SATUSEHAT KFA
POST /satusehat/kfa/sync
SATUSEHAT proxy route (apps/server/src/satusehat/routes-kfa.ts). Requires a verified session cookie or OAuth Bearer; OAuth callers need simrs:write. Tenant + roles come from the credential — never from the request. Access tokens for the national SATUSEHAT platform stay server-side.
AuthorizationBearer <token>
OAuth 2.0 / OIDC issued by the API itself (better-auth oidcProvider). Dynamic client registration per RFC 7591 at /api/auth/oauth2/register.
In: header
Scope: simrs:write
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
code*string
Length
1 <= length <= 32Response Body
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/satusehat/kfa/sync" \ -H "Content-Type: application/json" \ -d '{ "code": "string" }'{}{ "error": "string", "issues": []}{ "error": "string", "code": "string", "upstreamStatus": 0}{ "error": "string", "code": "string", "upstreamStatus": 0}{ "error": "string", "code": "string", "upstreamStatus": 0}Is this page helpful?