Interoperable Patient Record Exchange API for Clinics and Hospitals

Patient care breaks down at the seams between institutions: clinics and hospitals hold records in incompatible systems, so critical history arrives late or not at all. This project builds the connective tissue, a secure RESTful API through which authorized providers exchange patient health records. The intern implements the API in Express and Node.js with hybrid storage: PostgreSQL for structured relational records and MongoDB for flexible document data, mirroring how real health-tech systems balance schema rigor with variability. Authentication supports both JWT and OAuth flows, and role-based authorization ensures a clinic sees only the records it is entitled to. Multer handles uploads of medical images with strict validation, robust audit logging records every access and exchange for accountability, and comprehensive data validation guards the integrity of everything entering the system. Because the project is API-first, the intern learns to design contracts other systems depend on, including versioned endpoints, precise error handling, and security as a structural property rather than a feature. It is a portfolio piece demonstrating readiness for backend work in regulated, high-stakes domains.