Check the access token on incoming requests and decide whether to allow the query.
When another care organization queries your FHIR API (or other data API), the request carries an ...
