The most significant challenge we faced was architecting a secure Role-Based Access Control (RBAC) system for four distinct user entities. Managing the authentication flow so that Doctors, Patients, and Frontline Workers could only access their specific dashboards—without any data leakage or privilege escalation—required implementing complex backend middleware and strict JWT validation. Additionally, designing a database schema that efficiently linked patient medical histories with appointments while ensuring the dashboard statistics updated in real-time was a logical puzzle. We overcame these hurdles by refining our MongoDB relationships and adopting a rigorous testing approach with Postman to ensure every endpoint was secure before deployment.