Specification

Apiary

Service logic

1. Only authenticated and authorized SPECIALIST, ASSISTANT or RECEPTIONIST employees can use this WS.

2. Usage of this WS allowed in EMERGENCY or OUTPATIENT legal entities.

3. Service returns only merge requests related to the same legal entity as the user

4. Search by next parameters allowed:

   1. status

   2. master_person_id

   3. merge_person_id

Authentication

1. Verify the validity of access token

   1. Return 401 in case validation fails

2. Check scopes in order to perform this action (scope = 'merge_request:read')

   1. Return 403 in case invalid scope(s)

Prepare response

Service returns only merge requests related to the same legal entity as the user

1. Extract client_id from token

2. Return entries filtered by legal_entity_id and query params from merge_requests table