Imugiii
|
693e4a03bf
|
feat(auth): envoi reel de l'email de reset via relais SMTP (Brevo)
CI / secret-scan (pull_request) Successful in 15s
CI / php-lint (pull_request) Successful in 28s
CI / static-tests (pull_request) Successful in 1m6s
CI / js-tests (pull_request) Successful in 40s
CI / secret-scan (push) Successful in 14s
CI / php-lint (push) Successful in 33s
CI / static-tests (push) Successful in 1m11s
CI / js-tests (push) Successful in 38s
Client SMTP maison (zero lib, contrainte from-scratch) : ESMTP + STARTTLS +
AUTH LOGIN, conduit par SmtpClient contre un SmtpTransport injectable (seam de
test). SmtpMailer assemble un message text/plain UTF-8 (dot-stuffing, en-tetes
RFC2047) et implemente l'interface Mailer existante. PasswordResetController
choisit SmtpMailer si SMTP_HOST+USER+PASSWORD presents, sinon garde LogMailer
(dev sans infra mail inchange).
STARTTLS exige avant AUTH (pas d'auth en clair). Garde anti-injection CRLF sur
les adresses (SmtpClient) + filter_var du destinataire (SmtpMailer). readReply
borne (anti-boucle sur reponse malformee). Secrets uniquement en .env (hote) :
placeholders dans .env.example / .env.prod.example, rien de versionne.
Revue compliance : verdict block initial (injection CRLF + readReply non borne),
2 must_fix corriges + tests de regression. 8 tests SMTP, 429 total, PHPStan L6.
|
2026-06-23 13:31:47 +00:00 |
|
|
|
545aa19cf1
|
feat(borne): tailles 30/50cl boissons a la carte (R4) (#88)
CI / secret-scan (push) Successful in 18s
CI / php-lint (push) Successful in 33s
CI / static-tests (push) Successful in 1m9s
CI / js-tests (push) Successful in 41s
|
2026-06-22 14:07:46 +02:00 |
|
|
|
741cfdb02b
|
feat(orders): annulation de commande (CANCEL_ORDER) - PIN + audit + restock (mlt 7.1) (#83)
CI / secret-scan (push) Successful in 12s
CI / php-lint (push) Successful in 23s
CI / static-tests (push) Successful in 47s
CI / js-tests (push) Successful in 25s
|
2026-06-22 11:35:55 +02:00 |
|
|
|
10705858ac
|
feat(stock): enrichissement nutritionnel via API externe OpenFoodFacts (Cr 3.a.3) (#79)
CI / secret-scan (push) Successful in 8s
CI / php-lint (push) Successful in 20s
CI / static-tests (push) Successful in 49s
CI / js-tests (push) Successful in 26s
|
2026-06-22 09:31:15 +02:00 |
|
|
|
a35db88d2f
|
feat(api): P4 chunk 2 - read API catalogue borne (categories/produits/menus) (#60)
CI / secret-scan (push) Successful in 8s
CI / php-lint (push) Successful in 18s
CI / static-tests (push) Successful in 44s
CI / js-tests (push) Successful in 27s
|
2026-06-18 16:10:36 +02:00 |
|
|
|
60ce3460a5
|
feat(api): P4 chunk 1b - encaissement + decrement stock (#57)
CI / secret-scan (push) Successful in 18s
CI / php-lint (push) Successful in 27s
CI / static-tests (push) Successful in 55s
CI / js-tests (push) Successful in 31s
CI / auto-merge (push) Has been skipped
|
2026-06-18 14:29:22 +02:00 |
|
|
|
d880f2512a
|
feat(admin): RBAC - matrice roles/permissions + roles custom (PIN+audit diff) (P3) (#39)
CI / php-lint (push) Successful in 21s
CI / js-tests (push) Successful in 21s
CI / secret-scan (push) Successful in 10s
CI / static-tests (push) Successful in 44s
CI / auto-merge (push) Has been skipped
|
2026-06-17 14:25:42 +02:00 |
|
|
|
e430f54d85
|
feat(admin): gestion des comptes back-office (CRUD users + RGPD, PIN+audit) (P3) (#38)
CI / js-tests (push) Successful in 19s
CI / secret-scan (push) Successful in 7s
CI / php-lint (push) Successful in 19s
CI / static-tests (push) Successful in 45s
CI / auto-merge (push) Has been skipped
|
2026-06-17 13:49:02 +02:00 |
|
|
|
ed392d4c14
|
feat(admin): recettes produit - composition product_ingredient + dispo calculee RG-T21 (P3, ferme #27) (#35)
CI / secret-scan (push) Successful in 7s
CI / php-lint (push) Successful in 17s
CI / static-tests (push) Successful in 39s
CI / auto-merge (push) Has been skipped
|
2026-06-17 11:29:07 +02:00 |
|
|
|
1f4b9478ca
|
feat(admin): stock ingredients - CRUD, restock, inventaire PIN, mouvements (P3, mlt 8.8 + domaine 9) (#34)
CI / secret-scan (push) Successful in 8s
CI / php-lint (push) Successful in 21s
CI / static-tests (push) Successful in 39s
CI / auto-merge (push) Has been skipped
|
2026-06-17 11:11:31 +02:00 |
|
|
|
c2a4854083
|
feat(admin): CRUD menus composes avec slots (P3, mlt 8.4-8.6) (#32)
CI / secret-scan (push) Successful in 9s
CI / php-lint (push) Successful in 22s
CI / static-tests (push) Successful in 48s
CI / auto-merge (push) Has been skipped
|
2026-06-16 15:39:09 +02:00 |
|
|
|
ad5203d3fc
|
feat(admin): throttle du PIN d action sensible par acteur (RG-T22) (#18)
CI / secret-scan (push) Successful in 8s
CI / php-lint (push) Successful in 20s
CI / static-tests (push) Successful in 32s
CI / auto-merge (push) Has been skipped
|
2026-06-16 00:06:33 +02:00 |
|
|
|
2756fb4080
|
feat(admin): CRUD produits avec PIN conditionnel et audit (#17)
CI / secret-scan (push) Successful in 12s
CI / php-lint (push) Successful in 22s
CI / static-tests (push) Successful in 36s
CI / auto-merge (push) Has been skipped
|
2026-06-15 22:35:50 +02:00 |
|
|
|
f63ac9873c
|
feat: PIN self-service P3 (/admin/profile/pin) (#16)
CI / secret-scan (push) Successful in 8s
CI / php-lint (push) Successful in 18s
CI / static-tests (push) Successful in 35s
CI / auto-merge (push) Has been skipped
|
2026-06-15 22:04:14 +02:00 |
|
|
|
8290ceabc4
|
feat: CRUD categories P3 (rendu serveur, garde + CSRF + validation) (#15)
CI / secret-scan (push) Successful in 7s
CI / php-lint (push) Successful in 18s
CI / static-tests (push) Successful in 27s
CI / auto-merge (push) Has been skipped
|
2026-06-15 21:45:31 +02:00 |
|
|
|
2bc22ab5c8
|
feat: shell back-office P3 (pages rendues serveur + garde) (#14)
CI / secret-scan (push) Successful in 7s
CI / php-lint (push) Successful in 16s
CI / static-tests (push) Successful in 30s
CI / auto-merge (push) Has been skipped
|
2026-06-15 21:25:06 +02:00 |
|
|
|
7c35f8e2dc
|
feat: PIN d action sensible P2 (PinVerifier RG-T13) (#13)
CI / secret-scan (push) Successful in 8s
CI / php-lint (push) Successful in 16s
CI / static-tests (push) Successful in 30s
CI / auto-merge (push) Has been skipped
|
2026-06-15 21:00:11 +02:00 |
|
|
|
f979a2339e
|
feat: RBAC P2 (autorisation par permission + garde de session + /api/me) (#12)
CI / secret-scan (push) Successful in 8s
CI / php-lint (push) Successful in 19s
CI / static-tests (push) Successful in 33s
CI / auto-merge (push) Has been skipped
|
2026-06-15 20:45:19 +02:00 |
|
|
|
1b0b20c12d
|
feat: authentification back-office P2 (login/logout/reset, throttle, audit) (#11)
CI / secret-scan (push) Successful in 7s
CI / php-lint (push) Successful in 17s
CI / static-tests (push) Successful in 32s
CI / auto-merge (push) Has been skipped
|
2026-06-15 20:18:59 +02:00 |
|
