Table of Contents

Page Properties

id	API_Specification

Link	https://ehealthmedicaleventsapi.docs.apiary.io/#reference/device-requests/get-device-request-details/get-device-request-details	Посилання на Apiary або Swagger
Resource	/api/patients/{{patient_id}}/device_requests/{{device_request_id}}	Посилання на ресурс, наприклад: /api/persons/create
Scope	`device_request:read`	Scope для доступу
Components	Devices	Зазначається перелік бізнес компонентів, які використовують цей метод, наприклад: ePrescription
Microservices		Перелік мікросервісів, які використовує метод API, наприклад: Auth, ABAC
Protocol type	REST	Тип протоколу, який використовується запитом, наприклад: SOAP \| REST
Request type	GET	Тип запиту API, наприклад: GET, POST, PATCH…
Sync/Async	Sync	Метод є синхронним чи асинхронним?
Public/Private/Internal	Public	Потрібно зазначити тип методу за ступенем доступності

Logic

Service returns specified Device requests related to the patient:

Get Device requests from device_request collection (MongoDB)
Validate data consistency:
1. Ensure that requested Device requests relates to requested Patient (from URL)
  1. Return 403 ('Access denied') in case of error
Fill in urgent block with current authentication method and verification_code field:
1. If person has OTP authentication method, then set phone_number and verification_code=null
2. If person has OFFLINE authentication method (or doesn't have active authentication method), then set verification_code and phone_number/authentication method=null
Render a response according to specification

Input parameters

Input parameter	Values	Type	Description	Example
patient_id		String	Unique patient identifier	`7075e0e2-6b57-47fd-aff7-324806efa7e5`
device_request_id		String	Unique device request identifier	`aff00bf6-68bf-4b49-b66d-f031d48922b3`

Verify the validity of access token
- Return (401, 'Invalid access token') in case of validation fails
Verify that token is not expired
- in case of error - return (401, 'Invalid access token')
Check user scopes in order to perform this action (scope = 'device_request:read')
- Return (403, 'Your scope does not allow to access this resource. Missing allowances: device_request:read') in case of invalid scope(s)

...