...

Request structure

...

Authorize

1. Verify the validity of access token

   1. Return 401 in case of validation fails

2. Check user scope approval:create in order to perform this action

   1. Return 403 in case of invalid scope

Request to process the request using a token in the headers

Headers

Наприклад:

• Content-Type:application/json

• Authorization:Bearer d368a4b0-4a0e-457a-b267-32359fa6288f

...

1. Search for approval by patient_id + approval_id

   1. Validate person by http:// patient._id

      1. In case error return 404 (message "Person not found")

   2. Validate approval by approval.id

      1. In case error return 404 (message "Approval with such id is not found")

2. Send SMS with OTP-code to persons phone from approvals.urgent.phone_number

...