chore: bump version to v0.1.10

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.env

@@ -48,5 +48,4 @@ DATABASE_URL="postgresql://app:!ChangeMe!@127.0.0.1:5432/app?serverVersion=16&ch
 SIRH_MAINTENANCE_PATH=/var/www/maintenance/sirh/maintenance.on
 LESSTIME_MAINTENANCE_PATH=/var/www/maintenance/lesstime/maintenance.on
 INVENTORY_MAINTENANCE_PATH=/var/www/maintenance/inventory/maintenance.on
-FERME_MAINTENANCE_PATH=/var/www/maintenance/ferme/maintenance.on
 ###< malio/maintenance ###

config/applications.yaml

@@ -3,4 +3,3 @@ parameters:
         - { name: 'SIRH', slug: 'sirh', maintenance_path: '%env(SIRH_MAINTENANCE_PATH)%' }
         - { name: 'Lesstime', slug: 'lesstime', maintenance_path: '%env(LESSTIME_MAINTENANCE_PATH)%' }
         - { name: 'Inventory', slug: 'inventory', maintenance_path: '%env(INVENTORY_MAINTENANCE_PATH)%' }
-        - { name: 'Ferme', slug: 'ferme', maintenance_path: '%env(FERME_MAINTENANCE_PATH)%' }

config/version.yaml

@@ -1,2 +1,2 @@
 parameters:
-    app.version: '0.1.1'
+    app.version: '0.1.10'

doc/deployment-docker.md

@@ -88,7 +88,6 @@ services:
       - /var/www/sirh:/var/www/maintenance/sirh
       - /var/www/lesstime:/var/www/maintenance/lesstime
       - /var/www/inventory:/var/www/maintenance/inventory
-      - /var/www/ferme:/var/www/maintenance/ferme
     extra_hosts:
       - "host.docker.internal:host-gateway"
     restart: unless-stopped
@@ -129,7 +128,6 @@ ENCRYPTION_KEY=<generer avec: openssl rand -hex 32>
 SIRH_MAINTENANCE_PATH=/var/www/maintenance/sirh/maintenance.on
 LESSTIME_MAINTENANCE_PATH=/var/www/maintenance/lesstime/maintenance.on
 INVENTORY_MAINTENANCE_PATH=/var/www/maintenance/inventory/maintenance.on
-FERME_MAINTENANCE_PATH=/var/www/maintenance/ferme/maintenance.on
 ```
 
 ### 5. Generer les cles JWT
@@ -155,7 +153,7 @@ Central pilote les fichiers `maintenance.on` des autres projets via des volumes
 Verifier que les dossiers existent :
 
 ```bash
-ls -ld /var/www/sirh /var/www/lesstime /var/www/inventory /var/www/ferme
+ls -ld /var/www/sirh /var/www/lesstime /var/www/inventory
 ```
 
 Si Central ne peut pas ecrire `maintenance.on`, il faudra ajuster les permissions sur ces dossiers pour que le processus du conteneur puisse creer/supprimer ce fichier.

frontend/composables/useAppVersion.ts

@@ -6,7 +6,7 @@ export function useAppVersion() {
         if (version.value) {
             return version.value
         }
-        const response = await api.get<{ version: string }>('version', {}, {
+        const response = await api.get<{ version: string }>('/version', {}, {
             toast: false
         })
         version.value = response.version

infra/prod/Dockerfile

@@ -73,7 +73,8 @@ RUN echo "APP_ENV=prod" > /var/www/html/.env
 
 # Permissions
 RUN mkdir -p /var/www/html/var /var/www/html/var/uploads \
-    && chown -R www-data:www-data /var/www/html/var
+    /var/www/maintenance/sirh /var/www/maintenance/lesstime /var/www/maintenance/inventory \
+    && chown -R www-data:www-data /var/www/html/var /var/www/maintenance
 
 WORKDIR /var/www/html
 EXPOSE 80

infra/prod/docker-compose.yml

@@ -11,7 +11,6 @@ services:
       - /var/www/sirh:/var/www/maintenance/sirh
       - /var/www/lesstime:/var/www/maintenance/lesstime
       - /var/www/inventory:/var/www/maintenance/inventory
-      - /var/www/ferme:/var/www/maintenance/ferme
     extra_hosts:
       - "host.docker.internal:host-gateway"
     restart: unless-stopped

src/Entity/User.php

@@ -28,9 +28,11 @@ use Symfony\Component\Serializer\Attribute\Groups;
             normalizationContext: ['groups' => ['me:read']],
         ),
         new Get(
+            security: "is_granted('ROLE_ADMIN')",
             normalizationContext: ['groups' => ['user:list']],
         ),
         new GetCollection(
+            security: "is_granted('ROLE_ADMIN')",
             normalizationContext: ['groups' => ['user:list']],
         ),
         new Post(security: "is_granted('ROLE_ADMIN')", processor: UserPasswordHasherProcessor::class),

src/State/MaintenanceToggleProcessor.php

@@ -44,13 +44,17 @@ final readonly class MaintenanceToggleProcessor implements ProcessorInterface
         if ($data->maintenance) {
             $directory = dirname($maintenancePath);
 
-            if (!is_dir($directory)) {
-                mkdir($directory, 0755, true);
+            if (!is_dir($directory) && !mkdir($directory, 0755, true)) {
+                throw new \RuntimeException(sprintf('Cannot create directory "%s".', $directory));
             }
 
-            touch($maintenancePath);
+            if (!touch($maintenancePath)) {
+                throw new \RuntimeException(sprintf('Cannot create maintenance file at "%s".', $maintenancePath));
+            }
         } elseif (file_exists($maintenancePath)) {
-            unlink($maintenancePath);
+            if (!unlink($maintenancePath)) {
+                throw new \RuntimeException(sprintf('Cannot remove maintenance file at "%s".', $maintenancePath));
+            }
         }
 
         $dto              = new ManagedApplication();

src/State/MeProvider.php

@@ -8,6 +8,7 @@ use ApiPlatform\Metadata\Operation;
 use ApiPlatform\State\ProviderInterface;
 use App\Entity\User;
 use Symfony\Bundle\SecurityBundle\Security;
+use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
 
 /**
  * @implements ProviderInterface<User>
@@ -20,7 +21,12 @@ final readonly class MeProvider implements ProviderInterface
 
     public function provide(Operation $operation, array $uriVariables = [], array $context = []): User
     {
-        // @var User $user
-        return $this->security->getUser();
+        $user = $this->security->getUser();
+
+        if (!$user instanceof User) {
+            throw new AccessDeniedHttpException('User not authenticated.');
+        }
+
+        return $user;
     }
 }