API and development# API and development ## Monorepo `backend/` contains Symfony, controllers, domain, entities and repositories. `frontend/` contains React, Lazy Pages, Axios and TanStack Query. ## REST authentication `POST /api/auth/login` issues a session-related 15-minute JWT. The rotating refresh is an HttpOnly cookie. Private endpoints require `ROLE_VIEWER`; the entries add their business role. ## Create an endpoint or page Validate on the server side, resolve the current organization, find each relationship in this tenant and add RBAC, auditing and testing. On the React side, add a page under `frontend/src/pages`, lazy import, route and rights-conditioned navigation. ```bash make test make lint docker compose exec backend php bin/console doctrine:schema:validate ``` Any persisted changes require a reversible Doctrine migration. ## Backend organization Controllers adapt HTTP, Application orchestrates use cases, Domain carries reusable rules, Entity keeps persistent invariants and Reposito
RiskPilot
Website
FR
GitHub