4. Test the Patient Provider

    @Test
    void search_staff() {
        givenUser(JwtTestUtils.V2.createStaffUser());
        when(mviClient.getPerson(eq(OTHER_ICN), any())).thenReturn(Optional.of(new Person().lastName("THIRTYTWO")));

        final List<Patient> patients = provider.search(requestDetails, new TokenParam(ICN_SYSTEM, OTHER_ICN));

        assertThat(patients).singleElement()
                            .satisfies(patient -> assertThat(patient.getIdPart()).isEqualTo(OTHER_ICN));
    }

    @Test
    void search_veteranSelfWithoutSystem() {
        givenUser(JwtTestUtils.V2.createVeteranUser(VETERAN_ICN));
        when(mviClient.getPerson(eq(VETERAN_ICN), any())).thenReturn(Optional.of(new Person().lastName("FIFTEEN")));

        final List<Patient> patients = provider.search(requestDetails, new TokenParam(VETERAN_ICN));

        assertThat(patients).hasSize(1);
    }

    @Test
    void search_notFound() {
        givenUser(JwtTestUtils.V2.createStaffUser());
        when(mviClient.getPerson(eq(OTHER_ICN), any())).thenReturn(Optional.empty());

        final List<Patient> patients = provider.search(requestDetails, new TokenParam(ICN_SYSTEM, OTHER_ICN));

        assertThat(patients).isEmpty();
    }

    /**
     * A staff user reads a patient that MVI knows.
     */
    @Test
    void read_staff() {
        givenUser(JwtTestUtils.V2.createStaffUser());
        when(mviClient.getPerson(eq(OTHER_ICN), any())).thenReturn(Optional.of(new Person().lastName("THIRTYTWO")));

        final Patient patient = provider.read(requestDetails, new IdType(OTHER_ICN));

        assertThat(patient.getIdPart()).isEqualTo(OTHER_ICN);
        assertThat(patient.getNameFirstRep().getFamily()).isEqualTo("THIRTYTWO");
    }

    /**
     * A staff user reads a patient that MVI has no record of: ResourceNotFoundException.
     */
    @Test
    void read_notFound() {
        // TODO: implement
    }

    /**
     * A veteran reads the record of another patient: ForbiddenOperationException.
     */
    @Test
    void read_veteranOther() {
        // TODO: implement
    }

    @Test
    void read_invalidIcn() {
        final IdType id = new IdType("not-an-icn");

        assertThatThrownBy(() -> provider.read(requestDetails, id))
                .isInstanceOf(InvalidRequestException.class);
    }

import gov.va.mobile.mvi.v1.model.Person;

import java.util.List;
import java.util.Optional;

import static org.mockito.ArgumentMatchers.any;
import static org.mockito.ArgumentMatchers.eq;

/**
 * Integration tests for the Patient resource provider, covering the role based access rules of the service.
 *
 * <p>The patient data comes from the WireMock stubs of the Mobile MVI Service in
 * {@code kubernetes/components/dev/wiremock-data/mvi}.
 */

    /**
     * ICN of a patient that MVI has no record of.
     */
    private static final String UNKNOWN_ICN = "1012845331V153043";

    /**
     * Verify a staff user may search for any patient.
     */
    @Test
    void searchByIcn_staff() {
        final IGenericClient client = newClient(serviceUrl, JwtTestUtils.V2.createStaffJwt());

        final Bundle bundle = searchByIcn(client, OTHER_ICN).execute();

        assertThat(bundle.getEntry()).singleElement()
                                     .satisfies(entry -> assertThat(((Patient) entry.getResource()).getNameFirstRep().getFamily())
                                             .isEqualTo("THIRTYTWO"));
    }

    /**
     * Verify a veteran user may search for their own records.
     */
    @Test
    void searchByIcn_veteranSelf() {
        final IGenericClient client = newClient(serviceUrl, JwtTestUtils.V2.createVeteranJwt(VETERAN_ICN));

        final Bundle bundle = searchByIcn(client, VETERAN_ICN).execute();

        assertThat(bundle.getEntry()).hasSize(1);
    }

    /**
     * Verify a search for a patient that MVI has no record of returns an empty Bundle.
     */
    @Test
    void searchByIcn_notFound() {
        final IGenericClient client = newClient(serviceUrl, JwtTestUtils.V2.createStaffJwt());

        final Bundle bundle = searchByIcn(client, UNKNOWN_ICN).execute();

        assertThat(bundle.getEntry()).isEmpty();
    }

    /**
     * Verify a staff user may read any patient.
     */
    @Test
    void readById_staff() {
        final IGenericClient client = newClient(serviceUrl, JwtTestUtils.V2.createStaffJwt());

        final Patient patient = readById(client, OTHER_ICN).execute();

        assertThat(patient.getIdPart()).isEqualTo(OTHER_ICN);
        assertThat(patient.getNameFirstRep().getFamily()).isEqualTo("THIRTYTWO");
    }

    /**
     * Verify a veteran user may read their own record.
     */
    @Test
    void readById_veteranSelf() {
        // TODO: implement
    }

    /**
     * Verify a veteran user may not read the record of another patient.
     */
    @Test
    void readById_veteranOther() {
        // TODO: implement
    }

    /**
     * Verify reading a patient that MVI has no record of results in HTTP 404.
     */
    @Test
    void readById_notFound() {
        // TODO: implement
    }

    /**
     * Verify a logical id that isn't a valid ICN is rejected.
     */
    @Test
    void readById_invalidIcn() {
        // TODO: implement
    }

    /**
     * Build a Patient read ({@code GET [base]/Patient/<icn>}).
     *
     * @param client the FHIR client to read with
     * @param icn the ICN of the patient, which is the logical id of the Patient
     * @return the read, ready to execute
     */
    private static IReadExecutable<Patient> readById(final IGenericClient client, final String icn) {
        return client.read().resource(Patient.class).withId(icn);
    }