Commit Graph

609 Commits

Author SHA1 Message Date
Serreau Jovann
68ed76eba5 Fix breadcrumb JSON-LD: use absolute URLs for item field
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:18:06 +01:00
Serreau Jovann
281835ee0d Add CA global, commission E-Ticket and Stripe to admin dashboard task
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:15:10 +01:00
Serreau Jovann
0e79c65966 Optimize N+1 queries: batch billets, soldCounts, paid orders with items
- AccountController: single query for all billets by categories, single
  GROUP BY query for sold counts, eager-load items on paid orders
- HomeController: single query for all buyable billets of active categories

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:13:31 +01:00
Serreau Jovann
0772e618da Mark Meilisearch cache invalidation as done (already handled by EventIndexService)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:09:11 +01:00
Serreau Jovann
25033c29a0 Add automatic CSRF protection on all POST forms
- CsrfProtectionSubscriber: auto-injects hidden _csrf_token in HTML responses,
  auto-verifies on POST requests
- Excludes: webhooks, JSON APIs, login (has its own CSRF)
- 9 tests covering all cases (GET, excluded, JSON, no token, invalid, valid, inject, non-HTML)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:08:02 +01:00
Serreau Jovann
36456e8dfe Add rate limiting on login, order, invitation, contact routes
- Login: 5 attempts / 15 min (Symfony login_throttling)
- Order create: 10 / 5 min (sliding window)
- Invitation respond/register: 5 / 15 min
- Contact form: 3 / 10 min
- RateLimiterSubscriber with route-to-limiter mapping
- Returns 429 when rate limited

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 20:01:01 +01:00
Serreau Jovann
207e985821 Add Messenger monitor command, uploads backup, hourly cron
- MonitorMessengerCommand: checks failed messages, emails admin with details
- Backup script: add /public/uploads tar.gz alongside DB dump
- Ansible: cron every hour for messenger monitor
- TASK_CHECKUP: mark infrastructure tasks done

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:55:35 +01:00
Serreau Jovann
add8d8f5af Change backup retention to 1 day
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:53:25 +01:00
Serreau Jovann
30eceeccf9 Add database backup cron every 30 minutes via Ansible
- backup.sh.j2: pg_dump via Docker, gzip, 7 days retention
- deploy.yml: create backup dir, deploy script, configure cron
- TASK_CHECKUP: mark backup as done

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:52:52 +01:00
Serreau Jovann
b7b56ed35a Add dynamic events to sitemap (online + not secret), update TASK_CHECKUP
- Sitemap: list all online non-secret events with images
- Fix event/orga page counts in sitemap index
- TASK_CHECKUP: mark sitemap done, remove health check, captcha, E2E tests,
  simplify crons to backups only

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:51:34 +01:00
Serreau Jovann
8e0177463b Remove captcha task from TASK_CHECKUP
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:49:21 +01:00
Serreau Jovann
063b02dfe9 Simplify API section: scanner only (login, events, scan)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:48:11 +01:00
Serreau Jovann
7dc6d4b01f Add API section to TASK_CHECKUP: login, events, scan, stats
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:47:43 +01:00
Serreau Jovann
244717a0d0 Add task: block invitations if Stripe not validated
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:46:37 +01:00
Serreau Jovann
80aa2a19d6 Remove Billets & Scan section from TASK_CHECKUP (deferred)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:45:46 +01:00
Serreau Jovann
048999c26c Add TASK_CHECKUP.md with all pending tasks and improvements
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:44:44 +01:00
Serreau Jovann
aaad00ede0 Add invitation registration flow: accept sends email, prefilled signup form
- Accept: sends email with unique registration link
- /invitation/{token}/inscription: prefilled form (company, email, offer, commission)
  with password, SIRET, address, phone fields
- Account created as ROLE_ORGANIZER, pre-approved, pre-verified
- Response page: link to finalize registration immediately
- Email: welcome message with offer recap and register button

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:23:01 +01:00
Serreau Jovann
ddeee82dd8 Add commission examples table for 1, 2, 5, 10, 15, 20 EUR on invitation landing
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:18:11 +01:00
Serreau Jovann
d7a498292f Complete invitation landing: offers, commissions, how it works, unsubscribe handling
- Landing page: features grid, 3-step how it works, 3 offers with highlight,
  commissions breakdown (E-Ticket + Stripe) with example calculation
- Unsubscribe: auto-refuse pending invitations, notify contact@e-cosplay.fr
- Email: enable List-Unsubscribe header for invitation emails
- Accept/refuse now via POST forms (CSRF safe)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:16:22 +01:00
Serreau Jovann
0bb6f43339 Add invitation landing page with E-Ticket showcase, accept/refuse buttons
- /invitation/{token} GET: landing page with platform presentation
- Sets status to 'opened' on first view
- Neo-brutalist design: offer banner, features grid, message block
- Accept/refuse via POST forms (not GET links)
- Shows current status if already responded
- Email links to landing page instead of direct accept/refuse
- Admin uses viewUrl instead of acceptUrl/refuseUrl

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:12:31 +01:00
Serreau Jovann
abd0b13ea5 Add delete invitation button
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 19:07:29 +01:00
Serreau Jovann
ac65d4af64 Add offer and commission rate to organizer invitation
- offer (free/basic/custom) and commissionRate fields on OrganizerInvitation
- Admin form: select offer + commission rate input
- Invitation list: show offer badge + rate
- Email: gold banner with proposed offer and commission rate (hors Stripe)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 18:24:40 +01:00
Serreau Jovann
a0724ccf88 Redesign invitation email: prominent CTA, E-Ticket by E-Cosplay showcase block
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 18:21:08 +01:00
Serreau Jovann
24e7eb5734 Add resend invitation button for non-accepted invitations
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 17:53:05 +01:00
Serreau Jovann
ca41078adf Redesign invite organizer page to match admin theme (table, cards, badges)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 17:44:43 +01:00
Serreau Jovann
cca5575274 Add organizer invitation system: invite, accept, refuse
- OrganizerInvitation entity: companyName, firstName, lastName, email,
  message, status (sent/opened/accepted/refused), unique token (64 hex chars)
- Admin route /admin/organisateurs/inviter: form + invitation list with status
- Button "Inviter un organisateur" on admin organizers page
- Email with accept/refuse links using unique token
- Public route /invitation/{token}/{action}: accept or refuse without auth
- Response page: confirmation message for accept/refuse
- Migration, PHPStan config, 7 entity tests

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 17:41:31 +01:00
Serreau Jovann
233f3d5067 Reduce cognitive complexity: extract computeEventStats from editEvent
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 22:36:57 +01:00
Serreau Jovann
06dcc95a32 Add per-billet sales stats in stats tab
- Calculate sold count and revenue per billet from paid orders
- Display 'Ventes par billet' card between KPIs and orders list

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 20:06:31 +01:00
Serreau Jovann
2364abe0cf Only generate BilletOrder for type=billet with isGeneratedBillet enabled
- Skip reservation_brocante and vote types
- Skip billets with isGeneratedBillet=false

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 20:03:47 +01:00
Serreau Jovann
4ad694ed59 Add resendInvitation tests: success, access denied, not found
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 19:23:55 +01:00
Serreau Jovann
f5cc3ac536 Add test for BilletBuyer isInvitation getter/setter
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 19:23:27 +01:00
Serreau Jovann
a13ee33078 Force gold accent color on invitation tickets, change header to 'Invitation'
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 19:18:58 +01:00
Serreau Jovann
be630e1c67 Add isInvitation field on BilletBuyer to distinguish invitations from free billets
- isInvitation (nullable bool) on BilletBuyer instead of checking totalHT == 0
- Set isInvitation=true when creating invitation in controller
- Email subject/content based on order.isInvitation
- Invoice shows organizer as buyer when order.isInvitation
- Invitations list filtered by isInvitation=true

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 19:14:45 +01:00
Serreau Jovann
ec8f8537ce Show organizer as buyer on invoice for invitations (totalHT = 0)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 19:12:24 +01:00
Serreau Jovann
b472399878 Add view order button in stats, resend invitation button
- Stats tab: "Voir" button on each order linking to public order page
- Invitations tab: "Renvoyer" button to resend invitation email
- New route app_account_event_resend_invitation

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 19:11:15 +01:00
Serreau Jovann
66ddc297b1 Fix invitation list (use dedicated variable), invitation email subject and content
- Pass invitations from controller instead of Twig filter on paginator
- Email subject: "Votre invitation" for invitations, "Vos billets" for purchases
- Email content: different intro text for invitations

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 19:09:49 +01:00
Serreau Jovann
bf6aa16e20 Add missing OrderController coverage: downloadTicket, invoice success, zero qty
- downloadTicket: order not found, ticket not found, success with mock PDF
- invoice: success with mock PDF (paid order)
- create: zero qty items filtered out

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 19:03:05 +01:00
Serreau Jovann
7b339a7a38 Make BilletBuyer firstName, lastName, email nullable for guest checkout flow
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:55:04 +01:00
Serreau Jovann
386d803fe5 Remove unused BilletOrder import from OrderControllerTest
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:50:35 +01:00
Serreau Jovann
272cb93c18 Fix invitation test to create real BilletOrder for isInvitation coverage
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:47:03 +01:00
Serreau Jovann
410e6acdfd Add comprehensive OrderController tests
- create: not found, empty cart, guest, logged user, invalid billet,
  not buyable, exceeds quantity
- guest: not found, renders, empty fields, submit success, redirects if user set
- payment: not found, redirects if no name, renders with Stripe,
  404 without Stripe account
- success: not found, renders, failed status, succeeded with mock
- publicOrder: not found, renders
- invoice: not found, not paid returns 404

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:44:27 +01:00
Serreau Jovann
decbe99ae3 Add createInvitation tests: success, multiple billets, empty fields, invalid billet, access denied, invitations tab
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:36:53 +01:00
Serreau Jovann
e834dad706 Add cancelOrder tests: success with ticket invalidation, access denied, not found
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:35:35 +01:00
Serreau Jovann
47537a76e3 Exclude src/Repository from SonarQube analysis
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:33:33 +01:00
Serreau Jovann
f402c83ea7 Exclude Repository directory from PHPUnit coverage (Doctrine boilerplate)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:32:58 +01:00
Serreau Jovann
7cd3659745 Fix orderNumber too long in stats tab test (VARCHAR 20 limit)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:26:15 +01:00
Serreau Jovann
3f880745b3 Add coverage for stats tab: empty, with paid orders, with search query
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:19:11 +01:00
Serreau Jovann
de37db1774 Add OrderIndexService tests and AccountController tickets tab with data test
- OrderIndexServiceTest: 6 tests covering search empty, results, no hits,
  exception, indexOrder success and failure
- AccountControllerTest: tickets tab with BilletBuyer + BilletOrder data

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:18:11 +01:00
Serreau Jovann
f021da7f9c Add coverage tests: event detail with categories/billets, hidden, inactive, notBuyable
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:12:59 +01:00
Serreau Jovann
c3e3ed9a33 Add test for BilletBuyer orderNumber getter/setter
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 18:11:07 +01:00