RC_[NEW] Get Device Associations by search params

Purpose

This method intended to get all Device Association in patient context by params

Specification

Apiary

Authorization

• Verify the validity of access token

  • Return (401, 'Invalid access token') in case of validation fails

• Verify that token is not expired

  • in case of error - return (401, 'Invalid access token')

• Check user scopes in order to perform this action (scope = 'device_association:read')

  • Return (403, 'Your scope does not allow to access this resource. Missing allowances: device_associations:read') in case of invalid scope(s)

Access to the resource is also managed by ABAC rules.

Validations

Validate Patient

• Get Person identifier from the URL

  • Check it exists in DB

    • Return 404 ('not_found') in case of error

Service logic

Service returns specified all Device Association in patient context:

• Get data from device_associations (MongoDB)

• Filter list above by submitted search parameters

  • It must be allowed to pass multiple comma-separated values for some query parameters:

    • body_site

    • status

• Sorting by recorded desc

• Render a response according to specification.