...

Request to process the request using a token in the headers

Headers

Наприклад:

• Content-Type:application/json

• Authorization:Bearer mF_9.B5f-4.1JqM

• api-key:aFBLVTZ6Z2dON1V

Request data validation

...

• Verify the validity of access token

  • Return 401 in case validation fails

• Verify token is not expired

  • in case error return 401 

...

• Check user scopes in order to perform this action (scope = 'episode:read')

  1. Return 403 in case invalid scope(s)

Headers

• Content-Type:application/json

• Authorization:Bearer {{access_token}}

• API-key:{{secret}}

Processing

1. Select list of employees from PRM related to the current user in the current legal_entity, using data from the token

2. Select all active approvals from Medical Events, where these employees referenced as a `granted_to`

3. Select all the episodes from ME that are referenced as `granted resources` in the approvals from step 2. 

4. Show episodes to the client ordered by inserted_at

...