RubyGems - smart_udap_harmonization_test_kit - Versions diffs - 0.9.0 → 0.10.1 - Mend

smart_udap_harmonization_test_kit 0.9.0 → 0.10.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (15) hide show

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 05cb7da3667b2445fd71391b20887e9afb7e93a5b0fd72b5988a3e7141238a50
-  data.tar.gz: fd36b3a13f5539f4fe8b64f002c444ceba260335f5fb6814fe5e861014611c7f
+  metadata.gz: 9acca50abafd3ad08a99c231c1aaecca9613a1eabc5de2ffe8ff125157cef214
+  data.tar.gz: c7df52033428ba42fe6d5e6648937313b55f884e0e419b4b4016bbe800f22a02
 SHA512:
-  metadata.gz: a110720c2bebe50183b6123a2f767c898bb4ec28950aef323c0bb4938ff2723f5fde841ab32a8fe0a3a248523a4bf4cd8441b292485fcab55f2a2b95edfcd360
-  data.tar.gz: 0a69bec907fac9ee30f096e684766423d230232d577b79badfcded284cef17f887532e716271763a2c0470b2a494267b89d6c508f268fa2784469ab9cb08f7e5
+  metadata.gz: 525c42c0c93f492b5e613584151159a8fdabe0a2262805d470e6f429cc2c80354797b861e61911169b38f83edc6a966fb5c7d50e7658d2094742fefd69353e39
+  data.tar.gz: d81d277ac7b8cd677f89b35e713655fa9d4e955b1534a590ca23a685ae3048714ab6cf57945e5b2356bad63858b4f816299064d1cf4e028db7eaadd2a13b8d13

data/config/presets/surefhir_certs_preset.json ADDED Viewed

@@ -0,0 +1,174 @@
+{
+  "title": "SureFhir Certs + HAPI FHIR Endpoint",
+  "id": null,
+  "test_suite_id": "smart_udap_harmonization",
+  "inputs": [
+    {
+      "name": "udap_fhir_base_url",
+      "value": "https://identity-matching.fast.hl7.org/fhir",
+      "_title": "FHIR Server Base URL",
+      "_description": "Base FHIR URL of FHIR Server. Discovery request will be sent to {baseURL}/.well-known/udap",
+      "_type": "text"
+    },
+    {
+      "name": "udap_community_parameter",
+      "value": "udap://stage.healthtogo.me/",
+      "_title": "UDAP Community Parameter",
+      "_description": "If included, the designated community value will be appended as a query to the well-known\n          endpoint to indicate the client's trust of certificates from this trust community.",
+      "_type": "text",
+      "_optional": true
+    },
+    {
+      "name": "flow_type_auth_code",
+      "value": [
+        "authorization_code"
+      ],
+      "_title": "Required OAuth2.0 Flow Type for Authorization Code Workflow",
+      "_description": "Which grant type(s) must be supported per the returned Discovery metadata",
+      "_type": "checkbox",
+      "_optional": false,
+      "_options": {
+        "list_options": [
+          {
+            "label": "Authorization Code",
+            "value": "authorization_code"
+          },
+          {
+            "label": "Client Credentials",
+            "value": "client_credentials"
+          }
+        ]
+      },
+      "_locked": true
+    },
+    {
+      "name": "udap_server_trust_anchor_certs",
+      "value": "-----BEGIN CERTIFICATE-----\nMIIF4DCCA8igAwIBAgIIC7cAbiIvVFwwDQYJKoZIhvcNAQELBQAwgZgxCzAJBgNV\nBAYTAlVTMQswCQYDVQQIEwJDQTESMBAGA1UEBxMJU2FuIERpZWdvMRMwEQYDVQQK\nEwpFTVIgRGlyZWN0MTYwNAYDVQQLEy1DZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAo\nY2VydHMuZW1yZGlyZWN0LmNvbSkxGzAZBgNVBAMTEkVNUiBEaXJlY3QgVGVzdCBD\nQTAeFw0xNDA0MjQxNjI5MjBaFw0yOTA0MjQxNjI5MjBaMIGzMQswCQYDVQQGEwJV\nUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJU2FuIERpZWdvMRMwEQYD\nVQQKDApFTVIgRGlyZWN0MT8wPQYDVQQLDDZUZXN0IFBLSSBDZXJ0aWZpY2F0aW9u\nIEF1dGhvcml0eSAoY2VydHMuZW1yZGlyZWN0LmNvbSkxJTAjBgNVBAMMHEVNUiBE\naXJlY3QgVGVzdCBDbGllbnQgU3ViQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw\nggEKAoIBAQCPwkP36KVBwdb9dNsKAhqEoVtMEdL4Ee01tB7y6gIINi3ZGbqhw/lF\nJjRS/fi+SqN8SkjZMkLl6ET9aTM5W+y7aXl+3iqn+dKsesS+kinTAfD4cSI2R4WK\n5HBomEf+PR3scewFKMBbguYW2I42tKPLMwI6L+kMRlQhI3sK4Fyj6M6gUqPaKlx7\nsGPQ/qr8PLwU3doCrC65avSmuC+y5jpbCkJ1kk+g4DLcO+TXx8oC2aVrMRFdD+lx\nNiShdlo5hzhiIGUZmyVe08vLTLB9LGCHz1w9+oqteco4aerYbOlZQxe9d0f7xlZa\nhj7DDfmkqLEFKRQXOJFQtcdCFp3XrXbDAgMBAAGjggEPMIIBCzBQBggrBgEFBQcB\nAQREMEIwQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0cy5lbXJkaXJlY3QuY29tL2Nl\ncnRzL0VNUkRpcmVjdFRlc3RDQS5jcnQwHQYDVR0OBBYEFKOVbWu9K1HN4c/lkG/X\nJk+/3T7eMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUMdaEL0mYbgAB0Geh\n+J4csG+noqwwEQYDVR0gBAowCDAGBgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0\ndHA6Ly9jZXJ0cy5lbXJkaXJlY3QuY29tL2NybC9FTVJEaXJlY3RUZXN0Q0EuY3Js\nMA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAKAjGzW0AEdMKRjKx\niEzS5SQqmHmAYmajowd38wac4udD3TMvf3tHMZfkGy3ulZSQ40LyjXa60s9/5508\nbwFGHBejyfo1vnc2FJA/0KcmlKzhwhmpe7QoZ1T7uWwG+Y98TRzL7wF8mzCUT+Fe\nMFP35xL3IIJ3CKzIkC9Wv+6kSgkobNoAJyUECbVtmxJer2/LmzfXsYI0NQ3QmeZL\npYoo4EOmIXpoWUSeZHh3av3guoy16s+bs5UuFQ2NfJeuD1n+uQBaNRchR3DxshEK\n66RiKu+QjdBrq0aoTXIT2MYKGiVEbYQlJuDuxilXLYlcYTcDpPIS7hh95bmAxRho\nwgbr3E3dsNgvMuANlgUJno5vyMr9P5zu+kDbJ8nB2fm5/LjXLmNvOy+rj8jCLbuP\nGS/vWxfvi21l4Xfmphi6skeq6JyIUPAm/U6bkR8LF5+/aVoIXUvkRHqbyBzDDDWc\n4+LjI4+INFK+Lxj/cwvh398Ko4LCA0KenJDBFN0Je/rz92uK867sgcQ7dreOK8pf\ngqWulL9H4kCkoZZF4367x2SQVQPWPExefQrpPwk6AlJTHocFqm1TUvmjTwCxmXWr\nztkq2GRxsmT6/2n5TrmHabl6cXDKtmnhS3k9FGFA556YowwJSEm9pKexguxqcyrg\nPPKM/j6ERtHoHDSMKT0frOoawoY=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nMIIGZjCCBE6gAwIBAgIBATANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMx\nCzAJBgNVBAgTAkNBMRIwEAYDVQQHEwlTYW4gRGllZ28xEzARBgNVBAoTCkVNUiBE\naXJlY3QxNjA0BgNVBAsTLUNlcnRpZmljYXRpb24gQXV0aG9yaXR5IChjZXJ0cy5l\nbXJkaXJlY3QuY29tKTEbMBkGA1UEAxMSRU1SIERpcmVjdCBUZXN0IENBMB4XDTEy\nMDkwNjA0MzEzNloXDTMyMDkwNjA0MzEzNlowgZgxCzAJBgNVBAYTAlVTMQswCQYD\nVQQIEwJDQTESMBAGA1UEBxMJU2FuIERpZWdvMRMwEQYDVQQKEwpFTVIgRGlyZWN0\nMTYwNAYDVQQLEy1DZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAoY2VydHMuZW1yZGly\nZWN0LmNvbSkxGzAZBgNVBAMTEkVNUiBEaXJlY3QgVGVzdCBDQTCCAiIwDQYJKoZI\nhvcNAQEBBQADggIPADCCAgoCggIBALugk56Hoot6yEEohbRQdQP6sMTCzXOSgxHr\neYI4h00EhMb8x8VzD/ZCEdgmrwa6y1WE7WaPdTcX/jCd0GNUwgqPz7sLP2NeTA9k\ngn/m0kXvxIgzaEhJntdqdvzHqlhtIMAURAu9erAfMn0giK7zwtSg5bYwC09tyv4d\nRIAX9UuvOpOqJnQk9DRRd64+9EKkX9Zj1lqT0/Wjr0w3jcGYN02dB03T4WARZEug\nzkBzPcmYPLhl09gRrgQg8msgTQi68vR+UKNUoQhRJAkk/CAqkMT8Uzuae/W7utYk\n4/vmiJEHoC7OV7yGa7VrD0HhjDzfs53kdnnzlo6MB+6oGFtIKaMF4D8GVSr+MY/p\na+C2dkqf4y3Pr3hqM3t4vgmr/eg0dhzh9+z4lpEZz9ciWcOXwjmxec3OFanvMOeG\n4OhKRiGIj/mVkDEWlC3tcdP22DtGk/RHGOJHkf6qKFxeNDOFHUdTpiXldAl3cUg9\nBNAlUnWHFwim+byxxVYzmXs/8KfLfOp6xIFjI/eddNE7/avQWoEkOapgUDfaixWi\nI1d40QGKJr0d1Yo+W5VxzzufJp5iC/4EmlYzaK9+dVOtfQGfNWaXmfYa8H7krcrW\ncvp0ando4Reh3a+qpybvBVyRJree1WODQHqs7J2lx9quyVfI3Box3uc/Hw2xxdjx\nV3cUsvd5AgMBAAGjgbgwgbUwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC\nAQYwHQYDVR0OBBYEFDHWhC9JmG4AAdBnofieHLBvp6KsMB8GA1UdIwQYMBaAFDHW\nhC9JmG4AAdBnofieHLBvp6KsMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jZXJ0\ncy5lbXJkaXJlY3QuY29tL0VNUkRpcmVjdFRlc3RDQS5jcmwwEQYDVR0gBAowCDAG\nBgRVHSAAMA0GCSqGSIb3DQEBCwUAA4ICAQBsXbY8B7FcIskyeB/CGEI77GaDMDfK\nWGseJJYlJYz2FeIJgPtqdPhzn0jhQUVcwr//gC5j1aARlussG3gMr8OajpSpOqqf\nXEjzuITeq+Hxsp+ursiJXOZKhurY5NJKZ30ulFDxOZ97bWVUYPTfyy1qUrsqnNlW\n8LJcCnNzZ2uDSJn32FugUtWe0EEgRM10/8Q2IJXLuIhEQLbwl6q7PcDiPkT/yVh/\n9L6ul2bO/ZXp7DeSPeOafWOuCoTNbKxgBuljajm2VNB5+Xx/rSuPnoTRhsaXhke+\nnb3ZbGHJ2ZRu/Q45+OB1ws7VednMci25OVo+yVpH8tl2KF9u1JVNtf5mY3//HEwR\n8OfPPRZeQCqquESVrQjZILa6Ot7lVIhoNI6zkZAp3TaWYBi94upVkeA9uqVIC7cB\npiOz+6XXRDdJDMuh6xsA2tq2E5BY51H5pfskXBBGgHxDQ56R3RskZ7q/NaKSiqBA\nInueG7TVW+dR++rT2n9wkzJHKpA+YS0zHodvIoB71KNq1P/9choCMcBrNph5n32C\n8DpOlF+hi3kOkwjwchfkzC5XS+Zio5VYOyCV1C+CYJ7sw1psk1yYAWPm9rnUmfrm\nO27HXv6lW0Z9EpeUu++52CSYjZsx3E4J1FR0TulzsD8BQtFRL6aPfuSg85okOsxw\nb/p0AdITxRO0vQ==\n-----END CERTIFICATE-----",
+      "_title": "Auth Server Trust Anchor X509 Certificate(s) (PEM Format)",
+      "_description": "\n            A list of one or more trust anchor root CA X.509 certificates, separated by a newline. Inferno will use\n            these to establish\n            trust with the authorization server's certificates provided in the discovery response signed_metadata JWT.\n          ",
+      "_type": "textarea",
+      "_optional": true
+    },
+    {
+      "name": "udap_auth_code_flow_registration_grant_type",
+      "value": "authorization_code",
+      "_title": "Client Registration Grant Type",
+      "_description": "\n            The OAuth2.0 grant type for which this client will register itself. A given client may register as either\n             option, but not both.\n          ",
+      "_type": "radio",
+      "_options": {
+        "list_options": [
+          {
+            "label": "Authorization Code",
+            "value": "authorization_code"
+          },
+          {
+            "label": "Client Credentials",
+            "value": "client_credentials"
+          }
+        ]
+      },
+      "_locked": true
+    },
+    {
+      "name": "udap_auth_code_flow_client_registration_status",
+      "value": "update",
+      "_title": "Client Registration Status",
+      "_description": "\n            If the client's iss and certificate combination has already been registered with the authorization server\n            prior to this test run, select 'Update'.\n          ",
+      "_type": "radio",
+      "_options": {
+        "list_options": [
+          {
+            "label": "New Registration (201 Response Code Expected)",
+            "value": "new"
+          },
+          {
+            "label": "Update Registration (200 or 201 Response Code Expected)",
+            "value": "update"
+          }
+        ]
+      }
+    },
+    {
+      "name": "udap_auth_code_flow_client_cert_pem",
+      "value": "-----BEGIN CERTIFICATE-----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\nrscMFzcVxbjWkt5gVZVTZg==\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nMIIGlDCCBHygAwIBAgIRAPAQo572a38pKrE1y3TWITIwDQYJKoZIhvcNAQELBQAw\nbDELMAkGA1UEBhMCVVMxDzANBgNVBAgTBk9yZWdvbjERMA8GA1UEBxMIUG9ydGxh\nbmQxFDASBgNVBAoTC0ZoaXIgQ29kaW5nMQ0wCwYDVQQLEwRSb290MRQwEgYDVQQD\nEwtTdXJlRmhpci1DQTAeFw0yNDAzMzEyMTIxNTdaFw0yOTA0MDEyMTIxNTdaMH4x\nCzAJBgNVBAYTAlVTMQ8wDQYDVQQIEwZPcmVnb24xETAPBgNVBAcTCFBvcnRsYW5k\nMRQwEgYDVQQKEwtGaGlyIENvZGluZzEVMBMGA1UECxMMSW50ZXJtZWRpYXRlMR4w\nHAYDVQQDExVTdXJlRmhpci1JbnRlcm1lZGlhdGUwggIiMA0GCSqGSIb3DQEBAQUA\nA4ICDwAwggIKAoICAQDoUwSdndRTVIzHTG6C1EOktgQYq6ON91JpSDUX5mnPtSbn\nHU6v8G7qvFWzK6S6jquuflV21xv5wQMtT0P7jsUdZAZfFB5OnxjC6sGraBeemwZg\n0SPoq+0h0Mnk+R0pXmwmc57x+nGADoVVnBBflGPRMg8Lnh/+31S4LT+0fmzHxfTy\nXG8jRJGT/yyYFSAJP3lx+WRioi0TykHrap4cztnL68jA4RszfRdsrvjCEeSzli8E\n7p7aakyQLqsC4Q4HBwHsK7uYc8bAx9o7s1ydyLGZsYTxOu7GQEhkLdAZFeiuoptW\nSUcb/ykVq4X/d88zp3cvjj35tTzfvWKb5lyWnMe3pGHJRyLOKq/PDDvfjb07F9sT\nbUjEAXf28WWMlCKW76KMD4c/ZacWRcH6LFFVLL60B21vippvhh4Sim1j7Py/8VKC\n98n6sp2rZQtA90V9+UEewZphtrZiEhgg5wOotBE992qaveILColwscu+os2AOeE0\nkbcggShVdPW6j9ZFqkwM9ZX9d23w39p3grtjBkHfGgPftRVn6kY6cd1Xh+bmlH4z\nV3GLDjSk3eHDy2R22PSfIQXkr7e+jh9umHwgSxXFBEqIpHPsFS9o+H9VqMqv9IOs\nd2nD9A7NuEwR4hyw84RYV0uKNFWKnBxhlEeyCR3g24Bt01EpO9W2DSeE1qPzBQID\nAQABo4IBHTCCARkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwHQYD\nVR0OBBYEFH361hVtNZ+gORk4IJ8qlKdqcSmTMB8GA1UdIwQYMBaAFOvJcuZBjV4H\nKquZj31t/Dd30UojMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwuZmhpcmNl\ncnRzLm5ldC9jcmwvU3VyZUZoaXJMYWJzUm9vdENybC5jcmwwHwYDVR0RBBgwFoYU\ndWRhcDovL2ZoaXJsYWJzLm5ldC8wTgYIKwYBBQUHAQEEQjBAMD4GCCsGAQUFBzAC\nhjJodHRwOi8vY3JsLmZoaXJjZXJ0cy5uZXQvY2VydHMvU3VyZUZoaXJMYWJzX0NB\nLmNlcjANBgkqhkiG9w0BAQsFAAOCAgEAfI95Qn1DpBU54DHz8ysUcgdi2XnHMe83\nghym9/0Ov5w8fZ1kr5GMjt9wWK0/qRv8gcWPwcZPyMgEiEq1rgQsi2LdmNmVmp2h\np8T1zqhRdJDjUSiOTWJZW+ULypHS7vhqHjAwQXxpznQYRDUqRQNr/PuscDbHJ+qm\nSMJHn186129V+C5sAjLthijIY1t+gNROsbc7EQ9wqXPa1jhS5hhntKzm7OKzlFKu\nmyWORXIpTBEqzyrK8ynMxgUnsZtV7PFqT4h4kfHZPi2ZgSukuBLNpLqgR9OLZ4od\n3VcoS83pZiq0WaY76iK+2Fqv0QtHuhLm5R/EWlRsbQ4DlYWR9MgjoE7rR5tWb6l5\nNvtPGwvTARRCYoFX0kjP/YwzldWHWdM1YZ73z7u7Fj7jCsNhUHYaGIRw25bxMxqr\nYUDsbtj3Ze+wjSDxiWxtgV5qrWz8BDjpFIDeE3VsJPHCw4Vy4ufqizrNd7ZcNBmp\ncMmx1ollvdxnQRVrlQAowK+ACjtcVEzcT8QBWRu0D3hjdbDeHmJwu/a+BmAaBKhS\n/1ieQ0eTN5pTrTndmOkICOMqYG4H14AvoR/NGkMOWcNwm0bfiFzRyunc2uZkyXvf\np8LT2aL9LWZNxREyjOqMCBGFcLXA+r02I+c550YwNtJkUTDqsDCMGyC5pB3dZdc2\ng+IojrfmcIE=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nH+y31f+V92LrJJAAO2hpOh5Xqqz34AMVDi87+zD4Z0+b7rFVfTOPOBZQRKU=\n-----END CERTIFICATE-----",
+      "_title": "Authorization Code Client Certificate(s) (PEM Format)",
+      "_description": "\n            A list of one or more X.509 certificates in PEM format separated by a newline. The first (leaf) certificate\n            MUST represent the client entity Inferno will register as,\n            and the trust chain that will be built from the provided certificate(s) must resolve to a CA trusted by the\n            authorization server under test.\n          ",
+      "_type": "textarea",
+      "_optional": false
+    },
+    {
+      "name": "udap_auth_code_flow_client_private_key",
+      "value": "-----BEGIN PRIVATE KEY-----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\nC3rdEoP/JKnwyST334AnepA=\n-----END PRIVATE KEY-----",
+      "_title": "Authorization Code Client Private Key (PEM Format)",
+      "_description": "\n          The private key corresponding to the client certificate used for registration, in PEM format.  Used to sign\n          registration and/or authentication JWTs.\n          ",
+      "_type": "textarea",
+      "_optional": false
+    },
+    {
+      "name": "udap_auth_code_flow_cert_iss",
+      "value": "https://fhirlabs.net:7016/fhir/r4",
+      "_title": "Authorization Code JWT Issuer (iss) Claim",
+      "_description": "\n            MUST correspond to a unique URI entry in the Subject Alternative Name (SAN) extension of the client\n            certificate used for registration.\n          ",
+      "_type": "text",
+      "_optional": false
+    },
+    {
+      "name": "udap_auth_code_flow_registration_scope",
+      "value": "openid fhirUser offline_access patient/*.r",
+      "_title": "Authorization Code Registration Requested Scope(s)",
+      "_description": "\n                  String containing a space delimited list of scopes requested by the client application for use in\n                  subsequent requests. The Authorization Server MAY consider this list when deciding the scopes that it\n                  will allow the application to subsequently request. Apps requesting the \"authorization_code\" grant\n                  type SHOULD request user or patient scopes.\n                ",
+      "_type": "text"
+    },
+    {
+      "name": "udap_jwt_signing_alg",
+      "value": "RS256",
+      "_title": "JWT Signing Algorithm",
+      "_description": "\n            Algorithm used to sign UDAP JSON Web Tokens (JWTs). UDAP Implementations SHALL support\n            RS256.\n            ",
+      "_type": "radio",
+      "_options": {
+        "list_options": [
+          {
+            "label": "RS256",
+            "value": "RS256"
+          }
+        ]
+      },
+      "_locked": true
+    },
+    {
+      "name": "udap_auth_code_flow_registration_certifications",
+      "value": null,
+      "_title": "Authorization Code UDAP Registration Certifications",
+      "_description": "\n            Additional UDAP certifications to include in registration request, if required by the authorization server.\n             Include a space separated list of strings representing a Base64-encoded, signed JWT.\n            ",
+      "_type": "textarea",
+      "_optional": true
+    },
+    {
+      "name": "udap_authorization_code_request_scopes",
+      "value": "openid patient/AllergyIntolerance.r patient/Condition.r patient/Encounter.r patient/Patient.r",
+      "_title": "Scope Parameter for Authorization Request",
+      "_description": "\n              A list of space-separated scopes to include in the authorization request. If included, these may be equal\n              to or a subset of the scopes requested during registration.\n              If empty, scope will be omitted as a parameter to the authorization endpoint.\n          ",
+      "_type": "text",
+      "_optional": true
+    },
+    {
+      "name": "udap_authorization_code_request_aud",
+      "value": [
+        "include_aud"
+      ],
+      "_title": "Audience ('aud') Parameter for Authorization Request",
+      "_description": "\n              If selected, the Base FHIR URL will be used as the 'aud' parameter in the request to the authorization\n              endpoint.\n          ",
+      "_type": "checkbox",
+      "_optional": true,
+      "_options": {
+        "list_options": [
+          {
+            "label": "Include 'aud' parameter",
+            "value": "include_aud"
+          }
+        ]
+      },
+      "_locked": true
+    }
+  ]
+}

data/lib/smart_udap_harmonization_test_kit/metadata.rb ADDED Viewed

@@ -0,0 +1,52 @@
+require_relative 'version'
+module SMART_UDAP_HarmonizationTestKit
+  class Metadata < Inferno::TestKit
+    id :smart_udap_harmonization
+    title 'SMART-UDAP Harmonization Test Kit'
+    description <<~DESCRIPTION
+      The SMART-UDAP Harmonization Test Kit is an experimental Test Kit for evaluating
+      options for testing authorization systems that conform to both SMART App Launch
+      Implementation Guide and the Security for Scalable Registration, Authentication
+      and Authorization Implementation Guide requirements.
+      <!-- break -->
+      The [Security for Scalable Registration, Authentication, and Authorization
+      IG](https://hl7.org/fhir/us/udap-security/index.html) states, "This guide is also
+      intended to be compatible and harmonious with client and server use of versions
+      1 or 2 of the HL7 SMART App Launch IG.”
+      This test kit is an effort to demonstrate how a client could interact with a server
+      supporting both UDAP and SMART App Launch.
+      ## Overview
+      The basic assumption underlying these tests is that a client could perform
+      dynamic registration and launch with client authorization from the UDAP workflow
+      while using SMART App Launch scopes, and the server could include additional
+      launch context parameters defined by SMART App Launch in the token response.
+      The tests begin with normal parts of the UDAP workflow: discovery, dynamic
+      registration, and authorization.
+      Then there are tests for SMART App Launch context parameters which could be
+      included as part of the token response, including an OpenIDConnect id token.
+      Finally, there are tests for token refresh.
+      ## Known Limitations
+      The UDAP dynamic registration workflow does not define a way to register a
+      launch URI, so the tests only perform a standalone launch.
+      ## Reporting Issues
+      Please report any issues with this set of tests in the [GitHub Issues](https://github.com/inferno-framework/smart-udap-harmonization-test-kit/issues) section of the [open-source code repository](https://github.com/inferno-framework/smart-udap-harmonization-test-kit).
+    DESCRIPTION
+    suite_ids [:smart_udap_harmonization]
+    tags ['UDAP']
+    last_updated LAST_UPDATED
+    version VERSION
+    maturity 'Low'
+    authors ['Alisa Wallace']
+    repo 'https://github.com/inferno-framework/smart-udap-harmonization-test-kit'
+  end
+end

data/lib/smart_udap_harmonization_test_kit/smart_udap_authorization_code_authentication_group.rb CHANGED Viewed

@@ -1,4 +1,3 @@
-require_relative 'smart_udap_authorization_code_redirect_test'
 require_relative 'smart_udap_token_response_scope_test'
 module SMART_UDAP_HarmonizationTestKit
@@ -16,14 +15,25 @@ module SMART_UDAP_HarmonizationTestKit
     run_as_group
-    test from: :smart_udap_authorization_code_redirect
+    test from: :udap_authorization_code_redirect,
+         config: {
+           inputs: {
+             udap_authorization_code_request_aud: {
+               default: ['include_aud'],
+               locked: true
+             }
+           }
+         }
     test from: :udap_authorization_code_received
     test from: :udap_authorization_code_token_exchange,
          config: {
            requests: {
              token_exchange: {
-               name: :authorization_code_token_exchange
+               name: :udap_auth_code_flow_token_exchange
              }
+           },
+           options: {
+             redirect_uri: UDAPSecurityTestKit::UDAP_REDIRECT_URI
            }
          }
@@ -42,7 +52,7 @@ module SMART_UDAP_HarmonizationTestKit
          config: {
            requests: {
              token_exchange: {
-               name: :authorization_code_token_exchange
+               name: :udap_auth_code_flow_token_exchange
              }
            }
          }

data/lib/smart_udap_harmonization_test_kit/smart_udap_authorization_code_group.rb CHANGED Viewed

@@ -59,10 +59,13 @@ module SMART_UDAP_HarmonizationTestKit
           config: {
             inputs: {
               udap_registration_grant_type: {
-                name: :reg_grant_type_auth_code,
+                name: :udap_auth_code_flow_registration_grant_type,
                 default: 'authorization_code',
                 locked: true
               },
+              udap_client_registration_status: {
+                name: :udap_auth_code_flow_client_registration_status
+              },
               udap_client_cert_pem: {
                 name: :udap_auth_code_flow_client_cert_pem,
                 title: 'Authorization Code Client Certificate(s) (PEM Format)'
@@ -103,7 +106,8 @@ module SMART_UDAP_HarmonizationTestKit
             }
           } do
       input_order :udap_registration_endpoint,
-                  :reg_grant_type_auth_code,
+                  :udap_auth_code_flow_registration_grant_type,
+                  :udap_auth_code_flow_client_registration_status,
                   :udap_auth_code_flow_client_cert_pem,
                   :udap_auth_code_flow_client_private_key,
                   :udap_auth_code_flow_cert_iss,

data/lib/smart_udap_harmonization_test_kit/smart_udap_context_test.rb CHANGED Viewed

@@ -6,7 +6,7 @@ module SMART_UDAP_HarmonizationTestKit
           title: 'Token Exchange Response Body',
           description: 'JSON response body returned by the authorization server during the token exchange step.',
           type: 'textarea'
-    input :udap_auth_code_flow_registration_scope,
+    input :udap_authorization_code_request_scopes,
           title: 'Requested Scopes',
           description: 'Scopes client requested from the authorization server during the authorization step.'
@@ -19,7 +19,7 @@ module SMART_UDAP_HarmonizationTestKit
     end
     def requested_scopes
-      udap_auth_code_flow_registration_scope
+      udap_authorization_code_request_scopes
     end
     def missing_requested_context_scopes

data/lib/smart_udap_harmonization_test_kit/smart_udap_openid_connect_group.rb CHANGED Viewed

@@ -19,6 +19,9 @@ module SMART_UDAP_HarmonizationTestKit
         token_response_body: {
           name: :udap_auth_code_flow_token_exchange_response_body
         },
+        token_retrieval_time: {
+          name: :udap_auth_code_flow_token_retrieval_time
+        },
         requested_scopes: {
           name: :udap_auth_code_flow_registration_scope,
           title: 'Requested Scopes',
@@ -39,7 +42,7 @@ module SMART_UDAP_HarmonizationTestKit
             title: 'Token Exchange Response Body',
             description: 'JSON response body returned by the authorization server during the token exchange step'
-      input :udap_auth_code_flow_token_retrieval_time,
+      input :token_retrieval_time,
             title: 'Token Retrieval Time'
       output :id_token,
@@ -56,7 +59,7 @@ module SMART_UDAP_HarmonizationTestKit
                smart_credentials: {
                  access_token: token_response_body['access_token'],
                  expires_in: token_response_body['expires_in'],
-                 udap_auth_code_flow_token_retrieval_time:
+                 token_retrieval_time:
                }.to_json
       end
     end

data/lib/smart_udap_harmonization_test_kit/smart_udap_token_refresh_test.rb CHANGED Viewed

@@ -45,7 +45,8 @@ module SMART_UDAP_HarmonizationTestKit
           title: 'Refresh Token',
           type: 'textarea'
-    input :udap_received_scopes,
+    # These should default to those received and output by the token exchange test
+    input :received_scopes,
           title: 'Requested Scopes',
           description: 'A list of scopes that will be requested during token exchange.'

data/lib/smart_udap_harmonization_test_kit/smart_udap_token_refresh_with_scopes_group.rb CHANGED Viewed

@@ -62,8 +62,10 @@ module SMART_UDAP_HarmonizationTestKit
              udap_auth_code_flow_token_exchange_response_body: {
                name: :smart_udap_token_refresh_response_body
              },
-             udap_auth_code_flow_registration_scope: {
-               name: :udap_received_scopes
+             # For token refresh, we requested the same scopes we already
+             # received in the original token exchange step
+             udap_authorization_code_request_scopes: {
+               name: :received_scopes
              },
              udap_auth_code_flow_token_retrieval_time: {
                name: :smart_udap_refresh_token_retrieval_time

data/lib/smart_udap_harmonization_test_kit/smart_udap_token_refresh_without_scopes_group.rb CHANGED Viewed

@@ -28,7 +28,7 @@ module SMART_UDAP_HarmonizationTestKit
     test from: :smart_udap_token_refresh,
          config: {
            inputs: {
-             udap_received_scopes: {
+             received_scopes: {
                locked: true,
                description: 'Will be omitted in refresh request.'
              }
@@ -50,8 +50,10 @@ module SMART_UDAP_HarmonizationTestKit
              udap_auth_code_flow_token_exchange_response_body: {
                name: :smart_udap_token_refresh_response_body
              },
-             udap_auth_code_flow_registration_scope: {
-               name: :udap_received_scopes,
+             # For token refresh, we requested the same scopes we already
+             # received in the original token exchange step
+             udap_authorization_code_request_scopes: {
+               name: :received_scopes,
                locked: true
              },
              udap_auth_code_flow_token_retrieval_time: {

data/lib/smart_udap_harmonization_test_kit/smart_udap_token_response_scope_test.rb CHANGED Viewed

@@ -12,7 +12,7 @@ module SMART_UDAP_HarmonizationTestKit
       )
     input :udap_auth_code_flow_token_exchange_response_body,
-          :udap_auth_code_flow_registration_scope,
+          :udap_authorization_code_request_scopes,
           :udap_auth_code_flow_token_retrieval_time,
           :udap_token_endpoint,
           :udap_client_id
@@ -50,7 +50,7 @@ module SMART_UDAP_HarmonizationTestKit
       assert received_scopes.present?, 'Token exchange response does not include the `scope` parameter'
-      check_for_missing_scopes(udap_auth_code_flow_registration_scope, token_response_body_parsed)
+      check_for_missing_scopes(udap_authorization_code_request_scopes, token_response_body_parsed)
     end
   end
 end

data/lib/smart_udap_harmonization_test_kit/version.rb CHANGED Viewed

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 module SMART_UDAP_HarmonizationTestKit
-  VERSION = '0.9.0'
+  VERSION = '0.10.1'
+  LAST_UPDATED = '2025-03-06'
 end

data/lib/smart_udap_harmonization_test_kit.rb CHANGED Viewed

@@ -1,6 +1,6 @@
 require 'udap_security_test_kit'
+require_relative 'smart_udap_harmonization_test_kit/metadata'
 require_relative 'smart_udap_harmonization_test_kit/smart_udap_authorization_code_group'
-require_relative 'smart_udap_harmonization_test_kit/version'
 module SMART_UDAP_HarmonizationTestKit
   class Suite < Inferno::TestSuite
@@ -35,34 +35,33 @@ module SMART_UDAP_HarmonizationTestKit
       launch URI, so the tests only perform a standalone launch.
     )
-    version VERSION
     resume_test_route :get, '/redirect' do |request|
       request.query_parameters['state']
     end
-    config options: {
-      redirect_uri: "#{Inferno::Application['base_url']}/custom/smart_udap_harmonization/redirect"
-    }
     links [
       {
+        type: 'report_issue',
         label: 'Report Issue',
-        url: 'https://github.com/inferno-framework/smart-udap-harmonization-test-kit/issues'
+        url: 'https://github.com/inferno-framework/smart-udap-harmonization-test-kit/issues/'
       },
       {
+        type: 'source_code',
         label: 'Open Source',
-        url: 'https://github.com/inferno-framework/smart-udap-harmonization-test-kit'
+        url: 'https://github.com/inferno-framework/smart-udap-harmonization-test-kit/'
       },
       {
+        type: 'download',
         label: 'Download',
-        url: 'https://github.com/inferno-framework/smart-udap-harmonization-test-kit/releases'
+        url: 'https://github.com/inferno-framework/smart-udap-harmonization-test-kit/releases/'
       },
       {
+        type: 'ig',
         label: 'UDAP Implementation Guide',
         url: 'https://hl7.org/fhir/us/udap-security/STU1'
       },
       {
+        type: 'ig',
         label: 'SMART Implementation Guide',
         url: 'https://hl7.org/fhir/smart-app-launch/STU2.2/scopes-and-launch-context.html'
       }

metadata CHANGED Viewed

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: smart_udap_harmonization_test_kit
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 0.10.1
 platform: ruby
 authors:
 - Alisa Wallace
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-12 00:00:00.000000000 Z
+date: 2025-03-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: inferno_core
@@ -17,14 +17,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.6.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.6.2
 - !ruby/object:Gem::Dependency
   name: smart_app_launch_test_kit
   requirement: !ruby/object:Gem::Requirement
@@ -45,14 +45,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.10.0
+        version: 0.11.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.10.0
+        version: 0.11.0
 description: Test Kit for integrating SMART App Launch and UDAP Security IGs
 email:
 - inferno@groups.mitre.org
@@ -61,10 +61,11 @@ extensions: []
 extra_rdoc_files: []
 files:
 - LICENSE
+- config/presets/surefhir_certs_preset.json
 - lib/smart_udap_harmonization_test_kit.rb
+- lib/smart_udap_harmonization_test_kit/metadata.rb
 - lib/smart_udap_harmonization_test_kit/smart_udap_authorization_code_authentication_group.rb
 - lib/smart_udap_harmonization_test_kit/smart_udap_authorization_code_group.rb
-- lib/smart_udap_harmonization_test_kit/smart_udap_authorization_code_redirect_test.rb
 - lib/smart_udap_harmonization_test_kit/smart_udap_context_test.rb
 - lib/smart_udap_harmonization_test_kit/smart_udap_encounter_context_test.rb
 - lib/smart_udap_harmonization_test_kit/smart_udap_fhir_context_test.rb
@@ -87,6 +88,7 @@ licenses:
 metadata:
   homepage_uri: https://github.com/inferno-framework/smart-udap-harmonization-test-kit
   source_code_uri: https://github.com/inferno-framework/smart-udap-harmonization-test-kit
+  inferno_test_kit: 'true'
 post_install_message:
 rdoc_options: []
 require_paths:
@@ -102,7 +104,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.9
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: SMART-UDAP Harmonization Test Kit

data/lib/smart_udap_harmonization_test_kit/smart_udap_authorization_code_redirect_test.rb DELETED Viewed

@@ -1,88 +0,0 @@
-module SMART_UDAP_HarmonizationTestKit
-  class SMART_UDAP_AuthorizationCodeRedirectTest < Inferno::Test # rubocop:disable Naming/ClassAndModuleCamelCase
-    title 'Authorization server redirects client to redirect URI with SMART scopes'
-    id :smart_udap_authorization_code_redirect
-    description %(
-        Per [RFC 6749 OAuth 2.0 Authorization Framework Section 4.1.1](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.1),
-        once the server validates the client's authorization request, the authorization server directs the user-agent to
-        the provided client redirection URI using an HTTP redirection response.
-      )
-    input :udap_fhir_base_url,
-          title: 'FHIR Server Base URL',
-          description: 'Base FHIR URL of FHIR Server. Value for the aud parameter in the redirect URI.'
-    input :udap_authorization_endpoint,
-          title: 'Authorization Endpoint',
-          description: 'The full URL from which Inferno will request an authorization code.'
-    input :udap_client_id,
-          title: 'Client ID',
-          description: 'Client ID as registered with the authorization server.'
-    input :udap_auth_code_flow_registration_scope,
-          title: 'Requested Scopes',
-          description: 'A list of space-separated scopes.',
-          default: 'launch/patient openid fhirUser offline_access patient/*.read'
-    output :udap_authorization_code_state
-    receives_request :redirect
-    def wait_message(auth_url)
-      if config.options[:redirect_message_proc].present?
-        return instance_exec(auth_url, &config.options[:redirect_message_proc])
-      end
-      %(
-        ### #{self.class.parent&.parent&.title}
-        [Follow this link to authorize with the auth server](#{auth_url}).
-        Tests will resume once Inferno receives a request at
-        `#{config.options[:redirect_uri]}` with a state of `#{udap_authorization_code_state}`.
-      )
-    end
-    def authorization_url_builder(url, params)
-      uri = URI(url)
-      # because the URL might have parameters on it
-      original_parameters = URI.decode_www_form(uri.query || '').to_h
-      new_params = original_parameters.merge(params)
-      uri.query = URI.encode_www_form(new_params)
-      uri.to_s
-    end
-    run do
-      assert_valid_http_uri(
-        udap_authorization_endpoint,
-        "OAuth2 Authorization Endpoint '#{udap_authorization_endpoint}' is not a valid URI"
-      )
-      output udap_authorization_code_state: SecureRandom.uuid
-      oauth2_params = {
-        'response_type' => 'code',
-        'client_id' => udap_client_id,
-        'redirect_uri' => config.options[:redirect_uri],
-        'scope' => udap_auth_code_flow_registration_scope,
-        'state' => udap_authorization_code_state,
-        'aud' => udap_fhir_base_url
-      }.compact
-      authorization_url = authorization_url_builder(
-        udap_authorization_endpoint,
-        oauth2_params
-      )
-      info("Inferno redirecting browser to #{authorization_url}.")
-      wait(
-        identifier: udap_authorization_code_state,
-        message: wait_message(authorization_url)
-      )
-    end
-  end
-end