FHIR Chat · Epic backend services · smart

Stream: smart

Topic: Epic backend services

view this post on Zulip Josh Mandel (Jan 11 2022 at 19:48):

Configuring my client at fhir.epic.com:

image.png

Do I need to provide a JWK if I'm also providing a JWKS URI, or is just one of these sufficient @adam strickland ?

view this post on Zulip adam strickland (Jan 11 2022 at 19:48):

Just one is sufficient

view this post on Zulip Josh Mandel (Jan 11 2022 at 20:22):

OK, I've successfully introspected a token!

QQ @adam strickland: Scope suffixes for SMARTv1 should be lowercase, but I see a mixture of Read and read in this response -- is this a known issue?

view this post on Zulip Josh Mandel (Jan 11 2022 at 20:23):

(Also we discussed offline: the response doesn't yet include the standardized patient property t, but I'm working around this with sub for now.)

view this post on Zulip adam strickland (Jan 11 2022 at 20:25):

Hey Josh, yeah you'll see the mix of scope syntaxes if you have APIs of mixed FHIR versions chosen. We standardized the syntax for R4 (and maybe STU3?) but not DSTU2.

view this post on Zulip Josh Mandel (Jan 12 2022 at 18:38):

Here's the demo I've put together -- quick and dirty, but I had a chance to clean up the authz logic a bit: https://github.com/jmandel/smart-imaging-c10n-2022-01/tree/main/src

Main showstopping issue at this point is that the Epic MyChart approval screen has no way to prompt a user about whether they want to share imaging data. It'd be good to build out this support or some flexibility for Epic sites to add it as an extension within their own deployments.

view this post on Zulip Josh Mandel (Jan 12 2022 at 20:35):

Hmm, one strange behavior I'm seeing when I try to use a Backend Services token to resolve information about the Patient and user (RelatedPerson) associated with a launch:

Fetching "RelatedPerson" fails

Fetching "Patient" works

@adam strickland my client scopes include "RelatedPerson.Read" in the Epic client config

image.png

Any idea about why I might be unauthoirzed?

view this post on Zulip adam strickland (Jan 12 2022 at 20:35):

Hey Josh, I think this is a bug. I'll look into this now!

view this post on Zulip adam strickland (Jan 12 2022 at 20:36):

@Cooper Thompson

view this post on Zulip Josh Mandel (Jan 12 2022 at 20:39):

Related context: if I get a backend services token and introspect that

Introspecting my own backend services token

... is it expected that the sub for this token is a Practitioner with "username" of "USCDIFHIR"?

view this post on Zulip adam strickland (Jan 12 2022 at 22:44):

Yep that’s expected. There is a background user associated with your client, and that’s the owner of your tokens

Last updated: Apr 12 2022 at 19:14 UTC


An HL7 Website -