Fixing authorization header name in CDSHooks service (#703)

cqframework · Apr 17, 2023 · 269945d · 269945d
1 parent 37475b0
commit 269945d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/plugin/cds-hooks/src/main/java/org/opencds/cqf/ruler/cdshooks/dstu3/CdsHooksServlet.java b/plugin/cds-hooks/src/main/java/org/opencds/cqf/ruler/cdshooks/dstu3/CdsHooksServlet.java
@@ -154,8 +154,8 @@ protected void doPost(HttpServletRequest request, HttpServletResponse response)
 				useServerData = new BooleanType(false);
 				remoteDataEndpoint = new Endpoint().setAddress(cdsHooksRequest.fhirServer);
 				if (cdsHooksRequest.fhirAuthorization != null) {
-					remoteDataEndpoint.addHeader(cdsHooksRequest.fhirAuthorization.tokenType
-						+ ": " + cdsHooksRequest.fhirAuthorization.accessToken);
+					remoteDataEndpoint.addHeader(String.format("Authorization: %s %s",
+						cdsHooksRequest.fhirAuthorization.tokenType, cdsHooksRequest.fhirAuthorization.accessToken));
 					if (cdsHooksRequest.fhirAuthorization.subject != null) {
 						remoteDataEndpoint.addHeader(this.getProviderConfiguration().getClientIdHeaderName()
 							+ ": " + cdsHooksRequest.fhirAuthorization.subject);

diff --git a/plugin/cds-hooks/src/main/java/org/opencds/cqf/ruler/cdshooks/r4/CdsHooksServlet.java b/plugin/cds-hooks/src/main/java/org/opencds/cqf/ruler/cdshooks/r4/CdsHooksServlet.java
@@ -158,8 +158,8 @@ protected void doPost(HttpServletRequest request, HttpServletResponse response)
 				useServerData = new BooleanType(false);
 				remoteDataEndpoint = new Endpoint().setAddress(cdsHooksRequest.fhirServer);
 				if (cdsHooksRequest.fhirAuthorization != null) {
-					remoteDataEndpoint.addHeader(cdsHooksRequest.fhirAuthorization.tokenType
-						+ ": " + cdsHooksRequest.fhirAuthorization.accessToken);
+					remoteDataEndpoint.addHeader(String.format("Authorization: %s %s",
+						cdsHooksRequest.fhirAuthorization.tokenType, cdsHooksRequest.fhirAuthorization.accessToken));
 					if (cdsHooksRequest.fhirAuthorization.subject != null) {
 						remoteDataEndpoint.addHeader(this.getProviderConfiguration().getClientIdHeaderName()
 							+ ": " + cdsHooksRequest.fhirAuthorization.subject);