Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
REST API method / Метод REST API (настанова)
Info
Note

Сторінка знаходиться в процесі розробки. Інформація на ній може бути застарілою.

Info

/wiki/spaces/EN/pages/17591304241 (remove the link block before publishing the document)

Table of Contents

Properties of a REST API method document

Page Properties
idpage_properties_method_REST API
Scope

Document type

Метод REST API

Document title

[DRAFT] Get Observation by id (Patient Summary) [API-007-008-011-0297]

Guideline ID

GUI-0011

Author

@Mykhaylo Khapchyk (SoE eHealth)

Document version

1

Document status

DRAFT

Date of creation

ХХ.ХХ.ХХХХ (дата фінальної версії документа – RC або PROD)

Date of update

ХХ.ХХ.ХХХХ (дата зміни версії)

Method API ID

API-001007-001008-001011-00010297

Microservices (namespace)

MPIME

Component

AuthPatient Summary

Component ID

COM-001007-001008

Link на API-специфікацію

https://ehealthmisapi1medicaleventsmisapi.docs.apiary.io/#reference/public.-medical-service-provider-integration-layer/manage-client-configuration/get-client-detailsevents/patient-summary/get-observation-by-id

Resource

{{host}}//api.ehealth.gov.ua/api/patients/{{patient_id/encounter_package

}}/summary/observations/{{id}}

Scope

patient_summary:read

Protocol type

REST

Request type

GET

Sync/Async

Sync

Public/Private

Public

Purpose

Describe the purpose of the API method, add Key points (if necessary)

Logic

Description of the working algorithm of the API method and the interaction of services with each other add Service logic (if necessary)

Configuration parameters

Description of the configuration parameters that are used when processing a request in the system

Dictionaries

Provides a list of links to dictionaries that are available in Confluence

Input parameters

Description of input This web service is designed to return detailed information of the patient’s observation.

Logic

N/A (Not applicable)

Configuration parameters

N/A (Not applicable)

Dictionaries

  1. eHealth/resources - patient (parameter “patient_id“ in request)

  2. eHealth/resources - observation (parameter “id“ in request)

  3. eHealth/observation_statuses(parameter “status“ in response)

  4. eHealth/resources - diagnostic_report (parameter “diagnostic_report“ in response)

  5. eHealth/resources - encounter (parameter “context“ in response)

  6. eHealth/observation_categories(parameter “categories“ in response)

  7. eHealth/LOINC/observation_codes (parameter “code“ in request/response)

  8. eHealth/resources - employee (parameter “performer“ in response)

  9. eHealth/report_origins (parameter “report_origin“ in response)

  10. eHealth/observation_interpretations (parameter “interpretation“ in response)

  11. eHealth/body_sites (parameter “body_site“ in response)

  12. eHealth/observation_methods (parameter “method“ in response)

  13. eHealth/ucum/units (parameter “reference_ranges:low; reference_ranges:high;“ in response)

  14. eHealth/reference_range_types (parameter “type“ in response)

  15. eHealth/reference_range_applications (parameter “applies_to“ in response)

  16. eHealth/ucum/units (parameter “age:low; age:high;“ in response)

  17. eHealth/resources - specimen (parameter “specimen“ in response)

  18. eHealth/resources - equipment (parameter “device“ in response)

Input parameters

Input parameter

Mandatory

Type

Description

Example

1
composition

patient_id

 M

 

String

($uuid) (path)

Composition object ID

 89678f60-4cdc-4fe3-ae83-e8b3ebd35c59

2

Unique MPI patient identifier

7a489bbd-d8e2-48d9-92fd-fcf0102f7b08

2

id

 

String

Unique observation identifier

340b86fd-23f3-4a33-94c5-8ec19d116c33

Request structure

See on API-specification (посилання на сторінку з API-специфікацією)

Description of the REST API request structure, example

...

titleExample

...

Headers

...

Key

...

Value

...

Mandatory

...

Description

...

Example

...

Content-Type

...

application/json

...

M

...

Тип контенту

...

Content-Type:application/json

...

Authorization

...

Bearer c2778f3064753ea70de870a53795f5c9

...

M

...

Перевірка користувача

...

Authorization:Bearer c2778f3064753ea70de870a53795f5c9

...

Request data validation

Describe the process of checking the input data transmitted in the request for compliance with the given rules and restrictions set in the API

Processing

A list of processes related to receiving, changing or transmitting data according to the logic defined in the REST API

Response structure examples

Description of the REST API response structure, example

...

titleExample

...

Headers

See on Headers

Authorize

Request to process the request using a token in the headers

Request data validation

Validate token

  • Verify the validity of access token

    • Return 401 in case validation fails

  • Verify token is not expired

    • in case error return 401 

Validate scopes

  • Check user scopes in order to perform this action (scope = 'patient_summary:read')

    1. Return 403 in case invalid scope(s)

Access to the resource is also managed by ABAC module.

Validate patient

  • Validate patient exists in MongoDB

    • In case of error return 404 not found

Validate observation

  • Validate observation exists in MongoDB

    • In case of error return 404 not found

  • Check observation belongs to patient

    • In case of error return 404 not found

Processing

  1. Get observation by ID

  2. Ensure that requested observation relates to requested Patient

  3. Filter using configuration param SUMMARY_OBSERVATIONS_ALLOWEDin order to return only allowed codes

  4. Render a response according to specification

Response structure examples

See on API-specification

HTTP status codes

Response code

HTTP Status code

Message

Internal name

Description

1

Базові

2

 

1000

 

404

200

Composition not found

COMPOSITION_NOT_FOUND_404

Не знайдено медичний висновок

 

 Response

 

3

 

401

Unauthorized

Помилка підтвердження

4

Специфічні

5

422

Only for active MPI record can be created medication request!

 

Access token validation failed

 

4

 

401

 

Access token expired

 

5

 

403

Your scope does not allow to access this resource. Missing allowances: patient_summary:read 

Forbiden

 

6

 

403

Access denied

Forbiden

 

7

 

404

 

Not found

 

8

Специфічні

Post-processing processes

Description of actions performed on data after processingN/A (Not applicable)

Technical modules where the method is used

List of pages describing technical modules where the method is used

...

N/A (Not applicable)