ЕСОЗ - публічна документація
RC_(MC-1191)_[NEW] Resend SMS on Composition Create
Purpose
This WS is designed to resend SMS to the patient(or confidant person) with composition number in case it wasn’t delivered the first time.
Specification
Key points
Only authenticated and authorized user with appropriate scope can resend SMS.
SMS with composition number can be resent only to person with auth_method with type OTP.
SMS with composition number can be resent only for Composition in FINAL status.
Authorization
Verify the validity of access token
in case of error - return 401 (“Invalid access token”) in case of validation fails
Verify that token is not expired
in case of error - return 401 (“Invalid access token”)
Check user scopes in order to perform this action (scope = 'composition:resend_sms')
return 403 (“Your scope does not allow to access this resource. Missing allowances: composition:resend_sms”) in case of invalid scope(s)
Validations
Validate person
Check if person with patient_id from request exists
in case of error - return 404 (“Not found”)
Check if person with patient_id from request is not preperson
in case of validation fails skip all steps below
Check if Composition with composition_id from request is exist
in case of error - return 404 (“Not found”) in case of validation fails
Validate Composition
Check that status is not 'entered_in_error'
in case of error - return 409 error ('You can not resend SMS for Composition in status %status%')
Validate legal entity
Check that legal_entity_type is included in chart variables
ME_ALLOWED_TRANSACTIONS_LE_TYPES
config parameterin case of error return 409 "Action is not allowed for the legal entity"
Check that legal_entity has status = active
in case of error return 409 "Action is not allowed for the legal entity"
Processing
Call [Transferred] SMS timeout procedure to check if resending is allowed using:
COMPOSITION_MAX_ATTEMPTS_COUNT as MAX_ATTEMPTS_COUNT
COMPOSITION_SEND_TIMEOUT as SEND_TIMEOUT
"composition" as entity_name
composition_id as entity_id
in case of error - return 429 ("Sending SMS timeout. Try later. Next attempt will be available at <attempts.oldest.value + SEND_TIMEOUT>")
Get person's authentication_method according to logic:
If authorize_withinform_with exists in Composition and is not empty, check:
Authentication method exists in person_authentication_methods table in MPI DB (with is_active=true), is active (ended_at > now() or null)
Get value of
THIRD_PERSON_CONFIDANT_PERSON_RELATIONSHIP_CHECK
config parameterif it is set to
true
- for authentication method with type = THIRD_PERSON check that person from value is an approved confidant for a person from Composition:exists active and approved confidant person relationship between patient from the Composition and confidant_person_id from authentication method value (using following logic: Check confidant person relationship with
person_id
= person from request andconfidant_person_id
= value from auth method - expected:ok, :approved
response)
in case any validation failed - return 409 ('Authentication method doesn't exist or is inactive')
else - get authentication_method from authorize_withinform_with
If authentication_method == OTP or THIRD_PERSON (with OTP)
Generate text SMS with template
CREATE_{{COMPOSITION_TYPE}}_COMPOSITION_SMS_TEMPLATE
.Send SMS
else, if authentication_method is not OTP or THIRD_PERSON (with OTP) return an error
return 409 ('Authentication method doesn't exist or is inactive')
ЕСОЗ - публічна документація