Stream: connectathon mgmt
Topic: PH Track - Opioids CDS Testing
Bill Lober (Sep 10 2020 at 00:57):
Start of a thread for the PH Opioids CDS testing @Ivan Cvitkovic @Jan Flowers
Jan Flowers (Sep 10 2020 at 00:59):
Got it.
Start of a thread for the PH Opioids CDS testing Ivan Cvitkovic Jan Flowers
a
Bill Lober (Sep 10 2020 at 05:11):
Just to link everything together, if you found this chat, you can find out more about us here: https://confluence.hl7.org/pages/viewpage.action?pageId=86976979
Bill Lober (Sep 10 2020 at 05:14):
(that page just updated to add some useful links)
Bill Lober (Sep 10 2020 at 06:32):
Tagging @Justin McReynolds
Bill Lober (Sep 10 2020 at 06:42):
@John Stamm 0 drawing this thread to your attention. @Ivan Cvitkovic and I plan to get started around 7:30 Pacific time, but there's an outstanding question for you in email from Ivan, I think re SMART on FHIR integration w/your Eoic Instance.
Bill Lober (Sep 10 2020 at 14:38):
@Ivan Cvitkovic let me know when you're around this AM.
Bill Lober (Sep 10 2020 at 16:38):
@John Stamm It's hard for me to start the stream because I have other Zoom demands on my system. I'll try to put up a slide, though.
Bill Lober (Sep 10 2020 at 17:21):
Thanks for starting the stream @Ivan Cvitkovic - see my notes re something to project to show people how to find us. I tried sharing from the iPad - didn't seem to do it.
John Stamm (Sep 10 2020 at 17:56):
@Bill Lober @Jan Flowers @Ivan Cvitkovic -- I should have it set up and be able to hop on a call now. I did have to update your client ID. It's now cae1873b-7cf6-4710-b619-c4797616bc0f
Did you have a separate redirect URl that you needed me to add?
Also - I was going to start on an unsecured connection unless you need otherwise. If so, let me know and I'll get a client secret for you.
Bill Lober (Sep 10 2020 at 18:03):
@John Stamm - Ivan is hanging out on the Whova Zoom - we are flailing a bit on how to best communicate w/ others and were just requested by ONC that we hang out on Zoom... I'll draw his attention to his again!
Bill Lober (Sep 10 2020 at 18:04):
(we live on Slack/Zoom/GoogleDocs, in real life, so Whova/Zulip/Confluence are a shift!)
John Stamm (Sep 10 2020 at 18:05):
I'm definitely more accustomed to Zoom and Teams, so Whova has been interesting.
Ivan Cvitkovic (Sep 10 2020 at 18:05):
@John Stamm Thank you! I just updated our client ID to match that one
Ivan Cvitkovic (Sep 10 2020 at 18:08):
@John Stamm
Could you add the following as a redirect URI
https://backend.cat-demo.cosri.cirg.washington.edu/auth/authorize
John Stamm (Sep 10 2020 at 18:15):
client secret -- yFbywhzD0nnfG9IXLXFj3X/hAxvA3+dTsNXE8nW+7Avt5/5RLogxbRxXE76wv+UEFLgHcC5llRS2bn8ZeQv1wg==
John Stamm (Sep 10 2020 at 18:24):
https://frontend.cat-demo.cosri.cirg.washington.edu/
John Stamm (Sep 10 2020 at 18:25):
Bill Lober (Sep 10 2020 at 18:28):
I don't seem to have voice access to the Zoom on my iPad, which is fine. Unless you heard me a few mins ago. But it looked like you didn't. Not important now, and I'd rather chat anyway.
Bill Lober (Sep 10 2020 at 18:29):
thanks John - talk to you soon. We'll leave Zoom open, but quiet.
Ivan Cvitkovic (Sep 10 2020 at 18:54):
@John Stamm I added a fix for the issue you saw. Can you try launching again and paste any console errors you see? Thanks!
Bill Lober (Sep 10 2020 at 19:14):
I’m back. Any update?
Ivan Cvitkovic (Sep 10 2020 at 19:19):
@Bill Lober John helped me identify an issue in our backend FHIR proxy. We weren't including the requested content type (JSON) from our frontend, so we were getting an XML-formatted conformance statement rather than the JSON one expected
Ivan Cvitkovic (Sep 10 2020 at 19:19):
I've fixed the aforementioned issue, so we should be ready for @John Stamm to try another launch when he's available to
John Stamm (Sep 10 2020 at 19:28):
Do you see any traffic? I'm not making it as far now as I did before. Seems to be an OAuth error?
John Stamm (Sep 10 2020 at 19:45):
Bill Lober (Sep 10 2020 at 19:49):
I have to turn down volume (conflicting department meeting) - will be back at 3 (Pacific) after 2 more calls, but will be on chat between time.
John Stamm (Sep 10 2020 at 20:08):
Ivan Cvitkovic (Sep 10 2020 at 20:16):
@John Stamm I tried reproducing the Patient FHIR resource request in curl and I'm seeing a 403 and the below error in the response headers
curl 'https://connectathon.epic.com/Interconnect-Fhir-OAuth/api/FHIR/DSTU2/Patient/TLKtFHW5Di9CVKNyR46w2ZcpZZsPGmHO7j-agT6dE.UsB' -H 'Authorization: Bearer qg4slOI-72ajJNt34QLh1QkjiEbWWgCtBPNHIgKQytz1tNbc-2r91Y7gG8DAbmvuecXSmSrTjJSOch7gHWxjrsRjJAs1qxzzZj50rarLrxyZAwcWzcHmOqV2j1Fsp2vk' -v
WWW-Authenticate: Bearer error="insufficient_scope", error_description="The access token provided is valid, but is not authorized for this service"
Ivan Cvitkovic (Sep 10 2020 at 20:37):
FYI this is the current iss/FHIR base URL we're getting (from /metadata); I'll hard-code the FHIR R4 URL once it's confirmed
https://connectathon.epic.com/Interconnect-Fhir-OAuth/api/FHIR/DSTU2
John Stamm (Sep 10 2020 at 20:38):
https://connectathon.epic.com/Interconnect-Fhir-OAuth/api/FHIR/R4/ -- should be
Ivan Cvitkovic (Sep 10 2020 at 20:44):
@John Stamm R4 resources returning a 403:
Condition
MedicationRequest
Observation
Procedure
Encounter
Ivan Cvitkovic (Sep 10 2020 at 20:51):
@John Stamm FYI still seeing 403s for the below resources
Condition
MedicationRequest
Observation
John Stamm (Sep 10 2020 at 20:51):
Tried it again, as well as resetting the metadata in hopes that you eventually won't have to hard code it. Let me know when you're back if you want me to run it again.
Ivan Cvitkovic (Sep 11 2020 at 05:52):
I was able to add explicit filters on categories/statues (as querystring params, on top of the existing patient=TLKtFHW5Di9CVKNyR46w2ZcpZZsPGmHO7j-agT6dE.UsB) to narrow down the data requested for the following resources (we were getting 403 Forbidden for some):
- MedicationRequest (
status=active,on-hold,cancelled,completed,stopped,draft,unknown) - Observation (
category=social-history,vital-signs,imaging,laboratory,procedure,survey,exam,therapy,activity) - MedicationStatement (
status=active,completed,intended,stopped,on-hold,unknown)
@John Stamm when you get a chance, can you attempt another launch? Let me know if anything is rendered, and please include any browser console errors. Thanks again!
John Stamm (Sep 11 2020 at 13:14):
Just tried it, the page did render and there were some errors.
John Stamm (Sep 11 2020 at 13:14):
Ivan Cvitkovic (Sep 11 2020 at 13:42):
Thanks for trying that again!
Ivan Cvitkovic (Sep 11 2020 at 13:44):
I'm getting the same 403 Forbidden (WWW-Authenticate: Bearer error="insufficient_scope", error_description="The access token provided is valid, but is not authorized for this service") for the following requests.
However, those FHIR resources shouldn't be necessary for the key functionality of the app.
Ivan Cvitkovic (Sep 11 2020 at 13:48):
I did notice that after removing the override of the iss to the R4 base URL, we're getting DSTU2 again (from /metadata).
@John Stamm It's not a problem for me to add the iss override to R4 back in, should I? Either way once it's configured for R4 I'd like to do another run-through.
John Stamm (Sep 11 2020 at 13:49):
hmm, I do have it set for R4. But I can ping folks about that offline if we want to proceed with your hard coding.
Ivan Cvitkovic (Sep 11 2020 at 13:53):
Most of the app functionality is based on R4 MedicationRequest resources. I'll defer to you on the other consequences of hardcoding iss, but as long as MedicationRequests work, it should be enough for me :)
Bill Lober (Sep 11 2020 at 14:58):
(good morining @Ivan Cvitkovic @Jan Flowers )
John Stamm (Sep 11 2020 at 15:21):
I have a lead on how to override that from DSTU2 to R4 on my side and hope to try it soon. I'll let you know.
John Stamm (Sep 11 2020 at 18:28):
Launched one - can you check if that had R4 listed? It did load, will paste console errors in a min.
John Stamm (Sep 11 2020 at 18:28):
Ivan Cvitkovic (Sep 11 2020 at 19:00):
Thanks @John Stamm ! Unfortunately I'm still seeing the DSTU2 URL being advertised and used.
For expediency's sake I went ahead and added the R4 iss override on our side.
Could you attempt another launch to test R4 with our app? If the UI is rendering correctly, could you also capture a screenshot? More than happy to remove the R4 override on our side and test again afterwards
John Stamm (Sep 11 2020 at 19:55):
Bill Lober (Sep 12 2020 at 01:53):
Thanks @John Stamm. (note to @Jan Flowers )
Last updated: Apr 12 2022 at 19:14 UTC
