Skip to content

Conversation

@spicyfalafel
Copy link
Collaborator

@spicyfalafel spicyfalafel commented Jan 27, 2026

Note

Comprehensive rewrite of smart-backend-services.md to provide a clearer, step-by-step guide for SMART Backend Services using JWT-based client credentials.

  • Adds overview, mermaid sequence diagram, and key principles for server-to-server auth
  • Replaces old snippets with stepwise instructions: key generation (OpenSSL/Node), Client registration with inline jwks or jwks_uri, AccessPolicy creation, JWT construction (header, claims, signature), and token request example
  • Clarifies JWKS formats and kid usage; details validation rules (iss/sub/exp/jti, RS384, signature verification)
  • Streamlines FHIR API usage example and adds scopes and security considerations sections
  • Updates references to SMART and RFC specs

Written by Cursor Bugbot for commit 78e86fb. This will update automatically on new commits. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants