hl7.org/fhir/smart-app-launch

Implement SMART Backend Services authorization for payer bulk data export access

Implement SMART App Launch v2 asymmetric client authentication using private_key_jwt to obtain an access token without transmitting a client secret

Obtain a SMART Backend Services access token using the system-level client credentials flow with a signed JWT client assertion and use it to access a FHIR server as a backend service

Implement SMART App Launch v2 token introspection to validate an access token issued by an authorization server and extract the scopes and patient context at a resource server

Build a SMART Health Links (SHL) sharing flow that packages a patient's immunization record as a FHIR Bundle, encrypts it, and generates a shareable SHL URL for offline or cross-organization sharing

Implement SMART App Launch v2 granular scopes for patient-specific Observation access