Connectathon README

Prior Authorization Support (PAS) Connections

This Wiki page is a self sufficient guide to get you started connecting to our server. This Reference Implementation (RI) is open source (Apache 2.0) so it can be copied, modified, and reused in any way. Details on running the server can be found on the repository README. A cloud version of the server is also hosted by Logica Health at https://prior-auth.davinci.hl7.org/fhir

Logica Endpoints

Below are some important endpoints to get you started.

Name	Endpoint
FHIR Base	https://prior-auth.davinci.hl7.org/fhir
Metadata	https://prior-auth.davinci.hl7.org/fhir/metadata
Client Registration	https://prior-auth.davinci.hl7.org/fhir/auth/register
Authorization Token	https://prior-auth.davinci.hl7.org/fhir/auth/token

Authorization

This server is protected by the SMART Backend Authorization Server-Server protocol. It follows the client_credentials OAuth 2.0 grant flow. Currently no UI is provided to register a new client. POST either the jwks or the jwks_url to the register endpoint:

HTTPS POST /fhir/auth/register
Content-Type application/json
{
   jwks: { /* JWKS object for public key */}
   jwks_url: /* URL to obtain the jwks */
   organization_name: /* Human readable name of Organization */
   organization_contact: /* Email or phone number */
}

For testing purposes an admin key is available for clients who do not support this workflow yet. All requests to the server must include Authorization header. The admin token is Y3YWq2l08kvFqy50fQJY.

NOTE: This reference implementation currently only supports jwks using RS384 even though EC384 is also permissible.