We are facing an issue with Inferno related to scopes.

[iamshoaibIismail]

Hello Everyone,

We are facing an issue with Inferno related to SMART scopes.

By default, Inferno loads a predefined set of scopes in the test run popup. However, the newly added scopes are not included there (Blue one in below SS). This is not a major issue, as we are able to add those scopes manually.

The problem occurs during the EHR launch flow. When the app is launched from the EHR with a specific event, these newly added scopes are not included automatically. As a result, the Inferno tests fail due to missing scopes.
Please refer to the screenshot below for more details on the error we are encountering.

[karlnaden]

I took a look at this issue and tried to reproduce what you are seeing when running against the Inferno Reference Server.

I pulled the scopes list from your screenshot (launch openid fhirUser offline_access user/Medication.read user/AllergyIntolerance.read user/CarePlan.read user/CareTeam.read user/Condition.read user/Device.read user/DiagnosticReport.read user/DocumentReference.read user/Encounter.read user/Goal.read user/Immunization.read user/Location.read user/MedicationRequest.read user/Observation.read user/Organization.read user/Patient.read user/Practitioner.read user/Procedure.read user/Provenance.read user/PractitionerRole.read user/MedicationDispense.read user/ServiceRequest.read user/Specimen.read) and used them as the value for input ehr_smart_auth_info (the "Scopes" sub-input under the "EHR Launch Credentials" input) and granted all requested scopes when performing the authorization. As you can see from the results in this test session and screenshot, test 3.3.10 failed because the required scope for Coverage was not granted.

Looking at your scopes list, Coverage is not present. ServiceRequest, MedicationDispense, and Specimen do appear in your requested scopes and at least in the case of the Reference Server, those requested scopes were communicated and I was able to grant them during authorization.

To see if I could reproduce exactly your test results, I tried again in this session, but when authorizing I chose not to grant the ServiceRequest, MedicationDispense, and Specimen scopes:

This produced exactly your failure:

Note the warning on test 3.3.8 indicating that 3 scopes may have been denied by the user, which is exactly what I did. Your screenshot indicates a warning on that test as well that I expect is the same one.

Based on that, it looks to me like Inferno is correctly communicating the scopes in the input during the ehr launch. I would add the Coverage scope to your requested list and double check your authorization step to make sure that you're granting all of the requested scopes and see if that works. If not, check that your system is processing the requested scopes correctly.

Let me know if you agree with this assessment or if you have other evidence that Inferno is communicating the requested scopes incorrectly.

[karlnaden]

With regards to the default requested scopes being incorrect. We are aware of that limitation, but don't currently have a way to change the default based on the chosen suite options and including additional resources by default causes earlier versions to fail. We may be able to move the bar up as earlier versions are no longer allowed - I will check on that.

In the meantime, if you'd like the correct set of scopes defaulted in, you can start by applying the Inferno Reference Server Preset, which will update the inputs to the right scopes for the chosen US Core version. You'll then need to replace other input values to make them point to and appropriate for your system. Hope that helps.