GuardianEHR

Healthcare Test Automation Framework

Shift-Left quality engineering for behavioral health EHR systems. HIPAA-aligned RBAC testing, Selenium 4 BiDi chaos engineering, and API-driven test data seeding — built to run in CI.

Java 21 Selenium 4 BiDi RestAssured TestNG Allure Maven GitHub Actions

Layered framework design

01
Test Suites
Hybrid, RBAC, DDT, Chaos
02
Page Objects
Login, Dashboard, Scheduler, Billing, Notes
03
Framework Core
BaseTest, ConfigManager, ApiClient, Retry
04
Infrastructure
GitHub Actions, Allure, Parallel Exec

Built for healthcare QA

SL

Shift-Left Testing

RestAssured seeds patient records via API, then Selenium validates the UI. 10–100× faster than UI-based setup. No fragile data creation through forms.

AC

RBAC Security Testing

Data-driven parameterization across Admin, Doctor, Billing Clerk, Intern, Front Desk. Every permission validated against a roles.json matrix. SoftAssert captures all violations per role.

BD

BiDi Network Interception

Selenium 4 BiDi monitors every network request during execution. Catches silent API failures where the UI looks fine but the backend call failed — a HIPAA liability.

CE

Chaos Engineering

Injects network failures during active sessions. Validates graceful error handling, zero silent data loss, and clean JavaScript console output.

Four test suites

SuiteStrategyWhat It Proves
HybridWorkflowTestAPI+UI API seed → UI verify Shift-Left efficiency; API/UI integration integrity
RBACSecurityTestRBAC Data-driven role matrix HIPAA access control enforcement across all roles
BillingDataDrivenTestDDT JSON parameter injection Financial accuracy (12 insurance scenarios)
BiDiChaosTestCHAOS Network fault injection Application resiliency under failures

Run it locally

Requires Java 21, Maven 3.9+, Chrome.

# Full suite mvn clean test # Headless CI mode mvn clean test -Dheadless=true # Single suite mvn clean test -Dtest=RBACSecurityTest # Allure report mvn allure:serve

Key decisions

ThreadLocal<WebDriver>
Thread-safe parallel execution without test interference
BiDi over CDP
W3C standard vs. deprecated Chrome DevTools Protocol
RestAssured for data seeding
10–100× faster than UI; decouples data from UI state
JSON data files
QA-readable, no code changes needed, version-controlled
SoftAssert in RBAC
Reports all permission violations, not just the first
Self-contained mock webapp
No external dependencies; framework runs anywhere