35.87SMART Authorization

The SMART Authorization configuration category includes the following configurable options:

35.87.1Property: Enforce Approved Scopes to Restrict Permissions

Property Name	Enforce Approved Scopes to Restrict Permissions
Property Key
Property Type	BOOLEAN
Description	When enabled, permission will be stripped from a user's session if they are not supported by an approved SMART on FHIR scope. For example, any FHIR write permissions will be removed from a session if the user has not approved (or a client is set to auto-approve) a scope such as `Patient/*.write`.
Applies to Modules	SMART Inbound Security SMART Outbound Security
Default Value	`true`
Example Property	`module.[MODULE_ID].config.enforce_approved_scopes_to_restrict_permissions = true`

Property Name	Scopes Supported
Property Key
Property Type	STRING
Description	A space separated list of scopes to advertise as supported in the .well-known/smart-configuration
Applies to Modules	SMART Inbound Security SMART Outbound Security
Default Value	`openid fhirUser`
Example Property	`module.[MODULE_ID].config.smart_configuration.scopes_supported = openid fhirUser`