Unable to launch smart-on-fhir app with EHR Launch flow from C1941 Powerchart due to CSP frame-ancestors error.
The error: I’ve been trying to launch the app on C1941, but I am getting a Content Security Policy frame-ancestors directive error, as you can see in the screenshot below.
Context: We have seen this error many times when integrating with new hospital entities and it is typically resolved by including the institution’s domain in our CSP frame-ancestors directive.
What we have tried: However, it did not work as expected once we added ‘ *.cerner.com ’ and ‘ *.cernerasp.com ’ which we believed would be sufficient to resolve this. This would be the request originator, could ‘ *.cerner.com ’ not be the correct one?
Additional info: I don’t know if this is expected, but I am also seeing some other errors in the console when the system launch is attempted (see the second screenshot) These are all CSS and JS files that the browser is trying to pull from some Cerner sources – either from cernerasp.com or cernerpowerchart.com.
Background Information
- Are you an OPN Member? Yes
- Have you signed up to be in the Healthcare Developer Track? Yes
- Are you a registered Code Program member? Yes
- Does your App have a presence on the Oracle Healthcare App Marketplace? Yes
- Are you developing on behalf of an Oracle Health client? No
IgniteData Ltd - Archer
- ClientId - e986ed36-3b09-4e2e-b1cf-e63315f0941d
- AppId - 38417099-5d0c-4a03-a92f-e47bd97be253