Improvements

.env

@@ -2,9 +2,9 @@
 NGINX_IMAGE=nginx:stable-alpine3.23
 
 # Backend
-APP_IMAGE=fullstack-symfony-react-dev:0.9.1
+APP_IMAGE=fullstack-symfony-react-dev:0.9.3
 APP_NAME=fullstack-symfony-react
-APP_VERSION=0.9.1
+APP_VERSION=0.9.3
 APP_ENV=dev
 ADMIN_EMAIL=admin@example.com
 ADMIN_PASSWORD=secret

.gitignore

@@ -1,4 +1,31 @@
+# Build artifacts
 project/.deptrac.cache
 project/diagram.*
 project/circle.svg
-tempo-data/
+tempo-data/
+
+# Frontend build output
+frontend/dist/
+frontend/node_modules/
+frontend/.env.local
+frontend/.env.*.local
+
+# Backend build output
+backend/public/dist/
+backend/vendor/
+backend/var/
+backend/.env.local
+backend/.env.*.local
+
+# IDE and OS files
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+.DS_Store
+Thumbs.db
+
+# Environment
+.env.local
+.env.*.local

FEATURES.md

@@ -30,6 +30,7 @@
     - ✅ [Loki](https://grafana.com/oss/loki/) for logging
     - ✅ [Tempo](https://grafana.com/oss/tempo/) for tracing
     - ✅ [Prometheus](https://prometheus.io/) for metrics
+    - ✅ use LGTM all in one solution from Grafana
 - ✅ [CI via Github actions](https://docs.github.com/en/actions/about-github-actions/about-continuous-integration-with-github-actions)
     - ✅ PhpUnit 13
     - ✅ Vitest

Makefile

@@ -1,13 +1,13 @@
 APP_NAME = fullstack-symfony-react
-VERSION = 0.9.1
+VERSION = 0.9.3
 
 .DEFAULT_GOAL := help
 
-.PHONY: build dev prod backend-image frontend-image grafana up down reset \
+.PHONY: build dev prod backend-image grafana up down reset \
 	reset-worker reset-app init composer-install create-database create-schema \
 	load-fixtures init-test create-test-database create-test-schema composer shell \
 	qa sa cs test backend-test frontend-test arch clear cache-clear cache-pool-clear \
-	maintenance maintain show-composer-updates \
+	maintenance maintain show-composer-updates frontend-build \
 	update-composer-dependencies update-npm-dependencies coverage frontend-shell open help
 
 ## Start development environment (build images, start containers, init, open browser)
@@ -20,18 +20,14 @@ dev:
 	docker build . -f ./build/php/Dockerfile --target dev -t ${APP_NAME}-dev:${VERSION}
 
 ## Build production images (without Docker cache)
-prod: backend-image frontend-image
+prod: backend-image
+
 
 ## Build backend image (without Docker cache)
 backend-image:
 	@echo "Build backend image"
 	docker build . -f ./build/php/Dockerfile --target prod --no-cache -t ${APP_NAME}:${VERSION}
 
-## Build frontend image (without Docker cache)
-frontend-image:
-	@echo "Build frontend image"
-	docker build . -f ./build/node/Dockerfile --target prod --no-cache -t ${APP_NAME}-web:${VERSION}
-
 grafana:
 	@echo "Build grafana image"
 	docker build . -f ./build/grafana/Dockerfile -t ${APP_NAME}-grafana:${VERSION}
@@ -44,8 +40,8 @@ up:
 down:
 	docker compose down
 
-## Reset all services
-reset: reset-worker reset-app
+## Reset worker, app, frontend
+reset: reset-worker reset-app reset-frontend
 
 ## Reset worker
 reset-worker:
@@ -57,14 +53,24 @@ reset-app:
 	@echo "Reset app"
 	docker compose restart app
 
+## Reset frontend (Vite development server)
+reset-frontend:
+	@echo "Reset frontend"
+	docker compose restart frontend
+
 ## Initialize project (install dependencies, create database, schema, load fixtures)
-init: composer-install create-database create-schema load-fixtures
+init: composer-install frontend-build create-database create-schema load-fixtures
 
 ## Install composer dependencies
 composer-install:
 	@echo "Install composer dependencies"
 	docker compose exec -it app composer install
 
+## Build frontend assets (Vite production build)
+frontend-build:
+	@echo "Build frontend assets to backend/public/dist"
+	docker compose run --rm frontend-build
+
 ## Create database
 create-database:
 	@echo "Create database"

backend/.env

@@ -57,4 +57,7 @@ LOCK_DSN=flock
 ###< symfony/lock ###
 
 ADMIN_EMAIL='admin@example.com'
-ADMIN_PASSWORD='secret'
+ADMIN_PASSWORD='secret'
+# SPA Frontend Configuration
+SPA_BACKEND_API_URL="http://localhost:8080/api"
+SPA_OTEL_COLLECTOR_ADDRESS="http://localhost:4318"

backend/config/packages/nelmio_api_doc.yaml

@@ -3,7 +3,7 @@ nelmio_api_doc:
         info:
             title: Fullstack Symfony React
             description: Fullstack demo application
-            version: 0.9.1
+            version: 0.9.3
     areas:
         default:
             path_patterns: [^/api/games]

backend/config/packages/security.yaml

@@ -16,15 +16,18 @@ security:
         main:
             lazy: true
             provider: app_user_provider
-            json_login:
-                login_path: api.login
-                check_path: api.login
-                username_path: email
-                password_path: password
+            entry_point: App\Security\CustomAuthenticationEntryPoint
             form_login:
                 login_path: app.login
                 check_path: app.login
                 enable_csrf: true
+                success_handler: App\Security\AuthenticationSuccessHandler
+                # Symfony's built-in target path parameter for post-login redirects
+                # When login form includes _target_path, user is redirected there after successful auth
+                target_path_parameter: _target_path
+                # Default fallback if no _target_path is provided
+                # Users are now redirected to the modern React SPA by default
+                default_target_path: /spa
             remember_me:
                 secret: '%kernel.secret%'
                 lifetime: 604800 # 1 week in seconds
@@ -33,8 +36,7 @@ security:
                 name: REMEMBERME
             logout:
                 path: app.logout
-                # where to redirect after logout
-                # target: app_any_route
+                target: app.login
 
             # activate different ways to authenticate
             # https://symfony.com/doc/current/security.html#the-firewall
@@ -46,8 +48,7 @@ security:
     # Note: Only the *first* access control that matches will be used
     access_control:
         - { path: ^/admin, roles: ROLE_ADMIN }
-        # - { path: ^/profile, roles: ROLE_USER }
-        - { path: ^/login, roles: PUBLIC_ACCESS }
+        - { path: ^/spa, roles: ROLE_USER }
         - { path: ^/game, roles: ROLE_USER }
         - { path: ^/api/me, roles: PUBLIC_ACCESS }
         - { path: ^/api, roles: ROLE_USER }

backend/config/routes.yaml

@@ -4,9 +4,10 @@ controllers:
         namespace: App\Controller
     type: attribute
 
+# Root redirect to default route (for unauthenticated users)
+# Attribute-based routes (controllers) have priority and will be checked first
 root_shortcut:
     path: /
     controller: Symfony\Bundle\FrameworkBundle\Controller\RedirectController
     defaults:
         route: 'app.index_games'
-        ignoreAttributes: true

backend/config/services.yaml

@@ -8,6 +8,8 @@ parameters:
     app.telemetry: '%env(APP_TELEMETRY)%'
     admin.email: '%env(ADMIN_EMAIL)%'
     admin.password: '%env(ADMIN_PASSWORD)%'
+    spa.backend_api_url: '%env(string:SPA_BACKEND_API_URL)%'
+    spa.otel_collector_address: '%env(string:SPA_OTEL_COLLECTOR_ADDRESS)%'
 
 services:
     # default configuration for services in *this* file
@@ -50,3 +52,8 @@ services:
             - '%kernel.project_dir%'
         tags:
             - { name: data_collector, template: 'profiler/architecture.html.twig', id: 'app.architecture_collector' }
+
+    App\Controller\SpaController:
+        arguments:
+            $backendApiUrl: '%spa.backend_api_url%'
+            $otelCollectorAddress: '%spa.otel_collector_address%'

backend/public/css/styles.css

@@ -1,4 +1,4 @@
-/* assets/css/styles.css */
+/* public/css/styles.css */
 .logout-button {
     margin-right: 8px;
   }