Skip to main content

Receive the provide fetched consent artefact details to HIU

Hosted by the HIP/HIU, not by ABDM. ABDM calls this endpoint at the callback URL registered for your bridge, so the path below is relative to that URL.

POST/api/v3/hiu/consent/on-fetch

This API endpoint is part of the Ayushman Bharat Digital Mission (ABDM) Health Information Exchange - Consent Management (HIE-CM) system. It is called by the Consent Management (CM) system to fetch a consent artefact. By invoking this API, the CM system retrieves the detailed information of a specific consent artefact, ensuring that the consent data is accurately and securely accessed. This functionality is essential for maintaining the integrity and synchronization of consent records, supporting secure and compliant health information exchange within the healthcare ecosystem.

Authorizations

Authorizationbearer tokenRequired

Headers

REQUEST-IDstringRequired

Unique UUID for track the end to end request transaction

TIMESTAMPstringRequired

Actual time of the request was initiated, ISO 8601 represents date and time by starting with the year, followed by the month, the day, the hour, the minutes, seconds and milliseconds

X-HIU-IDstringRequired

Identifier of the health information user to which the request was intended

Body

consentobjectRequired
consent.statusstringRequired

One of GRANTEDDENIEDEXPIREDREVOKED

consent.consentDetailobjectRequired
consent.consentDetail.consentIdstringRequired

Allows alpha numeric character and special characters like "^[a-zA-Z0-9_\\-@,. \":/]{0,255}$"

consent.consentDetail.hipobject

Identifier and name of the health information provider.

consent.consentDetail.hip.idstringRequired

The service ID of the health information provider. Allows alpha numeric character and special characters like [A-Z a-z 0-9]+[A-Z a-z 0-9 //_//-]*[A-Z a-z 0-9]$

consent.consentDetail.hip.namestringRequired

The name of the health information provider. Allows alpha numeric and special characters like _\-@,():/

consent.consentDetail.hip.typestring

The type of the health information provider. Allows alpha numeric and special characters like _\-@,. ":/

consent.consentDetail.hiuobjectRequired
consent.consentDetail.hiu.idstringRequired

The service ID of the health information user. Allows alpha numeric character and special characters like [A-Z a-z 0-9]+[A-Z a-z 0-9 //_//-]*[A-Z a-z 0-9]$

consent.consentDetail.hiu.namestringRequired

The name of the health information user. Allows alpha numeric and special characters like _\-@,():/

consent.consentDetail.hiu.typestring

The type of the health information user. Allows alpha numeric and special characters like _\-@,. ":/

consent.consentDetail.hiTypesstring[]Required

Types of health information document.

consent.consentDetail.patientobjectRequired
consent.consentDetail.patient.idstringRequired

The abha address of the patient. allows alpha numeric character and special characters like ^[a-zA-Z0-9][a-zA-Z0-9_.]+[a-zA-Z0-9]@(abdm|sbx)$

consent.consentDetail.purposeobjectRequired
consent.consentDetail.purpose.textstringRequired

One of Care ManagementBreak the GlassPublic HealthHealthcare PaymentDisease Specific Healthcare ResearchSelf Requested

consent.consentDetail.purpose.codestringRequired

One of CAREMGTBTGPUBHLTHHPAYMTDSRCHPATRQT

consent.consentDetail.purpose.refUristringRequired

The reference URL. Should be a valid URL.Allows alpha numeric character and special characters like ^[a-zA-Z0-9_\\-@,. \":/]{0,255}$

consent.consentDetail.createdAtstringRequired
consent.consentDetail.requesterobjectRequired
consent.consentDetail.requester.namestringRequired

The name of the requester

consent.consentDetail.requester.identifierobjectRequired
consent.consentDetail.permissionobjectRequired
consent.consentDetail.permission.accessModestringRequired

One of VIEWSTORESTREAMQUERY

consent.consentDetail.permission.dateRangeobjectRequired
consent.consentDetail.dataEraseAtstringRequired

The date at which the consent expire. Should be UTC date time in ISO format. Allows alpha numeric character and special characters like ^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}.\\d{3}Z$

consent.consentDetail.frequencyobjectRequired
consent.consentDetail.frequency.unitstringRequired

One of HOURDAYWEEKMONTHYEAR

consent.consentDetail.frequency.valuenumberRequired

The frequency unit value. Should be be a integer. Allows numeric character like ^[a-zA-Z0-9_\\-@,. \":/]{0,255}$

consent.consentDetail.frequency.repeatsnumberRequired

Should be be a integer.Allows numeric character like ^[a-zA-Z0-9_\\-@,. \":/]{0,255}$

consent.consentDetail.lastUpdatedstringRequired

lastUpdated of the consent. Should be UTC date time in ISO format. Allows alpha numeric character and special characters like ^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}.\\d{3}Z$

consent.consentDetail.careContextsobject[]Required

List of care contexts linked at the HIP end for the identified patient.

consent.consentDetail.careContexts.patientReferencestringRequired

A patient identifier with which patient is registered in the facility/hospital. Allows alpha numeric character and special characters like ^[a-zA-Z0-9_\-@,. "':|()/]{0,255}$

consent.consentDetail.careContexts.careContextReferencestringRequired

An identifier of patient's care context created in HIP. A care context is a group of patient's health data (Not the actual health data). Allows alpha numeric character and special characters like ^[a-zA-Z0-9_\-@,. "':|()/]{0,255}$

consent.consentDetail.schemaVersionstringRequired
consent.consentDetail.consentManagerobjectRequired
consent.consentDetail.consentManager.idstringRequired
consent.signaturestringRequired
errorobjectRequired

The error code and message, if any occurred.

responseobjectRequired
response.requestIdstringRequired

The requestId that was passed.Allows alpha numeric character and special characters like ^[0-9a-fA-F]{8}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{12}

respstring

Responses

200

OK

400

Bad Request. The request could not be processed because it was malformed or failed validation - a missing mandatory field, a value in the wrong format, or a header that did not match the body.

Error codes for this module

401

Unauthorized

Everything returns 401

500

Internal Server Error

Error codes for this module

503

Service Unavailable

Error codes for this module

Where this fits

hiecm-m3.yaml declares this callback at module level and names no call against it. Which call produces it is not documented, so this page does not say.