Update /createPermissionNumber endpoint

[madhavajay]

• rename createPermissionNumber to approvePermissionNumber
• Change to new Request / Response types below

Request:

{
    "token": "1234567"
}

• in a transaction
  • query diagnosis_permission_number for token
    if result count == 1:
    diagnosis_permission_number_id = uuid of returned result
    else if result count == 0 or > 1:
    - if > 1, log an error because > 1 should never happen
    break, reject transaction
  • find diagnosis_permission_number for token
  • find positive_diagnosis record by positive_diagnosis_id
  • update positive_diagnosis record to {"status": "approved"}
  • update diagnosis_permission_number record to remove "token", "positive_diagnosis_id", "created_timestamp", while adding "approved_timestamp:":
    Example updated diagnosis_permission_number

      {
          "permission_key": "arbitrarystring",
          "approved_timestamp": {{ server_timestamp }}
      }
  

  • this allows the key to be used for future reports but not re-used to token auth

If success:
Response:

{
    "status": "200"
    "message": "Report Approved"
}

If fail:
Response:

{
    "status": "404",
    "message": "Token not found"
}