onc_certification_g10_test_kit 8.0.1 → 8.0.2

data/execution_scripts/reference_server/ref_server_authorize_85_all_scopes.rb

@@ -0,0 +1,4 @@
+gem_dir = Gem::Specification.find_by_name('smart_app_launch_test_kit').gem_dir
+load "#{gem_dir}/execution_scripts/reference_server/base_ref_server_authorize.rb"
+
+ref_server_authorize(ARGV[0], target_patient_id: '85')

data/execution_scripts/reference_server/ref_server_authorize_85_granular_scopes.rb

@@ -0,0 +1,15 @@
+gem_dir = Gem::Specification.find_by_name('smart_app_launch_test_kit').gem_dir
+load "#{gem_dir}/execution_scripts/reference_server/base_ref_server_authorize.rb"
+
+GRANULAR_SCOPE_SELECTIONS_TO_CLICK = ['patient/Condition.rs',
+                                      'patient/Condition.rs?category=http://hl7.org/fhir/us/core/CodeSystem/condition-category|health-concern',
+                                      'patient/Condition.rs?category=http://terminology.hl7.org/CodeSystem/condition-category|encounter-diagnosis',
+                                      'patient/Condition.rs?category=http://terminology.hl7.org/CodeSystem/condition-category|problem-list-item',
+                                      'patient/Observation.rs',
+                                      'patient/Observation.rs?category=http://hl7.org/fhir/us/core/CodeSystem/us-core-category|sdoh',
+                                      'patient/Observation.rs?category=http://terminology.hl7.org/CodeSystem/observation-category|social-history',
+                                      'patient/Observation.rs?category=http://terminology.hl7.org/CodeSystem/observation-category|laboratory',
+                                      'patient/Observation.rs?category=http://terminology.hl7.org/CodeSystem/observation-category|survey',
+                                      'patient/Observation.rs?category=http://terminology.hl7.org/CodeSystem/observation-category|vital-signs'].freeze
+
+ref_server_authorize(ARGV[0], target_patient_id: '85', click_scopes: GRANULAR_SCOPE_SELECTIONS_TO_CLICK)

data/execution_scripts/reference_server/ref_server_authorize_85_limited_scopes.rb

@@ -0,0 +1,28 @@
+gem_dir = Gem::Specification.find_by_name('smart_app_launch_test_kit').gem_dir
+load "#{gem_dir}/execution_scripts/reference_server/base_ref_server_authorize.rb"
+
+LIMITED_SCOPES_TO_UNCHECK = ['patient/AllergyIntolerance.rs',
+                             'patient/CarePlan.rs',
+                             'patient/CareTeam.rs',
+                             'patient/Coverage.rs',
+                             'patient/Device.rs',
+                             'patient/DocumentReference.rs',
+                             'patient/DiagnosticReport.rs',
+                             'patient/Encounter.rs',
+                             'patient/Goal.rs',
+                             'patient/Immunization.rs',
+                             'patient/Location.rs',
+                             'patient/Medication.rs',
+                             'patient/MedicationDispense.rs',
+                             'patient/MedicationRequest.rs',
+                             'patient/Organization.rs',
+                             'patient/Practitioner.rs',
+                             'patient/PractitionerRole.rs',
+                             'patient/Procedure.rs',
+                             'patient/Provenance.rs',
+                             'patient/QuestionnaireResponse.rs',
+                             'patient/RelatedPerson.rs',
+                             'patient/ServiceRequest.rs',
+                             'patient/Specimen.rs'].freeze
+
+ref_server_authorize(ARGV[0], target_patient_id: '85', click_scopes: LIMITED_SCOPES_TO_UNCHECK)

data/execution_scripts/reference_server/ref_server_authorize_launched_all_scopes.rb

@@ -0,0 +1,4 @@
+gem_dir = Gem::Specification.find_by_name('smart_app_launch_test_kit').gem_dir
+load "#{gem_dir}/execution_scripts/reference_server/base_ref_server_authorize.rb"
+
+ref_server_authorize(ARGV[0])

data/execution_scripts/reference_server/ref_server_ehr_launch_85.rb

@@ -0,0 +1,4 @@
+gem_dir = Gem::Specification.find_by_name('smart_app_launch_test_kit').gem_dir
+load "#{gem_dir}/execution_scripts/reference_server/base_ref_server_ehr_launch.rb"
+
+ref_server_ehr_launch(ARGV[0], ARGV[1], 85)

data/execution_scripts/reference_server/ref_server_invalid_launch_and_attest.rb

@@ -0,0 +1,20 @@
+begin
+  require 'selenium-webdriver'
+rescue LoadError
+  warn 'selenium-webdriver is required to run this command script.'
+  warn "Add it to your Gemfile: gem 'selenium-webdriver'"
+  exit(1)
+end
+
+launch_url = ARGV[0]
+attest_url = ARGV[1]
+
+options = Selenium::WebDriver::Options.chrome(args: ['--headless=new'])
+driver = Selenium::WebDriver.for(:chrome, options: options)
+wait = Selenium::WebDriver::Wait.new(timeout: 10)
+driver.get launch_url
+wait.until { driver.find_element(id: 'errorMessage') }
+driver.get attest_url
+wait.until { driver.find_element(:xpath, '//title') }
+driver.quit
+exit(0)

data/execution_scripts/reference_server/ref_server_revoke_token_and_run_group.rb

@@ -0,0 +1,43 @@
+begin
+  require 'selenium-webdriver'
+rescue LoadError
+  warn 'selenium-webdriver is required to run this command script.'
+  warn "Add it to your Gemfile: gem 'selenium-webdriver'"
+  exit(1)
+end
+
+def ref_server_revoke_token(session_id, inferno_host)
+  inputs_cli_command = "bundle exec inferno session data #{session_id}#{" -I #{inferno_host}" unless inferno_host.nil?}"
+  inputs = JSON.parse(`#{inputs_cli_command}`)
+
+  token_to_revoke = token_to_revoke(inputs)
+  raise StandardError, 'could not find access token to revoke' if token_to_revoke.nil? || token_to_revoke == ''
+
+  reference_server_url = inputs.find { |input| input['name'] == 'url' }&.dig('value')
+  revocation_url = "#{reference_server_url.chomp('/r4')}/oauth/token/revoke-token"
+
+  options = Selenium::WebDriver::Options.chrome(args: ['--headless=new'])
+  driver = Selenium::WebDriver.for(:chrome, options: options)
+  wait = Selenium::WebDriver::Wait.new(timeout: 10)
+  driver.get revocation_url
+  wait.until { driver.find_element(id: 'revokeToken') }.send_keys(token_to_revoke)
+  driver.find_element(id: 'revokeTokenButton').click
+  wait.until { driver.find_element(id: 'errorMessage').text.include?('successfully') }
+  driver.quit
+end
+
+def token_to_revoke(inputs)
+  JSON.parse(inputs.find { |input| input['name'] == 'smart_auth_info' }&.dig('value'))&.dig('access_token')
+rescue JSON::ParserError
+  nil
+end
+
+session_id = ARGV[0]
+revoke_token_group = ARGV[1]
+inferno_host = ARGV[2]
+
+ref_server_revoke_token(session_id, inferno_host)
+start_run_cli_command =
+  "bundle exec inferno session start_run #{session_id} #{revoke_token_group}" \
+  "#{" -I #{inferno_host}" unless inferno_host.nil?}"
+exec(start_run_cli_command)

data/lib/onc_certification_g10_test_kit/configuration_checker.rb

@@ -2,7 +2,7 @@ require_relative '../inferno/terminology/tasks/check_built_terminology'
 
 module ONCCertificationG10TestKit
   class ConfigurationChecker
-    EXPECTED_HL7_VALIDATOR_VERSION = '1.0.67'.freeze
+    EXPECTED_HL7_VALIDATOR_VERSION = '1.0.78'.freeze
     HL7_VALIDATOR_VERSION_KEY = 'validatorWrapperVersion'.freeze
 
     def configuration_messages

data/lib/onc_certification_g10_test_kit/smart_app_launch_invalid_aud_group.rb

@@ -93,12 +93,17 @@ module ONCCertificationG10TestKit
           }
         }
       )
+      output :attest_launch_failed_url
 
       def aud
         'https://inferno.healthit.gov/invalid_aud'
       end
 
       def wait_message(auth_url)
+        attest_launch_failed_url =
+          "#{Inferno::Application['base_url']}/custom/smart/redirect?state=#{state}&confirm_fail=true"
+        output(attest_launch_failed_url:)
+
         %(
           Inferno will redirect you to an external website for authorization.
           **It is expected this will fail**. If the server does not return to
@@ -108,7 +113,7 @@ module ONCCertificationG10TestKit
 
           * [Perform Invalid Launch](#{auth_url})
           * [Attest launch
-            failed](#{Inferno::Application['base_url']}/custom/smart/redirect?state=#{state}&confirm_fail=true)
+            failed](#{attest_launch_failed_url})
         )
       end
     end
@@ -156,12 +161,17 @@ module ONCCertificationG10TestKit
           }
         }
       )
+      output :attest_launch_failed_url
 
       def aud
         'https://inferno.healthit.gov/invalid_aud'
       end
 
       def wait_message(auth_url)
+        attest_launch_failed_url =
+          "#{Inferno::Application['base_url']}/custom/smart/redirect?state=#{state}&confirm_fail=true"
+        output(attest_launch_failed_url:)
+
         %(
           Inferno will redirect you to an external website for authorization.
           **It is expected this will fail**. If the server does not return to
@@ -171,7 +181,7 @@ module ONCCertificationG10TestKit
 
           * [Perform Invalid Launch](#{auth_url})
           * [Attest launch
-            failed](#{Inferno::Application['base_url']}/custom/smart/redirect?state=#{state}&confirm_fail=true)
+            failed](#{attest_launch_failed_url})
         )
       end
     end
@@ -218,12 +228,17 @@ module ONCCertificationG10TestKit
           }
         }
       )
+      output :attest_launch_failed_url
 
       def aud
         'https://inferno.healthit.gov/invalid_aud'
       end
 
       def wait_message(auth_url)
+        attest_launch_failed_url =
+          "#{Inferno::Application['base_url']}/custom/smart/redirect?state=#{state}&confirm_fail=true"
+        output(attest_launch_failed_url:)
+
         %(
           Inferno will redirect you to an external website for authorization.
           **It is expected this will fail**. If the server does not return to
@@ -233,7 +248,7 @@ module ONCCertificationG10TestKit
 
           * [Perform Invalid Launch](#{auth_url})
           * [Attest launch
-            failed](#{Inferno::Application['base_url']}/custom/smart/redirect?state=#{state}&confirm_fail=true)
+            failed](#{attest_launch_failed_url})
         )
       end
     end

data/lib/onc_certification_g10_test_kit/version.rb

@@ -1,4 +1,4 @@
 module ONCCertificationG10TestKit
-  VERSION = '8.0.1'.freeze
-  LAST_UPDATED = '2026-05-18'.freeze # TODO: update next release
+  VERSION = '8.0.2'.freeze
+  LAST_UPDATED = '2026-05-27'.freeze # TODO: update next release
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: onc_certification_g10_test_kit
 version: !ruby/object:Gem::Version
-  version: 8.0.1
+  version: 8.0.2
 platform: ruby
 authors:
-- Stephen MacVicar
+- Inferno Team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-05-19 00:00:00.000000000 Z
+date: 2026-05-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bloomer
@@ -123,7 +123,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.1
+        version: 1.0.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -133,7 +133,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.1
+        version: 1.0.2
 - !ruby/object:Gem::Dependency
   name: tls_test_kit
   requirement: !ruby/object:Gem::Requirement
@@ -163,7 +163,7 @@ dependencies:
         version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.1.2
+        version: 1.1.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -173,7 +173,7 @@ dependencies:
         version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.1.2
+        version: 1.1.3
 description: ONC Certification (g)(10) Standardized API for Patient and Population
   Services Test Kit
 email:
@@ -183,6 +183,19 @@ extra_rdoc_files: []
 files:
 - LICENSE
 - config/presets/g10_reference_server_preset.json
+- execution_scripts/reference_server/g10_ref_server_usc6_smart2_bulk1_no_terminology_expected.json
+- execution_scripts/reference_server/g10_ref_server_usc6_smart2_bulk1_with_commands.yaml
+- execution_scripts/reference_server/g10_ref_server_usc6_smart2_bulk1_with_commands_expected.json
+- execution_scripts/reference_server/g10_ref_server_usc7_smart2_bulk1_no_terminology_expected.json
+- execution_scripts/reference_server/g10_ref_server_usc7_smart2_bulk1_with_commands.yaml
+- execution_scripts/reference_server/g10_ref_server_usc7_smart2_bulk1_with_commands_expected.json
+- execution_scripts/reference_server/ref_server_authorize_85_all_scopes.rb
+- execution_scripts/reference_server/ref_server_authorize_85_granular_scopes.rb
+- execution_scripts/reference_server/ref_server_authorize_85_limited_scopes.rb
+- execution_scripts/reference_server/ref_server_authorize_launched_all_scopes.rb
+- execution_scripts/reference_server/ref_server_ehr_launch_85.rb
+- execution_scripts/reference_server/ref_server_invalid_launch_and_attest.rb
+- execution_scripts/reference_server/ref_server_revoke_token_and_run_group.rb
 - lib/inferno/exceptions.rb
 - lib/inferno/ext/bloomer.rb
 - lib/inferno/repositiories/validators.rb