Authorization request rejected

What it means

The EHR refused the sign-in request itself, before anyone signed in. Its error description is the best clue; common culprits are aud (must equal the FHIR base URL), PKCE, or a parameter the EHR does not expect.

Fix

Read the error description; check aud equals the FHIR base URL exactly.

Check it with smart-doctor

Run your login and smart-doctor ranks this cause against the others, with the evidence it found.

npx smart-doctor check my-profile

Already have the server’s error? Explain it without running anything.

npx smart-doctor explain '{"error":"invalid_request"}'