chore: change dir (prepare to merge)

Services/server/src/app.ts

@@ -0,0 +1,30 @@
+import "dotenv/config";
+import express from "express";
+import swaggerUi from "swagger-ui-express";
+import cors from "cors";
+
+import { RegisterRoutes } from "./routes";
+import errorHandler from "./middlewares/exception";
+
+import swaggerSpecs from "./swagger.json";
+
+const PORT = +(process.env.PORT || 80);
+
+const app = express();
+const router = express.Router();
+
+if (process.env.NODE_ENV !== "production") app.use(cors());
+
+app.use(express.json());
+app.use(express.urlencoded({ extended: true }));
+app.use(express.static("static"));
+app.use("/docs", swaggerUi.serve, swaggerUi.setup(swaggerSpecs, { explorer: false }));
+
+RegisterRoutes(router);
+
+app.use(swaggerSpecs.basePath, router);
+app.use(errorHandler);
+
+app.listen(PORT, "0.0.0.0", () =>
+  console.log(`Application is running on http://localhost:${PORT}`),
+);

Services/server/src/controllers/cabinetController.ts

@@ -0,0 +1,108 @@
+import {
+  Body,
+  Controller,
+  Delete,
+  Get,
+  Path,
+  Post,
+  Put,
+  Route,
+  Security,
+  SuccessResponse,
+  Tags,
+  Request,
+} from "tsoa";
+import * as Minio from "minio";
+import minioClient from "../storage";
+
+import { EhrFolder } from "../interfaces/ehr-fs";
+import HttpStatusCode from "../interfaces/http-status";
+import { listFolder, replaceIllegalChars } from "../utils/minio";
+
+@Route("cabinet")
+export class CabinetController extends Controller {
+  @Get("/")
+  @Tags("Cabinet")
+  @SuccessResponse(HttpStatusCode.OK)
+  public listCabinet(): Promise<EhrFolder[]> {
+    return listFolder();
+  }
+
+  @Post("/")
+  @Tags("Cabinet")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.CREATED)
+  public async createCabinet(
+    @Request() request: { user: { preferred_username: string } },
+    @Body() body: { name: string },
+  ) {
+    const uploaded = await minioClient
+      .putObject("ehr", `${replaceIllegalChars(body.name)}/.keep`, "", 0, {
+        createdAt: new Date().toISOString(),
+        createdBy: request.user.preferred_username,
+      })
+      .catch((e) => console.error(e));
+
+    if (!uploaded) throw new Error("Object storage error occured.");
+
+    return this.setStatus(HttpStatusCode.CREATED);
+  }
+
+  @Put("/{cabinetName}")
+  @Tags("Cabinet")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.NO_CONTENT, "Success")
+  public async editCabinet(
+    @Path() cabinetName: string,
+    @Body() body: { name: string },
+  ): Promise<void> {
+    return new Promise((resolve, reject) => {
+      const stream = minioClient.listObjectsV2("ehr", `${cabinetName}/`, true);
+
+      stream.on("data", (v) => {
+        if (!(v && v.name)) return;
+
+        const destination = `${replaceIllegalChars(body.name)}/${v.name.slice(
+          cabinetName.length + 1,
+        )}`;
+        const source = `/ehr/${v.name}`;
+        const cond = new Minio.CopyConditions();
+
+        minioClient.copyObject("ehr", destination, source, cond, (e) => {
+          if (e) {
+            return reject(new Error("Failed to move."));
+          }
+          return minioClient.removeObject("ehr", v.name);
+        });
+      });
+
+      stream.on("end", () => {
+        this.setStatus(HttpStatusCode.NO_CONTENT);
+        resolve();
+      });
+      stream.on("error", () => reject(new Error("Object storage error occured.")));
+    });
+  }
+
+  @Delete("/{cabinetName}")
+  @Tags("Cabinet")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.NO_CONTENT)
+  public async deleteCabinet(@Path() cabinetName: string) {
+    return new Promise((resolve, reject) => {
+      const objects: string[] = [];
+      const stream = minioClient.listObjectsV2("ehr", `${cabinetName}/`, true);
+
+      stream.on("data", (v) => {
+        if (!(v && v.name)) return;
+
+        objects.push(v.name);
+      });
+
+      stream.on("close", () => minioClient.removeObjects("ehr", objects));
+      stream.on("error", () => reject(new Error("Object storage error occured.")));
+
+      resolve(this.setStatus(HttpStatusCode.NO_CONTENT));
+    });
+  }
+}

Services/server/src/controllers/drawerController.ts

@@ -0,0 +1,121 @@
+import {
+  Body,
+  Controller,
+  Delete,
+  Get,
+  Path,
+  Post,
+  Put,
+  Request,
+  Route,
+  Security,
+  SuccessResponse,
+  Tags,
+} from "tsoa";
+import * as Minio from "minio";
+import minioClient from "../storage";
+
+import HttpStatusCode from "../interfaces/http-status";
+import HttpError from "../interfaces/http-error";
+import { listFolder, pathExist, replaceIllegalChars } from "../utils/minio";
+
+@Route("/cabinet/{cabinetName}/drawer")
+export class DrawerController extends Controller {
+  @Get("/")
+  @Tags("Drawer")
+  @SuccessResponse(HttpStatusCode.OK)
+  public listDrawer(@Path() cabinetName: string) {
+    return listFolder(`${cabinetName}/`);
+  }
+
+  @Post("/")
+  @Tags("Drawer")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.CREATED)
+  public async createDrawer(
+    @Request() request: { user: { preferred_username: string } },
+    @Path() cabinetName: string,
+    @Body() body: { name: string },
+  ) {
+    if (!(await pathExist(`${cabinetName}/`))) {
+      throw new HttpError(HttpStatusCode.PRECONDITION_FAILED, "Cabinet cannot be found.");
+    }
+
+    const uploaded = await minioClient
+      .putObject("ehr", `${cabinetName}/${replaceIllegalChars(body.name)}/.keep`, "", 0, {
+        createdAt: new Date().toISOString(),
+        createdBy: request.user.preferred_username,
+      })
+      .catch((e) => console.error(e));
+
+    if (!uploaded) {
+      throw new Error("Object storage error occured.");
+    }
+
+    return this.setStatus(HttpStatusCode.CREATED);
+  }
+
+  @Put("/{drawerName}")
+  @Tags("Drawer")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.NO_CONTENT)
+  public async editDrawer(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Body() body: { name: string },
+  ): Promise<void> {
+    const fullpath = `${cabinetName}/${drawerName}/`;
+
+    if (!(await pathExist(fullpath))) {
+      throw new HttpError(HttpStatusCode.NOT_FOUND, "Resource cannot be found.");
+    }
+
+    return new Promise((resolve, reject) => {
+      const stream = minioClient.listObjectsV2("ehr", fullpath, true);
+
+      stream.on("data", (v) => {
+        if (!(v && v.name)) return;
+
+        const destination = `${cabinetName}/${replaceIllegalChars(body.name)}/${v.name.slice(
+          fullpath.length,
+        )}`;
+        const source = `/ehr/${v.name}`;
+        const cond = new Minio.CopyConditions();
+
+        minioClient.copyObject("ehr", destination, source, cond, (e) => {
+          if (e) {
+            return reject(new Error("Failed to move."));
+          }
+          return minioClient.removeObject("ehr", v.name);
+        });
+      });
+
+      stream.on("end", () => {
+        resolve(this.setStatus(HttpStatusCode.NO_CONTENT));
+      });
+      stream.on("error", () => reject(new Error("Object storage error occured.")));
+    });
+  }
+
+  @Delete("/{drawerName}")
+  @Tags("Drawer")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.NO_CONTENT)
+  public async deleteDrawer(@Path() cabinetName: string, @Path() drawerName: string) {
+    return new Promise((resolve, reject) => {
+      const objects: string[] = [];
+      const stream = minioClient.listObjectsV2("ehr", `${cabinetName}/${drawerName}/`, true);
+
+      stream.on("data", (v) => {
+        if (!(v && v.name)) return;
+
+        objects.push(v.name);
+      });
+
+      stream.on("close", () => minioClient.removeObjects("ehr", objects));
+      stream.on("error", () => reject(new Error("Object storage error occured.")));
+
+      resolve(true);
+    });
+  }
+}

Services/server/src/controllers/fileController.ts

@@ -0,0 +1,320 @@
+import {
+  Controller,
+  Delete,
+  FormField,
+  Get,
+  Patch,
+  Path,
+  Post,
+  Request,
+  Route,
+  Security,
+  SuccessResponse,
+  Tags,
+  UploadedFile,
+} from "tsoa";
+import esClient from "../elasticsearch";
+import minioClient from "../storage";
+import HttpStatusCode from "../interfaces/http-status";
+import { pathExist } from "../utils/minio";
+import HttpError from "../interfaces/http-error";
+import { EhrFile } from "../interfaces/ehr-fs";
+
+@Route("/cabinet/{cabinetName}/drawer/{drawerName}/folder/{folderName}/file")
+export class FileController extends Controller {
+  @Post("/")
+  @Tags("File")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.CREATED)
+  public async uploadFile(
+    @Request() request: { user: { preferred_username: string } },
+    @UploadedFile() file: Express.Multer.File,
+    @FormField() title: string,
+    @FormField() description: string,
+    @FormField() keyword: string,
+    @FormField() category: string,
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+  ) {
+    const filename = Buffer.from(file.originalname, "latin1").toString("utf-8");
+    const pathname = `${cabinetName}/${drawerName}/${folderName}/${filename}`;
+
+    if (!(await pathExist(`${cabinetName}/${drawerName}/${folderName}/`))) {
+      throw new HttpError(
+        HttpStatusCode.PRECONDITION_FAILED,
+        "Cabinet, drawer or folder cannot be found.",
+      );
+    }
+
+    const info = await minioClient
+      .putObject("ehr", pathname, file.buffer, file.size, {
+        "Content-Type": file.mimetype,
+        createdAt: new Date().toISOString(),
+        createdBy: request.user.preferred_username,
+      })
+      .catch((e) => console.error(e));
+
+    if (!info) throw new Error("Object storage error occured.");
+
+    const search = await esClient.search<EhrFile & { attachment: Record<string, string> }>({
+      index: "ehr-api-client",
+      query: {
+        match: {
+          pathname: pathname,
+        },
+      },
+    });
+
+    const exist = search.hits.hits.find((v) => v._source?.pathname === pathname);
+
+    const metadata: Partial<EhrFile> = {
+      pathname,
+      fileName: filename,
+      fileSize: file.size,
+      fileType: file.mimetype,
+      title: title,
+      description: description,
+      category: category.split(","),
+      keyword: keyword.split(","),
+    };
+
+    if (!exist) {
+      await esClient.index({
+        pipeline: "attachment",
+        index: "ehr-api-client",
+        document: {
+          data: Buffer.from(file.buffer).toString("base64"),
+          createdAt: new Date().toISOString(),
+          createdBy: request.user.preferred_username,
+          updatedAt: new Date().toISOString(),
+          updatedBy: request.user.preferred_username,
+          ...metadata,
+        },
+      });
+    } else {
+      await esClient.delete({ index: exist._index, id: exist._id });
+      await esClient.index({
+        pipeline: "attachment",
+        index: "ehr-api-client",
+        document: {
+          data: Buffer.from(file.buffer).toString("base64"),
+          createdAt: exist._source?.createdAt,
+          createdBy: exist._source?.createdBy,
+          updatedAt: new Date().toISOString(),
+          updatedBy: request.user.preferred_username,
+          ...metadata,
+        },
+      });
+    }
+
+    return this.setStatus(HttpStatusCode.CREATED);
+  }
+
+  @Get("/")
+  @Tags("File")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async getFile(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+  ): Promise<EhrFile[]> {
+    const search = await esClient.search<
+      EhrFile & {
+        attachment: Record<string, string>;
+      }
+    >({
+      index: "ehr-api-client",
+      query: {
+        prefix: {
+          pathname: `${cabinetName}/${drawerName}/${folderName}/`,
+        },
+      },
+    });
+
+    // Use flatMap for return type only. Filter does not change type after filter out undefined or null
+    const records = search.hits.hits
+      .map((v) => {
+        if (!v._source) return;
+
+        const { attachment, ...rest } = v._source;
+
+        return rest;
+      })
+      .flatMap((v) => (v ? [v] : []));
+
+    return records;
+  }
+
+  @Patch("/{fileName}")
+  @Tags("File")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async updateFile(
+    @Request() request: { user: { preferred_username: string } },
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+    @Path() fileName: string,
+    @UploadedFile() file?: Express.Multer.File,
+    @FormField() title?: string,
+    @FormField() description?: string,
+    @FormField() keyword?: string,
+    @FormField() category?: string,
+  ) {
+    const search = await esClient.search<EhrFile & { attachment: Record<string, string> }>({
+      index: "ehr-api-client",
+      query: {
+        match: {
+          pathname: `${cabinetName}/${drawerName}/${folderName}/${fileName}`,
+        },
+      },
+    });
+
+    if (search && search.hits.hits.length === 0) {
+      throw new HttpError(HttpStatusCode.NOT_FOUND, "Not found");
+    }
+
+    const data = search.hits.hits[0];
+
+    if (!file) {
+      const esResult = await esClient
+        .update({
+          index: "ehr-api-client",
+          id: data._id,
+          doc: {
+            title,
+            description,
+            keyword: keyword?.split(","),
+            category: category?.split(","),
+            updatedAt: new Date().toISOString(),
+            updatedBy: request.user.preferred_username,
+          },
+        })
+        .catch((e) => console.error(e));
+
+      if (!esResult) throw new Error("An error occured, cannot perform this action.");
+    } else {
+      const filename = Buffer.from(file.originalname, "latin1").toString("utf-8");
+      const pathname = `${cabinetName}/${drawerName}/${folderName}/${filename}`;
+
+      await minioClient.removeObject(
+        "ehr",
+        `${cabinetName}/${drawerName}/${folderName}/${fileName}`,
+      );
+
+      const info = await minioClient
+        .putObject("ehr", pathname, file.buffer, file.size, {
+          "Content-Type": file.mimetype,
+          createdAt: new Date().toISOString(),
+          createdBy: request.user.preferred_username,
+        })
+        .catch((e) => console.error(e));
+
+      if (!info) throw new Error("Object storage error occured.");
+
+      await esClient.delete({ index: data._index, id: data._id });
+      await esClient.index({
+        pipeline: "attachment",
+        index: "ehr-api-client",
+        document: {
+          data: Buffer.from(file.buffer).toString("base64"),
+          pathname,
+          fileName: filename,
+          fileSize: file.size,
+          fileType: file.mimetype,
+          title: title,
+          description: description,
+          category: category?.split(","),
+          keyword: keyword?.split(","),
+          createdAt: data._source?.createdAt,
+          createdBy: data._source?.createdBy,
+          updatedAt: new Date().toISOString(),
+          updatedBy: request.user.preferred_username,
+        },
+      });
+    }
+
+    return this.setStatus(HttpStatusCode.NO_CONTENT);
+  }
+
+  @Delete("/{fileName}")
+  @Tags("File")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async deleteFile(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+    @Path() fileName: string,
+  ) {
+    const search = await esClient.search<
+      EhrFile & {
+        attachment: Record<string, string>;
+      }
+    >({
+      index: "ehr-api-client",
+      query: {
+        match: {
+          pathname: `${cabinetName}/${drawerName}/${folderName}/${fileName}`,
+        },
+      },
+    });
+
+    if (search && search.hits.hits.length === 0) {
+      throw new HttpError(HttpStatusCode.NOT_FOUND, "Not found");
+    }
+
+    const esResult = await esClient
+      .delete({
+        index: "ehr-api-client",
+        id: search.hits.hits[0]._id,
+      })
+      .catch((e) => console.error(e));
+
+    if (!esResult) throw new Error("An error occured, cannot perform this action.");
+
+    await minioClient.removeObject("ehr", `${cabinetName}/${drawerName}/${folderName}/${fileName}`);
+
+    return this.setStatus(HttpStatusCode.NO_CONTENT);
+  }
+
+  @Get("/{fileName}")
+  @Tags("File")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async downloadFile(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+    @Path() fileName: string,
+  ) {
+    const search = await esClient.search<EhrFile & { attachment: Record<string, string> }>({
+      index: "ehr-api-client",
+      query: {
+        match: {
+          pathname: `${cabinetName}/${drawerName}/${folderName}/${fileName}`,
+        },
+      },
+    });
+
+    if (search && search.hits.hits.length === 0) {
+      throw new HttpError(HttpStatusCode.NOT_FOUND, "Not found");
+    }
+
+    const data = search.hits.hits[0]._source;
+
+    if (!data) {
+      throw new HttpError(HttpStatusCode.INTERNAL_SERVER_ERROR, "Found data but no info.");
+    }
+
+    const { attachment, ...rest } = data;
+
+    return {
+      ...rest,
+      download: await minioClient.presignedGetObject(
+        "ehr",
+        `${cabinetName}/${drawerName}/${folderName}/${fileName}`,
+      ),
+    };
+  }
+}

Services/server/src/controllers/folderController.ts

@@ -0,0 +1,151 @@
+import {
+  Body,
+  Controller,
+  Delete,
+  Get,
+  Path,
+  Post,
+  Put,
+  Query,
+  Request,
+  Route,
+  Security,
+  SuccessResponse,
+  Tags,
+} from "tsoa";
+import * as Minio from "minio";
+
+import HttpError from "../interfaces/http-error";
+import HttpStatusCode from "../interfaces/http-status";
+import { listFolder, pathExist, replaceIllegalChars } from "../utils/minio";
+import { EhrFolder } from "../interfaces/ehr-fs";
+import minioClient from "../storage";
+
+@Route("/cabinet/{cabinetName}/drawer/{drawerName}/folder")
+export class FolderController extends Controller {
+  @Get("/")
+  @Tags("Folder")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async listFolder(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+  ): Promise<EhrFolder[]> {
+    const fullpath = [cabinetName, drawerName].join("/") + "/";
+
+    if (!(await pathExist(fullpath))) {
+      throw new HttpError(HttpStatusCode.NOT_FOUND, "Provided path does not exist.");
+    }
+
+    return listFolder(fullpath);
+  }
+
+  @Post("/")
+  @Tags("Folder")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.CREATED)
+  public async createFolder(
+    @Request() request: { user: { preferred_username: string } },
+    @Body() body: { name: string },
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+  ) {
+    if (!(await pathExist(`${cabinetName}/${drawerName}/`))) {
+      throw new HttpError(HttpStatusCode.PRECONDITION_FAILED, "Cabinet or drawer cannot be found.");
+    }
+
+    const uploaded = await minioClient
+      .putObject(
+        "ehr",
+        `${cabinetName}/${drawerName}/${replaceIllegalChars(body.name)}/.keep`,
+        "",
+        0,
+        {
+          createdAt: new Date().toISOString(),
+          createdBy: request.user.preferred_username,
+        },
+      )
+      .catch((e) => console.error(e));
+
+    if (!uploaded) {
+      throw new Error("Object storage error occured.");
+    }
+
+    return this.setStatus(HttpStatusCode.CREATED);
+  }
+
+  @Put("/{folderName}")
+  @Tags("Folder")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.NO_CONTENT)
+  public async editFolder(
+    @Body() body: { name: string },
+    @Query() cabinetName: string,
+    @Query() drawerName: string,
+    @Query() folderName: string,
+  ) {
+    const fullpath = [cabinetName, drawerName, folderName].join("/") + "/";
+
+    if (!(await pathExist(fullpath))) {
+      throw new HttpError(
+        HttpStatusCode.PRECONDITION_FAILED,
+        "Provided resource location does not exist.",
+      );
+    }
+
+    return new Promise((resolve, reject) => {
+      const stream = minioClient.listObjectsV2("ehr", fullpath, true);
+
+      stream.on("data", (v) => {
+        if (!(v && v.name)) return;
+
+        const destination = `${cabinetName}/${drawerName}/${replaceIllegalChars(
+          body.name,
+        )}/${v.name.slice(fullpath.length)}`;
+        const source = `/ehr/${v.name}`;
+        const cond = new Minio.CopyConditions();
+
+        minioClient.copyObject("ehr", destination, source, cond, (e) => {
+          if (e) {
+            return reject(new Error("Failed to move."));
+          }
+          return minioClient.removeObject("ehr", v.name);
+        });
+      });
+
+      stream.on("end", () => {
+        resolve(this.setStatus(HttpStatusCode.NO_CONTENT));
+      });
+      stream.on("error", () => reject(new Error("Object storage error occured.")));
+    });
+  }
+
+  @Delete("/{folderName}")
+  @Tags("Folder")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.NO_CONTENT)
+  public async deleteFolder(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+  ) {
+    return new Promise((resolve, reject) => {
+      const objects: string[] = [];
+      const stream = minioClient.listObjectsV2(
+        "ehr",
+        `${cabinetName}/${drawerName}/${folderName}`,
+        true,
+      );
+
+      stream.on("data", (v) => {
+        if (!(v && v.name)) return;
+
+        objects.push(v.name);
+      });
+
+      stream.on("close", () => minioClient.removeObjects("ehr", objects));
+      stream.on("error", () => reject(new Error("Object storage error occured.")));
+
+      resolve(this.setStatus(HttpStatusCode.NO_CONTENT));
+    });
+  }
+}

Services/server/src/controllers/searchController.ts

@@ -0,0 +1,35 @@
+import { Body, Controller, Post, Route, SuccessResponse, Tags } from "tsoa";
+import HttpStatusCode from "../interfaces/http-status";
+import esClient from "../elasticsearch";
+import { Search } from "../interfaces/search";
+import { EhrFile } from "../interfaces/ehr-fs";
+
+@Route("/search")
+export class SearchController extends Controller {
+  @Post("/")
+  @Tags("Search")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async searchFile(@Body() search: Search): Promise<EhrFile[]> {
+    const result = await esClient.search<EhrFile & { attachment: Record<string, string> }>({
+      index: "ehr-api-client",
+      query: {
+        bool: {
+          must: search.AND?.map((v) => ({ match: { [v.field]: v.value } })),
+          should: search.OR?.map((v) => ({ match: { [v.field]: v.value } })),
+        },
+      },
+    });
+
+    return result.hits.hits.length > 0
+      ? result.hits.hits
+          .map((v) => {
+            if (!v._source) return;
+
+            const { attachment, ...rest } = v._source;
+
+            return rest;
+          })
+          .flatMap((v) => (!!v ? [v] : []))
+      : [];
+  }
+}

Services/server/src/controllers/subFolderController.ts

@@ -0,0 +1,158 @@
+import {
+  Body,
+  Controller,
+  Delete,
+  Get,
+  Path,
+  Post,
+  Put,
+  Query,
+  Request,
+  Route,
+  Security,
+  SuccessResponse,
+  Tags,
+} from "tsoa";
+import * as Minio from "minio";
+
+import HttpError from "../interfaces/http-error";
+import HttpStatusCode from "../interfaces/http-status";
+import { listFolder, pathExist, replaceIllegalChars } from "../utils/minio";
+import { EhrFolder } from "../interfaces/ehr-fs";
+import minioClient from "../storage";
+
+@Route("/cabinet/{cabinetName}/drawer/{drawerName}/folder/{folderName}/subfolder")
+export class SubFolderController extends Controller {
+  @Get("/")
+  @Tags("SubFolder")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async listFolder(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+  ): Promise<EhrFolder[]> {
+    const fullpath = [cabinetName, drawerName, folderName].join("/") + "/";
+
+    if (!(await pathExist(fullpath))) {
+      throw new HttpError(HttpStatusCode.NOT_FOUND, "Provided path does not exist.");
+    }
+
+    return listFolder(fullpath);
+  }
+
+  @Post("/")
+  @Tags("SubFolder")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.CREATED)
+  public async createFolder(
+    @Request() request: { user: { preferred_username: string } },
+    @Body() body: { name: string },
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+  ) {
+    if (!(await pathExist(`${cabinetName}/${drawerName}/${folderName}`))) {
+      throw new HttpError(
+        HttpStatusCode.PRECONDITION_FAILED,
+        "Cabinet, drawer or folder cannot be found.",
+      );
+    }
+
+    const uploaded = await minioClient
+      .putObject(
+        "ehr",
+        `${cabinetName}/${drawerName}/${folderName}/${replaceIllegalChars(body.name)}/.keep`,
+        "",
+        0,
+        {
+          createdAt: new Date().toISOString(),
+          createdBy: request.user.preferred_username,
+        },
+      )
+      .catch((e) => console.error(e));
+
+    if (!uploaded) {
+      throw new Error("Object storage error occured.");
+    }
+
+    return this.setStatus(HttpStatusCode.CREATED);
+  }
+
+  @Put("/{subFolderName}")
+  @Tags("SubFolder")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.NO_CONTENT)
+  public async editFolder(
+    @Body() body: { name: string },
+    @Query() cabinetName: string,
+    @Query() drawerName: string,
+    @Query() folderName: string,
+    @Query() subFolderName: string,
+  ) {
+    const fullpath = [cabinetName, drawerName, folderName, subFolderName].join("/") + "/";
+
+    if (!(await pathExist(fullpath))) {
+      throw new HttpError(
+        HttpStatusCode.PRECONDITION_FAILED,
+        "Provided resource location does not exist.",
+      );
+    }
+
+    return new Promise((resolve, reject) => {
+      const stream = minioClient.listObjectsV2("ehr", fullpath, true);
+
+      stream.on("data", (v) => {
+        if (!(v && v.name)) return;
+
+        const destination = `${cabinetName}/${drawerName}/${folderName}/${replaceIllegalChars(
+          body.name,
+        )}/${v.name.slice(fullpath.length)}`;
+        const source = `/ehr/${v.name}`;
+        const cond = new Minio.CopyConditions();
+
+        minioClient.copyObject("ehr", destination, source, cond, (e) => {
+          if (e) {
+            return reject(new Error("Failed to move."));
+          }
+          return minioClient.removeObject("ehr", v.name);
+        });
+      });
+
+      stream.on("end", () => {
+        resolve(this.setStatus(HttpStatusCode.NO_CONTENT));
+      });
+      stream.on("error", () => reject(new Error("Object storage error occured.")));
+    });
+  }
+
+  @Delete("/{subFolderName}")
+  @Tags("SubFolder")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.NO_CONTENT)
+  public async deleteFolder(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+    @Path() subFolderName: string,
+  ) {
+    return new Promise((resolve, reject) => {
+      const objects: string[] = [];
+      const stream = minioClient.listObjectsV2(
+        "ehr",
+        `${cabinetName}/${drawerName}/${folderName}/${subFolderName}`,
+        true,
+      );
+
+      stream.on("data", (v) => {
+        if (!(v && v.name)) return;
+
+        objects.push(v.name);
+      });
+
+      stream.on("close", () => minioClient.removeObjects("ehr", objects));
+      stream.on("error", () => reject(new Error("Object storage error occured.")));
+
+      resolve(this.setStatus(HttpStatusCode.NO_CONTENT));
+    });
+  }
+}

Services/server/src/controllers/subFolderFileController.ts

@@ -0,0 +1,330 @@
+import {
+  Controller,
+  Delete,
+  FormField,
+  Get,
+  Patch,
+  Path,
+  Post,
+  Request,
+  Route,
+  Security,
+  SuccessResponse,
+  Tags,
+  UploadedFile,
+} from "tsoa";
+import esClient from "../elasticsearch";
+import minioClient from "../storage";
+import HttpStatusCode from "../interfaces/http-status";
+import { pathExist } from "../utils/minio";
+import HttpError from "../interfaces/http-error";
+import { EhrFile } from "../interfaces/ehr-fs";
+
+@Route(
+  "/cabinet/{cabinetName}/drawer/{drawerName}/folder/{folderName}/subfolder/{subFolderName}/file",
+)
+export class SubFolderFileController extends Controller {
+  @Post("/")
+  @Tags("SubFolder File")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.CREATED)
+  public async uploadFile(
+    @Request() request: { user: { preferred_username: string } },
+    @UploadedFile() file: Express.Multer.File,
+    @FormField() title: string,
+    @FormField() description: string,
+    @FormField() keyword: string,
+    @FormField() category: string,
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+    @Path() subFolderName: string,
+  ) {
+    const filename = Buffer.from(file.originalname, "latin1").toString("utf-8");
+    const pathname = `${cabinetName}/${drawerName}/${folderName}/${subFolderName}/${filename}`;
+
+    if (!(await pathExist(`${cabinetName}/${drawerName}/${folderName}/${subFolderName}`))) {
+      throw new HttpError(
+        HttpStatusCode.PRECONDITION_FAILED,
+        "Cabinet, drawer, folder or subfolder cannot be found.",
+      );
+    }
+
+    const info = await minioClient
+      .putObject("ehr", pathname, file.buffer, file.size, {
+        "Content-Type": file.mimetype,
+        createdAt: new Date().toISOString(),
+        createdBy: request.user.preferred_username,
+      })
+      .catch((e) => console.error(e));
+
+    if (!info) throw new Error("Object storage error occured.");
+
+    const search = await esClient.search<EhrFile & { attachment: Record<string, string> }>({
+      index: "ehr-api-client",
+      query: {
+        match: {
+          pathname: pathname,
+        },
+      },
+    });
+
+    const exist = search.hits.hits.find((v) => v._source?.pathname === pathname);
+
+    const metadata: Partial<EhrFile> = {
+      pathname,
+      fileName: filename,
+      fileSize: file.size,
+      fileType: file.mimetype,
+      title: title,
+      description: description,
+      category: category.split(","),
+      keyword: keyword.split(","),
+    };
+
+    if (!exist) {
+      await esClient.index({
+        pipeline: "attachment",
+        index: "ehr-api-client",
+        document: {
+          data: Buffer.from(file.buffer).toString("base64"),
+          createdAt: new Date().toISOString(),
+          createdBy: request.user.preferred_username,
+          updatedAt: new Date().toISOString(),
+          updatedBy: request.user.preferred_username,
+          ...metadata,
+        },
+      });
+    } else {
+      await esClient.delete({ index: exist._index, id: exist._id });
+      await esClient.index({
+        pipeline: "attachment",
+        index: "ehr-api-client",
+        document: {
+          data: Buffer.from(file.buffer).toString("base64"),
+          createdAt: exist._source?.createdAt,
+          createdBy: exist._source?.createdBy,
+          updatedAt: new Date().toISOString(),
+          updatedBy: request.user.preferred_username,
+          ...metadata,
+        },
+      });
+    }
+
+    return this.setStatus(HttpStatusCode.CREATED);
+  }
+
+  @Get("/")
+  @Tags("SubFolder File")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async getFile(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+    @Path() subFolderName: string,
+  ) {
+    const search = await esClient.search<
+      EhrFile & {
+        attachment: Record<string, string>;
+      }
+    >({
+      index: "ehr-api-client",
+      query: {
+        prefix: {
+          pathname: `${cabinetName}/${drawerName}/${folderName}/${subFolderName}`,
+        },
+      },
+    });
+
+    // Use flatMap for return type only. Filter does not change type after filter out undefined or null
+    const records = search.hits.hits
+      .map((v) => {
+        if (!v._source) return;
+
+        const { attachment, ...rest } = v._source;
+
+        return rest;
+      })
+      .flatMap((v) => (v ? [v] : []));
+
+    return records;
+  }
+
+  @Patch("/{fileName}")
+  @Tags("SubFolder File")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async updateFile(
+    @Request() request: { user: { preferred_username: string } },
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+    @Path() subFolderName: string,
+    @Path() fileName: string,
+    @UploadedFile() file?: Express.Multer.File,
+    @FormField() title?: string,
+    @FormField() description?: string,
+    @FormField() keyword?: string,
+    @FormField() category?: string,
+  ) {
+    const search = await esClient.search<EhrFile & { attachment: Record<string, string> }>({
+      index: "ehr-api-client",
+      query: {
+        match: {
+          pathname: `${cabinetName}/${drawerName}/${folderName}/${subFolderName}/${fileName}`,
+        },
+      },
+    });
+
+    if (search && search.hits.hits.length === 0) {
+      throw new HttpError(HttpStatusCode.NOT_FOUND, "Not found");
+    }
+
+    const data = search.hits.hits[0];
+
+    if (!file) {
+      const esResult = await esClient
+        .update({
+          index: "ehr-api-client",
+          id: data._id,
+          doc: {
+            title,
+            description,
+            keyword: keyword?.split(","),
+            category: category?.split(","),
+            updatedAt: new Date().toISOString(),
+            updatedBy: request.user.preferred_username,
+          },
+        })
+        .catch((e) => console.error(e));
+
+      if (!esResult) throw new Error("An error occured, cannot perform this action.");
+    } else {
+      const filename = Buffer.from(file.originalname, "latin1").toString("utf-8");
+      const pathname = `${cabinetName}/${drawerName}/${folderName}/${subFolderName}/${filename}`;
+
+      await minioClient.removeObject(
+        "ehr",
+        `${cabinetName}/${drawerName}/${folderName}/${subFolderName}/${fileName}`,
+      );
+
+      const info = await minioClient
+        .putObject("ehr", pathname, file.buffer, file.size, {
+          "Content-Type": file.mimetype,
+          createdAt: new Date().toISOString(),
+          createdBy: request.user.preferred_username,
+        })
+        .catch((e) => console.error(e));
+
+      if (!info) throw new Error("Object storage error occured.");
+
+      await esClient.delete({ index: data._index, id: data._id });
+      await esClient.index({
+        pipeline: "attachment",
+        index: "ehr-api-client",
+        document: {
+          data: Buffer.from(file.buffer).toString("base64"),
+          pathname,
+          fileName: filename,
+          fileSize: file.size,
+          fileType: file.mimetype,
+          title: title,
+          description: description,
+          category: category?.split(","),
+          keyword: keyword?.split(","),
+          createdAt: data._source?.createdAt,
+          createdBy: data._source?.createdBy,
+          updatedAt: new Date().toISOString(),
+          updatedBy: request.user.preferred_username,
+        },
+      });
+    }
+
+    return this.setStatus(HttpStatusCode.NO_CONTENT);
+  }
+
+  @Delete("/{fileName}")
+  @Tags("SubFolder File")
+  @Security("bearerAuth")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async deleteFile(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+    @Path() subFolderName: string,
+    @Path() fileName: string,
+  ) {
+    const search = await esClient.search<
+      EhrFile & {
+        attachment: Record<string, string>;
+      }
+    >({
+      index: "ehr-api-client",
+      query: {
+        match: {
+          pathname: `${cabinetName}/${drawerName}/${folderName}/${subFolderName}/${fileName}`,
+        },
+      },
+    });
+
+    if (search && search.hits.hits.length === 0) {
+      throw new HttpError(HttpStatusCode.NOT_FOUND, "Not found");
+    }
+
+    const esResult = await esClient
+      .delete({
+        index: "ehr-api-client",
+        id: search.hits.hits[0]._id,
+      })
+      .catch((e) => console.error(e));
+
+    if (!esResult) throw new Error("An error occured, cannot perform this action.");
+
+    await minioClient.removeObject(
+      "ehr",
+      `${cabinetName}/${drawerName}/${folderName}/${subFolderName}/${fileName}`,
+    );
+
+    return this.setStatus(HttpStatusCode.NO_CONTENT);
+  }
+
+  @Get("/{fileName}")
+  @Tags("File")
+  @SuccessResponse(HttpStatusCode.OK)
+  public async downloadFile(
+    @Path() cabinetName: string,
+    @Path() drawerName: string,
+    @Path() folderName: string,
+    @Path() subFolderName: string,
+    @Path() fileName: string,
+  ) {
+    const search = await esClient.search<EhrFile & { attachment: Record<string, string> }>({
+      index: "ehr-api-client",
+      query: {
+        match: {
+          pathname: `${cabinetName}/${drawerName}/${folderName}/${subFolderName}/${fileName}`,
+        },
+      },
+    });
+
+    if (search && search.hits.hits.length === 0) {
+      throw new HttpError(HttpStatusCode.NOT_FOUND, "Not found");
+    }
+
+    const data = search.hits.hits[0]._source;
+
+    if (!data) {
+      throw new HttpError(HttpStatusCode.INTERNAL_SERVER_ERROR, "Found data but no info.");
+    }
+
+    const { attachment, ...rest } = data;
+
+    return {
+      ...rest,
+      download: await minioClient.presignedGetObject(
+        "ehr",
+        `${cabinetName}/${drawerName}/${folderName}/${subFolderName}/${fileName}`,
+      ),
+    };
+  }
+}

Services/server/src/elasticsearch/index.ts

@@ -0,0 +1,7 @@
+import { Client } from "@elastic/elasticsearch";
+
+const esClient = new Client({
+  node: `${process.env.ELASTICSEARCH_PROTOCOL}://${process.env.ELASTICSEARCH_HOST}:${process.env.ELASTICSEARCH_PORT}`,
+});
+
+export default esClient;

Services/server/src/interfaces/ehr-fs.ts

@@ -0,0 +1,34 @@
+export interface EhrFolder {
+  /**
+   * @prop Full path to this folder. It is used as key as there are no files or directories at the same location.
+   */
+  pathname: string;
+  /**
+   * @prop Directory / Folder name.
+   */
+  name: string;
+
+  createdAt: string | Date;
+  createdBy: string | Date;
+}
+
+export interface EhrFile {
+  /**
+   * @prop Full path to this folder. It is used as key as there are no files or directories at the same location.
+   */
+  pathname: string;
+
+  fileName: string;
+  fileSize: number;
+  fileType: string;
+
+  title: string;
+  description: string;
+  category: string[];
+  keyword: string[];
+
+  updatedAt: string | Date;
+  updatedBy: string;
+  createdAt: string | Date;
+  createdBy: string;
+}

Services/server/src/interfaces/http-error.ts

@@ -0,0 +1,19 @@
+import HttpStatusCode from "./http-status";
+
+class HttpError extends Error {
+  /**
+   * HTTP Status Code
+   */
+  status: HttpStatusCode;
+  message: string;
+
+  constructor(status: HttpStatusCode, message: string) {
+    super(message);
+
+    this.name = "HttpError";
+    this.status = status;
+    this.message = message;
+  }
+}
+
+export default HttpError;

Services/server/src/interfaces/http-status.ts

@@ -0,0 +1,380 @@
+/**
+ * Hypertext Transfer Protocol (HTTP) response status codes.
+ * @see {@link https://en.wikipedia.org/wiki/List_of_HTTP_status_codes}
+ */
+enum HttpStatusCode {
+  /**
+   * The server has received the request headers and the client should proceed to send the request body
+   * (in the case of a request for which a body needs to be sent; for example, a POST request).
+   * Sending a large request body to a server after a request has been rejected for inappropriate headers would be inefficient.
+   * To have a server check the request's headers, a client must send Expect: 100-continue as a header in its initial request
+   * and receive a 100 Continue status code in response before sending the body. The response 417 Expectation Failed indicates the request should not be continued.
+   */
+  CONTINUE = 100,
+
+  /**
+   * The requester has asked the server to switch protocols and the server has agreed to do so.
+   */
+  SWITCHING_PROTOCOLS = 101,
+
+  /**
+   * A WebDAV request may contain many sub-requests involving file operations, requiring a long time to complete the request.
+   * This code indicates that the server has received and is processing the request, but no response is available yet.
+   * This prevents the client from timing out and assuming the request was lost.
+   */
+  PROCESSING = 102,
+
+  /**
+   * Standard response for successful HTTP requests.
+   * The actual response will depend on the request method used.
+   * In a GET request, the response will contain an entity corresponding to the requested resource.
+   * In a POST request, the response will contain an entity describing or containing the result of the action.
+   */
+  OK = 200,
+
+  /**
+   * The request has been fulfilled, resulting in the creation of a new resource.
+   */
+  CREATED = 201,
+
+  /**
+   * The request has been accepted for processing, but the processing has not been completed.
+   * The request might or might not be eventually acted upon, and may be disallowed when processing occurs.
+   */
+  ACCEPTED = 202,
+
+  /**
+   * SINCE HTTP/1.1
+   * The server is a transforming proxy that received a 200 OK from its origin,
+   * but is returning a modified version of the origin's response.
+   */
+  NON_AUTHORITATIVE_INFORMATION = 203,
+
+  /**
+   * The server successfully processed the request and is not returning any content.
+   */
+  NO_CONTENT = 204,
+
+  /**
+   * The server successfully processed the request, but is not returning any content.
+   * Unlike a 204 response, this response requires that the requester reset the document view.
+   */
+  RESET_CONTENT = 205,
+
+  /**
+   * The server is delivering only part of the resource (byte serving) due to a range header sent by the client.
+   * The range header is used by HTTP clients to enable resuming of interrupted downloads,
+   * or split a download into multiple simultaneous streams.
+   */
+  PARTIAL_CONTENT = 206,
+
+  /**
+   * The message body that follows is an XML message and can contain a number of separate response codes,
+   * depending on how many sub-requests were made.
+   */
+  MULTI_STATUS = 207,
+
+  /**
+   * The members of a DAV binding have already been enumerated in a preceding part of the (multistatus) response,
+   * and are not being included again.
+   */
+  ALREADY_REPORTED = 208,
+
+  /**
+   * The server has fulfilled a request for the resource,
+   * and the response is a representation of the result of one or more instance-manipulations applied to the current instance.
+   */
+  IM_USED = 226,
+
+  /**
+   * Indicates multiple options for the resource from which the client may choose (via agent-driven content negotiation).
+   * For example, this code could be used to present multiple video format options,
+   * to list files with different filename extensions, or to suggest word-sense disambiguation.
+   */
+  MULTIPLE_CHOICES = 300,
+
+  /**
+   * This and all future requests should be directed to the given URI.
+   */
+  MOVED_PERMANENTLY = 301,
+
+  /**
+   * This is an example of industry practice contradicting the standard.
+   * The HTTP/1.0 specification (RFC 1945) required the client to perform a temporary redirect
+   * (the original describing phrase was "Moved Temporarily"), but popular browsers implemented 302
+   * with the functionality of a 303 See Other. Therefore, HTTP/1.1 added status codes 303 and 307
+   * to distinguish between the two behaviours. However, some Web applications and frameworks
+   * use the 302 status code as if it were the 303.
+   */
+  FOUND = 302,
+
+  /**
+   * SINCE HTTP/1.1
+   * The response to the request can be found under another URI using a GET method.
+   * When received in response to a POST (or PUT/DELETE), the client should presume that
+   * the server has received the data and should issue a redirect with a separate GET message.
+   */
+  SEE_OTHER = 303,
+
+  /**
+   * Indicates that the resource has not been modified since the version specified by the request headers If-Modified-Since or If-None-Match.
+   * In such case, there is no need to retransmit the resource since the client still has a previously-downloaded copy.
+   */
+  NOT_MODIFIED = 304,
+
+  /**
+   * SINCE HTTP/1.1
+   * The requested resource is available only through a proxy, the address for which is provided in the response.
+   * Many HTTP clients (such as Mozilla and Internet Explorer) do not correctly handle responses with this status code, primarily for security reasons.
+   */
+  USE_PROXY = 305,
+
+  /**
+   * No longer used. Originally meant "Subsequent requests should use the specified proxy."
+   */
+  SWITCH_PROXY = 306,
+
+  /**
+   * SINCE HTTP/1.1
+   * In this case, the request should be repeated with another URI; however, future requests should still use the original URI.
+   * In contrast to how 302 was historically implemented, the request method is not allowed to be changed when reissuing the original request.
+   * For example, a POST request should be repeated using another POST request.
+   */
+  TEMPORARY_REDIRECT = 307,
+
+  /**
+   * The request and all future requests should be repeated using another URI.
+   * 307 and 308 parallel the behaviors of 302 and 301, but do not allow the HTTP method to change.
+   * So, for example, submitting a form to a permanently redirected resource may continue smoothly.
+   */
+  PERMANENT_REDIRECT = 308,
+
+  /**
+   * The server cannot or will not process the request due to an apparent client error
+   * (e.g., malformed request syntax, too large size, invalid request message framing, or deceptive request routing).
+   */
+  BAD_REQUEST = 400,
+
+  /**
+   * Similar to 403 Forbidden, but specifically for use when authentication is required and has failed or has not yet
+   * been provided. The response must include a WWW-Authenticate header field containing a challenge applicable to the
+   * requested resource. See Basic access authentication and Digest access authentication. 401 semantically means
+   * "unauthenticated",i.e. the user does not have the necessary credentials.
+   */
+  UNAUTHORIZED = 401,
+
+  /**
+   * Reserved for future use. The original intention was that this code might be used as part of some form of digital
+   * cash or micro payment scheme, but that has not happened, and this code is not usually used.
+   * Google Developers API uses this status if a particular developer has exceeded the daily limit on requests.
+   */
+  PAYMENT_REQUIRED = 402,
+
+  /**
+   * The request was valid, but the server is refusing action.
+   * The user might not have the necessary permissions for a resource.
+   */
+  FORBIDDEN = 403,
+
+  /**
+   * The requested resource could not be found but may be available in the future.
+   * Subsequent requests by the client are permissible.
+   */
+  NOT_FOUND = 404,
+
+  /**
+   * A request method is not supported for the requested resource;
+   * for example, a GET request on a form that requires data to be presented via POST, or a PUT request on a read-only resource.
+   */
+  METHOD_NOT_ALLOWED = 405,
+
+  /**
+   * The requested resource is capable of generating only content not acceptable according to the Accept headers sent in the request.
+   */
+  NOT_ACCEPTABLE = 406,
+
+  /**
+   * The client must first authenticate itself with the proxy.
+   */
+  PROXY_AUTHENTICATION_REQUIRED = 407,
+
+  /**
+   * The server timed out waiting for the request.
+   * According to HTTP specifications:
+   * "The client did not produce a request within the time that the server was prepared to wait. The client MAY repeat the request without modifications at any later time."
+   */
+  REQUEST_TIMEOUT = 408,
+
+  /**
+   * Indicates that the request could not be processed because of conflict in the request,
+   * such as an edit conflict between multiple simultaneous updates.
+   */
+  CONFLICT = 409,
+
+  /**
+   * Indicates that the resource requested is no longer available and will not be available again.
+   * This should be used when a resource has been intentionally removed and the resource should be purged.
+   * Upon receiving a 410 status code, the client should not request the resource in the future.
+   * Clients such as search engines should remove the resource from their indices.
+   * Most use cases do not require clients and search engines to purge the resource, and a "404 Not Found" may be used instead.
+   */
+  GONE = 410,
+
+  /**
+   * The request did not specify the length of its content, which is required by the requested resource.
+   */
+  LENGTH_REQUIRED = 411,
+
+  /**
+   * The server does not meet one of the preconditions that the requester put on the request.
+   */
+  PRECONDITION_FAILED = 412,
+
+  /**
+   * The request is larger than the server is willing or able to process. Previously called "Request Entity Too Large".
+   */
+  PAYLOAD_TOO_LARGE = 413,
+
+  /**
+   * The URI provided was too long for the server to process. Often the result of too much data being encoded as a query-string of a GET request,
+   * in which case it should be converted to a POST request.
+   * Called "Request-URI Too Long" previously.
+   */
+  URI_TOO_LONG = 414,
+
+  /**
+   * The request entity has a media type which the server or resource does not support.
+   * For example, the client uploads an image as image/svg+xml, but the server requires that images use a different format.
+   */
+  UNSUPPORTED_MEDIA_TYPE = 415,
+
+  /**
+   * The client has asked for a portion of the file (byte serving), but the server cannot supply that portion.
+   * For example, if the client asked for a part of the file that lies beyond the end of the file.
+   * Called "Requested Range Not Satisfiable" previously.
+   */
+  RANGE_NOT_SATISFIABLE = 416,
+
+  /**
+   * The server cannot meet the requirements of the Expect request-header field.
+   */
+  EXPECTATION_FAILED = 417,
+
+  /**
+   * This code was defined in 1998 as one of the traditional IETF April Fools' jokes, in RFC 2324, Hyper Text Coffee Pot Control Protocol,
+   * and is not expected to be implemented by actual HTTP servers. The RFC specifies this code should be returned by
+   * teapots requested to brew coffee. This HTTP status is used as an Easter egg in some websites, including Google.com.
+   */
+  I_AM_A_TEAPOT = 418,
+
+  /**
+   * The request was directed at a server that is not able to produce a response (for example because a connection reuse).
+   */
+  MISDIRECTED_REQUEST = 421,
+
+  /**
+   * The request was well-formed but was unable to be followed due to semantic errors.
+   */
+  UNPROCESSABLE_ENTITY = 422,
+
+  /**
+   * The resource that is being accessed is locked.
+   */
+  LOCKED = 423,
+
+  /**
+   * The request failed due to failure of a previous request (e.g., a PROPPATCH).
+   */
+  FAILED_DEPENDENCY = 424,
+
+  /**
+   * The client should switch to a different protocol such as TLS/1.0, given in the Upgrade header field.
+   */
+  UPGRADE_REQUIRED = 426,
+
+  /**
+   * The origin server requires the request to be conditional.
+   * Intended to prevent "the 'lost update' problem, where a client
+   * GETs a resource's state, modifies it, and PUTs it back to the server,
+   * when meanwhile a third party has modified the state on the server, leading to a conflict."
+   */
+  PRECONDITION_REQUIRED = 428,
+
+  /**
+   * The user has sent too many requests in a given amount of time. Intended for use with rate-limiting schemes.
+   */
+  TOO_MANY_REQUESTS = 429,
+
+  /**
+   * The server is unwilling to process the request because either an individual header field,
+   * or all the header fields collectively, are too large.
+   */
+  REQUEST_HEADER_FIELDS_TOO_LARGE = 431,
+
+  /**
+   * A server operator has received a legal demand to deny access to a resource or to a set of resources
+   * that includes the requested resource. The code 451 was chosen as a reference to the novel Fahrenheit 451.
+   */
+  UNAVAILABLE_FOR_LEGAL_REASONS = 451,
+
+  /**
+   * A generic error message, given when an unexpected condition was encountered and no more specific message is suitable.
+   */
+  INTERNAL_SERVER_ERROR = 500,
+
+  /**
+   * The server either does not recognize the request method, or it lacks the ability to fulfill the request.
+   * Usually this implies future availability (e.g., a new feature of a web-service API).
+   */
+  NOT_IMPLEMENTED = 501,
+
+  /**
+   * The server was acting as a gateway or proxy and received an invalid response from the upstream server.
+   */
+  BAD_GATEWAY = 502,
+
+  /**
+   * The server is currently unavailable (because it is overloaded or down for maintenance).
+   * Generally, this is a temporary state.
+   */
+  SERVICE_UNAVAILABLE = 503,
+
+  /**
+   * The server was acting as a gateway or proxy and did not receive a timely response from the upstream server.
+   */
+  GATEWAY_TIMEOUT = 504,
+
+  /**
+   * The server does not support the HTTP protocol version used in the request
+   */
+  HTTP_VERSION_NOT_SUPPORTED = 505,
+
+  /**
+   * Transparent content negotiation for the request results in a circular reference.
+   */
+  VARIANT_ALSO_NEGOTIATES = 506,
+
+  /**
+   * The server is unable to store the representation needed to complete the request.
+   */
+  INSUFFICIENT_STORAGE = 507,
+
+  /**
+   * The server detected an infinite loop while processing the request.
+   */
+  LOOP_DETECTED = 508,
+
+  /**
+   * Further extensions to the request are required for the server to fulfill it.
+   */
+  NOT_EXTENDED = 510,
+
+  /**
+   * The client needs to authenticate to gain network access.
+   * Intended for use by intercepting proxies used to control access to the network (e.g., "captive portals" used
+   * to require agreement to Terms of Service before granting full Internet access via a Wi-Fi hotspot).
+   */
+  NETWORK_AUTHENTICATION_REQUIRED = 511,
+}
+
+export default HttpStatusCode;

Services/server/src/interfaces/search.ts

@@ -0,0 +1,10 @@
+export interface Search {
+  AND?: {
+    field: string;
+    value: string;
+  }[];
+  OR?: {
+    field: string;
+    value: string;
+  }[];
+}

Services/server/src/middlewares/exception.ts

@@ -0,0 +1,30 @@
+import { NextFunction, Request, Response } from "express";
+import HttpError from "../interfaces/http-error";
+import HttpStatusCode from "../interfaces/http-status";
+import { ValidateError } from "tsoa";
+
+function errorHandler(error: Error, _req: Request, res: Response, _next: NextFunction) {
+  if (error instanceof HttpError) {
+    return res.status(error.status).json({
+      status: error.status,
+      message: error.message,
+    });
+  }
+
+  if (error instanceof ValidateError) {
+    return res.status(error.status).json({
+      status: HttpStatusCode.UNPROCESSABLE_ENTITY,
+      message: "Validation error(s).",
+      detail: error.fields,
+    });
+  }
+
+  console.error(error);
+
+  return res.status(HttpStatusCode.INTERNAL_SERVER_ERROR).json({
+    status: HttpStatusCode.INTERNAL_SERVER_ERROR,
+    message: error.message,
+  });
+}
+
+export default errorHandler;

Services/server/src/storage/index.ts

@@ -0,0 +1,11 @@
+import * as Minio from "minio";
+
+const minioClient = new Minio.Client({
+  endPoint: process.env.MINIO_HOST ?? "localhost",
+  port: process.env.MINIO_PORT ? +process.env.MINIO_PORT : undefined,
+  useSSL: !!process.env.MINIO_SSL,
+  accessKey: process.env.MINIO_ACCESS_KEY ?? "",
+  secretKey: process.env.MINIO_SECRET_KEY ?? "",
+});
+
+export default minioClient;

Services/server/src/utils/auth.ts

@@ -0,0 +1,39 @@
+import * as express from "express";
+import { createVerifier } from "fast-jwt";
+
+import HttpError from "../interfaces/http-error";
+import HttpStatusCode from "../interfaces/http-status";
+
+if (!process.env.PUBLIC_KEY && !process.env.REALM_URL) {
+  throw new Error("Require public key or realm url.");
+}
+
+const jwtVerify = createVerifier({
+  key: async () => {
+    return `-----BEGIN PUBLIC KEY-----\n${process.env.PUBLIC_KEY}\n-----END PUBLIC KEY-----`;
+  },
+});
+
+export function expressAuthentication(
+  request: express.Request,
+  securityName: string,
+  _scopes?: string[],
+) {
+  return new Promise(async (resolve, reject) => {
+    if (securityName !== "bearerAuth") reject(new Error("Unknown authentication method."));
+
+    const token = request.headers["authorization"]?.includes("Bearer ")
+      ? request.headers["authorization"].split(" ")[1]
+      : null;
+
+    if (!token) return reject(new HttpError(HttpStatusCode.UNAUTHORIZED, "No token provided."));
+
+    const payload = await jwtVerify(token).catch((_) => null);
+
+    if (!payload) {
+      return reject(new HttpError(HttpStatusCode.UNAUTHORIZED, "Invalid token provided."));
+    }
+
+    return resolve(payload);
+  });
+}

Services/server/src/utils/minio.ts

@@ -0,0 +1,74 @@
+import { EhrFolder } from "../interfaces/ehr-fs";
+import minioClient from "../storage";
+
+/**
+ * Remove slash at the start and ensure slash at the end of the path
+ * @param path - path to be check and ensure
+ * @returns path without / at start and end with trailing slash
+ */
+function safePath(path: string) {
+  return path.replace(/^\/|\/$/g, "") + "/";
+}
+
+/**
+ * Replace illegal character eg. ? % < > / \ : | that can't be in path with "-".
+ * @param path - string to check and replace
+ * @returns path with illegal character replaced with "-"
+ */
+export function replaceIllegalChars(path: string, replaceChar = "-") {
+  return path.replace(/[/\\?%*:|"<>]/g, replaceChar);
+}
+
+/**
+ * Utility function to check for .keep file if it is exist or not.
+ * @returns true if .keep exist, false otherwise
+ */
+export async function pathExist(path: string): Promise<boolean> {
+  return await minioClient
+    .statObject("ehr", `${safePath(path)}.keep`)
+    .then((_) => true)
+    .catch((e) => {
+      if (e.code === "NotFound") return false;
+      throw new Error("Object Storage Error");
+    });
+}
+
+/**
+ * Utility function to list folder by using .keep file with prefix in minio.
+ * @param path - path to list
+ * @return list of folder with metadata
+ */
+export function listFolder(path?: string): Promise<EhrFolder[]> {
+  if (path) path = safePath(path);
+
+  return new Promise((resolve, reject) => {
+    const folder: EhrFolder[] = [];
+
+    const stream = minioClient.listObjectsV2("ehr", path ?? "");
+
+    stream.on("data", (v) => {
+      if (!(v && v.prefix)) return;
+
+      folder.push({
+        pathname: v.prefix,
+        name: v.prefix.slice(path?.length).split("/")[0],
+        createdAt: "N/A",
+        createdBy: "N/A",
+      });
+    });
+
+    stream.on("end", async () => {
+      for (let i = 0; i < folder.length; i++) {
+        const stat = await minioClient.statObject("ehr", `${folder[i].pathname}.keep`);
+        folder[i] = {
+          ...folder[i],
+          createdAt: stat.metaData.createdat ?? "N/A",
+          createdBy: stat.metaData.createdby ?? "N/A",
+        };
+      }
+      resolve(folder);
+    });
+
+    stream.on("error", () => reject(new Error("Object storage error occured.")));
+  });
+}