Login token management

A system, comprising:

• a processor;
• and
• a memory containing computer program code that, when executed by the processor, performs an operation comprising:
• receiving, at a client system, a request to authenticate a user for a healthcare data management system, wherein the user is associated with a plurality of applications relating to the healthcare data management system and a plurality of roles relating to the healthcare data management system;
• authenticating the user, at the client system, for all applications of the plurality of application and all roles of the plurality of roles, and in response maintaining a login token relating to the authenticated user at the client system;
• selecting a role from the plurality of roles, for the user, and in response maintaining an authorization token relating to the selected role at the client system;
• and
• initiating a session for the user in the healthcare data management system, comprising:
• generating an encrypted session cookie relating to the user and the session;
• storing the encrypted session cookie at the client system;
• and
• periodically updating a timestamp for the session cookie.

A non-transitory computer-readable medium containing computer program code that, when executed by operation of one or more computer processors, performs an operation comprising:

• receiving, at a client system, a request to authenticate a user for a healthcare data management system, wherein the user is associated with a plurality of applications relating to the healthcare data management system and a plurality of roles relating to the healthcare data management system;
• authenticating the user, at the client system, for all applications of the plurality of application and all roles of the plurality of roles, and in response maintaining a login token relating to the authenticated user at the client system;
• selecting a role from the plurality of roles, for the user, and in response maintaining an authorization token relating to the selected role at the client system;
• and
• initiating a session for the user in the healthcare data management system, comprising:
• generating an encrypted session cookie relating to the user and the session;
• storing the encrypted session cookie at the client system;
• and
• periodically updating a timestamp for the session cookie.