Changelog

​

Added

• Portal: Domain migrated from portal.connect.fastenhealth.com to portal.fastenhealth.com. We recommend updating any bookmarks & password managers to use the new domain.
• Portal: Portal UI has been completely updated to improve usability and accessibility. The new design includes a modern look and feel, improved navigation, and better support for mobile devices.
• Portal: Developer Portal now supports multiple organizations per account. This allows developers to manage multiple projects or clients from a single account.
• Portal: Added support for 2FA (Two-Factor Authentication) and other security enhancements.

​

Added

• Docs: Expanded the test-data guide with Fasten’s official FooClinic sandbox, including credentials, resource counts, and persona summaries for 16 synthetic patients. The guide also references external FHIR, clinical research, CCDA, and IPS datasets for broader pipeline testing.

​

Added

• Stitch: Added an optional email attribute to the v4 Stitch SDKs. Customers can use it to prepopulate the patient’s email address in TEFCA mode and support request/health system request forms.

​

Added

• Docs/TEFCA: Clarified that TEFCA IAS mode requires cookies and that localhost, private browsing, or incognito testing can trigger browser cookie restrictions.

​

Added

• Catalog/API: Added support for Medent, Medplum sandbox testing, and NextGen Office.

​

Added

• TEFCA: Identity verification and TEFCA demographic matching now include historical patient addresses when available, improving matching for patients who have moved or previously received care at another address.

​

Added

• TEFCA/Catalog: TEFCA record locator results now use Network Directory entries to resolve facilities to the correct catalog brand, portal, and endpoint metadata. This improves consistency for tefca_directory_id values and downstream webhook/catalog lookups.

​

Added

• Identity/API: Added support for customer-managed identity verification flows, including OpenID Connect discovery, JWKS, pushed authorization requests and consent decisions.
• Identity/Stitch: Bring Your Own CSP flows now launch the Fasten widget with request_uri, use a simplified scope and use a consent form design aligned with the embedded widget.

​

Added

• Stitch/Docs: Added Beta documentation for the React SDK, including installation, basic usage, TEFCA mode, component props, event handling, refs, and styling guidance.

​

Added

• API/TEFCA: Documented the new fixtures.tefca_ccda option for POST /bridge/fhir/ehi-export, which lets API-mode TEFCA exports return a specific synthetic CCDA response during testing. Supported fixture values are myra-jones.xml and lennie-connell.xml.
• Docs/Webhooks & Events/TEFCA: Updated the TEFCA IAS guide and patient.ehi_export_failed failure reason docs to explain that fixtures can be used as a workaround for the common tefca_no_documents_found error in test mode.

​

Added

• Webhooks & Events/TEFCA: Added tefca_no_documents_found as a documented failure_reason for patient.ehi_export_failed. This error is only returned when TEFCA mode is enabled and indicates that the health system did not return any records for the individual. It is frequently seen in test mode, but is uncommon in live mode.

​

Added

• Catalog/API: Added the GET /bridge/catalog/export endpoint so customers can download pre-signed URLs for JSON files covering every brand, portal, and endpoint when hydrating offline catalog caches.

​

Added

• API/TEFCA: Documented the helper endpoint POST /bridge/vault_connection/revoke, detailing how to clear TEFCA IAS synthetic patient connections with test credentials before running another scenario.

​

Added

• Stitch: v4 release of the Stitch.js widget is now available for use. This version includes a number of bug fixes and improvements.
• Stitch: React Native SDK is now available. This allows you to integrate Fasten Connect into your React Native applications, providing a seamless experience for mobile users.

​

Added

• Stitch/Webhooks: Documented the tefca_directory_id field, which is included for TEFCA IAS connections. This identifier can be used to provide branding information about the health system selected by the patient.

​

Added

• TEFCA/Docs: TEFCA IAS is now Generally Available (GA). See our new guide explaining how we keep the IAS flow simple for developers.
• Stitch/Webhooks: Documented TEFCA-specific behavior for Stitch events, including when identifiers may be omitted while using TEFCA mode.
• Stitch/Webhooks: Added new consent_expires_at field which can be used to determine when a patient’s consent will expire. Supported in both TEFCA and Catalog Search modes.
• Webhooks & Events: patient.connection_success and patient.authorization_revoked are no longer beta-only
• Stitch: Clarified the reconnect flow (reconnect-org-connection-id skips search, emits the reconnection identifiers)

​

Added

• Docs: Added Display & Component Library guide with fhir-react and fhirpath.js options for rendering FHIR data.

​

Added

• Portal: When registering, domains are now claimed by the first organization created by an organization. Other developers must be invited to the associated team before they can login to the developer Portal.

​

Added

• Stitch: Patients can now search for their healthcare institution using a partial match, improving the search experience and making it easier to find institutions with incomplete or approximate names.

​

Added

• Portal: Accounts now require a corporate domain. Email addresses from providers like Gmail, Yahoo, etc., are no longer supported.

​

Added

• Added documentation for Catalog Editor tool that allows Fasten customers to submit corrections to the provider catalog.

​

Added

• Webhooks & Events: customers can now subscribe to the patient.request_health_system and patient.request_support webhook events. These events are emitted when a patient requests a new health system to be added to the Fasten Connect catalog, or when they request support during the connection process.
• Webhooks & Events: added scope_patient_missing failure_reason to the patient.ehi_export_failed event. This indicates that the patient did not consent to share a required scope during the Consent flow.

​

Added

• Stitch: documentation updated to reference the widget.config_error event. This event is emitted when the Stitch.js widget is misconfigured (e.g. invalid public key, missing required parameters, etc).

​

Added

• API: documentation updated to reference the new download_links parameter. Returned by EHI-Export patient.ehi_export_success event.

​

Deprecated

• API: the download_link provided by patient.ehi_export_success webhook event is now deprecated (will be removed in Jun, 2026), instead implementors should use the download_links array parameter when downloading patient records using the EHI-Export Download endpoint.

​

Added

• Portal: Webhook simulator enhancements and schema alignment. The simulator now closely mirrors the actual webhook payload structure, making it easier to test and debug webhook integrations.
• Portal: Better email address validation error messages.

​

Added

• Guides: Added Webhook simulator and debugging guide to help users test and troubleshoot webhook integrations.

​

Added

• Stitch: Added instructions explaining how to customize the “Share Records” text on the Fasten Stitch button.

​

Added

• API: Added dedicated bridge/reconnect endpoint to simplify the process of reconnecting (reauthorizing) an existing organization connection.

​

Added

• Stitch: Added search-query property, which allows you to pre-populate the search box with a specific query. This can help users quickly find their health system without having to type it in manually.
• Stitch: Added show-splash property, which allows you to show or hide the splash screen that appears before the search popup. This can help build trust with users by displaying your own branding and introducing the Fasten Connect service.

​

Added

• API: Added a large number of sanitized error types. This will help implementors to better understand why a request or data collection failed, and take appropriate action. Errors that cannot be adequately sanitized will return a generic 500 error code with no meaningful message.

​

Added

• API: Org Connection Status endpoint will now return scope field, which indicates the resource types that were consented by the patient. This feature is currently in beta.

​

Added

• Stitch: Added visible error details (type and description) when connection fails. Patients can now easily understand why the connection failed and submit a support request if needed.

​

Added

• Portal: Added the ability to invite other administrators when creating a new organization.
• Webhooks: Added support for patient.authorization_revoked webhook event.

​

Added

• Portal: Added information about current failure count to the webhook endpoint details page. This will help users understand the current status of their webhook endpoints and take necessary actions if needed.

​

Added

• Catalog: Added the Department of Veterans Affairs (VA) to the catalog, allowing users to connect to their VA health records.
• Webhooks & Events: Improvements to ensure that webhook events are delivered even in cases where workers fail due to timeouts or memory issues.

​

Added

• Stitch: Added results.total field to optional search.query event so customers can determine the total number of results returned by the search query.

​

Added

• Webhooks & Events: You can now customize which webhook event types are subscribed to when creating or editing a webhook. Optional events can be selected or deselected freely, while required events remain enforced and cannot be removed.
• Webhooks & Events: The webhook editor UI has been improved. The Update button will only enable when changes are detected to the endpoint URL, webhook status, or selected event types.

​

Added

• Catalog: Search enhancements, which should result in more accurate search results.

​

Added

• Stitch: Added support for event-types query parameter in the Stitch.js widget. This allows you to opt-in to receive specific events in the eventBus event data, such as search.query

​

Added

• Portal: When creating new credentials or webhooks, a notification email will be sent to all email addresses associated with the organization.
• Catalog: Anthem sandbox is now available for testing purposes.
• Webhooks & Events: Fixed an issue where Anthem EHR data collection would fail with an SSL/TLS error.

​

Added

• Webhooks: Added a stats key to the patient.ehi_export_success webhook event payload.

​

Added

• Stitch v1/v3: Fixed issue with Kaiser Permanente where the popup window will close immediately after opening, preventing the user from completing the authentication process.
• API: Fixed an issue in redirect mode, when using a mobile deep link, Kaiser & Humana would fail to return back to the application after authentication.
• API: Performance enhancement for health systems using Cerner (which should result in a 4x improvement in data collection & webhook delivery time).

​

Added

• Stitch v3: Clarify that widget.complete event should be used in most cases, rather than patient.connection_success

​

Added

• Webhooks: Added support for patient.connection_success webhook event.

​

Added

• Quickstart: details for parsing the eventBus event data (using JSON.parse()) in the Stitch v3 example.

​

Added

• Stitch v3: Fixed a bug where some connection failures incorrectly returned an unknown_error_during_connect error message.
• Quickstart: Stitch v3 is now the recommended version for integrating Fasten Connect into your application.

​

Added

• Catalog: Added new aliases and metadata for healthcare institutions & health systems using AllScripts & Epic

​

Added

• Stitch v3: All CSS styles are now namespaced with a fhtw- prefix. This means that any CSS styles provided by Fasten will not affect other elements on your page.
• Stitch v3: Bug: connection_status will always be present in the widget.complete event data.
• Stitch v3: Bug: reconnect_org_connection_id was not working correctly. This has been fixed.

​

Added

• Webhooks: Added support for a failure_reason in the event payload.

​

Added

• API: Added support for multiple redirect_uris in the Developer Portal. If you decide to provide multiple redirect-uris, you MUST populate the redirect-uri query string parameter when calling the /connect API endpoint..

​

Added

• Catalog, API: updated catalog search engine to boost exact matches (on name and & aliases). This will increase search accuracy.

​

Added

• API: fixed catalog search pagination. searchAfter no longer needs to be converted to string array. sort values can be passed to the API as-is (in mixed array of numbers and strings).
• API: adding status badges to show the status of various EHR sandbox accounts we provide for testing purposes, in test mode.
• Docs: Updated documentation to include a status badge for the sandbox accounts.

​

Added

• Stitch: documentation related to “popup-timeout” parameter.
• Stitch: Fixed issue where duplicate events generated when multiple Stitch instances are used on the same page.
• API: Fixed issue where warnings emails were not correctly sent when a webhook is consistently failing, and will be disabled.

​

Added

• API: documentation updated to reference the new request_id parameter sent to the Redirect URL. Provides a correlation ID that should be sent with ticket requests to the Fasten Connect support team.
• API: Added support/request endpoint to create a support ticket via the API.
• “Webhooks & Events”: Added new failure_reason parameter sent with failed webhook events. Provides a sanitized reason for why the ehi-export operation failed, can be used for filtering/notifying patient to reauthenticate.

​

Added

• Stitch: v3 release of the Stitch.js widget is now available for use. This version includes a number of bug fixes and improvements.

​

Added

• Portal: Added some flexibility in the login system, allowing for clock skew between the client and server.

​

Added

• API: Introduced ID Verification Provider - CLEAR

​

Added

• Catalog: NPI Numbers are now included in the GET /v1/bridge/catalog response.

​

Added

• Portal: Added a note field for API credentials, helping users to identify the purpose of each credential.

​

Added

• API: Automatically disable webhooks that are misbehaved (e.g. 404 errors). This is to prevent spam and abuse of the webhook system.

​

Added

• API: documentation updated to reference the new task_id parameter. Used for both EHI-Export Status and Download endpoints.

​

Deprecated

• API: the org_connection_id provided by webhook events is now deprecated (will be removed in Jan, 2024), instead implementors should use the task_id parameter when calling the EHI-Export Status and Download endpoints.

​

Added

• Stitch: documentation related to redirect query string parameters on error. This includes the new request_id parameter.

​

Added

• Stitch: Added the ability to provide an opaque external_state which is passed through to the Redirect URL on successful authentication.

​

Added

• Webhooks & Events: Updated documentation
• Webhooks & Events: Added new Webhooks system, with support for retries, delivery logs & additional events.
• Webhooks & Events: Compliant with standard-webhooks spec

​

Added

• Portal: Added the ability to delete API Credentials

​

Added

• Stitch: Fixed reconnect_org_connection_id - when clicked, should automatically redirect patient to the Health System’s login page.

​

Added

• Stitch: Fixed swapped descriptions for platform_type and connection_status
• Quickstart: Clarified that Webhooks are POST requests

​

Added

• Stitch: Using “Health System” term consistently in the UI
• Stitch: Added a warning message before redirecting to the Health System’s login page

​

Added

• Stitch: Platform Type (EHR system identifier) is now passed as a query parameter to the Redirect URL on successful authentication.

​

Added

• Stitch: Added the ability to request missing Health Systems. Fixed Pagination of Brands
• Stitch: Added the ability to provide an opaque external_id which is passed through to the Redirect URL on successful authentication.
• Stitch: Added the ability to show and hide the Search popup programmatically using the show() and hide() methods.

​

Added

• Catalog Search: Added the ability to search through all available healthcare institutions supported by Fasten Connect POST /v1/bridge/catalog/search
• Catalog Lookup: Added the ability to lookup a specific Fasten Connect brand or portal by it’s id GET /v1/bridge/catalog

​

Added

• Added the ability to authenticate patients via a popup using the Stitch.js SDK. connect-mode="popup"