Smile CDR v2024.05.PRE
On this page:
   45.27    Credentials
  • Configuration Categories
  • 45.0 Web Admin Console Settings
  • 45.1 appSphere
  • 45.2 Payer Config
  • 45.3 Initial appSphere Seeding
  • 45.4 Authentication Callback Scripts
  • 45.5 Auth: General for APIs
  • 45.6 User Authentication
  • 45.7 Auth: HTTP Basic
  • 45.8 Auth: OpenID Connect
  • 45.9 Browser Syntax Highlighting
  • 45.10 Camel
  • 45.11 Capability Statement (metadata)
  • 45.12 Care Gaps
  • 45.13 CDA Generation
  • 45.14 CDA Import
  • 45.15 CDA Interceptors
  • 45.16 CDA JavaScript Execution Scripts
  • 45.17 CDA Terminology
  • 45.18 CDS Hooks Definitions
  • 45.19 CDS Hooks On FHIR
  • 45.20 Channel Import
  • 45.21 Channel Retry
  • 45.22 Kafka
  • 45.23 Cluster Manager Maintenance
  • 45.24 Message Broker
  • 45.25 Cluster Level Security
  • 45.26 CQL
  • 45.27 Credentials
  • 45.28 Cross-Origin Resource Sharing (CORS)
  • 45.29 System to System Data Exchange
  • 45.30 Database
  • 45.31 Da Vinci Health Record Exchange
  • 45.32 DQM
  • 45.33 DTR
  • 45.34 Email Configuration
  • 45.35 Encounter Start CDS hook configuration
  • 45.36 MDM UI
  • 45.37 ETL Import: CSV Properties
  • 45.38 ETL Import: Source
  • 45.39 FHIR Binary Storage
  • 45.40 FHIR Bulk Operations
  • 45.41 Capability Statement
  • 45.42 FHIR Configuration
  • 45.43 Consent Service
  • 45.44 FHIR Endpoint Conversion
  • 45.45 FHIR Endpoint HFQL Support
  • 45.46 FHIR Endpoint Partitioning
  • 45.47 Resource Providers
  • 45.48 FHIR Endpoint Security
  • 45.49 Endpoint Terminology
  • 45.50 FHIR Gateway Cache
  • 45.51 FHIR Gateway Configuration
  • 45.52 FHIR Interceptors
  • 45.53 LiveBundle Service
  • 45.54 FHIR MDM Server
  • 45.55 FHIR Performance
  • 45.56 FHIR Performance Tracing
  • 45.57 FHIR Realtime Export
  • 45.58 Repository Validation
  • 45.59 FHIR Resource Types
  • 45.60 FHIR REST Endpoint
  • 45.61 FHIR Search
  • 45.62 Custom Resource Types
  • 45.63 IG Support
  • 45.64 MegaScale
  • 45.65 FHIR Storage Module Conditional Updates
  • 45.66 FHIR Storage Module Scheduled Tasks
  • 45.67 FHIR Validation Services
  • 45.68 FHIR Storage Package Registry
  • 45.69 FHIR Storage Partitioning
  • 45.70 Versioned References
  • 45.71 FHIR Subscription Delivery
  • 45.72 FHIR Subscription Persistence
  • 45.73 Amazon HealthLake REST Endpoint
  • 45.74 HL7 v2.x Mapper - Contained Resource
  • 45.75 HL7 v2.x Mapper - DG1
  • 45.76 HL7 v2.x Mapper - Forced Namespace Mode
  • 45.77 HL7 v2.x Mapper - General
  • 45.78 HL7 v2.x Mapper - Medications
  • 45.79 HL7 v2.x Mapper - OBR
  • 45.80 HL7 v2.x to FHIR Mapper - OBSERVATION Group
  • 45.81 HL7 v2.x Mapper - ORC
  • 45.82 HL7 v2.x to FHIR Mapper - ORDER_OBSERVATION Group
  • 45.83 HL7 v2.x Mapper - PID
  • 45.84 HL7 v2.x Mapper - PV1
  • 45.85 Listener Interceptors
  • 45.86 HL7 v2.x Listener Script
  • 45.87 HL7 v2.x Listening Endpoint
  • 45.88 HL7 v2.x MLLP Listener
  • 45.89 HL7 v2.x MLLP Sender
  • 45.90 FHIR to HL7 v2.x Mapper Script
  • 45.91 HL7 v2.x Outbound Mapping
  • 45.92 HTTP Access Log
  • 45.93 HTTP Listener
  • 45.94 HTTP Request Pool
  • 45.95 HTTP Security
  • 45.96 Hybrid Providers Definitions
  • 45.97 IG Support
  • 45.98 Initial User Seeding
  • 45.99 JavaScript Execution Environment
  • 45.100 JSON Web KeySet (JWKS)
  • 45.101 LDAP Authentication
  • 45.102 Smile CDR License
  • 45.103 Lucene FullText Indexing
  • 45.104 MDM
  • 45.105 Narrative Generator
  • 45.106 OpenID Connect Token Validation
  • 45.107 OpenID Connect (OIDC)
  • 45.108 Order Sign CDS hook configuration
  • 45.109 Payer to Payer
  • 45.110 Prior Authorization Coverage Requirement Discovery
  • 45.111 Prior Authorization Support
  • 45.112 Privacy Security Notice
  • 45.113 Provenance Injection
  • 45.114 Quality Payment Program (QPP)
  • 45.115 Realtime Export
  • 45.116 Endpoint Validation: Request Validating
  • 45.117 Scheduler Configuration
  • 45.118 Search Parameter Seeding
  • 45.119 SAML Provider
  • 45.120 Security Inbound Script
  • 45.121 Inbound SMART on FHIR Authentication
  • 45.122 Inbound SMART on FHIR Endpoints
  • 45.123 OAuth2/OIDC Federation
  • 45.124 SMART Callback Script
  • 45.125 Cross-Organizational Data Access Profile
  • 45.126 SMART Login Skin
  • 45.127 SMART Login Terms of Service
  • 45.128 SMART Authorization
  • 45.129 SMART Definitions Seeding
  • 45.130 Sessions
  • 45.131 Two Factor Authentication
  • 45.132 TLS / SSL (Encryption)
  • 45.133 Transaction Log
  • 45.134 Trusted Client
  • 45.135 User Self Registration
    • 45.29    System to System Data Exchange   
       Table of Contents

    Cross-Origin Resource Sharing (CORS)

    45.28.1Cross-Origin Resource Sharing (CORS)

     

    The Cross-Origin Resource Sharing (CORS) configuration category includes the following configurable options:

    • CORS Allowed Request Headers

    • CORS Enabled

    • CORS Origins

    45.28.2Property: CORS Allowed Request Headers

     
    Property Name CORS Allowed Request Headers
    Property Key
    Property Type STRING
    Description A comma-separated list of allowable request headers for the CORS filter. These will be added in addition to the default headers required for Smile CDR's default functionality.
    Applies to Modules
    • CDS Hooks REST Endpoint
    • FHIR Gateway REST Endpoint
    • FHIR REST Endpoint (All FHIR Versions)
    • FHIR REST Endpoint (DSTU2 - Deprecated)
    • FHIR REST Endpoint (R3 - Deprecated)
    • FHIR REST Endpoint (R4 - Deprecated)
    • Hybrid Providers REST Endpoint
    • JSON Admin API
    • MDM UI
    • Package Registry Endpoint
    • Payer to Payer
    • SMART Outbound Security
    • appSphere
    Default Value (no default)
    Example Property 
    module.[MODULE_ID].config.cors.allowed_headers =

    45.28.3Property: CORS Enabled

     
    Property Name CORS Enabled
    Property Key
    Property Type BOOLEAN
    Description Should this endpoint allow the use of CORS? Enable this item only if you understand what it is doing.
    Applies to Modules
    • CDS Hooks REST Endpoint
    • FHIR Gateway REST Endpoint
    • FHIR REST Endpoint (All FHIR Versions)
    • FHIR REST Endpoint (DSTU2 - Deprecated)
    • FHIR REST Endpoint (R3 - Deprecated)
    • FHIR REST Endpoint (R4 - Deprecated)
    • Hybrid Providers REST Endpoint
    • JSON Admin API
    • MDM UI
    • Package Registry Endpoint
    • Payer to Payer
    • SMART Outbound Security
    • appSphere
    Default Value false
    Example Property 
    module.[MODULE_ID].config.cors.enable = false

    45.28.4Property: CORS Origins

     
    Property Name CORS Origins
    Property Key
    Property Type STRING
    Description A comma-separated list of allowable origins for the CORS filter. For example: https://example.com, https://try.smilecdr.com:9201. You may also use the wildcard value * to allow CORS for all domains, however this is generally not considered a good practice for production systems serving sensitive data.
    Applies to Modules
    • CDS Hooks REST Endpoint
    • FHIR Gateway REST Endpoint
    • FHIR REST Endpoint (All FHIR Versions)
    • FHIR REST Endpoint (DSTU2 - Deprecated)
    • FHIR REST Endpoint (R3 - Deprecated)
    • FHIR REST Endpoint (R4 - Deprecated)
    • Hybrid Providers REST Endpoint
    • JSON Admin API
    • MDM UI
    • Package Registry Endpoint
    • Payer to Payer
    • SMART Outbound Security
    • appSphere
    Default Value *
    Example Property 
    module.[MODULE_ID].config.cors.origins = *
       45.27    Credentials
  • Configuration Categories
  • 45.0 Web Admin Console Settings
  • 45.1 appSphere
  • 45.2 Payer Config
  • 45.3 Initial appSphere Seeding
  • 45.4 Authentication Callback Scripts
  • 45.5 Auth: General for APIs
  • 45.6 User Authentication
  • 45.7 Auth: HTTP Basic
  • 45.8 Auth: OpenID Connect
  • 45.9 Browser Syntax Highlighting
  • 45.10 Camel
  • 45.11 Capability Statement (metadata)
  • 45.12 Care Gaps
  • 45.13 CDA Generation
  • 45.14 CDA Import
  • 45.15 CDA Interceptors
  • 45.16 CDA JavaScript Execution Scripts
  • 45.17 CDA Terminology
  • 45.18 CDS Hooks Definitions
  • 45.19 CDS Hooks On FHIR
  • 45.20 Channel Import
  • 45.21 Channel Retry
  • 45.22 Kafka
  • 45.23 Cluster Manager Maintenance
  • 45.24 Message Broker
  • 45.25 Cluster Level Security
  • 45.26 CQL
  • 45.27 Credentials
  • 45.28 Cross-Origin Resource Sharing (CORS)
  • 45.29 System to System Data Exchange
  • 45.30 Database
  • 45.31 Da Vinci Health Record Exchange
  • 45.32 DQM
  • 45.33 DTR
  • 45.34 Email Configuration
  • 45.35 Encounter Start CDS hook configuration
  • 45.36 MDM UI
  • 45.37 ETL Import: CSV Properties
  • 45.38 ETL Import: Source
  • 45.39 FHIR Binary Storage
  • 45.40 FHIR Bulk Operations
  • 45.41 Capability Statement
  • 45.42 FHIR Configuration
  • 45.43 Consent Service
  • 45.44 FHIR Endpoint Conversion
  • 45.45 FHIR Endpoint HFQL Support
  • 45.46 FHIR Endpoint Partitioning
  • 45.47 Resource Providers
  • 45.48 FHIR Endpoint Security
  • 45.49 Endpoint Terminology
  • 45.50 FHIR Gateway Cache
  • 45.51 FHIR Gateway Configuration
  • 45.52 FHIR Interceptors
  • 45.53 LiveBundle Service
  • 45.54 FHIR MDM Server
  • 45.55 FHIR Performance
  • 45.56 FHIR Performance Tracing
  • 45.57 FHIR Realtime Export
  • 45.58 Repository Validation
  • 45.59 FHIR Resource Types
  • 45.60 FHIR REST Endpoint
  • 45.61 FHIR Search
  • 45.62 Custom Resource Types
  • 45.63 IG Support
  • 45.64 MegaScale
  • 45.65 FHIR Storage Module Conditional Updates
  • 45.66 FHIR Storage Module Scheduled Tasks
  • 45.67 FHIR Validation Services
  • 45.68 FHIR Storage Package Registry
  • 45.69 FHIR Storage Partitioning
  • 45.70 Versioned References
  • 45.71 FHIR Subscription Delivery
  • 45.72 FHIR Subscription Persistence
  • 45.73 Amazon HealthLake REST Endpoint
  • 45.74 HL7 v2.x Mapper - Contained Resource
  • 45.75 HL7 v2.x Mapper - DG1
  • 45.76 HL7 v2.x Mapper - Forced Namespace Mode
  • 45.77 HL7 v2.x Mapper - General
  • 45.78 HL7 v2.x Mapper - Medications
  • 45.79 HL7 v2.x Mapper - OBR
  • 45.80 HL7 v2.x to FHIR Mapper - OBSERVATION Group
  • 45.81 HL7 v2.x Mapper - ORC
  • 45.82 HL7 v2.x to FHIR Mapper - ORDER_OBSERVATION Group
  • 45.83 HL7 v2.x Mapper - PID
  • 45.84 HL7 v2.x Mapper - PV1
  • 45.85 Listener Interceptors
  • 45.86 HL7 v2.x Listener Script
  • 45.87 HL7 v2.x Listening Endpoint
  • 45.88 HL7 v2.x MLLP Listener
  • 45.89 HL7 v2.x MLLP Sender
  • 45.90 FHIR to HL7 v2.x Mapper Script
  • 45.91 HL7 v2.x Outbound Mapping
  • 45.92 HTTP Access Log
  • 45.93 HTTP Listener
  • 45.94 HTTP Request Pool
  • 45.95 HTTP Security
  • 45.96 Hybrid Providers Definitions
  • 45.97 IG Support
  • 45.98 Initial User Seeding
  • 45.99 JavaScript Execution Environment
  • 45.100 JSON Web KeySet (JWKS)
  • 45.101 LDAP Authentication
  • 45.102 Smile CDR License
  • 45.103 Lucene FullText Indexing
  • 45.104 MDM
  • 45.105 Narrative Generator
  • 45.106 OpenID Connect Token Validation
  • 45.107 OpenID Connect (OIDC)
  • 45.108 Order Sign CDS hook configuration
  • 45.109 Payer to Payer
  • 45.110 Prior Authorization Coverage Requirement Discovery
  • 45.111 Prior Authorization Support
  • 45.112 Privacy Security Notice
  • 45.113 Provenance Injection
  • 45.114 Quality Payment Program (QPP)
  • 45.115 Realtime Export
  • 45.116 Endpoint Validation: Request Validating
  • 45.117 Scheduler Configuration
  • 45.118 Search Parameter Seeding
  • 45.119 SAML Provider
  • 45.120 Security Inbound Script
  • 45.121 Inbound SMART on FHIR Authentication
  • 45.122 Inbound SMART on FHIR Endpoints
  • 45.123 OAuth2/OIDC Federation
  • 45.124 SMART Callback Script
  • 45.125 Cross-Organizational Data Access Profile
  • 45.126 SMART Login Skin
  • 45.127 SMART Login Terms of Service
  • 45.128 SMART Authorization
  • 45.129 SMART Definitions Seeding
  • 45.130 Sessions
  • 45.131 Two Factor Authentication
  • 45.132 TLS / SSL (Encryption)
  • 45.133 Transaction Log
  • 45.134 Trusted Client
  • 45.135 User Self Registration
    • 45.29    System to System Data Exchange