Patient OAuth?

[Joshua John Villahermosa]

Hi,

I'm building a POC application where a patient can register as a patient in a practice, and schedule an appointment with a doctor. When it comes to redirecting the user to the OAuth URL to get the token, it will take them to Dr Chrono's login URL. I have the following questions with this approach:

1. Should I be redirecting a patient (Not a provider) through Doctor Chrono to get the token to do patient registration for the practice and scheduling?
2. If yes, is there a way to prompt doctor Chrono to do a patient registration and return the token?
3. If no, how can I register a patient through doctor Chrono with out going through the OAuth URL? It seems like a lot of the calls I need to make is hinged on that OAuth to happen.
   

Best,
Josh V

[Joshua John Villahermosa]

Actually I just realized we can refresh the token, as long we can refresh the token on the provider side, we do not need to redirect the patient to Dr. Chrono. Is that right? Also are there conditions where we can no longer refresh a token (Provider will need to Re-Auth)?

[bri...@drchrono.com]

Yes you can use the refresh token to keep a continuous connection to our API. The refresh token will only become invalid if the provider clicks "Deauthorize" in "Account" > "App Directory" in DrChrono or you make use of the Revoke method in DrChrono's API.

[Joshua John Villahermosa]

Awesome. Good to know. Thanks!