udap_security_test_kit 0.11.4 → 0.11.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (45) hide show
  1. checksums.yaml +4 -4
  2. data/lib/udap_security_test_kit/authorization_code_received_test.rb +8 -0
  3. data/lib/udap_security_test_kit/authorization_code_redirect_test.rb +3 -0
  4. data/lib/udap_security_test_kit/authorization_code_token_exchange_test.rb +2 -0
  5. data/lib/udap_security_test_kit/authorization_endpoint_field_test.rb +5 -1
  6. data/lib/udap_security_test_kit/client_suite/access_ac_group.rb +2 -0
  7. data/lib/udap_security_test_kit/client_suite/authorization_request_verification_test.rb +5 -0
  8. data/lib/udap_security_test_kit/client_suite/registration_ac_verification_test.rb +34 -0
  9. data/lib/udap_security_test_kit/client_suite/registration_cc_verification_test.rb +30 -0
  10. data/lib/udap_security_test_kit/client_suite/token_request_ac_verification_test.rb +47 -0
  11. data/lib/udap_security_test_kit/client_suite/token_request_cc_verification_test.rb +25 -0
  12. data/lib/udap_security_test_kit/client_suite.rb +10 -0
  13. data/lib/udap_security_test_kit/discovery_group.rb +2 -0
  14. data/lib/udap_security_test_kit/dynamic_client_registration_group.rb +3 -0
  15. data/lib/udap_security_test_kit/endpoints/mock_udap_server/introspection_endpoint.rb +34 -0
  16. data/lib/udap_security_test_kit/endpoints/mock_udap_server/udap_introspection_response_creation.rb +71 -0
  17. data/lib/udap_security_test_kit/endpoints/mock_udap_server.rb +8 -5
  18. data/lib/udap_security_test_kit/grant_types_supported_field_test.rb +3 -0
  19. data/lib/udap_security_test_kit/reg_endpoint_jwt_signing_alg_values_supported_field_test.rb +6 -0
  20. data/lib/udap_security_test_kit/registration_endpoint_field_test.rb +3 -0
  21. data/lib/udap_security_test_kit/registration_failure_invalid_contents_test.rb +3 -0
  22. data/lib/udap_security_test_kit/registration_failure_invalid_jwt_signature_test.rb +2 -0
  23. data/lib/udap_security_test_kit/registration_success_contents_test.rb +3 -0
  24. data/lib/udap_security_test_kit/registration_success_test.rb +3 -0
  25. data/lib/udap_security_test_kit/requirements/generated/udap_security_client_requirements_coverage.csv +146 -0
  26. data/lib/udap_security_test_kit/requirements/generated/udap_security_requirements_coverage.csv +164 -0
  27. data/lib/udap_security_test_kit/requirements/hl7.fhir.us.udap-security_1.0.0_reqs.xlsx +0 -0
  28. data/lib/udap_security_test_kit/requirements/udap_security_test_kit_requirements.csv +308 -0
  29. data/lib/udap_security_test_kit/signed_metadata_contents_test.rb +17 -0
  30. data/lib/udap_security_test_kit/signed_metadata_field_test.rb +4 -1
  31. data/lib/udap_security_test_kit/tags.rb +1 -0
  32. data/lib/udap_security_test_kit/token_endpoint_auth_methods_supported_field_test.rb +2 -0
  33. data/lib/udap_security_test_kit/token_endpoint_auth_signing_alg_values_supported_field_test.rb +5 -0
  34. data/lib/udap_security_test_kit/token_endpoint_field_test.rb +3 -0
  35. data/lib/udap_security_test_kit/udap_auth_extensions_required_field_test.rb +3 -0
  36. data/lib/udap_security_test_kit/udap_auth_extensions_supported_field_test.rb +3 -0
  37. data/lib/udap_security_test_kit/udap_certifications_required_field_test.rb +3 -0
  38. data/lib/udap_security_test_kit/udap_certifications_supported_field_test.rb +2 -0
  39. data/lib/udap_security_test_kit/udap_profiles_supported_field_test.rb +5 -0
  40. data/lib/udap_security_test_kit/udap_versions_supported_field_test.rb +2 -0
  41. data/lib/udap_security_test_kit/urls.rb +5 -0
  42. data/lib/udap_security_test_kit/version.rb +2 -2
  43. data/lib/udap_security_test_kit/well_known_endpoint_test.rb +4 -0
  44. data/lib/udap_security_test_kit.rb +8 -0
  45. metadata +10 -4
@@ -12,6 +12,9 @@ module UDAPSecurityTestKit
12
12
  input :udap_well_known_metadata_json
13
13
  input :required_flow_type
14
14
 
15
+ verifies_requirements 'hl7.fhir.us.udap-security_1.0.0@28',
16
+ 'hl7.fhir.us.udap-security_1.0.0@29'
17
+
15
18
  run do
16
19
  assert_valid_json(udap_well_known_metadata_json)
17
20
  config = JSON.parse(udap_well_known_metadata_json)
@@ -15,6 +15,9 @@ module UDAPSecurityTestKit
15
15
  input :udap_well_known_metadata_json
16
16
  output :udap_certifications_required
17
17
 
18
+ verifies_requirements 'hl7.fhir.us.udap-security_1.0.0@34',
19
+ 'hl7.fhir.us.udap-security_1.0.0@35'
20
+
18
21
  run do
19
22
  assert_valid_json(udap_well_known_metadata_json)
20
23
  config = JSON.parse(udap_well_known_metadata_json)
@@ -13,6 +13,8 @@ module UDAPSecurityTestKit
13
13
 
14
14
  input :udap_well_known_metadata_json
15
15
 
16
+ verifies_requirements 'hl7.fhir.us.udap-security_1.0.0@33'
17
+
16
18
  run do
17
19
  assert_valid_json(udap_well_known_metadata_json)
18
20
  config = JSON.parse(udap_well_known_metadata_json)
@@ -20,6 +20,11 @@ module UDAPSecurityTestKit
20
20
 
21
21
  input :udap_well_known_metadata_json
22
22
 
23
+ verifies_requirements 'hl7.fhir.us.udap-security_1.0.0@23',
24
+ 'hl7.fhir.us.udap-security_1.0.0@24',
25
+ 'hl7.fhir.us.udap-security_1.0.0@25',
26
+ 'hl7.fhir.us.udap-security_1.0.0@26'
27
+
23
28
  run do
24
29
  assert_valid_json(udap_well_known_metadata_json)
25
30
  config = JSON.parse(udap_well_known_metadata_json)
@@ -11,6 +11,8 @@ module UDAPSecurityTestKit
11
11
 
12
12
  input :udap_well_known_metadata_json
13
13
 
14
+ verifies_requirements 'hl7.fhir.us.udap-security_1.0.0@22'
15
+
14
16
  run do
15
17
  assert_valid_json(udap_well_known_metadata_json)
16
18
  config = JSON.parse(udap_well_known_metadata_json)
@@ -8,6 +8,7 @@ module UDAPSecurityTestKit
8
8
  AUTH_SERVER_PATH = '/auth'
9
9
  REGISTRATION_PATH = "#{AUTH_SERVER_PATH}/register".freeze
10
10
  AUTHORIZATION_PATH = "#{AUTH_SERVER_PATH}/authorization".freeze
11
+ INTROSPECTION_PATH = "#{AUTH_SERVER_PATH}/introspect".freeze
11
12
  TOKEN_PATH = "#{AUTH_SERVER_PATH}/token".freeze
12
13
  RESUME_PASS_PATH = '/resume_pass'
13
14
  RESUME_FAIL_PATH = '/resume_fail'
@@ -41,6 +42,10 @@ module UDAPSecurityTestKit
41
42
  @client_authorization_url ||= client_base_url + AUTHORIZATION_PATH
42
43
  end
43
44
 
45
+ def client_introspection_url
46
+ @client_introspection_url ||= client_base_url + INTROSPECTION_PATH
47
+ end
48
+
44
49
  def client_token_url
45
50
  @client_token_url ||= client_base_url + TOKEN_PATH
46
51
  end
@@ -1,4 +1,4 @@
1
1
  module UDAPSecurityTestKit
2
- VERSION = '0.11.4'.freeze
3
- LAST_UPDATED = '2025-05-02'.freeze
2
+ VERSION = '0.11.6'.freeze
3
+ LAST_UPDATED = '2025-06-26'.freeze
4
4
  end
@@ -28,6 +28,10 @@ module UDAPSecurityTestKit
28
28
  output :udap_well_known_metadata_json
29
29
  makes_request :config
30
30
 
31
+ verifies_requirements 'hl7.fhir.us.udap-security_1.0.0@12',
32
+ 'hl7.fhir.us.udap-security_1.0.0@13',
33
+ 'hl7.fhir.us.udap-security_1.0.0@14'
34
+
31
35
  run do
32
36
  uri = URI.parse("#{udap_fhir_base_url.strip.chomp('/')}/.well-known/udap")
33
37
  unless udap_community_parameter.blank?
@@ -32,6 +32,14 @@ module UDAPSecurityTestKit
32
32
  (which is not a required capability).
33
33
  )
34
34
 
35
+ requirement_sets(
36
+ {
37
+ identifier: 'hl7.fhir.us.udap-security_1.0.0',
38
+ title: 'Security for Scalable Registration, Authentication, and Authorization (UDAP)',
39
+ actor: 'Server'
40
+ }
41
+ )
42
+
35
43
  input_instructions %(
36
44
  This menu will execute tests for both OAuth flows.
37
45
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: udap_security_test_kit
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.11.4
4
+ version: 0.11.6
5
5
  platform: ruby
6
6
  authors:
7
7
  - Stephen MacVicar
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2025-05-02 00:00:00.000000000 Z
12
+ date: 2025-06-26 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: inferno_core
@@ -17,14 +17,14 @@ dependencies:
17
17
  requirements:
18
18
  - - ">="
19
19
  - !ruby/object:Gem::Version
20
- version: 0.6.1
20
+ version: 0.6.15
21
21
  type: :runtime
22
22
  prerelease: false
23
23
  version_requirements: !ruby/object:Gem::Requirement
24
24
  requirements:
25
25
  - - ">="
26
26
  - !ruby/object:Gem::Version
27
- version: 0.6.1
27
+ version: 0.6.15
28
28
  - !ruby/object:Gem::Dependency
29
29
  name: jwt
30
30
  requirement: !ruby/object:Gem::Requirement
@@ -93,9 +93,11 @@ files:
93
93
  - lib/udap_security_test_kit/endpoints/echoing_fhir_responder_endpoint.rb
94
94
  - lib/udap_security_test_kit/endpoints/mock_udap_server.rb
95
95
  - lib/udap_security_test_kit/endpoints/mock_udap_server/authorization_endpoint.rb
96
+ - lib/udap_security_test_kit/endpoints/mock_udap_server/introspection_endpoint.rb
96
97
  - lib/udap_security_test_kit/endpoints/mock_udap_server/registration_endpoint.rb
97
98
  - lib/udap_security_test_kit/endpoints/mock_udap_server/token_endpoint.rb
98
99
  - lib/udap_security_test_kit/endpoints/mock_udap_server/udap_authorization_response_creation.rb
100
+ - lib/udap_security_test_kit/endpoints/mock_udap_server/udap_introspection_response_creation.rb
99
101
  - lib/udap_security_test_kit/endpoints/mock_udap_server/udap_registration_response_creation.rb
100
102
  - lib/udap_security_test_kit/endpoints/mock_udap_server/udap_token_response_creation.rb
101
103
  - lib/udap_security_test_kit/grant_types_supported_field_test.rb
@@ -108,6 +110,10 @@ files:
108
110
  - lib/udap_security_test_kit/registration_failure_invalid_jwt_signature_test.rb
109
111
  - lib/udap_security_test_kit/registration_success_contents_test.rb
110
112
  - lib/udap_security_test_kit/registration_success_test.rb
113
+ - lib/udap_security_test_kit/requirements/generated/udap_security_client_requirements_coverage.csv
114
+ - lib/udap_security_test_kit/requirements/generated/udap_security_requirements_coverage.csv
115
+ - lib/udap_security_test_kit/requirements/hl7.fhir.us.udap-security_1.0.0_reqs.xlsx
116
+ - lib/udap_security_test_kit/requirements/udap_security_test_kit_requirements.csv
111
117
  - lib/udap_security_test_kit/scopes_supported_field_test.rb
112
118
  - lib/udap_security_test_kit/signed_metadata_contents_test.rb
113
119
  - lib/udap_security_test_kit/signed_metadata_field_test.rb