# description
CapabilityStatement for the currently implemented read-only DiSy FHIR API endpoints used by the patient portal.

# rest[].documentation
Read-only endpoint. All business resources are returned from stored procedures. Non-GET methods return OperationOutcome/not-supported.

# rest[].security.description
Authentication mode is configurable: legacy_api_key for the current test portal, rb_trusted when OAuth/token validation is handled by the Resource Broker/proxy, or bearer_introspection when this API validates Bearer tokens itself. MedMij-Request-ID and Bearer headers can additionally be enforced via medmij.mode=enforce.

# rest[].resource[].searchParam[].documentation
BSN/patient identifier in this portal API.

# rest[].resource[].searchParam[].documentation
category=laboratory is supported for laboratory results.

# rest[].resource[].searchParam[].documentation
Returns practitioners related to this patient context.

# rest[].resource[].searchParam[].documentation
Returns organizations related to this patient context.

# rest[].resource[].searchParam[].documentation
BSN; resolved to the internal patient key after central authorization.