Backend resource · STATIC DECLARATIONS

Patient OTPView API reference · mansoq-core

Static source contract for Patient OTPView: 2 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.

Static API contract — behavior review pending. Source baseline f6e9f05f76d4.

Enable JavaScript to inspect structured operation, parameter, schema and permission evidence. Download this reference and its evidence.

Declared route and availability

This resource is declared in mansoq-core at /api/v1/otp/patient/. verified core mount in config/urls.py A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Operation map

Method	Path	Action	Evidence
GET	`/api/v1/otp/patient/`	list	declared/inherited method
POST	`/api/v1/otp/patient/`	create	declared/inherited method

list · GET

GET /api/v1/otp/patient/ — action list. static contract extracted; runtime/permission/payload behavior review pending.

response: PatientOTPReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
meta	dict	false	No extra constraint extracted
id	UUID4	false	No extra constraint extracted
name	str	true	No extra constraint extracted
gender	str	true	No extra constraint extracted
phone_number	str	true	No extra constraint extracted
emergency_phone_number	str	true	No extra constraint extracted
address	str	true	No extra constraint extracted
pincode	int	true	No extra constraint extracted
date_of_birth	datetime.date	true	No extra constraint extracted
year_of_birth	int	true	No extra constraint extracted
geo_organization	dict \| None	false	No extra constraint extracted
blood_group	BloodGroupChoices \| None	false	No extra constraint extracted
extensions	dict	true	No extra constraint extracted

Authorization: no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.

Class policy declarations: permission_classes: OTPAuthenticatedPermission; authentication_classes: JWTTokenPatientAuthentication.

create · POST

POST /api/v1/otp/patient/ — action create. static contract extracted; runtime/permission/payload behavior review pending.

request: PatientOTPWriteSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
meta	dict	false	No extra constraint extracted
id	UUID4	false	No extra constraint extracted
extensions	dict	false	No extra constraint extracted
name	str	true	No extra constraint extracted
gender	GenderChoices	true	No extra constraint extracted
date_of_birth	datetime.date \| None	false	No extra constraint extracted
age	int \| None	false	No extra constraint extracted
address	str	true	No extra constraint extracted
pincode	int	true	No extra constraint extracted
geo_organization	UUID4	true	No extra constraint extracted
blood_group	BloodGroupChoices \| None	false	No extra constraint extracted

response: PatientOTPReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Class policy declarations: permission_classes: OTPAuthenticatedPermission; authentication_classes: JWTTokenPatientAuthentication.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.

Pinned source evidence

Links require access to the private source repository.