/
MIS Authorization Test

ЕСОЗ - публічна документація

MIS Authorization Test

Owned by Edward Voloshin (Unlicensed)
Last updated: Nov 01, 2017
n/nDescriptionInputsExpected ResultStep by Step ScriptActual Result
MISAT1

Doctor call WS over correct API-key

  • WS = GetDrugs()
  • Authorization - Doctor of MSP  
  • MSP access_type = broker, Valid 
  • API-key = MIS secret, Valid
  • MIS broker_scopes = drugs:read, Valid

Response 200

Get list of drugs

  1. Login as Doctor
  2. Call GetDrugs()
  •  
MISAT2Doctor call WS direct
  • WS = GetDrugs()
  • Authorization - Doctor of MSP  
  • MSP access_type = direct, Valid 

Response 200

Get list of drugs

  1. Login as Doctor
  2. Call GetDrugs()
  •  
MISAT3Doctor call WS over broker without API-key
  • WS = GetDrugs()
  • Authorization - Doctor of MSP  
  • MSP access_type = broker, Valid 
  • API-key = missing, Invalid
  • MIS broker_scopes = drugs:read, Valid

Response 401

Message "API-KEY header required !"

  1. Login as Doctor
  2. Call GetDrugs()
  •  
MISAT4Doctor call WS over broker with bad API-key
  • WS = GetDrugs()
  • Authorization - Doctor of MSP  
  • MSP access_type = broker, Valid 
  • API-key = broken, Invalid
  • MIS broker_scopes = drugs:read, Valid

Response 401

Message "API-KEY header required !"

  1. Login as Doctor
  2. Call GetDrugs()
  •  
MISAT5Doctor call WS with bad broker_scopes
  • WS = GetDrugs()
  • Authorization - Doctor of MSP  
  • MSP access_type = broker, Valid 
  • API-key = MIS secret, Valid
  • MIS broker_scopes = missing, Invalid

Response 422

Message "Incorrect broker settings!"

  1. Login as Doctor
  2. Call GetDrugs()
  • .
MISAT6Doctor call WS without needed broker scope
  • WS = GetDrugs()
  • Authorization - Doctor of MSP  
  • MSP access_type = broker, Valid 
  • API-key = MIS secret, Valid
  • MIS broker_scopes = empty, Valid

Response 422

Message "Scope is not allowed by broker!"

  1. Login as Doctor
  2. Call GetDrugs()
  • .
MISAT7HR call WS without scope over broker 
  • WS = GetDrugs()
  • Authorization - HR of MSP  
  • Role scope (drugs:read) = missing
  • MSP access_type = broker, Valid 
  • API-key = MIS secret, Valid
  • MIS broker_scopes = drugs:read, Valid
Response 403
  1. Login as HR
  2. Call GetDrugs()
  • .





  • .

Related content

MIS authorization
MIS authorization
E-Health
Read with this
Test Cases Primary care doctor access
Test Cases Primary care doctor access
E-Health
More like this
Employee configurable validation rules and dictionaries
Employee configurable validation rules and dictionaries
E-Health
Read with this
Employee Request tests
Employee Request tests
E-Health
More like this
Create INNM tests
Create INNM tests
E-Health
More like this
Register Pharmacy Test
Register Pharmacy Test
E-Health
More like this

ЕСОЗ - публічна документація