Merge pull request #11 from NHSDigital/NPA-1868-set-oath-scope-to-nhs-p9

Set oauth scope for product to P9 and skipped tests pending TBCs

Author: chris-young-12-nhs

manifest_template.yml

@@ -75,8 +75,7 @@ apigee:
           - identity-service-mock-{{ ENV.name }}
 {% endif %}
         scopes:
-          - 'urn:nhsd:apim:app:level3:{{ SERVICE_NAME }}'
-          - 'urn:nhsd:apim:user-nhs-cis2:aal3:{{ SERVICE_NAME }}'
+          - 'urn:nhsd:apim:user-nhs-login:P9:{{ SERVICE_NAME }}'
     specs:
       - name: {{ NAME }}
         path: {{ SERVICE_NAME }}.json

tests/test_endpoints.py

@@ -73,20 +73,20 @@ def test_app_level0(nhsd_apim_proxy_url, nhsd_apim_auth_headers):
     resp = requests.get(f"{nhsd_apim_proxy_url}", headers=nhsd_apim_auth_headers)
     assert resp.status_code == 401  # unauthorized
 
-
+@pytest.mark.skip(reason="TBC: Are we supporting Application level 3 access to the API?")
 @pytest.mark.nhsd_apim_authorization({"access": "application", "level": "level3"})
 def test_app_level3(nhsd_apim_proxy_url, nhsd_apim_auth_headers):
     resp = requests.get(f"{nhsd_apim_proxy_url}", headers=nhsd_apim_auth_headers)
     assert resp.status_code == 200
 
-
+@pytest.mark.skip(reason="Requires API key to be shared with proxy and decision on endpoint and user to use")
 @pytest.mark.nhsd_apim_authorization(
     {
-        "access": "healthcare_worker",
-        "level": "aal3",
-        "login_form": {"username": "656005750104"},
+        "access": "patient",
+        "level": "P9",
+        "login_form": {"username": "TBC"}
     }
 )
-def test_cis2_aal3(nhsd_apim_proxy_url, nhsd_apim_auth_headers):
+def test_nhs_login_p9(nhsd_apim_proxy_url, nhsd_apim_auth_headers):
     resp = requests.get(f"{nhsd_apim_proxy_url}", headers=nhsd_apim_auth_headers)
     assert resp.status_code == 200