Changelog

​

Added

• Added documentation for Catalog Editor tool that allows Fasten customers to submit corrections to the provider catalog.

​

Added

• Webhooks & Events: customers can now subscribe to the patient.request_health_system and patient.request_support webhook events. These events are emitted when a patient requests a new health system to be added to the Fasten Connect catalog, or when they request support during the connection process.
• Webhooks & Events: added scope_patient_missing failure_reason to the patient.ehi_export_failed event. This indicates that the patient did not consent to share a required scope during the Consent flow.

​

Added

• Stitch: documentation updated to reference the widget.config_error event. This event is emitted when the Stitch.js widget is misconfigured (e.g. invalid public key, missing required parameters, etc).

​

Added

• API: documentation updated to reference the new download_links parameter. Returned by EHI-Export patient.ehi_export_success event.

​

Deprecated

• API: the download_link provided by patient.ehi_export_success webhook event is now deprecated (will be removed in Jun, 2026), instead implementors should use the download_links array parameter when downloading patient records using the EHI-Export Download endpoint.

​

Added

• Portal: Webhook simulator enhancements and schema alignment. The simulator now closely mirrors the actual webhook payload structure, making it easier to test and debug webhook integrations.
• Portal: Better email address validation error messages.

​

Added

• Guides: Added Webhook simulator and debugging guide to help users test and troubleshoot webhook integrations.

​

Added

• Stitch: Added instructions explaining how to customize the “Share Records” text on the Fasten Stitch button.

​

Added

• API: Added dedicated bridge/reconnect endpoint to simplify the process of reconnecting (reauthorizing) an existing organization connection.

​

Added

• Stitch: Added search-query property, which allows you to pre-populate the search box with a specific query. This can help users quickly find their health system without having to type it in manually.
• Stitch: Added show-splash property, which allows you to show or hide the splash screen that appears before the search popup. This can help build trust with users by displaying your own branding and introducing the Fasten Connect service.

​

Added

• API: Added a large number of sanitized error types. This will help implementors to better understand why a request or data collection failed, and take appropriate action. Errors that cannot be adequately sanitized will return a generic 500 error code with no meaningful message.

​

Added

• API: Org Connection Status endpoint will now return scopes field, which indicates the resource types that were consented by the patient. This feature is currently in beta.

​

Added

• Stitch: Added visible error details (type and description) when connection fails. Patients can now easily understand why the connection failed and submit a support request if needed.

​

Added

• Portal: Added the ability to invite other administrators when creating a new organization.
• Webhooks: Added support for patient.authorization_revoked webhook event.

​

Added

• Portal: Added information about current failure count to the webhook endpoint details page. This will help users understand the current status of their webhook endpoints and take necessary actions if needed.

​

Added

• Catalog: Added the Department of Veterans Affairs (VA) to the catalog, allowing users to connect to their VA health records.
• Webhooks & Events: Improvements to ensure that webhook events are delivered even in cases where workers fail due to timeouts or memory issues.

​

Added

• Stitch: Added results.total field to optional search.query event so customers can determine the total number of results returned by the search query.

​

Added

• Webhooks & Events: You can now customize which webhook event types are subscribed to when creating or editing a webhook. Optional events can be selected or deselected freely, while required events remain enforced and cannot be removed.
• Webhooks & Events: The webhook editor UI has been improved. The Update button will only enable when changes are detected to the endpoint URL, webhook status, or selected event types.

​

Added

• Catalog: Search enhancements, which should result in more accurate search results.

​

Added

• Stitch: Added support for event-types query parameter in the Stitch.js widget. This allows you to opt-in to receive specific events in the eventBus event data, such as search.query

​

Added

• Portal: When creating new credentials or webhooks, a notification email will be sent to all email addresses associated with the organization.
• Catalog: Anthem sandbox is now available for testing purposes.
• Webhooks & Events: Fixed an issue where Anthem EHR data collection would fail with an SSL/TLS error.

​

Added

• Webhooks: Added a stats key to the patient.ehi_export_success webhook event payload.

​

Added

• Stitch v1/v3: Fixed issue with Kaiser Permanente where the popup window will close immediately after opening, preventing the user from completing the authentication process.
• API: Fixed an issue in redirect mode, when using a mobile deep link, Kaiser & Humana would fail to return back to the application after authentication.
• API: Performance enhancement for health systems using Cerner (which should result in a 4x improvement in data collection & webhook delivery time).

​

Added

• Stitch v3: Clarify that widget.complete event should be used in most cases, rather than patient.connection_success

​

Added

• Webhooks: Added support for patient.connection_success webhook event.

​

Added

• Quickstart: details for parsing the eventBus event data (using JSON.parse()) in the Stitch v3 example.

​

Added

• Stitch v3: Fixed a bug where some connection failures incorrectly returned an unknown_error_during_connect error message.
• Quickstart: Stitch v3 is now the recommended version for integrating Fasten Connect into your application.

​

Added

• Catalog: Added new aliases and metadata for healthcare institutions & health systems using AllScripts & Epic

​

Added

• Stitch v3: All CSS styles are now namespaced with a fhtw- prefix. This means that any CSS styles provided by Fasten will not affect other elements on your page.
• Stitch v3: Bug: connection_status will always be present in the widget.complete event data.
• Stitch v3: Bug: reconnect_org_connection_id was not working correctly. This has been fixed.

​

Added

• Webhooks: Added support for a failure_reason in the event payload.

​

Added

• API: Added support for multiple redirect_uris in the Developer Portal. If you decide to provide multiple redirect-uris, you MUST populate the redirect-uri query string parameter when calling the /connect API endpoint..

​

Added

• Catalog, API: updated catalog search engine to boost exact matches (on name and & aliases). This will increase search accuracy.

​

Added

• API: fixed catalog search pagination. searchAfter no longer needs to be converted to string array. sort values can be passed to the API as-is (in mixed array of numbers and strings).
• API: adding status badges to show the status of various EHR sandbox accounts we provide for testing purposes, in test mode.
• Docs: Updated documentation to include a status badge for the sandbox accounts.

​

Added

• Stitch: documentation related to “popup-timeout” parameter.
• Stitch: Fixed issue where duplicate events generated when multiple Stitch instances are used on the same page.
• API: Fixed issue where warnings emails were not correctly sent when a webhook is consistently failing, and will be disabled.

​

Added

• API: documentation updated to reference the new request_id parameter sent to the Redirect URL. Provides a correlation ID that should be sent with ticket requests to the Fasten Connect support team.
• API: Added support/request endpoint to create a support ticket via the API.
• “Webhooks & Events”: Added new failure_reason parameter sent with failed webhook events. Provides a sanitized reason for why the ehi-export operation failed, can be used for filtering/notifying patient to reauthenticate.

​

Added

• Stitch: v3 release of the Stitch.js widget is now available for use. This version includes a number of bug fixes and improvements.

​

Added

• Portal: Added some flexibility in the login system, allowing for clock skew between the client and server.

​

Added

• API: Introduced ID Verification Provider - CLEAR

​

Added

• Catalog: NPI Numbers are now included in the GET /v1/bridge/catalog response.

​

Added

• Portal: Added a note field for API credentials, helping users to identify the purpose of each credential.

​

Added

• API: Automatically disable webhooks that are misbehaved (e.g. 404 errors). This is to prevent spam and abuse of the webhook system.

​

Added

• API: documentation updated to reference the new task_id parameter. Used for both EHI-Export Status and Download endpoints.

​

Deprecated

• API: the org_connection_id provided by webhook events is now deprecated (will be removed in Jan, 2024), instead implementors should use the task_id parameter when calling the EHI-Export Status and Download endpoints.

​

Added

• Stitch: documentation related to redirect query string parameters on error. This includes the new request_id parameter.

​

Added

• Stitch: Added the ability to provide an opaque external_state which is passed through to the Redirect URL on successful authentication.

​

Added

• Webhooks & Events: Updated documentation
• Webhooks & Events: Added new Webhooks system, with support for retries, delivery logs & additional events.
• Webhooks & Events: Compliant with standard-webhooks spec

​

Added

• Portal: Added the ability to delete API Credentials

​

Added

• Stitch: Fixed reconnect_org_connection_id - when clicked, should automatically redirect patient to the Health System’s login page.

​

Added

• Stitch: Fixed swapped descriptions for platform_type and connection_status
• Quickstart: Clarified that Webhooks are POST requests

​

Added

• Stitch: Using “Health System” term consistently in the UI
• Stitch: Added a warning message before redirecting to the Health System’s login page

​

Added

• Stitch: Platform Type (EHR system identifier) is now passed as a query parameter to the Redirect URL on successful authentication.

​

Added

• Stitch: Added the ability to request missing Health Systems. Fixed Pagination of Brands
• Stitch: Added the ability to provide an opaque external_id which is passed through to the Redirect URL on successful authentication.
• Stitch: Added the ability to show and hide the Search popup programmatically using the show() and hide() methods.

​

Added

• Catalog Search: Added the ability to search through all available healthcare institutions supported by Fasten Connect POST /v1/bridge/catalog/search
• Catalog Lookup: Added the ability to lookup a specific Fasten Connect brand or portal by it’s id GET /v1/bridge/catalog

​

Added

• Added the ability to authenticate patients via a popup using the Stitch.js SDK. connect-mode="popup"