chore: sync main to open-core develop

.env

@@ -18,6 +18,9 @@
 APP_ENV=dev
 APP_SECRET=b8ec44a08e5f4ba917879713a4a8e63c
 APP_LOCALE='es'
+# DO NOT LEAVE OPEN UNLESS YOU'VE GUARANTEED THAT TRAFFIC WILL ONLY COME FROM TRUSTED ORIGINS
+# https://symfony.com/doc/6.4/deployment/proxies.html
+APP_TRUSTED_PROXIES='127.0.0.1,REMOTE_ADDR'
 ###< symfony/framework-bundle ###
 
 ###> doctrine/doctrine-bundle ###
@@ -69,6 +72,7 @@ OAUTH_PRIVATE_KEY=%kernel.project_dir%/config/jwt/private.pem
 OAUTH_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
 OAUTH_PASSPHRASE=df7ec1f514c44825926e3dabaf34e3f5
 OAUTH_ENCRYPTION_KEY=325b6ce98c009bb83e885657ec08d142
+OAUTH_ACCESS_TOKEN_TTL=PT1H
 ###< league/oauth2-server-bundle ###
 
 ###> knpuniversity/oauth2-client-bundle ###

config/packages/framework.yaml

@@ -28,6 +28,8 @@ framework:
             headers:
                 'User-Agent': 'Platoniq Goteo-v4-API'
 
+    trusted_proxies: '%env(APP_TRUSTED_PROXIES)%'
+
 when@test:
     framework:
         test: true

config/packages/league_oauth2_server.yaml

@@ -2,6 +2,7 @@ league_oauth2_server:
     client:
         classname: App\Entity\OAuth2Client
     authorization_server:
+        access_token_ttl: '%env(OAUTH_ACCESS_TOKEN_TTL)%'
         private_key: '%env(resolve:OAUTH_PRIVATE_KEY)%'
         private_key_passphrase: '%env(resolve:OAUTH_PASSPHRASE)%'
         encryption_key: '%env(resolve:OAUTH_ENCRYPTION_KEY)%'

config/services.yaml

@@ -4,6 +4,7 @@
 # Put parameters here that don't need to change on each machine where the app is deployed
 # https://symfony.com/doc/current/best_practices.html#use-parameters-for-application-configuration
 parameters:
+    env(OAUTH_ACCESS_TOKEN_TTL): PT1H
 
 services:
     # default configuration for services in *this* file

migrations/Version20261006114714.php

@@ -0,0 +1,40 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+final class Version20261006114714 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Add review, review_area and review_comment tables';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $this->addSql('CREATE TABLE review (id INT AUTO_INCREMENT NOT NULL, project_id INT NOT NULL, reviewer_id INT DEFAULT NULL, type VARCHAR(255) NOT NULL, date_created DATETIME NOT NULL, date_updated DATETIME NOT NULL, INDEX IDX_794381C6166D1F9C (project_id), INDEX IDX_794381C670574616 (reviewer_id), PRIMARY KEY(id)) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB');
+        $this->addSql('CREATE TABLE review_area (id INT AUTO_INCREMENT NOT NULL, review_id INT NOT NULL, title VARCHAR(255) NOT NULL, summary LONGTEXT DEFAULT NULL, risk VARCHAR(255) NOT NULL, date_created DATETIME NOT NULL, date_updated DATETIME NOT NULL, INDEX IDX_352070703E2E969B (review_id), PRIMARY KEY(id)) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB');
+        $this->addSql('CREATE TABLE review_comment (id INT AUTO_INCREMENT NOT NULL, author_id INT DEFAULT NULL, area_id INT NOT NULL, body LONGTEXT NOT NULL, date_created DATETIME NOT NULL, date_updated DATETIME NOT NULL, INDEX IDX_F9AE69BF675F31B (author_id), INDEX IDX_F9AE69BBD0F409C (area_id), PRIMARY KEY(id)) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB');
+        $this->addSql('ALTER TABLE review ADD CONSTRAINT FK_794381C6166D1F9C FOREIGN KEY (project_id) REFERENCES project (id)');
+        $this->addSql('ALTER TABLE review ADD CONSTRAINT FK_794381C670574616 FOREIGN KEY (reviewer_id) REFERENCES user (id)');
+        $this->addSql('ALTER TABLE review_area ADD CONSTRAINT FK_352070703E2E969B FOREIGN KEY (review_id) REFERENCES review (id)');
+        $this->addSql('ALTER TABLE review_comment ADD CONSTRAINT FK_F9AE69BF675F31B FOREIGN KEY (author_id) REFERENCES user (id)');
+        $this->addSql('ALTER TABLE review_comment ADD CONSTRAINT FK_F9AE69BBD0F409C FOREIGN KEY (area_id) REFERENCES review_area (id)');
+    }
+
+    public function down(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE review DROP FOREIGN KEY FK_794381C6166D1F9C');
+        $this->addSql('ALTER TABLE review DROP FOREIGN KEY FK_794381C670574616');
+        $this->addSql('ALTER TABLE review_area DROP FOREIGN KEY FK_352070703E2E969B');
+        $this->addSql('ALTER TABLE review_comment DROP FOREIGN KEY FK_F9AE69BF675F31B');
+        $this->addSql('ALTER TABLE review_comment DROP FOREIGN KEY FK_F9AE69BBD0F409C');
+        $this->addSql('DROP TABLE review');
+        $this->addSql('DROP TABLE review_area');
+        $this->addSql('DROP TABLE review_comment');
+    }
+}

migrations/Version20261007154315.php

@@ -0,0 +1,32 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+final class Version20261007154315 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Add theme tables';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $this->addSql('CREATE TABLE project_theme (project_id INT NOT NULL, theme_id INT NOT NULL, INDEX IDX_8420EE96166D1F9C (project_id), INDEX IDX_8420EE9659027487 (theme_id), PRIMARY KEY(project_id, theme_id)) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB');
+        $this->addSql('CREATE TABLE theme (id INT AUTO_INCREMENT NOT NULL, slug VARCHAR(56) NOT NULL, name VARCHAR(255) NOT NULL, locales JSON NOT NULL COMMENT \'(DC2Type:json)\', UNIQUE INDEX UNIQ_9775E708989D9B62 (slug), PRIMARY KEY(id)) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB');
+        $this->addSql('ALTER TABLE project_theme ADD CONSTRAINT FK_8420EE96166D1F9C FOREIGN KEY (project_id) REFERENCES project (id) ON DELETE CASCADE');
+        $this->addSql('ALTER TABLE project_theme ADD CONSTRAINT FK_8420EE9659027487 FOREIGN KEY (theme_id) REFERENCES theme (id) ON DELETE CASCADE');
+    }
+
+    public function down(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE project_theme DROP FOREIGN KEY FK_8420EE96166D1F9C');
+        $this->addSql('ALTER TABLE project_theme DROP FOREIGN KEY FK_8420EE9659027487');
+        $this->addSql('DROP TABLE project_theme');
+        $this->addSql('DROP TABLE theme');
+    }
+}

src/ApiResource/CategoryApiResource.php

@@ -12,9 +12,8 @@
 use Symfony\Component\Validator\Constraints as Assert;
 
 /**
- * A Category can be used by other resources as a "topic intent".\
- * For example. Projects might relate with up to 2 Categories, which are used by the Project
- * as a way to describe itself and can be used to discover similar Projects.\
+ * A Category, like in books, is a way of grouping resources by type, genre, audience, or subject, for example:
+ * science-fiction, biography, fantasy, etc.\
  * \
  * Categories can only be modified by users with the role "ROLE_ADMIN", but can usually
  * be referenced by non-admin users in their own resources, such as Project owners.

src/ApiResource/Project/ProjectApiResource.php

@@ -10,6 +10,7 @@
 use App\ApiResource\CategoryApiResource;
 use App\ApiResource\LocalizedApiResourceTrait;
 use App\ApiResource\Matchfunding\MatchCallSubmissionApiResource;
+use App\ApiResource\ThemeApiResource;
 use App\ApiResource\TimestampedCreationApiResource;
 use App\ApiResource\TimestampedUpdationApiResource;
 use App\ApiResource\User\UserApiResource;
@@ -134,6 +135,16 @@ class ProjectApiResource
     #[API\ApiFilter(filterClass: SearchFilter::class, strategy: 'exact')]
     public array $categories;
 
+    /**
+     * A list of the available Themes of this Project.
+     *
+     * @var ThemeApiResource[]
+     */
+    #[Assert\NotBlank()]
+    #[API\ApiProperty(writableLink: false)]
+    #[API\ApiFilter(filterClass: SearchFilter::class, strategy: 'exact')]
+    public array $themes;
+
     /**
      * ISO 3166 data about the Project's territory of interest.
      */

src/ApiResource/Project/ReviewApiResource.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\ApiResource\Project;
+
+use ApiPlatform\Doctrine\Orm\Filter\SearchFilter;
+use ApiPlatform\Doctrine\Orm\State\Options;
+use ApiPlatform\Metadata as API;
+use App\ApiResource\TimestampedCreationApiResource;
+use App\ApiResource\TimestampedUpdationApiResource;
+use App\ApiResource\User\UserApiResource;
+use App\Entity\Project\Review;
+use App\Entity\Project\ReviewType;
+use App\State\ApiResourceStateProcessor;
+use App\State\ApiResourceStateProvider;
+
+/**
+ * ProjectReviews are launched as health-checks for Projects.\
+ * \
+ * The reviews are focused on certain aspects of a Project's lifecycle. The types `campaign` and `financial` reviews
+ * are to evaluate the fitness of a Project before being greenlit for campaigning or the legitimacy of their raised funds, respectively.\
+ * \
+ * ProjectReview resources cannot be manually created, they are created automatically when a Project moves into a "to review" status:
+ * - `to_campaign_review`: will launch a related ProjectReview of `campaign` type
+ * - `to_financial_review`: will launch a related ProjectReview of `financial` type.
+ */
+#[API\ApiResource(
+    shortName: 'ProjectReview',
+    stateOptions: new Options(entityClass: Review::class),
+    provider: ApiResourceStateProvider::class,
+    processor: ApiResourceStateProcessor::class
+)]
+#[API\GetCollection()]
+#[API\Get()]
+#[API\Delete()]
+#[API\Patch()]
+class ReviewApiResource
+{
+    use TimestampedCreationApiResource;
+    use TimestampedUpdationApiResource;
+
+    #[API\ApiProperty(identifier: true, writable: false)]
+    public int $id;
+
+    #[API\ApiFilter(SearchFilter::class, strategy: 'exact')]
+    public ProjectApiResource $project;
+
+    #[API\ApiFilter(SearchFilter::class, strategy: 'exact')]
+    public UserApiResource $reviewer;
+
+    #[API\ApiFilter(SearchFilter::class, strategy: 'exact')]
+    public ReviewType $type;
+
+    /**
+     * @var ReviewAreaApiResource[]
+     */
+    public array $areas;
+}

src/ApiResource/Project/ReviewAreaApiResource.php

@@ -0,0 +1,54 @@
+<?php
+
+namespace App\ApiResource\Project;
+
+use ApiPlatform\Doctrine\Orm\Filter\SearchFilter;
+use ApiPlatform\Doctrine\Orm\State\Options;
+use ApiPlatform\Metadata as API;
+use App\ApiResource\TimestampedCreationApiResource;
+use App\ApiResource\TimestampedUpdationApiResource;
+use App\Entity\Project\ReviewArea;
+use App\Entity\Project\ReviewAreaRisk;
+use App\State\ApiResourceStateProcessor;
+use App\State\ApiResourceStateProvider;
+
+/**
+ * A ProjectReviewArea represents one specific topic of evaluation for ProjectReviews.\
+ * \
+ * Conversations, feedback and evolution of the ProjectReview must happen around specific areas of review.\
+ * Each area holds an associated risk, which represents the trust the reviewer has for the reviewed Project's health in that area,
+ * areas can only be updated by the assigned reviewer or an user with `ROLE_ADMIN`.
+ */
+#[API\ApiResource(
+    shortName: 'ProjectReviewArea',
+    stateOptions: new Options(entityClass: ReviewArea::class),
+    provider: ApiResourceStateProvider::class,
+    processor: ApiResourceStateProcessor::class,
+)]
+#[API\GetCollection()]
+#[API\Post(security: 'is_granted("ROLE_ADMIN")')]
+#[API\Get(security: 'is_granted("REVIEWAREA_VIEW", object)')]
+#[API\Patch(security: 'is_granted("REVIEWAREA_EDIT", object)')]
+#[API\Delete(security: 'is_granted("REVIEWAREA_EDIT", object)')]
+class ReviewAreaApiResource
+{
+    use TimestampedCreationApiResource;
+    use TimestampedUpdationApiResource;
+
+    #[API\ApiProperty(identifier: true, writable: false)]
+    public int $id;
+
+    #[API\ApiFilter(SearchFilter::class, strategy: 'exact')]
+    public ReviewApiResource $review;
+
+    public string $title;
+
+    public string $summary;
+
+    public ReviewAreaRisk $risk;
+
+    /**
+     * @var ReviewCommentApiResource[]
+     */
+    public array $comments;
+}

src/ApiResource/Project/ReviewCommentApiResource.php

@@ -0,0 +1,50 @@
+<?php
+
+namespace App\ApiResource\Project;
+
+use ApiPlatform\Doctrine\Orm\Filter\SearchFilter;
+use ApiPlatform\Doctrine\Orm\State\Options;
+use ApiPlatform\Metadata as API;
+use App\ApiResource\TimestampedCreationApiResource;
+use App\ApiResource\TimestampedUpdationApiResource;
+use App\ApiResource\User\UserApiResource;
+use App\Entity\Project\ReviewComment;
+use App\State\ApiResourceStateProcessor;
+use App\State\ApiResourceStateProvider;
+use App\Validator\UserOwned;
+use Symfony\Component\Validator\Constraints as Assert;
+
+/**
+ * ProjectReviewComments hold the conversation between the reviewer and the reviewed Project owner.
+ */
+#[API\ApiResource(
+    shortName: 'ProjectReviewComment',
+    stateOptions: new Options(entityClass: ReviewComment::class),
+    provider: ApiResourceStateProvider::class,
+    processor: ApiResourceStateProcessor::class,
+)]
+#[API\GetCollection()]
+#[API\Post(securityPostDenormalize: 'is_granted("REVIEWAREA_VIEW", object.area)')]
+#[API\Get(security: 'is_granted("REVIEWAREA_VIEW", object.area)')]
+#[API\Delete(security: 'is_granted("REVIEWAREA_VIEW", object.area)')]
+class ReviewCommentApiResource
+{
+    use TimestampedCreationApiResource;
+    use TimestampedUpdationApiResource;
+
+    #[API\ApiProperty(identifier: true, writable: false)]
+    public int $id;
+
+    #[Assert\NotBlank()]
+    #[API\ApiFilter(SearchFilter::class, strategy: 'exact')]
+    public ReviewAreaApiResource $area;
+
+    #[UserOwned()]
+    #[Assert\NotBlank()]
+    #[API\ApiFilter(SearchFilter::class, strategy: 'exact')]
+    public UserApiResource $author;
+
+    #[Assert\NotBlank()]
+    #[Assert\Length(min: 15)]
+    public string $body;
+}

src/ApiResource/ThemeApiResource.php

@@ -0,0 +1,64 @@
+<?php
+
+namespace App\ApiResource;
+
+use ApiPlatform\Doctrine\Orm\Filter\SearchFilter;
+use ApiPlatform\Doctrine\Orm\State\Options;
+use ApiPlatform\Metadata as API;
+use App\Entity\Theme;
+use App\State\ApiResourceStateProcessor;
+use App\State\ApiResourceStateProvider;
+use App\State\ThemeStateProvider;
+use Symfony\Component\Validator\Constraints as Assert;
+
+/**
+ * A Theme, like in books, works as a "topic intent" grouping, for example:
+ * friendship, good vs. evil, power and corruption, etc.\
+ * \
+ * Themes can only be modified by users with the role "ROLE_ADMIN", but can usually
+ * be referenced by non-admin users in their own resources, such as Project owners.
+ */
+#[API\ApiResource(
+    shortName: 'Theme',
+    stateOptions: new Options(entityClass: Theme::class),
+    provider: ApiResourceStateProvider::class,
+    processor: ApiResourceStateProcessor::class,
+)]
+#[API\GetCollection()]
+#[API\Post(security: 'is_granted("ROLE_ADMIN")')]
+#[API\Get(
+    provider: ThemeStateProvider::class,
+    uriTemplate: '/themes/{idOrSlug}',
+    uriVariables: [
+        'idOrSlug' => new API\Link(
+            description: 'Theme identifier or slug',
+        ),
+    ]
+)]
+#[API\Patch(security: 'is_granted("ROLE_ADMIN")')]
+#[API\Delete(security: 'is_granted("ROLE_ADMIN")')]
+class ThemeApiResource
+{
+    use LocalizedApiResourceTrait;
+
+    /**
+     * This value will identify this Theme in relationships with other resources.
+     */
+    #[API\ApiProperty(identifier: true)]
+    public string $id;
+
+    /**
+     * A unique, non white space, string identifier for this Theme.
+     */
+    #[API\ApiProperty(writable: false)]
+    #[API\ApiFilter(SearchFilter::class, strategy: 'exact')]
+    public string $slug;
+
+    /**
+     * A human-readable self-descriptive string of what this Theme is about.
+     */
+    #[Assert\NotBlank()]
+    #[API\ApiProperty()]
+    #[API\ApiFilter(SearchFilter::class, strategy: 'partial')]
+    public string $name;
+}