Required parameters are marked with "*"

Якщо інформації по відповідному параметру немає, потрібно зазначити: “APIparagraph not found”.

Purpose*

This method must be used to cancel existing Service Request.

...

Specification*

...

This method must be used to cancel existing Service Request. Method receives signed message (pkcs7) that consists of signed content, digital signature and signer public key. All signature fields will be validated (including signer certificate authority)

Important

1. Signed content of service request must be equal to service request stored in DB. See Get Service Request details

2. status_reason and explanatory_letter (optional) must be added to signed content

Please see Service request (Referral) state model and Dummy Cancel Service Request for more details

...

• Verify the validity of access token

  • Return (401, 'unauthorized') in case of validation fails

• Verify that token is not expired

  • in case of error - return (401, 'unauthorized')

• Check user scopes in order to perform this action (scope = 'service_request:cancel')

  1. Return (403, 'invalid scopes') in case of invalid scope(s)

Request to process the request using a token in the headers

Headers*

Наприклад:

• Content-Type:application/json

• Authorization:Bearer mF_9.B5f-4.1JqM

• api-key:aFBLVTZ6Z2dON1V

...

Decode content that is encrypted in an electronic digital signature.
Use Digital signature WS. Method checks digital signature and returns result.
See service specification

1. Ensure that digital signature is valid

1. Validate that requester of service request is a current user

2.1. Get token metadata

• Extract user_id, client_id, client_type

...

2.4 Ensure that $.requester.identifier.value matches with user employees

1. Validate that DS belongs to the requester of encounter

3.1. Determine the party_id associated with requester ($.requester.identifier.value)

...

Only active service request can be canceled

1. Get current service request status

   1. Check that status in ('active', 'completed')

      1. in case of error - return 409 error ('Service request in status %status% cannot be canceled')

Validate cancelation reason

...

Signed content must match with service request in DB in order to be canceled

1. Render service request from DB

2. Exclude $.status_reason and $.explanatory_letter from signed content

3. Compare rendered service request and signed content

   1. In case both object doesn't match - return 422 ('Signed content doesn't match with previously created service request')

Processing*

Service logic

1. Save signed content to media storage

2. Update service request status to entered_in_error (update also updated_at, updated_by)

3. Write record to status history

4. Send SMS to patient (if authentication_method_current == SMS)

   1. Template - TBD

5. Async! Revoke all approvals made by this service request

Response structure*

See on Apiary

...