SMART V2 Features: Granular Scopes

In this video we introduce granular scopes from SMART V2. We briefly review the role of scopes in OAuth 2.0, and then demonstrate the basic syntax of granular scopes in SMART v2. We show an example of how granular scopes can be used to request access to a subset of Observation resources associated with a patient record (e.g., to differentiate lab observations vs vital signs observations). We compare SMART V2 scopes with the syntax from SMART V1, and we touch on the current state of implementation, and note a few features (modifiers and chaining!) that are explicitly listed as "experimental". Finally, we review how servers advertise support for SMART V2 and/or V1 style permissions, so clients can construct their authorization requests accordingly. Links: * https://hl7.org/fhir/smart-app-launch/scopes-and-launch-context.html#scopes-for-requesting-clinical-data * https://hl7.org/fhir/smart-app-launch/conformance.html