Specification

...

1. Verify the validity of access token

   1. Return 401 in case validation fails

2. Check scopes in order to perform this action (scope = 'append_auth_method:write')

   1. Return 403 in case invalid scope(s)

Logic

action = deactivate

1. If IL_DB.authentication_method_request.status = NEW:

• validate auth_method_request.auth_method_current:

  • If auth_method_request.auth_method_current = OTP - Verificate sms (Invoke verification module to verify OTP (OTP Verification))

  • If auth_method_request.auth_method_current = OFFLINE - verificate download documents

• If deactivate auth_method where field default = True, then the method that was last added has a flag default = True

Update authentication method request

• Change entity status in IL_DB.authentication_method_request to COMPLETED

• Set updated_at - now() (Get current date-time)

• Set updated_by - user_id (Extract user from token)

action = insert

1. If IL_DB.authentication_method_request.status = NEW:

1. if type = OTP or OFFLINE, person’s auth method that was before (off or offline) becomes inactive

2. if type = THIRD_PERSON, set default=false and Calculate term of person_authentication_method

   Start date: start_date = Current_date()

   End date:

   Code Block
   if (person.age < 18) {  end_date = min(birth_date + 18y - 1d, start_date + third_person_term);} else {  end_date = start_date + third_person_term;}

   Verificate sms - from third_person. Invoke verification module to verify OTP (OTP Verification) or verificate documents, if third_person.auth_method.type = OFFLINE

   Invoke Initialize OTP to generate one time password and send it to person number( Phone_number: mpi.person_auth_method.phone_number, where person_id = $.person_id and default=True). At this stage, the patients receive an SMS message.

3. If IL_DB.authentication_method_request.status = APPROVED:

action = update

• If IL_DB.authentication_method_request.status = NEW:

1. Verificate sms - from third_person. At response return massive of person’s auth_methodInvoke verification module to verify OTP (OTP Verification) or verificate documents, if third_person.auth_method.type = OFFLINE

2. Invoke Initialize OTP to generate one time password and send it to person number( Phone_number: mpi.person_auth_method.phone_number, where person_id = $.person_id and default=True). At this stage, the patients receive an SMS message.

3. Update authentication method request

   1. Change entity status in IL_DB.authentication_method_request to APPROVED

   2. Set updated_at - now() (Get current date-time)

   3. Set updated_by - user_id (Extract user from token)

...