feat: add user authentication (#2)

.env

@@ -34,3 +34,7 @@ BRAND_NAME="AI Bibliotek"
 BRAND_TAGLINE="del & hjemtag assistenter"
 BRAND_INITIALS="AI"
 ###< brand identity ###
+
+###> doctrine/doctrine-bundle ###
+DATABASE_URL="mysql://db:db@mariadb:3306/db?serverVersion=10.11.16-MariaDB&charset=utf8mb4"
+###< doctrine/doctrine-bundle ###

.env.test

@@ -1,3 +1,5 @@
 # define your env variables for the test env here
 KERNEL_CLASS='App\Kernel'
 APP_SECRET='$ecretf0rt3st'
+
+DATABASE_URL="mysql://root:password@mariadb:3306/db_test?serverVersion=10.11.16-MariaDB&charset=utf8mb4"

.github/workflows/tests.yaml

@@ -22,8 +22,11 @@ jobs:
             - name: Build Tailwind CSS
               run: docker compose run --rm phpfpm bin/console tailwind:build
 
+            - name: Create the test database
+              run: docker compose run --rm phpfpm bin/console --env=test doctrine:database:create --if-not-exists --no-interaction
+
             - name: Run PHPUnit with coverage
-              run: docker compose run -e XDEBUG_MODE=coverage --rm phpfpm vendor/bin/phpunit --coverage-clover=coverage/clover.xml
+              run: docker compose run -e XDEBUG_MODE=coverage --rm phpfpm vendor/bin/phpunit --bootstrap=tests/bootstrap_integration.php --coverage-clover=coverage/clover.xml
 
             - name: Enforce coverage threshold (100%)
               run: docker compose run --rm phpfpm vendor/bin/coverage-check coverage/clover.xml 100

CHANGELOG.md

@@ -56,6 +56,28 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   `nav_toggle_controller` driving the mobile menu, and a
   `block-on-label` GitHub Action providing a per-PR merge gate
   ([#40](https://github.com/itk-dev/ai-lib/issues/40)).
+- User authentication: `User` Doctrine entity (email, hashed password,
+  roles), `UserRepository` (with `PasswordUpgraderInterface`), the
+  `UserManager` service that hides persistence + hashing, form-login
+  firewall + `/login` + `/logout`, fixtures for two baseline users
+  (`alice@example.test`, `bob@example.test` — password `password`),
+  console commands `app:user:create` and `app:user:change-password`,
+  and end-to-end functional + unit tests
+  ([#2](https://github.com/itk-dev/ai-lib/issues/2)).
+- PHPUnit suite split into `unit` (no database) and `integration` (full
+  kernel) testsuites under `tests/Unit/` and `tests/Integration/`, with
+  transactional database isolation per integration test via
+  `dama/doctrine-test-bundle`. The integration suite uses a dedicated
+  `tests/bootstrap_integration.php` that builds the schema from ORM
+  metadata and loads baseline `UserFixtures` once before any test;
+  DAMA's per-test transaction rolls back mutations so the baseline
+  persists. The default `tests/bootstrap.php` is minimal and is used
+  by `task test-unit`. `task test-unit` and `task test-integration`
+  expose the suites individually.
+- Reusable Twig form components under `templates/components/Form/`:
+  `Form/Label`, `Form/Input`, and `Form/Button` (with `variant` and
+  `size` props for future styling variants). The `/login` template
+  consumes them instead of inlining the input/label/button markup.
 - Site chrome (header with brand + nav, footer) in
   `templates/base.html.twig`, with the Fraunces/Geist font stack
   preloaded from Google Fonts.

README.md

@@ -145,6 +145,21 @@ task open
 The site is served through Traefik on a `*.local.itkdev.dk` domain (the exact
 URL is printed by the start task).
 
+### Creating the first user
+
+```sh
+# Option A — load the local-dev fixtures (alice + bob, password `password`)
+task console -- doctrine:fixtures:load -n
+
+# Option B — create a single user explicitly
+task console -- app:user:create alice@example.test secret
+
+# Change an existing user's password
+task console -- app:user:change-password alice@example.test newsecret
+```
+
+Then sign in at `/login`.
+
 ## Testing
 
 Tests live under `tests/` (PSR-4 namespace `App\Tests\`) and run with

Taskfile.yml

@@ -36,11 +36,12 @@ tasks:
   # ---- Lifecycle --------------------------------------------------------
 
   site-install:
-    desc: 'Pull images, start the stack, and install Composer dependencies.'
+    desc: 'Pull images, start the stack, install Composer dependencies, and apply database migrations.'
     cmds:
       - task compose -- pull
       - task compose -- up --detach --remove-orphans --wait
       - task composer-install
+      - task console -- doctrine:migrations:migrate --no-interaction
     silent: true
 
   # ---- Composer ---------------------------------------------------------
@@ -91,16 +92,37 @@ tasks:
 
   # ---- Tests ------------------------------------------------------------
 
+  db-prepare-test:
+    desc: 'Ensure the test database exists (idempotent).'
+    cmds:
+      - task console -- --env=test doctrine:database:create --if-not-exists --no-interaction
+    silent: true
+
   test:
     desc: 'Run the PHPUnit test suite (no coverage).'
     cmds:
-      - task compose-exec -- phpfpm vendor/bin/phpunit
+      - task: db-prepare-test
+      - task compose-exec -- phpfpm vendor/bin/phpunit --bootstrap=tests/bootstrap_integration.php
+    silent: true
+
+  test-unit:
+    desc: 'Run only the unit suite (no database).'
+    cmds:
+      - task compose-exec -- phpfpm vendor/bin/phpunit --testsuite=unit
+    silent: true
+
+  test-integration:
+    desc: 'Run only the integration suite.'
+    cmds:
+      - task: db-prepare-test
+      - task compose-exec -- phpfpm vendor/bin/phpunit --testsuite=integration --bootstrap=tests/bootstrap_integration.php
     silent: true
 
   test-coverage:
     desc: 'Run PHPUnit with coverage and enforce the 100% gate.'
     cmds:
-      - task compose -- exec -e XDEBUG_MODE=coverage phpfpm vendor/bin/phpunit --coverage-clover=coverage/clover.xml
+      - task: db-prepare-test
+      - task compose -- exec -e XDEBUG_MODE=coverage phpfpm vendor/bin/phpunit --bootstrap=tests/bootstrap_integration.php --coverage-clover=coverage/clover.xml
       - task compose-exec -- phpfpm vendor/bin/coverage-check coverage/clover.xml 100
     silent: true
 

composer.json

@@ -7,13 +7,17 @@
         "php": ">=8.4",
         "ext-ctype": "*",
         "ext-iconv": "*",
+        "doctrine/doctrine-bundle": "^3.2",
+        "doctrine/doctrine-migrations-bundle": "^4.0",
+        "doctrine/orm": "^3.6",
         "symfony/asset": "^8.1",
         "symfony/asset-mapper": "^8.1",
         "symfony/console": "~8.1.0",
         "symfony/dotenv": "~8.1.0",
         "symfony/flex": "^2",
         "symfony/framework-bundle": "~8.1.0",
         "symfony/runtime": "~8.1.0",
+        "symfony/security-bundle": "~8.1.0",
         "symfony/stimulus-bundle": "^3.1",
         "symfony/translation": "~8.1.0",
         "symfony/twig-bundle": "~8.1.0",
@@ -24,12 +28,15 @@
         "twig/twig": "^2.12 || ^3.0"
     },
     "require-dev": {
+        "dama/doctrine-test-bundle": "^8.0",
+        "doctrine/doctrine-fixtures-bundle": "^4.3",
         "ergebnis/composer-normalize": "^2.52",
         "friendsofphp/php-cs-fixer": "^3.95.5",
         "phpunit/phpunit": "^11.5",
         "rregeer/phpunit-coverage-check": "^0.3.1",
         "symfony/browser-kit": "~8.1.0",
         "symfony/css-selector": "~8.1.0",
+        "symfony/maker-bundle": "^1.67",
         "symfony/phpunit-bridge": "~8.1.0",
         "vincentlanglet/twig-cs-fixer": "^3.14"
     },