This is a presentation that was given to the 2018 WorldVistA Community Meeting, giving an update on new features and functionality in the QEWD.js technology.
Server – REST API Server platform – Federation / Integration Platform – JSON Transformation Platform – MicroService Platform – 100% JavaScript / Node.js – Open Source (Apache 2 License) – Includes a High-performance embedded JSON database for User Sessions and data caching
databases: – YottaDB – Caché / Ensemble – Redis-based emulation • https://github.com/robtweed/ewd-redis-globals • Allows JavaScript to be a primary language for accessing Global Storage databases – ie a modern alternative to the Mumps/M language • Uses NodeM and cache.node to provide the low-level integration with YottaDB and Caché respectively • Adds a JSON database abstraction – "the JavaScript equivalent of ^"
Allows the creation of MicroService architectures – Instead of a monolithic application, you can break it down into many function-specific, self- contained units • Integration with OpenId Connect for authentication / single sign-on • Dockerised version
Will run on Windows, Linux, OS X and even Raspberry Pi – All you need is Docker installed • "Disposable" – Fire it up. If it fails, restart a new one – Nothing to back-up or maintain – Completely self-contained run-time component • "Replicable" – Fire up as many instances as you need, each running as a MicroService, on the same or different servers • "Configurable" – The individual behavior / role of a QEWD Container instance is defined by simple text / JSON / JavaScript files on the host
Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Host Server Mapped files Reside on host. Accessible to Container as if they were its own files
Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Host Server Mapped files Reside on host. Accessible to Container as if they were its own files - Configuration JSON files - JavaScript modules - "Node-less" - You can use these to customize how each QEWD MicroService behaves
implementation in Leeds • Interest growing in other areas of the NHS – Uses the Ripple Foundation's Open Source Ripple Health IT stack • PulseTile (UI) • QEWD.js (Middle-tier) • EtherCIS (Open Source OpenEHR database) • https://ripple.foundation/ • https://ripple.foundation/2017/10/leeds-trail-blazing-way-forward-open-platform-based-person-held-record/
YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process PulseTile QEWD Conductor MicroService Container QEWD-Managed Secret QEWD-Managed JSON Web Token (JWT) REST over HTTPS Internet JWTs are created by the QEWD MicroService, but reside on the Browser. Can be used for: - Authentication - Session data JWTs are digitally-signed using a "secret key"
YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process PulseTile QEWD Conductor MicroService Container QEWD-Managed Secret QEWD-Managed JSON Web Token (JWT) REST over HTTPS Internet The browser sends the JWT with Every request it sends to the QEWD Conductor MicroService The MicroService updates the JWT and returns it with its response
YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process PulseTile QEWD Conductor MicroService Container QEWD-Managed Secret QEWD-Managed JSON Web Token (JWT) REST over HTTPS Internet Browser can read/use the contents of the JWT, but cannot modify it without creating a digital signature mismatch MicroService Container includes a Secret key which allows JWT to be: - Created - Validated (signature conforms to content) - Modified
YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process (a) QEWD User Authentication MicroService Container ewd-qoper8 queue Express Node.js socket.io Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process PulseTile QEWD Conductor MicroService Container QEWD-Managed Shared Secret QEWD-Managed JWT REST over HTTPS Internet WebSockets over HTTPS All MicroService Containers share the same Secret key. So the JWT on each MicroService can be - Validated (signature conforms to content) - Modified
YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process (a) QEWD User Authentication MicroService Container ewd-qoper8 queue Express Node.js socket.io Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process PulseTile QEWD Conductor MicroService Container QEWD-Managed Shared Secret QEWD-Managed JWT REST over HTTPS Internet WebSockets over HTTPS QEWD MicroServices automatically connect themselves via WebSocket connections. These are bi-directional and persistent, and can work over HTTPS/SSL. Avoids costly setup and teardown of SSL Connections for each interaction Automatically re-connect if a MicroService is restarted
Express Node.js socket.io Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process NHS Digital Citizen Id Authentication Service OpenId Connect over REST Internet
Express Node.js socket.io Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process NHS Digital Citizen Id Authentication Service OpenId Connect over REST Internet Citizen Id id_token Is added as a claim to QEWD JWT Can be separately authenticated against Citizen Id by other services
Express Node.js socket.io Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process JSON Over REST eg UKCloud PHR Data Server (EtherCIS) CDR Data Session Cache QEWD Jumper QEWD Server has privileged access to OpenEHR Servers CDR User access controlled by QEWD JWTs
Server (EtherCIS) ewd-qoper8 queue Express Node.js socket.io Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process PHR Data Session Cache Fire-walled to allow only HTTPS traffic on specified port to/from primary QEWD Server
Shared Secret ewd-qoper8 queue Express Node.js socket.io Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Local Care Record Systems REST over HSCN Ensemble Ensemble access Authentication to be agreed, but can be either: - Privileged access for QEWD Server - Via access token / JWT
Node.j s socket.i o Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Local Care Record Systems HSCN Ensemble Fire-walled to allow only HTTPS traffic on specified port to/from primary QEWD Server QEWD Container
socket.io Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Cache GT.M, YottaDB Redis Node.js Worker Process Embedded JSON Database (YottaDB) Further options possible: Data can be maintained in and served up from the embedded JSON database within the QEWD Container Long-term persistence is either via: - Mapping database files to Docker host - Container writing out data updates to JSON file on host
as a JSON database, Helm is 100% JavaScript code • No M code anywhere • Allows the power and flexibility of a Global Storage database to be available to JavaScript developers, and in their terms
robtweed
bgpat
colopl
yut0naga1_fa
jozono
jtakeda
satomasahiro2005
daidaidai
codmoninc
mhrtech
stomk
bitkey
chriscoyier
philnash
letsgokoyo
watany
sergeychernyshev
sstephenson
dugsong
geoffreycrofte
uxyall
skipperchong
speakerdeck
maggiecrowley
