Josh Mandel

Tutorial leaves this out for now because it differs by provider.

Implicit grants should include scope in the redirection hash

2

http://tools.ietf.org/html/draft-ietf-oauth-v2-31#section-4.2.2 If scope is different from the app's requested scope, it's a required parameter (otherwise optional). Since the decision middleware doesn't explicitly handle scope, it has no way to tell...

Augmenting :component-will-receive-props to support positional args?

2

This is an API design question about lifecycle methods (specifically, `:component-will-receive-props`). Let's say I have a component that receives some properties through positional parameters, and maintains other details as local...

Are hookInstances ever repeated across calls?

1

We currently say: > Note: the hookInstance is globally unique and should contain enough entropy to be un-guessable. But also: > While working in the CDS Client, a user can...

Remove "subject" property from "fhirAuthorization" object

3

Currently we define a "fhirAuthorization" object with a `subject` property:  This is the only place in the specification where the CDS Service's `client_id` (as issued by the EHR at...

Yubikey 5c nano not working on Pixel 3

2

When I plug my Yubikey 5c nano into the usbc port of my Pixel 3, OpenKeychain attempts "gathering information" but does not find any keys.  ## Expected Behavior I...

No good way to use multiple versions of the library in a single project?

4

In S4S we're building some demo apps that connect to DSTU2 clinical data servers and an STU3 financial server from CMS. I tried loading two versions of the library at...

Parsing drops extensions on primitives

6

Documenting a known issue: parsing FHIR resources with extensions on primitives silently drops the extensions. For example: ``` { "resourceType": "Patient", "gender": "male", "_gender": { "extension": [{ "url": "http://test-extension", "valueString":...

Is "kid" required in the OIDC id_token?

1

Looking throgh https://openid.net/specs/openid-connect-core-1_0.html#IDToken and https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-41 I'm not seeing that this is required in the id_token JWT header -- but I may just be missing it.

Unclear results from MIME type checks

1

 Server response included: content-type: application/json;charset=utf-8 If the "charset=utf-8" weren't there, would this be acceptable? Does the charset make it *wrong* per Inferno?