mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-10 05:12:14 +00:00
Marc-André Bombeck
f20ad79043
Owner-minted, scoped, time-limited, revocable read view of the health record for a clinician holding the raw hls_ token. The token is stored only as an HMAC-SHA256 hash; the scope (range start, sections, resource types) is frozen at creation and never widened. expiresAt is mandatory (capped at SHARE_LINK_MAX_DAYS, default 90); only revokedAt, lastAccessAt and accessCount mutate after mint. Cascades on user delete. Schema + migration only; no behaviour yet.