|
| 1 | +## Overview |
| 2 | + |
| 3 | +API for communication suppliers to integrate with NHS Notify. |
| 4 | + |
| 5 | +This specification represents the in-development 'next' version of the API schema |
| 6 | +and should be treated as unstable |
| 7 | + |
| 8 | +Use this API to retrieve letters to be printed |
| 9 | + |
| 10 | +## Who can use this API |
| 11 | + |
| 12 | +The NHS Notify Supplier service is intended for suppliers of print services to the [NHS Notify](https://digital.nhs.uk/services/nhs-notify) service |
| 13 | + |
| 14 | +## Related APIs |
| 15 | + |
| 16 | +The [NHS Notify API](https://digital.nhs.uk/developer/api-catalogue/nhs-notify) is used to send messages to citizens via NHS App, email, text message or letter. |
| 17 | + |
| 18 | +## API status and roadmap |
| 19 | + |
| 20 | +This API is [in development](https://digital.nhs.uk/developer/guides-and-documentation/reference-guide#statuses) meaning: |
| 21 | + |
| 22 | +* it is available for testing in the integration environment |
| 23 | +* we expect to make breaking changes based on developer feedback |
| 24 | + |
| 25 | +## Service Level |
| 26 | + |
| 27 | +TBD |
| 28 | + |
| 29 | +For more details, see [service levels](https://digital.nhs.uk/developer/guides-and-documentation/reference-guide#service-levels). |
| 30 | + |
| 31 | +## Technology |
| 32 | + |
| 33 | +This API is a [REST-based](https://digital.nhs.uk/developer/guides-and-documentation/our-api-technologies#basic-rest) API. |
| 34 | + |
| 35 | +We follow the [JSON:API](https://jsonapi.org/) standard for our request and response schemas. |
| 36 | + |
| 37 | +### Response content types |
| 38 | + |
| 39 | +This API can generate responses in the following formats: |
| 40 | + |
| 41 | +* `application/vnd.api+json` - see [JSON:API specification](https://jsonapi.org/format/#introduction) |
| 42 | + |
| 43 | +## Network access |
| 44 | + |
| 45 | +This API is available on the internet and, indirectly on the [Health and Social Care Network (HSCN)](https://digital.nhs.uk/services/health-and-social-care-network). |
| 46 | + |
| 47 | +For more details see [Network access for APIs](https://digital.nhs.uk/developer/guides-and-documentation/network-access-for-apis). |
| 48 | + |
| 49 | +## Security and authorisation |
| 50 | + |
| 51 | +This API is [application-restricted](https://digital.nhs.uk/developer/guides-and-documentation/security-and-authorisation#application-restricted-apis), meaning we authenticate the calling application but not the end user. |
| 52 | + |
| 53 | +Authentication and authorisation of end users is the responsibility of your application. |
| 54 | + |
| 55 | +To access this API, use the following security pattern: |
| 56 | + |
| 57 | +* [Application-restricted RESTful API - signed JWT authentication](https://digital.nhs.uk/developer/guides-and-documentation/security-and-authorisation/application-restricted-restful-apis-signed-jwt-authentication) |
| 58 | + |
| 59 | +## Environments and testing |
| 60 | + |
| 61 | +| Environment | Base URL | |
| 62 | +|------------ | -------- | |
| 63 | +| Sandbox | `https://sandbox.api.service.nhs.uk/comms` | |
| 64 | +| Integration test | `https://int.api.service.nhs.uk/comms` | |
| 65 | +| Production | `https://api.service.nhs.uk/comms` | |
| 66 | + |
| 67 | +### Sandbox testing |
| 68 | + |
| 69 | +Our [sandbox environment](https://digital.nhs.uk/developer/guides-and-documentation/testing#sandbox-testing): |
| 70 | + |
| 71 | +* is for early developer testing |
| 72 | +* only covers a limited set of scenarios |
| 73 | +* is stateless, so does not actually persist any updates |
| 74 | +* is open access, so does not allow you to test authorisation |
| 75 | + |
| 76 | +For details of sandbox test scenarios, or to try out sandbox using our 'Try this API' feature, see the documentation for each endpoint. |
| 77 | + |
| 78 | +### Integration testing |
| 79 | + |
| 80 | +Our integration test environment: |
| 81 | + |
| 82 | +* is for formal integration sandbox-testing |
| 83 | +* is stateful, so persists updates |
| 84 | +* includes authorisation via [signed JWT authentication](https://digital.nhs.uk/developer/guides-and-documentation/security-and-authorisation/application-restricted-restful-apis-signed-jwt-authentication) |
| 85 | + |
| 86 | +You need to get your software approved by us before it can go live with this API. |
| 87 | + |
| 88 | +You will also need to follow our steps to - TBD |
0 commit comments