|
|
01-HL7-UDAP-OIDC-Full-Workflow
|
3 |
Happy Path: Demonstrate the full UDAP OIDC workflow:
Discovery, Registration, Authorization, and UserInfo access
between a client and an Identity Provider. This may be done
standalone, or as part of a UDAP Tiered OAuth workflow if not
testing the communication between the Client App and Data Holder.
If testing all three parties of Tiered OAuth, please use
the Tiered OAuth tests instead.
Test System Details (in order of appearance):
[Origin 1: The Client's RESTful client. System Under Test: this must be an external test system (not Touchstone).]
[Destination 1: The Identity Provider's OAuth Resource Server (i.e. where UDAP metadata is available at <base>/.well-known/udap, and a RESTful FHIR Server at <base> if appropriate). System Under Test: this must be an external test system (not a mock).]
[Destination 2: The Identity Provider's UDAP OAuth Authorization Server. System Under Test: this must be an external test system (not a mock).]
[Origin 2: The Client's system running the user agent (i.e. browser). System Under Test: this must be an external test system (not Touchstone).]
[Destination 3: The Identity Provider's OIDC Server (i.e. where OIDC metadata is available at <base>/.well-known/openid-configuration). System Under Test: this must be an external test system (not a mock).] |
JSON |
6 |
FHIR 4.0.1
|
|
|
02-HL7-UDAP-OIDC-Authorize-And-Get-UserInfo
|
3 |
Happy Path: Demonstrate UDAP OIDC workflow:
Authorization and UserInfo access
between a client and an Identity Provider. Discovery and
Registration are prerequisites. This may be done
standalone, or as part of a UDAP Tiered OAuth workflow if not
testing the communication between the Client App and Data Holder.
If testing all three parties of Tiered OAuth, please use
the Tiered OAuth tests instead.
Test System Details (in order of appearance):
[Origin 1: The Client's system running the user agent (i.e. browser). System Under Test: this must be an external test system (not Touchstone).]
[Destination 1: The Server's UDAP OAuth Authorization Server. System Under Test: this must be an external test system (not a mock).]
[Origin 2: The Client's RESTful client. System Under Test: this must be an external test system (not Touchstone).]
[Destination 2: The Server's OIDC Server (i.e. where OIDC metadata is available at <base>/.well-known/openid-configuration). System Under Test: this must be an external test system (not a mock).] |
JSON |
3 |
FHIR 4.0.1
|
|
|
03-HL7-UDAP-OIDC-Authorize-And-Get-ID-Token-With-UserInfo
|
3 |
Happy Path: Demonstrate UDAP OIDC workflow:
Authorization, obtaining an access token and ID token that includes
UserInfo claims,
between a client and an Identity Provider. Discovery and
Registration are prerequisites. This may be done
standalone, or as part of a UDAP Tiered OAuth workflow if not
testing the communication between the Client App and Data Holder.
If testing all three parties of Tiered OAuth, please use
the Tiered OAuth tests instead.
Test System Details (in order of appearance):
[Origin 1: The Client's system running the user agent (i.e. browser). System Under Test: this must be an external test system (not Touchstone).]
[Destination 1: The Server's UDAP OAuth Authorization Server. System Under Test: this must be an external test system (not a mock).]
[Origin 2: The Client's RESTful client. System Under Test: this must be an external test system (not Touchstone).] |
JSON |
2 |
FHIR 4.0.1
|