go-pacs /auth
Hospital A
Go-PACS </>
$ auth --login // authorized clinicians only
>
// trouble?

Credentials AES-encrypted in-browser, carried over TLS inside the hospital VPN. Passwords are never stored.