feature: PHI Column Encryption + Access Logging

2026-06-22 23:43:48 +08:00
parent 46db694820
commit 1824e4eef1
15 changed files with 1832 additions and 11 deletions
@@ -9,11 +9,13 @@ public static class PatientPhiConverterConfigurator
        var entity = modelBuilder.Entity<Patient>();

        entity.Property(p => p.FirstName)
+            .HasColumnType("text")
            .HasConversion(
                v => crypto.Encrypt(v),
                v => crypto.Decrypt(v));

        entity.Property(p => p.LastName)
+            .HasColumnType("text")
            .HasConversion(
                v => crypto.Encrypt(v),
                v => crypto.Decrypt(v));
@@ -24,11 +26,13 @@ public static class PatientPhiConverterConfigurator
                v => v == null ? null : crypto.Decrypt(v));

        entity.Property(p => p.EmergencyContactName)
+            .HasColumnType("text")
            .HasConversion(
                v => v == null ? null! : crypto.Encrypt(v),
                v => v == null ? null : crypto.Decrypt(v));

        entity.Property(p => p.EmergencyContactPhone)
+            .HasColumnType("text")
            .HasConversion(
                v => v == null ? null! : crypto.Encrypt(v),
                v => v == null ? null : crypto.Decrypt(v));