A notification sent by a data service provider to a data service consumer in accordance to an existing subscription.

Data service consumers MUST support a POST call to a /notifications endpoint to be able to receive notifications from data service providers

Request

Authorisation

The data service consumer is responsible for determining a suitable authorisation policy for their notifications resources. See Autorisatie for more information.

Parameters

For information about the parameters that are common to the trust framework’s API’s see Generic API Requirements, and for parameters common to all notification methods, see /notifications.

Data service consumers MUST validate that the HTTP body of a POST request to a /notifications endpoint contains a valid notification object

Example request body for a POST /notifications call

{
  "id" : "not_123",
  "resource_type" : "notification",
  "date" : "2022-09-21T10:23:48Z",
  "consumer_id" : "EU.EORI.NL000123456",
  "provider_id" : "EU.EORI.NL000345678",
  "subscription_id" : "sub_123",
  "description" : "Detailed description of the notification",
  "event" : [
    {
      "id" : "eve_123",
      "resource_type" : "event",
      "event_type" : "Modified",
      "date" : "2022-09-21T10:23:37Z",
      "description" : "Detailed description of the event",
      "event_data" : "Data record xyz has been modified by zyx
    }
  ]
}

Responses

Authorisation

The data service provider is responsible for determining a suitable authorisation policy for the response to a sent notification. See Autorisatie for more information. Due to possible non-repudiation requirements for notifications, responses to notifications may require authentication and authorisation

200 OK

Successful, confirmation that the notification has been received

Data service consumer MUST respond with a 200 OK to a successful POST call to a /notification endpoint