About project
Refertium is a secure web platform for administrators and radiology professionals who need personalized reporting workspaces with controlled access to AI-assisted tools.
Administrators can onboard doctors, configure plans and usage limits, manage licenses, sessions, transactions, and generate doctor-specific applications from one portal.
Backend authorization, persistent PostgreSQL storage, Cloudflare proxy protection, and structured payment workflows keep sensitive access and operational data controlled while supporting reliable day-to-day use.
Duration
04.06.2026 – 07.07.2026
Technologies
Here’s the Result
- administrators can manage doctor onboarding, licenses, usage limits, payments, and personalized reporting applications from one portal.
- doctors receive controlled access to reporting workspaces with transparent plan, license, and usage information.
- persistent storage and database-backed sessions protect operational state across restarts and deployments.
- payment, session, and transaction records are easier to review and manage.
- AI-assisted actions are protected by backend and Cloudflare authorization layers.
Here’s What We Did
- migrated core portal data from JSON storage to PostgreSQL with schema creation and data import safeguards.
- implemented secure cookies, database-backed sessions, rate limiting, and single active app-session enforcement.
- separated user sessions from recognition licenses and validated usage limits before app and proxy access.
- integrated Cloudflare Workers as a protected AI proxy layer.
- added Stripe Checkout payment links, metadata mapping, and webhook processing.
- improved admin workflows for users, sessions, transactions, payments, and generated applications.
- added automated tests for security, package validation, payment amounts, and Stripe parameter generation.
Roadmap
Security and storage migration
We migrated core data from JSON storage to PostgreSQL, added automatic schema creation, import safeguards, secure cookies, database-backed sessions, and login rate limiting. This established a reliable and secure foundation for the portal.
Licensing and payment flows
We separated recognition licenses from user sessions and added Stripe payment links, checkout metadata, and webhook processing. This connected purchased packages with the correct doctor limits and account state.
Cloudflare recognition proxy
We configured a Cloudflare Worker as the protected AI proxy with origin checks and app-session authorization. This kept provider credentials outside generated HTML and prevented unauthorized token usage.
Admin and user experience
We moved sessions and transactions into dedicated admin views, improved user action labels, added modal workflows, and refined doctor-facing screens. This made daily account management and auditing more efficient.
Template and deployment hardening
We added persistent template handling, strengthened deployment guidance and runtime guards, and prioritized uploaded premium templates. This improved continuity across deployments and supported reusable doctor-specific applications.
Main Functionality
Contact Us