Create Patient & system.Patient.write access token

[Abhilash Kokkonda]

Hi Cerner team,

    Need your help in create patient API call. We are trying to create a patient in Sandbox environment. To fetch the access token, we are passing system/Patient.write in scope, but, we are getting error while fetching token.

    We also tried passing this Patient.write scope along with other scopes like system/Slot.read system/Patient.read system/Appointment.read system/Appointment.write system/Patient.write. We got the access token, but the scope of the access token is doesn't include Patient.write scope

Access Token Request With Patient.write only Scope:

    X-Request-Id: 22af46e5-7f11-4c7a-98f0-da37fed467bf

    {

        "error": "unauthorized_client",

        "error_uri": "https://authorization.cerner.com/errors/urn%3Acerner%3Aerror%3Aauthorization-server%3Aoauth2%3Atoken%3Aempty-scopes/instances/81f22b13-0d1f-4b2a-af58-f55bf44bedc9?client=ae372237-1cb5-49d9-a9b2-b2a368b1f9c7&tenant=ec2458f2-1e24-41c8-b71b-0e701af7583d"

    }

Access Token Request Along with other scopes

    X-Request-Id: dd6c7a75-8503-40a9-8c49-2b8b611db173

    {

        "access_token": <valid token>,

        "scope": "system/Slot.read system/Patient.read system/Appointment.read system/Appointment.write",

        "token_type": "Bearer",

        "expires_in": 570

    }

    Here the scope in the response doesn't have Patient.write access

So if we use the access token, we are getting unauthorised error for create patient API call

    X-Request-Id: a5ea78c4-9e20-4934-af6d-8d96ef11ce08

    {

        "resourceType": "OperationOutcome",

        "issue": [

            {

                "severity": "error",

                "code": "forbidden",

                "diagnostics": "Bearer realm=\"fhir-ehr-code.cerner.com\", error=\"insufficient_scope\"",

                "expression": [

                    "http.Authorization"

                ]

            }

        ]

    }

Thanks in advance,

Abhilash

[Fenil Desani (Cerner)]

Hello,

Your App registration in the Code Console does not have patient.write scopes and hence not granted in the Auth flow.

Thanks,

Fenil