Confidential Client Profile (Server Backend)
Welcome back, Jane Doe
Your clinical records from oncology and participating health systems are coordinated here by Dandelion's secure server.
Patient Identifier: patient_dandelion_101
Live EHR Sync Status
Embedded IframeRendered via secure scoped sessionToken generated by the Dandelion backend server.
Confidential Client Architecture & Threat Model
RFC 6749 Section 2.11. Credential Security
CLIENT_SECRET is stored in backend environment variables. It never touches the browser DOM, network headers, or JavaScript bundles.
2. Tamper-Proof Identity
The patient subject (patient_dandelion_101) is bound server-side when calling /connect-sessions. A patient cannot spoof their ID in the URL.
3. Ephemeral Capability Token
The iframe receives only a single-use cs_live_... token valid for 1 hour, strictly scoped to reading and linking records for Jane Doe.