401 Error - Invalid API call as no apiproduct match found

API Platform
,
1

We have a Development application with:

  • NHS App (External Development) – Enabled
  • Public key configured
  • API key & Secret
  • Signed JWT authentication configured

When calling - POST https://dep.api.service.nhs.uk/nhs-app-dep/communication/in-app/FHIR/R4/CommunicationRequest error received - { “severity”: “error”, “code”: “forbidden”, “diagnostics”: “Invalid API call as no apiproduct match found” }

Is there an additional onboarding/API product step that needs to be completed for NHS App messaging in Development, or should this be raised with the APIM team?

Application ID -
82358700-ed9d-4f88-9c11-f96c3d39fead

2

Hi @Mark_Dowson

We have reviewed your application 82358700-ed9d-4f88-9c11-f96c3d39fead. The error appears to be occurring because you are trying to make a POST request to the DEP environment, but your application does not currently have a subscription to the DEP API. Please add the API NHS App (External Development DEP) to you application and see if you are still experiencing this error.

The website for the NHS app API also has a postman collection that may be useful to look at for development purposes: NHS App API - NHS England Digital

Thanks,

NHS England API Platform team

Please note: The API Platform team can only address queries relevant to the NHS England API Platform, including security, rate limiting, logging, monitoring and alerting. For any API, CIS2, NHS Login specific queries, please reach out to the relevant API / Service teams.

3

Hi @Clarissa_John

Thank you for your responce,

We are already onboarded with NHS App and NHS Login and want to integrate directly with the NHS App Notifications & Messaging API using:

POST /communication/in-app/FHIR/R4/CommunicationRequest

Could you confirm the onboarding steps required for our application to given access to use the direct NHS App CommunicationRequestendpoint, and enable in-app messaging permission for our Development App ID:

196b4a9c-7e90-4733-a07e-871162551328

We are currently receiving:

403 – App with ID 196b4a9c-7e90-4733-a07e-871162551328 not found

We have already added NHS APP & NHS APP DEP APIs to the application under the environment access page

Thanks ,

Mark

4

Hi @Mark_Dowson

We have reviewed the application 196b4a9c-7e90-4733-a07e-871162551328 and we can see you have subscribed to both dev and dep apis correctly.

In the api catalogue for the NHS app api there is a security step that says you would need to provide the App ID to the NHS App onboarding team app.onboarding@nhs.net to grant your application permissions to the features that are appropriate to your use cases or you will receive a 403 Forbidden error, however it is unclear if this is required for the dep/dev environments also. Please see here NHS App API - NHS England Digital for this error note.

For onboarding information please see here NHS App API - NHS England Digital

Otherwise, please feel free to request assistance through our Customer Service Portal who should be able to redirect you query to the correct team and resolve this for you:

Thanks,

NHS England API Platform team

Please note: The API Platform team can only address queries relevant to the NHS England API Platform, including security, rate limiting, logging, monitoring and alerting. For any API, CIS2, NHS Login specific queries, please reach out to the relevant API / Service teams.