SMART V1 +V2 Granular Controls
summary
Overview of the SMART on FHIR platform including the new SMART v2 scope language that replaces read/write with CRUDS scope letters and lets servers attach FHIR search-parameter filters to scopes for fine‑grained permissions. Shows the open tools used: the SMART App Launcher and public sandbox (includes about ~1500 synthetic patients and de‑identified records), a Glitch sample app, and the SMART JavaScript client. Demonstrates both standalone and EHR launch OAuth flows, how tokens and requests work, and that the launcher reliably simulates real EHR behavior for testing.
AI-written summary · about
chapters (33)
- 0:00Start
- 1:40Slide Deck
- 4:48Authorization
- 5:55Substitutability
- 11:50App Launch Flows
- 13:43Ehr Launch
- 16:06Permissions
- 16:55Patient Level Access Type
- 21:56Fires Search Parameter Syntax
- 25:47.Can an Ehr Deny any Scope Being Asked for by an App Acting on a Patient's Behalf
- 26:43Smart Configuration File
- 27:43System Level
- 28:44Public App Gallery
- 30:01Try App
- 35:47Bulk Data
- 37:35Open Source Tools
- 39:57Considerations for Connecting to an Ehr
- 42:10The Smart Sandbox
- 44:33Is There any Experimental Support
- 46:11How Do You Register a Smart App with the Ehr as as You Need to in Oauth To Get a Client Id
- 1:07:54Smart App Launcher
- 1:10:23Patient Standalone Launch
- 1:12:33Remix the Project
- 1:13:18Index Html
- 1:14:04Build an App That Uses the Standalone Launch
- 1:14:24Smart Javascript Client
- 1:24:49Token Introspection
- 1:30:09Session Storage Variables
- 1:32:40Smart Launcher
- 1:33:16Test with Sample App
- 1:39:48Client Api Full Documentation
- 1:41:36The Smart V2 Guide
- 1:47:12Wrap Up
