RubyGems - udap_security_test_kit - Versions diffs - 0.11.6 → 0.12.0 - Mend

udap_security_test_kit 0.11.6 → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (79) hide show

data/lib/udap_security_test_kit/visual_inspection_and_attestation/server/security_measures_group.rb ADDED Viewed

@@ -0,0 +1,17 @@
+require_relative 'security_measures_group/csrf_protection_test'
+require_relative 'security_measures_group/state_parameter_test'
+require_relative 'security_measures_group/obtain_authorization_scopes_test'
+require_relative 'security_measures_group/unauthenticated_client_security_test'
+module UDAPSecurityTestKit
+  class SecurityMeasuresAttestationGroup < Inferno::TestGroup
+    id :udap_server_v100_security_measures_group
+    title 'Security Measures'
+    run_as_group
+    test from: :udap_security_csrf_protection
+    test from: :udap_security_state_parameter_management
+    test from: :udap_security_unauthenticated_clients
+    test from: :udap_security_user_authorization
+  end
+end

data/lib/udap_security_test_kit/visual_inspection_and_attestation/server_attestation_group.rb ADDED Viewed

@@ -0,0 +1,33 @@
+require_relative 'server/metadata_server_capabilities_group'
+require_relative 'server/client_authentication_group'
+require_relative 'server/dynamic_client_registration_group'
+require_relative 'server/authorization_code_token_requests_group'
+require_relative 'server/authentication_requests_group'
+require_relative 'server/id_token_access_token_validation_group'
+require_relative 'server/error_handling_group'
+require_relative 'server/security_measures_group'
+require_relative 'server/identity_provider_interaction_group'
+require_relative 'server/jwt_security_group'
+module UDAPSecurityTestKit
+  class ServerAttestationGroup < Inferno::TestGroup
+    id :udap_server_v100_visual_inspection_and_attestation
+    title 'Visual Inspection and Attestation'
+    optional
+    description <<~DESCRIPTION
+      Perform visual inspections or attestations to ensure that the Server is conformant to the UDAP IG requirements.
+    DESCRIPTION
+    group from: :udap_server_v100_metadata_server_capabilities_group
+    group from: :udap_server_v100_dynamic_client_registration_group
+    group from: :udap_server_v100_authorization_code_token_requests_group
+    group from: :udap_server_v100_authentication_requests_group
+    group from: :udap_server_v100_id_token_access_token_validation_group
+    group from: :udap_server_v100_error_handling_group
+    group from: :udap_server_v100_security_measures_group
+    group from: :udap_server_v100_client_authentication_group
+    group from: :udap_server_v100_jwt_security_group
+    group from: :udap_server_v100_identity_provider_interaction_group
+  end
+end

data/lib/udap_security_test_kit.rb CHANGED Viewed

@@ -3,6 +3,7 @@ require_relative 'udap_security_test_kit/authorization_code_group'
 require_relative 'udap_security_test_kit/client_credentials_group'
 require_relative 'udap_security_test_kit/redirect_uri'
 require_relative 'udap_security_test_kit/metadata'
+require_relative 'udap_security_test_kit/visual_inspection_and_attestation/server_attestation_group'
 module UDAPSecurityTestKit
   class Suite < Inferno::TestSuite
@@ -93,5 +94,6 @@ module UDAPSecurityTestKit
     group from: :udap_authorization_code_group
     group from: :udap_client_credentials_group
+    group from: :udap_server_v100_visual_inspection_and_attestation
   end
 end

metadata CHANGED Viewed

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: udap_security_test_kit
 version: !ruby/object:Gem::Version
-  version: 0.11.6
+  version: 0.12.0
 platform: ruby
 authors:
 - Stephen MacVicar
@@ -9,22 +9,28 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-06-26 00:00:00.000000000 Z
+date: 2025-07-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: inferno_core
   requirement: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.6.15
+        version: 1.0.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.6.15
+        version: 1.0.2
 - !ruby/object:Gem::Dependency
   name: jwt
   requirement: !ruby/object:Gem::Requirement
@@ -110,6 +116,7 @@ files:
 - lib/udap_security_test_kit/registration_failure_invalid_jwt_signature_test.rb
 - lib/udap_security_test_kit/registration_success_contents_test.rb
 - lib/udap_security_test_kit/registration_success_test.rb
+- lib/udap_security_test_kit/requirements/generated/udap-security-test-kit_requirements_coverage.csv
 - lib/udap_security_test_kit/requirements/generated/udap_security_client_requirements_coverage.csv
 - lib/udap_security_test_kit/requirements/generated/udap_security_requirements_coverage.csv
 - lib/udap_security_test_kit/requirements/hl7.fhir.us.udap-security_1.0.0_reqs.xlsx
@@ -138,6 +145,76 @@ files:
 - lib/udap_security_test_kit/udap_x509_certificate.rb
 - lib/udap_security_test_kit/urls.rb
 - lib/udap_security_test_kit/version.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/b2b_authorization_extension_object_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/client_authorization_code_usage_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/client_security_csrf_protection_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/cryptographic_algorithms_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/data_holder_auth_request_scope_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/idp_authentication_compliance_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/idp_supports_required_scopes_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/jti_reuse_prevention_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/metadata_interpretation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/oauth2_protocol_compliance_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/preferred_identity_provider_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/private_key_authentication_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/resource_holder_authentication_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/software_statement_registration_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/token_request_authentication_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/trust_community_query_parameters_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client/validation_confidentiality_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/client_attestation_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/authentication_requests_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/authentication_requests_group/authentication_request_construction_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/authentication_requests_group/authentication_request_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/authorization_code_token_requests_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/authorization_code_token_requests_group/access_token_lifetime_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/authorization_code_token_requests_group/access_token_request_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/authorization_code_token_requests_group/authorization_code_usage_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/authorization_code_token_requests_group/resource_holder_authorization_flow_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/client_authentication_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/client_authentication_group/client_certificate_storage_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/client_authentication_group/no_client_credentials_native_apps_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/dynamic_client_registration_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/dynamic_client_registration_group/certification_handling_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/dynamic_client_registration_group/client_id_modification_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/dynamic_client_registration_group/dynamic_client_registration_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group/deny_token_request_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group/general_error_response_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group/invalid_id_token_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group/invalid_idp_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group/invalid_redirection_uri_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group/prompt_none_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group/state_mismatch_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group/unauthenticated_user_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/error_handling_group/valid_state_error_response_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/id_token_access_token_validation_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/id_token_access_token_validation_group/access_token_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/id_token_access_token_validation_group/id_token_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/id_token_access_token_validation_group/token_response_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/identity_provider_interaction_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/identity_provider_interaction_group/idp_authentication_request_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/identity_provider_interaction_group/idp_dynamic_registration_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/identity_provider_interaction_group/idp_metadata_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/identity_provider_interaction_group/idp_token_exchange_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/jwt_security_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/jwt_security_group/jwt_certificate_chain_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/jwt_security_group/jwt_grant_parameter_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/jwt_security_group/jwt_jti_reuse_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/jwt_security_group/jwt_signature_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/jwt_security_group/jwt_token_request_validation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/metadata_server_capabilities_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/metadata_server_capabilities_group/udap_authorization_extensions_required_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/metadata_server_capabilities_group/udap_community_parameter_support_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/metadata_server_capabilities_group/udap_metadata_endpoint_error_handling_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/metadata_server_capabilities_group/udap_metadata_representation_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/metadata_server_capabilities_group/udap_profiles_supported_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/security_measures_group.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/security_measures_group/csrf_protection_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/security_measures_group/obtain_authorization_scopes_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/security_measures_group/state_parameter_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server/security_measures_group/unauthenticated_client_security_test.rb
+- lib/udap_security_test_kit/visual_inspection_and_attestation/server_attestation_group.rb
 - lib/udap_security_test_kit/well_known_endpoint_test.rb
 homepage: https://github.com/inferno-framework/udap-security-test-kit
 licenses: