Uso de APi Jorform con HIPAA

  • Daniel
    Fecha de consulta 13 de septiembre de 2023, 10:37

    Buenas tardes,

    Un cliente solicita que obtengamos los formularios a través de la API y descarguemos los archivos subidos por los usuarios adjuntos en cada formulario. Según la documentación de la API directamente con la URL que llega al obtener los formularios a través de ella se podrían descargar pero en este caso el cliente tiene habilitado HIPAA en los formularios y de esta forma no podemos acceder a dichos archivos directamente con la URL. En la documentación no figura nada al respecto del procedimiento para acceder a esta información a través de las API cuando hay este tipo de seguridad. ¿Sabrían indicarme donde me podría documentar sobre ello para implementar la descarga de los ficheros?

    Accedo a través de las librerías de C#, adjunto un ejemplo del código utilizado.

    Gracias,

    Jotform Thread 5531867 Screenshot
  • Lorenz Jotform Support
    Fecha de respuesta 13 de septiembre de 2023, 21:27

    Hi Daniel,

    Thanks for reaching out to Jotform Support. I'd like to let you know that I am using a translation tool to provide assistance, but if you prefer to receive help in your native language, we can forward this ticket to our Spanish Team. However, keep in mind that it could take longer to receive a response from them. 

    With that said, since you're using HIPAA-compliant forms, you can use hipaa-api domain in your API endpoint to fetch submission uploads through API.

    https://hipaa-api.jotform.com/form/{formId}/files?apiKey={apiKey}


    For more details, you can check out our API documentation here.

    Let us know if there's anything else you would like to ask.

  • Daniel
    Fecha de respuesta 14 de septiembre de 2023, 2:33

    Thanks for the response but the problem is other, with https://hipaa-api.jotform.com/form/{formId}/files?apiKey={apiKey} I fetch the list of submission uploads but I dont need a list of files, I need to download the files. Its possible with the API in HIPAA-compliant forms?

    In the list of files that I fech with this API call I got a URL for every file to download it, like https://www.jotform.com/uploads/{Client}/{formId}/{submission}/{file}.zip

    If my client use this URL in the web browser loged in Jotform, it starts the file download but you need to be loged in the web site. Its possible to make this download with the API or directly from the URL with authentication in the code? If I need authentication in the HTTP request, what type of authentication would it be?

    Thanks and sorry for my english!

  • Afzal Jotform Support
    Fecha de respuesta 14 de septiembre de 2023, 9:40

    Hi Daniel,

    Thanks for getting back to us. Unfortunately, it is not possible to download the uploaded file directly using API or any third-party integration. However, you can turn off the setting so you can download the file without logging into your Jotform account(Please note it is not possible on the HIPAA accounts). To stop our system from asking you to login to see/download your submission attachments, we just need to disable the requirement to Login to View Uploaded Files. It's easy to do, but we'll need to do that on the Desktop version of Jotform because it's not available yet on the Jotform Mobile App. Let me walk you through it:

    1. Login to your Jotform account.
    2. Hover your mouse over your Avatar/Profile picture on the right side of the screen.
    3. In the dropdown, click on Settings, or click on this link to go directly to your Settings page.
    4. Now, go to the Security tab and uncheck the box next to Require Login to View Uploaded Files under the Privacy section.

    Uso de APi Jorform con HIPAA Image 1 Screenshot 20

    That's it. Now, you won't have to login to see/download files uploaded with your submissions.

    Give it a try and let us know if you need any help.