Hi @rahul1 , thanks you all for putting this together. I tried to use oauth2/authorize endpoint to get the one time authorization code. I've registered the redirect uri with the client. But I am getting an invalid request error. Any ideas on this?

Are you sending in the

clientId

? Also, is there any info in the developer console about the reason for the error?

Yes, I included the client_id. Not really, other than invalid request, not much info in the developer console.

Do you mind copying the headers / body of your request here?

:authority: api.medplum.com :method: GET :path: /oauth2/authorize?response_type=code&client_id=992cb882-7e65-4385-aef6-36b7cd9d7b92&redirect_uri=OURREDIRECTURI&state=2022-08-25T14%3A10%3A59-07%3A00 :scheme: https accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 accept-encoding: gzip, deflate, br accept-language: en-US,en;q=0.9 cookie: _ga=GA1.1.1571497015.1660070397; _ga_SHW0ZNT27G=GS1.1.1661461697.9.0.1661461699.0.0.0 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "macOS" sec-fetch-dest: document sec-fetch-mode: navigate sec-fetch-site: none sec-fetch-user: ?1 upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36

Takign a look now

Would it be related to this "Referrer Policy: strict-origin-when-cross-origin"?

Yes it could be. Were you able to clone our demo application and add your clientId there to test on localhost:8000?

No, I haven't. Could you send me the link to the doc that instruct me how to create the demo application? I can try it now.

It should just be in the README of the github repository I linked earlier https://github.com/medplum/medplum-oauth-demo

That makes sense. I will check with our senior engineer and see if there is some domain restriction

Are you able to see the same redirection as I am?

Not really. I tried to use the localhost (follow the instruction) and I got the same error.

is the error still

invalid redirect_uri

?

the error is still Incorrect redirect_uri

hello

You need the page that opens in http://localhost:3000/ after sign in, right?

Hmm, I just want to make sure we're talking about the same thing. To confirm: - You cloned this repo: https://github.com/medplum/medplum-oauth-demo - Edited index.html with your

clientId

and

redirect_uri

on lines 17 and 18 of index.html - You used

npx http-server ./ -p 8000

to run the demo?

Thanks for following up with us on this. Yeah, I did change the clientId on line 17 but I keep the redirect_uri as it is 'http://localhost:8000/' so I can test the localhost first.

Which server are you testing against? The Medplum hosted service, or the medplum server on your localhost?

I get client id not found error https://api.medplum.com/oauth2/authorize?client_id=my_client_id&redirect_uri=https%3A%2F%2Fpatient-ehr.codexhealth.com%26response_type%3Dcode%26state%3D2022-08-25T14%253A10%253A59-07%253A00&response_type=code&scope=openid

Would you guy have time for a quick call? This might be easier with a screenshare

The Medplum hosted service I believe

I've sent the index.html page by email to you

Right, @rahul1 , it might be easier for us to quick sync. Would you be available tomorrow morning at 10:00 or 10:30?

I think I see the issue. Is it ok f I post the redirect_uri here? Or is it sensitive/

could you please send the correct config with replying on my email?

I just changed to the one you have in the request, @yury.starav

@Yaxuan.Zhang @yury.starav I just responded to the email

Hi @rahul1 , @yury.starav and I tried but it looks like it is still not working for us. Let's meet at 10:30 if it still works for you. Sent you an invitation. Feel free to let me know if you prefer another time.

Actually I have a Dentist appointment at 11am, so it might be a bit tight. Is there some time after noon we could meet?

Yeah, for sure. We probably don't have time between 2-4, could you share with me some time works for you other than 2-4pm?

Yes, 1pm works for me

Great! let'd do 1pm

@Yaxuan.Zhang @yury.starav Just summarizing our findings from the call: 1. The browser was aggressively caching the

index.html

in our demo application, which meant that changes to the

redirect_uri

were not being reflected in the browser. Switching to incognito mode fixed this 2. For some reason, the

User

that was created via Foo Medical registration was not being configured to your project correctly. I will follow up on this issue ASAP

Thank you for the summary, @rahul1 !

@Yaxuan.Zhang I'm in the process of debugging your patient login. It turns out your patient DID get created successfully as a user, I was just looking at the wrong Tab. You can see your Test2 FooMedical patient here: https://app.medplum.com/admin/patients

Thanks @rahul1 ! I actually forgot which foo medical on vercel I used to create that account. I created another one. I will email you the pw and url.

Thanks @Yaxuan.Zhang - I'll get back to you by EOD