saufi/eCert-MBIP
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
19 Commits 1 Branch 0 Tags
0417a6698a649d328eaf8d277dbcaad44732117e
Commit Graph

19 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Saufi
0417a6698a feat: susun semula layout urus template sijil 
- Panduan Template di bahagian atas, boleh lipat/kembang
- Template Aktif (kiri) bersebelahan Konfigurasi Teks (kanan) — col-lg-6
- Auto-detect portrait/landscape dari naturalWidth/naturalHeight imej
- Portrait: max-height 520px | Landscape: max-height 340px
- Badge orientasi (hijau=Landscape, biru=Portrait) dalam header kad
- Laras tinggi juga untuk pratonton upload form

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-18 21:32:27 +08:00
Saufi
29d85eea86 fix: kemas kini CertificateService untuk Intervention Image v4 API 
v3 → v4 breaking changes:
- manager->read()       → manager->decodePath()
- image->toJpeg($q)     → image->encode(new JpegEncoder($q))
- font->align($h) + font->valign($v) → font->align($h, $v)
- Storage::path()       → Storage::disk('local')->path() (eksplisit)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-18 21:01:47 +08:00
Saufi
0fd202f974 fix: guna disk('public') dan preview route untuk papar imej di show.blade.php 
- Tab QR: Storage::disk('public')->url() — selaras dengan fix QrCodeService
- Tab Template: guna route preview (controller baca dari private disk)
  Storage::url() tanpa disk pada private storage tidak boleh diakses terus

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-18 20:40:37 +08:00
Saufi
756b73e3ee fix: QR code guna Storage::disk('public') — imej tidak papar di admin panel 
Storage::put() guna default disk (local/private) menyebabkan fail disimpan
di storage/app/private/public/qrcodes/ tapi URL /storage/qrcodes/... cari
fail di storage/app/public/qrcodes/ melalui symlink — lokasi berbeza.

- QrCodeService: guna disk('public'), path ringkas 'qrcodes/{token}.png'
- View: Storage::disk('public')->url() untuk URL yang betul

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-18 20:37:42 +08:00
Saufi
55c077ee48 fix: guna PHP PDO untuk semak MySQL dalam entrypoint 
mysqladmin resolve host.docker.internal ke IPv6 dahulu — MySQL Windows
tidak dengar pada IPv6, menyebabkan loop tak berakhir dan 502 pada Nginx.
PHP PDO guna IPv4 terus dan berjaya sambung.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-18 17:24:38 +08:00
Saufi
69c91dfb4b feat: guna MySQL external — host.docker.internal (dev) & 172.17.200.16 (prod) 
- Buang service db dan volume dbdata dari compose files
- dev: extra_hosts host.docker.internal:host-gateway → capai MySQL Windows host
- prod: IP terus 172.17.200.16, tiada extra_hosts diperlukan
- .env.docker: DB_HOST=host.docker.internal dengan nota untuk production
- entrypoint.sh: default DB_HOST → host.docker.internal

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-18 16:34:17 +08:00
Saufi
576c71c960 feat: Docker Compose setup untuk development & production 
- docker/php/Dockerfile: PHP 8.4-FPM + GD + imagick (PECL) + semua extension Laravel
- docker/php/php.ini: upload 20MB, memory 512MB, opcache, Asia/Kuala_Lumpur
- docker/php/php-dev.ini: validate_timestamps=1, display_errors=On (dev)
- docker/nginx/default.conf: gzip, security headers, static asset caching
- docker/entrypoint.sh: tunggu MySQL → migrate → seed AdminSeeder → cache (prod)
- docker-compose.yml: dev stack — port 8003, DB host 33060, queue worker
- docker-compose.prod.yml: production overrides — storage volume, no DB port exposed
- .env.docker: template env untuk Docker (DB_HOST=db)
- .dockerignore: exclude node_modules, vendor, .env, logs

fix: testGenerate try/catch kembalikan JSON error (bukan HTML 500)
fix: loadPreview() semak r.ok, tunjuk error alert, loading spinner

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-18 15:36:47 +08:00
Saufi
c9b50ccc5e feat: two-role system — super_admin & admin program (Fasa 12) 
- Replace is_admin boolean with role enum('super_admin','admin') via migration
- ProgramPolicy: admin program can only view/edit/delete own programs
- EnsureIsAdmin: accepts both roles; EnsureSuperAdmin: super_admin only
- UserController + views: super_admin can manage admin accounts
- Sidebar: user management link & role badge gated on isSuperAdmin()
- Fix Controller base class: add AuthorizesRequests trait
- Fix tests: replace nonAdmin() (invalid enum) with adminProgram() against super_admin-only route

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-18 08:47:58 +08:00
Saufi
700fbd1bcc feat: testing suite and bug fixes (Fasa 11) 
- AuthTest, ProgramTest, CheckinTest, QuestionnaireTest, CertificateTest — 19 feature tests, 35 total pass
- ProgramFactory with published() state
- UserFactory: is_admin=true default, nonAdmin() state
- Fix attendance_source column name in StatisticsController (was: source)
- Fix route(dashboard) → route(admin.dashboard) in all Breeze auth controllers
- Remove irrelevant Breeze boilerplate tests (Profile, Example, Registration)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-17 00:23:38 +08:00
Saufi
a41ff59009 feat: security hardening (Fasa 10) 
- EnsureIsAdmin middleware: gates all admin routes on is_admin flag
- Apply admin middleware to entire admin route group
- Fix questionnaire resource route parameter name mismatch ({set})
- Audit log on questionnaire confirmation

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 23:54:11 +08:00
Saufi
165f22fe6f feat: per-program statistics dashboard (Fasa 9) 
- StatisticsController: attendance by session/source, cert status, response rate, question averages
- Statistics export as CSV
- Chart.js visualisations: bar (session), doughnut (source), progress bars (cert status, ratings)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 22:54:34 +08:00
Saufi
b066a44326 feat: email blast for certificates (Fasa 8) 
- CertificateReadyMail: Mailable with Malay HTML email template
- SendCertificateEmailJob: dispatch per-certificate email, log to email_logs
- Email template: HTML with download link, program details, branding

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 22:36:32 +08:00
Saufi
2ddc7e3caf feat: certificate template management and generation (Fasa 7) 
- CertificateService: Intervention Image v3 text overlay on template
- GenerateCertificateJob: queued generation with retry logic
- SendCertificateEmailJob: stub (implemented in Fasa 8)
- CertificateTemplateController: upload, config editor, preview, test generate
- Admin/CertificateController: list, generate-all, email-all
- Public/CertificateController: show with questionnaire gate, download
- DejaVuSans fonts bundled under resources/fonts
- Views: admin template/certificate management, public certificate download

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 22:18:23 +08:00
Saufi
2f76f94283 feat: questionnaire management (Fasa 6) 
- QuestionnaireSetController: full CRUD + publish/archive
- QuestionController: store, update, destroy, reorder
- ProgramQuestionnaireController: attach, confirm, detach
- Public/QuestionnaireController: show form, submit responses, double-submit guard
- Views: admin questionnaire CRUD, program questionnaire assign, public form + thankyou/already

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 20:53:43 +08:00
Saufi
d0ebaf8433 feat: public check-in flow and attendance (Fasa 5) 
- AttendanceService: staffCheckin and walkInRegister methods
- CheckinController: QR-based check-in (staff & walk-in external)
- AttendanceCheckController: semak kehadiran & sijil status
- Views: checkin show/success/already/unavailable, semak show/result

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 20:20:27 +08:00
Saufi
32428733d6 feat: participant management and csv import 
- ParticipantController: list (search/filter), add manual, remove, export CSV (UTF-8 BOM)
- ParticipantImportService: League\Csv, strip BOM, normalise headers, per-row validation,
  duplicate detection, transaction per row (single failure does not abort import), summary report
- Participant index: counts (total/pre-reg/walk-in/hadir), filter by source+status, pagination
- Participant create: inline no_kp validation, session picker pre-filled from program default
- Import page: result summary (success/duplicates/failed), error list, format guide

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 20:02:05 +08:00
Saufi
12324091dd feat: qr code generation 
- QrCodeService: generate unique 48-char token, create QR PNG (400x400, error-correction H)
- QrCodeController: show, generate, download PNG, deactivate
- Admin QR page: preview, copy URL, download, regenerate, deactivate
- Existing active QR deactivated on regenerate
- Token-based URL (not program ID) for PDPA compliance

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 19:42:33 +08:00
Saufi
d0be749f29 feat: program management 
- ProgramController: full CRUD, publish, close, delete (guarded if attendance exists)
- StoreProgramRequest + UpdateProgramRequest with Malay attribute names
- AuditLogService: logs admin actions, redacts sensitive fields (no_kp, token, password)
- Program index: search, status filter, pagination (Bootstrap 5)
- Program create/edit: shared _form partial with all fields (dates, sessions, walk-in toggle)
- Program show: tab layout (participants, qr, template, questionnaire, statistics)
- Bootstrap 5 pagination via Paginator::useBootstrapFive()

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 19:31:00 +08:00
Saufi
5b85822b78 chore: initial Laravel 13 project setup for eCert MBIP 
- Laravel 13.9 + PHP 8.5 + MySQL
- Bootstrap 5.3 + jQuery 3.7 + Chart.js (replacing Alpine/Tailwind)
- Packages: intervention/image, dompdf, simple-qrcode, league/csv, laravel/breeze, laravel/boost
- 17 database migrations: users, programs, qr_codes, participants, attendances, certificates, questionnaires, email_logs, audit_logs
- 13 Eloquent models with full relationships
- Admin layout (Bootstrap 5 sidebar) + public layout (mobile-first)
- Rate limiters: checkin (60/min), certificate (30/min)
- Admin seeder: admin@mbip.gov.my
- Storage directories + symlink configured

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-16 15:44:19 +08:00