Skip to main content

Fire Arrow 2.0.0

· 2 min read
Till Gerken
Till Gerken
CTO

Fire Arrow 2.0.0 has been released.

  • (new) Multiple authentication providers are supported
  • (new) Services calling Fire Arrow's GraphQL API via Azure Identity are supported
  • (new) OrganizationCompartment validator
  • (new) GeneralPractitioner validator supports access to patient compartment for practitioner clients
  • (chore) Dependency updates

Previous releases of Fire Arrow only supported a single authentication system. This limited the use of the GraphQL API to clients that could make reasonable use of the OAuth authentication system but excluded any other clients from making authenticated requests.

Version 2.0.0 features a rebuilt authentication layer that is more efficient, more flexible and also allows authentication through an arbitrary number of authentication providers. OAuth is still supported as in previous releases but now allows configuration via OpenID Connect, making configuration even more straightforward. Azure Identity is supported as completely new authentication system, enabling service-to-service authentication between deployed services on Azure.

The OrganizationCompartment is available as new validator. This functionality was previously embedded in LegitimateInterest, however, the combination of both features into a single validator made it unclear which strategy was used in which situation. In order to be more explicit about how accesses are validated, the organization compartment feature has been removed from LegitimateInterest and is now available as a separate strategy.

In addition, the GeneralPractitioner validator has been enhanced to now give practitioner clients access to all entities in the patient compartment. This enables the inclusion of general practitioners in the care process without having to grant them rights in the patient's managing organization.

Migration notes:

  • Re-write the auth section in config.json according to the new format
  • Where LegitimateInterest was used in combination with the organization compartment, change the validator to OrganizationCompartment