I am trying to work with Epic on FHIR. Epic's documentation stated, your application makes a HTTP POST request to the authorization server's OAuth 2.0 token endpoint to obtain access token.
Set tSC = ##class(%SYS.OAuth2.Authorization).GetAccessTokenClient(pClient,pScopes,.prop,.err) returns
ERROR #9761: No key in provided JWKS for alg ES512 and kid
I check this /csp/sys/oauth2/OAuth2.JWTServer.cls?client_name=medbank and I see this:
{
"keys": [
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RS256",
"use": "sig",
"kid": "1"
},
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RS384",
"use": "sig",
"kid": "2"
},
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RS512",
"use": "sig",
"kid": "3"
},
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RSA1_5",
"use": "enc",
"kid": "4"
},
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RSA-OAEP",
"use": "enc",
"kid": "5"
}
]
}
Previously I had a similar or same configuration return
{
"keys": [
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RS256",
"use": "sig",
"kid": "1"
},
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RS384",
"use": "sig",
"kid": "2"
},
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RS512",
"use": "sig",
"kid": "3"
},
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RSA1_5",
"use": "enc",
"kid": "4"
},
{
"kty": "RSA",
"n": "znrmjuKwUAI3eH6OiLANiNDkGP6EC8HoA5sr5sEJwAuc3U3IPSQ2SsNgFmNtaArAc7tpovz3_IRxYKOQNz_riq0mBWhtdwc9hp-PAzQOix-cCRz69IXh3nErLrVJ777taO9ARzvxTmcjE_X3TkDq-F5F4fO7OwhvLsl1hjC3nmemkF-gVFD4DQumx84UkwHNu4astSvQrlqFAEvpjbHJ0LP-HNIZe6HP_wUPSCBnE_cFVjR2oxSV5SZEo_Blo2n0d02YVDrqBxccTWEhjbopBWv9JG0IWSL3M7AK7CAa5Oboeub02VBKwTtwNMRmcnKOOMAzDKa-gur7_S_HJWAnvQ",
"e": "AQAB",
"alg": "RSA-OAEP",
"use": "enc",
"kid": "5"
}
]
}
How can I get JWKS to include ES512 algorithm?