Skip to main content

Receive the consent decision

Hosted by the HIP/HIU, not by ABDM. ABDM calls this endpoint at the callback URL registered for your bridge, so the path below is relative to that URL.

POST/api/v3/consent/request/hip/notify

Notification of consents to health information providers consent request granted, consent revoked, consent expired. Only the GRANTED, REVOKED and EXPIRED status notifications will be sent to HIP. If consent is granted, status=GRANTED, then consentDetail contains the consent artefact details and signature is available. If consent is revoked, then status=REVOKED, and consentId specifes which consent artefact is revoked. If the consent has expired, then status=EXPIRED, and consentId specifies which consent artefact has expired. Note, this is also responsibility of the HIP to keep track of consent expiry. Any data request on expired consent artefact must not be done.

Authorizations

Authorizationbearer tokenRequired

Headers

REQUEST-IDstringRequired

Unique UUID for track the end to end request transaction

TIMESTAMPstringRequired

Actual time of the request was initiated, ISO 8601 represents date and time by starting with the year, followed by the month, the day, the hour, the minutes, seconds and milliseconds

X-HIP-IDstringRequired

Identifier of the health information provider to which the request was intended

Body

notificationobjectRequired
notification.statusstringRequired

One of GRANTEDEXPIREDDENIEDREQUESTEDREVOKED

notification.consentIdstringRequired

Allows alpha numeric character and special characters like "^[0-9a-fA-F]{8}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{12}$";

notification.consentDetailobjectRequired
notification.consentDetail.schemaVersionstringRequired
notification.consentDetail.consentIdstringRequired

Allows alpha numeric character and special characters like "^[0-9a-fA-F]{8}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{12}$";

notification.consentDetail.createdAtstringRequired

Allows alpha numeric character and special characters like "\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}.\\d{3}Z$"

notification.consentDetail.patientobjectRequired
notification.consentDetail.patient.idstringRequired

The abha address of the patient. Allows alpha numeric character and special characters like ^[a-zA-Z0-9][a-zA-Z0-9_.]+[a-zA-Z0-9]@(abdm|sbx)$

notification.consentDetail.careContextsobject[]Required

List of care contexts linked at the HIP end for the identified patient.

notification.consentDetail.careContexts.patientReferencestringRequired

A patient identifier with which patient is registered in the facility/hospital. Allows alpha numeric and special characters like "^[a-zA-Z0-9_\\-@,().\"/: ]{0,255}$"

notification.consentDetail.careContexts.careContextReferencestringRequired

An identifier of patient's care context created in HIP. A care context is a group of patient's health data (Not the actual health data). Allows alpha numeric and special characters like "^[a-zA-Z0-9_\\-@,().\"/:| ]{0,255}$"

notification.consentDetail.purposeobjectRequired
notification.consentDetail.purpose.textstringRequired

One of Care ManagementBreak the GlassPublic HealthHealthcare PaymentDisease Specific Healthcare ResearchSelf Requested

notification.consentDetail.purpose.codestringRequired

One of CAREMGTBTGPUBHLTHHPAYMTDSRCHPATRQT

notification.consentDetail.purpose.refUristringRequired

The reference URL. Should be a valid URL. Allows alpha numeric character and special characters like ^[a-zA-Z0-9_\\-@,. \":/]{0,255}$

notification.consentDetail.hipobjectRequired

Identifier and name of the health information provider.

notification.consentDetail.hip.idstringRequired

The service ID of the health information provider. Allows alpha numeric character and special characters like [A-Z a-z 0-9]+[A-Z a-z 0-9 //_//-]*[A-Z a-z 0-9]$

notification.consentDetail.hip.namestringRequired

The name of the health information provider. Allows alpha numeric and special characters like ^[a-zA-Z0-9_\\-@,. \":/]{0,255}$

notification.consentDetail.hip.typestring

The type of the health information provider. Allows alpha numeric and special characters like ^[a-zA-Z0-9_\\-@,. \":/]{0,255}$

notification.consentDetail.hiuobjectRequired
notification.consentDetail.hiu.idstringRequired

The service ID of the health information user. Allows alpha numeric character and special characters like [A-Z a-z 0-9]+[A-Z a-z 0-9 //_//-]*[A-Z a-z 0-9]$

notification.consentDetail.hiu.namestringRequired

The name of the health information user. Allows alpha numeric and special characters like ^[a-zA-Z]+[A-Za-z0-9_\\-@,().\\s\\xa0:/]+

notification.consentDetail.hiu.typestring

The type of the health information user. Allows alpha numeric and special characters like ^[a-zA-Z0-9_\\-@,. \":/]{0,255}$

notification.consentDetail.consentManagerobjectRequired
notification.consentDetail.consentManager.idstringRequired
notification.consentDetail.requesterobjectRequired
notification.consentDetail.requester.namestringRequired

The name of the requester

notification.consentDetail.requester.identifierobjectRequired
notification.consentDetail.hiTypesstring[]Required

Types of health information document.

notification.consentDetail.permissionobjectRequired
notification.consentDetail.permission.accessModestringRequired

One of VIEWSTORESTREAMQUERY

notification.consentDetail.permission.dateRangeobjectRequired
notification.consentDetail.permission.dataEraseAtstringRequired

The date at which the consent expire. Should be UTC date time in ISO format.Allows alpha numeric character and special characters like "\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}.\\d{3}Z$"

notification.consentDetail.permission.frequencyobjectRequired
notification.signaturestringRequired
notification.grantAcknowledgementbooleanRequired

Responses

200

OK

400

Bad Request. The request could not be processed because it was malformed or failed validation - a missing mandatory field, a value in the wrong format, or a header that did not match the body.

Error codes for this module

401

Unauthorized

Everything returns 401

500

Internal Server Error

Error codes for this module

503

Service Unavailable

Error codes for this module