Files

T

hamedandClaude Opus 4.8 2f0131171d feat(doctor): claim captcha+mobile, owner profile delete, admin map zoom fix

- DoctorClaimController: ALTCHA CaptchaGuard on /claim (dev no-op via
  ALTCHA_ENABLED=false); optional `mobile` field must match the logged-in
  user's number (422 ERR_CONFLICT_001 on mismatch)
- DoctorController::delete: now IS_AUTHENTICATED_FULLY — admin (any) or the
  owner of a claimed profile (IDOR-guarded); FK appointment guard kept
- DoctorDetailPage address map: MapController calls map.invalidateSize()
  before flyTo (fixes needing to pick a city twice on a freshly-mounted map);
  geocode retries once (nominatim empty/429 on first hit)
- tests: mobile mismatch, owner-delete allowed + others 403, unclaimed not
  deletable by random user
- docs: doctor-claim.md (mobile+captcha), doctor.md (delete permission)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-11 14:57:41 +03:30

graphify-out

Add manifest.json for graphify-out documentation with metadata for various files

2026-06-30 22:12:26 +03:30

admin.md

feat(doctor): complete IRIMC import feature — claim flow, least-privilege importer, unique import key

2026-07-11 11:39:15 +03:30

appointment-settings.md

fix(security): enforce ownership on 4 IDOR read/bind endpoints (M2-M5)

2026-06-28 20:17:52 +03:30

appointment.md

fix(db): prevent double-booking a slot via unique active_slot_key (H2)

2026-06-28 19:04:54 +03:30

auth.md

Implement ALTCHA captcha service with challenge generation and solution verification

2026-07-10 10:31:59 +03:30

billing.md

fix(billing): bound approved/paid amounts on claim transition (M1)

2026-06-28 20:07:19 +03:30

blog.md

feat: add tag filtering to blog posts and implement JSON_CONTAINS DQL function

2026-06-21 17:34:07 +03:30

captcha.md

Add AST cache files for AltchaService, API documentation, and AltchaService tests

2026-07-10 11:42:23 +03:30

category-import.md

feat: Add City entity methods and migration for title field

2026-07-08 12:19:06 +03:30

clinic-invitation.md

feat: add ClinicInvitationWebController and related templates for handling clinic invitations

2026-07-11 09:33:55 +03:30

clinic-services.md

fix(security): enforce ownership on 4 IDOR read/bind endpoints (M2-M5)

2026-06-28 20:17:52 +03:30

clinic.md

feat: add multi-city representation support and domain context resolution

2026-07-09 07:26:58 +03:30

dashboard.md

feat: implement staff management and subscription system

2026-06-14 22:10:28 +03:30

doctor-claim.md

feat(doctor): claim captcha+mobile, owner profile delete, admin map zoom fix

2026-07-11 14:57:41 +03:30

doctor-import.md

fix(doctor): strip «دکتر» prefix on IRIMC import + name-fix & purge commands

2026-07-11 14:07:18 +03:30

doctor-service.md

Add manifest.json for graphify-out documentation with metadata for various files

2026-06-30 22:12:26 +03:30

doctor.md

feat(doctor): claim captcha+mobile, owner profile delete, admin map zoom fix

2026-07-11 14:57:41 +03:30

insurance.md

Add manifest.json for graphify-out documentation with metadata for various files

2026-06-30 22:12:26 +03:30

location.md

feat: Add City entity methods and migration for title field

2026-07-08 12:19:06 +03:30

patient.md

feat(profile): enhance national_code uniqueness error message with masked mobile number

2026-06-24 12:16:16 +03:30

payment.md

feat: add multi-city representation support and domain context resolution

2026-07-09 07:26:58 +03:30

rating.md

perf(settlement,rating): paginate 3 unbounded list endpoints (M10-M12)

2026-06-28 20:36:41 +03:30

README.md

Add API documentation for Representation, Secretary, Settlement, SMS, Specialty, Tag, and User Profile endpoints

2026-06-11 10:27:27 +03:30

representation.md

feat: add multi-city representation support and domain context resolution

2026-07-09 07:26:58 +03:30

secretary.md

Add AST JSON files for doctor service, tag controller, and SMS log entities

2026-07-01 14:21:08 +03:30

settlement.md

perf(settlement,rating): paginate 3 unbounded list endpoints (M10-M12)

2026-06-28 20:36:41 +03:30

sms.md

fix: update KavehNegarProvider to use GET requests with query parameters to resolve 431 and idle timeout errors

2026-07-08 09:51:30 +03:30

specialty.md

Add manifest.json for graphify-out documentation with metadata for various files

2026-06-30 22:12:26 +03:30

staff.md

feat: enhance staff management and payment gateway features

2026-06-15 11:03:56 +03:30

subscription.md

feat(subscription): implement effective plan logic and update free plan features

2026-07-05 10:46:31 +03:30

tag.md

Add manifest.json for graphify-out documentation with metadata for various files

2026-06-30 22:12:26 +03:30

user-profile.md

feat(profile): enhance national_code uniqueness error message with masked mobile number

2026-06-24 12:16:16 +03:30

README.md

ClinicPro — API Documentation Index

Base URL: https://clinic-pro.ddev.site
API Prefix: /api/v1
Swagger UI: https://clinic-pro.ddev.site/api/doc — user: admin / pass: clinic123

Authentication

All protected endpoints require:

Authorization: Bearer <JWT_TOKEN>

Role	Description
`PUBLIC`	No token required
`AUTH`	Any valid JWT
`ROLE_ADMIN`	Admin user
`ROLE_DOCTOR`	Doctor user
`ROLE_CLINIC`	Clinic owner
`ROLE_SECRETARY`	Secretary

Standard Response Envelope

// Success
{ "success": true, "data": { ... } }

// Paginated
{ "success": true, "data": [...], "meta": { "totalRecords": 100, "totalPages": 5, "currentPage": 1 } }

// Error
{ "success": false, "data": null, "errors": [{ "code": "ERR_XXX_000", "message": "..." }] }

Modules

File	Domain	Endpoints
auth.md	Authentication — OTP, Login, JWT	8
doctor.md	Doctor profile & addresses	11
clinic.md	Clinics	7
clinic-invitation.md	Doctor invitations to clinics	8
appointment.md	Appointments & slot booking	6
appointment-settings.md	Weekly schedule, date overrides, holidays	14
payment.md	Payments (Mellat / Sep)	5
settlement.md	Wallet & settlement requests	7
rating.md	Ratings, comments, likes	9
secretary.md	Doctor secretaries	5
representation.md	Representations (agents)	6
sms.md	SMS send & templates	10
blog.md	Blog posts	6
specialty.md	Medical specialties	5
insurance.md	Insurances & doctor-insurance links	10
doctor-service.md	Doctor services	5
tag.md	Blog tags	5
location.md	Provinces & cities	10
user-profile.md	User medical profile	4
admin.md	Admin dashboard & management	25+

Error Code Reference

Code	Message (FA)	HTTP
`ERR_AUTH_001`	توکن JWT منقضی یا نامعتبر	401
`ERR_AUTH_002`	کد OTP نامعتبر	401
`ERR_AUTH_003`	کد OTP منقضی شده	401
`ERR_AUTH_004`	تعداد تلاش‌های OTP به حد مجاز رسیده	429
`ERR_AUTH_005`	نام کاربری یا رمز عبور اشتباه	401
`ERR_AUTH_006`	دسترسی ممنوع	403
`ERR_VALIDATION_001`	ورودی نامعتبر	422
`ERR_VALIDATION_002`	فیلد الزامی وارد نشده	422
`ERR_NOT_FOUND_001`	منبع درخواستی یافت نشد	404
`ERR_CONFLICT_001`	تداخل: منبع در حال استفاده	409
`ERR_FORBIDDEN_001`	دسترسی به این منبع مجاز نیست	403
`ERR_PAYMENT_001`	درگاه پرداخت در دسترس نیست	503
`ERR_PAYMENT_002`	مبلغ پرداخت نامعتبر	422
`ERR_PAYMENT_003`	وضعیت نوبت برای پرداخت مناسب نیست	422
`ERR_FILE_001`	فرمت فایل مجاز نیست	422
`ERR_SMS_003`	تمپلیت قبلاً ارسال شده	422
`ERR_SECRETARY_001`	پلن فعلی اجازه منشی بیشتر نمی‌دهد	422
`ERR_RATE_LIMIT_001`	درخواست‌های زیاد، بعداً تلاش کنید	429