...

Request

Validation

Validate token

• Verify the validity of access token
  • Return 401 in case validation fails
• token is not expired
  • in case error return 401 - "Token is expired"

...

• Check if user is active
  • in case error return 403 - (user is not active)
• check nhs_legal_entity is active
  • in case error return 403 - (Client is not active)

Validate scopes

• Check user scopes in order to perform this action (scope = 'contract_requests:update')
  • Return 403 in case invalid scope(s)  "Your scope does not allow to access this resource. Missing allowances: contract_requests:update"

Validate status

• Check if contract_request.status=NEW
  • in case error return 422 - "Incorrect status of contract_request to modify it"

...

• Only next field could be changed by nhs employee
  • issue_city
    • Set issue_city = nhs_le
    City
    • .addresses.settlement_name, where address_type=REGISTRATION
  • nhs_base - що діє на підставіbase 
  • price - Загальна орієнтовна Ціна Договору
  • status (enum)
    • Approved
    or
    • Declined
    )
  • status_reason

Response

Generate Printout form 

If status is changed to APPROVED - generate printout form

Invoke MAN to render printuot form.

Request mapping:

...