Unable to Make API call's even using Cognito Token, API Key - Getting UnAuthorized Error about fhir-works-on-aws

[Bingjiling]

Hi @nkundella,

Thanks for reaching out! Have you tried the /metadata endpoint? The metadata endpoint does not require authorization and can help determine if the server is running properly.

[nkundella]

Hi @Bingjiling,
I tried the /metadata endpoint, it works fine, please check the attached capture.

[nkundella]

For instance, I tried to hit POST account endpoint, and on cloudwatch I see this response and not much information.

[nkundella]

The test within api-gateway fails with same error.

[nguyen102]

Did you include the x-api-key in the header? Can you send what the curl command for your request looks like?

For example this is what mine looks like

curl --location '{API_URL}/Account' \
--header 'x-api-key: {API_KEY}' \
--header 'Authorization: Bearer {{COGNITO_TOKEN}}'

[nkundella]

I do have all those in my curl.

[nkundella]

Here is another snapshot of my curl command (We have used aws/solutions/deployment for this)
Provided the following details as requested.

1. API Key in the headers for FHIR (From Amazon API Gateway)
2. Provided the url and below is the url we are using (masking the id's)
3. Providing the Bearer Token as well from Cognito.

Please refer the below image.

The entire deployment we are doing in ca-central-1

[nkundella]

Which timezone are you working from?
So that, we can have active conversation in a day.

[nguyen102]

Hi, can you confirm that you deployed the Cognito version of FWoA? The instructions for deployment are here

This is the command for deploying Cognito version of FWoA.
cd ./solutions/deployment rushx deploy --profile <AWS PROFILE> -c stage=<STAGE> -c region=<AWS_REGION>

Can you go into Cognito and check what groups the Cognito user is in? Is the user in the practitioner group?