Commit Graph

1250 Commits

Author SHA1 Message Date
0020d0676c feat(security): restrict /app/queue and live OPD token feed to authorized hospital IPs (WASA CWE-200 remediation) 2026-10-22 15:19:28 +05:30
7547d00bb4 feat(security): place login throttle before CSRF and add visual CAPTCHA verification to login form 2026-10-22 14:45:04 +05:30
61b8bf6a71 feat(medical): use dynamic pharmacy name and hospital branding in GRN and PO print PDFs 2026-10-22 11:16:33 +05:30
9acc580fb7 fix(medical): resolve dynamic container target for Edit Invoice and master edit navigation 2026-10-22 11:06:59 +05:30
deea6529f7 Fix HTTP 500 on GRN view/edit: add self-healing schema migration and null-safe view rendering 2026-10-22 10:44:27 +05:30
09cd46d344 Fix GST calculations and synchronize GRN & Purchase Invoice columns with vendor bill structure 2026-10-22 09:58:04 +05:30
367f63f4f3 Fix WASA observations 5 and 6: user enumeration and login rate limiting 2026-10-21 18:00:25 +05:30
def0d4c80f fix(abdm): include patient_ref and local_patient_id in task pushData 2026-10-21 14:30:19 +05:30
6a247fdb63 fix(abdm): enforce strict ABHA uniqueness and demographic validation on patient linking 2026-10-21 13:59:29 +05:30
4f9f257923 fix(abdm): set link_status to linked on successful push and pass patient_ref 2026-10-21 13:00:56 +05:30
41c70c0151 fix(abdm): provide separate Document Reference section in InvoiceRecord so PHR renders DocumentReference accordion card with embedded PDF 2026-10-21 04:36:54 +05:30
2f0595a3a3 fix(abdm): section.entry should only hold Invoice and DocumentReference without Binary so PHR carousel renders document card 2026-10-21 03:53:46 +05:30
c54cde814c fix(abdm): enforce single section in InvoiceRecord Composition per NRCeS spec so DocumentReference and PDF attach to PHR 2026-10-21 03:40:48 +05:30
5ba548cbbc fix(abdm): enforce NRCeS ISO 8601 with Asia/Kolkata timezone offset across FHIR bundles and ABDM APIs to resolve midnight UTC date mismatch 2026-10-21 03:19:00 +05:30
dfd546b2c2 chore: add dev/ directory to .gitignore for local development tools and notes 2026-10-21 02:00:59 +05:30
050035e1b0 chore: untrack local dev debug scripts and internal notes from repository, update .gitignore 2026-10-21 01:57:44 +05:30
9d568463f1 feat: completely remove HealthPlix integration, controllers, views, and database columns 2026-10-21 01:33:13 +05:30
df2e41c9a4 docs: update repository URLs to Gitea and add deployment pull guide 2026-10-21 01:21:29 +05:30
d098221676 fix(abdm): unify medication request FHIR representation across OPD and discharge (generic salt subtitle, SNOMED food timing, and natural dosage instructions) 2026-10-19 23:06:12 +05:30
a454bd178c fix(abdm): finalize and sync OPD consult and prescription FHIR bundles only on print 2026-10-19 18:53:58 +05:30
ca7d7be953 Update DataTables to 1.13.11 2026-10-19 17:53:35 +05:30
c548c0dce3 Fix WASA security observations: security headers, CSP hardening, JS library updates, API authentication, and data scrubbing 2026-10-19 16:27:17 +05:30
8cbf55537f feat(pharmacy): implement Purchase Orders (PO) and Inward Goods Received Notes (GRN) workflow 2026-10-19 15:48:53 +05:30
65a071928c fix(abdm): force fresh discharge PDF generation and add column safety to byIpdRows 2026-10-19 11:13:20 +05:30
6f3b2a62d9 fix(abdm): populate salt and generic name in IPD discharge medication FHIR resources
- Populate generic salt name in MedicationRequest medicationCodeableConcept.coding[0] to prevent PHR apps displaying 'NA' subtitle
- Retain brand name in medicationCodeableConcept.text and secondary coding
- Extract med_salt from prescription records with automatic resolution from medicine masters and formulation heuristics
- Update discharge PDF and narrative to render generic salt names
- Add unit tests verifying generic salt mapping and dual coding in FHIR bundle
2026-10-19 10:16:05 +05:30
9272bb5a9c docs: add session handover for ABDM IPD discharge summary lifecycle 2026-10-17 13:19:20 +05:30
ab4b68b968 fix(abdm): allow CLI force resync in abdm:resync-discharge 2026-10-17 13:15:45 +05:30
fdd188df6e fix(abdm): generate physical exam observations, extract comorbidities, and trigger FHIR sync only on final discharge 2026-10-17 13:13:46 +05:30
0344561808 fix(abdm): deduplicate chief complaints and medical history, fix medication coding to NRCES spec, and resilient instruction parsing 2026-10-17 03:24:22 +05:30
0af2d557b2 Prefer English food_desc for CarePlan dietary advice in FHIR bundle 2026-10-17 02:49:28 +05:30
8a0396a2c8 Fix record_data column in resync-discharge 2026-10-17 02:48:42 +05:30
a6dd1f7a19 Fix gateway db credentials in resync-discharge 2026-10-17 02:48:11 +05:30
fed5f81296 Enhance resync-discharge with detailed gateway record verification 2026-10-17 02:47:45 +05:30
1290ac2bd8 Make enqueueIpdDischargeSync public with defaults 2026-10-17 02:46:37 +05:30
5cbc5b6743 Add abdm:resync-discharge command 2026-10-17 02:45:40 +05:30
a363e2d0a5 Fix discharge FHIR record full data: medications SNOMED 721912009, dietary advice care plan, and full PDF attachment 2026-10-17 02:44:32 +05:30
7dce405942 fix(security): exempt records/* and v3/* from CSRF filter for bridge communication 2026-10-17 01:42:19 +05:30
6c812236a8 feat(abdm): set autoLinkDelayMinutes to 1, regenerate FHIR bundle on print, map salt composition to reasonCode 2026-10-16 18:54:29 +05:30
ee57959873 fix(abdm): add fallback in abdm_documents 2026-10-16 13:40:11 +05:30
e41e6bd96f fix(abdm): enforce granted hi_types and dateRange, check live consent status before fetch, safe json parsing 2026-10-16 13:38:53 +05:30
7f6ae881e7 fix(security): remove unused vendor scripts (tinymce, echarts) and styles from login page 2026-10-15 21:29:00 +05:30
b03568f91c fix(security): resolve OWASP ZAP audit findings for CSP, HSTS, SRI, and private IP disclosure 2026-10-15 19:25:28 +05:30
11cf131f09 docs: add WASA security audit and mobile auth session handover document 2026-10-15 18:22:04 +05:30
de4f65807d feat(security): implement WASA audit mitigations, mobile anti-enumeration & device authorization, and user management fixes 2026-10-15 17:47:51 +05:30
a3c544a53c feat(user-management): enhance user management, permission handling, and charges invoice workflows
- Add UserProfileModel and migration for user profile data
- Enhance User Management views, controller, and doctor/nurse search integration
- Refactor handleAuthError to separate 401 session expiry from 403 access restriction
- Apply granular permission checks to sidebar navigation links
- Open Bed Status view for all authenticated users
- Support GET and POST on charges item routes and exempt billing charges from CSRF desync
2026-10-14 20:08:10 +05:30
81f3501157 fix(security): implement WASA compliance hardening and vulnerability remediation 2026-10-14 10:27:32 +05:30
ec377dafcd fix(abdm): populate full patient demographics (DOB, gender, mobile, address) in Find ABHA by Aadhaar 2026-10-12 12:54:29 +05:30
bccd1b14ae fix(abha): route find ABHA by Aadhaar to ABDM profile login verify endpoints 2026-10-12 12:33:25 +05:30
f50d0a10dd fix(abha): fix Aadhaar OTP verification rejection and error reporting 2026-10-12 12:24:39 +05:30
e28ed30116 fix(abdm): route findAadhaar OTP requests via AbdmConnectorFactory with bridge integration 2026-10-12 12:07:21 +05:30