HEALTHCARE PATIENT PORTAL

1// Row-level security: users can only query their own PHI
2export async function getPatientRecord(
3  requesterId: string,
4  patientId: string
5): Promise<PatientRecord> {
6  // Immutable audit trail — written before data access
7  await db.auditLog.create({
8    data: {
9      action: "PHI_ACCESS",
10      requesterId,
11      targetPatientId: patientId,
12      timestamp: new Date(),
13      ipAddress: headers().get("x-forwarded-for"),
14    },
15  });
16
17  // RLS enforced at DB level — requester must be the patient
18  // or a verified care-team member
19  return db.$queryRaw`
20    SELECT * FROM patient_records
21    WHERE patient_id = ${patientId}
22      AND ${requesterId} = ANY(authorized_accessors)
23  `;
24}