smart_app_launch_test_kit 0.6.3 → 0.6.4

data/lib/smart_app_launch/smart_access_brands_group.rb

@@ -24,6 +24,7 @@ module SMARTAppLaunch
       input left blank. This will cause these group of retrieval group of tests to skip, rather than pass completely,
       as being served at an stable location is considered a requirement of the spec.
     )
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@405'
 
     input_instructions <<~INSTRUCTIONS
       For systems that make their User Access Brand Bundle available at a public endpoint, please input

data/lib/smart_app_launch/smart_access_brands_retrieve_bundle_test.rb

@@ -5,7 +5,10 @@ module SMARTAppLaunch
     description %(
         Verify that the publisher's User Access Brands Bundle can be publicly
         accessed at the supplied URL location.
-      )
+    )
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@396',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@400',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@423'
 
     makes_request :bundle_request
 

data/lib/smart_app_launch/smart_access_brands_validate_brands_test.rb

@@ -12,6 +12,8 @@ module SMARTAppLaunch
 
       This test does not currently validate availability or format of Brand or Portal logos.
     )
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@396',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@402'
 
     input :user_access_brands_bundle,
           optional: true

data/lib/smart_app_launch/smart_access_brands_validate_bundle_test.rb

@@ -7,7 +7,11 @@ module SMARTAppLaunch
         [User Access Brand Bundle Profile](https://hl7.org/fhir/smart-app-launch/STU2.2/StructureDefinition-user-access-brands-bundle.html).
 
         This test also ensures the Bundle is the 'collection' type and that it is not empty.
-      )
+    )
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@396',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@398',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@417',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@418'
 
     input :user_access_brands_bundle,
           optional: true

data/lib/smart_app_launch/smart_access_brands_validate_endpoint_urls_test.rb

@@ -6,6 +6,7 @@ module SMARTAppLaunch
       Verify that User Access Brands Bundle contains Endpoints that contain URLs that are both valid
       and available.
     )
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@400'
 
     input :user_access_brands_bundle,
           optional: true

data/lib/smart_app_launch/smart_access_brands_validate_endpoints_test.rb

@@ -8,7 +8,9 @@ module SMARTAppLaunch
 
       Along with validating the Endpoint resources, this test also ensures that each endpoint contains a primary brand
       by checking if it is referenced by at least 1 Organization resource.
-      )
+    )
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@396',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@402'
 
     def find_referenced_org(bundle_resource, endpoint_id)
       bundle_resource

data/lib/smart_app_launch/smart_stu2_2_suite.rb

@@ -38,6 +38,14 @@ module SMARTAppLaunch
       post_authorization_uri: "#{Inferno::Application['base_url']}/custom/smart_stu2_2/post_auth"
     }
 
+    requirement_sets(
+      {
+        identifier: 'hl7.fhir.uv.smart-app-launch_2.2.0',
+        title: 'SMART App Launch',
+        actor: 'Server'
+      }
+    )
+
     description <<~DESCRIPTION
       The SMART App Launch Test Suite verifies that systems correctly implement
       the [SMART App Launch IG](http://hl7.org/fhir/smart-app-launch/STU2.2/)

data/lib/smart_app_launch/standalone_launch_group.rb

@@ -63,6 +63,10 @@ module SMARTAppLaunch
                 name: :auth_request_method,
                 default: 'GET',
                 locked: true
+              },
+              {
+                name: :pkce_support,
+                default: 'disabled'
               }
             ]
           }

data/lib/smart_app_launch/token_introspection_group_stu2_2.rb

@@ -39,6 +39,7 @@ module SMARTAppLaunch
 
       See the individual test groups for more details and guidance.
     )
+
     group from: :smart_token_introspection_access_token_group_stu2_2
 
     access_token_group_index = children.find_index { |child| child.id.to_s.end_with? 'access_token_group' }

data/lib/smart_app_launch/token_introspection_response_group.rb

@@ -28,7 +28,6 @@ module SMARTAppLaunch
 
     test do
       title 'Token introspection response for an active token contains required fields'
-
       description %(
         This test will check whether the metadata in the token introspection response is correct for an active token and
         that the response data matches the data in the original access token and/or access token response from the
@@ -46,12 +45,20 @@ module SMARTAppLaunch
         launch context parameter(s)
           * Parameters checked for are `patient` and `encounter`
         * IF identity token was included as part of access token response, `iss` and `sub` claims are present in the
-        introspection response and match those of the orignal ID token
+        introspection response and match those of the original ID token
 
         Optional but Recommended:
         * IF identity token was included as part of access token response, `fhirUser` claim SHOULD be present in
         introspection response and should match the claim in the ID token
       )
+      verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@95',
+                            'hl7.fhir.uv.smart-app-launch_2.2.0@273',
+                            'hl7.fhir.uv.smart-app-launch_2.2.0@274',
+                            'hl7.fhir.uv.smart-app-launch_2.2.0@275',
+                            'hl7.fhir.uv.smart-app-launch_2.2.0@276',
+                            'hl7.fhir.uv.smart-app-launch_2.2.0@277',
+                            'hl7.fhir.uv.smart-app-launch_2.2.0@278',
+                            'hl7.fhir.uv.smart-app-launch_2.2.0@279'
 
       input :standalone_smart_auth_info, type: :auth_info, options: { mode: 'access' }
 

data/lib/smart_app_launch/token_refresh_body_test.rb

@@ -14,6 +14,12 @@ module SMARTAppLaunch
 
       Scopes returned must be a strict subset of the scopes granted in the original launch.
     )
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@110',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@111',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@112',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@113',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@114'
+
     input :received_scopes
     input :smart_auth_info, type: :auth_info, options: { mode: 'auth' }
     output :refresh_token, :access_token, :token_retrieval_time, :expires_in, :received_scopes, :smart_auth_info

data/lib/smart_app_launch/token_refresh_stu2_test.rb

@@ -14,8 +14,9 @@ module SMARTAppLaunch
       Launch Guide, the token refresh response should include the HTTP
       Cache-Control response header field with a value of no-store, as well as
       the Pragma response header field with a value of no-cache to be
-      consistent with the requirements of the inital access token exchange.
+      consistent with the requirements of the initial access token exchange.
     )
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@109'
 
     input :smart_auth_info, type: :auth_info, options: { mode: 'auth' }
 

data/lib/smart_app_launch/token_refresh_test.rb

@@ -14,7 +14,7 @@ module SMARTAppLaunch
       Launch Guide, the token refresh response should include the HTTP
       Cache-Control response header field with a value of no-store, as well as
       the Pragma response header field with a value of no-cache to be
-      consistent with the requirements of the inital access token exchange.
+      consistent with the requirements of the initial access token exchange.
     )
     input :received_scopes
     input :smart_auth_info, type: :auth_info, options: { mode: 'auth' }

data/lib/smart_app_launch/token_response_body_test_stu2_2.rb

@@ -12,7 +12,15 @@ module SMARTAppLaunch
 
       The format of the optional `fhirContext` field is validated if present.
     )
+
     id :smart_token_response_body_stu2_2
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@73',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@74',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@75',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@78',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@84',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@172',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@178'
 
     input :smart_auth_info, type: :auth_info, options: { mode: 'auth' }
     output :id_token,

data/lib/smart_app_launch/token_response_headers_test.rb

@@ -7,6 +7,8 @@ module SMARTAppLaunch
       response header field with a value of no-cache.
     )
     id :smart_token_response_headers
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@86',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@87'
 
     uses_request :token
 

data/lib/smart_app_launch/version.rb

@@ -1,4 +1,4 @@
 module SMARTAppLaunch
-  VERSION = '0.6.3'.freeze
-  LAST_UPDATED = '2025-05-13'.freeze
+  VERSION = '0.6.4'.freeze
+  LAST_UPDATED = '2025-06-25'.freeze
 end

data/lib/smart_app_launch/well_known_capabilities_stu2_test.rb

@@ -10,7 +10,15 @@ module SMARTAppLaunch
       If the `sso-openid-connect` capability is supported, then `issuer` and `jwks_uri` must be
       present. If `sso-openid-connect` capability is not supported, then `issuer` must be omitted.
     )
- 
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@30',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@373',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@381',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@382',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@383',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@385',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@393',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@394'
+
     def required_capabilities
       {
         'authorization_endpoint' => String,

data/lib/smart_app_launch/well_known_endpoint_test.rb

@@ -10,6 +10,11 @@ module SMARTAppLaunch
       The authorization endpoints accepted by a FHIR resource server can
       be exposed as a Well-Known Uniform Resource Identifier
     )
+    verifies_requirements 'hl7.fhir.uv.smart-app-launch_2.2.0@30',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@372',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@374',
+                          'hl7.fhir.uv.smart-app-launch_2.2.0@377'
+
     input :url,
           title: 'FHIR Endpoint',
           description: 'URL of the FHIR endpoint used by SMART applications'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: smart_app_launch_test_kit
 version: !ruby/object:Gem::Version
-  version: 0.6.3
+  version: 0.6.4
 platform: ruby
 authors:
 - Stephen MacVicar
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-05-13 00:00:00.000000000 Z
+date: 2025-06-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: inferno_core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.6.3
+        version: 0.6.15
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.6.3
+        version: 0.6.15
 - !ruby/object:Gem::Dependency
   name: json-jwt
   requirement: !ruby/object:Gem::Requirement
@@ -108,6 +108,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.1.0
+- !ruby/object:Gem::Dependency
+  name: roo
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.10.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.10.1
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -229,6 +243,14 @@ files:
 - lib/smart_app_launch/openid_token_header_test.rb
 - lib/smart_app_launch/openid_token_payload_test.rb
 - lib/smart_app_launch/post_auth.html
+- lib/smart_app_launch/requirements/generated/smart_access_brands_requirements_coverage.csv
+- lib/smart_app_launch/requirements/generated/smart_client_stu2_2_requirements_coverage.csv
+- lib/smart_app_launch/requirements/generated/smart_requirements_coverage.csv
+- lib/smart_app_launch/requirements/generated/smart_stu2_2_requirements_coverage.csv
+- lib/smart_app_launch/requirements/generated/smart_stu2_requirements_coverage.csv
+- lib/smart_app_launch/requirements/hl7.fhir.uv.smart-app-launch_2.0.0_Requirements.xlsx
+- lib/smart_app_launch/requirements/hl7.fhir.uv.smart-app-launch_2.2.0_Requirements.xlsx
+- lib/smart_app_launch/requirements/smart_app_launch_test_kit_requirements.csv
 - lib/smart_app_launch/smart_access_brands_examples/r4_capability_statement.json
 - lib/smart_app_launch/smart_access_brands_examples/smart_access_brands_example.json.erb
 - lib/smart_app_launch/smart_access_brands_group.rb