...
Authentication and authorisation in both ourCustom REST API andFHIR® REST API are through OAuth 2.0 (a widely adopted secure authorisation standard utilised by industry leaders like Google, Microsoft or Epic Systems, enabling controlled resource access without credential exposure).
The full OAuth 2.0 spec is here, in two parts:
...