8 * @link http://www.open-emr.org
9 * @author Matthew Vita <matthewvita48@gmail.com>
10 * @author Jerry Padgett <sjpadgett@gmail.com>
11 * @author Brady Miller <brady.g.miller@gmail.com>
12 * @author Yash Raj Bothra <yashrajbothra786@gmail.com>
13 * @copyright Copyright (c) 2018 Matthew Vita <matthewvita48@gmail.com>
14 * @copyright Copyright (c) 2018-2020 Jerry Padgett <sjpadgett@gmail.com>
15 * @copyright Copyright (c) 2019 Brady Miller <brady.g.miller@gmail.com>
16 * @copyright Copyright (c) 2020 Yash Raj Bothra <yashrajbothra786@gmail.com>
17 * @license https://github.com/openemr/openemr/blob/master/LICENSE GNU General Public License 3
20 // Lets keep our controller classes with the routes.
22 use OpenEMR\Common\Acl\AccessDeniedException
;
23 use OpenEMR\Common\Http\HttpRestRequest
;
24 use OpenEMR\RestControllers\AllergyIntoleranceRestController
;
25 use OpenEMR\RestControllers\FacilityRestController
;
26 use OpenEMR\RestControllers\VersionRestController
;
27 use OpenEMR\RestControllers\ProductRegistrationRestController
;
28 use OpenEMR\RestControllers\PatientRestController
;
29 use OpenEMR\RestControllers\EncounterRestController
;
30 use OpenEMR\RestControllers\PractitionerRestController
;
31 use OpenEMR\RestControllers\ListRestController
;
32 use OpenEMR\RestControllers\InsuranceCompanyRestController
;
33 use OpenEMR\RestControllers\AppointmentRestController
;
34 use OpenEMR\RestControllers\ConditionRestController
;
35 use OpenEMR\RestControllers\ONoteRestController
;
36 use OpenEMR\RestControllers\DocumentRestController
;
37 use OpenEMR\RestControllers\DrugRestController
;
38 use OpenEMR\RestControllers\ImmunizationRestController
;
39 use OpenEMR\RestControllers\InsuranceRestController
;
40 use OpenEMR\RestControllers\MessageRestController
;
41 use OpenEMR\RestControllers\PrescriptionRestController
;
42 use OpenEMR\RestControllers\ProcedureRestController
;
44 // Note some Http clients may not send auth as json so a function
45 // is implemented to determine and parse encoding on auth route's.
47 // Note that the api route is only for users role
48 // (there is a mechanism in place to ensure only user role can access the api route)
49 RestConfig
::$ROUTE_MAP = array(
50 "GET /api/facility" => function () {
51 RestConfig
::authorization_check("admin", "users");
52 $return = (new FacilityRestController())->getAll($_GET);
53 RestConfig
::apiLog($return);
56 "GET /api/facility/:fuuid" => function ($fuuid) {
57 RestConfig
::authorization_check("admin", "users");
58 $return = (new FacilityRestController())->getOne($fuuid);
59 RestConfig
::apiLog($return);
62 "POST /api/facility" => function () {
63 RestConfig
::authorization_check("admin", "super");
64 $data = (array) (json_decode(file_get_contents("php://input")));
65 $return = (new FacilityRestController())->post($data);
66 RestConfig
::apiLog($return, $data);
69 "PUT /api/facility/:fuuid" => function ($fuuid) {
70 RestConfig
::authorization_check("admin", "super");
71 $data = (array) (json_decode(file_get_contents("php://input")));
72 $return = (new FacilityRestController())->patch($fuuid, $data);
73 RestConfig
::apiLog($return, $data);
76 "GET /api/patient" => function () {
77 RestConfig
::authorization_check("patients", "demo");
78 $return = (new PatientRestController())->getAll($_GET);
79 RestConfig
::apiLog($return);
82 "POST /api/patient" => function () {
83 RestConfig
::authorization_check("patients", "demo");
84 $data = (array) (json_decode(file_get_contents("php://input")));
85 $return = (new PatientRestController())->post($data);
86 RestConfig
::apiLog($return, $data);
89 "PUT /api/patient/:puuid" => function ($puuid) {
90 RestConfig
::authorization_check("patients", "demo");
91 $data = (array) (json_decode(file_get_contents("php://input")));
92 $return = (new PatientRestController())->put($puuid, $data);
93 RestConfig
::apiLog($return, $data);
96 "GET /api/patient/:puuid" => function ($puuid) {
97 RestConfig
::authorization_check("patients", "demo");
98 $return = (new PatientRestController())->getOne($puuid);
99 RestConfig
::apiLog($return);
102 "GET /api/patient/:puuid/encounter" => function ($puuid) {
103 RestConfig
::authorization_check("encounters", "auth_a");
104 $return = (new EncounterRestController())->getAll($puuid);
105 RestConfig
::apiLog($return);
108 "POST /api/patient/:puuid/encounter" => function ($puuid) {
109 RestConfig
::authorization_check("encounters", "auth_a");
110 $data = (array) (json_decode(file_get_contents("php://input")));
111 $return = (new EncounterRestController())->post($puuid, $data);
112 RestConfig
::apiLog($return, $data);
115 "PUT /api/patient/:puuid/encounter/:euuid" => function ($puuid, $euuid) {
116 RestConfig
::authorization_check("encounters", "auth_a");
117 $data = (array) (json_decode(file_get_contents("php://input")));
118 $return = (new EncounterRestController())->put($puuid, $euuid, $data);
119 RestConfig
::apiLog($return, $data);
122 "GET /api/patient/:puuid/encounter/:euuid" => function ($puuid, $euuid) {
123 RestConfig
::authorization_check("encounters", "auth_a");
124 $return = (new EncounterRestController())->getOne($puuid, $euuid);
125 RestConfig
::apiLog($return);
128 "GET /api/patient/:pid/encounter/:eid/soap_note" => function ($pid, $eid) {
129 RestConfig
::authorization_check("encounters", "notes");
130 $return = (new EncounterRestController())->getSoapNotes($pid, $eid);
131 RestConfig
::apiLog($return);
134 "POST /api/patient/:pid/encounter/:eid/vital" => function ($pid, $eid) {
135 RestConfig
::authorization_check("encounters", "notes");
136 $data = json_decode(file_get_contents("php://input"), true) ??
[];
137 $return = (new EncounterRestController())->postVital($pid, $eid, $data);
138 RestConfig
::apiLog($return, $data);
141 "PUT /api/patient/:pid/encounter/:eid/vital/:vid" => function ($pid, $eid, $vid) {
142 RestConfig
::authorization_check("encounters", "notes");
143 $data = json_decode(file_get_contents("php://input"), true) ??
[];
144 $return = (new EncounterRestController())->putVital($pid, $eid, $vid, $data);
145 RestConfig
::apiLog($return, $data);
148 "GET /api/patient/:pid/encounter/:eid/vital" => function ($pid, $eid) {
149 RestConfig
::authorization_check("encounters", "notes");
150 $return = (new EncounterRestController())->getVitals($pid, $eid);
151 RestConfig
::apiLog($return);
154 "GET /api/patient/:pid/encounter/:eid/vital/:vid" => function ($pid, $eid, $vid) {
155 RestConfig
::authorization_check("encounters", "notes");
156 $return = (new EncounterRestController())->getVital($pid, $eid, $vid);
157 RestConfig
::apiLog($return);
160 "GET /api/patient/:pid/encounter/:eid/soap_note/:sid" => function ($pid, $eid, $sid) {
161 RestConfig
::authorization_check("encounters", "notes");
162 $return = (new EncounterRestController())->getSoapNote($pid, $eid, $sid);
163 RestConfig
::apiLog($return);
166 "POST /api/patient/:pid/encounter/:eid/soap_note" => function ($pid, $eid) {
167 RestConfig
::authorization_check("encounters", "notes");
168 $data = (array) (json_decode(file_get_contents("php://input")));
169 $return = (new EncounterRestController())->postSoapNote($pid, $eid, $data);
170 RestConfig
::apiLog($return, $data);
173 "PUT /api/patient/:pid/encounter/:eid/soap_note/:sid" => function ($pid, $eid, $sid) {
174 RestConfig
::authorization_check("encounters", "notes");
175 $data = (array) (json_decode(file_get_contents("php://input")));
176 $return = (new EncounterRestController())->putSoapNote($pid, $eid, $sid, $data);
177 RestConfig
::apiLog($return, $data);
180 "GET /api/practitioner" => function () {
181 RestConfig
::authorization_check("admin", "users");
182 $return = (new PractitionerRestController())->getAll($_GET);
183 RestConfig
::apiLog($return);
186 "GET /api/practitioner/:prid" => function ($prid) {
187 RestConfig
::authorization_check("admin", "users");
188 $return = (new PractitionerRestController())->getOne($prid);
189 RestConfig
::apiLog($return);
192 "POST /api/practitioner" => function () {
193 RestConfig
::authorization_check("admin", "users");
194 $data = (array) (json_decode(file_get_contents("php://input")));
195 $return = (new PractitionerRestController())->post($data);
196 RestConfig
::apiLog($return, $data);
199 "PUT /api/practitioner/:prid" => function ($prid) {
200 RestConfig
::authorization_check("admin", "users");
201 $data = (array) (json_decode(file_get_contents("php://input")));
202 $return = (new PractitionerRestController())->patch($prid, $data);
203 RestConfig
::apiLog($return, $data);
206 "GET /api/medical_problem" => function () {
207 RestConfig
::authorization_check("encounters", "notes");
208 $return = (new ConditionRestController())->getAll();
209 RestConfig
::apiLog($return);
212 "GET /api/medical_problem/:muuid" => function ($muuid) {
213 RestConfig
::authorization_check("encounters", "notes");
214 $return = (new ConditionRestController())->getOne($muuid);
215 RestConfig
::apiLog($return);
218 "GET /api/patient/:puuid/medical_problem" => function ($puuid) {
219 RestConfig
::authorization_check("encounters", "notes");
220 $return = (new ConditionRestController())->getAll($puuid, "medical_problem");
221 RestConfig
::apiLog($return);
224 "GET /api/patient/:puuid/medical_problem/:muuid" => function ($puuid, $muuid) {
225 RestConfig
::authorization_check("patients", "med");
226 $return = (new ConditionRestController())->getAll(['puuid' => $puuid, 'condition_uuid' => $muuid]);
227 RestConfig
::apiLog($return);
230 "POST /api/patient/:puuid/medical_problem" => function ($puuid) {
231 RestConfig
::authorization_check("patients", "med");
232 $data = (array) (json_decode(file_get_contents("php://input")));
233 $return = (new ConditionRestController())->post($puuid, $data);
234 RestConfig
::apiLog($return, $data);
237 "PUT /api/patient/:puuid/medical_problem/:muuid" => function ($puuid, $muuid) {
238 RestConfig
::authorization_check("patients", "med");
239 $data = (array) (json_decode(file_get_contents("php://input")));
240 $return = (new ConditionRestController())->put($puuid, $muuid, $data);
241 RestConfig
::apiLog($return, $data);
244 "DELETE /api/patient/:puuid/medical_problem/:muuid" => function ($puuid, $muuid) {
245 RestConfig
::authorization_check("patients", "med");
246 $return = (new ConditionRestController())->delete($puuid, $muuid);
247 RestConfig
::apiLog($return);
250 "GET /api/allergy" => function () {
251 RestConfig
::authorization_check("patients", "med");
252 $return = (new AllergyIntoleranceRestController())->getAll();
253 RestConfig
::apiLog($return);
256 "GET /api/allergy/:auuid" => function ($auuid) {
257 RestConfig
::authorization_check("patients", "med");
258 $return = (new AllergyIntoleranceRestController())->getOne($auuid);
259 RestConfig
::apiLog($return);
262 "GET /api/patient/:puuid/allergy" => function ($puuid) {
263 RestConfig
::authorization_check("patients", "med");
264 $return = (new AllergyIntoleranceRestController())->getAll(['lists.pid' => $puuid]);
265 RestConfig
::apiLog($return);
268 "GET /api/patient/:puuid/allergy/:auuid" => function ($puuid, $auuid) {
269 RestConfig
::authorization_check("patients", "med");
270 $return = (new AllergyIntoleranceRestController())->getAll(['lists.pid' => $puuid, 'lists.id' => $auuid]);
271 RestConfig
::apiLog($return);
274 "POST /api/patient/:puuid/allergy" => function ($puuid) {
275 RestConfig
::authorization_check("patients", "med");
276 $data = (array) (json_decode(file_get_contents("php://input")));
277 $return = (new AllergyIntoleranceRestController())->post($puuid, $data);
278 RestConfig
::apiLog($return, $data);
281 "PUT /api/patient/:puuid/allergy/:auuid" => function ($puuid, $auuid) {
282 RestConfig
::authorization_check("patients", "med");
283 $data = (array) (json_decode(file_get_contents("php://input")));
284 $return = (new AllergyIntoleranceRestController())->put($puuid, $auuid, $data);
285 RestConfig
::apiLog($return, $data);
288 "DELETE /api/patient/:puuid/allergy/:auuid" => function ($puuid, $auuid) {
289 RestConfig
::authorization_check("patients", "med");
290 $return = (new AllergyIntoleranceRestController())->delete($puuid, $auuid);
291 RestConfig
::apiLog($return);
294 "GET /api/patient/:pid/medication" => function ($pid) {
295 RestConfig
::authorization_check("patients", "med");
296 $return = (new ListRestController())->getAll($pid, "medication");
297 RestConfig
::apiLog($return);
300 "POST /api/patient/:pid/medication" => function ($pid) {
301 RestConfig
::authorization_check("patients", "med");
302 $data = (array) (json_decode(file_get_contents("php://input")));
303 $return = (new ListRestController())->post($pid, "medication", $data);
304 RestConfig
::apiLog($return, $data);
307 "PUT /api/patient/:pid/medication/:mid" => function ($pid, $mid) {
308 RestConfig
::authorization_check("patients", "med");
309 $data = (array) (json_decode(file_get_contents("php://input")));
310 $return = (new ListRestController())->put($pid, $mid, "medication", $data);
311 RestConfig
::apiLog($return, $data);
314 "GET /api/patient/:pid/medication/:mid" => function ($pid, $mid) {
315 RestConfig
::authorization_check("patients", "med");
316 $return = (new ListRestController())->getOne($pid, "medication", $mid);
317 RestConfig
::apiLog($return);
320 "DELETE /api/patient/:pid/medication/:mid" => function ($pid, $mid) {
321 RestConfig
::authorization_check("patients", "med");
322 $return = (new ListRestController())->delete($pid, $mid, "medication");
323 RestConfig
::apiLog($return);
326 "GET /api/patient/:pid/surgery" => function ($pid) {
327 RestConfig
::authorization_check("patients", "med");
328 $return = (new ListRestController())->getAll($pid, "surgery");
329 RestConfig
::apiLog($return);
332 "GET /api/patient/:pid/surgery/:sid" => function ($pid, $sid) {
333 RestConfig
::authorization_check("patients", "med");
334 $return = (new ListRestController())->getOne($pid, "surgery", $sid);
335 RestConfig
::apiLog($return);
338 "DELETE /api/patient/:pid/surgery/:sid" => function ($pid, $sid) {
339 RestConfig
::authorization_check("patients", "med");
340 $return = (new ListRestController())->delete($pid, $sid, "surgery");
341 RestConfig
::apiLog($return);
344 "POST /api/patient/:pid/surgery" => function ($pid) {
345 RestConfig
::authorization_check("patients", "med");
346 $data = (array) (json_decode(file_get_contents("php://input")));
347 $return = (new ListRestController())->post($pid, "surgery", $data);
348 RestConfig
::apiLog($return, $data);
351 "PUT /api/patient/:pid/surgery/:sid" => function ($pid, $sid) {
352 RestConfig
::authorization_check("patients", "med");
353 $data = (array) (json_decode(file_get_contents("php://input")));
354 $return = (new ListRestController())->put($pid, $sid, "surgery", $data);
355 RestConfig
::apiLog($return, $data);
358 "GET /api/patient/:pid/dental_issue" => function ($pid) {
359 RestConfig
::authorization_check("patients", "med");
360 $return = (new ListRestController())->getAll($pid, "dental");
361 RestConfig
::apiLog($return);
364 "GET /api/patient/:pid/dental_issue/:did" => function ($pid, $did) {
365 RestConfig
::authorization_check("patients", "med");
366 $return = (new ListRestController())->getOne($pid, "dental", $did);
367 RestConfig
::apiLog($return);
370 "DELETE /api/patient/:pid/dental_issue/:did" => function ($pid, $did) {
371 RestConfig
::authorization_check("patients", "med");
372 $return = (new ListRestController())->delete($pid, $did, "dental");
373 RestConfig
::apiLog($return);
376 "POST /api/patient/:pid/dental_issue" => function ($pid) {
377 RestConfig
::authorization_check("patients", "med");
378 $data = (array) (json_decode(file_get_contents("php://input")));
379 $return = (new ListRestController())->post($pid, "dental", $data);
380 RestConfig
::apiLog($return, $data);
383 "PUT /api/patient/:pid/dental_issue/:did" => function ($pid, $did) {
384 RestConfig
::authorization_check("patients", "med");
385 $data = (array) (json_decode(file_get_contents("php://input")));
386 $return = (new ListRestController())->put($pid, $did, "dental", $data);
387 RestConfig
::apiLog($return, $data);
390 "GET /api/patient/:pid/appointment" => function ($pid) {
391 RestConfig
::authorization_check("patients", "appt");
392 $return = (new AppointmentRestController())->getAllForPatient($pid);
393 RestConfig
::apiLog($return);
396 "POST /api/patient/:pid/appointment" => function ($pid) {
397 RestConfig
::authorization_check("patients", "appt");
398 $data = (array) (json_decode(file_get_contents("php://input")));
399 $return = (new AppointmentRestController())->post($pid, $data);
400 RestConfig
::apiLog($return, $data);
403 "GET /api/appointment" => function () {
404 RestConfig
::authorization_check("patients", "appt");
405 $return = (new AppointmentRestController())->getAll();
406 RestConfig
::apiLog($return);
409 "GET /api/appointment/:eid" => function ($eid) {
410 RestConfig
::authorization_check("patients", "appt");
411 $return = (new AppointmentRestController())->getOne($eid);
412 RestConfig
::apiLog($return);
415 "DELETE /api/patient/:pid/appointment/:eid" => function ($pid, $eid) {
416 RestConfig
::authorization_check("patients", "appt");
417 $return = (new AppointmentRestController())->delete($eid);
418 RestConfig
::apiLog($return);
421 "GET /api/patient/:pid/appointment/:eid" => function ($pid, $eid) {
422 RestConfig
::authorization_check("patients", "appt");
423 $return = (new AppointmentRestController())->getOne($eid);
424 RestConfig
::apiLog($return);
427 "GET /api/list/:list_name" => function ($list_name) {
428 RestConfig
::authorization_check("lists", "default");
429 $return = (new ListRestController())->getOptions($list_name);
430 RestConfig
::apiLog($return);
433 "GET /api/version" => function () {
434 $return = (new VersionRestController())->getOne();
435 RestConfig
::apiLog($return);
438 "GET /api/product" => function () {
439 $return = (new ProductRegistrationRestController())->getOne();
440 RestConfig
::apiLog($return);
443 "GET /api/insurance_company" => function () {
444 $return = (new InsuranceCompanyRestController())->getAll();
445 RestConfig
::apiLog($return);
448 "GET /api/insurance_company/:iid" => function ($iid) {
449 $return = (new InsuranceCompanyRestController())->getOne($iid);
450 RestConfig
::apiLog($return);
453 "GET /api/insurance_type" => function () {
454 $return = (new InsuranceCompanyRestController())->getInsuranceTypes();
455 RestConfig
::apiLog($return);
458 "POST /api/insurance_company" => function () {
459 $data = (array) (json_decode(file_get_contents("php://input")));
460 $return = (new InsuranceCompanyRestController())->post($data);
461 RestConfig
::apiLog($return, $data);
464 "PUT /api/insurance_company/:iid" => function ($iid) {
465 $data = (array) (json_decode(file_get_contents("php://input")));
466 $return = (new InsuranceCompanyRestController())->put($iid, $data);
467 RestConfig
::apiLog($return, $data);
470 "POST /api/patient/:pid/document" => function ($pid) {
471 $return = (new DocumentRestController())->postWithPath($pid, $_GET['path'], $_FILES['document']);
472 RestConfig
::apiLog($return);
475 "GET /api/patient/:pid/document" => function ($pid) {
476 $return = (new DocumentRestController())->getAllAtPath($pid, $_GET['path']);
477 RestConfig
::apiLog($return);
480 "GET /api/patient/:pid/document/:did" => function ($pid, $did) {
481 $return = (new DocumentRestController())->downloadFile($pid, $did);
482 RestConfig
::apiLog($return);
485 "GET /api/patient/:pid/insurance" => function ($pid) {
486 $return = (new InsuranceRestController())->getAll($pid);
487 RestConfig
::apiLog($return);
490 "GET /api/patient/:pid/insurance/:type" => function ($pid, $type) {
491 $return = (new InsuranceRestController())->getOne($pid, $type);
492 RestConfig
::apiLog($return);
495 "POST /api/patient/:pid/insurance/:type" => function ($pid, $type) {
496 $data = (array) (json_decode(file_get_contents("php://input")));
497 $return = (new InsuranceRestController())->post($pid, $type, $data);
498 RestConfig
::apiLog($return, $data);
501 "PUT /api/patient/:pid/insurance/:type" => function ($pid, $type) {
502 $data = (array) (json_decode(file_get_contents("php://input")));
503 $return = (new InsuranceRestController())->put($pid, $type, $data);
504 RestConfig
::apiLog($return, $data);
507 "POST /api/patient/:pid/message" => function ($pid) {
508 RestConfig
::authorization_check("patients", "notes");
509 $data = (array) (json_decode(file_get_contents("php://input")));
510 $return = (new MessageRestController())->post($pid, $data);
511 RestConfig
::apiLog($return, $data);
514 "PUT /api/patient/:pid/message/:mid" => function ($pid, $mid) {
515 RestConfig
::authorization_check("patients", "notes");
516 $data = (array) (json_decode(file_get_contents("php://input")));
517 $return = (new MessageRestController())->put($pid, $mid, $data);
518 RestConfig
::apiLog($return, $data);
521 "DELETE /api/patient/:pid/message/:mid" => function ($pid, $mid) {
522 RestConfig
::authorization_check("patients", "notes");
523 $return = (new MessageRestController())->delete($pid, $mid);
524 RestConfig
::apiLog($return);
527 "GET /api/immunization" => function () {
528 RestConfig
::authorization_check("patients", "med");
529 $return = (new ImmunizationRestController())->getAll($_GET);
530 RestConfig
::apiLog($return);
533 "GET /api/immunization/:uuid" => function ($uuid) {
534 RestConfig
::authorization_check("patients", "med");
535 $return = (new ImmunizationRestController())->getOne($uuid);
536 RestConfig
::apiLog($return);
539 "GET /api/procedure" => function () {
540 RestConfig
::authorization_check("patients", "med");
541 $return = (new ProcedureRestController())->getAll();
542 RestConfig
::apiLog($return);
545 "GET /api/procedure/:uuid" => function ($uuid) {
546 RestConfig
::authorization_check("patients", "med");
547 $return = (new ProcedureRestController())->getOne($uuid);
548 RestConfig
::apiLog($return);
551 "GET /api/drug" => function () {
552 RestConfig
::authorization_check("patients", "med");
553 $return = (new DrugRestController())->getAll();
554 RestConfig
::apiLog($return);
557 "GET /api/drug/:uuid" => function ($uuid) {
558 RestConfig
::authorization_check("patients", "med");
559 $return = (new DrugRestController())->getOne($uuid);
560 RestConfig
::apiLog($return);
563 "GET /api/prescription" => function () {
564 RestConfig
::authorization_check("patients", "med");
565 $return = (new PrescriptionRestController())->getAll();
566 RestConfig
::apiLog($return);
569 "GET /api/prescription/:uuid" => function ($uuid) {
570 RestConfig
::authorization_check("patients", "med");
571 $return = (new PrescriptionRestController())->getOne($uuid);
572 RestConfig
::apiLog($return);
577 use OpenEMR\Common\Http\StatusCode
;
578 use OpenEMR\Common\Http\Psr17Factory
;
579 use OpenEMR\RestControllers\FHIR\FhirAllergyIntoleranceRestController
;
580 use OpenEMR\RestControllers\FHIR\FhirCarePlanRestController
;
581 use OpenEMR\RestControllers\FHIR\FhirCareTeamRestController
;
582 use OpenEMR\RestControllers\FHIR\FhirConditionRestController
;
583 use OpenEMR\RestControllers\FHIR\FhirCoverageRestController
;
584 use OpenEMR\RestControllers\FHIR\FhirDeviceRestController
;
585 use OpenEMR\RestControllers\FHIR\FhirDiagnosticReportRestController
;
586 use OpenEMR\RestControllers\FHIR\FhirDocumentReferenceRestController
;
587 use OpenEMR\RestControllers\FHIR\FhirEncounterRestController
;
588 use OpenEMR\RestControllers\FHIR\FhirExportRestController
;
589 use OpenEMR\RestControllers\FHIR\FhirObservationRestController
;
590 use OpenEMR\RestControllers\FHIR\FhirImmunizationRestController
;
591 use OpenEMR\RestControllers\FHIR\FhirGoalRestController
;
592 use OpenEMR\RestControllers\FHIR\FhirLocationRestController
;
593 use OpenEMR\RestControllers\FHIR\FhirMedicationRestController
;
594 use OpenEMR\RestControllers\FHIR\FhirMedicationRequestRestController
;
595 use OpenEMR\RestControllers\FHIR\FhirOrganizationRestController
;
596 use OpenEMR\RestControllers\FHIR\FhirPatientRestController
;
597 use OpenEMR\RestControllers\FHIR\FhirPersonRestController
;
598 use OpenEMR\RestControllers\FHIR\FhirPractitionerRoleRestController
;
599 use OpenEMR\RestControllers\FHIR\FhirPractitionerRestController
;
600 use OpenEMR\RestControllers\FHIR\FhirProcedureRestController
;
601 use OpenEMR\RestControllers\FHIR\FhirProvenanceRestController
;
602 use OpenEMR\RestControllers\FHIR\FhirMetaDataRestController
;
604 // Note that the fhir route includes both user role and patient role
605 // (there is a mechanism in place to ensure patient role is binded
606 // to only see the data of the one patient)
607 RestConfig
::$FHIR_ROUTE_MAP = array(
608 "GET /fhir/AllergyIntolerance" => function (HttpRestRequest
$request) {
609 $getParams = $request->getQueryParams();
610 if ($request->isPatientRequest()) {
611 // only allow access to data of binded patient
612 $return = (new FhirAllergyIntoleranceRestController($request))->getAll($getParams, $request->getPatientUUIDString());
614 RestConfig
::authorization_check("patients", "med");
615 $return = (new FhirAllergyIntoleranceRestController($request))->getAll($getParams);
617 RestConfig
::apiLog($return);
620 "GET /fhir/AllergyIntolerance/:id" => function ($id, HttpRestRequest
$request) {
621 if ($request->isPatientRequest()) {
622 // only allow access to data of binded patient
623 $return = (new FhirAllergyIntoleranceRestController($request))->getOne($id, $request->getPatientUUIDString());
625 RestConfig
::authorization_check("patients", "med");
626 $return = (new FhirAllergyIntoleranceRestController($request))->getOne($id);
628 RestConfig
::apiLog($return);
630 },"GET /fhir/CarePlan" => function (HttpRestRequest
$request) {
631 $getParams = $request->getQueryParams();
632 if ($request->isPatientRequest()) {
633 // only allow access to data of binded patient
634 $return = (new FhirCarePlanRestController())->getAll($getParams, $request->getPatientUUIDString());
636 RestConfig
::authorization_check("patients", "med");
637 $return = (new FhirCareTeamRestController())->getAll($getParams);
639 RestConfig
::apiLog($return);
642 "GET /fhir/CarePlan/:uuid" => function ($uuid, HttpRestRequest
$request) {
643 if ($request->isPatientRequest()) {
644 // only allow access to data of binded patient
645 $return = (new FhirCarePlanRestController())->getOne($uuid, $request->getPatientUUIDString());
647 RestConfig
::authorization_check("patients", "med");
648 $return = (new FhirCarePlanRestController())->getOne($uuid);
650 RestConfig
::apiLog($return);
653 "GET /fhir/CareTeam" => function (HttpRestRequest
$request) {
654 $getParams = $request->getQueryParams();
655 if ($request->isPatientRequest()) {
656 // only allow access to data of binded patient
657 $return = (new FhirCareTeamRestController())->getAll($getParams, $request->getPatientUUIDString());
659 RestConfig
::authorization_check("patients", "med");
660 $return = (new FhirCareTeamRestController())->getAll($getParams);
662 RestConfig
::apiLog($return);
665 "GET /fhir/CareTeam/:uuid" => function ($uuid, HttpRestRequest
$request) {
666 if ($request->isPatientRequest()) {
667 // only allow access to data of binded patient
668 $return = (new FhirCareTeamRestController())->getOne($uuid, $request->getPatientUUIDString());
670 RestConfig
::authorization_check("patients", "med");
671 $return = (new FhirCareTeamRestController())->getOne($uuid);
673 RestConfig
::apiLog($return);
676 "GET /fhir/Condition" => function (HttpRestRequest
$request) {
677 $getParams = $request->getQueryParams();
678 if ($request->isPatientRequest()) {
679 // only allow access to data of binded patient
680 $return = (new FhirConditionRestController())->getAll($getParams, $request->getPatientUUIDString());
682 RestConfig
::authorization_check("patients", "med");
683 $return = (new FhirConditionRestController())->getAll($getParams);
685 RestConfig
::apiLog($return);
688 "GET /fhir/Condition/:id" => function ($uuid, HttpRestRequest
$request) {
689 if ($request->isPatientRequest()) {
690 // only allow access to data of binded patient
691 $return = (new FhirConditionRestController())->getOne($uuid, $request->getPatientUUIDString());
693 RestConfig
::authorization_check("patients", "med");
694 $return = (new FhirConditionRestController())->getOne($uuid);
696 RestConfig
::apiLog($return);
699 "GET /fhir/Coverage" => function (HttpRestRequest
$request) {
700 RestConfig
::authorization_check("admin", "super");
701 $return = (new FhirCoverageRestController())->getAll($request->getQueryParams());
702 RestConfig
::apiLog($return);
705 "GET /fhir/Coverage/:uuid" => function ($uuid, HttpRestRequest
$request) {
706 RestConfig
::authorization_check("admin", "super");
707 $return = (new FhirCoverageRestController())->getOne($uuid);
708 RestConfig
::apiLog($return);
711 "GET /fhir/Device" => function (HttpRestRequest
$request) {
712 if ($request->isPatientRequest()) {
713 // only allow access to data of binded patient
714 $return = (new FhirDeviceRestController())->getAll($request->getQueryParams(), $request->getPatientUUIDString());
716 RestConfig
::authorization_check("admin", "super");
717 $return = (new FhirDeviceRestController())->getAll($request->getQueryParams());
719 RestConfig
::apiLog($return);
722 "GET /fhir/Device/:uuid" => function ($uuid, HttpRestRequest
$request) {
723 if ($request->isPatientRequest()) {
724 // only allow access to data of binded patient
725 $return = (new FhirDeviceRestController())->getOne($uuid, $request->getPatientUUIDString());
727 RestConfig
::authorization_check("admin", "super");
728 $return = (new FhirDeviceRestController())->getOne($uuid);
730 RestConfig
::apiLog($return);
733 "GET /fhir/DiagnosticReport" => function (HttpRestRequest
$request) {
734 $getParams = $request->getQueryParams();
735 if ($request->isPatientRequest()) {
736 // only allow access to data of binded patient
737 $return = (new FhirDiagnosticReportRestController())->getAll($getParams, $request->getPatientUUIDString());
739 RestConfig
::authorization_check("admin", "super");
740 $return = (new FhirDiagnosticReportRestController())->getAll($getParams);
742 RestConfig
::apiLog($return);
745 "GET /fhir/DiagnosticReport/:uuid" => function ($uuid, HttpRestRequest
$request) {
746 $getParams = $request->getQueryParams();
747 if ($request->isPatientRequest()) {
748 // only allow access to data of binded patient
749 $return = (new FhirDiagnosticReportRestController())->getOne($uuid, $request->getPatientUUIDString());
751 RestConfig
::authorization_check("admin", "super");
752 $return = (new FhirDiagnosticReportRestController())->getOne($uuid);
754 RestConfig
::apiLog($return);
757 'GET /fhir/DocumentReference' => function (HttpRestRequest
$request) {
758 $getParams = $request->getQueryParams();
759 if ($request->isPatientRequest()) {
760 // only allow access to data of binded patient
761 $return = (new FhirDocumentReferenceRestController($request))->getAll($getParams, $request->getPatientUUIDString());
763 RestConfig
::authorization_check("admin", "super");
764 $return = (new FhirDocumentReferenceRestController($request))->getAll($getParams);
766 RestConfig
::apiLog($return);
769 "GET /fhir/DocumentReference/:uuid" => function ($uuid, HttpRestRequest
$request) {
770 $getParams = $request->getQueryParams();
771 if ($request->isPatientRequest()) {
772 // only allow access to data of binded patient
773 $return = (new FhirDocumentReferenceRestController($request))->getOne($uuid, $request->getPatientUUIDString());
775 RestConfig
::authorization_check("admin", "super");
776 $return = (new FhirDocumentReferenceRestController($request))->getOne($uuid);
778 RestConfig
::apiLog($return);
781 'GET /fhir/Document/:id/Binary' => function ($documentId, HttpRestRequest
$request) {
782 // currently only allow users with the same permissions as export to take a file out
783 // this could be relaxed to allow other types of files ie such as patient access etc.
784 RestConfig
::authorization_check("admin", "users");
786 // Grab the document id
787 $docController = new \OpenEMR\RestControllers\FHIR\
FhirDocumentRestController($request);
788 $response = $docController->downloadDocument($documentId, $request->getRequestUserId());
791 "GET /fhir/Encounter" => function (HttpRestRequest
$request) {
792 $getParams = $request->getQueryParams();
793 if ($request->isPatientRequest()) {
794 // only allow access to data of binded patient
795 $return = (new FhirEncounterRestController())->getAll($getParams, $request->getPatientUUIDString());
797 RestConfig
::authorization_check("encounters", "auth_a");
798 $return = (new FhirEncounterRestController())->getAll($getParams);
800 RestConfig
::apiLog($return);
803 "GET /fhir/Encounter/:id" => function ($id, HttpRestRequest
$request) {
804 if ($request->isPatientRequest()) {
805 // only allow access to data of binded patient
806 $return = (new FhirEncounterRestController())->getOne($id, $request->getPatientUUIDString());
808 RestConfig
::authorization_check("admin", "super");
809 $return = (new FhirEncounterRestController())->getOne($id);
811 RestConfig
::apiLog($return);
814 "GET /fhir/Goal" => function (HttpRestRequest
$request) {
815 $getParams = $request->getQueryParams();
816 if ($request->isPatientRequest()) {
817 // only allow access to data of binded patient
818 $return = (new FhirGoalRestController())->getAll($getParams, $request->getPatientUUIDString());
820 RestConfig
::authorization_check("admin", "super");
821 $return = (new FhirGoalRestController())->getAll($getParams);
823 RestConfig
::apiLog($return);
826 "GET /fhir/Goal/:id" => function ($id, HttpRestRequest
$request) {
827 if ($request->isPatientRequest()) {
828 // only allow access to data of binded patient
829 $return = (new FhirGoalRestController())->getOne($id, $request->getPatientUUIDString());
831 RestConfig
::authorization_check("admin", "super");
832 $return = (new FhirGoalRestController())->getOne($id);
834 RestConfig
::apiLog($return);
838 'GET /fhir/Group/:id/$export' => function ($groupId, HttpRestRequest
$request) {
839 RestConfig
::authorization_check("admin", "users");
840 $fhirExportService = new FhirExportRestController($request);
841 $exportParams = $request->getQueryParams();
842 $exportParams['groupId'] = $groupId;
843 $return = $fhirExportService->processExport(
846 $request->getHeader('Accept'),
847 $request->getHeader('Prefer')
849 RestConfig
::apiLog($return);
852 "GET /fhir/Immunization" => function (HttpRestRequest
$request) {
853 $getParams = $request->getQueryParams();
854 if ($request->isPatientRequest()) {
855 // only allow access to data of binded patient
856 $return = (new FhirImmunizationRestController())->getAll($getParams, $request->getPatientUUIDString());
858 RestConfig
::authorization_check("patients", "med");
859 $return = (new FhirImmunizationRestController())->getAll($getParams);
861 RestConfig
::apiLog($return);
864 "GET /fhir/Immunization/:id" => function ($id, HttpRestRequest
$request) {
865 if ($request->isPatientRequest()) {
866 // only allow access to data of binded patient
867 $return = (new FhirImmunizationRestController())->getOne($id, $request->getPatientUUIDString());
869 RestConfig
::authorization_check("patients", "med");
870 $return = (new FhirImmunizationRestController())->getOne($id);
872 RestConfig
::apiLog($return);
875 "GET /fhir/Location" => function (HttpRestRequest
$request) {
876 $return = (new FhirLocationRestController())->getAll($request->getQueryParams(), $request->getPatientUUIDString());
877 RestConfig
::apiLog($return);
880 "GET /fhir/Location/:uuid" => function ($uuid, HttpRestRequest
$request) {
881 $return = (new FhirLocationRestController())->getOne($uuid, $request->getPatientUUIDString());
882 RestConfig
::apiLog($return);
885 "GET /fhir/Medication" => function (HttpRestRequest
$request) {
886 RestConfig
::authorization_check("patients", "med");
887 $return = (new FhirMedicationRestController())->getAll($request->getQueryParams());
888 RestConfig
::apiLog($return);
891 "GET /fhir/Medication/:uuid" => function ($uuid, HttpRestRequest
$request) {
892 RestConfig
::authorization_check("patients", "med");
893 $return = (new FhirMedicationRestController())->getOne($uuid);
894 RestConfig
::apiLog($return);
897 "GET /fhir/MedicationRequest" => function (HttpRestRequest
$request) {
898 $getParams = $request->getQueryParams();
899 if ($request->isPatientRequest()) {
900 // only allow access to data of binded patient
901 $return = (new FhirMedicationRequestRestController())->getAll($getParams, $request->getPatientUUIDString());
903 RestConfig
::authorization_check("patients", "med");
904 $return = (new FhirMedicationRequestRestController())->getAll($getParams);
906 RestConfig
::apiLog($return);
909 "GET /fhir/MedicationRequest/:uuid" => function ($uuid, HttpRestRequest
$request) {
910 if ($request->isPatientRequest()) {
911 // only allow access to data of binded patient
912 $return = (new FhirMedicationRequestRestController())->getOne($uuid, $request->getPatientUUIDString());
914 RestConfig
::authorization_check("patients", "med");
915 $return = (new FhirMedicationRequestRestController())->getOne($uuid);
917 RestConfig
::apiLog($return);
920 "GET /fhir/Organization" => function (HttpRestRequest
$request) {
921 if (!$request->isPatientRequest()) {
922 RestConfig
::authorization_check("admin", "users");
924 $return = (new FhirOrganizationRestController())->getAll($request->getQueryParams());
925 RestConfig
::apiLog($return);
928 "GET /fhir/Organization/:id" => function ($id, HttpRestRequest
$request) {
930 if (!$request->isPatientRequest()) {
931 RestConfig
::authorization_check("admin", "users");
933 $patientUUID = $request->getPatientUUIDString();
935 $return = (new FhirOrganizationRestController())->getOne($id, $patientUUID);
937 RestConfig
::apiLog($return);
940 "POST /fhir/Organization" => function (HttpRestRequest
$request) {
941 RestConfig
::authorization_check("admin", "super");
942 $data = (array) (json_decode(file_get_contents("php://input"), true));
943 $return = (new FhirOrganizationRestController())->post($data);
944 RestConfig
::apiLog($return, $data);
947 "PUT /fhir/Organization/:id" => function ($id, HttpRestRequest
$request) {
948 RestConfig
::authorization_check("admin", "super");
949 $data = (array) (json_decode(file_get_contents("php://input"), true));
950 $return = (new FhirOrganizationRestController())->patch($id, $data);
951 RestConfig
::apiLog($return, $data);
954 "GET /fhir/Observation" => function (HttpRestRequest
$request) {
955 $getParams = $request->getQueryParams();
956 if ($request->isPatientRequest()) {
957 // only allow access to data of binded patient
958 $return = (new FhirObservationRestController())->getAll($getParams, $request->getPatientUUIDString());
960 RestConfig
::authorization_check("patients", "med");
961 $return = (new FhirObservationRestController())->getAll($getParams);
963 RestConfig
::apiLog($return);
966 "GET /fhir/Observation/:uuid" => function ($uuid, HttpRestRequest
$request) {
967 if ($request->isPatientRequest()) {
968 // only allow access to data of binded patient
969 $return = (new FhirObservationRestController())->getOne($uuid, $request->getPatientUUIDString());
971 RestConfig
::authorization_check("patients", "med");
972 $return = (new FhirObservationRestController())->getOne($uuid);
974 RestConfig
::apiLog($return);
977 "POST /fhir/Patient" => function (HttpRestRequest
$request) {
978 RestConfig
::authorization_check("patients", "demo");
979 $data = (array) (json_decode(file_get_contents("php://input"), true));
980 $return = (new FhirPatientRestController())->post($data);
981 RestConfig
::apiLog($return, $data);
984 "PUT /fhir/Patient/:id" => function ($id, HttpRestRequest
$request) {
985 RestConfig
::authorization_check("patients", "demo");
986 $data = (array) (json_decode(file_get_contents("php://input"), true));
987 $return = (new FhirPatientRestController())->put($id, $data);
988 RestConfig
::apiLog($return, $data);
991 "GET /fhir/Patient" => function (HttpRestRequest
$request) {
992 $params = $request->getQueryParams();
993 if ($request->isPatientRequest()) {
994 // only allow access to data of binded patient
995 // Note in Patient context still have to return a bundle even if it is just one resource. (ie.
996 // need to use getAll rather than getOne)
997 $params['_id'] = $request->getPatientUUIDString();
998 $return = (new FhirPatientRestController())->getAll($params, $request->getPatientUUIDString());
1000 RestConfig
::authorization_check("patients", "demo");
1001 $return = (new FhirPatientRestController())->getAll($params);
1003 RestConfig
::apiLog($return);
1006 // we have to have the bulk fhir export operation here otherwise it will match $export to the patient $id
1007 'GET /fhir/Patient/$export' => function (HttpRestRequest
$request) {
1008 RestConfig
::authorization_check("admin", "users");
1009 $fhirExportService = new FhirExportRestController($request);
1010 $return = $fhirExportService->processExport(
1011 $request->getQueryParams(),
1013 $request->getHeader('Accept'),
1014 $request->getHeader('Prefer')
1016 RestConfig
::apiLog($return);
1019 "GET /fhir/Patient/:id" => function ($id, HttpRestRequest
$request) {
1020 if ($request->isPatientRequest()) {
1021 // only allow access to data of binded patient
1022 if (empty($id) ||
($id != $request->getPatientUUIDString())) {
1023 throw new AccessDeniedException("patients", "demo", "patient id invalid");
1025 $id = $request->getPatientUUIDString();
1027 RestConfig
::authorization_check("patients", "demo");
1029 $return = (new FhirPatientRestController())->getOne($id);
1030 RestConfig
::apiLog($return);
1033 "GET /fhir/Person" => function (HttpRestRequest
$request) {
1034 RestConfig
::authorization_check("admin", "users");
1035 $return = (new FhirPersonRestController())->getAll($request->getQueryParams());
1036 RestConfig
::apiLog($return);
1039 "GET /fhir/Person/:uuid" => function ($uuid, HttpRestRequest
$request) {
1040 RestConfig
::authorization_check("admin", "users");
1041 $return = (new FhirPersonRestController())->getOne($uuid);
1042 RestConfig
::apiLog($return);
1045 "GET /fhir/Practitioner" => function (HttpRestRequest
$request) {
1047 // TODO: @adunsulag talk with brady.miller about patients needing access to any practitioner resource
1048 // that is referenced in connected patient resources -- such as AllergyIntollerance.
1049 // I don't believe patients are assigned to a particular practitioner
1050 // should we allow just open api access to admin information? Should we restrict particular pieces
1051 // of data in the practitioner side (phone number, address information) based on a permission set?
1052 if (!$request->isPatientRequest()) {
1053 RestConfig
::authorization_check("admin", "users");
1055 $return = (new FhirPractitionerRestController())->getAll($request->getQueryParams());
1056 RestConfig
::apiLog($return);
1059 "GET /fhir/Practitioner/:id" => function ($id, HttpRestRequest
$request) {
1060 // TODO: @adunsulag talk with brady.miller about patients needing access to any practitioner resource
1061 // that is referenced in connected patient resources -- such as AllergyIntollerance.
1062 // I don't believe patients are assigned to a particular practitioner
1063 // should we allow just open api access to admin information? Should we restrict particular pieces
1064 // of data in the practitioner side (phone number, address information) based on a permission set?
1065 if (!$request->isPatientRequest()) {
1066 RestConfig
::authorization_check("admin", "users");
1068 $return = (new FhirPractitionerRestController())->getOne($id);
1069 RestConfig
::apiLog($return);
1072 "POST /fhir/Practitioner" => function (HttpRestRequest
$request) {
1073 RestConfig
::authorization_check("admin", "users");
1074 $data = (array) (json_decode(file_get_contents("php://input"), true));
1075 $return = (new FhirPractitionerRestController())->post($data);
1076 RestConfig
::apiLog($return, $data);
1079 "PUT /fhir/Practitioner/:id" => function ($id, HttpRestRequest
$request) {
1080 RestConfig
::authorization_check("admin", "users");
1081 $data = (array) (json_decode(file_get_contents("php://input"), true));
1082 $return = (new FhirPractitionerRestController())->patch($id, $data);
1083 RestConfig
::apiLog($return, $data);
1086 "GET /fhir/PractitionerRole" => function (HttpRestRequest
$request) {
1087 RestConfig
::authorization_check("admin", "users");
1088 $return = (new FhirPractitionerRoleRestController())->getAll($request->getQueryParams());
1089 RestConfig
::apiLog($return);
1092 "GET /fhir/PractitionerRole/:id" => function ($id, HttpRestRequest
$request) {
1093 RestConfig
::authorization_check("admin", "users");
1094 $return = (new FhirPractitionerRoleRestController())->getOne($id);
1095 RestConfig
::apiLog($return);
1098 "GET /fhir/Procedure" => function (HttpRestRequest
$request) {
1099 if ($request->isPatientRequest()) {
1100 // only allow access to data of binded patient
1101 $return = (new FhirProcedureRestController())->getAll($request->getQueryParams(), $request->getPatientUUIDString());
1103 RestConfig
::authorization_check("patients", "med");
1104 $return = (new FhirProcedureRestController())->getAll($request->getQueryParams());
1106 RestConfig
::apiLog($return);
1109 "GET /fhir/Procedure/:uuid" => function ($uuid, HttpRestRequest
$request) {
1110 if ($request->isPatientRequest()) {
1111 // only allow access to data of binded patient
1112 $return = (new FhirProcedureRestController())->getOne($uuid, $request->getPatientUUIDString());
1114 RestConfig
::authorization_check("patients", "med");
1115 $return = (new FhirProcedureRestController())->getOne($uuid);
1117 RestConfig
::apiLog($return);
1120 "GET /fhir/Provenance/:uuid" => function ($uuid, HttpRestRequest
$request) {
1121 if ($request->isPatientRequest()) {
1122 // only allow access to data of binded patient
1123 $return = (new FhirProvenanceRestController())->getOne($uuid, $request->getPatientUUIDString());
1125 RestConfig
::authorization_check("admin", "super");
1126 $return = (new FhirProvenanceRestController())->getOne($uuid);
1128 RestConfig
::apiLog($return);
1132 "GET /fhir/metadata" => function () {
1133 $return = (new FhirMetaDataRestController())->getMetaData();
1134 RestConfig
::apiLog($return);
1137 "GET /fhir/.well-known/smart-configuration" => function () {
1138 $authController = new \OpenEMR\RestControllers\
AuthorizationController();
1139 $return = (new \OpenEMR\RestControllers\SMART\
SMARTConfigurationController($authController))->getConfig();
1140 RestConfig
::apiLog($return);
1144 // FHIR root level operations
1145 'GET /fhir/$export' => function (HttpRestRequest
$request) {
1146 RestConfig
::authorization_check("admin", "users");
1147 $fhirExportService = new FhirExportRestController($request);
1148 $return = $fhirExportService->processExport(
1149 $request->getQueryParams(),
1151 $request->getHeader('Accept'),
1152 $request->getHeader('Prefer')
1154 RestConfig
::apiLog($return);
1157 // these two operations are adopted based on the documentation used in the IBM FHIR Server
1158 // we'd reference cerner or epic but we couldn't find any documentation about those (Jan 30th 2021)
1159 // @see https://ibm.github.io/FHIR/guides/FHIRBulkOperations/
1160 'GET /fhir/$bulkdata-status' => function (HttpRestRequest
$request) {
1161 RestConfig
::authorization_check("admin", "users");
1162 $jobUuidString = $request->getQueryParam('job');
1163 // if we were truly async we would return 202 here to say we are in progress with a JSON response
1164 // since OpenEMR data is so small we just return the JSON from the database
1165 $fhirExportService = new FhirExportRestController($request);
1166 $return = $fhirExportService->processExportStatusRequestForJob($jobUuidString);
1167 RestConfig
::apiLog($return);
1170 'DELETE /fhir/$bulkdata-status' => function (HttpRestRequest
$request) {
1171 RestConfig
::authorization_check("admin", "users");
1172 $job = $request->getQueryParam('job');
1173 $fhirExportService = new FhirExportRestController($request);
1174 $return = $fhirExportService->processDeleteExportForJob($job);
1175 RestConfig
::apiLog($return);
1180 // Note that the portal (api) route is only for patient role
1181 // (there is a mechanism in place to ensure only patient role can access the portal (api) route)
1182 RestConfig
::$PORTAL_ROUTE_MAP = array(
1183 "GET /portal/patient" => function (HttpRestRequest
$request) {
1184 $return = (new PatientRestController())->getOne($request->getPatientUUIDString());
1185 RestConfig
::apiLog($return);
1188 "GET /portal/patient/encounter" => function (HttpRestRequest
$request) {
1189 $return = (new EncounterRestController())->getAll($request->getPatientUUIDString());
1190 RestConfig
::apiLog($return);
1193 "GET /portal/patient/encounter/:euuid" => function ($euuid, HttpRestRequest
$request) {
1194 $return = (new EncounterRestController())->getOne($request->getPatientUUIDString(), $euuid);
1195 RestConfig
::apiLog($return);