NHS configuration

[AnalogJ]

Status:

• working Oauth redirect
• using Sandpit credentials, OTP

TODO:

• [ ] requires JWT Authz

{
  "custom_definition": true,
  "platform_type": "nhs",
  "authorization_endpoint": "https://auth.sandpit.signin.nhs.uk/authorize",
  "token_endpoint": "https://auth.sandpit.signin.nhs.uk/token",
  "url": "https://int.api.service.nhs.uk/personal-demographics/FHIR/R4",
  "client_id": "fastenhealth",
  "redirect_uri": "https://lighthouse.fastenhealth.com/sandbox/callback/nhs",
  "grant_types_supported": [
    "authorization_code"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query"
  ],
  "aud": "https://int.api.service.nhs.uk/personal-demographics/FHIR/R4",
  "scopes_supported": [
    "openid",
    "profile"
  ],
  "confidential": true,
  "code_challenge_methods_supported": [],
  "issuer": "https://int.api.service.nhs.uk/personal-demographics/FHIR/R4",
  "confidential_endpoint": "982b218a-ce90-4869-a33a-aa4231547fe8",
  "should_override_redirect": true,
  "override_redirect": "nhs"
}

---

Status - OLD - Using incorrect Authentication method

• working redirect and auth with High - P9 test user.
• using mock authentication portal
• redirect back to Fasten
• Token exchange failure due to cors.
• Additional scopes result in error - unknown user - https://developer.community.nhs.uk/t/pds-patient-access-additional-scopes-result-in-errors/731

{
  "custom_definition": true,
  "platform_type": "nhs",
  "authorization_endpoint": "https://int.api.service.nhs.uk/oauth2-mock/authorize",
  "token_endpoint": "https://int.api.service.nhs.uk/oauth2-mock/token",
  "url": "https://int.api.service.nhs.uk/personal-demographics/FHIR/R4",
  "client_id": "XXXX",
  "redirect_uri": "https://lighthouse.fastenhealth.com/sandbox/callback/nhs",
  "grant_types_supported": [
    "authorization_code"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query"
  ],
  "aud": "https://int.api.service.nhs.uk/personal-demographics/FHIR/R4",
  "scopes_supported": [
    "nhs-login"
  ],
  "confidential": false,
  "code_challenge_methods_supported": [
    "S256"
  ],
  "issuer": "https://int.api.service.nhs.uk/personal-demographics/FHIR/R4"
}

[AnalogJ]

WIP

• [x] working AuthN
• [ ] AuthZ failure, 401 if using fastenhealth client id, 400 if using API key.

{
  "custom_definition": true,
  "platform_type": "nhs",
  "should_override_redirect": false,
  "override_redirect": "",
  "authorization_endpoint": "https://auth.sandpit.signin.nhs.uk/authorize",
  "token_endpoint": "https://auth.sandpit.signin.nhs.uk/token",
  "url": "https://int.api.service.nhs.uk/personal-demographics/FHIR/R4",
  "client_id": "fastenhealth",
  "redirect_uri": "https://lighthouse.fastenhealth.com/sandbox/callback/nhs",
  "grant_types_supported": [
    "authorization_code"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query"
  ],
  "aud": "https://int.api.service.nhs.uk/personal-demographics/FHIR/R4",
  "scopes_supported": [
    "openid",
    "profile"
  ],
  "confidential": true,
  "confidential_endpoint": "982b218a-ce90-4869-a33a-aa4231547fe8",
  "pkce": false,
  "code_challenge_methods_supported": [],
  "issuer": "https://int.api.service.nhs.uk/personal-demographics/FHIR/R4"
}

[AnalogJ]

NHS login - Interface Specification - Federation(1).docx

https://nhsconnect.github.io/nhslogin/interface-spec-doc/

[AnalogJ]

• [ ] Onboarding Questions Completion - https://onboarding.prod.api.platform.nhs.uk/Products/Overview
  • [ ] Request Organisation Data Service (ODS) code

Details on connecting to the integration environments can be found here: https://digital.nhs.uk/developer/guides-and-documentation/testing#integration-testing

There are a number of test accounts available for use with the int.api.service.nhs.uk/oauth2-mock endpoint