eProxy

La DevBox-Santé eProxy est le composant permettant aux intégrateurs d’accéder aux Téléservices de Santé (INSi, DMP …) via ProSanté-Connect.

Espace de confiance Proxy ESanté

Toutes les informations officielles se trouvent sur le site de l’ANS : HTTPs://industriels.esante.gouv.fr/produits-et-services/pro-sante-connect/espace-de-confiance-api-pro-sante-connectees

Architecture

Cette architecture interprété dans la DevBox-Santé eProxy :

!theme aws-orange
!define DEVBOX_COLOR #278ef5
!define EPROXY_COLOR #2f78cc
skinparam dpi 150
left to right direction

actor "Utilisateur\n(navigateur / mobile)" as Client


rectangle "Espace de confiance PSC" as EspacePSC {

component "Backend Solution métier" as Backend
card "Docker Network\n(private)" as DockerNet DEVBOX_COLOR {
    component "DevBox-Santé eProxy\n(API / Auth / CIBA / Code flow)\n(port 443)" as proxy EPROXY_COLOR
    database "MongoDB\n(port 27017)" as mongo
    database "Redis(optionnel)\n(port 6379)" as redis
}

cloud "Pro Santé Connect" as PSC
cloud "Fournisseurs Services PSC \nDMP, INSi, ePresc... " as services
}

' Flows
Client --> Backend : HTTPs\n / API
Backend --> proxy : HTTPs (Authentification PSC)
Backend --> proxy : HTTPs (SOAP)
proxy --> PSC : mTLS
proxy --> mongo : TCP 27017\nDB read/write (internal)
proxy --> redis : TCP 6379\nDB read/write (internal)
proxy --> services : mTLS\nAPI calls (SOAP)

' Annotations
note right of proxy
- Stocke tokens PSC en session ou sur Redis (access/refresh/id_token)
- Endpoint /oauth2/ciba -> CIBA
- Endpoint /oauth2/codeflow/{{clientId}} -> Code Flow
  end note

Avec la DevBox-Santé

Lien avec les différents composants de la DevBox-Santé :

!theme aws-orange
!define DEVBOX_COLOR #278ef5
!define EPROXY_COLOR #2f78cc
!define DMP_COLOR #35D9C0
!define MSS_COLOR #DE5D80
!define INS_COLOR #07A2CF
!define CPS_COLOR #D34A3C
!define VITALE_COLOR #5FD67A
!define PSC_COLOR #ff7765
!define APCV_COLOR #c6e66d
!define ANNUAIRE_COLOR #7613e0
!define DATA_COLOR #ffa800
left to right direction

actor "Utilisateur\n(navigateur / mobile)" as Client
rectangle "Espace de confiance PSC" as EspacePSC {

node "Environnement Integrateur" {
    component "Backend Solution métier" as Backend
   card "Docker Network\n(private)" as DockerNet DEVBOX_COLOR {
    together {
        component "DevBox-Santé" as devbox DEVBOX_COLOR {
            component "DevBoxSanté_DMP\n\n Validation/CI-SIS\n CDA/XDS\n SOAP/SAML\n Schematron" as dbx_dmp DMP_COLOR
            component "DevBoxSanté INS\n\n Validation/CI-TLSI-AMO\n SOAP/SAML" as dbx_ins INS_COLOR
        }
    }
        component "DevBox-Santé eProxy\n(API / Auth)" as proxy EPROXY_COLOR
        database "MongoDB" as mongo
        database "Redis" as redis
    }
}

cloud "Pro Santé Connect" as PSC
cloud "Fournisseurs Services PSC \nDMP, INSi, ePresc... " as services
}

' Flows
Client --> Backend : HTTPs
Backend --> devbox : HTTPs (REST) \n/dmp, /insi, /epresc ...
dbx_dmp --> proxy : HTTP (SOAP) 
dbx_ins --> proxy : HTTP (SOAP) 
Backend --> proxy : \n\n\nHTTPs\n(Authentification PSC)

proxy --> PSC : mTLS
proxy --> mongo 
proxy --> redis  
proxy --> services : mTLS\nAPI calls