Commit Graph

618 Commits

Author SHA1 Message Date
0020d0676c feat(security): restrict /app/queue and live OPD token feed to authorized hospital IPs (WASA CWE-200 remediation) 2026-10-22 15:19:28 +05:30
7547d00bb4 feat(security): place login throttle before CSRF and add visual CAPTCHA verification to login form 2026-10-22 14:45:04 +05:30
61b8bf6a71 feat(medical): use dynamic pharmacy name and hospital branding in GRN and PO print PDFs 2026-10-22 11:16:33 +05:30
9acc580fb7 fix(medical): resolve dynamic container target for Edit Invoice and master edit navigation 2026-10-22 11:06:59 +05:30
deea6529f7 Fix HTTP 500 on GRN view/edit: add self-healing schema migration and null-safe view rendering 2026-10-22 10:44:27 +05:30
09cd46d344 Fix GST calculations and synchronize GRN & Purchase Invoice columns with vendor bill structure 2026-10-22 09:58:04 +05:30
6a247fdb63 fix(abdm): enforce strict ABHA uniqueness and demographic validation on patient linking 2026-10-21 13:59:29 +05:30
9d568463f1 feat: completely remove HealthPlix integration, controllers, views, and database columns 2026-10-21 01:33:13 +05:30
ca7d7be953 Update DataTables to 1.13.11 2026-10-19 17:53:35 +05:30
c548c0dce3 Fix WASA security observations: security headers, CSP hardening, JS library updates, API authentication, and data scrubbing 2026-10-19 16:27:17 +05:30
8cbf55537f feat(pharmacy): implement Purchase Orders (PO) and Inward Goods Received Notes (GRN) workflow 2026-10-19 15:48:53 +05:30
e41e6bd96f fix(abdm): enforce granted hi_types and dateRange, check live consent status before fetch, safe json parsing 2026-10-16 13:38:53 +05:30
7f6ae881e7 fix(security): remove unused vendor scripts (tinymce, echarts) and styles from login page 2026-10-15 21:29:00 +05:30
b03568f91c fix(security): resolve OWASP ZAP audit findings for CSP, HSTS, SRI, and private IP disclosure 2026-10-15 19:25:28 +05:30
de4f65807d feat(security): implement WASA audit mitigations, mobile anti-enumeration & device authorization, and user management fixes 2026-10-15 17:47:51 +05:30
a3c544a53c feat(user-management): enhance user management, permission handling, and charges invoice workflows
- Add UserProfileModel and migration for user profile data
- Enhance User Management views, controller, and doctor/nurse search integration
- Refactor handleAuthError to separate 401 session expiry from 403 access restriction
- Apply granular permission checks to sidebar navigation links
- Open Bed Status view for all authenticated users
- Support GET and POST on charges item routes and exempt billing charges from CSRF desync
2026-10-14 20:08:10 +05:30
81f3501157 fix(security): implement WASA compliance hardening and vulnerability remediation 2026-10-14 10:27:32 +05:30
ec377dafcd fix(abdm): populate full patient demographics (DOB, gender, mobile, address) in Find ABHA by Aadhaar 2026-10-12 12:54:29 +05:30
f50d0a10dd fix(abha): fix Aadhaar OTP verification rejection and error reporting 2026-10-12 12:24:39 +05:30
e59bd8d2b7 feat(abdm): add Find ABHA by Aadhaar Number flow (M1 VRFY_ABHA_401 to VRFY_ABHA_405) 2026-10-12 11:58:53 +05:30
39017a43cf feat(abdm): enforce consent expiration, request-specific printing, and push sync enhancements 2026-10-09 17:38:51 +05:30
6c8e062558 feat(abdm): add professional PDF export and print button for fetched health records 2026-10-08 20:52:42 +05:30
b0a5338152 feat(abdm): restore M3 data fetch for self and same entity with multi-facility support 2026-10-08 20:04:59 +05:30
e5b80c75c5 revert: reverse M3 fetch records for same entity / self that caused website hang 2026-10-08 19:45:12 +05:30
a2fd3e1658 feat(patient): enable patient search by ABHA ID and ABHA Address in quick and advanced search 2026-10-08 18:09:40 +05:30
c8baa82059 Fix M3 fetch records to retrieve and display health data from same entity and external entities 2026-10-08 17:54:47 +05:30
e2974ec719 fix(abdm): persist HIP link status to db and sync patient profile verification badge 2026-10-08 17:05:45 +05:30
c72b5cc338 refactor(abdm): unify into a single Refresh link in consent request history 2026-10-08 16:00:09 +05:30
b05081001e fix(abdm): prevent system hang on live status check, support 24h/12h hour inputs, and release PHP session lock 2026-10-08 15:52:50 +05:30
5ad1598c21 fix(abdm): add explicit 12-hour AM/PM time pickers for consent modal and format all consent timestamps with AM/PM 2026-10-08 15:36:12 +05:30
5306271383 fix(abdm): add datetime-local to consent request, prevent browser hang with non-blocking fetch, and fix DB column queries 2026-10-08 15:22:33 +05:30
a7d83551fe fix(abdm): render invoice line items, rates, and net/gross totals in fetched records modal 2026-10-08 11:56:27 +05:30
9cb4ccd701 fix(abdm): resolve JSON parse error on fetch and auto-reconcile revoked consents 2026-10-08 11:41:30 +05:30
a4f8e8a445 feat(abdm): align modal hi_type values with standard ABDM HI Types 2026-10-08 09:54:40 +05:30
e8a2cf2cf3 feat(abdm): send care context reference in patient reference field for PHR app clarity 2026-10-08 09:48:15 +05:30
24abc51dea fix(abdm): omit single top-level hi_type when linking mixed care context batches 2026-10-08 09:39:21 +05:30
e86e73d792 fix(abdm): isolate care context hi_types during linking and prevent multiple DocumentReference in DiagnosticReport 2026-10-08 09:34:34 +05:30
a72ab50777 fix(abdm): align OPConsultRecord vs PrescriptionRecord bundles, separate OPD consultation from prescription discovery, and clean FHIR presentation 2026-10-08 09:01:05 +05:30
f7761218d0 Normalize ABDM OTP resend/rate limit cooldown message from 30 seconds to 60 seconds 2026-10-07 16:52:16 +05:30
bd02f895c5 fix(abdm): resolve wellness patient mismatch in fetch, sugar LOINC codes, duplicate notifications and hi_type mapping 2026-10-07 14:20:41 +05:30
db76ad9759 fix(abdm): resolve patient flipping, duplicate document contexts, and health document FHIR fetch 2026-10-07 13:24:05 +05:30
0fe48f2ec8 feat(abdm): show health documents in HIP link modal and create dedicated ABHA Filter & FHIR Inspector page 2026-10-07 12:16:56 +05:30
d1daefde4e fix(abdm): unify opd consultation care contexts, prevent duplicates and premature fhir ready on unfilled booking 2026-10-06 15:00:33 +05:30
e553215ea1 feat(abdm): add ABHA address filter with care context & FHIR status inspector on task board 2026-10-06 11:38:26 +05:30
1fcdb82eea fix(abdm): auto-resolve patient demographics from patient_master for HIP care context linking and token generation
- Auto-resolve missing name, gender, year_of_birth, abha_address, and abha_number in hipLinkToken and hipLinkCareContext endpoints using patient_master lookup
- Calculate birth year with fallback to age (current_year - age) when DOB is 0000-00-00, empty, or invalid
- Support resolving ABHA identifier whether saved in abha_address or legacy abha_id column
- Pass patient_id from client link modal and views (opd_prescription_basic, Patient_Profile_Opd_V, Person_profile_V)
- Fix demographic resolution in AbdmTaskBoardSyncService for background OPD and work task publishing
- Add comprehensive PHPUnit test suite in tests/unit/Abdm/TestHipDemographicsCareContext.php
2026-10-06 10:53:19 +05:30
da61637c56 fix(billing,abdm): resolve patient profile edit error and enhance opd prescription fhir mapping
- Fix Undefined variable \ 500 error in Person_Edit_V.php
- Safeguard auth()->user() and variable access in Person_Edit_V.php and Person_profile_V.php
- Enhance getPrescriptionMedicines with fallback dosing, remarks, and SNOMED lookup for OP Consultation FHIR
- Add deep-link SMS notify and link verification in ABDM gateway and task board
- Add PatientEditViewTest covering profile and edit view rendering
2026-10-06 08:25:48 +05:30
414dc42c05 fix(diagnosis): resolve print template placeholders and base64 logo rendering
- Support hospital, patient, doctor, and date placeholders matching template variables
- Convert local logo and signature paths to base64 Data URIs for mPDF
- Apply token replacement to report body in single and compiled prints
- Add interactive placeholder toolbar in diagnosis template settings view
- Add unit tests in tests/unit/DiagnosisTemplateTokenTest.php
2026-10-03 02:45:22 +05:30
e43bfbad71 feat(abdm): add task status filtering, search, and completed task visibility on task board
- Add getTasks() method with status filtering (all, open, completed, failed) to AbdmWorkTaskService
- Enhance AbdmTaskBoard to enrich all task types with health_records, invoice_code, and care contexts
- Add status toggle filter buttons (All, Open, Completed) with dynamic count badges to Task Board UI
- Add real-time fuzzy/keyword search input for instant filtering by invoice ID, patient name, ABHA, or task code
- Render completed/linked tasks with green LINKED badge, gateway reference, and FHIR Preview button
- Add unit tests in AbdmTaskBoardBackfillTest
2026-10-01 19:40:32 +05:30
2569f694c1 fix(abdm): normalize ABDM upstream errors and Please make a valid request to does not exist 2026-10-01 18:50:35 +05:30
fd10df43c3 fix(abdm): resolve ABHA address verification, field error extraction, and task board sync
- Fix empty string fallback in validateAbha and EAtriaBridgeConnector to properly extract healthIdNumber and real fullName from data payload
- Skip generic bridge envelope messages in extractBridgeErrorText to surface specific field rejections like loginHint
- Translate non-existent ABHA address errors to 'ABHA Address does not exist or was not found in the ABDM registry'
- Support both 14-digit ABHA numbers and ABHA addresses in Diagnosis publish and ABDM Task Board
- Prevent completed task duplication in lab/radiology backfill
- Add unit tests in AbhaOtpErrorHandlingTest and AbdmTaskBoardBackfillTest
2026-10-01 17:12:17 +05:30