onc_certification_g10_test_kit 2.2.1 → 2.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b0f7ed41d6d4933c58e9bc4e8533c137ee30f0b16e17d64f823cce44c878e85c
-  data.tar.gz: 69ccfbd00f84f63007b50a6b09ea93574673f1f2b0aa8e11ceb5233c9a313e3d
+  metadata.gz: fb3530831315a74fef8ddffba6114b0934ab651d459e516a662ef2482f53af51
+  data.tar.gz: add2b2f5e8f8483932cd75a971d3d4f94992c5cae208f60124c7201b43293b85
 SHA512:
-  metadata.gz: 9122abab488efb86c982e2ab8012b749cb61f330c8a2f06844dbec26d1975564b80297b2b04027f694b1204f99f5eee89477d6729fa7004de7194c4ec2c0eaf2
-  data.tar.gz: 95df85ff5d0c9e07f7e21ad645a2d31c78e60864c76f44d2e2ed018346a501c2fab0012fb119942efdf94adf364adf0f37189256fec5b9ea37a9d166a89acb22
+  metadata.gz: 6042c6a5161cb50757ebee1f17ddfb7ce8ae6734229a8d30342a99c24192cf3bd11b9d43c0326d3eb679837af46912b4c6b6735c4fcdd7148a2a42e264a163c3
+  data.tar.gz: 6add8a740467b5d1bc88148083d1ac244e3fdfa83fb45d4f6915040d1c35f0e2f5c7e67e26d21ff178815a889adf07256572cf38f701db03ce8fcf3f2cedbdb3

data/lib/onc_certification_g10_test_kit/bulk_data_group_export.rb

@@ -96,7 +96,7 @@ module ONCCertificationG10TestKit
           assert has_instantiates,
                  'Server did not declare conformance to the Bulk Data IG by including ' \
                  "'http://hl7.org/fhir/uv/bulkdata/CapabilityStatement/bulk-data' in " \
-                 " CapabilityStatement.instantiates element (#{capability_statement&.instantiates})"
+                 "CapabilityStatement.instantiates element (#{capability_statement&.instantiates})"
         end
 
         group_resource_capabilities = nil
@@ -120,7 +120,7 @@ module ONCCertificationG10TestKit
         warning do
           assert has_export_operation,
                  'Server CapabilityStatement did not declare support for an operation named "export" in the Group ' \
-                 ' resource (operation.name should be "export")'
+                 'resource (operation.name should be "export")'
         end
       end
     end

data/lib/onc_certification_g10_test_kit/bulk_data_group_export_validation.rb

@@ -440,8 +440,8 @@ module ONCCertificationG10TestKit
     end
 
     test do
-      title 'Location resources returned conform to the HL7 FHIR Specification Location Resource if bulk data export' \
-            ' has Location resources'
+      title 'Location resources returned conform to the HL7 FHIR Specification Location Resource if bulk data export ' \
+            'has Location resources'
       description <<~DESCRIPTION
         This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification. This test is omitted if bulk data export does not return any Location resources.
       DESCRIPTION
@@ -459,8 +459,8 @@ module ONCCertificationG10TestKit
     end
 
     test do
-      title 'Medication resources returned conform to the US Core Medication Profile if bulk data export has' \
-            ' Medication resources'
+      title 'Medication resources returned conform to the US Core Medication Profile if bulk data export has ' \
+            'Medication resources'
       description <<~DESCRIPTION
         This test verifies that the resources returned from bulk data export conform to the US Core profiles. This includes checking for missing data elements and value set verification. This test is omitted if bulk data export does not return any Medication resources.
       DESCRIPTION

data/lib/onc_certification_g10_test_kit/bulk_export_validation_tester.rb

@@ -161,8 +161,8 @@ module ONCCertificationG10TestKit
         end
 
         if resource.resourceType != resource_type
-          assert false, "Resource type \"#{resource.resourceType}\" at line \"#{line_count}\" does not match type" \
-                        " defined in output \"#{resource_type}\""
+          assert false, "Resource type \"#{resource.resourceType}\" at line \"#{line_count}\" does not match type " \
+                        "defined in output \"#{resource_type}\""
         end
 
         profile_url = determine_profile(resource)

data/lib/onc_certification_g10_test_kit/onc_program_procedure.yml

@@ -16,7 +16,7 @@ procedure:
           registration functions to enable authentication and authorization in §
           170.315(g)(10)(v).
         inferno_tests:
-          - 6.6.01
+          - 6.5.01
         inferno_supported: 'yes'
         inferno_notes: |
           This requires a visual inspection and attestation because it is not
@@ -36,7 +36,7 @@ procedure:
           registration functions to enable authentication and authorization in §
           170.315(g)(10)(v).
         inferno_tests: 
-          - 6.6.02
+          - 6.5.02
         inferno_supported: 'yes'
         inferno_notes: |
           This requires a visual inspection and attestation because it is not
@@ -417,29 +417,20 @@ procedure:
           based on previously selected preferences.
       - id: AUTH-PATIENT-13
         SUT: |
-          [Both] The health IT developer demonstrates the ability of
-          the Health IT Module to return an error response if the following
-          parameters provided by an application to the Health IT Module in
-          step 8 of this section do not match the parameters originally
-          provided to an application by the Health IT Module in step 2 of
-          this section according to the implementation specification
-          adopted in § 170.215(a)(3):
-          * “launch”; and
-          * “aud”.
+          [Both] The health IT developer demonstrates the ability of the Health
+          IT Module to return an error response if the "aud" parameter provided
+          by an application to the Health IT Module in Step 8, is not a valid
+          FHIR® resource server associated with the Health IT Module's
+          authorization server.
         TLV: |
-          [Both] The tester verifies the ability of the Health IT
-          Module to return an error response if the following parameters
-          provided by an application to the Health IT Module in step 8 of
-          this section do not match the parameters originally provided to an
-          application by the Health IT Module in step 2 of this section
-          according to the implementation specification adopted in §
-          170.215(a)(3):
-          * “launch”; and
-          * “aud”.
+          [Both] The tester verifies the ability of the Health IT Module to
+          return an error response if the "aud" parameter provided by an
+          application to the Health IT Module in Step 8, is not a valid FHIR®
+          resource server associated with the Health IT Module's authorization
+          server.
         inferno_supported: 'yes'
         inferno_tests:
           - 6.3.01 - 6.3.02
-          - 6.4.01 - 6.4.04
       - id: AUTH-PATIENT-14
         SUT: |
           [Both] The health IT developer demonstrates the ability of the
@@ -566,7 +557,7 @@ procedure:
         inferno_tests:
           - 2.1.02 - 2.1.09
           - 2.2.01 - 2.2.13
-          - 6.5.01 - 6.5.04
+          - 6.4.01 - 6.4.04
       - id: AUTH-PATIENT-19
         SUT: |
           [Standalone-Launch] The health IT developer the ability of the Health IT
@@ -609,7 +600,7 @@ procedure:
           months to native applications capable of storing a refresh token.
         inferno_supported: 'yes'
         inferno_tests:
-          - 6.6.13
+          - 6.5.13
       - group: 'Subsequent Connections: Authentication and Authorization for Patient and User Scopes'
         id: AUTH-PATIENT-22
         SUT: | 
@@ -628,7 +619,7 @@ procedure:
           in § 170.215(a)(3).
         inferno_supported: 'yes'
         inferno_tests:
-          - 6.6.05
+          - 6.5.05
         inferno_notes: |
           Inferno cannot verify the three month token expiration requirement
           automatically during the token refresh tests, but the tester can
@@ -762,7 +753,7 @@ procedure:
           This test requires the tester to register an attestation from the
           Health IT Module that the "cache-control" header is obeyed.
         inferno_tests:
-          - 6.6.10
+          - 6.5.10
       - id: AUTH-SYSTEM-6
         SUT: |
           The health IT developer demonstrates the ability of the Health IT
@@ -811,7 +802,7 @@ procedure:
           more than what was pre-authorized.  The Health IT module must
           demonstrate this and register its attestation within Inferno.
         inferno_tests:
-          - 6.6.08
+          - 6.5.08
       - id: AUTH-SYSTEM-9
         SUT: |
           The health IT developer demonstrates the ability of the Health IT
@@ -865,7 +856,7 @@ procedure:
           an automated fashion and this is recorded as an attestation
           within Inferno.
         inferno_tests:
-          - 6.6.06
+          - 6.5.06
   - section: Paragraph (g)(10)(ii) – Supported search operations
     steps:
       - group: Supported Search Operations for a Single Patient’s Data
@@ -1072,9 +1063,9 @@ procedure:
           * All references within the resources can be resolved and validated, as applicable, according to steps 2-6 of this section
         inferno_supported: 'yes'
         inferno_tests:
-          - 6.6.07
-          - 6.6.11
-          - 6.6.12
+          - 6.5.07
+          - 6.5.11
+          - 6.5.12
           - 4.2.01
           - 4.3.01
           - 4.4.01
@@ -1434,7 +1425,7 @@ procedure:
           * All technical requirements and attributes necessary for registration.
         inferno_supported: 'yes'
         inferno_tests:
-          - 6.6.09
+          - 6.5.09
       - id: DOCUMENTATION-2
         SUT: |
           The health IT developer demonstrates that the documentation
@@ -1448,4 +1439,4 @@ procedure:
           additional steps to access.
         inferno_supported: 'yes'
         inferno_tests:
-          - 6.6.09
+          - 6.5.09

data/lib/onc_certification_g10_test_kit/version.rb

@@ -1,3 +1,3 @@
 module ONCCertificationG10TestKit
-  VERSION = '2.2.1'.freeze
+  VERSION = '2.2.2'.freeze
 end

data/lib/onc_certification_g10_test_kit.rb

@@ -1,4 +1,4 @@
-require 'smart_app_launch_test_kit'
+require 'smart_app_launch/smart_stu1_suite'
 require 'us_core_test_kit/generated/v3.1.1/us_core_test_suite'
 
 require_relative 'onc_certification_g10_test_kit/configuration_checker'
@@ -6,7 +6,6 @@ require_relative 'onc_certification_g10_test_kit/version'
 
 require_relative 'onc_certification_g10_test_kit/single_patient_api_group'
 require_relative 'onc_certification_g10_test_kit/smart_app_launch_invalid_aud_group'
-require_relative 'onc_certification_g10_test_kit/smart_invalid_launch_group'
 require_relative 'onc_certification_g10_test_kit/smart_invalid_token_group'
 require_relative 'onc_certification_g10_test_kit/smart_limited_app_group'
 require_relative 'onc_certification_g10_test_kit/smart_standalone_patient_app_group'
@@ -46,8 +45,8 @@ module ONCCertificationG10TestKit
            us_core_message_filters.any? { |filter| filter.match? message.message } ||
            (
              message.type == 'error' && (
-               message.message.match?(/\A\S+: Unknown Code/) ||
-               message.message.match?(/\A\S+: None of the codings provided are in the value set/)
+               message.message.match?(/\A\S+: \S+: Unknown Code/) ||
+               message.message.match?(/\A\S+: \S+: None of the codings provided are in the value set/)
              )
            )
           true
@@ -154,7 +153,6 @@ module ONCCertificationG10TestKit
       group from: :g10_token_revocation
 
       group from: :g10_smart_invalid_aud
-      group from: :g10_smart_invalid_launch_param
       group from: :g10_smart_invalid_token_request
 
       group from: :g10_visual_inspection_and_attestations

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: onc_certification_g10_test_kit
 version: !ruby/object:Gem::Version
-  version: 2.2.1
+  version: 2.2.2
 platform: ruby
 authors:
 - Stephen MacVicar
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-05-17 00:00:00.000000000 Z
+date: 2022-07-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bloomer
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.1.3
+        version: 0.1.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.1.3
+        version: 0.1.4
 - !ruby/object:Gem::Dependency
   name: tls_test_kit
   requirement: !ruby/object:Gem::Requirement
@@ -142,14 +142,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.2.2
+        version: 0.2.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.2.2
+        version: 0.2.4
 - !ruby/object:Gem::Dependency
   name: database_cleaner-sequel
   requirement: !ruby/object:Gem::Requirement
@@ -272,7 +272,6 @@ files:
 - lib/onc_certification_g10_test_kit/single_patient_api_group.rb
 - lib/onc_certification_g10_test_kit/smart_app_launch_invalid_aud_group.rb
 - lib/onc_certification_g10_test_kit/smart_ehr_practitioner_app_group.rb
-- lib/onc_certification_g10_test_kit/smart_invalid_launch_group.rb
 - lib/onc_certification_g10_test_kit/smart_invalid_token_group.rb
 - lib/onc_certification_g10_test_kit/smart_limited_app_group.rb
 - lib/onc_certification_g10_test_kit/smart_public_standalone_launch_group.rb

data/lib/onc_certification_g10_test_kit/smart_invalid_launch_group.rb

@@ -1,137 +0,0 @@
-module ONCCertificationG10TestKit
-  class SMARTInvalidLaunchGroup < Inferno::TestGroup
-    title 'SMART App Launch Error: Invalid Launch Parameter'
-    short_title 'SMART Invalid Launch Parameter'
-    input_instructions %(
-      Register Inferno as an EHR-launched application using the following information:
-
-      * Launch URI: `#{SMARTAppLaunch::AppLaunchTest.config.options[:launch_uri]}`
-      * Redirect URI: `#{SMARTAppLaunch::AppRedirectTest.config.options[:redirect_uri]}`
-    )
-    description %(
-      # Background
-
-      The Invalid Launch Parameter Sequence verifies that a SMART Launch
-      Sequence, specifically the [EHR
-      Launch](http://www.hl7.org/fhir/smart-app-launch/#ehr-launch-sequence)
-      Sequence, does not work in the case where the client sends an invalid FHIR
-      server as the `launch` parameter during launch. This must fail to ensure
-      that a genuine bearer token is not leaked to a counterfit resource server.
-
-      This test is not included as part of a regular SMART Launch Sequence
-      because it requires the browser of the user to be redirected to the
-      authorization service, and there is no expectation that the authorization
-      service redirects the user back to Inferno with an error message. The only
-      requirement is that Inferno is not granted a code to exchange for a valid
-      access token. Since this is a special case, it is tested independently in
-      a separate sequence.
-    )
-    id :g10_smart_invalid_launch_param
-    run_as_group
-
-    config(
-      inputs: {
-        client_id: {
-          name: :ehr_client_id,
-          title: 'EHR Client ID',
-          description: 'Client ID provided during registration of Inferno as an EHR launch application'
-        },
-        requested_scopes: {
-          name: :ehr_requested_scopes,
-          title: 'EHR Launch Scope',
-          description: 'OAuth 2.0 scope provided by system to enable all required functionality',
-          type: 'textarea',
-          default: %(
-            launch openid fhirUser offline_access user/Medication.read
-            user/AllergyIntolerance.read user/CarePlan.read user/CareTeam.read
-            user/Condition.read user/Device.read user/DiagnosticReport.read
-            user/DocumentReference.read user/Encounter.read user/Goal.read
-            user/Immunization.read user/Location.read
-            user/MedicationRequest.read user/Observation.read
-            user/Organization.read user/Patient.read user/Practitioner.read
-            user/Procedure.read user/Provenance.read user/PractitionerRole.read
-          ).gsub(/\s{2,}/, ' ').strip
-        },
-        url: {
-          title: 'EHR Launch FHIR Endpoint',
-          description: 'URL of the FHIR endpoint used by EHR launched applications'
-        },
-        smart_authorization_url: {
-          title: 'OAuth 2.0 Authorize Endpoint',
-          description: 'OAuth 2.0 Authorize Endpoint provided during an EHR launch'
-        }
-      },
-      outputs: {
-        state: { name: :invalid_launch_state }
-      },
-      requests: {
-        redirect: { name: :invalid_launch_redirect }
-      }
-    )
-
-    input_order :url,
-                :ehr_client_id,
-                :ehr_client_secret,
-                :ehr_requested_scopes,
-                :use_pkce,
-                :pkce_code_challenge_method,
-                :smart_authorization_url
-
-    test from: :smart_app_launch
-    test from: :smart_launch_received
-    test from: :smart_app_redirect do
-      input :client_secret,
-            name: :ehr_client_secret,
-            title: 'EHR Client Secret',
-            description: 'Client Secret provided during registration of Inferno as an EHR launch application'
-
-      config(
-        options: { launch: 'INVALID_LAUNCH_PARAM' }
-      )
-
-      def wait_message(auth_url)
-        %(
-          Inferno will redirect you to an external website for authorization.
-          **It is expected this will fail**. If the server does not return to
-          Inferno automatically, but does provide an error message, you may
-          return to Inferno and confirm that an error was presented in this
-          window.
-
-          * [Perform Invalid Launch](#{auth_url})
-          * [Attest launch
-            failed](#{Inferno::Application['base_url']}/custom/smart/redirect?state=#{state}&confirm_fail=true)
-        )
-      end
-    end
-
-    test do
-      title 'Inferno client app does not receive code parameter redirect URI'
-      description %(
-        Inferno redirected the user to the authorization service with an invalid
-        launch parameter. Inferno expects that the authorization request will
-        not succeed. This can either be from the server explicitely pass an
-        error, or stopping and the tester returns to Inferno to confirm that the
-        server presented them a failure.
-      )
-      uses_request :redirect
-
-      run do
-        params = request.query_parameters
-
-        assert params['code'].blank?,
-               'Authorization has incorrectly succeeded because access code provided to Inferno.'
-
-        pass_message =
-          if params['error'].present?
-            'Server redirected the user back to the app with an error.'
-          elsif params['confirm_fail']
-            'Tester attested that the authorization service did not succeed due to invalid AUD parameter.'
-          else
-            'Server redirected the user back to the app without an access code.'
-          end
-
-        pass pass_message
-      end
-    end
-  end
-end