Getting invalid Request on Mychart login

[booma radhakrishnan]

Hi,

I am getting redirected tothe error page as in the attached  image.

https://fhir.epic.com/mychart-fhir/Authentication/OAuth/Start?error=4&response_type=code&client_id=61a52029-f45c-4612-8f0f-acda4d8a54d8&scope=launch,openid,fhirUser,profile,launch/patient,patient/Patient.read,patient/QuestionnaireResponse.read,patient/QuestionnaireResponse.create,online_access&redirect_uri=https://sandbox.rms.care?ehr=epic&actionType=resource&owner=tst-privusr1&aud=https://fhir.epic.com/interconnect-fhir-oauth/api/FHIR/R4&state=Q7bQMfyPYGh9YEg7&launch=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJ1cm46b2lkOmZoaXIiLCJjbGllbnRfaWQiOiI2MWE1MjAyOS1mNDVjLTQ2MTItOGYwZi1hY2RhNGQ4YTU0ZDgiLCJlcGljLmVjaSI6InVybjplcGljOk9wZW4uRXBpYy1jdXJyZW50IiwiZXBpYy5tZXRhZGF0YSI6Ilp2djVGVVBZelRwT3V5YnV0Q2dMM2p5VDBGdURZM0puanVNM1JSRjhNTDA3SWlJUUxMazlza2NOR0x4QlFDMFNlZF9Kc0J0RkZCVS1UczNvTk9wNVlwN0VPam9DdmpCWUZGVXplaTV6NWFnSlo1am1KUVVIMWhyT0hUS09JNzUxIiwiZXBpYy50b2tlbnR5cGUiOiJsYXVuY2giLCJleHAiOjE2MjQ2MzE0NjMsImlhdCI6MTYyNDYzMTE2MywiaXNzIjoidXJuOm9pZDpmaGlyIiwianRpIjoiY2ExODA5NDMtMWM1Yy00M2UxLTgyY2EtZWEzOGU5MGJmNzFmIiwibmJmIjoxNjI0NjMxMTYzLCJzdWIiOiJlM3JOMkVRVFEzZTJkN2V3VVNMdjlQZzMifQ.EBpiqukkEj9kfb6L_6oe81mCvpwctZhEECCJJ3F_1j74yJ_L8F2rdTV8h67Evcf0SerCLx0tiYQO4sA7cKOmTlGjg_1EG55llPP2F-i2J-QNSP1VzN_CTp-ip0e4rFwQeMkWKdCCoKGrAxnfg7WT4b3Q27NbWqTzEjtPev4mv7SaqMkDzHEG6cC5T51ZfQMP-xDMIBXqQH4kqFD5Oai1j_S0e-FqEU_Uhb2w1FkCRdN0r_s9AdMlTF4NZ-QJvaZFGpcA8YrPcB42QNECN2-eTI75Ufw-LaZnp9YiFT36ohV_REO1CoKIt5ohrcc1t2Tp5hlwLrTBJOX8S1RSEb5scA

Is any thing i am missing please provide me some suggestions.

Regards

Radhakrishnan

[James Kizer]

Hi Radhakrishnan,

One thing that jumps out to me is that I believe the scope query parameter should be space delimited instead of comma delimited. See this example.

Best,

James

--
You received this message because you are subscribed to the Google Groups "SMART on FHIR" group.
To unsubscribe from this group and stop receiving emails from it, send an email to smart-on-fhi...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/smart-on-fhir/e20570b4-59fb-4693-8b81-2d577fd4fbdfn%40googlegroups.com.

[Paul Nelson]

How did you fix it? I am getting exact same error=4.

[Doug Morand]

I get a similar error when I try to get an oauth code using the non-production client_id

https://fhir.epic.com/interconnect-fhir-oauth/oauth2/authorize?client_id={{REDACTED}}&redirect_uri=http%3A%2F%2Flocalhost%3A1234%2Fcallback&response_type=code&state=3ee2c6db-8e3d-45bf-94a6-c4b45e7c5afb&scope=launch%20fhirUser%20openid%20online_access&aud=https%3A%2F%2Ffhir.epic.com%2Finterconnect-fhir-oauth%2Fapi%2FFHIR%2FR4 

Has anyone been able to get oauth to work with the Epic sandbox?

[Mike Oliver]

I'm also getting the same issue. When testing out OAuth2 workflow, when I send the following request:

https://fhir.epic.com/interconnect-fhir-oauth/oauth2/authorize?response_type=code&client_id={{REDACTED}}&redirect_uri=localhost:44319/cust/oauth/epic&scope=openid&state=abc123

I get a 302 response which then redirects to:

https://fhir.epic.com/mychart-fhir/Authentication/OAuth/Start?error=4&response_type=code&client_id=77bcd522-2d1a-4212-976e-17c02a33a095&redirect_uri=localhost:44319/cust/oauth/epic&scope=openid&state=abc123

Appreciate in advance any assistance.

Mike Oliver

TeamDynamix, Inc.

[Chris Kreis]

Same issue. I notice that when I hit their test url

https://fhir.epic.com/interconnect-fhir-oauth/oauth2/authorize?response_type=code&redirect_uri=https%3A%2F%2Ffhir.epic.com%2Ftest%2Fsmart&client_id=d45049c3-3441-40ef-ab4d-b9cd86a17225&state=abc123

From the browser, it does show the appropriate login, and, if I enter the test creds, it redirects appropriately and provides the necessary code in the redirect.

However, if I alter the client_id to be our own, and, being sure to add the redirect url to our profile, it still fails with request is invalid.

Anyone make any progress on this?