POST /reviews

Owner administration or the explicitly assigned business permission is required. Actions are scoped to the signed-in branch. A request cannot be approved by its creator. Locked sessions return 423.

POST/api/v1/security/reviews

Authorization

AuthorizationBearer token (JWT) · headerrequired

JWT from POST /api/v1/auth/login sent as Authorization Bearer.

Request body

requiredapplication/json

client_mutation_idstringrequired

min length 1 · max length 160

itemsobject[]required

min items 1 · max items 200

Show properties

Array of object

medicine_idstringrequired

min length 1

quantityintegerrequired

max 100000

unit_pricenumberrequired

min 0

customer_idstring | null

customer_namestring

max length 120

coupon_codestring | null

Show properties

Any of:

string

string

null

null

global_discount_pctnumber | null

Show properties

Any of:

number

number

null

null

notesstring

max length 1000 · default: ""

patient_national_idstring

max length 100 · default: ""

doctor_licensestring

max length 100 · default: ""

Responses

200

Operation completed

any

201

Record created

400

Invalid request

detailstringrequired

401

Session expired or revoked

detailstringrequired

403

Permission denied or self-approval

detailstringrequired

409

Record changed or no longer actionable

detailstringrequired

423

detailstringrequired

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Authorization

Bearer token (JWT)Remember on this deviceInclude my values in samples

Bodyapplication/json

Request body

Request

curl -X POST 'http://localhost:8000/api/v1/security/reviews' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "client_mutation_id": "string",
  "items": [
    {
      "medicine_id": "string",
      "quantity": 1,
      "unit_price": 0
    }
  ],
  "customer_id": "string",
  "customer_name": "string",
  "coupon_code": "string",
  "global_discount_pct": 0,
  "notes": "",
  "patient_national_id": "",
  "doctor_license": ""
}'

const response = await fetch("http://localhost:8000/api/v1/security/reviews", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: "{\n  \"client_mutation_id\": \"string\",\n  \"items\": [\n    {\n      \"medicine_id\": \"string\",\n      \"quantity\": 1,\n      \"unit_price\": 0\n    }\n  ],\n  \"customer_id\": \"string\",\n  \"customer_name\": \"string\",\n  \"coupon_code\": \"string\",\n  \"global_discount_pct\": 0,\n  \"notes\": \"\",\n  \"patient_national_id\": \"\",\n  \"doctor_license\": \"\"\n}"
});

import requests

response = requests.post(
    "http://localhost:8000/api/v1/security/reviews",
    headers={
        "Authorization": "Bearer YOUR_TOKEN",
        "Accept": "application/json",
        "Content-Type": "application/json"
    },
    data="{\n  \"client_mutation_id\": \"string\",\n  \"items\": [\n    {\n      \"medicine_id\": \"string\",\n      \"quantity\": 1,\n      \"unit_price\": 0\n    }\n  ],\n  \"customer_id\": \"string\",\n  \"customer_name\": \"string\",\n  \"coupon_code\": \"string\",\n  \"global_discount_pct\": 0,\n  \"notes\": \"\",\n  \"patient_national_id\": \"\",\n  \"doctor_license\": \"\"\n}",
)

Response

Operation completed

{
  "detail": "string"
}

{
  "detail": "string"
}

{
  "detail": "string"
}

{
  "detail": "string"
}

{
  "detail": "string"
}