Question
· 12 hr ago

Exposing HealthInsight Dashboards on Internet via CSP Web App – 404 Not Found issue

Hello,

I need to expose InterSystems HealthInsight dashboards over the internet to external operators. The authentication flow is managed externally. When a user is authenticated, our system receives an HTTP request with specific headers (e.g., operator’s fiscal code and hospital identifier) that we need to extract in order to:

  • Authorize the user to access the dashboards.
  • Apply row-level security on the dashboards, filtering the data by hospital and user role.

I created a new Web Application on IRIS as shown in the screenshot:

I follow this page of the documentation for the settings: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GCSP_appdef

Then I created a custom Login Page class (extending %CSP.Login) to:

  • Intercept incoming HTTP calls
  • Read the headers (X-FiscalCode, X-HospitalCode, etc.)
  • Authorize the user
  • Redirect them to the proper HealthInsight dashboard with filtered data

However, I’m facing the following problem. When I try to reach the endpoint using curl:
curl -v http://localhost:57772/csp/healthshare/erogaspec/healthinsight
I get this error:

> GET /csp/healthshare/erogaspec/healthinsight HTTP/1.1

< HTTP/1.1 404 Not Found

But I see the request coming into the the Web Gateway. I am wandering if I am missing something or this procedure is not suitable for the abovementioned purpose. Any help or hints from someone who already exposed HealthInsight dashboards this way would be greatly appreciated.

Thanks in advance!

Product version: IRIS 2024.3
$ZV: IRIS for UNIX (Red Hat Enterprise Linux 8 for x86-64) 2024.3.0L (Build 163U)
Discussion (1)2
Log in or sign up to continue

Hi,

a 404 error usually comes from Apache. As we don't know your Apache setup its difficult to advise. It might be that you need to add additional config to allow the new path to be accessible.
Also seeing you call this using a port number other than 80/443, i guess you are using still using PWS, which is not supported for production loads.