SMART Client Authentication

When clients need to authenticate, SMART App Launch implementation guide defines two methods:

1. Authenticates a client using an asymmetric keypair. This is SMART’s preferred authentication method because it avoids sending a shared secret over the wire.

SMART: Asymmetric (“private key JWT”) authentication

1. Authenticates a client using a secret that has been pre-shared between the client and server.

SMART: Symmetric (“client secret”) authentication