Skip to content
← Back to OverviewReal Project
/CASE STUDY · 2025

Clinic& Pharmacy Portal — Public Archive & JWT Auth

Public data archiving and administrative record platform with JWT authentication protection and granular file access security.

Discuss System Architecture

Role

  • Fullstack Development
  • JWT Authentication
  • Public Archiving

Timeline

2025

Studio

Independent

Deliverables

  • Public document archive
  • JWT-protected admin area
  • Granular file access control
  • Community-facing download flow

Stack

Next.jsTailwind CSSPrisma ORMMySQL
corecraft.my.id/work/clinic-portal
Fullstack
Clinic portal public document archive
Public document archive open to the community.
/01 THE PROBLEM

Problem & Friction

The clinic needed to publish records for the community without ever exposing its internal files, and had no way to enforce that boundary.

JWTGating every administrative route
GranularFile-level access control
ThousandsPublic document downloads served
/02 SYSTEM DESIGN & ARCHITECTURE

Architectural Breakdown

  • Next.js front end styled with Tailwind CSS
  • Prisma ORM over MySQL
  • JWT authentication guarding every administrative route
  • Two record classes — public and internal — separated at the data layer
/03 IMPLEMENTED SOLUTIONS

Resilience & Outcomes

  • Public and internal records are split in the data model rather than hidden in the interface.
  • JWT sessions gate the administrative area end to end.
  • File access is granted per record instead of per folder.
/DEEP DIVE SCREENS

Technical Interface & Terminal Views

Clinic portal JWT authentication screen
JWT-protected administrative area.
Clinic portal granular file access settings
Granular access control for internal files.