10.2.5.1 | Appendix: Token Request Examples

POST /receiver-auth-server/token
Host: sending-server.example.com
Content-Type: application/x-www-form-urlencoded

grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Ajwt-bearer
assertion=ew0KICAidHlwIjogIkp[...omitted for brevity...]
client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
client_assertion=ew0KICAidHlwIjogIkp[...omitted for brevity...]

{
 "jti": "4f0dfb37-7f9d-45fa-8187-9e260b80f949",
 "iss": "sending-ehr-issuer-id",
 "iat": "1572468316",
 "exp": "1572468916",
 "aud": "auth-server-id",
 "sub": "sending-ehr-system-id"
}

{
 "jti": "4f0dfb37-7f9d-45fa-8187-9e260b80f949",
 "iss": "sending-ehr-issuer-id",
 "iat": "1572468316",
 "exp": "1572468916",
 "aud": "auth-server-id",
 "sub": "sending-organization-id",
 "user_id": "responsible-user-id",
 "user_role": "responsible-user-role",
 "authorizer": "receiving-organization-id",
 "authorization_base": "ZGFhNDFjY2MtZGFmMi00YjZkLThiNDYtN2JlZDk1MWEyYzk2",
 "patient": "urn:oid:2.16.840.1.113883.2.4.6.3.123456782"
}