Authentication & Role-Based Access

Care Circle uses role-based access control. In the Cloudflare Workers backend, access is currently open for demo purposes.

Role Middleware Architecture

requireAuth

Require valid JWT on protected routes. Currently returns demo token for any credentials.

requireRole

Enforce role-based access (Coordinator, Caregiver, Family). Implemented in backend middleware.

Supported Roles

  • Coordinator

    Full read/write access, can create cases, assign members

  • Caregiver

    Can update tasks, verify medications, log health observations

  • Family

    Read-only access to care profiles, export data

Audit Middleware

Every action is logged with before/after snapshots via KV storage.

See the Audit page for live audit logs