Session login - Medera

Introduction

Authentication

Patients

Providers & Organizations

Sessions & Encounters

Intake Calls (Voice)

Therapy Sessions

Multimodal Analysis

Prior Authorization

Agent Workflows

Clinical

FHIR R4

Billing

Webhooks

Audit & Compliance

EHR Integrations

End-user authentication uses your tenant’s managed identity provider. The frontend uses @clerk/clerk-react to sign the user in and obtains a session JWT on demand.

import { useAuth } from '@clerk/clerk-react';
const { getToken } = useAuth;
const jwt = await getToken;

``` Send the JWT to backend endpoints as `Authorization: Bearer <jwt>`. The backend validates via `tenantAuth` middleware and writes a `phi_audit_logs` entry for every PHI-touching request.

## Backend webhooks The backend receives identity lifecycle webhooks at:

```text

POST /api/identity-webhooks

``` Validated via HMAC signature verification.

API Versioning Refresh a session JWT