01. DADOS GERAIS

02. SITUAÇÃO/REQUISITO

Necessidade de implementação de uma camada de segurança nas requisições de dados das APIs do Portal do Beneficiário para garantir que o usuário só acesse informações estritamente permitidas a ele, impedindo o acesso a dados de outros usuários ou famílias.

03. SOLUÇÃO

Implementada a camada de segurança nas APIs do Portal do Beneficiário

        APIs com camada de segurança já implementada:

• Cards

o   POST- /totvsHealthPlans/portal/v1/cards

• Beneficiary

o   GET - /totvsHealthPlans/portal/v1/beneficiaries

o   GET - /totvsHealthPlans/portal/v1/beneficiaries/:subscriberId/supplementaryHealth

o   GET - /totvsHealthPlans/portal/v1/beneficiaries/:subscriberId/elegibility

o   GET - /totvsHealthPlans/portal/v1/beneficiaries/:subscriberId

o   GET - /totvsHealthPlans/portal/v1/beneficiaries/:subscriberId/financeStatement/base64

o   GET - /totvsHealthPlans/portal/v1/beneficiaries/:subscriberId/incomeTax/base64

o   GET - /totvsHealthPlans/portal/v1/beneficiaries/:subscriberId/rescissionFine

o   GET - /totvsHealthPlans/portal/v1/beneficiaries/:subscriberId/utilizationStatement/base64

o   GET - /totvsHealthPlans/portal/v1/beneficiaries/:subscriberId/annualStatementDebts/base64

o   GET - /totvsHealthPlans/portal/v1/beneficiaries/:subscriberId/card

•  Beneficiary Protocol

          o   GET - /totvsHealthPlans/portal/v1/beneficiaries/protocols

          o   GET - /totvsHealthPlans/portal/v1/beneficiaries/protocols/:idProtocol/base64

          o   POST - /totvsHealthPlans/portal/v1/beneficiaries/protocols/attachments

          o   GET - /totvsHealthPlans/portal/v1/beneficiaries/protocols/:idProtocol

          o   POST - /totvsHealthPlans/portal/v1/beneficiaries/blockProtocol

          o   GET - /totvsHealthPlans/portal/v1/beneficiaries/protocols/total

• Beneficiary Card

           o   GET - /totvsHealthPlans/portal/v1/cardBatches/:batchCode/criticisms

• Family

o   GET - /totvsHealthPlans/portal/v1/families/:subscriberId

• Health Products Beneficiary

o   GET - /totvsHealthPlans/portal/v1/healthProductsBeneficiary/:subcriberId

• Authorization

o   POST - /totvsHealthPlans/portal/v1/authorizations/protocols

o   GET - /totvsHealthPlans/portal/v1/authorizations/:subscriberId/protocols

o   GET - /totvsHealthPlans/portal/v1/authorizations/protocols/:protocolId /interactions

o   POST - /totvsHealthPlans/portal/v1/authorizations/protocols/attachments

• Title

o   GET - /totvsHealthPlans/portal/v1/titles

• Form Struct

o   GET - /totvsHealthPlans/portal/v1/formStruct/beneficiaries

• Continued Medication

o   POST - /totvsHealthPlans/portal/v1/continuousMedications

o   GET - /totvsHealthPlans/portal/v1/continuousMedications

• Call Center

           o   GET - /totvsHealthPlans/portal/v1/protocols

           o   GET - /totvsHealthPlans/portal/v1/protocols/close

           o   GET - /totvsHealthPlans/portal/v1/protocols/rdStationReference

04. DEMAIS INFORMAÇÕES

Não se aplica;

05. ASSUNTOS RELACIONADOS

        Não se aplica.