559,7 +531,7 @@ module ONCCertificationG10TestKit
             inputs: {
               received_scopes: { name: :standalone_received_scopes },
               patient_id: { name: :standalone_patient_id },
-              smart_credentials: { name: :standalone_smart_credentials }
+              smart_auth_info: { name: :standalone_smart_auth_info }
             }
           }
 
@@ -567,12 +539,12 @@ module ONCCertificationG10TestKit
       id :g10_standalone_credentials_export
       title 'Set SMART Credentials to Standalone Launch Credentials'
 
-      input :standalone_smart_credentials, type: :oauth_credentials
+      input :standalone_smart_auth_info, type: :auth_info
       input :standalone_patient_id
-      output :smart_credentials, :patient_id
+      output :smart_auth_info, :patient_id
 
       run do
-        output smart_credentials: standalone_smart_credentials.to_s,
+        output smart_auth_info: standalone_smart_auth_info.to_s,
                patient_id: standalone_patient_id
       end
     end

data/lib/onc_certification_g10_test_kit/smart_v1_scopes_group.rb

@@ -15,7 +15,7 @@ module ONCCertificationG10TestKit
     input_instructions %(
       Register Inferno as a standalone application using the following information:
 
-      * Redirect URI: `#{SMARTAppLaunch::AppRedirectTest.config.options[:redirect_uri]}`
+      * Redirect URI: `#{REDIRECT_URI}`
 
       Enter in the appropriate v1 scopes to enable patient-level access to all
       relevant resources. In addition, support for the OpenID Connect (openid
@@ -46,7 +46,7 @@ module ONCCertificationG10TestKit
         with Inferno used in a previous scenario, or register Inferno with a new
         `client_id` as a standalone client with the following information:
 
-        * Redirect URI: `#{SMARTAppLaunch::AppRedirectTest.config.options[:redirect_uri]}`
+        * Redirect URI: `#{REDIRECT_URI}`
 
       )
 
@@ -55,46 +55,67 @@ module ONCCertificationG10TestKit
 
     config(
       inputs: {
-        client_secret: {
-          optional: false,
-          name: :standalone_client_secret
-        },
-        requested_scopes: {
-          name: :v1_requested_scopes,
-          default: %(
-            launch/patient openid fhirUser offline_access
-            patient/Medication.read patient/AllergyIntolerance.read
-            patient/CarePlan.read patient/CareTeam.read patient/Condition.read
-            patient/Device.read patient/DiagnosticReport.read
-            patient/DocumentReference.read patient/Encounter.read
-            patient/Goal.read patient/Immunization.read patient/Location.read
-            patient/MedicationRequest.read patient/Observation.read
-            patient/Organization.read patient/Patient.read
-            patient/Practitioner.read patient/Procedure.read
-            patient/Provenance.read patient/PractitionerRole.read
-            patient/Specimen.read patient/Coverage.read
-            patient/MedicationDispense.read patient/ServiceRequest.read
-          ).gsub(/\s{2,}/, ' ').strip
+        smart_auth_info: {
+          name: :v1_smart_auth_info,
+          title: 'Launch with v1 Scopes Credentials',
+          options: {
+            mode: 'auth',
+            components: [
+              {
+                name: :requested_scopes,
+                default: %(
+                  launch/patient openid fhirUser offline_access
+                  patient/Medication.read patient/AllergyIntolerance.read
+                  patient/CarePlan.read patient/CareTeam.read
+                  patient/Condition.read patient/Device.read
+                  patient/DiagnosticReport.read patient/DocumentReference.read
+                  patient/Encounter.read patient/Goal.read
+                  patient/Immunization.read patient/Location.read
+                  patient/MedicationRequest.read patient/Observation.read
+                  patient/Organization.read patient/Patient.read
+                  patient/Practitioner.read patient/Procedure.read
+                  patient/Provenance.read patient/PractitionerRole.read
+                  patient/Specimen.read patient/Coverage.read
+                  patient/MedicationDispense.read patient/ServiceRequest.read
+                ).gsub(/\s{2,}/, ' ').strip
+              },
+              {
+                name: :auth_type,
+                default: 'symmetric',
+                locked: true
+              },
+              {
+                name: :auth_request_method,
+                default: 'GET',
+                locked: true
+              },
+              {
+                name: :use_discovery,
+                locked: true
+              },
+              {
+                name: :pkce_support,
+                default: 'enabled',
+                locked: true
+              },
+              {
+                name: :pkce_code_challenge_method,
+                default: 'S256',
+                locked: true
+              }
+            ]
+          }
         },
-        received_scopes: { name: :v1_received_scopes },
-        smart_credentials: { name: :v1_smart_credentials }
+        patient_id: { name: :v1_patient_id },
+        received_scopes: { name: :v1_received_scopes }
       },
       outputs: {
+        smart_auth_info: { name: :v1_smart_auth_info },
         received_scopes: { name: :v1_received_scopes },
         patient_id: { name: :v1_patient_id }
       }
     )
 
-    input_order :url,
-                :standalone_client_id,
-                :standalone_client_secret,
-                :v1_requested_scopes,
-                :use_pkce,
-                :pkce_code_challenge_method,
-                :standalone_authorization_method,
-                :client_auth_type,
-                :client_auth_encryption_method
-
     group from: :smart_discovery_stu2 do
       required_suite_options(G10Options::SMART_2_REQUIREMENT)
       test from: 'g10_smart_well_known_capabilities',
@@ -140,30 +161,7 @@ module ONCCertificationG10TestKit
     end
 
     group from: :smart_standalone_launch_stu2,
-          required_suite_options: G10Options::SMART_2_REQUIREMENT,
-          config: {
-            inputs: {
-              use_pkce: {
-                default: 'true',
-                locked: true
-              },
-              pkce_code_challenge_method: {
-                locked: true
-              },
-              authorization_method: {
-                name: :standalone_authorization_method,
-                default: 'get',
-                locked: true
-              },
-              client_auth_type: {
-                locked: true,
-                default: 'confidential_symmetric'
-              }
-            },
-            outputs: {
-              smart_credentials: { name: :v1_smart_credentials }
-            }
-          } do
+          required_suite_options: G10Options::SMART_2_REQUIREMENT do
       title 'Standalone Launch With Patient Scope'
       description %(
         # Background
@@ -201,20 +199,9 @@ module ONCCertificationG10TestKit
         )
       end
 
-      test from: :g10_unauthorized_access,
-           config: {
-             inputs: {
-               patient_id: { name: :v1_patient_id }
-             }
-           }
+      test from: :g10_unauthorized_access
 
-      test from: :g10_patient_context,
-           config: {
-             inputs: {
-               patient_id: { name: :v1_patient_id },
-               smart_credentials: { name: :v1_smart_credentials }
-             }
-           }
+      test from: :g10_patient_context
 
       tests[0].config(
         outputs: {
@@ -233,30 +220,7 @@ module ONCCertificationG10TestKit
       )
     end
     group from: :smart_standalone_launch_stu2_2, # rubocop:disable Naming/VariableNumber
-          required_suite_options: G10Options::SMART_2_2_REQUIREMENT,
-          config: {
-            inputs: {
-              use_pkce: {
-                default: 'true',
-                locked: true
-              },
-              pkce_code_challenge_method: {
-                locked: true
-              },
-              authorization_method: {
-                name: :standalone_authorization_method,
-                default: 'get',
-                locked: true
-              },
-              client_auth_type: {
-                locked: true,
-                default: 'confidential_symmetric'
-              }
-            },
-            outputs: {
-              smart_credentials: { name: :v1_smart_credentials }
-            }
-          } do
+          required_suite_options: G10Options::SMART_2_2_REQUIREMENT do
       title 'Standalone Launch With Patient Scope'
       description %(
         # Background
@@ -294,20 +258,9 @@ module ONCCertificationG10TestKit
         )
       end
 
-      test from: :g10_unauthorized_access,
-           config: {
-             inputs: {
-               patient_id: { name: :v1_patient_id }
-             }
-           }
+      test from: :g10_unauthorized_access
 
-      test from: :g10_patient_context,
-           config: {
-             inputs: {
-               patient_id: { name: :v1_patient_id },
-               smart_credentials: { name: :v1_smart_credentials }
-             }
-           }
+      test from: :g10_patient_context
 
       tests[0].config(
         outputs: {
@@ -326,14 +279,7 @@ module ONCCertificationG10TestKit
       )
     end
 
-    group from: :g10_unrestricted_resource_type_access,
-          config: {
-            inputs: {
-              received_scopes: { name: :v1_received_scopes },
-              patient_id: { name: :v1_patient_id },
-              smart_credentials: { name: :v1_smart_credentials }
-            }
-          }
+    group from: :g10_unrestricted_resource_type_access
 
     test from: :g10_incorrectly_permitted_tls_versions_messages_setup,
          id: :g10_auth_incorrectly_permitted_tls_versions_messages_setup,

data/lib/onc_certification_g10_test_kit/tasks/generate_matrix.rb

@@ -212,22 +212,13 @@ module ONCCertificationG10TestKit
         workbook.worksheets[2]
       end
 
-      def columns # rubocop:disable Metrics/CyclomaticComplexity
+      def columns
         @columns ||= [
           ['', 3, ->(_test) { '' }],
           ['', 3, ->(_test) { '' }],
           ['Inferno Test ID', 22, ->(test) { test.short_id.to_s }],
-          ['Inferno Test Name', 65, ->(test) { test.title }],
-          ['Inferno Test Description', 65, lambda do |test|
-                                             description = test.description || ''
-                                             natural_indent =
-                                               description
-                                                 .lines
-                                                 .collect { |l| l.index(/[^ ]/) }
-                                                 .select { |l| !l.nil? && l.positive? }
-                                                 .min || 0
-                                             description.lines.map { |l| l[natural_indent..] || "\n" }.join.strip
-                                           end],
+          ['Inferno Test Name', 65, lambda(&:title)],
+          ['Inferno Test Description', 65, ->(test) { test.description&.strip }],
           ['Test Procedure Steps', 30, ->(test) { inferno_to_procedure_map[test.short_id].join(', ') }],
           ['Standard Version Filter', 30, lambda do |test|
                                             applicable_options(test).map(&:value).uniq.join(', ')