{
  "resourceType": "StructureDefinition",
  "id": "subscription-oci-vault-secret",
  "url": "https://docs.oracle.com/iaas/device-data-fhir/StructureDefinition/subscription-oci-vault-secret.json",
  "version": "1.0.0",
  "name": "SubscriptionOciVaultSecret",
  "title": "Subscription OCI Vault Secret",
  "status": "active",
  "experimental": false,
  "date": "2026-08-06",
  "publisher": "Oracle DDFS",
  "description": "Extension to allow a Subscription to reference an OCI Vault secret OCID whose resolved value is used as the Authorization header for rest-hook deliveries.",
  "fhirVersion": "6.0.0-ballot4",
  "kind": "complex-type",
  "abstract": false,
  "type": "Extension",
  "context": [
    {
      "type": "element",
      "expression": "Subscription"
    }
  ],
  "baseDefinition": "http://hl7.org/fhir/StructureDefinition/Extension",
  "derivation": "constraint",
  "differential": {
    "element": [
      {
        "id": "Extension",
        "path": "Extension",
        "short": "OCI Vault secret for rest-hook Authorization header",
        "definition": "Reference to an OCI Vault secret OCID whose value will be used as the outbound Authorization header for rest-hook deliveries.",
        "min": 0,
        "max": "1"
      },
      {
        "id": "Extension.url",
        "path": "Extension.url",
        "fixedUri": "https://docs.oracle.com/iaas/device-data-fhir/StructureDefinition/subscription-oci-vault-secret.json"
      },
      {
        "id": "Extension.value[x]",
        "path": "Extension.value[x]",
        "min": 1,
        "max": "1",
        "type": [
          {
            "code": "string"
          }
        ],
        "short": "OCI Secret OCID",
        "definition": "The OCID of the OCI Vault secret. The resolved secret value at dispatch time is used verbatim as the Authorization header value (e.g., 'Bearer <token>')."
      }
    ]
  }
}