Saltar al contenido

Create a work detail share

Módulo Identity

POST/work-detail-sharesworkDetailShares.create

The caller's consent to share chosen categories of their work details with the org that engages them, for one engagement, under a work_details_sharing consent record (Section 14.3). Creating a share for an engagement that already has one replaces its categories; fewer categories is a partial revocation. Revoke ends it at once and withdraws the org's consent with its last share. Shares cannot be made once the engagement is Complete or Canceled (422 work_detail_share_closed). The person and the engaging org read shares; only the person writes them. Creates a work detail share. Requires `Idempotency-Key`; a replay returns the original response. The organization is derived from the credential or the parent row, never from the body.

  • Requiere la capacidad me.work_details.write.
  • Alcances de OAuth: me.
  • Envía el encabezado Idempotency-Key. Una repetición con la misma clave devuelve la respuesta original.
  • Estados de error: 400, 401, 409, 422, 429. Los errores son detalles de problema RFC 9457.

Cuerpo de la solicitud: WorkDetailShareCreate

workDetailShares.create: WorkDetailShareCreate
CampoTipoObligatorioDescripción
engagement_idstring (uuid)SíIdentifier of the engagement the share serves; the caller must be its person.
categoriesarray of WorkDetailCategorySíCategories shared.
{
  "engagement_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "categories": [
    "Dietary Needs",
    "Emergency Contacts"
  ]
}

Respuesta 201: WorkDetailShare

workDetailShares.create: WorkDetailShare
CampoTipoObligatorioDescripción
idstring (uuid)SíIdentifier of the work detail share.
org_idstring (uuid)SíIdentifier of the owning organization, derived from the parent row and never accepted from the caller.
created_atstring (date-time)SíWhen the row was created.
created_bystring (uuid) | nullSíIdentifier of the person who created the row.
updated_atstring (date-time)SíWhen the row was last updated.
updated_bystring (uuid) | nullSíIdentifier of the person who last updated the row.
engagement_idstring (uuid)SíIdentifier of the engagement the share serves; the caller must be its person.
person_idstring (uuid)SíIdentifier of the person sharing.
consent_record_idstring (uuid)SíIdentifier of the work_details_sharing consent record for the org.
categoriesarray of WorkDetailCategorySíCategories shared.
shared_atstring (date-time)SíWhen the share was given.
revoked_atstring (date-time) | nullSíWhen the person revoked it; null while it stands.
{
  "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "org_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "created_at": "2026-10-08T14:30:00Z",
  "created_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "updated_at": "2026-10-08T14:30:00Z",
  "updated_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "engagement_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "person_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "consent_record_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "categories": [
    "Dietary Needs",
    "Emergency Contacts"
  ],
  "shared_at": "2026-10-08T14:30:00Z",
  "revoked_at": "2026-10-08T14:30:00Z"
}

Ejemplos de código

curl -X POST "$XOS_BASE_URL/work-detail-shares" \
  -H "Authorization: Bearer $XOS_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"engagement_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f","categories":["Dietary Needs","Emergency Contacts"]}'
const { data } = await xos.workDetailShares.create({
    "engagement_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
    "categories": [
      "Dietary Needs",
      "Emergency Contacts"
    ]
  });
response = xos.work_detail_shares.create({"engagement_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f", "categories": ["Dietary Needs", "Emergency Contacts"]})
xos work-detail-shares create --data '{"engagement_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f","categories":["Dietary Needs","Emergency Contacts"]}'