...
...
...
...
Table of Contents |
---|
Purpose
This web service is designed to obtain full information about contract by NHS employee(private API) or MSP employee(public API).
Overview
- only employee with scopes contract:read can see details of contract
Specification
Public API
Private API
- GraphQL API
Capitation Contract
Reimbursement Contract - Features
Validation
Validate token
...
Table of Contents | ||||
---|---|---|---|---|
|
Purpose
This method allows to get existing contract by its id with GB_CBP type through the NHS IT system
Specification
Page Properties | ||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Logic
This method allows to get existing contract by its id with GB_CBP type through the NHS IT system
Input parameters
Input parameter | Values | Type | Description | Example |
---|---|---|---|---|
id | String |
|
Authorize
Verify the validity of api-key
Return 401 in case validation fails
...
- in case error return 401
Validate scopes
...
Verify the validity of token
Return 401 in case validation fails
Check scopes in order to perform this action (scope = '
...
private_contracts:read')
Return 403 in case invalid scope(s)
Request to process the request using a token in the headers
Headers
Наприклад:
Content-Type:application/json
api-key:c2778f3064753ea70de870a53795f5c9
Request data validation
Validate
...
extract user_id from token
extract client_id from token
- Check if user is active
- in case error return 403 - (user is not active)
- check nhs_legal_entity is active
- in case error return 403 - (Client is not active)
Validate context
extract client_id from token. LE employee can see only this legal entities contracts. NHS employee can see any contracts.
- if TOKENS_TYPES_PERSONAL
- Check client_id = contracts.contractor_legal_entity_id
- in case error return 403 "User is not allowed to view this contract"
- Check client_id = contracts.contractor_legal_entity_id
Validate data
- Validate contract id. Check contract.id = $.id
- in case error return 404 ("Contract with id=$id doesn't exist")
Responses
...
request
Only authenticated and authorized user can use this service
Deleted records won't be shown in response
Processing
Show requested contract.
a. If requested contract type not GB_CBP, show 404 Not found instead
Response structure
See on Apiary
Example:
Expand | ||
---|---|---|
| ||
|
HTTP status codes
HTTP status code | Message | What caused the error |
---|---|---|
200 |
|
|