Release Notes

v1.0.0 — Current

Platform: AJ Smart FHIR Platform v1.0.0
HAPI FHIR: 7.4.5
Spring Auth Server: 1.3.x
Java: 21
SMART spec: App Launch v2.2

What's included

Auth Server (v0.2.3)

• SMART App Launch v2.2 — EHR + standalone launch
• PKCE S256 enforced — requireProofKey(true)
• Atomic EHR launch tokens — single-use, 5-min expiry
• SMART extras as top-level JSON (patient, encounter, need_patient_banner)
• RS256 id_token — JWKS endpoint, OIDC claims
• JPA app registry — PostgreSQL, Flyway V1 migration
• IdP federation — Azure AD, Okta, Epic IdP, ADFS
• 90 tests including 14 end-to-end integration tests

SMART Client (v0.1.0)

• SMART App Launch v2.2 — EHR + standalone launch
• Full Nimbus RS256 id_token verification via RemoteJWKSet
• 96-byte PKCE verifier, S256 challenge
• Dynamic discovery — jwks_uri from discovery document
• Proactive token refresh — 120s buffer
• Thymeleaf clinical UI
• 206 tests

HAPI FHIR Plugin (v1.0.0)

• SmartDiscoveryProxyFilter — pre-wired
• SmartScopeInterceptor — RS256 via RemoteJWKSet, SMART v1 + v2 scopes
• Spring Boot autoconfiguration — drop JAR on classpath

Platform

• docker compose up — full stack in one command
• scripts/verify.sh — smoke test all services
• RELEASE.md — HAPI tracking model documented
• SUPPORT.md — three commercial support tiers

---

Roadmap — v1.1.0

• Consent Manager (14 tasks across 5 phases)
• ATNA Audit module
• UI polish — landing page, branding, demo credentials

Roadmap — v1.2.0

• Referral Module (FHIR ServiceRequest + Task)
• Cerner sandbox testing
• Sri Lanka FHIR Implementation Guide profiles