Glossary · Security & identity

OAuth 2.1

Updated

OAuth 2.1 is the consolidated revision of the OAuth 2.0 authorisation framework that makes PKCE mandatory, removes the implicit and password grants and requires exact redirect URI matching.

SMART App Launch 2 follows the same rules, so a health app built for OAuth 2.1 is built correctly for SMART.

Official source

IETF OAuth 2.1 draft

See also

Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →