From c4aed4fb9a1625b06ec0006309cee17e8277e20b Mon Sep 17 00:00:00 2001 From: Matthew Beermann Date: Mon, 26 Jun 2023 15:41:05 -0500 Subject: [PATCH] Clarify JWT Authentication (#958) --- content/authorization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/authorization.md b/content/authorization.md index 5a286b3da..aa6bd8fd7 100644 --- a/content/authorization.md +++ b/content/authorization.md @@ -1048,7 +1048,7 @@ curl -X POST 'https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0 #### JWT Authentication #### -Alternatively, clients may authenticate themselves using signed JSON Web Tokens (JWTs). This process is similar to the above, but uses ``Authorization: Bearer`` instead. This is the preferred mode of authentication for [Bulk Data](http://hl7.org/fhir/uv/bulkdata/) clients. For complete details, see [Java Web Token (JWT)](https://www.rfc-editor.org/rfc/rfc7519) and [JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://www.rfc-editor.org/rfc/rfc7523). +Alternatively, clients may authenticate themselves using signed JSON Web Tokens (JWTs). This is the preferred mode of authentication for [Bulk Data](http://hl7.org/fhir/uv/bulkdata/) clients. For complete details, see [SMART App Launch: Backend Services](http://hl7.org/fhir/smart-app-launch/STU2/backend-services.html). Note that clients leveraging this type of authentication must also pre-register their JSON Web Key Sets (JWKS) using [Cerner Central System Account Management](https://wiki.cerner.com/display/CernerCentral/System+Account+Management+Help). For complete details, see [Managing JSON Web Key Sets in System Account Management](https://wiki.cerner.com/display/public/CernerCentral/Managing+JSON+Web+Key+Sets+in+System+Account+Management).