Table of Contents | ||||
---|---|---|---|---|
|
Required parameters are marked with "*"
...
Purpose
API paragraph not found”.
Purpose*
This WS allows to get detailed immunization info from Admin panel.
Specification
...
Page Properties | ||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Logic
...
API paragraph not found
Key points
...
...
Only authenticated and authorized NHS employee with appropriate scope can get immunization details.
...
Query returns single immunization by person (mpi id) and immunization identifier.
...
Filtration with forbidden group items not implemented for immunizations, so it not used here.
...
Query should be invoked only if /wiki/spaces/AFC/pages/16680386561 for monitoring exists for current user and corresponding patient (ABAC rule_-2).
Input parameters
Input parameter | Values | Type | Description | Example |
---|---|---|---|---|
patient_id | String | Unique patient identifier |
| |
id | String | Unique immunization identifier |
|
Request structure
...
API paragraph not found
Authorize
...
Verify the validity of access token
...
...
Verify that token is not expired
in case of error - return 401 (“Invalid access token”)
...
Check user scopes in order to perform this action (scope = 'immunization:practical_monitor')
return 403 (“Your scope does not allow to access this resource. Missing allowances: immunization:practical_monitor”) in case of invalid scope(s)
...
Check user has access to resource according to @rule_-2 in ABAC
return 403 (“Access denied. Justification required“) in case of error
Request to process the request using a token in the headers
Headers
...
Наприклад:
Content-Type:application/json
Authorization:Bearer mF_9.B5f-4.1JqM
Request data validation
...
Validate
...
Extract client_id from token.
...
token
Verify the validity of access token
Return 401 in case validation fails
Verify token is not expired
in case error return 401
Validate scopes
Check user scopes in order to perform this action (scope = 'immunization:practical_monitorpatient_summary:read')
Return 403 in case
invalid scope(s)
Validate patient
Validate patient exists in MongoDB
In case of error - return 409 ('client_id refers to legal entity that is not active')
Validate request
Check required
personId
submitted.return 404 (“not found“) in case not exist
Check required immunization
Id
submitted.return 404 (“not found“) in case not exist or not related to person
Processing*
Service logic
Get immunization by id and patient_id
Render detailed Immunization data according to schema
...
not found
Processing
API paragraph not found
Response structure
See on Apiary
Example:
Expand | ||
---|---|---|
| ||
|
Post-processing processes
...
API paragraph not found
HTTP status codes
...
Page Properties | ||||||
---|---|---|---|---|---|---|
|
...