Class: DaVinciPASTestKit::SubscriptionCreateEndpoint

Inherits:
Inferno::DSL::SuiteEndpoint
  • Object
show all
Includes:
SubscriptionsTestKit::SubscriptionsR5BackportR4Client::SubscriptionSimulationUtils
Defined in:
lib/davinci_pas_test_kit/endpoints/subscription_create_endpoint.rb

Instance Method Summary collapse

Instance Method Details

#find_heartbeat_period(subscription) ⇒ Object 



93
94
95
96
97
98
99
 
# File 'lib/davinci_pas_test_kit/endpoints/subscription_create_endpoint.rb', line 93

def find_heartbeat_period(subscription)
  return unless subscription.present?

  subscription.channel&.extension&.find do |e|
    e.url == 'http://hl7.org/fhir/uv/subscriptions-backport/StructureDefinition/backport-heartbeat-period'
  end
end

#make_response ⇒ Object 



17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
 
# File 'lib/davinci_pas_test_kit/endpoints/subscription_create_endpoint.rb', line 17

def make_response
  if UDAPSecurityTestKit::MockUDAPServer.request_has_expired_token?(request)
    UDAPSecurityTestKit::MockUDAPServer.update_response_for_expired_token(response, 'Bearer token')
    return
  end

  response.format = :json
  response.status = 400

  begin
    subscription = FHIR.from_contents(request.body.string)
  rescue StandardError
    response.body = operation_outcome('error', 'invalid', 'No recognized R4 Subscription in request body').to_json
    return
  end

  verification_outcome = verify_subscription(subscription)
  if verification_outcome.present?
    response.body = verification_outcome.to_json
    return
  end

  # Deny subscription if one already created
  requests = requests_repo.tagged_requests(test_run.test_session_id, tags)
  existing_subscription_request = requests.find { |r| r.status == 201 }
  if existing_subscription_request.present?
    subscription_hash = JSON.parse(existing_subscription_request.response_body)
    error_text = 'Inferno only supports one subscription per test run. Subscription already created with ' \
                 "ID #{subscription_hash['id']}"
    response.body = operation_outcome('error', 'business-rule', error_text).to_json
    return
  end

  # Form response
  notification_json = nil # no notification
  subscription_id = SecureRandom.uuid
  # We have to manipulate the raw hash so that we don't lose the _payload primitive extension
  subscription_hash = JSON.parse(request.body.string).merge('id' => subscription_id, 'status' => 'requested')
  subscription_hash['channel']['payload'] = actual_mime_type(subscription)
  response.status = 201
  response.body = subscription_hash.to_json

  # Kick off handshake job
  subscription_url = "#{request.url}/#{subscription_id}"
  client_endpoint = subscription.channel.endpoint
  bearer_token = client_access_token_input(result)
  test_suite_base_url = request.url.chomp('/').chomp(FHIR_SUBSCRIPTION_PATH)
  if request.params[:session_path].present?
    test_suite_base_url = test_suite_base_url.chomp(request.params[:session_path]).chomp('/')
  end
  Inferno::Jobs.perform(Jobs::SendSubscriptionHandshake, test_run.id, test_run.test_session_id, result.id,
                        subscription_id, subscription_url, client_endpoint, bearer_token, notification_json,
                        test_run_identifier, test_suite_base_url)
end

#tags ⇒ Object 



72
73
74
 
# File 'lib/davinci_pas_test_kit/endpoints/subscription_create_endpoint.rb', line 72

def tags
  [SUBSCRIPTION_CREATE_TAG]
end

#test_run_identifier ⇒ Object 



9
10
11
12
13
14
15
 
# File 'lib/davinci_pas_test_kit/endpoints/subscription_create_endpoint.rb', line 9

def test_run_identifier
  return request.params[:session_path] if request.params[:session_path].present?

  UDAPSecurityTestKit::MockUDAPServer.issued_token_to_client_id(
    request.headers['authorization']&.delete_prefix('Bearer ')
  )
end

#valid_url?(url) ⇒ Boolean

Returns:

  • (Boolean) 


101
102
103
104
105
106
 
# File 'lib/davinci_pas_test_kit/endpoints/subscription_create_endpoint.rb', line 101

def valid_url?(url)
  uri = URI.parse(url)
  %w[http https].include?(uri.scheme)
rescue URI::InvalidURIError
  false
end

#verify_subscription(subscription) ⇒ Object 



76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
 
# File 'lib/davinci_pas_test_kit/endpoints/subscription_create_endpoint.rb', line 76

def verify_subscription(subscription)
  unless subscription.is_a? FHIR::Subscription
    return operation_outcome('error', 'invalid', 'No recognized R4 Subscription in request body')
  end

  unless subscription.channel&.type == 'rest-hook'
    return operation_outcome('error', 'business-rule', 'channel.type must be rest-hook')
  end

  unless valid_url?(subscription.channel&.endpoint)
    return operation_outcome('error', 'value', 'channel.endpoint is not recognized as a conformant URL')
  end

  heartbeat_period = find_heartbeat_period(subscription)
  operation_outcome('error', 'not-supported', 'heartbeatPeriod is not supported') unless heartbeat_period.nil?
end