System account required for patient app using it for only online_access

[Soumyajit Kundu]

Do we need system account and all those procedure for patient app and for online access?

[Fenil Desani (Cerner)]

Hello,

System Account is only needed for Patient Apps with offline_access, System Apps, and confidential Apps.

Thanks,

Fenil

[Soumyajit Kundu]

Hi, 

I created a patient app with online access. I am able to get state and code but when I am trying to use those data to get access token. I am getting invalid grant error message. Pls help me.

--
You received this message because you are subscribed to a topic in the Google Groups "Cerner FHIR Developers" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/cerner-fhir-developers/f70_nahEym4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to cerner-fhir-devel...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cerner-fhir-developers/b46794e5-1ebc-413f-94c7-0d6d0e639120n%40googlegroups.com.

[Soumyajit Kundu]

I am getting this below error.

{

"error": "invalid_grant",

"error_uri": "https://authorization.cerner.com/errors/urn%3Acerner%3Aerror%3Aauthorization-server%3Aoauth2%3Atoken%3Acode-invalid-or-expired/instances/b2d200c5-5055-4bd3-90dd-fe2a27f0f689?client=e9aff507-c283-453b-ae0c-26e9a84b61ff&tenant=ec2458f2-1e24-41c8-b71b-0e701af7583d"

}

Thanks,

Soumyajit

[Soumyajit Kundu]

I am getting code and state through  below URL, but after getting the code and state not able to fetch Access token. Please help me.

https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/personas/patient/authorize?aud=https%3A%2F%2Ffhir-myrecord.cerner.com%2Fdstu2%2Fec2458f2-1e24-41c8-b71b-0e701af7583d&scope=patient%2FPatient.read%20patient%2FObservation.read%20launch%2Fpatient%20online_access%20openid%20profile&response_type=code&redirect_uri=http%3A%2F%2Flocalhost%3A5050&state=4e2b036a-7b98-71f3-1687-9a42070e0d28&client_id=e9aff507-c283-453b-ae0c-26e9a84b61ff

[Soumyajit Kundu]

Hi Team,

Could you please help me on my above error. How can I resolve it?

Thanks,

Soumyajit

[Fenil Desani (Cerner)]

The code you are using is either invalid, or expired. The code has a very short life span and can only be used once.

[Soumyajit Kundu]

Hello Fenil,

I am using right after getting it but still same problem I am facing what can be done?

Thanks,

Soumyajit

[Fenil Desani (Cerner)]

I'm able to generate a token on behalf of your App

Please make sure you are following http://fhir.cerner.com/authorization/#requesting-authorization-on-behalf-of-a-user correctly and using the code value once and fast.