HIPAA-Compliant Auth
MFA via TOTP, email OTP or SMS with rotating JWT tokens, per-IP rate limiting and full brute-force protection.
IHS
A secure, HIPAA-compliant RIS-PACS platform unifying imaging workflows, patient records and multi-facility operations — built for enterprise radiology.
Purpose-built for high-volume imaging centres with enterprise-grade security and compliance baked in from day one.
MFA via TOTP, email OTP or SMS with rotating JWT tokens, per-IP rate limiting and full brute-force protection.
Full DICOM workflow support with study routing, modality worklist and real-time image streaming to diagnostic workstations.
Manage patients, orders, schedules and reports across facilities from a single control plane with granular RBAC.
Integrated CPT procedure codes and ICD-10 diagnosis library with smart search and billing-ready reporting.
Live analytics for study volume, TAT tracking, modality utilisation and radiologist performance via WebSockets.
Every auth event, data access and system action is logged async via Celery to meet HIPAA requirements without blocking requests.
Base URL: /api/v1/ — all responses are JSON.
| Method | Endpoint | Description | Auth |
|---|---|---|---|
| POST | /auth/login/ | Email + password → tokens or MFA challenge | Open |
| POST | /auth/mfa/verify/ | Exchange MFA token + OTP for full JWT pair | Open |
| POST | /auth/mfa/resend/ | Resend email / SMS OTP code | Open |
| POST | /auth/token/refresh/ | Rotate refresh token | Open |
| POST | /auth/logout/ | Blacklist tokens — immediate session termination | Secured |
| GET | /auth/me/ | Authenticated user profile with permissions | Secured |
| PATCH | /auth/me/ | Update own profile (name, locale, credentials) | Secured |
| POST | /auth/password/forgot/ | Request password-reset OTP via email | Open |
| POST | /auth/password/verify/ | Verify OTP → single-use reset token | Open |
| POST | /auth/password/reset/ | Set new password → auto-login or MFA | Open |
| GET | /health/ | Database & cache liveness probe | Open |
Enterprise-grade components chosen for reliability, performance and HIPAA compliance.