smart_app_launch_test_kit 0.6.1 → 0.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2608337f4d0d2651ba2395ecda2f89263ebe14d039f3d730ae2f82df3fe49855
-  data.tar.gz: b7a480f55c94dec25865151faefd76045096d21b5333a9c5bf56cf73eb7310bd
+  metadata.gz: c85e63b5e23ff0a1021d234660b3878bb14887b5ba3b5fce05ee40f3071bcd28
+  data.tar.gz: 962ce6ee409f408ad79093bf424654c0532d741c03666c7902dfb6e5dea93eb8
 SHA512:
-  metadata.gz: 853bd240f1fccdfd72ab79ff89b420b9b1edebd1d1fbd01e9dd3f1e206a29fae3f84f79371e0c7406dc9f3f5bde6ddf7ef51167cf2537f97b56bc36d245d7ef8
-  data.tar.gz: 5cf5840b0061bb6605e68e5d2ce4bf8e07c3039b4e53d8678b2d5cad19e27c352c751eadc8325dfd6ba3df02ddc28f9a7a8e5664eda85aa6cb77c93d1485b52a
+  metadata.gz: '0491bd7e512cf0c81953e6f3a536bb6f2a0b9a955e7c451b8d3efe85a3d90b1326b54d5846ef3eaa0db5115c89b47326183a56081b4087c739c9ecb10bc4e291'
+  data.tar.gz: 10c44261afccf1796a06e3add398dbfa3fcca441364bb7f193afebbe60f120eb6c2c44b3dcd146fe4d0c0ba28a2d5c00a822f2999fb25abd4c8eb2844a08e34a

data/config/presets/SMART_RunClientAgainstServer.json.erb

@@ -3,29 +3,77 @@
   "id": "smart_run_client_against_server_v2_2",
   "test_suite_id": "smart_client_stu2_2",
   "inputs": [
+    {
+      "name": "client_id",
+      "description": "If a particular client id is desired, put it here. Otherwise a default of the Inferno session id will be used.",
+      "optional": true,
+      "title": "Client Id",
+      "type": "text",
+      "value": "smart_client_test_demo"
+    },
+    {
+      "name": "smart_launch_urls",
+      "description": "A comma-separated list of zero or more URLs that Inferno can use to launch the app. Not needed if the app does not support EHR launch.",
+      "optional": true,
+      "title": "SMART App Launch URL(s)",
+      "type": "textarea",
+      "value": "http://localhost:4567/custom/smart_stu2_2/launch"
+    },
+    {
+      "name": "smart_redirect_uris",
+      "description": "A comma-separated list of one or more URIs that the app will sepcify as the target of the redirect for Inferno to use when providing the authorization code. These tests can be run without this input, but will not pass without it.",
+      "optional": true,
+      "title": "SMART App Launch Redirect URI(s)",
+      "type": "textarea",
+      "value": "http://localhost:4567/custom/smart_stu2_2/redirect"
+    },
     {
       "name": "smart_jwk_set",
-      "description": "The SMART client's JSON Web Key Set. May be provided as either a publicly accessible url containing the JWKS, or the raw JWKS.",
+      "description": "For confidential asymmetric clients, provide the JSON Web Key Set that will be used to sign tokens including the key(s) Inferno will need to verify signatures on token requests made by the client. May be provided as either a publicly accessible url containing the JWKS, or the raw JWKS JSON. Leave blank for public and confidential symmetric clients.",
       "optional": true,
-      "title": "SMART JSON Web Key Set (JWKS)",
+      "title": "SMART Confidential Asymmetric JSON Web Key Set (JWKS)",
       "type": "textarea",
-      "value": "<%= Inferno::Application['base_url'] %>/custom/smart_stu2_2/.well-known/jwks.json"
+      "value": "http://localhost:4567/custom/smart_stu2_2/.well-known/jwks.json"
     },
     {
-      "name": "client_id",
-      "description": "If a particular client id is desired, put it here. Otherwise a default of the Inferno session id will be used.",
+      "name": "smart_client_secret",
+      "description": "For confidential symmetric clients, provide the client secret that will be provided during token requests to authenticate the client to Inferno. Leave blank for public and confidential asymmetric clients.",
       "optional": true,
-      "title": "Client Id",
+      "title": "SMART Confidential Symmetric Client Secret",
       "type": "text",
-      "value": "smart_client_test_demo"
+      "value": "SAMPLE_SECRET"
+    },
+    {
+      "name": "launch_context",
+      "description": "Launch context details to be included in access token responses, specified as a JSON array. These contents will be merged into Inferno's token responses.",
+      "optional": true,
+      "title": "Launch Context",
+      "type": "textarea",
+      "value": "{ \"patient\": \"example\" }"
+    },
+    {
+      "name": "fhir_user_relative_reference",
+      "description": "A FHIR relative reference (<resource type>/<id>) for the FHIR user record to return when the openid and fhirUser scopes are requested. Include this resource in the **Available Resources** input so that it can be accessed.",
+      "optional": true,
+      "title": "FHIR User Relative Reference",
+      "type": "text",
+      "value": "Patient/example"
+    },
+    {
+      "name": "fhir_read_resources_bundle",
+      "description": "Resources to make available in Inferno's simulated FHIR server provided as a FHIR bundle. Each entry must contain a resource with the id element populated. Each instance present will be available for retrieval from Inferno at the endpoint: <fhir-base>/<resource type>/<instance id>. These are only available through the read interaction.",
+      "optional": true,
+      "title": "Available Resources",
+      "type": "textarea",
+      "value": "{\n  \"resourceType\": \"Bundle\",\n  \"entry\": [\n    {\n      \"resource\": {\n        \"resourceType\": \"Patient\",\n        \"id\": \"example\",\n        \"name\": [\n          {\n            \"family\": \"Chalmers\",\n            \"given\": [\n              \"Peter\",\n              \"James\"\n            ]\n          }\n        ],\n        \"gender\": \"male\",\n        \"birthDate\": \"1974-12-25\",\n        \"address\": [\n          {\n            \"line\": [\n              \"534 Erewhon St\"\n            ],\n            \"city\": \"Ann Arbor\",\n            \"state\": \"MI\",\n            \"postalCode\": \"48108\"\n          }\n        ]\n      }\n    }\n  ]\n}"
     },
     {
       "name": "echoed_fhir_response",
-      "description": "JSON representation of a FHIR resource for Inferno to echo when a request is made to the simulated FHIR server. The provided content will be echoed back exactly and no check will be made that it is appropriate for the request made. If nothing is provided, an OperationOutcome will be returned.",
+      "description": "JSON representation of a default FHIR resource for Inferno to echo when a request is made to the simulated FHIR server. Reads targetting resources in the  **Available Resources** input will return that resource instead of this. Otherwise, the content here will be echoed back exactly and no check will be made that it is appropriate for the request made. If nothing is provided, an OperationOutcome will be returned.",
       "optional": true,
-      "title": "FHIR Response to Echo",
+      "title": "Default FHIR Response",
       "type": "textarea",
-      "value": "{\n  \"resourceType\": \"Patient\",\n  \"id\": \"example\",\n  \"name\": [\n    {\n      \"family\": \"Chalmers\",\n      \"given\": [\n        \"Peter\",\n        \"James\"\n      ]\n    }\n  ],\n  \"gender\": \"male\",\n  \"birthDate\": \"1974-12-25\",\n  \"address\": [\n    {\n      \"line\": [\n        \"534 Erewhon St\"\n      ],\n      \"city\": \"Ann Arbor\",\n      \"state\": \"MI\",\n      \"postalCode\": \"48108\"\n    }\n  ]\n}"
+      "value": ""
     }
   ]
 }

data/config/presets/SMART_RunServerAgainstClient_ConfidentialAsymmetric.json.erb

@@ -0,0 +1,183 @@
+{
+  "title": "Demo: Run Against the SMART Client Suite (Confidential Asymmetric)",
+  "id": "smart_run_server_against_ca_client_v2_2",
+  "test_suite_id": "smart_stu2_2",
+  "inputs": [
+    {
+      "name": "url",
+      "description": "URL of the FHIR endpoint used by SMART applications",
+      "title": "FHIR Endpoint",
+      "type": "text",
+      "value": "<%= Inferno::Application['base_url'] %>/custom/smart_client_stu2_2/fhir"
+    },
+    {
+      "name": "standalone_smart_auth_info",
+      "options": {
+        "mode": "auth",
+        "components": [
+          {
+            "name": "requested_scopes",
+            "default": "launch/patient openid fhirUser offline_access patient/*.rs"
+          },
+          {
+            "name": "pkce_support",
+            "default": "enabled",
+            "locked": true
+          },
+          {
+            "name": "pkce_code_challenge_method",
+            "default": "S256",
+            "locked": true
+          },
+          {
+            "name": "auth_type",
+            "options": {
+              "list_options": [
+                {
+                  "label": "Public",
+                  "value": "public"
+                },
+                {
+                  "label": "Confidential Symmetric",
+                  "value": "symmetric"
+                },
+                {
+                  "label": "Confidential Asymmetric",
+                  "value": "asymmetric"
+                }
+              ]
+            }
+          },
+          {
+            "name": "use_discovery",
+            "locked": true
+          },
+          {
+            "name": "auth_request_method",
+            "default": "GET",
+            "locked": true
+          }
+        ]
+      },
+      "title": "Standalone Launch Credentials",
+      "type": "auth_info",
+      "value": {
+        "pkce_support": "enabled",
+        "pkce_code_challenge_method": "S256",
+        "auth_request_method": "GET",
+        "auth_type": "asymmetric",
+        "use_discovery": "true",
+        "requested_scopes": "launch/patient openid fhirUser offline_access patient/*.rs",
+        "client_id": "smart_client_test_demo",
+        "encryption_algorithm": "ES384"
+      },
+      "default": {}
+    },
+    {
+      "name": "ehr_smart_auth_info",
+      "options": {
+        "mode": "auth",
+        "components": [
+          {
+            "name": "requested_scopes",
+            "default": "launch openid fhirUser offline_access patient/*.rs"
+          },
+          {
+            "name": "pkce_support",
+            "default": "enabled",
+            "locked": true
+          },
+          {
+            "name": "pkce_code_challenge_method",
+            "default": "S256",
+            "locked": true
+          },
+          {
+            "name": "auth_type",
+            "options": {
+              "list_options": [
+                {
+                  "label": "Public",
+                  "value": "public"
+                },
+                {
+                  "label": "Confidential Symmetric",
+                  "value": "symmetric"
+                },
+                {
+                  "label": "Confidential Asymmetric",
+                  "value": "asymmetric"
+                }
+              ]
+            }
+          },
+          {
+            "name": "use_discovery",
+            "locked": true
+          },
+          {
+            "name": "auth_request_method",
+            "default": "GET",
+            "locked": true
+          }
+        ]
+      },
+      "title": "EHR Launch Credentials",
+      "type": "auth_info",
+      "value": {
+        "pkce_support": "enabled",
+        "pkce_code_challenge_method": "S256",
+        "auth_request_method": "GET",
+        "encryption_algorithm": "ES384",
+        "auth_type": "asymmetric",
+        "use_discovery": "true",
+        "requested_scopes": "launch openid fhirUser offline_access patient/*.rs",
+        "client_id": "smart_client_test_demo"
+      },
+      "default": {}
+    },
+    {
+      "name": "backend_services_smart_auth_info",
+      "options": {
+        "mode": "auth",
+        "components": [
+          {
+            "name": "auth_type",
+            "default": "backend_services",
+            "locked": "true"
+          },
+          {
+            "name": "use_discovery",
+            "locked": true
+          }
+        ]
+      },
+      "title": "Backend Services Credentials",
+      "type": "auth_info",
+      "value": {
+        "encryption_algorithm": "ES384",
+        "auth_type": "backend_services",
+        "use_discovery": "true",
+        "requested_scopes": "system/*.rs",
+        "client_id": "smart_client_test_demo"
+      },
+      "default": {}
+    },
+    {
+      "name": "custom_authorization_header",
+      "description": "Add custom headers for the introspection request by adding each header's name and value with a new line between each header. Ex:   <Header 1 Name>: <Value 1>",
+      "optional": true,
+      "title": "Custom HTTP Headers for Introspection Request",
+      "type": "textarea",
+      "value": ""
+    },
+    {
+      "name": "optional_introspection_request_params",
+      "description": "Any additional parameters to append to the request body, separated by &. Example: 'param1=abc&param2=def'",
+      "optional": true,
+      "title": "Additional Introspection Request Parameters",
+      "type": "textarea",
+      "value": ""
+    }
+  ]
+}

data/config/presets/SMART_RunServerAgainstClient_ConfidentialSymmetric.json.erb

@@ -0,0 +1,157 @@
+{
+  "title": "Demo: Run Against the SMART Client Suite (Confidential Symmetric)",
+  "id": "smart_run_server_against_cs_client_v2_2",
+  "test_suite_id": "smart_stu2_2",
+  "inputs": [
+    {
+      "name": "url",
+      "description": "URL of the FHIR endpoint used by SMART applications",
+      "title": "FHIR Endpoint",
+      "type": "text",
+      "value": "<%= Inferno::Application['base_url'] %>/custom/smart_client_stu2_2/fhir"
+    },
+    {
+      "name": "standalone_smart_auth_info",
+      "options": {
+        "mode": "auth",
+        "components": [
+          {
+            "name": "requested_scopes",
+            "default": "launch/patient openid fhirUser offline_access patient/*.rs"
+          },
+          {
+            "name": "pkce_support",
+            "default": "enabled",
+            "locked": true
+          },
+          {
+            "name": "pkce_code_challenge_method",
+            "default": "S256",
+            "locked": true
+          },
+          {
+            "name": "auth_type",
+            "options": {
+              "list_options": [
+                {
+                  "label": "Public",
+                  "value": "public"
+                },
+                {
+                  "label": "Confidential Symmetric",
+                  "value": "symmetric"
+                },
+                {
+                  "label": "Confidential Asymmetric",
+                  "value": "asymmetric"
+                }
+              ]
+            }
+          },
+          {
+            "name": "use_discovery",
+            "locked": true
+          },
+          {
+            "name": "auth_request_method",
+            "default": "GET",
+            "locked": true
+          }
+        ]
+      },
+      "title": "Standalone Launch Credentials",
+      "type": "auth_info",
+      "value": {
+        "pkce_support": "enabled",
+        "pkce_code_challenge_method": "S256",
+        "auth_request_method": "GET",
+        "auth_type": "symmetric",
+        "use_discovery": "true",
+        "requested_scopes": "launch/patient openid fhirUser offline_access patient/*.rs",
+        "client_id": "smart_client_test_demo",
+        "client_secret": "SAMPLE_SECRET"
+      },
+      "default": {}
+    },
+    {
+      "name": "ehr_smart_auth_info",
+      "options": {
+        "mode": "auth",
+        "components": [
+          {
+            "name": "requested_scopes",
+            "default": "launch openid fhirUser offline_access patient/*.rs"
+          },
+          {
+            "name": "pkce_support",
+            "default": "enabled",
+            "locked": true
+          },
+          {
+            "name": "pkce_code_challenge_method",
+            "default": "S256",
+            "locked": true
+          },
+          {
+            "name": "auth_type",
+            "options": {
+              "list_options": [
+                {
+                  "label": "Public",
+                  "value": "public"
+                },
+                {
+                  "label": "Confidential Symmetric",
+                  "value": "symmetric"
+                },
+                {
+                  "label": "Confidential Asymmetric",
+                  "value": "asymmetric"
+                }
+              ]
+            }
+          },
+          {
+            "name": "use_discovery",
+            "locked": true
+          },
+          {
+            "name": "auth_request_method",
+            "default": "GET",
+            "locked": true
+          }
+        ]
+      },
+      "title": "EHR Launch Credentials",
+      "type": "auth_info",
+      "value": {
+        "pkce_support": "enabled",
+        "pkce_code_challenge_method": "S256",
+        "auth_request_method": "GET",
+        "encryption_algorithm": "ES384",
+        "auth_type": "symmetric",
+        "use_discovery": "true",
+        "requested_scopes": "launch openid fhirUser offline_access patient/*.rs",
+        "client_id": "smart_client_test_demo",
+        "client_secret": "SAMPLE_SECRET"
+      },
+      "default": {}
+    },
+    {
+      "name": "custom_authorization_header",
+      "description": "Add custom headers for the introspection request by adding each header's name and value with a new line between each header. Ex:   <Header 1 Name>: <Value 1>",
+      "optional": true,
+      "title": "Custom HTTP Headers for Introspection Request",
+      "type": "textarea",
+      "value": ""
+    },
+    {
+      "name": "optional_introspection_request_params",
+      "description": "Any additional parameters to append to the request body, separated by &. Example: 'param1=abc&param2=def'",
+      "optional": true,
+      "title": "Additional Introspection Request Parameters",
+      "type": "textarea",
+      "value": ""
+    }
+]
+}

data/config/presets/SMART_RunServerAgainstClient_Public.json.erb

@@ -0,0 +1,155 @@
+{
+  "title": "Demo: Run Against the SMART Client Suite (Public)",
+  "id": "smart_run_server_against_p_client_v2_2",
+  "test_suite_id": "smart_stu2_2",
+  "inputs": [
+    {
+      "name": "url",
+      "description": "URL of the FHIR endpoint used by SMART applications",
+      "title": "FHIR Endpoint",
+      "type": "text",
+      "value": "<%= Inferno::Application['base_url'] %>/custom/smart_client_stu2_2/fhir"
+    },
+    {
+      "name": "standalone_smart_auth_info",
+      "options": {
+        "mode": "auth",
+        "components": [
+          {
+            "name": "requested_scopes",
+            "default": "launch/patient openid fhirUser offline_access patient/*.rs"
+          },
+          {
+            "name": "pkce_support",
+            "default": "enabled",
+            "locked": true
+          },
+          {
+            "name": "pkce_code_challenge_method",
+            "default": "S256",
+            "locked": true
+          },
+          {
+            "name": "auth_type",
+            "options": {
+              "list_options": [
+                {
+                  "label": "Public",
+                  "value": "public"
+                },
+                {
+                  "label": "Confidential Symmetric",
+                  "value": "symmetric"
+                },
+                {
+                  "label": "Confidential Asymmetric",
+                  "value": "asymmetric"
+                }
+              ]
+            }
+          },
+          {
+            "name": "use_discovery",
+            "locked": true
+          },
+          {
+            "name": "auth_request_method",
+            "default": "GET",
+            "locked": true
+          }
+        ]
+      },
+      "title": "Standalone Launch Credentials",
+      "type": "auth_info",
+      "value": {
+        "pkce_support": "enabled",
+        "pkce_code_challenge_method": "S256",
+        "auth_request_method": "GET",
+        "auth_type": "public",
+        "use_discovery": "true",
+        "requested_scopes": "launch/patient openid fhirUser offline_access patient/*.rs",
+        "client_id": "smart_client_test_demo"
+      },
+      "default": {}
+    },
+    {
+      "name": "ehr_smart_auth_info",
+      "options": {
+        "mode": "auth",
+        "components": [
+          {
+            "name": "requested_scopes",
+            "default": "launch openid fhirUser offline_access patient/*.rs"
+          },
+          {
+            "name": "pkce_support",
+            "default": "enabled",
+            "locked": true
+          },
+          {
+            "name": "pkce_code_challenge_method",
+            "default": "S256",
+            "locked": true
+          },
+          {
+            "name": "auth_type",
+            "options": {
+              "list_options": [
+                {
+                  "label": "Public",
+                  "value": "public"
+                },
+                {
+                  "label": "Confidential Symmetric",
+                  "value": "symmetric"
+                },
+                {
+                  "label": "Confidential Asymmetric",
+                  "value": "asymmetric"
+                }
+              ]
+            }
+          },
+          {
+            "name": "use_discovery",
+            "locked": true
+          },
+          {
+            "name": "auth_request_method",
+            "default": "GET",
+            "locked": true
+          }
+        ]
+      },
+      "title": "EHR Launch Credentials",
+      "type": "auth_info",
+      "value": {
+        "pkce_support": "enabled",
+        "pkce_code_challenge_method": "S256",
+        "auth_request_method": "GET",
+        "encryption_algorithm": "ES384",
+        "auth_type": "public",
+        "use_discovery": "true",
+        "requested_scopes": "launch openid fhirUser offline_access patient/*.rs",
+        "client_id": "smart_client_test_demo"
+      },
+      "default": {}
+    },
+    {
+      "name": "custom_authorization_header",
+      "description": "Add custom headers for the introspection request by adding each header's name and value with a new line between each header. Ex:   <Header 1 Name>: <Value 1>",
+      "optional": true,
+      "title": "Custom HTTP Headers for Introspection Request",
+      "type": "textarea",
+      "value": ""
+    },
+    {
+      "name": "optional_introspection_request_params",
+      "description": "Any additional parameters to append to the request body, separated by &. Example: 'param1=abc&param2=def'",
+      "optional": true,
+      "title": "Additional Introspection Request Parameters",
+      "type": "textarea",
+      "value": ""
+    }
+  ]
+}

data/lib/smart_app_launch/backend_services_invalid_client_assertion_test.rb

@@ -44,7 +44,7 @@ module SMARTAppLaunch
 
       post(smart_auth_info.token_url, **post_request_content)
 
-      assert_response_status(400)
+      assert_response_status([400, 401])
     end
   end
 end

data/lib/smart_app_launch/backend_services_invalid_jwt_test.rb

@@ -55,7 +55,7 @@ module SMARTAppLaunch
 
       post(smart_auth_info.token_url, **post_request_content)
 
-      assert_response_status(400)
+      assert_response_status([400, 401])
     end
   end
 end