onc_certification_g10_test_kit 5.1.0 → 5.2.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/onc_certification_g10_test_kit/bulk_export_validation_tester.rb +1 -1
- data/lib/onc_certification_g10_test_kit/incorrectly_permitted_tls_versions_messages_setup_test.rb +2 -1
- data/lib/onc_certification_g10_test_kit/smart_invalid_token_group.rb +6 -2
- data/lib/onc_certification_g10_test_kit/smart_invalid_token_group_stu2.rb +6 -3
- data/lib/onc_certification_g10_test_kit/token_revocation_group.rb +11 -6
- data/lib/onc_certification_g10_test_kit/version.rb +1 -1
- data/lib/onc_certification_g10_test_kit/visual_inspection_and_attestations_group.rb +1 -0
- metadata +6 -6
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 01ec685fbb0844163dcd6dc51e13e6d9e0fc479314e5bbe42d63a2ac532fc8d5
|
4
|
+
data.tar.gz: c05c24e084ee322c5c0cd3b7027850392176d3c3aa660a8ed197e51f82c37ee5
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 9c66f39b856ec474a72841e0671d28f7648ce08bfffd79cf20dd3b7ad5c6b4f175395443a9f855b3c1eef78c12d9fd060c7fbe5b9be5c65b93c4a1c54c9355e7
|
7
|
+
data.tar.gz: b8835d04b51e3e93bf405261dda80aea3cda0dce67f681bdf539019be6a713bacb6382b6dfbc15dc5ba647ba469a2677bd3acaf09928a35ad33f9a956ccaeef9
|
@@ -92,7 +92,7 @@ module ONCCertificationG10TestKit
|
|
92
92
|
end
|
93
93
|
|
94
94
|
def determine_profile(resource)
|
95
|
-
return if resource.resourceType == 'Device' && !predefined_device_type?(resource)
|
95
|
+
return [] if resource.resourceType == 'Device' && !predefined_device_type?(resource)
|
96
96
|
|
97
97
|
select_profile(resource)
|
98
98
|
end
|
data/lib/onc_certification_g10_test_kit/incorrectly_permitted_tls_versions_messages_setup_test.rb
CHANGED
@@ -3,7 +3,8 @@ module ONCCertificationG10TestKit
|
|
3
3
|
id :g10_incorrectly_permitted_tls_versions_messages_setup
|
4
4
|
title 'Handle TLS Warning Messages'
|
5
5
|
|
6
|
-
input :incorrectly_permitted_tls_versions_messages
|
6
|
+
input :incorrectly_permitted_tls_versions_messages,
|
7
|
+
optional: true
|
7
8
|
output :unique_incorrectly_permitted_tls_versions_messages,
|
8
9
|
:tls_documentation_required
|
9
10
|
|
@@ -142,7 +142,9 @@ module ONCCertificationG10TestKit
|
|
142
142
|
)
|
143
143
|
uses_request :redirect
|
144
144
|
|
145
|
-
input :use_pkce, :
|
145
|
+
input :use_pkce, :client_id, :client_secret, :smart_token_url
|
146
|
+
input :pkce_code_verifier,
|
147
|
+
optional: true
|
146
148
|
|
147
149
|
run do
|
148
150
|
skip_if request.query_parameters['error'].present?, 'Error during authorization request'
|
@@ -177,7 +179,9 @@ module ONCCertificationG10TestKit
|
|
177
179
|
)
|
178
180
|
uses_request :redirect
|
179
181
|
|
180
|
-
input :use_pkce, :
|
182
|
+
input :use_pkce, :code, :smart_token_url, :client_secret
|
183
|
+
input :pkce_code_verifier,
|
184
|
+
optional: true
|
181
185
|
|
182
186
|
run do
|
183
187
|
skip_if request.query_parameters['error'].present?, 'Error during authorization request'
|
@@ -148,8 +148,9 @@ module ONCCertificationG10TestKit
|
|
148
148
|
)
|
149
149
|
uses_request :redirect
|
150
150
|
|
151
|
-
input :use_pkce, :
|
152
|
-
|
151
|
+
input :use_pkce, :client_id, :client_secret, :smart_token_url
|
152
|
+
input :pkce_code_verifier,
|
153
|
+
optional: true
|
153
154
|
run do
|
154
155
|
skip_if request.query_parameters['error'].present?, 'Error during authorization request'
|
155
156
|
|
@@ -183,7 +184,9 @@ module ONCCertificationG10TestKit
|
|
183
184
|
)
|
184
185
|
uses_request :redirect
|
185
186
|
|
186
|
-
input :use_pkce, :
|
187
|
+
input :use_pkce, :code, :smart_token_url, :client_secret
|
188
|
+
input :pkce_code_verifier,
|
189
|
+
optional: true
|
187
190
|
|
188
191
|
run do
|
189
192
|
skip_if request.query_parameters['error'].present?, 'Error during authorization request'
|
@@ -1,7 +1,11 @@
|
|
1
1
|
module ONCCertificationG10TestKit
|
2
2
|
class TokenRevocationGroup < Inferno::TestGroup
|
3
3
|
title 'Token Revocation'
|
4
|
-
description
|
4
|
+
description %(
|
5
|
+
Demonstrate the Health IT module is capable of revoking access granted to
|
6
|
+
an application at the direction of a patient. Access to the application
|
7
|
+
must be revoked within one hour of the patient's request.
|
8
|
+
)
|
5
9
|
id :g10_token_revocation
|
6
10
|
run_as_group
|
7
11
|
|
@@ -16,14 +20,15 @@ module ONCCertificationG10TestKit
|
|
16
20
|
:standalone_client_secret
|
17
21
|
|
18
22
|
test do
|
19
|
-
title 'Health IT developer demonstrated the ability of the Health IT Module to revoke tokens.'
|
23
|
+
title 'Health IT developer demonstrated the ability of the Health IT Module to revoke tokens within one hour of a patient\'s request.' # rubocop:disable Layout/LineLength
|
20
24
|
description %(
|
21
25
|
Health IT developer demonstrated the ability of the Health IT Module /
|
22
|
-
authorization server to revoke tokens
|
26
|
+
authorization server to revoke tokens at a patient's direction within one
|
27
|
+
hour of the request.
|
23
28
|
)
|
24
29
|
|
25
30
|
input :token_revocation_attestation,
|
26
|
-
title: '
|
31
|
+
title: 'The Health IT developer demonstrated a patient\'s request for revoking the tokens provided during the patient standalone launch within the last hour', # rubocop:disable Layout/LineLength
|
27
32
|
type: 'radio',
|
28
33
|
default: 'false',
|
29
34
|
options: {
|
@@ -45,7 +50,7 @@ module ONCCertificationG10TestKit
|
|
45
50
|
|
46
51
|
run do
|
47
52
|
assert token_revocation_attestation == 'true',
|
48
|
-
'Health IT Module did not demonstrate the
|
53
|
+
'Health IT Module did not demonstrate a patient\'s request for revoking the tokens within the last hour.'
|
49
54
|
pass token_revocation_notes if token_revocation_notes.present?
|
50
55
|
end
|
51
56
|
end
|
@@ -90,7 +95,7 @@ module ONCCertificationG10TestKit
|
|
90
95
|
test do
|
91
96
|
title 'Token refresh fails after token revocation.'
|
92
97
|
description %(
|
93
|
-
This test checks that refreshing token fails after token
|
98
|
+
This test checks that refreshing token fails after token revocation.
|
94
99
|
)
|
95
100
|
|
96
101
|
input :smart_token_url,
|
@@ -506,6 +506,7 @@ module ONCCertificationG10TestKit
|
|
506
506
|
title: 'Health IT developers must document how the Health IT Module enforces TLs version 1.2 or above.',
|
507
507
|
type: 'radio',
|
508
508
|
default: 'false',
|
509
|
+
optional: true,
|
509
510
|
locked: true,
|
510
511
|
options: {
|
511
512
|
list_options: [
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: onc_certification_g10_test_kit
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 5.
|
4
|
+
version: 5.2.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Stephen MacVicar
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2024-
|
11
|
+
date: 2024-03-11 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: bloomer
|
@@ -128,28 +128,28 @@ dependencies:
|
|
128
128
|
requirements:
|
129
129
|
- - '='
|
130
130
|
- !ruby/object:Gem::Version
|
131
|
-
version: 0.2.
|
131
|
+
version: 0.2.1
|
132
132
|
type: :runtime
|
133
133
|
prerelease: false
|
134
134
|
version_requirements: !ruby/object:Gem::Requirement
|
135
135
|
requirements:
|
136
136
|
- - '='
|
137
137
|
- !ruby/object:Gem::Version
|
138
|
-
version: 0.2.
|
138
|
+
version: 0.2.1
|
139
139
|
- !ruby/object:Gem::Dependency
|
140
140
|
name: us_core_test_kit
|
141
141
|
requirement: !ruby/object:Gem::Requirement
|
142
142
|
requirements:
|
143
143
|
- - '='
|
144
144
|
- !ruby/object:Gem::Version
|
145
|
-
version: 0.6.
|
145
|
+
version: 0.6.4
|
146
146
|
type: :runtime
|
147
147
|
prerelease: false
|
148
148
|
version_requirements: !ruby/object:Gem::Requirement
|
149
149
|
requirements:
|
150
150
|
- - '='
|
151
151
|
- !ruby/object:Gem::Version
|
152
|
-
version: 0.6.
|
152
|
+
version: 0.6.4
|
153
153
|
- !ruby/object:Gem::Dependency
|
154
154
|
name: database_cleaner-sequel
|
155
155
|
requirement: !ruby/object:Gem::Requirement
|