/wiki/spaces/EN/pages/17591304241 (remove the link block before publishing the document)

Properties of a REST API method document

Document type	Метод REST API
Document title	[DRAFT] REST API Get Specimen details [API-007-012-001-0495]
Guideline ID	GUI-0011
Author	@
Document version	1
Document status	DRAFT
Date of creation	ХХ.ХХ.ХХХХ (дата фінальної версії документа – RC або PROD)
Date of update	ХХ.ХХ.ХХХХ (дата зміни версії)
Method API ID	API-007-012-001-0495
Microservices (namespace)	ABAC
Component	Specimen
Component ID	COM-007-012
Link на API-специфікацію	https://ehealthmedicalevents975v12.docs.apiary.io/#reference/medical-events/specimen/get-specimen-details
Resource	{{host}}/api/patients/patient_id/specimens
Scope	specimen:read
Protocol type	REST
Request type	GET
Sync/Async	Async
Public/Private	Public

Purpose

This WS allows to get a single Specimen by its identifier.

Key points

Only authenticated and authorized employee with appropriate scope can get a Specimen.
Method returns a single Specimen that belongs to the specified patient.
ABAC rules are used here

Logic

https://e-health-ua.atlassian.net/wiki/spaces/EH/pages/17629118915/RC.#%D0%9E%D1%82%D1%80%D0%B8%D0%BC%D0%B0%D0%BD%D0%BD%D1%8F-%D1%96%D0%BD%D1%84%D0%BE%D1%80%D0%BC%D0%B0%D1%86%D1%96%D1%97-%D0%97%D1%80%D0%B0%D0%B7%D0%BA%D0%B0-%D0%BF%D1%80%D0%B8-%D0%B2%D0%B7%D0%B0%D1%94%D0%BC%D0%BE%D0%B4%D1%96%D1%97-%D0%B7-%D0%BF%D0%B0%D1%86%D1%96%D1%94%D0%BD%D1%82%D0%BE%D0%BC

Service returns specified Specimen related to the patient:

Get Specimen by ID from specimens collection (MongoDB)
Render a response according to specification

Configuration parameters

N/A

Dictionaries

N/A

Input parameters

	Input parameter	Mandatory	Type	Description	Example
1
2

Request structure

See on API-specification

Example

Headers

Request data validation

Authorization

Verify the validity of access token
- in case of error - return 401 “Invalid access token” in case of validation fails
Verify that token is not expired
- in case of error - return 401 “Invalid access token”
Check user and client scopes in order to perform this action (scope = 'specimen:read')
- return 403 “Your scope does not allow to access this resource. Missing allowances: specimen:read” in case of invalid scope(s)
Access to the resource is also managed by ABAC module

Validate Patient

Get Patient identifier from the URL
Check it exists in DB
- Return 404 ('not found') in case of error

Validate Specimen

Get Specimen identifier from the URL
Check it exists in DB
- Return 404 ('not found') in case of error
Check Specimen belongs to patient
- Return 404 ('not found') in case of error

Processing

N/A

Response structure examples