Skip to Main Content

SMART Authorization

Announcement

For information related to the Oracle Partner Network (OPN) Industry Healthcare Track please visit our OPN Industry Healthcare Program page.

For specific questions related to Oracle Partner Network (OPN), please contact Partner Assistance.

Millennium FHIR and non-FHIR API Specifications and Supporting Documents can be found HERE on docs.oracle.com
Soarian FHIR API Specifications and Supporting Documents can be found HERE on docs.oracle.com.

Invalid client via JWT & Basic auth patient fetch error(error=\"invalid_token\", subcode=\"unknown_kid\")

Workflow or API calls:

JWT - https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/hosts/api.cernermillennium.com/protocols/oauth2/profiles/smart-v1/token

Basic Auth Patient Fetch - https://fhir-ehr.sandboxcerner.com/r4/763a86fd-c545-483a-9179-bb60864b329a/Patient

CLient ID : 580f9473-3788-4862-a830-6f1258c9e9f6

JWT request CoRelation ID : 47e17752-6bfb-4468-a1ca-35ea09b88ccc

"error": "invalid_client"

Basic Auth Patient Fetch Error : {

"code": 401,

"message": "code=\\"urn:cerner:error:oauth2:resource-access:signature-verification-failed\\", error=\\"invalid\_token\\", subcode=\\"unknown\_kid\\", kid=\\"2025-01-30T02:41:16.320.oct\\""

}

Hi Team,

  1. I am able to get the access token using Basic Auth but when I am trying to fetch access token using JWT token and I am getting the below error {

    "error": "invalid_client",

    "error_uri": "https://authorization.cerner.com/errors/urn%3Acerner%3Aerror%3Aauthorization-server%3Aclient-assertion%3Ajwt-bearer%3Ainvalid-assertion/instances/47e17752-6bfb-4468-a1ca-35ea09b88ccc?client=580f9473-3788-4862-a830-6f1258c9e9f6&tenant=ec2458f2-1e24-41c8-b71b-0e701af7583d"

}

  1. Using the access token provided by basic auth I am trying to fetch patient data for tenant 763a86fd-c545-483a-9179-bb60864b329a but I am getting the below error for url https://fhir-ehr.sandboxcerner.com/r4/763a86fd-c545-483a-9179-bb60864b329a/Patient.

{

"code": 401,

"message": "code=\\"urn:cerner:error:oauth2:resource-access:signature-verification-failed\\", error=\\"invalid\_token\\", subcode=\\"unknown\_kid\\", kid=\\"2025-01-30T02:41:16.320.oct\\""

}

Comments
Post Details
Added on Jan 31 2025
1 comment
266 views