scope paramter specification

The scope parameter consists of an optional, space-separated list of scopes your application is requesting. If omitted, all scopes will be requested.

For current version, there are folloing scopes:

Scope Grants
patient/*.read Permission to read any resource for the current patient (see notes on wildcard scopes below)
launch/patient When launching outside the EHR, ask for a patient to be selected at launch time
offline_access Request a refresh_token that can be used to obtain a new access token to replace an expired one, even after the end-user no long is online after the access token rexpires
Note: all scopes are literal match based. And we will open write access to all resources, by then, we will support read and write on specific resource.

For more information, please see SMART on FHIR