{
  "description": "CapabilityStatement indicating server support for UDAP workflows",
  "_filename": "CapabilityStatement-udap-server.json",
  "package_name": "hl7.fhir.us.udap-security",
  "format": [ "json", "xml" ],
  "date": "2021-06-14",
  "publisher": "HL7 International - Security WG",
  "fhirVersion": "4.0.1",
  "jurisdiction": [ {
    "coding": [ {
      "code": "US",
      "system": "urn:iso:std:iso:3166"
    } ]
  } ],
  "name": "UDAPServerCapabilityStatement",
  "copyright": "(c) 2021+ HL7 International - Security WG and UDAP.org",
  "type": null,
  "experimental": "false",
  "resourceType": "CapabilityStatement",
  "title": "UDAP Server CapabilityStatement",
  "package_version": "0.1.0",
  "status": "active",
  "id": "0302a92b-9524-492f-abff-7ecd5f3ba4cc",
  "kind": "requirements",
  "implementationGuide": [ "http://hl7.org/fhir/us/udap-security/ImplementationGuide/hl7.fhir.us.udap-security" ],
  "url": "http://hl7.org/fhir/us/udap-security/CapabilityStatement/udap-server",
  "version": "0.1.0",
  "contact": [ {
    "name": "HL7 International - Security WG",
    "telecom": [ {
      "value": "http://www.hl7.org/Special/committees/secure",
      "system": "url"
    } ]
  } ],
  "rest": [ {
    "mode": "server",
    "security": {
      "service": [ {
        "text": "OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org)",
        "coding": [ {
          "code": "SMART-on-FHIR",
          "system": "http://terminology.hl7.org/CodeSystem/restful-security-service"
        } ]
      }, {
        "text": "OAuth 2 using UDAP profile (see http://www.udap.org)",
        "coding": [ {
          "code": "UDAP",
          "system": "http://fhir.udap.org/CodeSystem/capability-rest-security-service"
        } ]
      } ],
      "extension": [ {
        "url": "http://fhir-registry.smarthealthit.org/StructureDefinition/oauth-uris",
        "extension": [ {
          "url": "token",
          "valueUri": "https://{token_url}"
        }, {
          "url": "authorize",
          "valueUri": "https://{authz_url}"
        }, {
          "url": "register",
          "valueUri": "https://{register_url}"
        } ]
      } ]
    },
    "documentation": "This CapabilityStatement focuses on expressing the expected RESTful security services supported by a server. Additionally, servers are generally expected to support at least one interaction or operation at the resource or system level."
  } ]
}