SMART Backend Services: Authorization Guide
Please see formal specification at:
https://hl7.org/fhir/smart-app-launch/backend-services.html