Overview

This web service is designed to provide access to patient's conditions as a part of Patient Summary

This web service returns only specific conditions filtered by conditions.code based on system configuration parameter in order to ensure Medical Confidentiality

Configuration

Specification

1. Get Conditions
2. Get Condition by ID

Service logic

Authorization

Validate token

• Verify the validity of access token
  • Return 401 in case validation fails
• Verify token is not expired
  • in case error return 401

Validate scopes

• Check user scopes in order to perform this action (scope = 'patient_summary:read')
  1. Return 403 in case invalid scope(s)

Validate patient

• Validate patient exists in MongoDB
  • In case of error return 404 not found

Processing

1. Get all patient's conditions
2. Query conditions using configuration.SUMMARY_CONDITIONS_ALLOWED
3. Apply filters provided by user