HealthVaultJavaLib Forum Rss Feed

New Post: HVAccessDeniedException

robmay — Thu, 13 Jun 2013 17:31:27 GMT

Hi Greg,

The idea was that when you create the connect request, you pass in an identifier from your system as the "external-id". When you call GetAuthorizedConnectRequests, you will receive the HV person-id, record-id and your external-id. You can then use the external-id to map the HV record to your system.

As an aside, I haven't published a new Java release in a while but the trunk of the code base has updated methods and types. You should feel free to download that and use it if you find something you need there. I should be publishing another release here shortly. The trunk is always kept in working order.

--Rob

New Post: HVAccessDeniedException

geoyang — Thu, 13 Jun 2013 15:28:36 GMT

Rob - we are still trying to figure out an elegant way to get the personID and recordID. I think the way to do it is to write our own linking tool, basically our own version of https://account.healthvault-ppe.com/patientwelcome.aspx, step #4.

If we write that we can return the patientID and RecordID, I think? But we don't see any sample code or a template for that. Is there anything out there?

Below is the process to generate the personId.

1. WELL app sends secret question, answer, friendlyname and externalID to HV.

2. HV generates a 20 digit identity token, which is sent to the user.

3. User logs in HV site enters this identity token, approves the WELL app to access his health data.

The problem we face is that there is no API to get personId given an identity token.

We need this since step 2 and 3 happen on different systems and there is no way for us to get the personId based on information we have.

Currently we are iterating through list of AuthorisedPerson and match the last name to find the person, but this is not right.

We feel that there should be an API in HV that we are missing, which returns personID given some identifier that WELL is aware of. (i.e. either external ID or identity token)

While traversing through documentation we had seen there is an API in .NET called getAlternateIds(), not sure if it returned the personID, but this API is not present in JAVA sdk.

Thanks for your help!

-Greg

New Post: HVAccessDeniedException

robmay — Wed, 12 Jun 2013 22:33:43 GMT

Those users have fully authorized the application as shown by "app-record-auth-action="NoActionRequired". If the application had changed its permission set to include new types or permissions, the status would be listed as ReauthorizationRequired.

You application does not appear to have ONLINE permission to create whatever thing you are trying to create. It looks like you make some calls offline and some calls online. Is that correct? Do you have a web front end and some backend processing? Be sure to re-check the online AND offline rules in the Application Configuration Center.

I'm not sure what you mean when you say, "I can't really get them to do a new connect because it knows they are already connected". Do you mean your system already knows they are connected, or HealthVault. In HealthVault's case, you can simply enter the same PatientConnect code and reauthorize the same record. You can create a new code too, if you'd like.

--Rob

New Post: HVAccessDeniedException

geoyang — Wed, 12 Jun 2013 20:50:45 GMT

Rob,

Rob,

I think we've pretty much got that too, this is what I see coming from our server, here's one of our registered users! :) I think it's mostly the 20 minute thing and the fact that we need to have our AppID on the production side so I can see all my data. I can't really get them to do a new connect because it knows they are already connected and they remove all access button is grayed out. Do you know how to fix that? do you guys have admin access to kill that link?

<person-id>3785d109-2d84-441d-9baa-b9bf37f832a3</person-id><name>Greg Eoyang</name><selected-record-id>020ff74f-4bb6-44d5-b7a5-cee2ce7dc3c0</selected-record-id><record id="020ff74f-4bb6-44d5-b7a5-cee2ce7dc3c0" record-custodian="true" rel-type="1" rel-name="Self" auth-expires="9999-12-31T23:59:59.999Z" display-name="Greg" state="Active" date-created="2013-06-12T18:15:18.073Z" max-size-bytes="4294967296" size-bytes="1041" app-record-auth-action="NoActionRequired" app-specific-record-id="242005" location-country="US" date-updated="2013-06-12T18:15:46.313Z">Greg Eoyang</record><preferred-culture><language>en-US</language></preferred-culture><preferred-uiculture><language>en-US</language></preferred-uiculture><location><country>US</country></location></person-info><person-info>

<person-id>beb76296-2a21-4c50-9fc3-125c0a546517</person-id><name>Persistent2 test</name><selected-record-id>8cf28106-522b-49bd-a951-12bc70999d9d</selected-record-id><record id="8cf28106-522b-49bd-a951-12bc70999d9d" record-custodian="true" rel-type="1" rel-name="Self" auth-expires="9999-12-31T23:59:59.999Z" display-name="Persistent2" state="Active" date-created="2013-05-31T11:40:38.45Z" max-size-bytes="4294967296" size-bytes="1002" app-record-auth-action="NoActionRequired" app-specific-record-id="241122" location-country="US" date-updated="2013-06-04T06:31:39.073Z">Persistent2 test</record><preferred-culture><language>en-GB</language></preferred-culture><preferred-uiculture><language>en-GB</language></preferred-uiculture><location><country>US</country></location></person-info>

New Post: HVAccessDeniedException

robmay — Wed, 12 Jun 2013 19:02:24 GMT

Hi Greg,

Cool. You are pretty far. When a user accepts a patient connect request at HealthVault, a few things happen. The user might have needed to create a HealthVault account, they will authorize your application, and the accepted connect request will become available through the method GetAuthorizedConnectRequests.

The part left for your application is to read the Authorized Connect Requests, discover the person-id and record-id, and map that to a user in your system through the external-id in the request.

With the person-id and record-id your application can make offline calls (basically just using the person-id instead of an access token). In order to do that, your application needs to be provisioned with offline rules. If you look in the app configuration center, there are online as well as offline rules. Be sure you add offline rules.

When you make changes to your permissions in app configuration center, it may take up to 20 minutes to propagate. That's a bummer, I know. Any existing users will also need to reauthorize your application to accept the new permissions. You can get them to reauthorize via a new connect request if you want.

Let me know how it goes.

--Rob

New Post: HVAccessDeniedException

geoyang — Wed, 12 Jun 2013 18:13:36 GMT

Rob - thanks for the quick responses - I can see by the answers here that you are 'the man' so I'm very excited. :)

Yeah, I'm pretty sure I got the keystore and all of that right because I'm not getting the HVException any more.. :)

Step 3, well, We are going to need a patient connect model and I'm working through the sample code to try to build what we need. We actually do have a service running that will generate a GUID, given the question and answer (and of course we send the AppID). I can see that we get added OK, but I don't seem to have access (read or write...) The way I understand the GUID is that it links any logged in user if they correctly answer the secret question and answer to the AppID that we generated the GUID with.

For some reason the way it looks is that I'm able to add people without any privs and now I can't delete them. if you look at the user: pranav_kurbetti@yahoo.com or Greg Eoyang (not sure what kind of access you have to the PPE? you can see this. I think this comes from changing the prives of the AppID once it's already in use or something like that?

We would like to be able to have people send a secret question and answer to our interface - which then will generate a GUID and send it via email to them, which is already working (I think...), then they go to the patientwelcome.aspx page and complete the link by selecting the right person from their account.

The link works, but the app can't read anything through the link.

Greg.

New Post: HVAccessDeniedException

robmay — Wed, 12 Jun 2013 17:56:59 GMT

Hi,

I'm sort of following you. It sounds like you created your own AppId at https://config.healthvault-ppe.com. That's awesome.

It sounds like you want to run one of the sample apps with your AppId. Which one? The one under examples/ui-jaxb? In order to do that you need to make two changes.

edit src/main/resources/hv-application.properties and set app.id=<your app-id>
ensure your private key is in src/main/resources/keystore. You can find those instructions here: https://healthvaultjavalib.codeplex.com/wikipage?title=Getting%20Started under "Private Key".

What I'm confused about is when you get to your step 3) where you generate a GUID with the appid, alias, question and answer. Are you trying to do patient connect? I'm not sure why, especially if you are trying to use the sample application. Can you elaborate on that?

--Rob

New Post: HVAccessDeniedException

geoyang — Wed, 12 Jun 2013 16:32:38 GMT

I was just causing the get weight sample program. I do not think that my record is authorized, although I have Added the app.

I think I'm missing a step.

This is what we did:

1) created an AppID
2) altered the sample app with the weight thing in it to use that app id versus the wildcat appid
3) generated the GUID with the appid, alias, question and answer
4) type all that into the patient register page
5) linked it to that user
6) Looking in the app for activity - nothing shows up, although in wildcat you can see where it authorized a record.

There also seems to be some sort of delay between when I configure the app for read access (for example) to vitals and when that seems to work? I removed the app from the user, then re-added it to see if I missed a step or maybe the order was wrong. and now I can't see the records I could see before.

:(

What am I getting wrong?

New Post: Need association between personID and my apps patientId

robmay — Tue, 11 Jun 2013 22:43:24 GMT

Hi,

This is a great question (and not difficult to do) but better asked over at the HealthVault developer forums. It doesn't pertain directly to the Java part of this project. Check out: http://social.msdn.microsoft.com/forums/en-US/healthvault/

New Post: How to construct a 'thing' element for HeartRate

robmay — Tue, 11 Jun 2013 22:41:22 GMT

Hi,

The error returned from HealthVault should contain a string message telling you what went wrong. If you can use the Jaxb code, it will construct valid XML for you. I added HeartRateTest to the unit test so that you could see it. Here is some XML:

<info>
  <thing>
    <type-id>b81eb4a6-6eac-4292-ae93-3872d6870994</type-id>
    <data-xml>
      <heart-rate>
        <when>
          <date>
            <y>2013</y>
            <m>6</m>
            <d>11</d>
          </date>
          <time>
            <h>15</h>
            <m>32</m>
            <s>40</s>
            <f>556</f>
          </time>
        </when>
        <value>60</value>
      </heart-rate>
    </data-xml>
  </thing>
</info>

New Post: HVAccessDeniedException

robmay — Tue, 11 Jun 2013 22:19:29 GMT

What method are you calling when you get the error? Have you authorized a record for your application?

New Post: JaxB marshalling

robmay — Tue, 11 Jun 2013 22:18:29 GMT

Hi Alex,

Try looking at the Jaxb unit tests for how it works. You'll end up with code like this:

public void CreateThing() {
        Thing thing = new Thing();
        thing.setData(createValidAllergy());
        
        PutThingsRequest request = new PutThingsRequest();
        request.getThing().add(thing);
        
        PutThingsResponse response = (PutThingsResponse)requestTemplate.makeRequest(request);
}
        
private Allergy createValidAllergy() {
        Allergy allergy = new Allergy();
        allergy.setName(new CodableValue("Dairy", 
                new CodedValue("value", "family", "type", "version")));
        
        ApproxDate dt = new ApproxDate();
        dt.setY(1960);
        StructuredApproxDate sad = new StructuredApproxDate();
        sad.setDate(dt);
        ApproxDateTime firstObs = new ApproxDateTime();
        firstObs.setStructured(sad);
        allergy.setFirstObserved(firstObs);
        
        allergy.setAllergenCode(new CodableValue("my-code"));
        
        Name name = new Name();
        name.setFull("Dr. Who");
        Person person = new Person();
        person.setName(name);
        allergy.setTreatmentProvider(person);
        
        return allergy;
    }

New Post: Need association between personID and my apps patientId

pachaudhary — Wed, 05 Jun 2013 10:52:35 GMT

Hi,

I need to know if there is any way of relating my database patientId with Healthvault personId.

My scenario is as follows.

In my local DB a patient registers himself, he then sends his information to healthvault to
generate a identity token.
He then logs into healthvault and approves my app to access his data.
My problem is how do I associate my DBs patient Id with the person ID generated by healthvault.

Any help will appreciated.

New Post: HVAccessDeniedException

geoyang — Tue, 04 Jun 2013 20:27:51 GMT

I've created my AppID and it seems to be authenticating, but when I try to post something, it gives me HVAccessDeniedException.

I've modified the permissions to allow crud - but it's acting as if I don't have the ability to read or write. I've noticed someone say they had to 'restart' the application, but I'm calling it from eclipse and have restarted it many times. Is there anything else I need to do to get the permissions?

It would also be really nice to see the error in a more legible way. I think I'm getting error number 11?

Can you help?

Greg

New Post: How to construct a 'thing' element for HeartRate

brianreinhold — Sat, 25 May 2013 14:39:00 GMT

Somewhere there must be some documentation/example of what the xml would look like for the heart rate measurement. I have stumbled on some stuff but not all. My current 'info' element looks as follows:
<info>
<thing>

<type-id>b81eb4a6-6eac-4292-ae93-3872d6870994</type-id>
<data-xml>
  <heartrate>
    <when>
      <date>
        <y>2013</y>
        <m>05</m>
        <d>25</d>
      </date>
      <time>
        <h>10</h>
        <m>23</m>
        <s>37</s>
        <f>0</f>
      </time>
    </when>
    <value>50</value>
    <unit>
      <text>Beats per Minute</text>
    </unit>
  </heartrate>
</data-xml>

</thing>
</info>

But this xml is being rejected. My suspicion is the <heartrate> element which was a pure guess. Anybody know what this xml should look like? (Note this is not a vital sign but the independent heart rate measurement.

Thanks!

New Post: JaxB marshalling

alextrs — Wed, 22 May 2013 19:01:00 GMT

I try to use JaxB HealthVault SDK to upload CCD, code sample:

ObjectFactory factory = new ObjectFactory();
DataXml dataXml = factory.createDataXml();

Thing thing = new Thing();
thing.setTypeId(thingType);
thing.setThingState(ThingState.ACTIVE);
thing.setData(jaxBElement);

but get an error back:

unable to marshal type "com.microsoft.hsg.thing.oxm.jaxb.thing.DataXml" as an element because it is missing an @XmlRootElement annotation

I tried to use JAXBElement as wrapper, but then I got this error:

"javax.xml.bind" doesnt contain ObjectFactory.class or jaxb.index

What am I doing wrong?

New Post: Certificate validation failure in production

robmay — Mon, 06 May 2013 17:05:03 GMT

Hi all,

Yes, the SSL certificates were misconfigured at HV for a while. The issue has been resolved.

--Rob

New Post: Certificate validation failure in production

xadhatter — Wed, 24 Apr 2013 15:30:33 GMT

Hey Ali,

I have been seeing the same issue the past few days when trying to perform drop-offs. The issue is intermittent. Sometimes I get the same exception as you noted above:

sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed

Other times I'll see this one:

Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated

I assume the root cause is the same. I have retries built in. Sometimes the same request will go through fine on the 2nd or 3rd retry, sometimes not.

I came across this post from 2006 http://social.msdn.microsoft.com/Forums/en-US/adcenterdev/thread/c36663e3-726b-4ccd-a0fe-9a1f0fd0fe38/ which recommends manually importing the SSL certificate using keytool. I have done this on a test system and it appears to resolve the issue. But I am not 100% sure as the issue is intermittent for me.

Regards,
BJ

New Post: Certificate validation failure in production

naddaf — Fri, 19 Apr 2013 04:01:37 GMT

Hi.

Does anyone know if there has been a recent change in the platform.healthvault.com certificate? Recently my application is failing when it wants to sync its data with HealthVault and I get

sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed

Many thanks,
Ali.

New Post: Custom Data Type

marauder89 — Wed, 27 Mar 2013 04:06:33 GMT

Hi,

I'd like to know how to create a wrapper for the custom data type in the Java SDK. There is a pointer for this in the.NET sdk - http://msdn.microsoft.com/en-us/library/ff803581.aspx. I'm new to the Java SDK and would like a heads up for this.

Thanks in advance