Sunwave Health Digest Authentication

Usage

Customer Generation and Usage

• https://sunwavehealth.atlassian.net/wiki/pages/viewpageattachments.action?pageId=5144577&preview=%2F5144577%2F28606502%2FERP_Health_Integration_with_Sunwave.pdf

Generate GET Request Digest

Genearte Post Request Digest

Data Dictionary

Software Design

GET Request Validation Trace

• API Security Filter Digest Validation PATH https://github.com/sunwavehealth/SunwaveEMR/blob/51252a9bb7a7d193a9cb929a7c22b04c2ad7fcf5/src/main/java/com/sunwave/emr/server/security/APISecurityFilter.java#L44

  • Validate GET https://github.com/sunwavehealth/SunwaveEMR/blob/d46b653451ce24623a0c6c72d0aa4e2313c5c0f9/src/main/java/com/sunwave/emr/server/security/DigestValidator.java#L41

    • Validate Date and Transaction Id https://github.com/sunwavehealth/SunwaveEMR/blob/d46b653451ce24623a0c6c72d0aa4e2313c5c0f9/src/main/java/com/sunwave/emr/server/security/DigestValidator.java#L49

      • Validate Date - The request timestamp must be with in 300000 millisecond (5 minute) time window before now. https://github.com/sunwavehealth/SunwaveEMR/blob/d46b653451ce24623a0c6c72d0aa4e2313c5c0f9/src/main/java/com/sunwave/emr/server/security/DigestValidator.java#L91

      • Validate Transaction Id - Transaction Id can not be reused this checks for that in the sw_api_transaction table using transaction_id and clinic_id https://github.com/sunwavehealth/SunwaveEMR/blob/d46b653451ce24623a0c6c72d0aa4e2313c5c0f9/src/main/java/com/sunwave/emr/server/security/DigestValidator.java#L79

        • select id 
          from sw_api_transaction 
          where transaction_id = ? and clinic_id = ?",

        • If the transaction id is not found the validation passes and the transaction id is inserted into sw_api_transactiontable.

          • insert into sw_api_transaction 
            (transaction_id, created_on,clinic_id) 
            values
            (?,str_to_date(?,'%Y-%m-%d %H:%i:%s'),?)"

    • Validate The user has an email using table https://github.com/sunwavehealth/SunwaveEMR/blob/d46b653451ce24623a0c6c72d0aa4e2313c5c0f9/src/main/java/com/sunwave/emr/server/security/DigestValidator.java#L58

      • select user_email from
          sw_user_clinic
        where
          sw_user_clinic.clinic_id = ? and                        
          sw_user_clinic.user_email = ?

    • Validate