001/*
002 * #%L
003 * HAPI FHIR - Core Library
004 * %%
005 * Copyright (C) 2014 - 2024 Smile CDR, Inc.
006 * %%
007 * Licensed under the Apache License, Version 2.0 (the "License");
008 * you may not use this file except in compliance with the License.
009 * You may obtain a copy of the License at
010 *
011 *      http://www.apache.org/licenses/LICENSE-2.0
012 *
013 * Unless required by applicable law or agreed to in writing, software
014 * distributed under the License is distributed on an "AS IS" BASIS,
015 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
016 * See the License for the specific language governing permissions and
017 * limitations under the License.
018 * #L%
019 */
020package ca.uhn.fhir.rest.api;
021
022import java.nio.charset.Charset;
023import java.nio.charset.StandardCharsets;
024import java.util.Arrays;
025import java.util.Collections;
026import java.util.HashMap;
027import java.util.HashSet;
028import java.util.Map;
029import java.util.Set;
030
031import static org.apache.commons.lang3.StringUtils.defaultIfBlank;
032
033public class Constants {
034
035        public static final String CT_TEXT_CSV = "text/csv";
036        public static final String HEADER_REQUEST_ID = "X-Request-ID";
037        public static final String HEADER_REQUEST_SOURCE = "X-Request-Source";
038        public static final String CACHE_CONTROL_MAX_RESULTS = "max-results";
039        public static final String CACHE_CONTROL_NO_CACHE = "no-cache";
040        public static final String CACHE_CONTROL_NO_STORE = "no-store";
041        public static final String CHARSET_NAME_UTF8 = "UTF-8";
042        public static final Charset CHARSET_UTF8;
043        public static final String CHARSET_UTF8_CTSUFFIX = "; charset=" + CHARSET_NAME_UTF8;
044        /**
045         * Contains a standard set of headers which are used by FHIR / HAPI FHIR, and therefore
046         * would make a useful set for CORS AllowedHeader declarations
047         */
048        public static final Set<String> CORS_ALLOWED_HEADERS;
049        /**
050         * Contains a standard set of HTTP Methods which are used by FHIR / HAPI FHIR, and therefore
051         * would make a useful set for CORS AllowedMethod declarations
052         */
053        public static final Set<String> CORS_ALLWED_METHODS;
054
055        public static final String CT_FHIR_JSON = "application/json+fhir";
056        public static final String CT_RDF_TURTLE = "application/x-turtle";
057        /**
058         * The FHIR MimeType for JSON encoding in FHIR DSTU3+
059         */
060        public static final String CT_FHIR_JSON_NEW = "application/fhir+json";
061
062        public static final String CT_FHIR_XML = "application/xml+fhir";
063
064        /**
065         * The FHIR MimeType for XML encoding in FHIR DSTU3+
066         */
067        public static final String CT_FHIR_XML_NEW = "application/fhir+xml";
068
069        public static final String CT_HTML = "text/html";
070        public static final String CT_HTML_WITH_UTF8 = "text/html" + CHARSET_UTF8_CTSUFFIX;
071        public static final String CT_JSON = "application/json";
072        public static final String CT_GRAPHQL = "application/graphql";
073        public static final String CT_JSON_PATCH = "application/json-patch+json";
074        public static final String CT_OCTET_STREAM = "application/octet-stream";
075        public static final String CT_TEXT = "text/plain";
076        public static final String CT_TEXT_WITH_UTF8 = CT_TEXT + CHARSET_UTF8_CTSUFFIX;
077        public static final String CT_TEXT_CDA = "text/xml+cda";
078        public static final String CT_X_FORM_URLENCODED = "application/x-www-form-urlencoded";
079        public static final String CT_XML = "application/xml";
080        public static final String CT_XML_PATCH = "application/xml-patch+xml";
081        public static final String ENCODING_GZIP = "gzip";
082        public static final String EXTOP_PROCESS_MESSAGE = "$process-message"; // Used in messaging
083        public static final String EXTOP_VALIDATE = "$validate";
084        public static final String EXTOP_VALIDATE_MODE = "mode";
085        public static final String EXTOP_VALIDATE_PROFILE = "profile";
086        public static final String EXTOP_VALIDATE_RESOURCE = "resource";
087        public static final String FORMAT_HTML = "html";
088        public static final String FORMAT_JSON = "json";
089        public static final String FORMAT_NDJSON = "ndjson";
090        public static final String FORMAT_XML = "xml";
091        public static final String CT_RDF_TURTLE_LEGACY = "text/turtle";
092        public static final String FORMAT_TURTLE = "ttl";
093
094        /**
095         * "text/html" and "html"
096         */
097        public static final Set<String> FORMATS_HTML;
098
099        public static final String FORMATS_HTML_JSON = "html/json";
100        public static final String FORMATS_HTML_XML = "html/xml";
101        public static final String FORMATS_HTML_TTL = "html/turtle";
102        public static final String HEADER_ACCEPT = "Accept";
103        public static final String HEADER_ACCEPT_ENCODING = "Accept-Encoding";
104        public static final String HEADER_ACCEPT_VALUE_JSON_NON_LEGACY =
105                        CT_FHIR_JSON_NEW + ";q=1.0, " + CT_FHIR_JSON + ";q=0.9";
106        public static final String HEADER_ACCEPT_VALUE_XML_NON_LEGACY =
107                        CT_FHIR_XML_NEW + ";q=1.0, " + CT_FHIR_XML + ";q=0.9";
108        public static final String HEADER_ACCEPT_VALUE_XML_OR_JSON_LEGACY =
109                        CT_FHIR_XML + ";q=1.0, " + CT_FHIR_JSON + ";q=1.0";
110        public static final String HEADER_ACCEPT_VALUE_XML_OR_JSON_NON_LEGACY = CT_FHIR_XML_NEW + ";q=1.0, "
111                        + CT_FHIR_JSON_NEW + ";q=1.0, " + HEADER_ACCEPT_VALUE_XML_OR_JSON_LEGACY.replace("1.0", "0.9");
112        public static final String HEADER_ALLOW = "Allow";
113        public static final String HEADER_AUTHORIZATION = "Authorization";
114        public static final String HEADER_AUTHORIZATION_VALPREFIX_BASIC = "Basic ";
115        public static final String HEADER_AUTHORIZATION_VALPREFIX_BEARER = "Bearer ";
116        public static final String HEADER_CACHE_CONTROL = "Cache-Control";
117        public static final String HEADER_CONTENT_DISPOSITION = "Content-Disposition";
118        public static final String HEADER_CONTENT_ENCODING = "Content-Encoding";
119        public static final String HEADER_CONTENT_LOCATION = "Content-Location";
120        public static final String HEADER_CONTENT_LOCATION_LC = HEADER_CONTENT_LOCATION.toLowerCase();
121        public static final String HEADER_CONTENT_TYPE = "Content-Type";
122        public static final String HEADER_CONTENT_TYPE_LC = HEADER_CONTENT_TYPE.toLowerCase();
123        public static final String HEADER_COOKIE = "Cookie";
124        public static final String HEADER_CORS_ALLOW_METHODS = "Access-Control-Allow-Methods";
125        public static final String HEADER_CORS_ALLOW_ORIGIN = "Access-Control-Allow-Origin";
126        public static final String HEADER_CORS_EXPOSE_HEADERS = "Access-Control-Expose-Headers";
127        public static final String HEADER_ETAG = "ETag";
128        public static final String HEADER_ETAG_LC = HEADER_ETAG.toLowerCase();
129        public static final String HEADER_IF_MATCH = "If-Match";
130        public static final String HEADER_IF_MATCH_LC = HEADER_IF_MATCH.toLowerCase();
131        public static final String HEADER_IF_MODIFIED_SINCE = "If-Modified-Since";
132        public static final String HEADER_IF_MODIFIED_SINCE_LC = HEADER_IF_MODIFIED_SINCE.toLowerCase();
133        public static final String HEADER_IF_NONE_EXIST = "If-None-Exist";
134        public static final String HEADER_IF_NONE_EXIST_LC = HEADER_IF_NONE_EXIST.toLowerCase();
135        public static final String HEADER_IF_NONE_MATCH = "If-None-Match";
136        public static final String HEADER_IF_NONE_MATCH_LC = HEADER_IF_NONE_MATCH.toLowerCase();
137        public static final String HEADER_LAST_MODIFIED = "Last-Modified";
138        public static final String HEADER_LAST_MODIFIED_LOWERCASE = HEADER_LAST_MODIFIED.toLowerCase();
139        public static final String HEADER_LOCATION = "Location";
140        public static final String HEADER_LOCATION_LC = HEADER_LOCATION.toLowerCase();
141        public static final String HEADER_ORIGIN = "Origin";
142        public static final String HEADER_PREFER = "Prefer";
143        public static final String HEADER_PREFER_HANDLING = "handling";
144        public static final String HEADER_PREFER_HANDLING_STRICT = "strict";
145        public static final String HEADER_PREFER_HANDLING_LENIENT = "lenient";
146        public static final String HEADER_PREFER_RETURN = "return";
147        public static final String HEADER_PREFER_RETURN_MINIMAL = "minimal";
148        public static final String HEADER_PREFER_RETURN_REPRESENTATION = "representation";
149        public static final String HEADER_PREFER_RETURN_OPERATION_OUTCOME = "OperationOutcome";
150        public static final String HEADER_SUFFIX_CT_UTF_8 = "; charset=UTF-8";
151        public static final String HEADERVALUE_CORS_ALLOW_METHODS_ALL = "GET, POST, PUT, DELETE, OPTIONS";
152        public static final String HEADER_REWRITE_HISTORY = "X-Rewrite-History";
153        public static final String HEADER_RETRY_ON_VERSION_CONFLICT = "X-Retry-On-Version-Conflict";
154        public static final String HEADER_MAX_RETRIES = "max-retries";
155        public static final String HEADER_RETRY = "retry";
156        public static final Map<Integer, String> HTTP_STATUS_NAMES;
157        public static final String LINK_FHIR_BASE = "fhir-base";
158        public static final String LINK_FIRST = "first";
159        public static final String LINK_LAST = "last";
160        public static final String LINK_NEXT = "next";
161        public static final String LINK_PREVIOUS = "previous";
162        public static final String LINK_SELF = "self";
163        public static final String OPENSEARCH_NS_OLDER = "http://purl.org/atompub/tombstones/1.0";
164        public static final String PARAM_ASYNC = "async"; // Used in messaging
165        public static final String PARAM_AT = "_at";
166        public static final String PARAM_ID = "_id";
167        /**
168         * Used in paging links
169         */
170        public static final String PARAM_BUNDLETYPE = "_bundletype";
171
172        public static final String PARAM_FILTER = "_filter";
173        public static final String PARAM_CONTAINED = "_contained";
174        public static final String PARAM_CONTAINED_TYPE = "_containedType";
175        public static final String PARAM_CONTENT = "_content";
176        public static final String PARAM_COUNT = "_count";
177        public static final String PARAM_OFFSET = "_offset";
178        public static final String PARAM_DELETE = "_delete";
179        public static final String PARAM_ELEMENTS = "_elements";
180        public static final String PARAM_ELEMENTS_EXCLUDE_MODIFIER = ":exclude";
181        public static final String PARAM_FORMAT = "_format";
182        public static final String PARAM_HAS = "_has";
183        public static final String PARAM_HISTORY = "_history";
184        public static final String PARAM_INCLUDE = "_include";
185        /**
186         * @since 7.0.0
187         */
188        public static final String PARAM_LANGUAGE = "_language";
189
190        public static final String PARAM_INCLUDE_QUALIFIER_RECURSE = ":recurse";
191        public static final String PARAM_INCLUDE_RECURSE = "_include" + PARAM_INCLUDE_QUALIFIER_RECURSE;
192        public static final String PARAM_INCLUDE_QUALIFIER_ITERATE = ":iterate";
193        public static final String PARAM_INCLUDE_ITERATE = "_include" + PARAM_INCLUDE_QUALIFIER_ITERATE;
194        public static final String PARAM_LASTUPDATED = "_lastUpdated";
195        public static final String PARAM_NARRATIVE = "_narrative";
196        public static final String PARAM_PAGINGACTION = "_getpages";
197        public static final String PARAM_PAGINGOFFSET = "_getpagesoffset";
198        public static final String PARAM_PRETTY = "_pretty";
199        public static final String PARAM_PRETTY_VALUE_FALSE = "false";
200        public static final String PARAM_PRETTY_VALUE_TRUE = "true";
201        public static final String PARAM_PROFILE = "_profile";
202        public static final String PARAM_PID = "_pid";
203
204        public static final String PARAM_QUERY = "_query";
205        public static final String PARAM_RESPONSE_URL = "response-url"; // Used in messaging
206        public static final String PARAM_REVINCLUDE = "_revinclude";
207        public static final String PARAM_REVINCLUDE_RECURSE = PARAM_REVINCLUDE + PARAM_INCLUDE_QUALIFIER_RECURSE;
208        public static final String PARAM_REVINCLUDE_ITERATE = PARAM_REVINCLUDE + PARAM_INCLUDE_QUALIFIER_ITERATE;
209        public static final String PARAM_SEARCH = "_search";
210        public static final String PARAM_SECURITY = "_security";
211        public static final String PARAM_SINCE = "_since";
212        public static final String PARAM_SORT = "_sort";
213        public static final String PARAM_SORT_ASC = "_sort:asc";
214        public static final String PARAM_SORT_DESC = "_sort:desc";
215        public static final String PARAM_SOURCE = "_source";
216        public static final String PARAM_SUMMARY = "_summary";
217        public static final String PARAM_TAG = "_tag";
218        public static final String PARAM_LIST = "_list";
219        public static final String PARAM_TAGS = "_tags";
220        public static final String PARAM_TEXT = "_text";
221        public static final String PARAM_VALIDATE = "_validate";
222        public static final String PARAM_MDM = "_mdm";
223
224        public static final String PARAMQUALIFIER_MISSING = ":missing";
225        public static final String PARAMQUALIFIER_MISSING_FALSE = "false";
226        public static final String PARAMQUALIFIER_MISSING_TRUE = "true";
227        public static final String PARAMQUALIFIER_STRING_TEXT = ":text";
228        public static final String PARAMQUALIFIER_STRING_CONTAINS = ":contains";
229        public static final String PARAMQUALIFIER_STRING_EXACT = ":exact";
230        public static final String PARAMQUALIFIER_TOKEN_TEXT = ":text";
231        public static final String PARAMQUALIFIER_MDM = ":mdm";
232        public static final String PARAMQUALIFIER_NICKNAME = ":nickname";
233        public static final String PARAMQUALIFIER_TOKEN_OF_TYPE = ":of-type";
234        public static final String PARAMQUALIFIER_TOKEN_NOT = ":not";
235        public static final int STATUS_HTTP_200_OK = 200;
236        public static final int STATUS_HTTP_201_CREATED = 201;
237        public static final int STATUS_HTTP_204_NO_CONTENT = 204;
238        public static final int STATUS_HTTP_304_NOT_MODIFIED = 304;
239        public static final int STATUS_HTTP_400_BAD_REQUEST = 400;
240        public static final int STATUS_HTTP_401_CLIENT_UNAUTHORIZED = 401;
241        public static final int STATUS_HTTP_403_FORBIDDEN = 403;
242
243        public static final int STATUS_HTTP_404_NOT_FOUND = 404;
244        public static final int STATUS_HTTP_405_METHOD_NOT_ALLOWED = 405;
245        public static final int STATUS_HTTP_409_CONFLICT = 409;
246        public static final int STATUS_HTTP_410_GONE = 410;
247        public static final int STATUS_HTTP_412_PRECONDITION_FAILED = 412;
248        public static final int STATUS_HTTP_422_UNPROCESSABLE_ENTITY = 422;
249        public static final int STATUS_HTTP_500_INTERNAL_ERROR = 500;
250        public static final int STATUS_HTTP_501_NOT_IMPLEMENTED = 501;
251        public static final String TAG_SUBSETTED_CODE = "SUBSETTED";
252        public static final String TAG_SUBSETTED_SYSTEM_DSTU3 = "http://hl7.org/fhir/v3/ObservationValue";
253        public static final String TAG_SUBSETTED_SYSTEM_R4 = "http://terminology.hl7.org/CodeSystem/v3-ObservationValue";
254        public static final String URL_TOKEN_HISTORY = "_history";
255        public static final String URL_TOKEN_METADATA = "metadata";
256        public static final String OO_INFOSTATUS_PROCESSING = "processing";
257        public static final String PARAM_GRAPHQL_QUERY = "query";
258        public static final String HEADER_X_CACHE = "X-Cache";
259        public static final String HEADER_X_SECURITY_CONTEXT = "X-Security-Context";
260        public static final String POWERED_BY_HEADER = "X-Powered-By";
261        public static final Charset CHARSET_US_ASCII;
262        public static final String PARAM_PAGEID = "_pageId";
263        public static final String JAVA_VALIDATOR_DETAILS_SYSTEM = "http://hl7.org/fhir/java-core-messageId";
264        public static final String PARAM_SEARCH_TOTAL_MODE = "_total";
265        public static final String CAPABILITYSTATEMENT_WEBSOCKET_URL =
266                        "http://hl7.org/fhir/StructureDefinition/capabilitystatement-websocket";
267        public static final String PARAMETER_CASCADE_DELETE = "_cascade";
268        public static final String PARAMETER_CASCADE_DELETE_MAX_ROUNDS = "_maxRounds";
269        public static final String HEADER_CASCADE = "X-Cascade";
270        public static final String HEADER_CASCADE_MAX_ROUNDS = "max-rounds";
271        public static final String CASCADE_DELETE = "delete";
272        public static final int MAX_RESOURCE_NAME_LENGTH = 100;
273        public static final String CACHE_CONTROL_PRIVATE = "private";
274        public static final String CT_FHIR_NDJSON = "application/fhir+ndjson";
275        public static final String CT_APP_NDJSON = "application/ndjson";
276        public static final String CT_NDJSON = "ndjson";
277        public static final Set<String> CTS_NDJSON;
278        public static final String HEADER_PREFER_RESPOND_ASYNC = "respond-async";
279        public static final int STATUS_HTTP_412_PAYLOAD_TOO_LARGE = 413;
280        public static final String OPERATION_NAME_GRAPHQL = "$graphql";
281        /**
282         * Note that this constant is used in a number of places including DB column lengths! Be careful if you decide to change it.
283         */
284        public static final int REQUEST_ID_LENGTH = 16;
285
286        public static final int STATUS_HTTP_202_ACCEPTED = 202;
287        public static final String HEADER_X_PROGRESS = "X-Progress";
288        public static final String HEADER_RETRY_AFTER = "Retry-After";
289        /**
290         * Operation name for the $lastn operation
291         */
292        public static final String OPERATION_LASTN = "$lastn";
293
294        public static final String PARAM_FHIRPATH = "_fhirpath";
295        public static final String PARAM_TYPE = "_type";
296
297        /**
298         * {@link org.hl7.fhir.instance.model.api.IBaseResource#getUserData(String) User metadata key} used
299         * to store the partition ID (if any) associated with the given resource. Value for this
300         * key will be of type {@link ca.uhn.fhir.interceptor.model.RequestPartitionId}.
301         */
302        public static final String RESOURCE_PARTITION_ID = Constants.class.getName() + "_RESOURCE_PARTITION_ID";
303
304        public static final String PARTITION_IDS = "partitionIds";
305        public static final String CT_APPLICATION_GZIP = "application/gzip";
306        public static final String[] EMPTY_STRING_ARRAY = new String[0];
307        public static final String SUBSCRIPTION_MULTITYPE_PREFIX = "[";
308        public static final String SUBSCRIPTION_MULTITYPE_SUFFIX = "]";
309        public static final String SUBSCRIPTION_MULTITYPE_STAR = "*";
310        public static final String SUBSCRIPTION_STAR_CRITERIA =
311                        SUBSCRIPTION_MULTITYPE_PREFIX + SUBSCRIPTION_MULTITYPE_STAR + SUBSCRIPTION_MULTITYPE_SUFFIX;
312        public static final String INCLUDE_STAR = "*";
313        public static final String PARAMQUALIFIER_TOKEN_IN = ":in";
314        public static final String PARAMQUALIFIER_TOKEN_NOT_IN = ":not-in";
315        public static final String PARAMQUALIFIER_TOKEN_ABOVE = ":above";
316        public static final String PARAMQUALIFIER_TOKEN_BELOW = ":below";
317        /**
318         * The number of characters in a UUID (36)
319         */
320        public static final int UUID_LENGTH = 36;
321
322        public static final String BULK_DATA_ACCESS_IG_URL =
323                        "http://hl7.org/fhir/uv/bulkdata/CapabilityStatement/bulk-data";
324
325        /**
326         * Application configuration key used to enable or disable Hibernate Envers.
327         */
328        public static final String HIBERNATE_INTEGRATION_ENVERS_ENABLED = "hibernate.integration.envers.enabled";
329
330        static {
331                CHARSET_UTF8 = StandardCharsets.UTF_8;
332                CHARSET_US_ASCII = StandardCharsets.ISO_8859_1;
333
334                HashSet<String> ctsNdjson = new HashSet<>();
335                ctsNdjson.add(CT_FHIR_NDJSON);
336                ctsNdjson.add(CT_APP_NDJSON);
337                ctsNdjson.add(CT_NDJSON);
338                CTS_NDJSON = Collections.unmodifiableSet(ctsNdjson);
339
340                HashMap<Integer, String> statusNames = new HashMap<>();
341                statusNames.put(200, "OK");
342                statusNames.put(201, "Created");
343                statusNames.put(202, "Accepted");
344                statusNames.put(203, "Non-Authoritative Information");
345                statusNames.put(204, "No Content");
346                statusNames.put(205, "Reset Content");
347                statusNames.put(206, "Partial Content");
348                statusNames.put(207, "Multi-Status");
349                statusNames.put(208, "Already Reported");
350                statusNames.put(226, "IM Used");
351                statusNames.put(300, "Multiple Choices");
352                statusNames.put(301, "Moved Permanently");
353                statusNames.put(302, "Found");
354                statusNames.put(303, "See Other");
355                statusNames.put(304, "Not Modified");
356                statusNames.put(305, "Use Proxy");
357                statusNames.put(307, "Temporary Redirect");
358                statusNames.put(308, "Permanent Redirect");
359                statusNames.put(400, "Bad Request");
360                statusNames.put(401, "Unauthorized");
361                statusNames.put(402, "Payment Required");
362                statusNames.put(403, "Forbidden");
363                statusNames.put(404, "Not Found");
364                statusNames.put(405, "Method Not Allowed");
365                statusNames.put(406, "Not Acceptable");
366                statusNames.put(407, "Proxy Authentication Required");
367                statusNames.put(408, "Request Timeout");
368                statusNames.put(409, "Conflict");
369                statusNames.put(410, "Gone");
370                statusNames.put(411, "Length Required");
371                statusNames.put(412, "Precondition Failed");
372                statusNames.put(413, "Payload Too Large");
373                statusNames.put(414, "URI Too Long");
374                statusNames.put(415, "Unsupported Media Type");
375                statusNames.put(416, "Requested range not satisfiable");
376                statusNames.put(417, "Expectation Failed");
377                statusNames.put(418, "I'm a teapot");
378                statusNames.put(419, "Insufficient Space On Resource");
379                statusNames.put(420, "Method Failure");
380                statusNames.put(421, "Destination Locked");
381                statusNames.put(422, "Unprocessable Entity");
382                statusNames.put(423, "Locked");
383                statusNames.put(424, "Failed Dependency");
384                statusNames.put(426, "Upgrade Required");
385                statusNames.put(428, "Precondition Required");
386                statusNames.put(429, "Too Many Requests");
387                statusNames.put(431, "Request Header Fields Too Large");
388                statusNames.put(500, "Internal Server Error");
389                statusNames.put(501, "Not Implemented");
390                statusNames.put(502, "Bad Gateway");
391                statusNames.put(503, "Service Unavailable");
392                statusNames.put(504, "Gateway Timeout");
393                statusNames.put(505, "HTTP Version not supported");
394                statusNames.put(506, "Variant Also Negotiates");
395                statusNames.put(507, "Insufficient Storage");
396                statusNames.put(508, "Loop Detected");
397                statusNames.put(509, "Bandwidth Limit Exceeded");
398                statusNames.put(510, "Not Extended");
399                statusNames.put(511, "Network Authentication Required");
400                HTTP_STATUS_NAMES = Collections.unmodifiableMap(statusNames);
401
402                Set<String> formatsHtml = new HashSet<>();
403                formatsHtml.add(CT_HTML);
404                formatsHtml.add(FORMAT_HTML);
405                FORMATS_HTML = Collections.unmodifiableSet(formatsHtml);
406
407                // *********************************************************
408                // Update CorsInterceptor's constructor documentation if you change these:
409                // *********************************************************
410                HashSet<String> corsAllowedHeaders = new HashSet<>();
411                corsAllowedHeaders.add("Accept");
412                corsAllowedHeaders.add("Access-Control-Request-Headers");
413                corsAllowedHeaders.add("Access-Control-Request-Method");
414                corsAllowedHeaders.add("Cache-Control");
415                corsAllowedHeaders.add("Content-Type");
416                corsAllowedHeaders.add("Origin");
417                corsAllowedHeaders.add("Prefer");
418                corsAllowedHeaders.add("X-FHIR-Starter");
419                corsAllowedHeaders.add("X-Requested-With");
420                CORS_ALLOWED_HEADERS = Collections.unmodifiableSet(corsAllowedHeaders);
421
422                // *********************************************************
423                // Update CorsInterceptor's constructor documentation if you change these:
424                // *********************************************************
425                HashSet<String> corsAllowedMethods = new HashSet<>();
426                corsAllowedMethods.addAll(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH"));
427                CORS_ALLWED_METHODS = Collections.unmodifiableSet(corsAllowedMethods);
428        }
429
430        public static String codeSystemWithDefaultDescription(String theSystem) {
431                return defaultIfBlank(theSystem, "(none)");
432        }
433}