Frontend Development (React SPA)
- Experience with iframe-based app design.
- Proficiency in building responsive, secure, and performant web applications using React.
- The application must be compatible with EHR Iframe environments such as Epic, Cerner, Meditech, etc.
Backend Development
- Ability to build a secure backend service that handles OAuth2.0 authorization.
- Capability to manage frontend data delivery and optional user sessions securely.
Secure Token and API Handling
- Strong understanding of secure token management, including OAuth2 Authorization Code Flow with PKCE.
- Experience handling token refresh, access scope enforcement, and secure API interactions.
- Familiarity with implementing CORS policies and CSRF protection.
EHR Workflow Integration Awareness
- Understanding of how SMART on FHIR applications are launched and embedded within EHR platforms (e.g., Epic, Cerner, others).
- Awareness of Iframe behavior, patient context switching, and workflow limitations in clinical environments.
- Hands-on experience implementing the SMART on FHIR EHR Launch flow.