Phoenix Ortho FHIR API Documentation

# Fetch the live CapabilityStatement
curl -X GET "https://phoenixfhir-apim.azure-api.net/smart/metadata" \
  -H "Accept: application/fhir+json"// Fetch CapabilityStatement in JavaScript
const response = await fetch("https://phoenixfhir-apim.azure-api.net/smart/metadata", {
  headers: { "Accept": "application/fhir+json" }
});
const capabilityStatement = await response.json();
console.log("FHIR Version:", capabilityStatement.fhirVersion);# Fetch CapabilityStatement in Python
import requests

resp = requests.get(
    "https://phoenixfhir-apim.azure-api.net/smart/metadata",
    headers={"Accept": "application/fhir+json"}
)
capability_statement = resp.json()
print("FHIR Version:", capability_statement.get("fhirVersion"))

# 1. Direct browser to Authorization URL
https://phoenixfhir-apim.azure-api.net/auth/authorize?
  response_type=code&
  client_id=test_client&
  redirect_uri=https://example.com/callback&
  scope=openid+fhirUser+offline_access+patient/*.read&
  state=xyzState123&
  aud=https://phoenixfhir-apim.azure-api.net/smart&
  code_challenge=E9Melhoa2OwvFrGMTJguCH5rtx64ZnJSmv38DCyLIOc&
  code_challenge_method=S256

# 2. Exchange authorization code for Access Token
curl -X POST "https://phoenixfhir-apim.azure-api.net/auth/token" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=authorization_code" \
  -d "code=AUTH_CODE_RECEIVED_AT_CALLBACK" \
  -d "redirect_uri=https://example.com/callback" \
  -d "client_id=test_client" \
  -d "code_verifier=VERIFIER_STRING_BEFORE_HASHING"// Token exchange in JavaScript
const tokenResponse = await fetch("https://phoenixfhir-apim.azure-api.net/auth/token", {
  method: "POST",
  headers: { "Content-Type": "application/x-www-form-urlencoded" },
  body: new URLSearchParams({
    grant_type: "authorization_code",
    code: authCode,
    redirect_uri: "https://example.com/callback",
    client_id: "test_client",
    code_verifier: codeVerifier
  })
});
const tokenData = await tokenResponse.json();
const accessToken = tokenData.access_token;
const patientId = tokenData.patient;# Token exchange in Python
import requests

token_resp = requests.post(
    "https://phoenixfhir-apim.azure-api.net/auth/token",
    data={
        "grant_type": "authorization_code",
        "code": auth_code,
        "redirect_uri": "https://example.com/callback",
        "client_id": "test_client",
        "code_verifier": code_verifier
    }
)
token_data = token_resp.json()
access_token = token_data["access_token"]
patient_id = token_data.get("patient")

# Query Patient Demographics
curl -X GET "https://phoenixfhir-apim.azure-api.net/smart/Patient/phoenixortho.net-PAT1000000013" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -H "Accept: application/fhir+json"

# Search Conditions for this Patient
curl -X GET "https://phoenixfhir-apim.azure-api.net/smart/Condition?patient=phoenixortho.net-PAT1000000013" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -H "Accept: application/fhir+json"// Query Condition resources in JavaScript
const headers = {
  "Authorization": `Bearer ${accessToken}`,
  "Accept": "application/fhir+json"
};
const res = await fetch(`https://phoenixfhir-apim.azure-api.net/smart/Condition?patient=${patientId}`, { headers });
const conditionBundle = await res.json();
console.log(`Found ${conditionBundle.total || conditionBundle.entry.length} conditions.`);# Query Condition resources in Python
import requests

headers = {
    "Authorization": f"Bearer {access_token}",
    "Accept": "application/fhir+json"
}
resp = requests.get(
    f"https://phoenixfhir-apim.azure-api.net/smart/Condition?patient={patient_id}",
    headers=headers
)
bundle = resp.json()
print("Total Conditions:", len(bundle.get("entry", [])))

curl -X POST "https://phoenixfhir-apim.azure-api.net/auth/token" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=client_credentials" \
  -d "client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer" \
  -d "client_assertion=eyJhbGciOiJSUzI1NiIs..." \
  -d "scope=system/*.read"

curl -X POST "https://phoenixfhir-apim.azure-api.net/auth/introspect" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "token=YOUR_ACCESS_OR_REFRESH_TOKEN"

curl -X POST "https://phoenixfhir-apim.azure-api.net/auth/revoke" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "token=TOKEN_TO_REVOKE" \
  -d "client_id=test_client"

curl -X GET "https://phoenixfhir-apim.azure-api.net/smart/Group/all-patients/\$export?_outputFormat=application/fhir%2Bndjson" \
  -H "Authorization: Bearer YOUR_SYSTEM_TOKEN" \
  -H "Accept: application/fhir+json" \
  -H "Prefer: respond-async"

curl -X GET "https://phoenixfhir-apim.azure-api.net/smart/_operations/export/7c9e6679-7425-40de-944b-e07fc1f90ae7" \
  -H "Authorization: Bearer YOUR_SYSTEM_TOKEN"

{
  "transactionTime": "2026-10-02T14:30:00Z",
  "request": "https://phoenixfhir-apim.azure-api.net/smart/Group/all-patients/$export",
  "requiresAccessToken": true,
  "output": [
    { "type": "Patient", "url": "https://phoenixfhir-apim.azure-api.net/bulk-files/Patient.ndjson", "count": 105 },
    { "type": "Condition", "url": "https://phoenixfhir-apim.azure-api.net/bulk-files/Condition.ndjson", "count": 482 },
    { "type": "Observation", "url": "https://phoenixfhir-apim.azure-api.net/bulk-files/Observation.ndjson", "count": 2190 },
    { "type": "MedicationRequest", "url": "https://phoenixfhir-apim.azure-api.net/bulk-files/MedicationRequest.ndjson", "count": 315 },
    { "type": "Device", "url": "https://phoenixfhir-smart-auth.azurewebsites.net/api/mock-device-export", "count": 42 }
  ],
  "error": []
}