# Brainstorming GSoC 2026 Project Ideas **URL:** \ **Category:** GSoC\ **Tags:** gsoc2026\ **Created:** [January 13, 2026, 2:39pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974 "2026-01-13T14:39:27Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![beryl](https://talk.openmrs.org/user_avatar/talk.openmrs.org/beryl/32/19987_2.png) [@beryl](https://talk.openmrs.org/u/beryl)\ **Post date:** [January 13, 2026, 2:39pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/1 "2026-01-13T14:39:27Z")
Hi everyone, Wishing you all a Happy New Year! šŸŽ‰ Google has announced the timeline for [GSoC 2026](https://summerofcode.withgoogle.com/programs/2026), and as we prepare to apply, it is a good time to start brainstorming project ideas. Whether you have a fully thought-out idea or just a rough concept, donā€™t hesitate to share it here! Even rough ideas are welcome, we can work together to refine and shape them into impactful projects. ### Project Sizes: - **Small** : ~90 hours - **Medium** : ~175 hours - **Large** : ~350 hours Additionally, if youā€™re interested in becoming a mentor, feel free to express your availability here! ### Useful Resources: - [GSoC Project Creation Guidelines](https://openmrs.atlassian.net/wiki/spaces/RES/pages/26262694/GSoC+-+Project+Creation+Guidelines) - [Googleā€™s Guide: Defining a Project Ideas List](https://google.github.io/gsocguides/mentor/defining-a-project-ideas-list) - [OpenMRS Mentor Guidelines](https://openmrs.atlassian.net/wiki/spaces/RES/pages/26262683/GSoC+-+Guidelines+for+Mentors) - [OpenMRS Product Roadmap](https://openmrs.atlassian.net/wiki/spaces/docs/pages/26937801/Product+Roadmap) Looking forward to your ideas and seeing how we can make GSoC 2026 another amazing year for OpenMRS! cc: @ibacher @dennis @dkayiwa @veronica @jayasanka ---
**Author:** ![praneeth622](https://talk.openmrs.org/user_avatar/talk.openmrs.org/praneeth622/32/22128_2.png) [@praneeth622](https://talk.openmrs.org/u/praneeth622)\ **Post date:** [January 13, 2026, 8:15pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/2 "2026-01-13T20:15:40Z")
Hi Ian Bacher, Brandon Istenes, Veronica Muthee, jayasankaā€” Happy New Year! šŸŽ‰ Iā€™m **Praneeth** (praneeth622), an active O3 contributor with merged PRs in `openmrs-esm-patient-chart` . While working on those bugs, I identified some critical gaps in OpenMRS O3 that would make excellent GSoC projects. Iā€™d love feedback on these ideas! ## **Idea** #1: **Form Engine Error Handling & Validation Improvements** **The Problem I See:** - Forms sometimes crash silently when data is missing or invalid - Error messages arenā€™t always clear to clinicians (ā€œField is requiredā€ without saying _which_ field) - When forms fail, users lose their work **Rough Solution:** Build better error handling into the form engine ā€” better validation messages, error boundaries to prevent crashes, and maybe a way to recover partially-filled forms. **Why It Matters:** Forms are critical for patient registration, observations, and orders. Making them more reliable directly improves clinician experience. **Possible Size:** Medium (175h) or Large (350h) depending on scope ## **Idea** #2: **Workspace Developer Experience Improvements** **The Problem I See:** While working with workspaces (in the O3-4648 fix), I found some things that could be easier: - Understanding how `launchChildWorkspace` works took time - Debugging workspace state is hard without dev tools - New contributors struggle with workspace patterns **Rough Solution:** Create better tools for developers working with workspaces ā€” maybe debugging panels, better documentation, or helper hooks. **Why It Matters:** Workspaces are everywhere in O3. Making them easier to work with helps all contributors. **Possible Size:** Small (90h) or Medium (175h) ## **Idea** #3: **Offline Support for Order Basket** **The Problem I See:** The order basket only works online. If network fails, clinicians lose pending orders. **Rough Solution:** Add offline queueing using IndexedDB, so orders sync when connection returns. **Why It Matters:** OpenMRS targets low-connectivity environments. Orders are time-sensitive. **Possible Size:** Medium (175h) ## **Questions:** 1. Are these problems worth solving? Or are there bigger priorities Iā€™m missing? 2. For Idea #1 (forms), what pain points do implementers face most? 3. Should any of these be combined or split differently? **Background:** I have PRs in patient-chart ([#2939](https://github.com/openmrs/openmrs-esm-patient-chart/pull/2939), [#2819](https://github.com/openmrs/openmrs-esm-patient-chart/pull/2819)) and am familiar with workspaces, forms, and orders workflows. Happy to refine these based on feedback! ---
**Author:** ![jayasanka](https://talk.openmrs.org/user_avatar/talk.openmrs.org/jayasanka/32/22204_2.png) [@jayasanka](https://talk.openmrs.org/u/jayasanka)\ **Post date:** [January 14, 2026, 12:45pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/3 "2026-01-14T12:45:31Z")
Thanks for kicking off the thread, @beryl! Iā€™ve gone ahead and started a wiki page here: [https://om.rs/gsoc2026](https://om.rs/gsoc2026) Iā€™ve also brought over the project ideas we had to leave behind last year. You can find them here: [https://openmrs.atlassian.net/wiki/spaces/RES/pages/752844801/Summer+of+Code+2026#Good-Ideas-We-Had-to-Leave-Behind-Last-Year](https://openmrs.atlassian.net/wiki/spaces/RES/pages/752844801/Summer+of+Code+2026#Good-Ideas-We-Had-to-Leave-Behind-Last-Year) . Might be worth reviewing to see which ones still feel relevant or promising. And happy New Year to you too, @praneeth622! Really appreciate you bringing in those great project ideas. ---
**Author:** ![jayasanka](https://talk.openmrs.org/user_avatar/talk.openmrs.org/jayasanka/32/22204_2.png) [@jayasanka](https://talk.openmrs.org/u/jayasanka)\ **Post date:** [January 21, 2026, 9:43am UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/5 "2026-01-21T09:43:07Z")
Just to add some context and momentum hereā€¦ Last yearā€™s GSoC projects delivered _very real impact_ for OpenMRS and, more importantly, for implementations. A quick snapshot of what came out of GSoC last year: - **šŸ’‰ Immunization and Vaccination Tracking in O3** A clear and visual way to track immunization schedules, dose sequences, and due or overdue vaccinations directly in the patient chart, especially impactful for maternal and child health programs. - **šŸ“˜ Automatic OpenAPI Documentation** A build-time plugin that generates accurate OpenAPI specs directly from REST resources, eliminating API documentation drift and making integrations much easier for implementers. - **šŸ’» Modern Standalone Replacement** A new cross-platform standalone runtime using Java 17 and MariaDB4j that works smoothly on Apple Silicon, Linux, and Windows, significantly lowering the barrier to getting OpenMRS running locally. - **āš” Performance Testing Framework** A scalable Gatling-based framework to simulate real user load, catch performance regressions early, and generate concrete data that implementations can use to plan infrastructure and scale safely. - **āŒØ Fast Data Entry improvements** Integration of the React Form Engine into the Fast Data Entry app, making retrospective data entry faster, more flexible, and aligned with modern O3 workflows. - **šŸ›  Improved Implementer Tools** Reliability and usability fixes that help non-technical administrators configure systems with more confidence and fewer support issues. - **šŸ•µ Audit Log Management** A backend module that makes audit logs accessible and actionable, supporting troubleshooting and compliance needs in regulated healthcare environments. - **šŸŒ Translation Builder for the Form Builder** A full in-UI solution for managing form translations that allows users to view, edit, search, upload, and download translations, making it much easier to support multilingual implementations. When we reflected on these in a recent meeting, one thing stood out very clearly: **the projects that worked best were the ones rooted in real implementation needs and had ongoing feedback from implementers.** That collaboration is really our secret sauce. Thatā€™s why weā€™re especially keen to hear from implementer organizations early this year. If you have: - workflows that are painful today, - features you wish existed, - operational or scale challenges, - reporting, performance, or data quality gaps, - or ideas that would directly improve care delivery, please post them here,even if theyā€™re rough or half-formed. You bring the real-world problem. The community can help shape it into a strong, impact-driven GSoC project. Thatā€™s how we keep GSoC delivering outcomes that actually move the platform forward. Looking forward to the ideas! ā¤ P.S. @burke @paul @janflowers @ibacher @dkayiwa you have seen this play out across multiple cycles too, feel free to jump in if you want to add anything on why this kind of collaboration works well. ---
**Author:** ![dkayiwa](https://talk.openmrs.org/user_avatar/talk.openmrs.org/dkayiwa/32/179_2.png) [@dkayiwa](https://talk.openmrs.org/u/dkayiwa)\ **Post date:** [January 21, 2026, 11:06am UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/6 "2026-01-21T11:06:17Z")
Thanks @jayasanka for bringing this out very clearly! šŸ‘ @kmuiruri i have seen you raise a number of feature requests for O3. Does this look like where some of that can be done when [@PalladiumKenya](https://talk.openmrs.org/groups/palladiumkenya) provides mentorship to a GSoC student or two? ---
**Author:** ![veronica](https://talk.openmrs.org/user_avatar/talk.openmrs.org/veronica/32/20174_2.png) [@veronica](https://talk.openmrs.org/u/veronica)\ **Post date:** [January 21, 2026, 2:20pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/7 "2026-01-21T14:20:21Z")
> [@dkayiwa](#): > > @kmuiruri i have seen you raise a number of feature requests for O3 "100% agree with you, **@dkayiwa**. **@kmuiruri** , a perfect example of this is the **Notification feature** youā€™re championing. It addresses workflow pain ā€¦.. clinicians not knowing when lab results are ready ā€”and it would make a fantastic candidate for a **GSoC** project. It would really be nice for **PalladiumKenya** to provide mentorship on this ~ from the requirements stage into development. This would improve care delivery for the users and also benefit the wider community. ---
**Author:** ![kmuiruri](https://talk.openmrs.org/letter_avatar/kmuiruri/32/5_5575768a8748004e209b776fc1b2916d.png) [@kmuiruri](https://talk.openmrs.org/u/kmuiruri)\ **Post date:** [January 21, 2026, 2:40pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/8 "2026-01-21T14:40:19Z")
@dkayiwa @veronica thanks for bring this to our attention and for the consideration, weā€™d be happy to be part of GSoC 2026 as [@PalladiumKenya](https://talk.openmrs.org/groups/palladiumkenya) Iā€™m proposing 2 areas as I engage team [@PalladiumKenya](https://talk.openmrs.org/groups/palladiumkenya) on other areas 1. Service integration within clinical forms where users would be able to access variables based on program areas where a client is enrolled to. An example of a general patient seeking outpatient services who is diagnosed with HIV and enrolled to HIV program hence requiring additional variables specifically required for HIV programming. 2. Notification feature to support care coordination and communication among practitioners within a health facility ---
**Author:** ![olewandowski](https://talk.openmrs.org/user_avatar/talk.openmrs.org/olewandowski/32/20972_2.png) [@olewandowski](https://talk.openmrs.org/u/olewandowski)\ **Post date:** [January 26, 2026, 1:51pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/9 "2026-01-26T13:51:28Z")
Hi everyone, Iā€™d like to propose a project for GSoC 2026: **A Native O3 Frontend for the Audit Trail.** **The idea:** Over the last year, @wikumc has done fantastic work building a foundation with the Audit Log Web Module and is still actively refining it today. Currently, viewing these logs happens within the Legacy UI. As more implementations move to an O3-first workflow, there is a great opportunity to build upon Wikumā€™s work by bringing these capabilities into the modern O3 frontend. **The opportunity:** Since the REST API for logs is already built and available, integration into O3 can solve some minor UX hurdles. Having a modern Audit Log Dashboard in place and ā€œChange Historyā€ views directly within the O3 Patient Chart would allow admins and clinicians to track accountability without needing to navigate back to the legacy interface. **Mentorship:** SolDevelo is happy to provide mentorship for this project to ensure the interface aligns with O3 ecosystem standards. **Useful Resources about the Audit Trail solution:** - [New Audit Log System for OpenMRS: Seeking Feedback and Suggestions](https://talk.openmrs.org/t/new-audit-log-system-for-openmrs-seeking-feedback-and-suggestions/43137) - [https://openmrs.atlassian.net/wiki/spaces/projects/pages/363757631/Improved+Audit+Logging+GSoC+2025](https://openmrs.atlassian.net/wiki/spaces/projects/pages/363757631/Improved+Audit+Logging+GSoC+2025) - [https://openmrs.atlassian.net/wiki/spaces/docs/pages/113999876/Enabling+Hibernate+Envers+Audit+Logging+in+OpenMRS](https://openmrs.atlassian.net/wiki/spaces/docs/pages/113999876/Enabling+Hibernate+Envers+Audit+Logging+in+OpenMRS) I believe this would be a high-impact way to improve clinical accountability in O3 and would love your feedback on that, thanks! šŸ™‚ CC: @alebiedzinski @pwargulak ---
**Author:** ![bawanthathilan](https://talk.openmrs.org/user_avatar/talk.openmrs.org/bawanthathilan/32/22532_2.png) [@bawanthathilan](https://talk.openmrs.org/u/bawanthathilan)\ **Post date:** [January 26, 2026, 2:28pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/10 "2026-01-26T14:28:08Z")
Hi everyone, Iā€™d like to propose a project for **GSoC 2026** : **A Prometheus & Grafana Metrics Module for OpenMRS**. **The idea:** OpenMRS deployments increasingly need better visibility into both **system health** and **business level usage metrics** (such as patient registrations, encounters, and clinic activity). While OpenMRS provides logging and basic monitoring, there is currently no standardized, Prometheus compatible way to expose aggregated business metrics or provide ready to use dashboards for implementers. This project proposes building a dedicated **OpenMRS module** that exposes secure, Prometheus-compatible metrics and ships with **pre built Grafana dashboards** tailored for healthcare workflows. The module would focus on **aggregated, non identifiable metrics** and require no changes to OpenMRS core. **The opportunity:** Since OpenMRS already exposes rich domain services (patients, encounters, visits, appointments), a metrics module can leverage these services to generate meaningful insights with minimal overhead. Implementers could gain realtime visibility into patient flow, clinic performance, and system usage, while developers benefit from standardized JVM and request level metrics. Additionally, providing a simple metrics API would allow other OpenMRS modules to publish their own metrics without needing direct Prometheus knowledge, helping establish a consistent observability pattern across the ecosystem. Feedback, suggestions are very welcome. ---
**Author:** ![veronica](https://talk.openmrs.org/user_avatar/talk.openmrs.org/veronica/32/20174_2.png) [@veronica](https://talk.openmrs.org/u/veronica)\ **Post date:** [January 27, 2026, 7:56am UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/11 "2026-01-27T07:56:27Z")
Hi Everyone, Iā€™d like to propose adding **Patient Visit Summary Printing** to the GSoC project list for consideration. **Rationale:** - Requested by the Uganda team, the DRC team, and Palladium - [Requirements](https://openmrs.atlassian.net/wiki/spaces/projects/pages/edit-v2/473333762) are documented and ready - Builds on the recently completed printing support - Addresses real implementation needs ---
**Author:** ![dkayiwa](https://talk.openmrs.org/user_avatar/talk.openmrs.org/dkayiwa/32/179_2.png) [@dkayiwa](https://talk.openmrs.org/u/dkayiwa)\ **Post date:** [January 27, 2026, 12:13pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/12 "2026-01-27T12:13:29Z")
Because our obs table is growing to such levels that we are soon going to have real performance implications that need to be addressed, i am bring this back from last yearā€™s GSoC ideas as was proposed by @ibacher - **Archiving voided data:** Voiding in OpenMRS is a form of soft-deleting. We basically set a binary column to `1` and attempt to ignore data at various points. Voiding data is meant to mark it as invalid for one reason or another (e.g., an obs has been superceded or data was recorded against the wrong patient). This is very useful, because voided data can be easily restored, but over the long term (especially with ā€œimmutableā€ objects likes obs), this causes some OpenMRS tables to grow to contain far more voided data than non-voided data. To address this, we should add a mechanism to archive voided data with the possibility of restoring it. ---
**Author:** ![dishakd](https://talk.openmrs.org/letter_avatar/dishakd/32/5_5575768a8748004e209b776fc1b2916d.png) [@dishakd](https://talk.openmrs.org/u/dishakd)\ **Post date:** [January 27, 2026, 6:51pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/13 "2026-01-27T18:51:13Z")
Hi everyone, Iā€™m exploring potential project ideas for **Google Summer of Code 2026** with **OpenMRS** , and Iā€™d really appreciate community feedback on the feasibility and relevance of the following idea before moving forward. * * * **Problem I Addressed** In many real hospital environments, clinicians work in rotating shifts. While OpenMRS captures encounters, orders, and observations effectively, there doesnā€™t appear to be a structured way to manage clinical follow-up tasks and responsibility across shifts. In practice, this can lead to: - Missed follow-ups (e.g., reviewing lab results, reassessing patients) - Loss of clinical context when care is handed over - Reliance on informal methods such as paper notes or verbal handover Iā€™m trying to understand whether this is a problem that OpenMRS implementations commonly face and whether itā€™s something worth addressing at the platform/module level. * * * ### Idea I am Proposing **Clinical Task Handover & Shift Continuity (Concept)** The idea is to introduce a lightweight, backend-focused mechanism that allows clinicians to create and track patient-linked clinical tasks, with support for continuity across shifts. At a high level, this could include: - Creating clinical follow-up tasks linked to a patient and encounter - Assigning tasks to providers or locations (e.g., ward / department) - Carrying over pending tasks when shifts change - Tracking task status (pending, completed, overdue) - Basic auditability for safety and accountability This is only a concept at this stage, and Iā€™m intentionally keeping the scope open. * * * ### Questions for the Community Iā€™d really appreciate feedback on: - Is this a real and recurring problem in OpenMRS implementations? - Are there existing modules, discussions, or past efforts addressing this? - Would this be better modeled using existing OpenMRS concepts (e.g., orders, encounters, programs)? - Does this seem feasible and appropriate for a GSoC-scale project? - Any concerns or alternative approaches I should consider? ---
**Author:** ![jayasanka](https://talk.openmrs.org/user_avatar/talk.openmrs.org/jayasanka/32/22204_2.png) [@jayasanka](https://talk.openmrs.org/u/jayasanka)\ **Post date:** [February 5, 2026, 12:27pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/14 "2026-02-05T12:27:21Z")
> [@kmuiruri](#): > > Iā€™m proposing 2 areas as I engage team [@PalladiumKenya](https://talk.openmrs.org/groups/palladiumkenya) on other areas Thanks for proposing these two ideas, @kmuiruri! Could you please elaborate a bit more on them, especially around the specific problem weā€™re trying to solve with each? > [@olewandowski](#): > > A Native O3 Frontend for the Audit Trail. @olewandowski brilliant idea! Since the REST endpoint and backend are already in place, this feels like a great candidate for a small-sized project. @wikumc @dkayiwa @njiddasalifu one use case we havenā€™t covered yet is auditing specifically who _ **viewed** _ patient data and _ **what** _ data was accessed. This could potentially be a separate project. Would love to hear your thoughts or ideas around this. > [@bawanthathilan](#): > > A Prometheus & Grafana Metrics Module for OpenMRS. Thanks @bawanthathilan for proposing this! Iā€™m a bit obsessed with Prometheus myself šŸ˜„ @raff I know this is already on your backlog. Do you think this could be shaped into a potential GSoC project, or tweaked slightly to fit? One idea could be having a common module that allows other modules to send metrics, which then exposes them to Grafana. Weā€™ve got some work done here but I guess pehaps itā€™s not yet in shape to be adopted. > [@veronica](#): > > Patient Visit Summary Printing @veronica thanks so much for this! itā€™s very well defined ā¤Iā€™ve added it to our available project list. > [@dkayiwa](#): > > Archiving voided data @dkayiwa thanks for bringing this up. This is definitely a priority area. Let me know if youā€™d be interested in leading this project. > [@dishakd](#): > > linical Task Handover & Shift Continuity Thanks @dishakd, very thoughtful proposal! @brandon does this align with what youā€™re planing to working on? Would love to get your feedback here. ---
**Author:** ![dishakd](https://talk.openmrs.org/letter_avatar/dishakd/32/5_5575768a8748004e209b776fc1b2916d.png) [@dishakd](https://talk.openmrs.org/u/dishakd)\ **Post date:** [February 5, 2026, 5:35pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/15 "2026-02-05T17:35:06Z")
Thanks so much for the kind words Iā€™d really appreciate your feedback on this, especially regarding alignment with any ongoing or planned work. At this stage, this is still an exploratory idea, and Iā€™m very open to adjusting the scope or direction based on community and mentor input. Looking forward to hearing your thoughts when you have time. ---
**Author:** ![nsalifu](https://talk.openmrs.org/user_avatar/talk.openmrs.org/nsalifu/32/20775_2.png) [@nsalifu](https://talk.openmrs.org/u/nsalifu)\ **Post date:** [February 5, 2026, 8:50pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/16 "2026-02-05T20:50:44Z")
Hi @jayasanka thanks for following up on this. Yes, some events auditing are yet to be implemented, I am discussing with Wikum on how we can shape that into another gsoc project. I will submit it anytime soon. ---
**Author:** ![nsalifu](https://talk.openmrs.org/user_avatar/talk.openmrs.org/nsalifu/32/20775_2.png) [@nsalifu](https://talk.openmrs.org/u/nsalifu)\ **Post date:** [February 8, 2026, 8:40am UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/17 "2026-02-08T08:40:03Z")
Hi everyone, this is another proposal for GSoCā€™2026 # GSoC 2026 Project Proposal: Extend Audit Log Module in OpenMRS Related Module & Work: [openmrs-module-auditlogweb](https://github.com/openmrs/openmrs-module-auditlogweb) ## 1. Project Overview During GSoC 2025, the [Audit Log Web Module](https://openmrs.atlassian.net/wiki/spaces/projects/pages/363757631/Improved+Audit+Logging+GSoC+2025) was developed to integrate Hibernate Envers into OpenMRS 2.7.0+. This allowed for the tracking of Create, Update, and Delete (CUD) operations. While this established a strong foundation, the current implementation only covers a fraction of the auditing requirements needed for international EMR compliance (such as HIPAA in the US or GDPR in Europe). The goal for this year is to transition the module from a ā€œchange trackerā€ to a comprehensive security and compliance tool by implementing ā€œReadā€ auditing and tracking critical system-level events. ## 2. The Problem Currently, the module doesnā€™t capture some several critical actions: - **View Access:** We know who edited a patientā€™s record, but we donā€™t know who viewed it. - **System Security:** Login attempts/failures, account lockouts, and session timeouts are not logged. - **Administrative Actions:** Changes to global properties, module installations, and data exports (printing/CSV) are not captured. Just to mention a few ā€¦ ## 3. Proposed Key Features for GSoC 2026 ### A. Read Operation Auditing Implement a mechanism to log when sensitive data is accessed. 1. Patient Dashboard Access: Log when a user views a patientā€™s related data/summary. 2. REST API Access: Audit GET requests for sensitive resources (Observations, Encounters, etcā€¦). ### B. System & Security Event Tracking Capture events outside of the Hibernate Envers scope: 1. Authentication: User login, logout, and failed login attempts. 2. System Lifecycle: Server startup, shutdown, and maintenance mode toggles. 3. Data Integrity: Backups, restores, and PHI export events (printing or file downloads). ### C. Advanced Reporting & Exporting 1. Export Tools: Allow admins to export filtered logs to CSV, Excel, or JSON for legal audits. 2. Data Retention: Implement basic log rotation or archival settings to prevent the database from growing indefinitely. ## 4. Technical Requirements & Skills - Java, Spring, Spring Events, Spring AOP & Hibernate: Deepening the use of Interceptors or Spring AOP for read-tracking. - OpenMRS Core: Understanding the authentication and authorization workflows. - REST API: Expanding the existing [auditlogweb](https://github.com/openmrs/openmrs-module-auditlogweb/blob/main/omod/src/main/java/org/openmrs/module/auditlogweb/rest/AuditLogRestController.java) endpoints. - Reactjs & TypeScript: Making use of reactjs for developing the UI of the audit logging - Performance Tuning: Managing high-volume data writes without slowing down the UI. ## 5. References & Inspiration - PCC Audit Tool Example: [PCC EHR Audit Log](https://learn.pcc.com/help/pcc-ehr-audit-log/) - US EHR Certification (ONC): Focuses on ā€œWho, What, When, and Whereā€ for every PHI access. cc @beryl @jayasanka @wikumc @dkayiwa @ibacher @Veronica @olewandowski ---
**Author:** ![ibacher](https://talk.openmrs.org/user_avatar/talk.openmrs.org/ibacher/32/19751_2.png) [@ibacher](https://talk.openmrs.org/u/ibacher)\ **Post date:** [February 10, 2026, 2:52pm UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/18 "2026-02-10T14:52:00Z")
Alright a couple of security-related GSoC projects: ## Integrate O3 with the Authentication module The [authentication module](https://github.com/openmrs/openmrs-module-authentication) brings a lot of cool authentication features to OpenMRS, including user-customizable authentication schemes and supports things like TOTP. However, thereā€™s currently no functional integration with the O3 UI. I think itā€™s pretty solvable by ensuring that the authentication module sends what Iā€™d term ā€œfake redirectā€ responses, e.g., responses that will trigger [this section of the openmrsFetch() implementation](https://github.com/openmrs/openmrs-esm-core/blob/1402209379d46100578d8148e20e97b3a6fb2479/packages/framework/esm-api/src/openmrs-fetch.ts#L201) and then ensuring that we have the right stuff for the frontend to submit and validate the TOTP token with the backend. Should likely be a ā€œmedium-ishā€ sized project involving both Java and Typescript skills. ## OpenMRS Password Authentication Re-work OpenMRSā€™s password authentication system hasnā€™t really been updated since 2009 and still has some of the hallmarks of a password authentication system from that timeā€”this doesnā€™t mean itā€™s broken, just that it doesnā€™t support things like multiple hash iterations, work-factors, etc. This could use some modernization. This would likely be just a small Java-focused project to update things or it could be a more medium-size project to rework our password authentication so that itā€™s built on top of Spring Security. ---
**Author:** ![raff](https://talk.openmrs.org/user_avatar/talk.openmrs.org/raff/32/11894_2.png) [@raff](https://talk.openmrs.org/u/raff)\ **Post date:** [February 11, 2026, 9:24am UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/19 "2026-02-11T09:24:22Z")
> [@jayasanka](#): > > Thanks @bawanthathilan for proposing this! Iā€™m a bit obsessed with Prometheus myself šŸ˜„@raff I know this is already on your backlog. Do you think this could be shaped into a potential GSoC project, or tweaked slightly to fit? One idea could be having a common module that allows other modules to send metrics, which then exposes them to Grafana. Weā€™ve got some work done here but I guess pehaps itā€™s not yet in shape to be adopted. I think itā€™s a great GSoC project. In the next 2 months we are going to provide basic Grafana setup with centralized logging for OpenMRS backend and DB. Metrics such as hardware utilisation and business level metrics would be a great addition. ---
**Author:** ![siddharthbaleja](https://talk.openmrs.org/letter_avatar/siddharthbaleja/32/5_5575768a8748004e209b776fc1b2916d.png) [@siddharthbaleja](https://talk.openmrs.org/u/siddharthbaleja)\ **Post date:** [February 11, 2026, 9:33am UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/20 "2026-02-11T09:33:37Z")
Hi everyone! Iā€™m very interested in the project for **Horizontal Scaling of OpenMRS instances**. Iā€™ve been working closely with Rafal Korytkowski on the foundational work for this, and Iā€™ve reached my first milestone by submitting a PR that implements the initial Storage Service. **Current Progress:** - **JIRA:** [TRUNK-6488: Create a Storage Service for the core](https://openmrs.atlassian.net/browse/TRUNK-6488) - **PR:** [openmrs-esm-system-status #1](https://github.com/openmrs/openmrs-esm-system-status/pull/1) (Implementing the storage service integration) **GSoC 2026 Roadmap Strategy:** Based on my work with the storage service, Iā€™m starting to map out the next phases for the GSoC timeline: - **Storage Service Expansion:** Moving beyond the core to adjust O3 modules to utilize the new storage abstraction. - **Distributed Caching:** Implementing caching mechanisms that work across multiple instances to ensure data consistency. - **OpenSearch Migration:** Transitioning from local Lucene indexes to OpenSearch for Hibernate Search to allow the search index to scale independently of the web servers. Working on TRUNK-6488 gave me a deep look into the coreā€™s file handling, and Iā€™m excited to apply that to the broader scaling challenges. Looking forward to refining this proposal with @raff and the community! ---
**Author:** ![raff](https://talk.openmrs.org/user_avatar/talk.openmrs.org/raff/32/11894_2.png) [@raff](https://talk.openmrs.org/u/raff)\ **Post date:** [February 11, 2026, 11:05am UTC](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974/21 "2026-02-11T11:05:56Z")
> [@siddharthbaleja](#): > > Iā€™ve reached my first milestone by submitting a PR that implements the initial Storage Service. I think you meant health check and maintenance pages and not storage service. Storage Service, Distributed Caching and Elastic Search instead of Lucene has all been done already. However, thereā€™s still more work to be done in the horizontal scaling space so Iā€™m all in for having a GSoC project on that. [Next page](https://talk.openmrs.org/t/brainstorming-gsoc-2026-project-ideas/47974.md?page=2)