

--
You received this message because you are subscribed to the Google Groups "DrChrono API Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to drchrono-api...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/drchrono-api/22c8ec62-0e09-45cc-b713-a34efd77f379n%40googlegroups.com.
1. Once you create your app by going to Account > API, let's head over to Postman
2. Select TEST COLLECTION > Authorization tab > select the Authorization type oauth 2.0:
3. We will need to fill in the needed information that is under "configure new token":
Token Name: Can be anything.
Callback URL: https://www.getpostman.com/oauth2/callback (Make sure to match 'redirect uri' in the API page of Drchrono)
Auth URL: https://drchrono.com/o/authorize/
access token URL: https://drchrono.com/o/token/
Client id and secret found in the API page (account > API)
Scope: These are a list of scopes for every endpoint.
labs:read labs:write messages:read messages:write patients:read patients:summary:read patients:summary:write patients:write settings:read settings:write tasks:read tasks:write user:read user:write billing:patient-payment:read billing:patient-payment:write billing:read billing:write calendar:read calendar:write clinical:read clinical:write
state: leave as is
client auth: leave as is
4. Select "Get New Access Token". You will be prompted to log into drchrono > then it should direct you to authorize the connection
5. You will be directed back to Postman, and should see a screen that says you can proceed and it will provide the access and refresh token. Save the refresh token then select 'use token'. The access token will automatically be saved and shown in the "access token" field in Postman. You can see it from the screenshot provided above.
6. I have an endpoint where you can utilize the refresh token to get new access tokens since access tokens expire every 48 hours. The folder is called AUTH/Iframe > refresh token. The refresh token will remain the same and never expires unless you revoke the token or go through this Auth process again. Once you select the refresh token endpoint in my collection, select 'body' and the request body should be filled like so:
All you need to do in this collection is to input your saved refresh token in the 'refresh_token' field and switch the client id and secret to yours. Whenever the access token expires, just hit 'send' and you will get a new access token.
Let me know if you still run into trouble.
Best,
Assaad