Page Comparison

...

The objective is to manage User authentication directly from the FHIR module. The JWT authentication mechanism is used. FHIR module is using the authentication services so the token can be used in both FHIR REST API and GraphQL queries.

FHIR REST API Login endpoint

POST /api_fhir_r4/login 

Request body: 
  {
    "username": [username],
    "password": [password]
  }

HTTP 200 Response body: 
  {
    "token": [token]
    "exp": [expire_date]
  }

HTTP 401 Response if credentials are not valid  

FHIR REST API

...

Authorization header

All other FHIR R4 requests should contain the Authentication Authorization header with the Bearer token.

Authorization: Bearer [token]

HTTP 200 Response when token validated (the actual resource payload is returned)

HTTP 401 Response when:
  if AuthenticationAuthorization header is missing 
  if Bearer prefix is missing
  if error on decoding AuthenticationAuthorization header  
  if token is expired

...