A FHIR server is present in OpenLMIS as a microservice ( OLMIS-5382 ). We need a way to return facilities as FHIR Locations. This data is already provided by the FHIR server, but additional work needs to be done in order to support OpenLMIS authentication and permission checking on this resource.
HAPI FHIR needs to have additional logic to check the OAuth token and also check for permissions (see http://hapifhir.io/doc_rest_server_interceptor.html and http://hapifhir.io/doc_rest_server_security.html)
Reference Data microservice performs duty as a "pass-through" to HAPI FHIR, doing the auth and permission checking, and then passing the request on to HAPI FHIR.
This is similar work done as OLMIS-3389; however we are leveraging the HAPI FHIR server to add more resource operations to support mCSD ITI-91.
New GET APIs for a Locations resource that gets the data from HAPI FHIR → /hapifhir/Location
Only authenticated tokens can access the data
Only service-based or API key tokens can access the data