| Host | https://hessvc.saglik.gov.tr |
| Protocol | HTTP/1.1 |
| Header | Example | Note |
|---|---|---|
| Authorization | See "Authorization" below | Expires in 1 MONTH |
| Content-Type | application/json |
Note: All endpoints are concatenated to the host url
Note: All curls must be sent with the headers as well (the only exceptions are that the /api/send-code-to-login and /api/authenticate-with-code calls must not have the Authentication header)
| Endpoint | Purpose | Data | Method |
|---|---|---|---|
| /api/send-code-to-login | For authenticating | {"phone":"+905*********"} | POST |
| /api/authenticate-with-code | Authentication | {"password":"******","phone":"+905*********","rememberMe":true} | POST |
| /api/account-with-token | All account information including SHA-256 hashed TCKNO, phone number and userId etc. | {} | GET |
| /services/hescodeproxy/api/hes-codes-tr | Create HES code | {"child_tckn":null,"description":"hes","expiration_date":null} | POST |
| /services/hescodeproxy/api/hes-codes | Get HES codes | {} | GET |
| /services/familyservice/api/add-family-member | Add family member | {"invitedUserPhone":"+905*********","ownerHealthInfoAllowed":true,"ownerLocationInfoAllowed":true,"relationName":"***"} | POST |
| /services/familyservice/api/account-family-members | Get family numbers | {} | GET |
| /services/statisticservice/api/latest-generic-statistics | LATEST STATISTICS | {} | GET |
bearer token consist of base64 encoded string with the following format and some static base64:
{"alg":"HS512"}{"sub":"000-000-000-000-000","auth":"ROLE_USER","oid":"0000000","exp": [timestamp] }
concatenated with some static base64 bytes
(sub is userId)