...
...
...
...
Table of Contents |
---|
Purpose
This web service is designed to obtain full information about contract by
Overview
- only nhs employee with scopes contract:read can see details of contract
Specification
Validation
Validate token
...
Table of Contents | ||||
---|---|---|---|---|
|
Purpose
This method allows to get existing contract by its id with GB_CBP type through the NHS IT system
Specification
Page Properties | ||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Logic
This method allows to get existing contract by its id with GB_CBP type through the NHS IT system
Input parameters
Input parameter | Values | Type | Description | Example |
---|---|---|---|---|
id | String |
|
Authorize
Verify the validity of api-key
Return 401 in case validation fails
...
- in case error return 401
Validate scopes
...
Verify the validity of token
Return 401 in case validation fails
Check scopes in order to perform this action (scope = '
...
private_contracts:read')
Return 403 in case invalid scope(s)
Request to process the request using a token in the headers
Headers
Validate employee
extract user_id from token
extract client_id from token
- Check if user is active
- in case error return 403 - (user is not active)
- check nhs_legal_entity is active
- in case error return 403 - (Client is not active)
Validate context
extract client_id from token. LE employee can see only this legal entities contracts. NHS employee can see any contracts.
- if TOKENS_TYPES_PERSONAL
- Check client_id = contracts.contractor_legal_entity_id
- in case error return 403 "You are not allowed to view this contract"
- Check client_id = contracts.contractor_legal_entity_id
Validate data
- Validate contract id. Check contract.id = $.id
- in case error return 404 ("Contract with id=$id doesn't exist")
...
Наприклад:
Content-Type:application/json
api-key:c2778f3064753ea70de870a53795f5c9
Request data validation
Validate request
Only authenticated and authorized user can use this service
Deleted records won't be shown in response
Processing
Show requested contract.
a. If requested contract type not GB_CBP, show 404 Not found instead
Response structure
See on Apiary
Example:
Expand | ||
---|---|---|
| ||
|
HTTP status codes
HTTP status code | Message | What caused the error |
---|---|---|
200 |
|
|