Failure to renew access token for test patient

37 views
Skip to first unread message
Assigned to Fenil....@cerner.com by me

Francesca Ricci-Tam

unread,
Dec 7, 2021, 3:41:20 PM12/7/21
to Cerner FHIR Developers
Hello,

I am testing my app (confidential patient-facing) and have logged in several of the Smart family test patients to fetch their health records. The access token renewal via refresh token has been working well for the past several months for all patients; but recently I have noticed that one of them (Joe Smart) had stopped renewing a few days ago. Below is a recent error message (with X-request-ID) when the app was attempting to renew the access token; it fails with a an "invalid grant" error, as if the refresh token has become invalid. Does anyone know why this might be happening?
Thank you,

Francesca

2021/12/07 20:33:04
CONFIG FOR ACCESS TOKEN RENEWAL REQUEST: {"method":"post","url":"https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/token","headers":{"accept":"application/json","Content-Type":"application/x-www-form-urlencoded","Authorization":"Basic {REDACTED}","Connection":"close","X-Request-Id":"c2242d1d-6fd0-48b3-8888-809f2f8fef8f"},"data":"grant_type=refresh_token&refresh_token={REDACTED}"}

2021/12/07 20:33:04
error: Request failed with status code 400 - Response: {"error":"invalid_grant","error_uri":"https://authorization.cerner.com/errors/urn%3Acerner%3Aerror%3Aauthorization-server%3Aoauth2%3Atoken%3Arefresh-user-not-authorized-for-any-patient-ids/instances/12272d3d-ff7b-4761-9af2-c3d8ade225e6?persona=patient&client={REDACTED}&tenant=ec2458f2-1e24-41c8-b71b-0e701af7583d"}

Fenil Desani (Cerner)

unread,
Dec 8, 2021, 11:49:15 AM12/8/21
to Cerner FHIR Developers
Hello,

Someone may have revoked the access to your App for that patient.

Thanks,
Fenil

Reply all
Reply to author
Forward
0 new messages