...

1. Extract legal_entity_id (client_id) from token. Take contract_request_id.
2. Check client_id=nhs_legal_entity_id (nhs_side) - in case of error return 403 Error ('Invalid client id')
   1. Extract token →  users.id → party_users.party_id → employee_id.
      1. Check employees.employee_id=nhs_signer_id and client_id=employee.legal_entity_id
      2. In case of error return 422 Error ('Employee is not allowed to sign')
   2. Validate that contract_request hasn't been signed by  nhs_side already
      1. Check if signed_nhs=false.status= 'APPROVED'
      2. In case of error return 422 error ('The contract was already can't be signed by NHSstatus')

Digital signature

Decode content that is encrypted in an electronic digital signature.
Use Digital signature WS. Method checks digital signature and returns result.

Validations

Validate DRFO

1. Check that DRFO in Certificate details exists and not empty
   1. in case of error return 422 error ('Invalid DRFO in DS')
2. Check that DRFO in Certificate details is equal to DRFO in Party
   1. Get party.tax_id using user_id from token (user.id→ party_users.party_id → parties.id.tax_id)
   2. Compare DRFO in Certificate with party.tax_id
      1. Convert DRFO and TAX_ID to uppercase
      2. Compare DRFO and TAX_ID as Cyrillic letters
      3. Convert DRFO to Cyrillic and compare as Cyrillic letters
   3. In case validation fails - generate 422 error

...

1. Validate request using JSON schema
   
   1. In case validation fails - generate 422 error
2. Check declaration request status
   1. If status is not APPROVED - returned error 422 'Incorrect status'
3. Validate contractor_employee_divisions
   1. Employees from employee_divisions has employee_type='DOCTOR', status='APPROVED', division is not null
      1. in case of error return 422  error view $employee ('Employee must be an active DOCTOR with linked division')
   2. Check divisions belongs to legal_entity and divisions.status='active'
      1. in case of error return 422  error view $divisions ('Division must be active and within current legal_entity')
   3. Check employee belongs to division
      1.  in case of error return 422  error view $employee  ('Employee must be within current division')
4. Validate start_date
   1. start_date>now()
      1. in case of error return 422 error $start_date ('Start date must be greater than create date')
5. Check whether all id is resolved and valid. For
    - contractor_legal_entity_id and nhs_legal_entity_id in status='active' (prm.legal_entities)
    - contractor_owner_id and nhs_signer_id in status = 'APPROVED' (prm.employees)

Save signed contract to media storage

1. Get url for declaration upload

   Parameter	Source
   action	'GET'
   bucket	'CONTRACT_REQUESTS'
   resource_id	: CONTRACT_REQUEST_ID
   resource_name	: CONTRACT_NAME
   timestamp	:TIMESTAMP

   
   

2. Upload signed contract to media storage.

Update contract request

...

contract

...

request

...

1. Change contract_request.statuastatus='NHS_SIGNED'

Add status to event manager

After status was changed (status = NHS_SIGNED) - add new status to event_manager

field	value
event_type	StatusChangeEvent
entity_type	Contract_request
entity_id	$.id
properties.status.new_value	$.status
event_time	$.update_at
changed_by	$.changed_by