| Note |
|---|
Сторінка знаходиться в процесі розробки. Інформація на ній може бути застарілою. |
| Info |
|---|
/wiki/spaces/EN/pages/17591304241 (remove the link block before publishing the document) |
| Table of Contents | ||
|---|---|---|
|
...
Document type | Метод REST API |
|---|---|
Document title | [DRAFT] REST API Get Specimen details [API-007-012-001-0495] |
Guideline ID | GUI-0011 |
Author | @ |
Document version | 1 |
Document status | DRAFT |
Date of creation | ХХ.ХХ.ХХХХ (дата фінальної версії документа – RC або PROD) |
Date of update | ХХ.ХХ.ХХХХ (дата зміни версії) |
Method API ID | API-007-012-001-0495 |
Microservices (namespace) | ABACME |
Component | Specimen |
Component ID | COM-007-012 |
Link на API-специфікацію | |
Resource | {{host}}/api/patients/patient_id/specimens/{{id}} |
Scope | specimen:read |
Protocol type | REST |
Request type | GET |
Sync/Async | AsyncSync |
Public/Private | Public |
Purpose
...
Only authenticated and authorized employee with appropriate scope can get a Specimen.
Method returns a single Specimen that belongs to the specified patient.
ABAC rules are used here.
Logic
https://e-health-ua.atlassian.net/wiki/spaces/EH/pages/17629118915/RC.#%D0%9E%D1%82%D1%80%D0%B8%D0%BC%D0%B0%D0%BD%D0%BD%D1%8F-%D1%96%D0%BD%D1%84%D0%BE%D1%80%D0%BC%D0%B0%D1%86%D1%96%D1%97-%D0%97%D1%80%D0%B0%D0%B7%D0%BA%D0%B0-%D0%BF%D1%80%D0%B8-%D0%B2%D0%B7%D0%B0%D1%94%D0%BC%D0%BE%D0%B4%D1%96%D1%97-%D0%B7-%D0%BF%D0%B0%D1%86%D1%96%D1%94%D0%BD%D1%82%D0%BE%D0%BC[DRAFT] BP-ESOZ-028-0003 [MIS] Отримання інформації Зразка при взаємодії з пацієнтом
Service returns specified Specimen related to the patient:
...
Verify the validity of access token
in case of error - return 401 “Invalid access token” in case of validation fails
Verify that token is not expired
in case of error - return 401 “Invalid access token”
Check user and client scopes in order to perform this action (scope = 'specimen:read')
return 403 “Your scope does not allow to access this resource. Missing allowances: specimen:read” in case of invalid scope(s)
Access to the resource is also managed by
ABAC module
Validate Patient
Get Patient identifier from the URL
Check it exists in DB
Return 404 ('not found') in case of error
...
Response code | HTTP Status code | Message | Internal name | Description | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Базові | ||||||||||
| 2 |
| 200 |
|
|
| 3 |
| 401 | Invalid access token |
| Недійсний токен доступу |
| 43 | 403 | Your scope does not allow to access this resource. Missing allowances: specimen:read |
| Відсутня можливість доступу до цього ресурсу через брак наявності скоупу: specimen:read | |||||||
| 4 | 404 | not found | Не знайдено | ||||||||
Post-processing processes
...
Technical modules where the method is used
N/A