...

This service is designed to obtain list of capitation or reimbursement contract_requests by NHS employee(private API) or by MSP(public API).

Contract_type should be declared in the URL

Overview

1. only  employee with scope "contract_requests:read" can get list of contract_requests
2. list of contract_request could be filtered

...

Reimbursement Contract Request features

Validation

Validate token

• Verify the validity of access token
  • Return 401 in case validation fails
• token is not expired
  • in case error return 401 

Validate scopes

• Check user scopes in order to perform this action (scope = 'contract_requests:read')
  1. Return 403 in case invalid scope(s) -"Your scope does not allow to access this resource. Missing allowances: contract_requests:read"

Validate employee

extract user_id from token

...