FHIR Chat · introspection

Stream: smart

Topic: introspection

Isaac Vetter (Mar 10 2020 at 04:19):

Now that OAuth2 introspect is required in the US, SMART should describe how it should work. This could be a small project.

Josh Mandel (Mar 10 2020 at 15:16):

Agreed -- I'm hoping vendors who have already implemented support for token introspection can share some details here (ideally by linking to public docs ;-))

Josh Mandel (Mar 10 2020 at 15:18):

We might even talk about whether, while we've got the SMART v2 pen out, we might take this on in Argonaut (i.e., we're already planning to update the spec; easier to run one ballot for SMART v2, and so on)

Isaac Vetter (Mar 10 2020 at 19:07):

Here's Epic's publically available introspect documentation: https://uscdi.epic.com/Specifications?api=488 I think that it would be valuable to draw on other health it developers' experience as well.

Isaac Vetter (Mar 10 2020 at 19:07):

Josh - are you sure that scopesv2 isn't a big enough project?!? (Given the complexity, I'm excited and worried about designing something elegant, implementable and satisfactory. )

Josh Mandel (Mar 10 2020 at 22:28):

Well, I think scopes-v2 is an unsolvable problem, depending on how we set our goals :-) The devil is in, ahem, scoping that project.

Josh Mandel (Mar 10 2020 at 22:29):

But yeah, if we were going to add Token Introspection in our "Project 4" slot, I think we'd want to make a single editorial/balloting push at the end, to bring all the "SMART v2" changes through in one pass.