Release 5

This page is part of the FHIR Specification (v5.0.0: R5 - STU). This is the current published version. For a full list of available versions, see the Directory of published versions . Page versions: R5 R4B R4 R3 R2

2.12 Resource Subscription - Content

FHIR Infrastructure icon Work GroupMaturity Level: 3 Trial UseSecurity Category: Business Compartments: No defined compartments

The subscription resource describes a particular client's request to be notified about a SubscriptionTopic.

This document contains information about the Subscription resource and details specific to options in it. See Subscriptions for general information about using Subscriptions in FHIR.

The Subscription resource is used to establish proactive event notifications from a FHIR server to another system. Subscribers request event notifications within a predefined SubscriptionTopic that the server supports, and can further refine their notifications by supplying filters. Each SubscriptionTopic resource defines a set of allowed filters (SubscriptionTopic.canFilterBy), which a subscriber refer to within a Subscription resource (Subscription.filterBy). Once a subscription is created, any event matching a specified SubscriptionTopic that meets the filtering criteria will cause a notification to be sent using the provided channel. Notifications are Bundle resources, of type subscription-notification.

Subscriptions are active resources; a server can only accept a subscription if it will execute the specified channel for any resources subsequently received. The subscription is no longer active once it is deleted from the server.

By adjusting Subscription.content, subscribers can request event notifications that include full resource content; or just the ID of the triggering resource; or an empty notification body.

Several channels are defined in the core specification:

  • rest-hook: Notifications are sent via HTTPS POST to the Subscription.endpoint URL (e.g., https://...)
  • websocket: Notifications are sent via WS/S to a client connected via a WebSocket
  • email: Notifications are sent via SMTP/S, S/MIME, or Direct SMTP to the Subscription.endpoint email URI (e.g., mailto:...)
  • message: Notifications are sent via FHIR messaging to the application identified in the Subscription.endpoint URI

Additional channel types can be defined by external implementation guides. See below for further discussion of the various channels.

The Subscription resource is used in the Subscriptions Framework. Information about the Boundaries and Relationships both within the Subscriptions Framework and to other areas of the FHIR specification can be found here.

Structure

NameFlagsCard.TypeDescription & Constraintsdoco
.. Subscription TUDomainResourceNotification about a SubscriptionTopic

Elements defined in Ancestors: id, meta, implicitRules, language, text, contained, extension, modifierExtension
... identifier Σ0..*IdentifierAdditional identifiers (business identifier)

... name Σ0..1stringHuman readable name for this subscription
... status ?!Σ1..1coderequested | active | error | off | entered-in-error
Binding: Subscription Status (Required)
... contact Σ0..*ContactPointContact details for source (e.g. troubleshooting)

... end Σ0..1instantWhen to automatically delete the subscription
... managingEntity Σ0..1Reference(CareTeam | HealthcareService | Organization | RelatedPerson | Patient | Practitioner | PractitionerRole)Entity responsible for Subscription changes
... reason Σ0..1stringDescription of why this subscription was created
... filterBy ΣC0..*BackboneElementCriteria for narrowing the subscription topic stream
+ Rule: Subscription filters may only contain a modifier or a comparator

.... resourceType Σ0..1uriAllowed Resource (reference to definition) for this Subscription filter
Binding: Types used with Subscriptions (Extensible)
Additional BindingsPurpose
All Resource TypesUI Binding

.... filterParameter Σ1..1stringFilter label defined in SubscriptionTopic
.... comparator C0..1codeeq | ne | gt | lt | ge | le | sa | eb | ap
Binding: Search Comparator (Required)
.... modifier C0..1codemissing | exact | contains | not | text | in | not-in | below | above | type | identifier | of-type | code-text | text-advanced | iterate
Binding: Search Modifier Code (Required)
.... value Σ1..1stringLiteral value or resource path
... channelType Σ1..1CodingChannel type for notifications
Binding: Subscription Channel Type (Extensible)
... endpoint Σ0..1urlWhere the channel points to
... parameter 0..*BackboneElementChannel type

.... name 1..1stringName (key) of the parameter
.... value 1..1stringValue of the parameter to use or pass through
... heartbeatPeriod Σ0..1unsignedIntInterval in seconds to send 'heartbeat' notification
... timeout Σ0..1unsignedIntTimeout in seconds to attempt notification delivery
... contentType Σ0..1codeMIME type to send, or omit for no payload
Binding: Mime Types (Required)
... content Σ0..1codeempty | id-only | full-resource
Binding: Subscription Payload Content (Required)
... maxCount Σ0..1positiveIntMaximum number of events that can be combined in a single notification

doco Documentation for this format icon

See the Extensions for this resource

UML Diagram (Legend)

Subscription (DomainResource)A formal identifier that is used to identify this code system when it is represented in other formats, or referenced in a specification, model, design or an instanceidentifier : Identifier [0..*]A natural language name identifying the subscriptionname : string [0..1]The status of the subscription, which marks the server state for managing the subscription (this element modifies the meaning of other elements)status : code [1..1] « null (Strength=Required)SubscriptionStatusCodes! »The reference to the subscription topic to be notified abouttopic : canonical [1..1] « SubscriptionTopic »Contact details for a human to contact about the subscription. The primary use of this for system administrator troubleshootingcontact : ContactPoint [0..*]The time for the server to turn the subscription offend : instant [0..1]Entity with authorization to make subsequent revisions to the Subscription and also determines what data the subscription is authorized to disclosemanagingEntity : Reference [0..1] « CareTeam|HealthcareService| Organization|RelatedPerson|Patient|Practitioner| PractitionerRole »A description of why this subscription is definedreason : string [0..1]The type of channel to send notifications onchannelType : Coding [1..1] « null (Strength=Extensible)SubscriptionChannelType+ »The url that describes the actual end-point to send notifications toendpoint : url [0..1]If present, a 'heartbeat' notification (keep-alive) is sent via this channel with an interval period equal to this elements integer value in seconds. If not present, a heartbeat notification is not sentheartbeatPeriod : unsignedInt [0..1]If present, the maximum amount of time a server will allow before failing a notification attempttimeout : unsignedInt [0..1]The MIME type to send the payload in - e.g., `application/fhir+xml` or `application/fhir+json`. Note that: * clients may request notifications in a specific FHIR version by using the [FHIR Version Parameter](http.html#version-parameter) - e.g., `application/fhir+json; fhirVersion=4.0`. * additional MIME types can be allowed by channels - e.g., `text/plain` and `text/html` are defined by the Email channelcontentType : code [0..1] « The mime type of an attachment. Any valid mime type is allowed. (Strength=Required)MimeTypes! »How much of the resource content to deliver in the notification payload. The choices are an empty payload, only the resource id, or the full resource contentcontent : code [0..1] « null (Strength=Required)SubscriptionPayloadContent! »If present, the maximum number of events that will be included in a notification bundle. Note that this is not a strict limit on the number of entries in a bundle, as dependent resources can be includedmaxCount : positiveInt [0..1]FilterByA resource listed in the `SubscriptionTopic` this `Subscription` references (`SubscriptionTopic.canFilterBy.resource`). This element can be used to differentiate filters for topics that include more than one resource typeresourceType : uri [0..1] « null (Strength=Extensible)SubscriptionTypes+ »The filter as defined in the `SubscriptionTopic.canFilterBy.filterParameter` elementfilterParameter : string [1..1]Comparator applied to this filter parametercomparator : code [0..1] « null (Strength=Required)SearchComparator! » « This element has or is affected by some invariantsC »Modifier applied to this filter parametermodifier : code [0..1] « null (Strength=Required)SearchModifierCode! » « This element has or is affected by some invariantsC »The literal value or resource path as is legal in search - for example, `Patient/123` or `le1950`value : string [1..1]ParameterParameter name for information passed to the channel for notifications, for example in the case of a REST hook wanting to pass through an authorization header, the name would be Authorizationname : string [1..1]Parameter value for information passed to the channel for notifications, for example in the case of a REST hook wanting to pass through an authorization header, the value would be `Bearer 0193...`value : string [1..1]The filter properties to be applied to narrow the subscription topic stream. When multiple filters are applied, evaluates to true if all the conditions applicable to that resource are met; otherwise it returns false (i.e., logical AND)filterBy[0..*]Channel-dependent information to send as part of the notification (e.g., HTTP Headers)parameter[0..*]

XML Template

<Subscription xmlns="http://hl7.org/fhir"> doco
 <!-- from Resource: id, meta, implicitRules, and language -->
 <!-- from DomainResource: text, contained, extension, and modifierExtension -->
 <identifier><!-- 0..* Identifier Additional identifiers (business identifier) --></identifier>
 <name value="[string]"/><!-- 0..1 Human readable name for this subscription -->
 <status value="[code]"/><!-- 1..1 requested | active | error | off | entered-in-error -->
 <topic><!-- 1..1 canonical(SubscriptionTopic) Reference to the subscription topic being subscribed to --></topic>
 <contact><!-- 0..* ContactPoint Contact details for source (e.g. troubleshooting) --></contact>
 <end value="[instant]"/><!-- 0..1 When to automatically delete the subscription -->
 <managingEntity><!-- 0..1 Reference(CareTeam|HealthcareService|Organization|
   Patient|Practitioner|PractitionerRole|RelatedPerson) Entity responsible for Subscription changes --></managingEntity>
 <reason value="[string]"/><!-- 0..1 Description of why this subscription was created -->
 <filterBy>  <!-- 0..* Criteria for narrowing the subscription topic stream -->
  <resourceType value="[uri]"/><!-- 0..1 Allowed Resource (reference to definition) for this Subscription filter -->
  <filterParameter value="[string]"/><!-- 1..1 Filter label defined in SubscriptionTopic -->
  <comparator value="[code]"/><!-- I 0..1 eq | ne | gt | lt | ge | le | sa | eb | ap -->
  <modifier value="[code]"/><!-- I 0..1 missing | exact | contains | not | text | in | not-in | below | above | type | identifier | of-type | code-text | text-advanced | iterate -->
  <value value="[string]"/><!-- 1..1 Literal value or resource path -->
 </filterBy>
 <channelType><!-- 1..1 Coding Channel type for notifications --></channelType>
 <endpoint value="[url]"/><!-- 0..1 Where the channel points to -->
 <parameter>  <!-- 0..* Channel type -->
  <name value="[string]"/><!-- 1..1 Name (key) of the parameter -->
  <value value="[string]"/><!-- 1..1 Value of the parameter to use or pass through -->
 </parameter>
 <heartbeatPeriod value="[unsignedInt]"/><!-- 0..1 Interval in seconds to send 'heartbeat' notification -->
 <timeout value="[unsignedInt]"/><!-- 0..1 Timeout in seconds to attempt notification delivery -->
 <contentType value="[code]"/><!-- 0..1 MIME type to send, or omit for no payload -->
 <content value="[code]"/><!-- 0..1 empty | id-only | full-resource -->
 <maxCount value="[positiveInt]"/><!-- 0..1 Maximum number of events that can be combined in a single notification -->
</Subscription>

JSON Template

{doco
  "resourceType" : "Subscription",
  // from Resource: id, meta, implicitRules, and language
  // from DomainResource: text, contained, extension, and modifierExtension
  "identifier" : [{ Identifier }], // Additional identifiers (business identifier)
  "name" : "<string>", // Human readable name for this subscription
  "status" : "<code>", // R!  requested | active | error | off | entered-in-error
  "topic" : "<canonical(SubscriptionTopic)>", // R!  Reference to the subscription topic being subscribed to
  "contact" : [{ ContactPoint }], // Contact details for source (e.g. troubleshooting)
  "end" : "<instant>", // When to automatically delete the subscription
  "managingEntity" : { Reference(CareTeam|HealthcareService|Organization|
   Patient|Practitioner|PractitionerRole|RelatedPerson) }, // Entity responsible for Subscription changes
  "reason" : "<string>", // Description of why this subscription was created
  "filterBy" : [{ // Criteria for narrowing the subscription topic stream
    "resourceType" : "<uri>", // Allowed Resource (reference to definition) for this Subscription filter
    "filterParameter" : "<string>", // R!  Filter label defined in SubscriptionTopic
    "comparator" : "<code>", // I eq | ne | gt | lt | ge | le | sa | eb | ap
    "modifier" : "<code>", // I missing | exact | contains | not | text | in | not-in | below | above | type | identifier | of-type | code-text | text-advanced | iterate
    "value" : "<string>" // R!  Literal value or resource path
  }],
  "channelType" : { Coding }, // R!  Channel type for notifications
  "endpoint" : "<url>", // Where the channel points to
  "parameter" : [{ // Channel type
    "name" : "<string>", // R!  Name (key) of the parameter
    "value" : "<string>" // R!  Value of the parameter to use or pass through
  }],
  "heartbeatPeriod" : "<unsignedInt>", // Interval in seconds to send 'heartbeat' notification
  "timeout" : "<unsignedInt>", // Timeout in seconds to attempt notification delivery
  "contentType" : "<code>", // MIME type to send, or omit for no payload
  "content" : "<code>", // empty | id-only | full-resource
  "maxCount" : "<positiveInt>" // Maximum number of events that can be combined in a single notification
}

Turtle Template

@prefix fhir: <http://hl7.org/fhir/> .doco


[ a fhir:Subscription;
  fhir:nodeRole fhir:treeRoot; # if this is the parser root

  # from Resource: .id, .meta, .implicitRules, and .language
  # from DomainResource: .text, .contained, .extension, and .modifierExtension
  fhir:identifier  ( [ Identifier ] ... ) ; # 0..* Additional identifiers (business identifier)
  fhir:name [ string ] ; # 0..1 Human readable name for this subscription
  fhir:status [ code ] ; # 1..1 requested | active | error | off | entered-in-error
  fhir:topic [ canonical(SubscriptionTopic) ] ; # 1..1 Reference to the subscription topic being subscribed to
  fhir:contact  ( [ ContactPoint ] ... ) ; # 0..* Contact details for source (e.g. troubleshooting)
  fhir:end [ instant ] ; # 0..1 When to automatically delete the subscription
  fhir:managingEntity [ Reference(CareTeam|HealthcareService|Organization|Patient|Practitioner|PractitionerRole|
  RelatedPerson) ] ; # 0..1 Entity responsible for Subscription changes
  fhir:reason [ string ] ; # 0..1 Description of why this subscription was created
  fhir:filterBy ( [ # 0..* Criteria for narrowing the subscription topic stream
    fhir:resourceType [ uri ] ; # 0..1 Allowed Resource (reference to definition) for this Subscription filter
    fhir:filterParameter [ string ] ; # 1..1 Filter label defined in SubscriptionTopic
    fhir:comparator [ code ] ; # 0..1 I eq | ne | gt | lt | ge | le | sa | eb | ap
    fhir:modifier [ code ] ; # 0..1 I missing | exact | contains | not | text | in | not-in | below | above | type | identifier | of-type | code-text | text-advanced | iterate
    fhir:value [ string ] ; # 1..1 Literal value or resource path
  ] ... ) ;
  fhir:channelType [ Coding ] ; # 1..1 Channel type for notifications
  fhir:endpoint [ url ] ; # 0..1 Where the channel points to
  fhir:parameter ( [ # 0..* Channel type
    fhir:name [ string ] ; # 1..1 Name (key) of the parameter
    fhir:value [ string ] ; # 1..1 Value of the parameter to use or pass through
  ] ... ) ;
  fhir:heartbeatPeriod [ unsignedInt ] ; # 0..1 Interval in seconds to send 'heartbeat' notification
  fhir:timeout [ unsignedInt ] ; # 0..1 Timeout in seconds to attempt notification delivery
  fhir:contentType [ code ] ; # 0..1 MIME type to send, or omit for no payload
  fhir:content [ code ] ; # 0..1 empty | id-only | full-resource
  fhir:maxCount [ positiveInt ] ; # 0..1 Maximum number of events that can be combined in a single notification
]

Changes from both R4 and R4B

Subscription
Subscription.identifier
  • Added Element
Subscription.name
  • Added Element
Subscription.status
  • Add code entered-in-error
Subscription.topic
  • Added Mandatory Element
Subscription.managingEntity
  • Added Element
Subscription.reason
  • Min Cardinality changed from 1 to 0
Subscription.filterBy
  • Added Element
Subscription.filterBy.resourceType
  • Added Element
Subscription.filterBy.filterParameter
  • Added Mandatory Element
Subscription.filterBy.comparator
  • Added Element
Subscription.filterBy.modifier
  • Added Element
Subscription.filterBy.value
  • Added Mandatory Element
Subscription.channelType
  • Added Mandatory Element
Subscription.endpoint
  • Added Element
Subscription.parameter
  • Added Element
Subscription.parameter.name
  • Added Mandatory Element
Subscription.parameter.value
  • Added Mandatory Element
Subscription.heartbeatPeriod
  • Added Element
Subscription.timeout
  • Added Element
Subscription.contentType
  • Added Element
Subscription.content
  • Added Element
Subscription.maxCount
  • Added Element
Subscription.criteria
  • Deleted
Subscription.error
  • Deleted
Subscription.channel
  • Deleted

See the Full Difference for further information

This analysis is available for R4 as XML or JSON and for R4B as XML or JSON.

See R4 <--> R5 Conversion Maps (status = See Conversions Summary.)

Structure

NameFlagsCard.TypeDescription & Constraintsdoco
.. Subscription TUDomainResourceNotification about a SubscriptionTopic

Elements defined in Ancestors: id, meta, implicitRules, language, text, contained, extension, modifierExtension
... identifier Σ0..*IdentifierAdditional identifiers (business identifier)

... name Σ0..1stringHuman readable name for this subscription
... status ?!Σ1..1coderequested | active | error | off | entered-in-error
Binding: Subscription Status (Required)
... contact Σ0..*ContactPointContact details for source (e.g. troubleshooting)

... end Σ0..1instantWhen to automatically delete the subscription
... managingEntity Σ0..1Reference(CareTeam | HealthcareService | Organization | RelatedPerson | Patient | Practitioner | PractitionerRole)Entity responsible for Subscription changes
... reason Σ0..1stringDescription of why this subscription was created
... filterBy ΣC0..*BackboneElementCriteria for narrowing the subscription topic stream
+ Rule: Subscription filters may only contain a modifier or a comparator

.... resourceType Σ0..1uriAllowed Resource (reference to definition) for this Subscription filter
Binding: Types used with Subscriptions (Extensible)
Additional BindingsPurpose
All Resource TypesUI Binding

.... filterParameter Σ1..1stringFilter label defined in SubscriptionTopic
.... comparator C0..1codeeq | ne | gt | lt | ge | le | sa | eb | ap
Binding: Search Comparator (Required)
.... modifier C0..1codemissing | exact | contains | not | text | in | not-in | below | above | type | identifier | of-type | code-text | text-advanced | iterate
Binding: Search Modifier Code (Required)
.... value Σ1..1stringLiteral value or resource path
... channelType Σ1..1CodingChannel type for notifications
Binding: Subscription Channel Type (Extensible)
... endpoint Σ0..1urlWhere the channel points to
... parameter 0..*BackboneElementChannel type

.... name 1..1stringName (key) of the parameter
.... value 1..1stringValue of the parameter to use or pass through
... heartbeatPeriod Σ0..1unsignedIntInterval in seconds to send 'heartbeat' notification
... timeout Σ0..1unsignedIntTimeout in seconds to attempt notification delivery
... contentType Σ0..1codeMIME type to send, or omit for no payload
Binding: Mime Types (Required)
... content Σ0..1codeempty | id-only | full-resource
Binding: Subscription Payload Content (Required)
... maxCount Σ0..1positiveIntMaximum number of events that can be combined in a single notification

doco Documentation for this format icon

See the Extensions for this resource

UML Diagram (Legend)

Subscription (DomainResource)A formal identifier that is used to identify this code system when it is represented in other formats, or referenced in a specification, model, design or an instanceidentifier : Identifier [0..*]A natural language name identifying the subscriptionname : string [0..1]The status of the subscription, which marks the server state for managing the subscription (this element modifies the meaning of other elements)status : code [1..1] « null (Strength=Required)SubscriptionStatusCodes! »The reference to the subscription topic to be notified abouttopic : canonical [1..1] « SubscriptionTopic »Contact details for a human to contact about the subscription. The primary use of this for system administrator troubleshootingcontact : ContactPoint [0..*]The time for the server to turn the subscription offend : instant [0..1]Entity with authorization to make subsequent revisions to the Subscription and also determines what data the subscription is authorized to disclosemanagingEntity : Reference [0..1] « CareTeam|HealthcareService| Organization|RelatedPerson|Patient|Practitioner| PractitionerRole »A description of why this subscription is definedreason : string [0..1]The type of channel to send notifications onchannelType : Coding [1..1] « null (Strength=Extensible)SubscriptionChannelType+ »The url that describes the actual end-point to send notifications toendpoint : url [0..1]If present, a 'heartbeat' notification (keep-alive) is sent via this channel with an interval period equal to this elements integer value in seconds. If not present, a heartbeat notification is not sentheartbeatPeriod : unsignedInt [0..1]If present, the maximum amount of time a server will allow before failing a notification attempttimeout : unsignedInt [0..1]The MIME type to send the payload in - e.g., `application/fhir+xml` or `application/fhir+json`. Note that: * clients may request notifications in a specific FHIR version by using the [FHIR Version Parameter](http.html#version-parameter) - e.g., `application/fhir+json; fhirVersion=4.0`. * additional MIME types can be allowed by channels - e.g., `text/plain` and `text/html` are defined by the Email channelcontentType : code [0..1] « The mime type of an attachment. Any valid mime type is allowed. (Strength=Required)MimeTypes! »How much of the resource content to deliver in the notification payload. The choices are an empty payload, only the resource id, or the full resource contentcontent : code [0..1] « null (Strength=Required)SubscriptionPayloadContent! »If present, the maximum number of events that will be included in a notification bundle. Note that this is not a strict limit on the number of entries in a bundle, as dependent resources can be includedmaxCount : positiveInt [0..1]FilterByA resource listed in the `SubscriptionTopic` this `Subscription` references (`SubscriptionTopic.canFilterBy.resource`). This element can be used to differentiate filters for topics that include more than one resource typeresourceType : uri [0..1] « null (Strength=Extensible)SubscriptionTypes+ »The filter as defined in the `SubscriptionTopic.canFilterBy.filterParameter` elementfilterParameter : string [1..1]Comparator applied to this filter parametercomparator : code [0..1] « null (Strength=Required)SearchComparator! » « This element has or is affected by some invariantsC »Modifier applied to this filter parametermodifier : code [0..1] « null (Strength=Required)SearchModifierCode! » « This element has or is affected by some invariantsC »The literal value or resource path as is legal in search - for example, `Patient/123` or `le1950`value : string [1..1]ParameterParameter name for information passed to the channel for notifications, for example in the case of a REST hook wanting to pass through an authorization header, the name would be Authorizationname : string [1..1]Parameter value for information passed to the channel for notifications, for example in the case of a REST hook wanting to pass through an authorization header, the value would be `Bearer 0193...`value : string [1..1]The filter properties to be applied to narrow the subscription topic stream. When multiple filters are applied, evaluates to true if all the conditions applicable to that resource are met; otherwise it returns false (i.e., logical AND)filterBy[0..*]Channel-dependent information to send as part of the notification (e.g., HTTP Headers)parameter[0..*]

XML Template

<Subscription xmlns="http://hl7.org/fhir"> doco
 <!-- from Resource: id, meta, implicitRules, and language -->
 <!-- from DomainResource: text, contained, extension, and modifierExtension -->
 <identifier><!-- 0..* Identifier Additional identifiers (business identifier) --></identifier>
 <name value="[string]"/><!-- 0..1 Human readable name for this subscription -->
 <status value="[code]"/><!-- 1..1 requested | active | error | off | entered-in-error -->
 <topic><!-- 1..1 canonical(SubscriptionTopic) Reference to the subscription topic being subscribed to --></topic>
 <contact><!-- 0..* ContactPoint Contact details for source (e.g. troubleshooting) --></contact>
 <end value="[instant]"/><!-- 0..1 When to automatically delete the subscription -->
 <managingEntity><!-- 0..1 Reference(CareTeam|HealthcareService|Organization|
   Patient|Practitioner|PractitionerRole|RelatedPerson) Entity responsible for Subscription changes --></managingEntity>
 <reason value="[string]"/><!-- 0..1 Description of why this subscription was created -->
 <filterBy>  <!-- 0..* Criteria for narrowing the subscription topic stream -->
  <resourceType value="[uri]"/><!-- 0..1 Allowed Resource (reference to definition) for this Subscription filter -->
  <filterParameter value="[string]"/><!-- 1..1 Filter label defined in SubscriptionTopic -->
  <comparator value="[code]"/><!-- I 0..1 eq | ne | gt | lt | ge | le | sa | eb | ap -->
  <modifier value="[code]"/><!-- I 0..1 missing | exact | contains | not | text | in | not-in | below | above | type | identifier | of-type | code-text | text-advanced | iterate -->
  <value value="[string]"/><!-- 1..1 Literal value or resource path -->
 </filterBy>
 <channelType><!-- 1..1 Coding Channel type for notifications --></channelType>
 <endpoint value="[url]"/><!-- 0..1 Where the channel points to -->
 <parameter>  <!-- 0..* Channel type -->
  <name value="[string]"/><!-- 1..1 Name (key) of the parameter -->
  <value value="[string]"/><!-- 1..1 Value of the parameter to use or pass through -->
 </parameter>
 <heartbeatPeriod value="[unsignedInt]"/><!-- 0..1 Interval in seconds to send 'heartbeat' notification -->
 <timeout value="[unsignedInt]"/><!-- 0..1 Timeout in seconds to attempt notification delivery -->
 <contentType value="[code]"/><!-- 0..1 MIME type to send, or omit for no payload -->
 <content value="[code]"/><!-- 0..1 empty | id-only | full-resource -->
 <maxCount value="[positiveInt]"/><!-- 0..1 Maximum number of events that can be combined in a single notification -->
</Subscription>

JSON Template

{doco
  "resourceType" : "Subscription",
  // from Resource: id, meta, implicitRules, and language
  // from DomainResource: text, contained, extension, and modifierExtension
  "identifier" : [{ Identifier }], // Additional identifiers (business identifier)
  "name" : "<string>", // Human readable name for this subscription
  "status" : "<code>", // R!  requested | active | error | off | entered-in-error
  "topic" : "<canonical(SubscriptionTopic)>", // R!  Reference to the subscription topic being subscribed to
  "contact" : [{ ContactPoint }], // Contact details for source (e.g. troubleshooting)
  "end" : "<instant>", // When to automatically delete the subscription
  "managingEntity" : { Reference(CareTeam|HealthcareService|Organization|
   Patient|Practitioner|PractitionerRole|RelatedPerson) }, // Entity responsible for Subscription changes
  "reason" : "<string>", // Description of why this subscription was created
  "filterBy" : [{ // Criteria for narrowing the subscription topic stream
    "resourceType" : "<uri>", // Allowed Resource (reference to definition) for this Subscription filter
    "filterParameter" : "<string>", // R!  Filter label defined in SubscriptionTopic
    "comparator" : "<code>", // I eq | ne | gt | lt | ge | le | sa | eb | ap
    "modifier" : "<code>", // I missing | exact | contains | not | text | in | not-in | below | above | type | identifier | of-type | code-text | text-advanced | iterate
    "value" : "<string>" // R!  Literal value or resource path
  }],
  "channelType" : { Coding }, // R!  Channel type for notifications
  "endpoint" : "<url>", // Where the channel points to
  "parameter" : [{ // Channel type
    "name" : "<string>", // R!  Name (key) of the parameter
    "value" : "<string>" // R!  Value of the parameter to use or pass through
  }],
  "heartbeatPeriod" : "<unsignedInt>", // Interval in seconds to send 'heartbeat' notification
  "timeout" : "<unsignedInt>", // Timeout in seconds to attempt notification delivery
  "contentType" : "<code>", // MIME type to send, or omit for no payload
  "content" : "<code>", // empty | id-only | full-resource
  "maxCount" : "<positiveInt>" // Maximum number of events that can be combined in a single notification
}

Turtle Template

@prefix fhir: <http://hl7.org/fhir/> .doco


[ a fhir:Subscription;
  fhir:nodeRole fhir:treeRoot; # if this is the parser root

  # from Resource: .id, .meta, .implicitRules, and .language
  # from DomainResource: .text, .contained, .extension, and .modifierExtension
  fhir:identifier  ( [ Identifier ] ... ) ; # 0..* Additional identifiers (business identifier)
  fhir:name [ string ] ; # 0..1 Human readable name for this subscription
  fhir:status [ code ] ; # 1..1 requested | active | error | off | entered-in-error
  fhir:topic [ canonical(SubscriptionTopic) ] ; # 1..1 Reference to the subscription topic being subscribed to
  fhir:contact  ( [ ContactPoint ] ... ) ; # 0..* Contact details for source (e.g. troubleshooting)
  fhir:end [ instant ] ; # 0..1 When to automatically delete the subscription
  fhir:managingEntity [ Reference(CareTeam|HealthcareService|Organization|Patient|Practitioner|PractitionerRole|
  RelatedPerson) ] ; # 0..1 Entity responsible for Subscription changes
  fhir:reason [ string ] ; # 0..1 Description of why this subscription was created
  fhir:filterBy ( [ # 0..* Criteria for narrowing the subscription topic stream
    fhir:resourceType [ uri ] ; # 0..1 Allowed Resource (reference to definition) for this Subscription filter
    fhir:filterParameter [ string ] ; # 1..1 Filter label defined in SubscriptionTopic
    fhir:comparator [ code ] ; # 0..1 I eq | ne | gt | lt | ge | le | sa | eb | ap
    fhir:modifier [ code ] ; # 0..1 I missing | exact | contains | not | text | in | not-in | below | above | type | identifier | of-type | code-text | text-advanced | iterate
    fhir:value [ string ] ; # 1..1 Literal value or resource path
  ] ... ) ;
  fhir:channelType [ Coding ] ; # 1..1 Channel type for notifications
  fhir:endpoint [ url ] ; # 0..1 Where the channel points to
  fhir:parameter ( [ # 0..* Channel type
    fhir:name [ string ] ; # 1..1 Name (key) of the parameter
    fhir:value [ string ] ; # 1..1 Value of the parameter to use or pass through
  ] ... ) ;
  fhir:heartbeatPeriod [ unsignedInt ] ; # 0..1 Interval in seconds to send 'heartbeat' notification
  fhir:timeout [ unsignedInt ] ; # 0..1 Timeout in seconds to attempt notification delivery
  fhir:contentType [ code ] ; # 0..1 MIME type to send, or omit for no payload
  fhir:content [ code ] ; # 0..1 empty | id-only | full-resource
  fhir:maxCount [ positiveInt ] ; # 0..1 Maximum number of events that can be combined in a single notification
]

Changes from both R4 and R4B

Subscription
Subscription.identifier
  • Added Element
Subscription.name
  • Added Element
Subscription.status
  • Add code entered-in-error
Subscription.topic
  • Added Mandatory Element
Subscription.managingEntity
  • Added Element
Subscription.reason
  • Min Cardinality changed from 1 to 0
Subscription.filterBy
  • Added Element
Subscription.filterBy.resourceType
  • Added Element
Subscription.filterBy.filterParameter
  • Added Mandatory Element
Subscription.filterBy.comparator
  • Added Element
Subscription.filterBy.modifier
  • Added Element
Subscription.filterBy.value
  • Added Mandatory Element
Subscription.channelType
  • Added Mandatory Element
Subscription.endpoint
  • Added Element
Subscription.parameter
  • Added Element
Subscription.parameter.name
  • Added Mandatory Element
Subscription.parameter.value
  • Added Mandatory Element
Subscription.heartbeatPeriod
  • Added Element
Subscription.timeout
  • Added Element
Subscription.contentType
  • Added Element
Subscription.content
  • Added Element
Subscription.maxCount
  • Added Element
Subscription.criteria
  • Deleted
Subscription.error
  • Deleted
Subscription.channel
  • Deleted

See the Full Difference for further information

This analysis is available for R4 as XML or JSON and for R4B as XML or JSON.

See R4 <--> R5 Conversion Maps (status = See Conversions Summary.)

 

Additional definitions: Master Definition XML + JSON, XML Schema/Schematron + JSON Schema, ShEx (for Turtle) + see the extensions, the spreadsheet version & the dependency analysis

PathValueSetTypeDocumentation
Subscription.status SubscriptionStatusCodes (a valid code from Subscription Status)Required

State values for FHIR Subscriptions.

Subscription.filterBy.resourceType SubscriptionTypes Extensible

Types used with Subscriptions

  All Resource Types ui
Subscription.filterBy.comparator SearchComparator Required

What Search Comparator Codes are supported in search.

Subscription.filterBy.modifier SearchModifierCode Required

A supported modifier for a search parameter.

Subscription.channelType SubscriptionChannelType (a valid code from SubscriptionChannel Type Codes icon)Extensible

Core-defined FHIR channel types allowed for use in Subscriptions.

Subscription.contentType MimeTypes (a valid code from urn:ietf:bcp:13)Required

This value set includes all possible codes from BCP-13 (see http://tools.ietf.org/html/bcp13)

Subscription.content SubscriptionPayloadContent Required

Codes to represent how much resource content to send in the notification payload.

UniqueKeyLevelLocationDescriptionExpression
img scr-1Rule Subscription.filterBySubscription filters may only contain a modifier or a comparator(comparator.exists() and modifier.exists()).not()

Applications are responsible for following FHIR security guidance. Some recommendations specific to subscriptions are provided on the Subscriptions Framework page.

As indicated on the Subscriptions Framework and SubscriptionTopic resource pages, subscriptions can have more than a single resource in scope (e.g., a subscription that triggers on both Condition and Observation resources, a topic tied to all resources, etc.). If there are filters that do not apply to every resource available in a topic, clients SHOULD ensure that the filterBy.resourceType element is filled appropriately. More detail can be found in the Filters and Resource Types section of the Subscriptions Framework page.

There are three options available when specifying the contents of a Notification: empty, id-only, and full-resource. These options change the level of detail conveyed in the notification Bundle.

When deciding which payload type to request, systems SHOULD consider both ease of processing and security of PHI. To mitigate the risk of information leakage, systems SHOULD use the minimum level of detail consistent with the use case. In practice, id-only provides a good balance between security and performance for many real-world scenarios.

If a server cannot or will not honor a payload type (e.g., will not send full-resource over HTTP), it SHOULD reject the Subscription request. A server MAY instead accept the subscription with modifications and return the accepted version to the client.

When sending event notifications servers SHALL populate the SubscriptionStatus.notificationEvent structure with relevant information, depending on the payload type.

An example notification with an empty payload can be found here.

With the content type of empty, all information about the resources involved in triggering the notification is only available via channels other than the Subscription itself (e.g., the REST API or $events operation). This mitigates many security concerns by both removing most PHI from the notification and allows servers to consolidate authorization and authentication logic. When the subscriber receives a notification of this type, it may query the server to fetch all the relevant resources based on the SubscriptionTopic and applicable filters. The client might include a _lastUpdated query parameter, supplying its last query timestamp to retrieve only the most recent resources. For example, if the notification is for a topic about patient admission, the subscriber will generally query for recent Encounters for a patient or group of patients, then fetch them as needed.

When populating the SubscriptionStatus.notificationEvent structure for a notification with an empty payload, a server SHALL NOT include references to resources (e.g., SubscriptionStatus.notificationEvent.focus and SubscriptionStatus.notificationEvent.additionalContext SHALL NOT be present).

When the content type is empty, notification bundles SHALL NOT contain Bundle.entry elements other than the SubscriptionStatus for the notification.

An example notification with an id-only payload can be found here.

With the content type of id-only, the resources involved in triggering the notification are only available through other channels (e.g., REST API), but notifications include URLs which can be used to access those resources. This allows servers to consolidate authorization and authentication logic, while removing the need for expensive queries by subscribers. When a subscriber receives a notification of this type, it may directly fetch all the relevant resources using the supplied resource ids. For example, if the notification is for a topic about patient admission, the subscriber may fetch the Encounter(s) for a patient or group of patients.

When the content type is id-only, the SubscriptionStatus.notificationEvent structure SHALL include references to the appropriate focus resources in the SubscriptionStatus.notificationEvent.focus element. This provides clients a fixed location to consolidate IDs for all notification types.

Additionally, notification bundles MAY contain, in addition to the SubscriptionStatus, at least one Bundle.entry for each resource relevant to the notification. For example, a notification for a topic based on Encounter MAY include a reference to the Encounter and MAY also include additional resources deemed relevant (e.g., the linked Patient).

An example notification with a full-resource payload can be found here.

With the content type of full-resource, the resources involved in triggering the notification are included in the notification bundle. When a subscriber receives a notification of this type, resources are already present in the bundle, though the subscriber may need to fetch additional resources from the server. For example, the if the notification is for a topic about patient admission, the subscriber may require related Observation resources.

When the content type is full-resource, the SubscriptionStatus.notificationEvent structure SHALL include references to the appropriate focus resources in the SubscriptionStatus.notificationEvent.focus element. This provides clients a fixed location to consolidate IDs for all notification types.

Notification bundles for full-resource subscriptions SHALL contain, in addition to the SubscriptionStatus, at least one Bundle.entry for each resource relevant to the notification. For example, a notification for a topic based on Encounter SHALL include an Encounter and MAY include additional resources deemed relevant (e.g., the relevant Patient). Each Bundle.entry for a full-resource notification SHALL contain a relevant resource in the entry.resource element. If a server cannot include the resource contents due to an issue with a specific notification, the server SHALL populate the entry.request and/or entry.response elements.

Subscriptions allow servers to batch multiple notifications into a single subscription-notification Bundle. For example, if a server has a high-frequency of updates (e.g., several per second), it could be beneficial to combine notifications to reduce traffic and overhead. Note that servers SHALL NOT delay sending notification longer than time span specified by Subscription.heartbeat.

This specification defines a core set of channel types to cover the majority of common use cases. Servers MAY define additional channel types as needed. Below is some guidance for implementers to consider when selecting a channel type.

The FHIR standard makes extensive use of the RESTful model. Given the popularity of REST and widespread adoption, most implementers should consider using REST-hook channels whenever possible. In general, REST-based systems are well-supported (e.g., tooling, infrastructure, documentation, etc.), and will present the lowest bar for implementation.

Websockets are unique in the pre-defined channel types in being the only channel that does not require the client to have an endpoint. Due to this property, the websocket channel is very useful for clients where creating an endpoint would be difficult or impossible (e.g., mobile clients, web-based clients, etc.).

The Email channel is the only channel that could contest REST in non-FHIR implementations. That said, Email communication is often high-latency and is typically used for communication to individuals - not applications. Email channels are particularly useful in the context of these non-application use cases, such as public health notifications. For example, if a public health agency does not have the ability or desire to build a custom RESTful solution (e.g., creating and maintaining an endpoint to receive notifications, as well as software to consume those notifications), it is straightforward to map notifications to email addresses or aliases.

FHIR Messaging is a mechanism defined to allow for non-RESTful communication between FHIR servers and clients. One common use case is when connectivity is an issue (e.g., remote sites that batch all communications when connections are available). This channel defines how to integrate topic-based subscriptions with the FHIR Messaging model.

For use cases that are not well-met by any of the predefined channels, the Subscriptions Framework allows for custom channel definitions. Some examples of scenarios where custom channels may be applicable include:

  • requirements for reliable (guaranteed) delivery (e.g., message queues)
  • implementations using other communication protocols (e.g., protocols specific to a cloud-based provider)
  • implementations using a non-standard serialization format

To receive notifications via HTTP/S POST, a client requests a subscription with the channel type of `rest-hook` (from the subscription-channel-type Code System) and and an endpoint (Subscription.endpoint) with the desired URL. Note that this URL must be accessible by the hosting server.

To convey an event notification, the server POSTs a notification Bundle to the client's nominated endpoint URL per the format requests in the Subscription:

When a subscription is created for a REST Hook channel type, the server SHALL set initial status to requested, pending verification of the nominated endpoint URL. After a successful handshake notification has been sent and accepted, the server SHALL update the status to active. Any errors in the initial handshake SHALL result in the status being changed to error.

An example workflow for establishing a rest-hook subscription is shown below.

Diagram showing a possible workflow for rest-hook subscriptions
  1. Client creates a Subscription with the channelType set to rest-hook.
  2. Server responds with a success code and creates the subscription with a state of requested.
  3. Server performs an HTTP POST to the requested endpoint with a handshake notification.
  4. Client Endpoint accepts the POST and returns a success HTTP code (e.g., 200).
  5. Server sends a notification of type heartbeat at any time (SHOULD at least once per heartbeatPeriod).
  6. Client Endpoint accepts a heartbeat via HTTP POST and returns an HTTP success code (e.g., 200).
  7. Server sends a notification of type event-notification when triggered.
  8. Client Endpoint accepts an event-notification via HTTP POST and returns an HTTP code (e.g., 200).

HTTP is neither a secure nor an encrypted channel, nor does it provide endpoint verification. It is strongly recommended that implementations refuse requests to send notifications to URLs using the HTTP protocol (use HTTPS instead).

While the primary interface for FHIR servers is the FHIR REST API, notifications need not occur via REST. Indeed, some subscribers may be unable to expose an outward-facing HTTP server to receive triggered notifications. For example, a pure client-side Web app or mobile app may want to subscribe to a data feed. This can be accomplished using a websocket notification channel from the subscription-channel-type Code System.

To receive notifications via WebSocket, a client requests a subscription with the channel type (Subscription.channelType) of websocket (from the subscription-channel-type Code System). Note that no endpoint (Subscription.endpoint) is used in websocket channels, since clients connect to a server-hosted websocket URL.

An example workflow for receiving notifications via websockets is shown below:

Diagram showing a possible workflow for websocket subscriptions
  1. Client creates a Subscription with the channelType set to websocket.
  2. Server responds with a success code and creates the subscription.
  3. Client requests a websocket binding token, by invoking the $get-ws-binding-token operation via REST. Note: this call is intended to be repeated as necessary (e.g., prior to a token expiring, a client should request a new one).
  4. Client parses the response of the $get-ws-binding-token operation to extract a token, expiration, and websocket-url.
  5. Client connects to the server via websockets, via the returned websocket-url (wss:// preferred).
  6. Client sends a bind-with-token message via websockets, with the token provided by the server. Note: this operation can be repeated concurrently for multiple subscriptions that share the same websocket-url, and serially for continued operation over a single websocket connection.
  7. Server sends one or more handshake messages via websockets (one per Subscription included in the token). Note: some servers may additionally send one or more event-notification messages at this time (e.g., all messages since last connected, last 'n' messages, etc.). Clients are expected to handle either flow.
  8. Server sends a notification of type heartbeat at any time (SHOULD at least once per heartbeatPeriod).
  9. Server sends a notification of type event-notification when triggered.
  10. If the token is expiring soon and the Client wishes to continue receiving notifications, it should invoke the $get-ws-binding-token operation via REST.
  11. Server responds with at least a token, expiration, and websocket-url. Note that the token and websocket-url MAY be the same or new values, as determined by the server.
  12. If the websocket-url is different from the existing connection, the Client establishes a new connection to the Client Endpoint.
  13. Client sends a bind-with-token message via websockets, with the token provided by the server. Note: this operation can be repeated concurrently for multiple subscriptions that return the same websocket-url, and serially for continued operation over a single websocket connection.
  14. Server sends one or more handshake messages via websockets (one per Subscription included in the token). Note: some servers may additionally send one or more event-notification messages at this time (e.g., all messages since last connected, last 'n' messages, etc.). Clients are expected to handle either flow.
  15. Either the server or the client may close the websocket connection.

Notes:

  • Notifications sent from the server SHALL be in the MIME Type specified by the Subscription.contentType, however, if notifications are requested for multiple subscriptions with different MIME types, the server MAY choose to send all notifications in a single MIME type.
  • Notifications SHALL conform to the content level specified by Subscription.content.
  • When receiving notifications, a connected websocket client has no responsibilities beyond reading the message (e.g., there is no acknowledgement message).

Note to Implementers: The Websocket channel type needs more testing and feedback to ensure all requirements are met before finalizing the specification.

WebSocket security poses several challenges specific to the channel. When implementing websockets for notifications, please keep in mind the following list of some areas of concern:

  • Authentication of WebSockets is not generically interoperable with JWT or other 'Authentication header' protocols - the JavaScript WebSocket API icon does not include the ability to include them.
  • Given client limitations on concurrent WebSocket connections (commonly 6), it is recommended that a single connection be able to authenticate to multiple Subscription resources.
  • Unlike HTTP/S requests, WebSockets can be long-lived. Because of this, the case of revoking access of an active connection must be considered.
  • This specification does not describe the security details of Websocket tokens issued by the $get-ws-binding-token operation. Issued tokens MAY be single-use (e.g., re-establishing a connection require a new token) or reusable until their expiration (e.g., re-establishing a connection can reuse an existing token). Additionally, servers are free to issue tokens as either single-client or shared. Servers SHOULD document their policy on token issuance.

While the primary interface for FHIR servers is the FHIR REST API, notifications need not occur via REST. Indeed, some subscribers may be unable to maintain an outward-facing HTTP server to receive triggered notifications. For example, a public health organization may want to be notified of outbreaks of various illnesses. This can be accomplished using an email notification channel.

To receive notifications via Email, a client requests a subscription with the channel type (Subscription.channelType) of email (from the subscription-channel-type Code System) and an endpoint (Subscription.endpoint) with the desired email URI (e.g., mailto:public_health_notifications@example.org).

The server will send a new message each time a notification should be sent (e.g., per event or per batch). The server will create a message based on the values present in the Subscription.contentType and Subscription.content fields. If a server cannot honor the requested combination, the server should reject the Subscription request rather than send unexpected email messages.

The email channel sets two guidelines about content:

  • Message Body content SHALL be human readable
  • Message Attachments SHOULD be machine readable

Due to these guidelines, the Subscription.contentType refers to the content of the body of the message. Attachment type information can be appended as a MIME parameter, for example:

  • text/plain: a plain-text body with no attachment
  • text/html: an HTML body with no attachment
  • text/plain;attach=application/fhir+json: a plain-text body with a FHIR JSON bundle attached
  • text/html;attach=application/fhir+xml: an HTML body with a FHIR XML bundle attached

The Subscription.content field SHALL be applied to any attachments, and MAY be applied to body contents (depending on server implementation). However, a server must not include a body which exceeds the specified content level. For example, a server may choose to always include a standard message in the body of the message containing no PHI and vary the attachment, but cannot include PHI in the body of an email when the content is set to empty.

An example workflow using the email channel type is included below.

Diagram showing a possible workflow for email subscriptions
  1. Client creates a Subscription with the channelType set to email.
  2. Server MAY respond with a success code and create the subscription with a state of active.
  3. Server MAY respond with a success code and create the subscription with a state of requested.
  4. Server sends an initial message via the specified email server (e.g., verify the request, opt-out instructions, etc.).
  5. Email Server responds with a channel appropriate response code (e.g., 250: OK).
  6. Server may send an email for a notification of type heartbeat at any time (SHOULD at least once per heartbeatPeriod).
  7. Server may send an email for a notification of type event-notification at any time.

Email (SMTP) is not a secure channel. Implementers must ensure that any messages containing PHI have been secured according to their policy requirements (e.g., use of a system such as Direct icon).

There are times when it is desireable to use Subscriptions as a communication channel between FHIR servers that are connected via Messaging instead of REST. This can be accomplished using a Subscription with the channel type of message.

To receive notifications via messaging, a client should request a subscription with the channel type (Subscription.channelType) of message and set the endpoint (Subscription.endpoint) to the destination FHIR server base URL. Note that this URL must be accessible by the hosting server.

The FHIR server hosting the subscription (server) will send FHIR messages to the destination FHIR server (endpoint) as needed. These messages will, as the contents of the message, have a fully-formed subscription-notification Bundle. An example message can be found here.

An example workflow using the message channel type is included below.

Diagram showing a possible workflow for FHIR Messaging subscriptions
  1. Client creates a Subscription with the channelType set to message.
  2. Server responds with a success code and creates the subscription with a state of requested.
  3. Server sends a FHIR Message to the requested endpoint with a handshake notification.
  4. Client Endpoint accepts the Message and returns success.
  5. Server may send a Message containing a notification of type heartbeat at any time (SHOULD at least once per heartbeatPeriod).
  6. Server may send a Message containing a notification of type event-notification at any time.

Note to Implementers: The Messaging channel type needs more testing and feedback to ensure all requirements are met before finalizing the specification.

Servers MAY require that the end-point is white-listed prior to allowing these kinds of subscriptions. Additionally, servers MAY impose authorization/authentication requirements for server to server communication (e.g., certificate pinning, etc.).

Defining a new channel type requires clear communication to implementers of both clients and servers around requirements and expectations. Below are some areas which should be considered when creating a channel. Anyone defining a channel type is encouraged to publish their definition at registry.fhir.org icon.

Note to Implementers: Warning: This section is still in early drafting; feedback from topic authors is welcome to refine the following guidance.

At a minimum, the following items should be defined:

  • A system for Subscription.channelType that reflects the publisher of the definition (e.g., "https://myorg.example.org" instead of "urn:uuid:be35238b-0ed6-4062-93cf-818b8023a103")
  • A generally descriptive code for Subscription.channelType (e.g., 'secure-mq' instead of 'channel')
  • The type of data required in Subscription.endpoint (e.g., URI, etc.)
  • The meaning of Subscription.parameter field values (e.g., REST-hook defines as HTTP headers included in a POST). Note that channels can specify general behavior and/or specific parameters by name.
  • Any additions or variations on MIME types for Subscription.contentType (e.g., email defines this as the email body, with allowable attachments.)
  • Whether handshake notifications are used, and guidance on usage if they are
  • Whether heartbeat notifications are used, and guidance on timings if they are

Defining a channel has security implications. While it is not expected that authors cover all aspects of security, guidance specific to the channel SHOULD be provided. For example, when discussing REST-hooks, this specification includes guidance about using HTTPS over HTTP.

If the channel CANNOT be secured, that should be stated with a warning not to transfer PHI. If the channel is or can be secured, guidance should be given on how configurations relate to PHI safety, for example:

  • Does the channel determine the legitimacy of both endpoints?
  • Is the channel secure from third-party monitoring?

The subscription resource is authored by the client with an initial status of requested. A new subscription is created on the server using the RESTful create or update interaction. After a successful transaction, the client parses the Location header and saves the new Subscription's logical id for use in subsequent operations.

When the server receives a subscription, it SHOULD check that it is prepared to accept/process the subscription. If it is, it sets the subscription to requested and process it like a normal create. If it isn't, it SHOULD return an error with an OperationOutcome instead of processing the create.

The criteria are subject to the same limitations as the client that created it, such as access to patient compartments etc. Note that the subscription MAY remain active after the client access tokens expire.

Once the server has activated the subscription, it sets the status to active (note: the server may do this as it accepts the resource if it wants).

An appropriately authorized client can use search and/or history operations to see what subscriptions are currently active on the server. Once the subscription is no longer desired, the client deletes the subscription from the server.

The server may retry the notification a fixed number of times and/or refer errors to its own alert logs. If the notification fails, the server SHOULD set the status to error and mark the error in the resource. If the notification succeeds, the server SHOULD update the status to active and may remove any error codes. If a subscription fails consistently a server may choose set the subscription status to off and stop trying to send notifications.

Errors a server wishes to make accessible to clients are communicated via SubscriptionStatus.error. Clients MAY receive these errors in notifications sent by the server or detect them by running the $status operation on a subscription. Servers should provide a mechanism for clearing errors (e.g., when resetting a Subscription.status back to requested after an error).

Search parameters for this resource. See also the full list of search parameters for this resource, and check the Extensions registry for search parameters on extensions related to this resource. The common parameters also apply. See Searching for more information about searching in REST, messaging, and services.

NameTypeDescriptionExpressionIn Common
contacttokenContact details for the subscriptionSubscription.contact
content-leveltokenContent level included in notificationsSubscription.content
filter-valuestringFilter value used to narrow notificationsSubscription.filterBy.value
identifiertokenA subscription identifierSubscription.identifier
namestringA human-readable nameSubscription.name
ownerreferenceThe managing entitySubscription.managingEntity
(Practitioner, Organization, CareTeam, Patient, HealthcareService, PractitionerRole, RelatedPerson)
payload NtokenThe mime-type of notificationsSubscription.contentType
statustokenThe current state of the subscriptionSubscription.status
topicuriThe canonical topic url that triggers notificationsSubscription.topic
typetokenThe type of channel for the sent notificationsSubscription.channelType
urluriThe uri that will receive the notificationsSubscription.endpoint