AJ FHIR HAPI Plugin

v1.0.0 · Spring Boot 3.3 · HAPI FHIR 7.4 · Java 21 · Apache 2.0

A Spring Boot autoconfiguration plugin that pre-wires SMART discovery proxy and scope enforcement onto any HAPI FHIR JPA server. Drop the dependency in, set three properties, and your HAPI server speaks SMART App Launch v2.2.

GitHub: github.com/AKHester-Technologies/aj-smart-fhir-platform

What it does

SMART Client          HAPI FHIR JPA :8080 + Plugin        Auth Server :9000
      │                        │                                  │
      │── GET /fhir/           │                                  │
      │   .well-known/         │ SmartDiscoveryProxyFilter        │
      │   smart-configuration  │── proxies to ──────────────────►│
      │◄─ SMART config ────────│◄─ response ─────────────────────│
      │                        │                                  │
      │── GET /fhir/Patient/   │                                  │
      │   Authorization: Bearer│ SmartScopeAuthInterceptor        │
      │                        │ validates scope in token         │
      │                        │── checks patient/Patient.rs      │
      │◄─ 200 OK / 403 ────────│                                  │

Components

Class	Role
SmartDiscoveryProxyFilter	OncePerRequestFilter — proxies GET /fhir/.well-known/smart-configuration to the Auth Server
SmartScopeAuthorizationInterceptor	HAPI SERVER_INCOMING_REQUEST_PRE_HANDLED interceptor — validates SMART scopes against the Bearer token
HapiFhirAutoConfiguration	@EnableAutoConfiguration entry point — wires both components when smart.auth-server-url is set
RemoteJwksConfig	RemoteJWKSet bean — RS256 JWT validation with automatic key rotation

Installation

<dependency>
    <groupId>org.ajfhir</groupId>
    <artifactId>aj-smart-fhir-platform</artifactId>
    <version>1.0.0</version>
</dependency>

Configuration

smart:
  auth-server-url: http://localhost:9000
  fhir-base-url:   http://localhost:8080/fhir
  jwks-uri:        http://localhost:9000/oauth2/jwks

That is the entire required configuration. The autoconfiguration registers both the proxy filter and the scope interceptor automatically.

Tests

12 tests covering autoconfiguration wiring, scope grant logic, JWKS public-key-only exposure, and RSA key generation.