Auth event history

Read the audit trail of authorization attempts to see where a connection failed.

When a patient reports that connecting did not work, auth event history is the dashboard trail for the authorization attempt. It shows the steps around portal redirect, consent, OAuth callback, token exchange, and later token refresh.

When to use it

Reach for auth event history when you need to answer questions like these.

  • Did the patient reach the portal?
  • Did they sign in?
  • Did they approve access?
  • Did the token exchange succeed?
  • Did a later refresh fail?

Use Pull monitoring when authorization worked but records are not available yet. Use auth event history when the question is whether access was granted in the first place.

Open the patient

In the dashboard, go to Patients, select the patient, and look at the connection and login history.

Auth event history for a patient in the dashboard

What to look for

FieldWhat it tells you
Source nameWhich EHR or payer the attempt was against
Event statusWhether the attempt succeeded or which failure state it hit
Error codeA stable code you can quote to support
Error descriptionThe human-readable detail
TimestampWhen the attempt happened

Quote the stable error code and timestamp when you contact support. The human-readable description is useful for operators, but the code is what makes the event searchable.

Common outcomes

ScenarioInterpretation
Success with an active connectionThe patient authorized and Medblocks stored usable access
The patient denied consent at the portalThe patient reached the portal but declined to approve access
The portal returned an OAuth errorThe source rejected the request during authorization
A later refresh-token failureA previously active connection lost its access and needs reconnecting

How this differs from pull history

Auth event history answers “what happened during authorization?” Pull history answers “what happened while retrieving records after authorization?”

Dashboard viewBest for
Auth event historySign-in, consent, OAuth, token exchange, refresh-token issues.
Pull historyFHIR retrieval, pagination, resource errors, record availability.

What your app should log

Log these fields so your application logs line up with what the dashboard shows.

  • session_id
  • connection_id
  • success
  • error
  • error_description
  • the Medblocks request_id for any failed API call

See also