Skip to content

Instantly share code, notes, and snippets.

@narath

narath/index.html

Last active August 12, 2017 21:23
Show Gist options
  • Save narath/7ef6091434fbbe71b3a72affce223416 to your computer and use it in GitHub Desktop.
Save narath/7ef6091434fbbe71b3a72affce223416 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
index.html
<!DOCTYPE html>
<html>
<head>
<title>Simple Auth App</title>
<script src="http://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script>
</head>
<body>
<script>
// get the URL parameters received from the authorization server
var state = getUrlParameter("state"); // session key
var code = getUrlParameter("code"); // authorization code
// load the app parameters stored in the session
var params = JSON.parse(sessionStorage[state]); // load app session
var tokenUri = params.tokenUri;
var clientId = params.clientId;
var secret = params.secret;
var serviceUri = params.serviceUri;
var redirectUri = params.redirectUri;
// Prep the token exchange call parameters
var data = {
code: code,
grant_type: 'authorization_code',
redirect_uri: redirectUri
};
var options;
if (!secret) {
data['client_id'] = clientId;
}
options = {
url: tokenUri,
type: 'POST',
data: data
};
if (secret) {
options['headers'] = {'Authorization': 'Basic ' + btoa(clientId + ':' + secret)};
}
// obtain authorization token from the authorization service using the authorization code
$.ajax(options).done(function(res){
// should get back the access token and the patient ID
var accessToken = res.access_token;
var patientId = res.patient;
// and now we can use these to construct standard FHIR
// REST calls to obtain patient resources with the
// SMART on FHIR-specific authorization header...
// Let's, for example, grab the patient resource and
// print the patient name on the screen
var url = serviceUri + "/Patient/" + patientId;
$.ajax({
url: url,
type: "GET",
dataType: "json",
headers: {
"Authorization": "Bearer " + accessToken
},
}).done(function(pt){
var name = pt.name[0].given.join(" ") +" "+ pt.name[0].family.join(" ");
document.body.innerHTML += "<h3>Patient: " + name + "</h3>";
});
});
// Convenience function for parsing of URL parameters
// based on http://www.jquerybyexample.net/2012/06/get-url-parameters-using-jquery.html
function getUrlParameter(sParam)
{
var sPageURL = window.location.search.substring(1);
var sURLVariables = sPageURL.split('&');
for (var i = 0; i < sURLVariables.length; i++)
{
var sParameterName = sURLVariables[i].split('=');
if (sParameterName[0] == sParam) {
var res = sParameterName[1].replace(/\+/g, '%20');
return decodeURIComponent(res);
}
}
}
</script>
</body>
</html>
Raw
launch.html
<!DOCTYPE html>
<html>
<head>
<title>Simple Auth App - Launch</title>
<script src="http://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script>
</head>
<body>
Loading...
<script>
// Change this to the ID of the client that you registered with the SMART on FHIR authorization server.
var clientId = "16cbfe7c-6c56-4876-944f-534f9306bf8b";
// For demonstration purposes, if you registered a confidential client
// you can enter its secret here. The demo app will pretend it's a confidential
// app (in reality it cannot be confidential, since it cannot keep secrets in the
// browser)
var secret = null; // set me, if confidential
// These parameters will be received at launch time in the URL
var serviceUri = getUrlParameter("iss");
var launchContextId = getUrlParameter("launch");
// The scopes that the app will request from the authorization server
// encoded in a space-separated string:
// 1. permission to read all of the patient's record
// 2. permission to launch the app in the specific context
var scope = [
"patient/*.read",
"launch"
].join(" ");
// Generate a unique session key string (here we just generate a random number
// for simplicity, but this is not 100% collision-proof)
var state = Math.round(Math.random()*100000000).toString();
// To keep things flexible, let's construct the launch URL by taking the base of the
// current URL and replace "launch.html" with "index.html".
var launchUri = window.location.protocol + "//" + window.location.host + window.location.pathname;
var redirectUri = launchUri.replace("launch.html","index.html");
// FHIR Service Conformance Statement URL
var conformanceUri = serviceUri + "/metadata"
// Let's request the conformance statement from the SMART on FHIR API server and
// find out the endpoint URLs for the authorization server
$.get(conformanceUri, function(r){
var authUri,
tokenUri;
var smartExtension = r.rest[0].security.extension.filter(function (e) {
return (e.url === "http://fhir-registry.smarthealthit.org/StructureDefinition/oauth-uris");
});
smartExtension[0].extension.forEach(function(arg, index, array){
if (arg.url === "authorize") {
authUri = arg.valueUri;
} else if (arg.url === "token") {
tokenUri = arg.valueUri;
}
});
// retain a couple parameters in the session for later use
sessionStorage[state] = JSON.stringify({
clientId: clientId,
secret: secret,
serviceUri: serviceUri,
redirectUri: redirectUri,
tokenUri: tokenUri
});
// finally, redirect the browser to the authorizatin server and pass the needed
// parameters for the authorization request in the URL
window.location.href = authUri + "?" +
"response_type=code&" +
"client_id=" + encodeURIComponent(clientId) + "&" +
"scope=" + encodeURIComponent(scope) + "&" +
"redirect_uri=" + encodeURIComponent(redirectUri) + "&" +
"aud=" + encodeURIComponent(serviceUri) + "&" +
"launch=" + launchContextId + "&" +
"state=" + state;
}, "json");
// Convenience function for parsing of URL parameters
// based on http://www.jquerybyexample.net/2012/06/get-url-parameters-using-jquery.html
function getUrlParameter(sParam)
{
var sPageURL = window.location.search.substring(1);
var sURLVariables = sPageURL.split('&');
for (var i = 0; i < sURLVariables.length; i++)
{
var sParameterName = sURLVariables[i].split('=');
if (sParameterName[0] == sParam) {
var res = sParameterName[1].replace(/\+/g, '%20');
return decodeURIComponent(res);
}
}
}
</script>
</body>
</html>
@lallousx86
Copy link

I found this.

https://sb-fhir-dstu2.smarthealthit.org/api/smartdstu2/data

But at the same time, the tutorial says that you should launch your app from the sandbox. Hence, the launcher will pass the right arguments for you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment