Purpose
This method intended to get all Detected Issues in patient context by params
Specification
Authorization
Verify the validity of access token
Return (401, 'Invalid access token') in case of validation fails
Verify that token is not expired
in case of error - return (401, 'Invalid access token')
Check user scopes in order to perform this action (scope = 'detected_issue:read')
Return (403, 'Your scope does not allow to access this resource. Missing allowances: detected_issues:read') in case of invalid scope(s)
Access to the resource is also managed by ABAC rules.
Validations
Validate Patient
Get Person identifier from the URL
Check it exists in DB
Return 404 ('not_found') in case of error
Service logic
Service returns specified all Detected Issues in patient context:
Get data from detected_issues (MongoDB)
Filter list above by submitted search parameters
It must be allowed to pass multiple comma-separated values for some query parameters:
status
Sorting by inserted_at desc
Render a response according to specification.