feat: begin implementation of SMART on FHIR (#1)

.eslintignore

@@ -0,0 +1 @@
+lib/

.eslintrc.js

@@ -0,0 +1,39 @@
+/* 
+ *  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ *  SPDX-License-Identifier: Apache-2.0
+ */
+
+module.exports = {
+    parser: '@typescript-eslint/parser', // Specifies the ESLint parser
+    extends: [
+        'airbnb-base',
+        'prettier/@typescript-eslint', // Uses eslint-config-prettier to disable ESLint rules from @typescript-eslint/eslint-plugin that would conflict with prettier
+        'plugin:prettier/recommended', // Enables eslint-plugin-prettier and displays prettier errors as ESLint errors. Make sure this is always the last configuration in the extends array.
+    ],
+    plugins: ['@typescript-eslint'],
+    parserOptions: {
+        ecmaVersion: 2018, // Allows for the parsing of modern ECMAScript features
+        sourceType: 'module', // Allows for the use of imports
+    },
+    rules: {
+        'import/extensions': ['error', 'ignorePackages', { ts: 'never' }],
+        'no-console': ['warn', { allow: ['log', 'error'] }],
+        'no-unused-vars': 'off',
+        '@typescript-eslint/no-unused-vars': 'error',
+        'no-useless-constructor': 'off',
+        '@typescript-eslint/no-useless-constructor': 'error',
+        'no-empty-function': 'off',
+        '@typescript-eslint/no-empty-function': 'error',
+        'import/no-extraneous-dependencies': ['error', { devDependencies: ['**/*.test.ts'] }],
+    },
+    settings: {
+        'import/resolver': {
+            node: {
+                extensions: ['.ts'],
+            },
+        },
+    },
+    env: {
+        jest: true,
+    },
+};

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,5 @@
+Issue #, if available:
+
+Description of changes:
+
+By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

.github/no-response.yaml

@@ -0,0 +1,18 @@
+#
+#  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#  SPDX-License-Identifier: Apache-2.0
+#
+
+# Configuration for probot-no-response - https://github.com/probot/no-response
+
+# Number of days of inactivity before an Issue is closed for lack of response
+daysUntilClose: 7
+# Label requiring a response
+responseRequiredLabel: closing-soon-if-no-response
+# Comment to post when closing an Issue for lack of response. Set to `false` to disable
+closeComment: >
+  This issue has been automatically closed because there has been no response
+  to our request for more information from the original author. With only the
+  information that is currently in the issue, we don't have enough information
+  to take action. Please reach out if you have or find the answers we need so
+  that we can investigate further.

.github/workflows/unit-test.yaml

@@ -0,0 +1,29 @@
+#
+#  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#  SPDX-License-Identifier: Apache-2.0
+#
+
+name: Unit Test
+on:
+  pull_request:
+    branches:
+      - mainline
+jobs:
+  unit-test:
+    name: Unit Test and Linting
+    runs-on: ubuntu-18.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Use Node.js
+        uses: actions/setup-node@v1
+        with:
+          node-version: 12
+      - name: Install dependencies
+        run: yarn install
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - name: Lint
+        run: yarn lint
+      - name: Unit tests
+        run: yarn test

.gitignore

@@ -0,0 +1,22 @@
+/.serverless
+/.vscode
+!/.gitignore
+/build
+/node_modules
+# Ignore any zip files
+*.zip
+
+Info_Output.yml
+dist
+lib
+.build
+.idea
+yarn-error.log
+
+coverage
+##############################
+## local Development
+##############################
+serverless-output.yml
+serverless-output.yaml
+serverless_config.json

.npmignore

@@ -0,0 +1,18 @@
+# Don't include original .ts files when doing `npm pack`
+*.ts
+!*.template.ts
+!*.d.ts
+coverage
+.nyc_output
+*.tgz
+
+src
+dist
+*.tsbuildinfo
+tsconfig.json
+.eslintrc.js
+.eslintignore
+.prettierrc.js
+.github
+CODE_OF_CONDUCT.md
+CONTRIBUTING.md

.npmrc

@@ -0,0 +1,3 @@
+# Helps with using npm package-locally, while in a yarn workflow (avoids coupling scripts to yarn).
+# This is needed because yarn goes out of it's way to ensure it controls what `node` binary is used (for good!)
+scripts-prepend-node-path=auto

.prettierrc.js

@@ -0,0 +1,20 @@
+/* 
+ *  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ *  SPDX-License-Identifier: Apache-2.0
+ */
+
+module.exports = {
+    semi: true,
+    trailingComma: 'all',
+    singleQuote: true,
+    printWidth: 120,
+    tabWidth: 4,
+    overrides: [
+        {
+            files: ['*.yml', '*.yaml', '*.json', '*.md'],
+            options: {
+                tabWidth: 2,
+            },
+        },
+    ],
+};

CHANGELOG.md

@@ -0,0 +1,9 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+## [1.0.0] - 2020-11-06
+
+### Added
+
+- Initial launch! :rocket:

CODE_OF_CONDUCT.md

@@ -1,4 +1,5 @@
 ## Code of Conduct
+
 This project has adopted the [Amazon Open Source Code of Conduct](https://aws.github.io/code-of-conduct).
 For more information see the [Code of Conduct FAQ](https://aws.github.io/code-of-conduct-faq) or contact
 opensource-codeofconduct@amazon.com with any additional questions or comments.

CONTRIBUTING.md

@@ -6,24 +6,23 @@ documentation, we greatly value feedback and contributions from our community.
 Please read through this document before submitting any issues or pull requests to ensure we have all the necessary
 information to effectively respond to your bug report or contribution.
 
-
 ## Reporting Bugs/Feature Requests
 
 We welcome you to use the GitHub issue tracker to report bugs or suggest features.
 
 When filing an issue, please check existing open, or recently closed, issues to make sure somebody else hasn't already
 reported the issue. Please try to include as much information as you can. Details like these are incredibly useful:
 
-* A reproducible test case or series of steps
-* The version of our code being used
-* Any modifications you've made relevant to the bug
-* Anything unusual about your environment or deployment
-
+- A reproducible test case or series of steps
+- The version of our code being used
+- Any modifications you've made relevant to the bug
+- Anything unusual about your environment or deployment
 
 ## Contributing via Pull Requests
+
 Contributions via pull requests are much appreciated. Before sending us a pull request, please ensure that:
 
-1. You are working against the latest source on the *main* branch.
+1. You are working against the latest source on the _mainline_ branch.
 2. You check existing open, and recently merged, pull requests to make sure someone else hasn't addressed the problem already.
 3. You open an issue to discuss any significant work - we would hate for your time to be wasted.
 
@@ -39,21 +38,22 @@ To send us a pull request, please:
 GitHub provides additional document on [forking a repository](https://help.github.com/articles/fork-a-repo/) and
 [creating a pull request](https://help.github.com/articles/creating-a-pull-request/).
 
-
 ## Finding contributions to work on
-Looking at the existing issues is a great way to find something to contribute on. As our projects, by default, use the default GitHub issue labels (enhancement/bug/duplicate/help wanted/invalid/question/wontfix), looking at any 'help wanted' issues is a great place to start.
 
+Looking at the existing issues is a great way to find something to contribute on. As our projects, by default, use the default GitHub issue labels (enhancement/bug/duplicate/help wanted/invalid/question/wontfix), looking at any 'help wanted' issues is a great place to start.
 
 ## Code of Conduct
+
 This project has adopted the [Amazon Open Source Code of Conduct](https://aws.github.io/code-of-conduct).
 For more information see the [Code of Conduct FAQ](https://aws.github.io/code-of-conduct-faq) or contact
 opensource-codeofconduct@amazon.com with any additional questions or comments.
 
-
 ## Security issue notifications
-If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/). Please do **not** create a public github issue.
 
+If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/). Please do **not** create a public github issue.
 
 ## Licensing
 
 See the [LICENSE](LICENSE) file for our project's licensing. We will ask you to confirm the licensing of your contribution.
+
+We may ask you to sign a [Contributor License Agreement (CLA)](http://en.wikipedia.org/wiki/Contributor_License_Agreement) for larger changes.

NOTICE

@@ -1 +1,2 @@
+fhir-works-on-aws-authz-smart
 Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.

README.md

@@ -1,11 +1,46 @@
-## My Project
+# fhir-works-on-aws-authz-smart
 
-TODO: Fill this README out!
+## Purpose
 
-Be sure to:
+Please visit [fhir-works-on-aws-deployment](https://github.com/awslabs/fhir-works-on-aws-deployment) for overall vision of the project and for more context.
 
-* Change the title in this README
-* Edit your repository description on GitHub
+This package is an implementation of the authorization interface from the [FHIR Works interface](https://github.com/awslabs/fhir-works-on-aws-interface). It uses the [SMART on FHIR specification](https://docs.smarthealthit.org/) to authorize users and what they request.
+
+To use and deploy this component (with the other 'out of the box' components) please follow the overall [README](https://github.com/awslabs/fhir-works-on-aws-deployment)
+
+## Infrastructure
+
+This package assumes certain infrastructure:
+
+- An [OAuth2](https://oauth.net/2/) [OpenID Connect](https://openid.net/connect/) authorization server already exists and is used as or in conjunction with an identity provider.
+  - This server complies with the [SMART on FHIR specification](https://docs.smarthealthit.org/)
+- The identity provider has a user claim (either `fhirUser` or `profile`) representing who this user is in context to this EHR.
+  - For example if a user signs in and their `fhirUser` claim is `Patient/1234`. This means that Patient resource 1234 is the record of the signed in user.
+
+## Usage
+
+For usage please add this package to your `package.json` file and install as a dependency. For usage examples please see the deployment component's [package.json](https://github.com/awslabs/fhir-works-on-aws-deployment/blob/authz-smart/package.json)
+
+### Configuration
+
+This SMART implementation is meant to be flexible. It acheives this through the [SMARTConfig](./src/smartConfig.ts). This FHIR server knows the auhtorization server by the configuration defined as OauthStrategy in the [fhirConfig.ts](https://github.com/awslabs/fhir-works-on-aws-interface/blob/mainline/src/fhirConfig.ts).
+
+### SMART on FHIR scope rules
+
+Within the [SMARTConfig](./src/smartConfig.ts) you can see an example implementation of a ScopeRule. The ScopeRule lays what what operations a scope gives access to. For example for the `user/*.write` scope may give 'create' access but not 'update'.
+
+For a working example please see [authZConfig.ts](https://github.com/awslabs/fhir-works-on-aws-deployment/blob/authz-smart/src/authZConfig.ts) in the deployment package
+
+## Dependency tree
+
+This package is dependent on:
+
+- [interface component](https://github.com/awslabs/fhir-works-on-aws-interface)
+  - This package defines the interface we are trying to use
+
+## Known issues
+
+For known issues please track the issues on the GitHub repository
 
 ## Security
 
@@ -14,4 +49,3 @@ See [CONTRIBUTING](CONTRIBUTING.md#security-issue-notifications) for more inform
 ## License
 
 This project is licensed under the Apache-2.0 License.
-