Best practice on validating customized context

[Patchara Wongsutthikoson]

Hi,

We want to implement customized context in SMART on FHIR. Should we customize the SMART on FHIR server to validate our application specific context or should we validate our said context out of band, e.g. using our own authorization server that acts as a proxy before the request is processed by the SMART on FHIR server.

Thank you,
Patchara W.