@haste-health/haste-health.fhir.r4.core 0.7.7

package/definitions/haste-health/structuredefinition/access_policy_v2.json

@@ -0,0 +1,377 @@
+{
+    "resourceType": "StructureDefinition",
+    "id": "AccessPolicyV2",
+    "url": "https://haste-health.com/StructureDefinition/AccessPolicyV2",
+    "version": "4.0.1",
+    "name": "AccessPolicyV2",
+    "status": "active",
+    "publisher": "haste-health",
+    "fhirVersion": "4.0.1",
+    "kind": "resource",
+    "abstract": false,
+    "type": "AccessPolicyV2",
+    "description": "A set of rules that govern how a system resource is accessed and used. This access policy is based around XACML https://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.html#_Toc325047092",
+    "baseDefinition": "http://hl7.org/fhir/StructureDefinition/Resource",
+    "derivation": "specialization",
+    "snapshot": {
+        "element": [
+            {
+                "id": "AccessPolicyV2",
+                "path": "AccessPolicyV2",
+                "min": 0,
+                "definition": "A set of rules that govern how a system resource is accessed and used.",
+                "max": "*",
+                "base": {
+                    "path": "AccessPolicyV2",
+                    "min": 0,
+                    "max": "*"
+                },
+                "isModifier": false,
+                "isSummary": false
+            },
+            {
+                "id": "AccessPolicyV2.id",
+                "path": "AccessPolicyV2.id",
+                "short": "Logical id of this artifact",
+                "definition": "The logical id of the resource, as used in the URL for the resource. Once assigned, this value never changes.",
+                "comment": "The only time that a resource does not have an id is when it is being submitted to the server using a create operation.",
+                "min": 0,
+                "max": "1",
+                "base": {
+                    "path": "Resource.id",
+                    "min": 0,
+                    "max": "1"
+                },
+                "type": [
+                    {
+                        "extension": [
+                            {
+                                "url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-fhir-type",
+                                "valueUrl": "string"
+                            }
+                        ],
+                        "code": "http://hl7.org/fhirpath/System.String"
+                    }
+                ],
+                "isModifier": false,
+                "isSummary": true
+            },
+            {
+                "id": "AccessPolicyV2.meta",
+                "path": "AccessPolicyV2.meta",
+                "short": "Metadata about the resource",
+                "definition": "The metadata about the resource. This is content that is maintained by the infrastructure. Changes to the content might not always be associated with version changes to the resource.",
+                "min": 0,
+                "max": "1",
+                "base": {
+                    "path": "Resource.meta",
+                    "min": 0,
+                    "max": "1"
+                },
+                "type": [
+                    {
+                        "code": "Meta"
+                    }
+                ],
+                "constraint": [
+                    {
+                        "key": "ele-1",
+                        "severity": "error",
+                        "human": "All FHIR elements must have a @value or children",
+                        "expression": "hasValue() or (children().count() > id.count())",
+                        "xpath": "@value|f:*|h:div",
+                        "source": "http://hl7.org/fhir/StructureDefinition/Element"
+                    }
+                ],
+                "isModifier": false,
+                "isSummary": true
+            },
+            {
+                "id": "AccessPolicyV2.name",
+                "path": "AccessPolicyV2.name",
+                "definition": "The name of the access policy.",
+                "short": "The name of the access policy.",
+                "type": [
+                    {
+                        "code": "string"
+                    }
+                ],
+                "min": 1,
+                "max": "1"
+            },
+            {
+                "id": "AccessPolicyV2.description",
+                "path": "AccessPolicyV2.description",
+                "definition": "Description of the access policy.",
+                "short": "Description of the access policy.",
+                "type": [
+                    {
+                        "code": "string"
+                    }
+                ],
+                "min": 0,
+                "max": "1"
+            },
+            {
+                "id": "AccessPolicyV2.engine",
+                "path": "AccessPolicyV2.engine",
+                "definition": "The type of evaluation that is performed to determine if access is granted or denied.",
+                "short": "The type of evaluation that is performed to determine if access is granted or denied.",
+                "type": [
+                    {
+                        "code": "code"
+                    }
+                ],
+                "min": 1,
+                "max": "1",
+                "binding": {
+                    "strength": "required",
+                    "valueSet": "https://haste.health/fhir/ValueSet/AccessPolicyEngineV2|4.0.1"
+                }
+            },
+            {
+                "id": "AccessPolicyV2.attribute",
+                "path": "AccessPolicyV2.attribute",
+                "definition": "Attributes to use for the policy evaluation.",
+                "short": "Attributes to use for the policy evaluation.",
+                "type": [
+                    {
+                        "code": "BackboneElement"
+                    }
+                ],
+                "min": 0,
+                "max": "15"
+            },
+            {
+                "id": "AccessPolicyV2.attribute.attributeId",
+                "path": "AccessPolicyV2.attribute.attributeId",
+                "definition": "The id of the attribute referenced using %attributeId in expressions.",
+                "short": "The id of the attribute referenced using %attributeId in expressions.",
+                "type": [
+                    {
+                        "code": "id"
+                    }
+                ],
+                "min": 1,
+                "max": "1"
+            },
+            {
+                "id": "AccessPolicyV2.attribute.operation",
+                "path": "AccessPolicyV2.attribute.operation",
+                "definition": "The operation to retrieve the attribute.",
+                "short": "The operation to retrieve the attribute.",
+                "min": 0,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "BackboneElement"
+                    }
+                ]
+            },
+            {
+                "id": "AccessPolicyV2.attribute.operation.type",
+                "path": "AccessPolicyV2.attribute.operation.type",
+                "definition": "The operation to retrieve the attribute.",
+                "short": "The operation to retrieve the attribute.",
+                "min": 1,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "code"
+                    }
+                ],
+                "binding": {
+                    "strength": "required",
+                    "description": "The allowable operation code types.",
+                    "valueSet": "https://haste.health/fhir/ValueSet/AccessPolicyAttributeOperationTypes|4.0.1"
+                }
+            },
+            {
+                "id": "AccessPolicyV2.attribute.operation.path",
+                "path": "AccessPolicyV2.attribute.operation.path",
+                "definition": "The operation to retrieve the attribute.",
+                "short": "The operation to retrieve the attribute.",
+                "min": 0,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "Expression"
+                    }
+                ]
+            },
+            {
+                "id": "AccessPolicyV2.attribute.operation.params",
+                "path": "AccessPolicyV2.attribute.operation.params",
+                "definition": "The operation to retrieve the attribute.",
+                "short": "The operation to retrieve the attribute.",
+                "min": 0,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "Expression"
+                    }
+                ]
+            },
+            {
+                "id": "AccessPolicyV2.rule",
+                "path": "AccessPolicyV2.rule",
+                "definition": "The rules that govern how the access policy is applied.",
+                "short": "The rules that govern how the access policy is applied.",
+                "type": [
+                    {
+                        "code": "BackboneElement"
+                    }
+                ],
+                "min": 0,
+                "max": "*"
+            },
+            {
+                "id": "AccessPolicyV2.rule.name",
+                "path": "AccessPolicyV2.rule.name",
+                "definition": "Rule identifier",
+                "short": "Access Policy rule identifier.",
+                "min": 1,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "string"
+                    }
+                ]
+            },
+            {
+                "id": "AccessPolicyV2.rule.description",
+                "path": "AccessPolicyV2.rule.description",
+                "definition": "Rule description",
+                "short": "Rule description",
+                "min": 0,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "string"
+                    }
+                ]
+            },
+            {
+                "id": "AccessPolicyV2.rule.combineBehavior",
+                "path": "AccessPolicyV2.rule.combineBehavior",
+                "definition": "Rule combination behavior for children elements.",
+                "short": "Determine wether to use and/or to combine rules.",
+                "min": 0,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "code"
+                    }
+                ],
+                "binding": {
+                    "strength": "required",
+                    "valueSet": "https://haste.health/fhir/ValueSet/AccessPolicyV2CombineBehavior|4.0.1"
+                }
+            },
+            {
+                "id": "AccessPolicyV2.rule.effect",
+                "path": "AccessPolicyV2.rule.effect",
+                "short": "Determine whether to evaluate the rule.",
+                "min": 0,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "code"
+                    }
+                ],
+                "binding": {
+                    "strength": "required",
+                    "valueSet": "https://haste.health/fhir/ValueSet/AccessPolicyV2RuleEffect|4.0.1"
+                }
+            },
+            {
+                "id": "AccessPolicyV2.rule.target",
+                "path": "AccessPolicyV2.rule.target",
+                "short": "Determine whether to evaluate the rule.",
+                "min": 0,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "BackboneElement"
+                    }
+                ]
+            },
+            {
+                "id": "AccessPolicyV2.rule.target.expression",
+                "path": "AccessPolicyV2.rule.target.expression",
+                "short": "Determine whether to evaluate the rule.",
+                "min": 1,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "Expression"
+                    }
+                ]
+            },
+            {
+                "id": "AccessPolicyV2.rule.condition",
+                "path": "AccessPolicyV2.rule.condition",
+                "short": "Condition to evaluate determining whether pass/deny.",
+                "min": 0,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "BackboneElement"
+                    }
+                ]
+            },
+            {
+                "id": "AccessPolicyV2.rule.condition.expression",
+                "path": "AccessPolicyV2.rule.condition.expression",
+                "short": "Condition expression to evaluate determining whether pass/deny.",
+                "min": 1,
+                "max": "1",
+                "type": [
+                    {
+                        "code": "Expression"
+                    }
+                ]
+            },
+            {
+                "id": "AccessPolicyV2.rule.rule",
+                "path": "AccessPolicyV2.rule.rule",
+                "definition": "Nested rules to evaluate.",
+                "short": "Nested rules",
+                "min": 0,
+                "max": "*",
+                "contentReference": "#AccessPolicyV2.rule"
+            },
+            {
+                "id": "AccessPolicyV2.target",
+                "path": "AccessPolicyV2.target",
+                "definition": "Who the access policy applies to.",
+                "short": "Who the access policy applies to.",
+                "type": [
+                    {
+                        "code": "BackboneElement"
+                    }
+                ],
+                "min": 0,
+                "max": "*"
+            },
+            {
+                "id": "AccessPolicyV2.target.link",
+                "path": "AccessPolicyV2.target.link",
+                "definition": "Who the access policy applies to.",
+                "short": "The target reference of the access policy applies to.",
+                "type": [
+                    {
+                        "code": "Reference",
+                        "targetProfile": [
+                            "https://haste-health.com/StructureDefinition/ClientApplication",
+                            "https://haste-health.com/StructureDefinition/Membership",
+                            "http://hl7.org/fhir/StructureDefinition/OperationDefinition"
+                        ]
+                    }
+                ],
+                "min": 1,
+                "max": "1"
+            }
+        ]
+    }
+}

package/definitions/haste-health/structuredefinition/client_application.json

@@ -0,0 +1,245 @@
+{
+    "resourceType": "StructureDefinition",
+    "id": "ClientApplication",
+    "url": "https://haste-health.com/StructureDefinition/ClientApplication",
+    "version": "4.0.1",
+    "name": "ClientApplication",
+    "status": "active",
+    "publisher": "haste-health",
+    "fhirVersion": "4.0.1",
+    "description": "FHIR Implementation of Client Metadata from https://datatracker.ietf.org/doc/html/rfc7591#section-2",
+    "kind": "resource",
+    "abstract": false,
+    "type": "ClientApplication",
+    "baseDefinition": "http://hl7.org/fhir/StructureDefinition/Resource",
+    "derivation": "specialization",
+    "snapshot": {
+        "element": [
+            {
+                "id": "ClientApplication",
+                "path": "ClientApplication",
+                "min": 0,
+                "max": "*",
+                "base": {
+                    "path": "ClientApplication",
+                    "min": 0,
+                    "max": "*"
+                },
+                "isModifier": false,
+                "isSummary": false
+            },
+            {
+                "id": "ClientApplication.id",
+                "path": "ClientApplication.id",
+                "short": "Logical id of this artifact",
+                "definition": "The logical id of the resource, as used in the URL for the resource. Once assigned, this value never changes.",
+                "comment": "The only time that a resource does not have an id is when it is being submitted to the server using a create operation.",
+                "min": 0,
+                "max": "1",
+                "base": {
+                    "path": "Resource.id",
+                    "min": 0,
+                    "max": "1"
+                },
+                "type": [
+                    {
+                        "extension": [
+                            {
+                                "url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-fhir-type",
+                                "valueUrl": "string"
+                            }
+                        ],
+                        "code": "http://hl7.org/fhirpath/System.String"
+                    }
+                ],
+                "isModifier": false,
+                "isSummary": true
+            },
+            {
+                "id": "ClientApplication.meta",
+                "path": "ClientApplication.meta",
+                "short": "Metadata about the resource",
+                "definition": "The metadata about the resource. This is content that is maintained by the infrastructure. Changes to the content might not always be associated with version changes to the resource.",
+                "min": 0,
+                "max": "1",
+                "base": {
+                    "path": "Resource.meta",
+                    "min": 0,
+                    "max": "1"
+                },
+                "type": [
+                    {
+                        "code": "Meta"
+                    }
+                ],
+                "constraint": [
+                    {
+                        "key": "ele-1",
+                        "severity": "error",
+                        "human": "All FHIR elements must have a @value or children",
+                        "expression": "hasValue() or (children().count() > id.count())",
+                        "xpath": "@value|f:*|h:div",
+                        "source": "http://hl7.org/fhir/StructureDefinition/Element"
+                    }
+                ],
+                "isModifier": false,
+                "isSummary": true
+            },
+            {
+                "id": "ClientApplication.name",
+                "path": "ClientApplication.name",
+                "short": "The name of the client to be presented to the end-user.",
+                "type": [
+                    {
+                        "code": "string"
+                    }
+                ],
+                "min": 1,
+                "max": "1"
+            },
+            {
+                "id": "ClientApplication.description",
+                "path": "ClientApplication.description",
+                "short": "The description of the client to be presented to the end-user.",
+                "type": [
+                    {
+                        "code": "string"
+                    }
+                ],
+                "min": 0,
+                "max": "1"
+            },
+            {
+                "id": "ClientApplication.grantType",
+                "path": "ClientApplication.grantType",
+                "short": "Auth 2.0 grant type strings that the client can use at the token endpoint.",
+                "definition": "The grant type for this client application.",
+                "type": [
+                    {
+                        "code": "code"
+                    }
+                ],
+                "binding": {
+                    "strength": "required",
+                    "valueSet": "https://haste.health/fhir/ValueSet/ClientApplicationGrantType|4.0.1"
+                },
+                "min": 1,
+                "max": "*"
+            },
+            {
+                "id": "ClientApplication.responseTypes",
+                "path": "ClientApplication.responseTypes",
+                "short": "OAuth 2.0 response type strings that the client can use at the authorization endpoint.",
+                "type": [
+                    {
+                        "code": "code"
+                    }
+                ],
+                "binding": {
+                    "strength": "required",
+                    "valueSet": "https://haste.health/fhir/ValueSet/ClientApplicationResponseTypes|4.0.1"
+                },
+                "min": 1,
+                "max": "1"
+            },
+            {
+                "id": "ClientApplication.secret",
+                "path": "ClientApplication.secret",
+                "short": "This value is used by confidential clients to authenticate to the token endpoint, as described in OAuth 2.0 [RFC6749], Section 2.3.1.",
+                "definition": "For client credentials (or other confidential authentication methods), the client secret.",
+                "type": [
+                    {
+                        "code": "string"
+                    }
+                ],
+                "min": 0,
+                "max": "1"
+            },
+            {
+                "id": "ClientApplication.redirectUri",
+                "path": "ClientApplication.redirectUri",
+                "definition": "Array of redirection URI strings for use in redirect-based flows such as the authorization code and implicit flows.  As required by Section 2 of OAuth 2.0 [RFC6749], clients using flows with redirection MUST register their redirection URI values. Authorization servers that support dynamic registration for redirect-based flows MUST implement support for this metadata value.",
+                "short": "Array of redirection URI strings for use in redirect-based flows such as the authorization code and implicit flows.  As required by Section 2 of OAuth 2.0 [RFC6749], clients using flows with redirection MUST register their redirection URI values. Authorization servers that support dynamic registration for redirect-based flows MUST implement support for this metadata value.",
+                "type": [
+                    {
+                        "code": "string"
+                    }
+                ],
+                "min": 0,
+                "max": "5"
+            },
+            {
+                "id": "ClientApplication.uri",
+                "path": "ClientApplication.uri",
+                "short": "URL string of a web page providing information about the client.",
+                "type": [
+                    {
+                        "code": "uri"
+                    }
+                ],
+                "min": 0,
+                "max": "1"
+            },
+            {
+                "id": "ClientApplication.logoUri",
+                "path": "ClientApplication.logoUri",
+                "short": "URL string that references a logo for the client.",
+                "type": [
+                    {
+                        "code": "uri"
+                    }
+                ],
+                "min": 0,
+                "max": "1"
+            },
+            {
+                "id": "ClientApplication.scope",
+                "path": "ClientApplication.scope",
+                "short": "String containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens.",
+                "type": [
+                    {
+                        "code": "string"
+                    }
+                ],
+                "min": 0,
+                "max": "1"
+            },
+            {
+                "id": "ClientApplication.contact",
+                "path": "ClientApplication.contact",
+                "short": "Array of strings representing ways to contact people responsible for this client, typically email addresses.",
+                "type": [
+                    {
+                        "code": "ContactPoint"
+                    }
+                ],
+                "min": 0,
+                "max": "1"
+            },
+            {
+                "id": "ClientApplication.tosUri",
+                "path": "ClientApplication.tosUri",
+                "short": "URL string that points to a human-readable terms of service document for the client that describes a contractual relationship between the end-user and the client that the end-user accepts when authorizing the client.",
+                "type": [
+                    {
+                        "code": "uri"
+                    }
+                ],
+                "min": 0,
+                "max": "1"
+            },
+            {
+                "id": "ClientApplication.policyUri",
+                "path": "ClientApplication.policyUri",
+                "short": "URL string that points to a human-readable privacy policy document that describes how the deployment organization collects, uses, retains, and discloses personal data.",
+                "type": [
+                    {
+                        "code": "uri"
+                    }
+                ],
+                "min": 0,
+                "max": "1"
+            }
+        ]
+    }
+}