Status

The status-endpoint returns the privacy settings the patient may have set.

If the patient has set a kjernejournal reservation no patient health records (journaldokumenter) for the patient exists in kjernejournal. If the patient has set a restriction for access to kjernejournal or specifically for patient health records (journaldokumenter) an extra consent must be given for access.

Note that we prefer that clients requests the status-endpoint first for each session in order to determine whether the patient has set restriction or reservation. This will improve the user experience as extra consent must be given for access in that case. See the nhn-access-basis header for how to set consent.

Authorization

The endpoint requires a HelseID user token for authentication. DPoP must be used.

When a user token is used, the response contains a flag if the users HPR number is blocked or not (see below).

Also when a user token is used all the required headers must be set as usual. The "nhn-access-basis" header MUST in this case always be set to UNNTAK. Note that we do not do any audit logging for requests to the /status endpoint.

Input

Attribute Format Description
nin String Norwegian national identification number

Curl example: Request status for patient

curl --location --request POST 'https://api.pjd.test.nhn.no/status' \
--header 'Authorization: DPoP eyJhbGciOiJSUzI1NiI......<<DPoP authorization bearer token>' \
--header 'DPoP: <DPoP proof token>' \
--header 'nhn-source-system: My EPJ system name' \
--header 'nhn-patient-nin: 10086055555' \
--data '{"nin":"10086055555"}'

Response

Attribute Format Description
patientNIN String The patient NIN (National Identification Number). It's the same as FNR/DNR.
privacySetting.hasReservationKjernejournal Boolean If the patient has set a kjernejournal reservation or not.
privacySetting.isRestricted Boolean Patient has set restriction for access to patient health records (journaldokumenter). Extra consent must be given for access.
privacySetting.isBlocked Boolean Always false for machine JWTs. True if a user JWT is used and the HPR-number is blocked. Cannot be overruled.

Response example

{
    "patientNIN": "10086055555",    
    "privacySetting": {
        "hasReservationKjernejournal": false,
        "isRestricted": false,
        "isBlocked": false
    }
}