AndroidCareProvider - Feature Inventory & Dependency Analysis¶

Repository: AndroidCareProvider
Platform: Android (Java + Kotlin)
Analysis Date: November 7, 2025
Version: 2.0.33 (Build 68)

Table of Contents¶

1. Feature Catalog
2. Dependency Analysis
3. Third-Party Library Inventory
4. Permissions Analysis
5. Feature Completeness Matrix
6. Deprecated Dependencies
7. Security Vulnerabilities
8. Upgrade Recommendations

Feature Catalog¶

Core Features¶

1. Authentication & User Management¶

Implementation Details:
- Location: Registration/Activities/, CommonUser/Activities/
- Dependencies: Firebase Auth, Google Play Services Auth
- Storage: SharedPreferences (tokens, user data)

Security Concerns:
- ⚠️ Tokens stored in SharedPreferences (not encrypted)
- ⚠️ No certificate pinning for API calls
- ⚠️ Missing biometric authentication for sensitive operations

2. Video Consultations¶

Implementation Details:
- Modern: CareProvider/Activities/OneToOneCallActivity.kt (Kotlin, VideoSDK)
- Legacy: Collaboration/Presence/CollaborationMain.java (Java, WebRTC - deprecated)
- Meeting Creation: Backend API + VideoSDK integration
- Signaling: VideoSDK managed (previously WebSocket to NodeServer)

Known Issues:
- ⚠️ Dual video call implementations (old and new)
- ⚠️ Legacy WebRTC code still present (technical debt)
- ⚠️ No fallback to audio-only on poor connection

3. Appointment Management¶

Implementation Details:
- Main UI: CareProvider/Fragments/MyAppointCarePFragment.java
- Adapter: MyAppointmentsCarePAdapter.java (expandable list)
- Filters: Date range, status (upcoming, past, cancelled)
- Actions: Start session, reschedule, cancel, view details

Data Flow:

API: GET /api/CareProvider/GetAppointments
  ↓
Parse JSON response
  ↓
Populate RecyclerView (MyAppointmentsCarePAdapter)
  ↓
User actions → API calls → Refresh list

4. Schedule Management¶

Implementation Details:
- Location: CareProvider/Schedule/, Scheduling/WeeklySchedule/
- UI: Custom calendar components (awesome-calendar library)
- Storage: Backend API, synced on-demand
- Slot Generation: Backend calculates available slots based on schedule

Complexity:
- WeeklyScheduleFragment.java = ~2600 LOC (very large, needs refactoring)

5. Patient Messaging¶

Implementation Details:
- Chat List: CareProvider/Activities/ChatMainActivity.java
- Conversation: CareProvider/Activities/ConversationActivity.java
- Adapter: ConversationListAdapter.java
- Real-time: FCM push notifications + MessageObservable event bus
- Media Upload: Separate MediaAPI endpoint

Message Types:
- Text
- Image (uploaded, URL embedded)
- Document (uploaded, URL embedded)
- Voice (audio file uploaded)
- Link (with preview)

6. Patient Assessments¶

Implementation Details:
- Create: CareProvider/Activities/InitialAssessmentAcitivity.java
- View Assigned: CareProvider/Fragments/MyQyestionaireFragment.java
- View Responses: CareProvider/Activities/FilledAssessmentViewActivity.java
- Question Types: Multiple choice, text, rating scales, yes/no

Workflow:

1. Provider creates/selects template
2. Assigns to patient with due date
3. Patient receives FCM notification
4. Patient completes assessment
5. Provider receives notification
6. Provider reviews responses + adds feedback

7. Homework Assignment¶

Implementation Details:
- Assign: CareProvider/Activities/NewHomeWorkActivity.java
- Review: CareProvider/Activities/HomeWorkCheckActivity.java
- History: CareProvider/Activities/HomeworkFeedbackHistoryActivity.java
- List: Client/Fragments/MyHomeWorkFragment.java (shared with patient app)

Attachment Types:
- PDF documents (uploaded)
- YouTube videos (embedded player)
- Web links (opened in WebView)
- Custom instructions (text)

8. Prescription Management¶

Implementation Details:
- Add/Edit: views/activity/AddPrescriptionActivity.kt (Kotlin, Navigation Component)
- View: CareProvider/Activities/PrescriptionActivity.java
- List: CareProvider/Fragments/PrescriptionListFragment.java
- Legacy Add: PrescriptionCPAddFragment.java, PrescriptionClientAddFragment.java

Components:
- Drug selection (search API)
- Dosage (strength, form, quantity)
- Instructions (frequency, duration)
- Diagnosis (free text)
- Allergy list (displayed, not validated)

Safety Concerns:
- ❌ No drug interaction checking
- ❌ No allergy cross-reference
- ❌ No duplicate prescription detection

9. Patient History & Records¶

Implementation Details:
- Main View: CareProvider/Activities/ClientHistoryActivity.java
- Provider History: CareProvider/Activities/CPHistoryActivity.java
- Data Sources: Multiple API endpoints aggregated

Displayed Sections:
- Personal info
- Diagnosis list
- Prescription history
- Assessment results
- Homework assignments
- Session notes
- Appointment log

10. Payment & Billing¶

Implementation Details:
- Main UI: CareProvider/Activities/PaymentsDetailActivity.java
- Payment Setup: CareProvider/Fragments/PaymentMethodFragment.java, PaymentInfoFragment.java
- Promo Codes: CareProvider/Activities/AddPromoCodeActivity.java
- Integration: WebView redirect to payment gateway (Smart Routing)

Payment Flow (Patient Side):

1. Select slot → SlotPaymentSuggestActivity
2. Choose payment method (Wallet, Card, Insurance)
3. If Card: PaymentWebActivity (WebView) → Payment gateway
4. Return with payment status
5. Create appointment
6. Provider receives notification

Provider Payment:
- Backend calculates provider earnings
- No direct payment processing in app
- View-only payment history

11. Profile & Settings¶

Implementation Details:
- Main Profile: CareProvider/Fragments/MyProfileCarePFragment.java
- Legacy: CareProvider/Fragments/MyProfileFragment.java
- Tabs: ViewPager with multiple fragments
- Photo Upload: Image cropping (android-image-cropper library)

Profile Sections:
1. Personal Information
2. Contact Information
3. Education & Credentials
4. Current Job
5. Video Bio
6. Payment Information
7. Saudi Commission Documents (Saudi Arabia specific)

12. Search & Discovery (Patient Features)¶

Implementation Details:
- Search: Client/Fragments/FindCPFragment.java
- Filters: CareProvider/Activities/CarePListingFiltersActivity.java
- Provider List: CommonUser/Activities/CarePListActivity.java
- Details: CommonUser/Activities/CarePDetailActivity.java (with YouTube player)

Search Criteria:
- Name (keyword)
- Specialty (multi-select)
- Location (city/region)
- Availability (date range)
- Rating (minimum stars)
- Price range
- Gender preference
- Languages spoken

13. Notifications¶

Notification Types:

Implementation:

// MyFirebaseMessagingService.java
@Override
public void onMessageReceived(RemoteMessage remoteMessage) {
    String notificationType = data.get("notificationType");

    switch (notificationType) {
        case "1": // New message
            openChatActivity(conversationId);
            break;
        case "3": // Incoming call
            Intent intent = new Intent(this, OneToOneCallActivity.class);
            intent.putExtra("meetingId", meetingId);
            startActivity(intent);
            break;
        // ...
    }
}

14. Additional Features¶

Dependency Analysis¶

Gradle Dependencies Summary¶

Total Dependencies: 78 (including test dependencies)

Third-Party Library Inventory¶

Core Dependencies¶

1. Android Jetpack (AndroidX)¶

Recommendation: Upgrade AndroidX libraries to latest stable versions.

2. Firebase Services¶

Issues:
- ❌ firebase-jobdispatcher is deprecated → Migrate to WorkManager
- ⚠️ Firebase BoM not used → Version conflicts possible

Recommendation:

// Use Firebase BoM for version management
implementation platform('com.google.firebase:firebase-bom:32.7.0')
implementation 'com.google.firebase:firebase-messaging'
implementation 'com.google.firebase:firebase-auth'
implementation 'com.google.firebase:firebase-crashlytics'
implementation 'com.google.firebase:firebase-analytics'

3. Networking Libraries¶

Issues:
- ❌ android-async-http is abandoned (last update 2016)
- ⚠️ android-networking has low maintenance activity
- ⚠️ Duplicate Gson versions (2.8.2 and 2.8.5)

Recommendation: Migrate to modern alternatives

// Replace with Retrofit + OkHttp
implementation 'com.squareup.retrofit2:retrofit:2.9.0'
implementation 'com.squareup.retrofit2:converter-gson:2.9.0'
implementation 'com.squareup.okhttp3:okhttp:4.12.0'
implementation 'com.squareup.okhttp3:logging-interceptor:4.12.0'

// Replace WebSocket with OkHttp WebSocket or Scarlet
implementation 'com.tinder.scarlet:scarlet:0.1.12'

4. Video & Media¶

Issues:
- ⚠️ VideoSDK version may be outdated (check latest)
- ⚠️ PDF viewer library last updated 2019

Recommendation: Check VideoSDK latest version and consider migration path.

5. Image Loading & Processing¶

Issues:
- ❌ Both Glide AND Picasso included (unnecessary duplication)
- ⚠️ Picasso version is ancient (2.4.0 from 2015)
- ⚠️ CircleImageView is outdated (use ShapeableImageView from Material)

Recommendation:

// Remove Picasso, use Glide only
// implementation 'com.squareup.picasso:picasso:2.4.0' // DELETE

// Replace CircleImageView with Material Components
// implementation 'de.hdodenhof:circleimageview:2.1.0' // DELETE
implementation 'com.google.android.material:material:1.11.0'
// Use ShapeableImageView in layouts

6. UI Components¶

Issues:
- ❌ 3 different range slider libraries (crystalrangeseekbar, RangeSeekBar, seekbar-ranged-view)
- ❌ Many abandoned libraries (easydialog, ColorDialog)
- ⚠️ Most UI libraries are 3-5 years old

Recommendation: Consolidate and modernize UI libraries. Use Material Design Components where possible.

7. Utilities¶

Issues:
- ⚠️ Most utility libraries are outdated
- ❌ accompanist-permissions included but Compose not used

8. Google Play Services¶

Status: ✅ All recent and properly maintained.

9. Social & Authentication¶

Issues:
- ⚠️ latest.release is bad practice (unpredictable builds)
- ⚠️ Facebook Network Quality library is abandoned

Recommendation:

// Use specific version
implementation 'com.facebook.android:facebook-android-sdk:16.2.0'

10. Legacy/Deprecated Dependencies¶

11. Custom/Local Libraries¶

Notes:
- Custom libraries are maintained in-tree
- Should be evaluated for replacement with modern alternatives

Testing Dependencies¶

Issues:
- ❌ Using alpha versions for testing libraries
- ⚠️ Very outdated test dependencies
- ⚠️ Espresso version inconsistency

Recommendation:

testImplementation 'junit:junit:4.13.2'
androidTestImplementation 'androidx.test.ext:junit:1.1.5'
androidTestImplementation 'androidx.test.espresso:espresso-core:3.5.1'
androidTestImplementation 'androidx.test:runner:1.5.2'
androidTestImplementation 'androidx.test:rules:1.5.0'

Permissions Analysis¶

Declared Permissions (27 total)¶

Dangerous Permissions (Require Runtime Request):
- CAMERA
- RECORD_AUDIO
- READ_EXTERNAL_STORAGE (Android <13)
- WRITE_EXTERNAL_STORAGE (Android <13)
- READ_MEDIA_IMAGES (Android 13+)
- POST_NOTIFICATIONS (Android 13+)
- BLUETOOTH_CONNECT (Android 12+)
- READ_PHONE_STATE

Security Concerns:
- ⚠️ READ_PHONE_STATE: High privacy risk, should be removed if not essential
- ⚠️ GET_ACCOUNTS: Appears unused, should be removed
- ⚠️ SYSTEM_ALERT_WINDOW: Powerful permission, ensure proper usage
- ⚠️ CODE_DRAW_OVER_OTHER_APP_PERMISSION: Non-standard, verify necessity

Recommendations:
1. Remove unused permissions (GET_ACCOUNTS, likely others)
2. Audit READ_PHONE_STATE usage
3. Ensure all dangerous permissions are requested at runtime
4. Add permission rationale dialogs

Feature Completeness Matrix¶

Platform Comparison¶

Missing Features (Gap Analysis)¶

Deprecated Dependencies¶

Critical (Remove Immediately)¶

High Priority (Migrate Soon)¶

Security Vulnerabilities¶

Known CVEs (Dependency Check Required)¶

⚠️ Action Required: Run dependency vulnerability scan

./gradlew dependencyCheckAnalyze

Potential Vulnerabilities¶

Recommendations:
1. Upgrade Gson to latest
2. Replace android-async-http with Retrofit
3. Consider OkHttp WebSocket instead of nv-websocket-client
4. Remove Picasso

Upgrade Recommendations¶

Immediate Actions¶

Priority 1: Security & Compliance

// 1. Remove deprecated Firebase JobDispatcher
// implementation 'com.firebase:firebase-jobdispatcher:0.8.5' // DELETE
// Migrate jobs to WorkManager (already included)

// 2. Upgrade Gson (security)
implementation 'com.google.code.gson:gson:2.10.1' // Was: 2.8.2/2.8.5

// 3. Remove abandoned HTTP client
// implementation 'com.loopj.android:android-async-http:1.4.9' // DELETE

Priority 2: Remove Duplicates

// Remove Picasso (duplicate)
// implementation 'com.squareup.picasso:picasso:2.4.0' // DELETE

// Remove duplicate range sliders (keep one)
// implementation 'com.crystal:crystalrangeseekbar:1.1.3' // DELETE
// implementation 'com.github.guilhe:seekbar-ranged-view:2.0.5' // DELETE
// Keep: implementation 'com.github.Jay-Goo:RangeSeekBar:3.0.0'

// Remove unused Compose library
// implementation 'com.google.accompanist:accompanist-permissions:0.27.0' // DELETE

Priority 3: Fix Facebook SDK

// Use specific version instead of latest.release
implementation 'com.facebook.android:facebook-android-sdk:16.2.0'

Short-term Actions¶

Migrate to Modern Networking Stack

// Replace Fast Android Networking + async-http
implementation 'com.squareup.retrofit2:retrofit:2.9.0'
implementation 'com.squareup.retrofit2:converter-gson:2.9.0'
implementation 'com.squareup.okhttp3:okhttp:4.12.0'
implementation 'com.squareup.okhttp3:logging-interceptor:4.12.0'

// Replace WebSocket
implementation 'com.squareup.okhttp3:okhttp:4.12.0' // Includes WebSocket

Upgrade AndroidX

implementation 'androidx.appcompat:appcompat:1.6.1'
implementation 'androidx.constraintlayout:constraintlayout:2.1.4'
implementation 'androidx.navigation:navigation-fragment:2.7.6'
implementation 'androidx.navigation:navigation-ui:2.7.6'
implementation 'androidx.swiperefreshlayout:swiperefreshlayout:1.1.0'

Upgrade Testing

testImplementation 'junit:junit:4.13.2'
androidTestImplementation 'androidx.test.ext:junit:1.1.5'
androidTestImplementation 'androidx.test.espresso:espresso-core:3.5.1'
androidTestImplementation 'androidx.test:runner:1.5.2'

Long-term Actions¶

Consolidate UI Libraries

// Replace old UI libraries with Material Design Components
implementation 'com.google.android.material:material:1.11.0'

// Remove:
// - easydialog → MaterialAlertDialogBuilder
// - ColorDialog → Material Color Picker
// - circleimageview → ShapeableImageView
// - Multiple seekbars → Material Slider

Evaluate VideoSDK
- Check latest VideoSDK version
- Consider migration path if major version available
- Evaluate alternatives (Agora, Twilio) if needed

Consider Kotlin Migration
- New features in Kotlin only
- Gradual migration of existing code
- Use Kotlin Coroutines for async operations

Summary & Action Plan¶

Critical Issues¶

1. ❌ Deprecated dependencies (firebase-jobdispatcher, async-http, support libraries)
2. ❌ Security vulnerabilities (old Gson, unmaintained libraries)
3. ❌ Duplicate libraries (Picasso+Glide, 3 range sliders)
4. ⚠️ Outdated testing dependencies (alpha versions, old JUnit)
5. ⚠️ Privacy concerns (READ_PHONE_STATE, GET_ACCOUNTS permissions)

Priority Summary¶

Risk Assessment¶

Document Status: Complete
Next Steps: Security Audit
Maintained By: Audit Team
Version: 1.0