We suggest OAuth implementation in Client Credentials Grant. You need to use “Client Credentials Grant + Access Policy”:
An example of the query that doesn't work:
It’s called an absolute reference. Aidbox doesn't work with absolute references because the logic can become very tricky since these references can point to external servers.
Use relative references instead: GET /DocumentReference?patient=Patient/1234