admin/e-ticket
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
517e31f2f77cf72549193ef079eeb1b8790ed8b0
e-ticket/TASK_CHECKUP.md

63 lines
3.8 KiB
Markdown
Raw Normal View History

Add TASK_CHECKUP.md with all pending tasks and improvements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:44:44 +01:00
# Task Checkup - E-Ticket
## A faire
### Billetterie & Commandes
- [ ] Décrémenter la quantité disponible du billet après achat (stock management)
- [ ] Empêcher l'achat si stock épuisé (vérification côté serveur)
- [ ] Ajouter un email de notification à l'orga quand une commande est passée
- [ ] Ajouter un email de notification à l'orga quand une commande est annulée/remboursée
- [ ] Gérer l'expiration des commandes pending (cron pour annuler après X minutes)
- [ ] Ajouter le webhook `payment_intent.payment_failed` pour gérer les échecs
- [ ] Ajouter le webhook `charge.refunded` pour mettre à jour le statut automatiquement
Add brocantes and vote to Basic offer, add billet type verification task Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:39:39 +01:00
- [ ] Vérifier le type de billet (billet/reservation_brocante/vote) selon l'offre orga à la création
Add TASK_CHECKUP.md with all pending tasks and improvements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:44:44 +01:00
### Invitations Organisateur
Add task: block invitations if Stripe not validated Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:46:37 +01:00
- [ ] Bloquer l'envoi d'invitations (billets) si Stripe n'est pas validé sur le compte orga
Auto-login after invitation registration, redirect to /mon-compte Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 22:49:41 +01:00
- [x] Après inscription via invitation, connecter automatiquement l'utilisateur
Show clear error and redirect to login on duplicate email registration Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 22:34:18 +01:00
- [x] Empêcher la double inscription (même email) avec message clair et redirect vers login
Notify admin when organizer accepts or refuses invitation Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 22:33:04 +01:00
- [x] Ajouter une notification admin quand un orga accepte/refuse une invitation
Add TASK_CHECKUP.md with all pending tasks and improvements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:44:44 +01:00
### Paiements & Finances
Add financial dashboard for organizer in payouts tab - 6 KPIs: encaissé, en attente, remboursé, com E-Ticket, com Stripe, net perçu - Calculated from all orders linked to organizer's events - Displayed above export buttons and payouts table Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 22:23:59 +01:00
- [x] Ajouter le dashboard financier pour l'orga (encaissé, en attente, remboursé, com E-Ticket, com Stripe, net perçu)
Mark payouts tab as already done in TASK_CHECKUP Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 22:19:22 +01:00
- [x] Ajouter les virements Stripe (payouts) dans l'onglet de l'orga (déjà en place)
Add monthly export CSV + PDF for admin and organizers - ExportService: monthly stats query, CSV generation, PDF generation via dompdf - Admin: /admin/export/{year}/{month} (CSV) + /admin/export/{year}/{month}/pdf - Orga: /mon-compte/export/{year}/{month} (CSV) + /mon-compte/export/{year}/{month}/pdf - Admin CSV: commande, date, événement, orga, acheteur, billets, total HT, com E-Ticket, com Stripe - Orga CSV: + net perçu column - PDF A4 landscape: KPIs + orders table with commissions breakdown - Buttons in admin dashboard and orga payouts tab (current + previous month) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 22:16:55 +01:00
- [x] Générer un récapitulatif mensuel des ventes (export CSV + PDF, admin et orga)
Add TASK_CHECKUP.md with all pending tasks and improvements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:44:44 +01:00
### Admin
Add admin dashboard stats: CA, commissions E-Ticket/Stripe, orders, billets, orgas Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 22:09:16 +01:00
- [x] Dashboard admin : stats globales (CA global, commission E-Ticket, commission Stripe, nb commandes, nb billets, nb orgas, revenus net)
Add admin orders page with search, status filter, KPIs - /admin/commandes: paginated list of all orders - Search by order number, name, email - Filter by status (pending, paid, cancelled, refunded) - 4 KPIs: paid count, CA total HT, refunded count, cancelled count - Table: order number, buyer, event, billets, total, date, status badges - Navigation link 'Commandes' in admin header Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 21:25:32 +01:00
- [x] Admin : liste de toutes les commandes avec filtres (recherche, statut, KPIs)
Add organizer suspension: toggle, badge, block access, audit log - User.isSuspended (nullable bool, null = not suspended) - Admin: toggle suspend/reactivate button on organizers list - SuspendedUserSubscriber: redirects suspended users to homepage with error - Audit log: organizer_suspended / organizer_reactivated - Badge 'Suspendu' (red) replaces offer badge when suspended Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:53:46 +01:00
- [x] Admin : pouvoir suspendre/réactiver un organisateur (badge, bouton toggle, redirect si suspendu, audit log)
Mark admin edit offer/commission as done, add sub-account permissions verification task Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:49:23 +01:00
- [x] Admin : pouvoir modifier l'offre/commission d'un orga existant
Enforce sub-account permissions on events and tickets routes - SubAccountPermissionSubscriber: checks events/tickets permissions for sub-accounts - Blocks access with redirect + flash error if permission missing - Hide events/subaccounts/payouts tabs for sub-accounts without permission - 5 tests: non-sub-account, blocked events, allowed events, blocked tickets Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 22:05:16 +01:00
- [x] Vérifier que les permissions des sous-comptes sont respectées (scanner, events, tickets)
Add audit trail: AuditLog entity, AuditService, admin logs page - AuditLog entity: action, entityType, entityId, data (JSON), performedBy, ipAddress - AuditService: logs actions with current user and IP - Audit on: order_created, order_paid, order_cancelled, order_refunded - Admin /admin/logs: paginated table with action badges, details, user, IP - Navigation link 'Logs' in admin header Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:48:10 +01:00
- [x] Admin : logs des actions importantes (audit trail: commande, paiement, annulation, remboursement)
Add TASK_CHECKUP.md with all pending tasks and improvements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:44:44 +01:00
### UX & Pages
Redesign /tarifs page: 3 offers (free/basic 20EUR/mo/custom), commissions table, examples - Free: 0 EUR, 1 event, billets standards - Basic: 20 EUR/mois, events illimites, PDF, invitations - Sur-mesure: sur devis, design personnalise, brocantes, vote - Commission examples table: 1, 2, 5, 10, 15, 20 EUR - Stripe fees + E-Ticket fees breakdown - Includes section with 6 feature cards - Neo-brutalist design matching the rest of the app Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:36:26 +01:00
- [x] Page /tarifs : détailler les 3 offres (free/basic/custom) avec commissions et exemples
Add search bar on homepage hero section, redirects to /evenements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:33:47 +01:00
- [x] Ajouter la recherche d'événements sur la homepage
Add city and date filters on /evenements page - City filter: LIKE search on event.city - Date filter: events starting on selected date - Combines with Meilisearch text search - Labels on filter inputs, clear button when any filter active Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:32:51 +01:00
- [x] Ajouter le filtrage par date/ville sur /evenements
Fix billet preview iframe overflow on mobile, mark responsive check done - Preview iframe: overflow-x-auto container instead of fixed overflow - All public pages verified for 320px: flex-wrap, responsive breakpoints OK Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:29:40 +01:00
- [x] Responsive : pages publiques OK à 320px (flex-wrap, overflow-x-auto, breakpoints)
Add og:url, Twitter Card meta, og:type event on detail page - base.html.twig: add og:url (dynamic), twitter:card, twitter:title, twitter:description - event_detail: og:type = event - All public pages already have title + description blocks that propagate to OG Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:24:18 +01:00
- [x] Ajouter les métadonnées OpenGraph sur toutes les pages publiques (og:title, og:description, og:type, og:url, og:image, twitter:card)
Add dynamic events to sitemap (online + not secret), update TASK_CHECKUP - Sitemap: list all online non-secret events with images - Fix event/orga page counts in sitemap index - TASK_CHECKUP: mark sitemap done, remove health check, captcha, E2E tests, simplify crons to backups only Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:51:34 +01:00
- [x] Ajouter le sitemap dynamique avec les événements en ligne
Add og:url, Twitter Card meta, og:type event on detail page - base.html.twig: add og:url (dynamic), twitter:card, twitter:title, twitter:description - event_detail: og:type = event - All public pages already have title + description blocks that propagate to OG Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:24:18 +01:00
- [x] Fix breadcrumb JSON-LD URLs (absolute_url)
Add TASK_CHECKUP.md with all pending tasks and improvements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:44:44 +01:00
Simplify API section: scanner only (login, events, scan) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:48:11 +01:00
### API (Application mobile scanner uniquement)
Add API section to TASK_CHECKUP: login, events, scan, stats Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:47:43 +01:00
- [ ] POST `/api/login` : authentification email + password orga, retourne un JWT token
- [ ] GET `/api/events` : liste des événements de l'orga authentifié
- [ ] POST `/api/events/{id}/scan` : scan d'un billet (decode QR → check reference → check state → mark scanned, gérer sortie définitive)
- [ ] Middleware JWT pour sécuriser les routes /api/*
Add TASK_CHECKUP.md with all pending tasks and improvements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:44:44 +01:00
### Sécurité & Performance
Add rate limiting on login, order, invitation, contact routes - Login: 5 attempts / 15 min (Symfony login_throttling) - Order create: 10 / 5 min (sliding window) - Invitation respond/register: 5 / 15 min - Contact form: 3 / 10 min - RateLimiterSubscriber with route-to-limiter mapping - Returns 429 when rate limited Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:01:01 +01:00
- [x] Rate limiting sur les routes sensibles (login 5/15min, commande 10/5min, invitation 5/15min, contact 3/10min)
Add automatic CSRF protection on all POST forms - CsrfProtectionSubscriber: auto-injects hidden _csrf_token in HTML responses, auto-verifies on POST requests - Excludes: webhooks, JSON APIs, login (has its own CSRF) - 9 tests covering all cases (GET, excluded, JSON, no token, invalid, valid, inject, non-HTML) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:08:02 +01:00
- [x] CSRF token sur tous les formulaires POST (auto-inject + auto-verify)
Mark Meilisearch cache invalidation as done (already handled by EventIndexService) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:09:11 +01:00
- [x] Cache Meilisearch : invalider quand un événement est modifié (déjà fait via EventIndexService::indexEvent)
Optimize N+1 queries: batch billets, soldCounts, paid orders with items - AccountController: single query for all billets by categories, single GROUP BY query for sold counts, eager-load items on paid orders - HomeController: single query for all buyable billets of active categories Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:13:31 +01:00
- [x] Optimiser les requêtes N+1 (stats tab, billets par catégorie)
Add TASK_CHECKUP.md with all pending tasks and improvements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:44:44 +01:00
### Tests
- [ ] Atteindre 90%+ de couverture PHP
- [ ] Atteindre 100% de couverture JS
- [ ] Ajouter des tests pour le flow d'inscription via invitation
### Infrastructure
Add Messenger monitor command, uploads backup, hourly cron - MonitorMessengerCommand: checks failed messages, emails admin with details - Backup script: add /public/uploads tar.gz alongside DB dump - Ansible: cron every hour for messenger monitor - TASK_CHECKUP: mark infrastructure tasks done Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:55:35 +01:00
- [x] Configurer les crons pour les backups automatiques (DB + uploads, toutes les 30 min, rétention 1 jour)
- [x] Ajouter le monitoring des queues Messenger (commande + cron toutes les heures + email admin)
Reference in New Issue Copy Permalink