use SMART App v2 scopes

Author: JFU-NAVA-PBC

server/index.ts

@@ -42,7 +42,12 @@ let authToken: AuthorizationToken;
 
 // auth flow: response with URL to redirect to Medicare.gov beneficiary login
 app.get("/api/authorize/authurl", (req: Request, res: Response) => {
-  res.send(bb.generateAuthorizeUrl(authData));
+  // for SMART App v2 scopes usage: explicitly
+  // provide query parameter scope=<v2 scopes>
+  // where <v2 scopes> is space delimited v2 scope specs (url encoded)
+  // e.g. patient/ExplanationOfBenefit.rs
+  const redirectUrl = bb.generateAuthorizeUrl(authData) + "&scope=patient%2FPatient.s%20patient%2FExplanationOfBenefit.rs"
+  res.send(redirectUrl);
 });
 
 // auth flow: oauth2 call back