Fasten has been rewritten/rearchitected to be a SPA.
- Fasten license changed to GPLv3
- Fasten is now designed to eventually support
zero-knowledge encryption
- all healthcare provider access is done on the client side, where data will (eventually) be encrypted with a user provided key BEFORE sending to backend/database. - Golang backend has been gutted, only webserver, CORS relay and couchDB shim remain.
- Migrated from SQLite to CouchDB as internal datastore
- Code to communicate with healthcare providers has been moved into a Typescript library.
- All processing of data from healthcare providers is done via web-workers - keeping the UI snappy.
- OAuth flow now leverages url
fragments
allowing healthcare providers to pass back transient authorization codes without hitting a Fasten server.
WIP/Broken
- manual uploads of FHIR bundles are not supported (functionality was removed during refactor -- will be re-added)
- refresh tokens (eventually used for background sync) may not be working consistently -- you may need to reconnect
- Still no encryption at rest.