Purpose

This method is used to sign merge request. Method receives signed message (pkcs7) including signed content, digital signature and signer public key in signed_content property. All signature fields will be validated (including signer certificate authority).

Specification

Preconditions

Merge request must be approved.

Logic

1. Only authenticated and authorized SPECIALIST employees can use this WS.

2. Usage of this WS allowed in EMERGENCY or OUTPATIENT legal entities.

3. Employee should sign merge request to link person with preperson.

4. Only request APPROVED by person can be signed.

5. The request can be signed only by employee who made the request.

6. Create objects in DB should be done in one transaction.

7. Status change of the merge request and preperson should be logged in the Event manager.

8. Succesfull merge does not create record in MPI.persons table for preperson, but deactivates record in MPI.prepersons and linked document in patient collection (mongo)

9. Data from the field data_to_be_signed used as request data for sign method.

Input parameters

Request structure

See on Apiary

Example:

Authorize

1. Verify the validity of access token

   1. Return 401 in case validation fails

2. Check user scopes in order to perform this action (scope = 'merge_request:sign')

   1. Return 403 in case invalid scope(s)

3. Check the employee has created this merge request. Thus select inserted_by from il.merge_requests of this merge request and compare it with user_id from the token.

4. Check that client_id from the token maches with il.merge_requests.legal_entity_id

   1. If not match - return 422 error (User doesn’t belong to legal entity where the merge request was created)

Headers

Content-Type:application/json

Authorization:Bearer {{access_token}}

api-key:{{secret}}

Request data validation

Validate digital signature

Validate digital sign as described on sign patient request process

Check signed content

• Check decoded signed content with previously created on IL.db.

In case if they are not equal - generate 422 error (message: "Signed content does not match the previously created content")

• Generate data for sign and compare it with information from il.merge_requests.data

In case if they are not equal - generate 422 error (message: "Created content has been changed")

Validate schema

Validate request using schema (TBD)

Validate merge request

1. Validate merge request id exists in DB

   1. In case of error - return 404

2. Check merge request status is APPROVED

   1. In case of error - return 422 (Incorrect status to sign merge request)

Check signed content

1. Get previously request data from il.merge_requests.data.

2. Compare it with request data_ to_be_signed field.

   1. In case they are not equal - return 422 error (Signed content does not match the previously created content)

3. Check patient_signed = true. It means that person signed printout content.

   1. In case of error - return 422 error (Patient must sign merge request form).

Validate legal entity

Validate legal entity as on create merge request process.

Validate person

Validate person as on create merge request process.

Validate preperson

Validate preperson as on create merge request process, but w/o searching pending merge requests and episodes.

Check if preperson has at least one episode( status!= "entered_in_error")

1. if no episodes - return 409 (Preperson has no episodes)

Processing

Save signed merge request to media storage

1. Get url for merge request upload.

1. Upload signed merge request to media storage.

Create object in DB

mpi.merged_pairs table

Update object in DB

1. il.merge_requests table

2. mpi.prepersons table

3. patients collection (mongo, separate job)

Response structure

See on Apiary

Example:

HTTP status codes