This page is part of the Smart App Launch Implementation Guide (v2.0.0: STU 2) based on FHIR R4. This is the current published version in its permanent home (it will always be available at this URL). For a full list of available versions, see the Directory of published versions

Table of Contents

0 Table of Contents

1 Overview

2 App Launch: Launch and Authorization

2.1 Example App Launch for Public Client

2.2 Example App Launch for Asymmetric Client Auth

2.3 Example App Launch for Symmetric Client Auth

3 App Launch: Scopes and Launch Context

3.1 Worked Example Id Token

4 Backend Services

4.1 Example Backend Services Flow

5 Client Authentication: Asymmetric (public key)

5.1 Example JWS generation for Asymmetric Client Auth

6 Client Authentication: Symmetric (shared secret)

7 Token Introspection

8 Conformance

9 Best Practices

10 Examples

11 Artifacts Summary