Secure HAPI FHIR data in transit

[Rob Ferguson]

See: https://rob-ferguson.me/secure-hapi-fhir-data-in-transit/

Introduction

HAPI FHIR is an open source implementation of the HL7 FHIR standard for healthcare interoperability.

The easiest way to get started with HAPI FHIR is to use the HAPI FHIR JPA Server Starter Project.

In previous posts, we have worked to augment the HAPI FHIR JPA Server Starter Project in order to demonstrate secure access to FHIR resources.

Including:

• Support for OpenID Connect and OAuth 2.0 (e.g., SMART on FHIR)

See: HAPI FHIR AU Starter Project

In this post, we'll enable TLS in HAPI FHIR's embedded web server and ensure that all PostgreSQL clients use encrypted connections.
...