Purpose

This WS is designed to revoke previously created Device request.

This method must be used to revoke existing Device Request. Method receives signed message (pkcs7) that consists of signed content, digital signature and signer public key. All signature fields will be validated (including signer certificate authority)

Specification

Logic

1. Save signed content to media storage

2. Update device request status to revoked (update also updated_at, updated_by)

3. Get person's authentication_method of MPI

4. If authentication_method == OTP:

   1. Generate text SMS with template TEMPLATE_SMS_FOR_REVOKE_DEVICE_REQUEST.

5. Send SMS

6. Save internal information to corresponding DB.

7. Send StatusChangeEvent to Event Manager

Request structure

See on Apiary

Example:

Authorize

1. Verify the validity of access token

   • in case of error - return 401 (“Invalid access token”) in case of validation fails

2. Verify that token is not expired

   • in case of error - return 401 (“Invalid access token”)

3. Check user scopes in order to perform this action (scope = 'device_request:revoke')

   • return 403 (“Your scope does not allow to access this resource. Missing allowances: device_request:revoke”) in case of invalid scope(s)

Headers

• Content-Type:application/json

• Authorization:Bearer mF_9.B5f-4.1JqM

• api-key:aFBLVTZ6Z2dON1V

Request data validation

Validate request

Return 422 with the list of validation errors in case validation fails

Validate legal entity

1. Check legal entity type: it has to be in me_allowed_transactions_le_types config parameter, has status = active and nhs_verified = true

   1. in case of error return 409 "Action is not allowed for the legal entity"

Validate digital signature

1. Validate request is signed

   1. in case of error - return 400 (“Invalid signed content”)

2. Check DS is valid and not expired

3. Validate that DS belongs to the user

   1. Check that DRFO from DS and party.tax_id matches

      1. in case of error - return 422 (“Does not match the signer drfo“)

Validate user

Revoking a Device Request is allowed for a user if he has one of the following active and approved employee that:

• is an author of the Device Request (requester)

• is Med_Admin from legal entity where Device Request is created

  • in case of error - return 409 ("Employee is not an author of device request or doesn't have required employee type")

Validate transition

Only active device request can be revoked

1. Get current device request status

   1. Check that status in ('active')

      1. in case of error - return 409 error ('Device request in status %status% cannot be revoked')

For more information look at https://e-health-ua.atlassian.net/wiki/spaces/CSI/pages/17467441235 .

Validate revoked reason

1. Validate $.status_reason.code is a value from eHealth/device_request_revoke_reasons dictionary

   1. in case of error - return 422 ("value is not allowed in enum")

Validate status

The target status value must be submitted in the order of display in the signed content (media storage)

1. Validate $.status is revoked

   1. in case of error - return 422 ("value is not allowed in enum")

Validate content

Signed content must match with device request in DB in order to be revoked

1. Render device request from DB

2. Exclude $status, $.status_reason from signed content

3. Compare rendered device request and signed content

   1. In case both object doesn't match - return 422 ('Signed content doesn't match with previously created device request')

Response structure

See on Apiary

Example:

HTTP status codes