Adding OAuth info to capability statement

[as...@yahoo.com]

I've implemented an OAuth2 authorization interceptor and have that working within HAPI. Smart on FHIR indicates that the FHIR server's "metadata must support automated dicovery of OAuth2 endpoints by including a “complex” extension (that is, an extension with multiple components inside) on the CapabilityStatement.rest.security element."

http://www.hl7.org/fhir/smart-app-launch/capability-statement/


With HAPI automatically generating the metadata capability statement, would anyone know where I add these components to HAPI's configuration?

Many thanks in advance.

- Anthony

[s...@it-minds.dk]

Not sure if there's a nicer way to do it, but you should be able to set the capability statement provider in your RestfulServer implementation. See for example https://github.com/jamesagnew/hapi-fhir/blob/903df68d2ae3d8bb2519b5dcd4a87ae657b05c10/hapi-fhir-jpaserver-example/src/main/java/ca/uhn/fhir/jpa/demo/JpaServerDemo.java#L100. You can probably subclass and customize https://github.com/jamesagnew/hapi-fhir/blob/903df68d2ae3d8bb2519b5dcd4a87ae657b05c10/hapi-fhir-structures-dstu3/src/main/java/org/hl7/fhir/dstu3/hapi/rest/server/ServerCapabilityStatementProvider.java#L201.

Apologies for any mistakes, am pretty inexperienced with HAPI.

[Christian Ohr]

It's documented here: http://hapifhir.io/doc_rest_server.html#Enhancing_the_Generated_Conformance_Statement

cheers

Christian

[as...@yahoo.com]

Thanks everyone for the input.

- Anthony