Purpose
This WS intended to get detailed information of patient approval.
Specification
Authorization
Verify the validity of access token
Return (401, 'Invalid access token') in case of validation fails
Verify that token is not expired
in case of error - return (401, 'Invalid access token')
Check user scopes in order to perform this action (scope = 'approval:read')
Return (403, 'Your scope does not allow to access this resource. Missing allowances: approval:read') in case of invalid scope(s)
Validate Patient
Get Patient identifier from the URL
Check it exists in DB
Return 404 ('not found') in case of error
Validate Approval
Get Approval identifier from the URL
Check it exists in DB
Return 404 ('Person is not found') in case of error
Validate User
Extract user_id from token.
Check user has an active declaration with a patient from URL (can get all approvals) or approval is granted to user (can get own approval):
Return 200 with empty array in case the employee doesn't have an active declaration with the patient or approval is granted to user
Service logic
Service returns detailed information of the patient approval:
Get approval by patient_id and approval id from approvals collection (MongoDB)
Render a response according to specification.
Block “authentication_method_current” represents the type of auth method and the telephone number (for methods with ability to specify it)