Glossary · Security & identity
Token introspection
OAuth 2.0 Token Introspection (RFC 7662) in SMART
Token introspection is the OAuth 2.0 endpoint (RFC 7662) where a resource server asks the authorization server whether an access token is still active and what it allows.
In SMART on FHIR the response returns the scopes, client, expiry and launch context such as the patient, so separate FHIR servers can rely on one authorization server.
Official source
See also
Explained in depth
Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →