Uploaded image for project: 'FHIR Specification Feedback'
  1. FHIR Specification Feedback
  2. FHIR-32338

Clarify bulk authorization support for SMART v2 scopes

    XMLWordPrintableJSON

Details

    • Icon: Change Request Change Request
    • Resolution: Persuasive
    • Icon: Medium Medium
    • Bulk Data (FHIR)
    • 1.1.0
    • FHIR Infrastructure
    • SMART Backend Services Authorization
    • Hide

      We will move the Backend Services page into the SMARTv2 spec, we can avoid this challenge in the next FHIR Bulk Data publication. (In any case, Backend Services Authorization is designed to be compatible with SMART v1 or SMART v2 scopes or any other scope language at the discretion of the authorization server.)  We will update the language and examples to use SMART v2 scopes, but will explicitly note that Backend Services can also be used with v1 scopes.

       
       

      Show
      We will move the Backend Services page into the SMARTv2 spec, we can avoid this challenge in the next FHIR Bulk Data publication. (In any case, Backend Services Authorization is designed to be compatible with SMART v1 or SMART v2 scopes or any other scope language at the discretion of the authorization server.)  We will update the language and examples to use SMART v2 scopes, but will explicitly note that Backend Services can also be used with v1 scopes.    
    • Rick Geimer/Gino Canessa: 17-0-0
    • Clarification
    • Compatible, substantive

    Description

      Scopes are declared to be in the format of system/(:resourceType|).(read|write|).  While read/search distinctions in SMART v2 don't add much value for bulk export, the _typeFilter parameter allows finer-grained exports, which naturally raises questions around usage of SMART v2's finer-grained scopes using search parameters to constrain access.

      Attachments

        Activity

          People

            Unassigned Unassigned
            dennispatterson Dennis Patterson (Inactive)
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: