Issue/317 endpoint thumbprints #318
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
- versions to 2.0.0 - thumbprint extension optionally allowed for Endpoint resources - formatting
- Identity classes now include a field for the associated Endpoint resource. For a remote user authenticated by client certificate the code tries to find the matching Endpoint resource by looking for an Endpoint in the Database with a matching thumbprint, if no resource is found and only one Endpoint exists for the matched organization, the matching Endpoint resource is used. If there are multiple Endpoint resources for the matched organization, no Endpoint is returned and the Task authorization code falls back to the old behavior of using all ActivityDefinition resources of the organization, to allow Task creates. For the local client certificate or "practitioner" users the local Endpoint based on the baseUrl address is used. - When retrieving OrganizationAffiliation resources in the TaskAuthorizationRule for the requester and recipient, the associated Endpoint (if known) is used to query the DB more precisely. - Plugin loading code modified to change the baseDefinition property of StructureDefinition resource for Task profiles. The baseDefinition may not include a version in order for the Base-Task profile to be updated to version 2.0.0. Process plugins usually do not specify the Base-Task version specific. - OrganizationAffiliationHistoryIdentityFilter inheritance fix with no change to the behavior. - Some additional tests, code cleanup, incl. class to record conversions.
Since no FHIR endpoint information is needed for authentication at the BPE, the BPE IdentityProviderImpl always returns Optional.empty() in the getLocalEndpoint() method.
schwzr
approved these changes
May 28, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Modifications to support optional thumbprints on Endpoint resource
DELETEentries missing from final bundle.closes #317