22 commits

Author	SHA1	Message	Date
Corentin JOGUET	cb990404e3	feat(api): suivi public du statut commande GET /api/orders/{number} (P4) (#77)	2026-06-22 08:53:36 +02:00
Corentin JOGUET	121877ea65	feat(admin): page d'information RGPD sur le traitement des donnees (Cr 3.d.2) (#72)	2026-06-22 08:29:22 +02:00
Corentin JOGUET	7ab9a5a8cf	feat(api): endpoint public /api/allergens (P4 optionnel) (#71)	2026-06-19 20:30:12 +02:00
Corentin JOGUET	1d56d5b574	feat(admin): liste des commandes + KPIs de vente (P4) (#70)	2026-06-19 20:24:33 +02:00
Corentin JOGUET	7a0702ff6e	feat(borne): cablage de la borne sur l'API (CORS + data.js) (#61)	2026-06-18 16:46:17 +02:00
Corentin JOGUET	a35db88d2f	feat(api): P4 chunk 2 - read API catalogue borne (categories/produits/menus) (#60)	2026-06-18 16:10:36 +02:00
Corentin JOGUET	60ce3460a5	feat(api): P4 chunk 1b - encaissement + decrement stock (#57)	2026-06-18 14:29:22 +02:00
Corentin JOGUET	d880f2512a	feat(admin): RBAC - matrice roles/permissions + roles custom (PIN+audit diff) (P3) (#39)	2026-06-17 14:25:42 +02:00
Corentin JOGUET	e430f54d85	feat(admin): gestion des comptes back-office (CRUD users + RGPD, PIN+audit) (P3) (#38)	2026-06-17 13:49:02 +02:00
Corentin JOGUET	9c2844c116	feat(admin): tableau de bord statistiques (catalogue + sante stock RG-T21) (P3) (#37)	2026-06-17 12:37:58 +02:00
Corentin JOGUET	ed392d4c14	feat(admin): recettes produit - composition product_ingredient + dispo calculee RG-T21 (P3, ferme #27) (#35)	2026-06-17 11:29:07 +02:00
Corentin JOGUET	1f4b9478ca	feat(admin): stock ingredients - CRUD, restock, inventaire PIN, mouvements (P3, mlt 8.8 + domaine 9) (#34)	2026-06-17 11:11:31 +02:00
Corentin JOGUET	c2a4854083	feat(admin): CRUD menus composes avec slots (P3, mlt 8.4-8.6) (#32)	2026-06-16 15:39:09 +02:00
Corentin JOGUET	2756fb4080	feat(admin): CRUD produits avec PIN conditionnel et audit (#17)	2026-06-15 22:35:50 +02:00
Corentin JOGUET	f63ac9873c	feat: PIN self-service P3 (/admin/profile/pin) (#16)	2026-06-15 22:04:14 +02:00
Corentin JOGUET	8290ceabc4	feat: CRUD categories P3 (rendu serveur, garde + CSRF + validation) (#15)	2026-06-15 21:45:31 +02:00
Corentin JOGUET	2bc22ab5c8	feat: shell back-office P3 (pages rendues serveur + garde) (#14)	2026-06-15 21:25:06 +02:00
Corentin JOGUET	f979a2339e	feat: RBAC P2 (autorisation par permission + garde de session + /api/me) (#12)	2026-06-15 20:45:19 +02:00
Corentin JOGUET	1b0b20c12d	feat: authentification back-office P2 (login/logout/reset, throttle, audit) (#11)	2026-06-15 20:18:59 +02:00
Corentin JOGUET	c8f5370cfd	refactor(core): src/app structure + fix auto-merge label gate (#10)	2026-06-15 17:01:10 +02:00
Imugiii	8c93b26ec0	feat(core): from-scratch PHP MVC skeleton (autoloader/config/PDO/router/front controller) + PHPUnit/PHPStan + composer-less CI	2026-06-15 14:13:49 +00:00
Imugiii	b8f7d35064	feat(stubs): unblock 403 with kiosk and admin index pages, plus FastCGI fixes ... Three changes bundled because the stubs surfaced two pre-existing infra bugs that had never been hit (the smoke test only exercised PHP via 'docker exec', not via the full Apache->PHP-FPM FastCGI path). - src/public/borne/index.html : minimal HTML stub for the kiosk vhost (200 OK with the imported logo) - src/public/admin/index.php : minimal PHP stub that proves the full FastCGI chain works end-to-end (renders PHP_VERSION + current timestamp) - docker/apache/vhost.conf : add 'DirectoryIndex index.php index.html' on the admin vhost. Without it, hitting / returned 403 because the default Apache DirectoryIndex is index.html only, and the existing RewriteRule did not apply to the directory request (\!-d cond was false). - docker/php-fpm/www.conf : comment out 'listen.allowed_clients = any'. PHP-FPM 8.3 rejects 'any' with 'Wrong IP address' and ends up dropping every connection from Apache. With the directive absent, all connections are accepted, which is acceptable in our isolated Docker network.	2026-04-30 13:07:12 +00:00