NRL FHIR Sandbox API Issue

Hi,
I am having difficulty with the PATCH and DELETE requests using the sandbox API endpoint: https://sandbox.api.service.nhs.uk//record-locator/consumer/FHIR/R4/DocumentReference/{ID}

With the GET and the POST I get the intended result. However, the above response gives the following error:

*Authorization header requires ‘Credential’ parameter. Authorization header requires ‘Signature’ parameter. Authorization header requires ‘SignedHeaders’ parameter. Authorization header requires existence of either a ‘X-Amz-Date’ or a ‘Date’ header. (Hashed with SHA-256 and encoded with Base64)
*
Any info on this would be greatly appreciated.
Much thanks,
Gary

Hi Gary,

The endpoint you’ve posted is for the Consumer API.

The Consumer API only allows read (GET), search (GET) and search (POST) interactions. If you want to create, update and delete pointers as in NRL 2.8, you will want the Producer API – simply replace ‘consumer’ with ‘producer’ in the URL. :slightly_smiling_face:

p.s. the PATCH update has been replaced with a PUT operation in v3 - see docs here https://digital.nhs.uk/developer/api-catalogue/national-record-locator-fhir/v3/producer

1 Like

Hi Kate,

Thank you so much for clarifying. That makes perfect sense now.
I’ll switch over to the Producer API and use PUT for updates as per the v3 documentation. Appreciate the link and the guidance.

Best regards,
Gary