feat(paiements): ajout d'un système d'audit log pour les paiements avec filtres et correction d'accès agent

as-talange-core/src/main/java/com/astalange/core/entity/AuditLogPaiement.java

@@ -0,0 +1,104 @@
+package com.astalange.core.entity;
+
+import jakarta.persistence.*;
+import java.time.LocalDateTime;
+import java.math.BigDecimal;
+
+@Entity
+@Table(name = "audit_log_paiement")
+public class AuditLogPaiement {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @Column(nullable = false)
+    private String action; // CREATE, UPDATE, DELETE
+
+    @Column(nullable = false)
+    private LocalDateTime dateAction;
+
+    @Column(nullable = false)
+    private String utilisateur; // Username or 'Système'
+
+    @Column(nullable = true)
+    private Long paiementId; // Can be null if the payment is completely deleted or we just want to keep track
+
+    @Column(nullable = false, length = 1000)
+    private String details;
+
+    @Column(nullable = true)
+    private BigDecimal montant;
+
+    @Column(nullable = true)
+    private String adherentNomComplet;
+
+    @PrePersist
+    protected void onCreate() {
+        this.dateAction = LocalDateTime.now();
+    }
+
+    public Long getId() {
+        return id;
+    }
+
+    public void setId(Long id) {
+        this.id = id;
+    }
+
+    public String getAction() {
+        return action;
+    }
+
+    public void setAction(String action) {
+        this.action = action;
+    }
+
+    public LocalDateTime getDateAction() {
+        return dateAction;
+    }
+
+    public void setDateAction(LocalDateTime dateAction) {
+        this.dateAction = dateAction;
+    }
+
+    public String getUtilisateur() {
+        return utilisateur;
+    }
+
+    public void setUtilisateur(String utilisateur) {
+        this.utilisateur = utilisateur;
+    }
+
+    public Long getPaiementId() {
+        return paiementId;
+    }
+
+    public void setPaiementId(Long paiementId) {
+        this.paiementId = paiementId;
+    }
+
+    public String getDetails() {
+        return details;
+    }
+
+    public void setDetails(String details) {
+        this.details = details;
+    }
+
+    public BigDecimal getMontant() {
+        return montant;
+    }
+
+    public void setMontant(BigDecimal montant) {
+        this.montant = montant;
+    }
+
+    public String getAdherentNomComplet() {
+        return adherentNomComplet;
+    }
+
+    public void setAdherentNomComplet(String adherentNomComplet) {
+        this.adherentNomComplet = adherentNomComplet;
+    }
+}

as-talange-core/src/main/java/com/astalange/core/repository/AuditLogPaiementRepository.java

@@ -0,0 +1,26 @@
+package com.astalange.core.repository;
+
+import com.astalange.core.entity.AuditLogPaiement;
+import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.stereotype.Repository;
+
+import java.util.List;
+
+import org.springframework.data.jpa.repository.Query;
+import org.springframework.data.repository.query.Param;
+
+@Repository
+public interface AuditLogPaiementRepository extends JpaRepository<AuditLogPaiement, Long> {
+    List<AuditLogPaiement> findAllByOrderByDateActionDesc();
+
+    @Query("SELECT a FROM AuditLogPaiement a WHERE " +
+           "(:action IS NULL OR :action = '' OR a.action = :action) AND " +
+           "(:utilisateur IS NULL OR :utilisateur = '' OR LOWER(a.utilisateur) LIKE LOWER(CONCAT('%', :utilisateur, '%'))) AND " +
+           "(:adherent IS NULL OR :adherent = '' OR LOWER(a.adherentNomComplet) LIKE LOWER(CONCAT('%', :adherent, '%'))) " +
+           "ORDER BY a.dateAction DESC")
+    List<AuditLogPaiement> findByFilters(
+            @Param("action") String action,
+            @Param("utilisateur") String utilisateur,
+            @Param("adherent") String adherent
+    );
+}

as-talange-core/src/main/resources/db/migration/V25__create_audit_log_paiement.sql

@@ -0,0 +1,10 @@
+CREATE TABLE audit_log_paiement (
+    id BIGSERIAL PRIMARY KEY,
+    action VARCHAR(50) NOT NULL,
+    date_action TIMESTAMP NOT NULL,
+    utilisateur VARCHAR(255) NOT NULL,
+    paiement_id BIGINT,
+    details VARCHAR(1000) NOT NULL,
+    montant DECIMAL(10, 2),
+    adherent_nom_complet VARCHAR(255)
+);

as-talange-web/src/main/java/com/astalange/web/config/SecurityConfig.java

@@ -27,8 +27,8 @@ public class SecurityConfig {
             .authorizeHttpRequests(auth -> auth
                 .requestMatchers("/css/**", "/js/**", "/images/**", "/inscription-public/**").permitAll()
                 .requestMatchers("/change-password").authenticated()
-                .requestMatchers("/utilisateurs/**", "/saisons/**", "/categories/**", "/equipes/**", "/modespaiement/**", "/equipements/**").hasRole("ADMIN")
-                .requestMatchers("/paiements/**", "/paiement/**").hasAnyRole("ADMIN", "TRESORERIE")
+                .requestMatchers("/utilisateurs/**", "/saisons/**", "/categories/**", "/equipes/**", "/modespaiement/**", "/equipements/**", "/admin/logs/**").hasRole("ADMIN")
+                .requestMatchers("/paiements/**", "/paiement/**").hasAnyRole("ADMIN", "TRESORERIE", "AGENT_SAISIE")
                 .requestMatchers("/planning/**").hasAnyRole("ADMIN", "AGENT_SAISIE")
                 .requestMatchers("/adherents/**", "/dotations/**").hasAnyRole("ADMIN", "TRESORERIE", "AGENT_SAISIE")
                 .anyRequest().authenticated()

as-talange-web/src/main/java/com/astalange/web/controller/AuditLogPaiementController.java

@@ -0,0 +1,34 @@
+package com.astalange.web.controller;
+
+import com.astalange.core.repository.AuditLogPaiementRepository;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+
+@Controller
+@RequestMapping("/admin/logs/paiements")
+public class AuditLogPaiementController {
+
+    private final AuditLogPaiementRepository auditLogPaiementRepository;
+
+    public AuditLogPaiementController(AuditLogPaiementRepository auditLogPaiementRepository) {
+        this.auditLogPaiementRepository = auditLogPaiementRepository;
+    }
+
+    @GetMapping
+    public String listLogs(
+            @RequestParam(required = false) String action,
+            @RequestParam(required = false) String utilisateur,
+            @RequestParam(required = false) String adherent,
+            Model model) {
+        
+        model.addAttribute("logs", auditLogPaiementRepository.findByFilters(action, utilisateur, adherent));
+        model.addAttribute("paramAction", action);
+        model.addAttribute("paramUtilisateur", utilisateur);
+        model.addAttribute("paramAdherent", adherent);
+        
+        return "audit/paiements_logs";
+    }
+}

as-talange-web/src/main/java/com/astalange/web/controller/PaiementController.java

@@ -3,6 +3,8 @@ package com.astalange.web.controller;
 import com.astalange.core.entity.Licence;
 import com.astalange.core.entity.ModePaiement;
 import com.astalange.core.entity.Paiement;
+import com.astalange.core.entity.AuditLogPaiement;
+import com.astalange.core.repository.AuditLogPaiementRepository;
 import com.astalange.core.repository.LicenceRepository;
 import com.astalange.core.repository.ModePaiementRepository;
 import com.astalange.core.repository.PaiementRepository;
@@ -22,11 +24,13 @@ public class PaiementController {
     private final LicenceRepository licenceRepository;
     private final ModePaiementRepository modePaiementRepository;
     private final PaiementRepository paiementRepository;
+    private final AuditLogPaiementRepository auditLogPaiementRepository;
 
-    public PaiementController(LicenceRepository licenceRepository, ModePaiementRepository modePaiementRepository, PaiementRepository paiementRepository) {
+    public PaiementController(LicenceRepository licenceRepository, ModePaiementRepository modePaiementRepository, PaiementRepository paiementRepository, AuditLogPaiementRepository auditLogPaiementRepository) {
         this.licenceRepository = licenceRepository;
         this.modePaiementRepository = modePaiementRepository;
         this.paiementRepository = paiementRepository;
+        this.auditLogPaiementRepository = auditLogPaiementRepository;
     }
 
     @PostMapping("/licences/{id}/paiements")
@@ -58,6 +62,15 @@ public class PaiementController {
                 paiement.setGestionnaire(principal.getName());
             }
             paiementRepository.save(paiement);
+            
+            AuditLogPaiement log = new AuditLogPaiement();
+            log.setAction("CREATE");
+            log.setUtilisateur(principal != null ? principal.getName() : "Système");
+            log.setPaiementId(paiement.getId());
+            log.setMontant(montant);
+            log.setAdherentNomComplet(licence.getAdherent().getNom() + " " + licence.getAdherent().getPrenom());
+            log.setDetails("Création d'un paiement de " + montant + "€ via " + mode.getNom() + " pour la licence " + (licence.getNumeroLicence() != null ? licence.getNumeroLicence() : "sans numéro"));
+            auditLogPaiementRepository.save(log);
         }
 
         return "redirect:/adherents/" + adherentId + "/edit";
@@ -78,6 +91,9 @@ public class PaiementController {
         ModePaiement mode = modePaiementRepository.findById(modePaiementId)
                 .orElseThrow(() -> new IllegalArgumentException("Invalid ModePaiement ID"));
 
+        BigDecimal ancienMontant = paiement.getMontant();
+        String ancienMode = paiement.getModePaiement().getNom();
+
         Licence licence = paiement.getLicence();
         
         // Validation basique pour ne pas dépasser le montant total de la licence
@@ -94,6 +110,15 @@ public class PaiementController {
                 paiement.setGestionnaire(principal.getName());
             }
             paiementRepository.save(paiement);
+
+            AuditLogPaiement log = new AuditLogPaiement();
+            log.setAction("UPDATE");
+            log.setUtilisateur(principal != null ? principal.getName() : "Système");
+            log.setPaiementId(paiement.getId());
+            log.setMontant(montant);
+            log.setAdherentNomComplet(licence.getAdherent().getNom() + " " + licence.getAdherent().getPrenom());
+            log.setDetails("Modification du paiement: montant " + ancienMontant + "€ -> " + montant + "€, mode " + ancienMode + " -> " + mode.getNom());
+            auditLogPaiementRepository.save(log);
         }
 
         if (redirect != null && !redirect.isEmpty()) {
@@ -105,12 +130,23 @@ public class PaiementController {
     @PostMapping("/paiements/{id}/delete")
     public String deletePaiement(
             @PathVariable Long id,
-            @RequestParam(required = false) String redirect) {
+            @RequestParam(required = false) String redirect,
+            Principal principal) {
 
         Paiement paiement = paiementRepository.findById(id)
                 .orElseThrow(() -> new IllegalArgumentException("Invalid Paiement ID"));
 
         Long adherentId = paiement.getLicence().getAdherent().getId();
+
+        AuditLogPaiement log = new AuditLogPaiement();
+        log.setAction("DELETE");
+        log.setUtilisateur(principal != null ? principal.getName() : "Système");
+        log.setPaiementId(paiement.getId());
+        log.setMontant(paiement.getMontant());
+        log.setAdherentNomComplet(paiement.getLicence().getAdherent().getNom() + " " + paiement.getLicence().getAdherent().getPrenom());
+        log.setDetails("Suppression du paiement de " + paiement.getMontant() + "€ via " + paiement.getModePaiement().getNom());
+        auditLogPaiementRepository.save(log);
+
         paiementRepository.delete(paiement);
 
         if (redirect != null && !redirect.isEmpty()) {

as-talange-web/src/main/resources/templates/adherents/form.html

@@ -25,7 +25,7 @@
 
         <!-- Main section -->
         <div class="flex-1 overflow-auto p-6">
-            <div class="max-w-3xl mx-auto bg-white rounded-xl shadow-sm border border-gray-100 p-8">
+            <div class="max-w-6xl mx-auto bg-white rounded-xl shadow-sm border border-gray-100 p-8">
                 
                 <form th:action="@{/adherents}" th:object="${adherent}" method="post" class="space-y-6">
                     <input type="hidden" th:field="*{id}" />
@@ -149,7 +149,7 @@
             </div>
 
             <!-- Licences Section (Only visible for existing adherents) -->
-            <div th:if="${adherent.id != null}" class="max-w-3xl mx-auto bg-white rounded-xl shadow-sm border border-gray-100 p-8 mt-6">
+            <div th:if="${adherent.id != null}" class="max-w-6xl mx-auto bg-white rounded-xl shadow-sm border border-gray-100 p-8 mt-6">
                 <div class="flex justify-between items-center mb-6">
                     <h3 class="text-xl font-bold text-gray-900">Licences de l'adhérent</h3>
                     <button th:if="${#lists.isEmpty(licences)}" onclick="openLicenceModal()" class="bg-green-600 text-white px-4 py-2 rounded-lg text-sm font-medium hover:bg-green-700 transition-colors">

as-talange-web/src/main/resources/templates/audit/paiements_logs.html

@@ -0,0 +1,93 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+<head>
+    <meta charset="UTF-8">
+    <title>Logs Paiements - AS Talange</title>
+    <script src="https://cdn.tailwindcss.com"></script>
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+    <style>
+        body { font-family: 'Inter', sans-serif; }
+    </style>
+</head>
+<body class="bg-gray-50 text-gray-900 flex h-screen overflow-hidden">
+
+    <!-- Sidebar -->
+    <div th:replace="~{fragments/sidebar :: sidebar}"></div>
+
+    <!-- Main Content -->
+    <main class="flex-1 flex flex-col h-screen overflow-hidden">
+        <!-- Header -->
+        <header class="h-16 bg-white border-b border-gray-200 flex items-center px-6">
+            <h2 class="text-lg font-semibold text-gray-800">Audit Logs des Paiements</h2>
+        </header>
+
+        <!-- Main section -->
+        <div class="flex-1 overflow-auto p-6">
+
+            <!-- Filtres -->
+            <div class="bg-white rounded-xl shadow-sm border border-gray-100 p-5 mb-6">
+                <form th:action="@{/admin/logs/paiements}" method="get" class="grid grid-cols-1 md:grid-cols-4 gap-4 items-end">
+                    <div>
+                        <label class="block text-sm font-medium text-gray-700 mb-1">Action</label>
+                        <select name="action" class="w-full border border-gray-300 rounded-lg px-4 py-2 text-sm focus:ring-2 focus:ring-blue-500 outline-none">
+                            <option value="">Toutes</option>
+                            <option value="CREATE" th:selected="${paramAction == 'CREATE'}">Création</option>
+                            <option value="UPDATE" th:selected="${paramAction == 'UPDATE'}">Modification</option>
+                            <option value="DELETE" th:selected="${paramAction == 'DELETE'}">Suppression</option>
+                        </select>
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-gray-700 mb-1">Agent / Utilisateur</label>
+                        <input type="text" name="utilisateur" th:value="${paramUtilisateur}" placeholder="Ex: admin" class="w-full border border-gray-300 rounded-lg px-4 py-2 text-sm focus:ring-2 focus:ring-blue-500 outline-none">
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-gray-700 mb-1">Adhérent concerné</label>
+                        <input type="text" name="adherent" th:value="${paramAdherent}" placeholder="Nom ou prénom" class="w-full border border-gray-300 rounded-lg px-4 py-2 text-sm focus:ring-2 focus:ring-blue-500 outline-none">
+                    </div>
+                    <div class="flex space-x-2">
+                        <button type="submit" class="bg-blue-600 text-white px-4 py-2 rounded-lg text-sm font-medium hover:bg-blue-700 transition-colors w-full">
+                            Filtrer
+                        </button>
+                        <a href="/admin/logs/paiements" class="bg-gray-100 text-gray-700 px-4 py-2 rounded-lg text-sm font-medium hover:bg-gray-200 transition-colors flex items-center justify-center px-3">
+                            <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15"></path></svg>
+                        </a>
+                    </div>
+                </form>
+            </div>
+
+            <div class="bg-white rounded-xl shadow-sm border border-gray-100 overflow-hidden">
+                <div class="overflow-x-auto">
+                    <table class="w-full text-left border-collapse min-w-[800px]">
+                        <thead>
+                            <tr class="bg-gray-50 text-gray-500 text-xs uppercase tracking-wider border-b border-gray-200">
+                                <th class="py-3 px-6 font-medium">Date</th>
+                                <th class="py-3 px-6 font-medium">Action</th>
+                                <th class="py-3 px-6 font-medium">Utilisateur</th>
+                                <th class="py-3 px-6 font-medium">Adhérent</th>
+                                <th class="py-3 px-6 font-medium">Détails</th>
+                            </tr>
+                        </thead>
+                        <tbody class="divide-y divide-gray-100 text-sm">
+                            <tr th:if="${#lists.isEmpty(logs)}">
+                                <td colspan="5" class="py-4 px-6 text-center text-gray-500">Aucun log enregistré.</td>
+                            </tr>
+                            <tr th:each="log : ${logs}" class="hover:bg-gray-50 transition-colors">
+                                <td class="py-3 px-6 text-gray-600 whitespace-nowrap" th:text="${#temporals.format(log.dateAction, 'dd/MM/yyyy HH:mm:ss')}">01/01/2026 10:00:00</td>
+                                <td class="py-3 px-6">
+                                    <span class="px-2 py-1 text-xs font-semibold rounded-full"
+                                          th:classappend="${log.action == 'CREATE' ? 'bg-green-100 text-green-800' : (log.action == 'UPDATE' ? 'bg-blue-100 text-blue-800' : 'bg-red-100 text-red-800')}"
+                                          th:text="${log.action}">CREATE</span>
+                                </td>
+                                <td class="py-3 px-6 font-medium text-gray-900" th:text="${log.utilisateur}">Jean Dupont</td>
+                                <td class="py-3 px-6 text-gray-600" th:text="${log.adherentNomComplet}">John Doe</td>
+                                <td class="py-3 px-6 text-gray-500 text-xs" th:text="${log.details}">Détails du changement</td>
+                            </tr>
+                        </tbody>
+                    </table>
+                </div>
+            </div>
+        </div>
+    </main>
+
+</body>
+</html>

as-talange-web/src/main/resources/templates/fragments/sidebar.html

@@ -43,6 +43,7 @@
                 <!-- Administration -->
                 <div class="pt-4 pb-2 px-3 text-xs font-semibold text-gray-400 uppercase tracking-wider">Administration</div>
                 <a href="/utilisateurs" th:classappend="${requestURI != null and requestURI.startsWith('/utilisateurs') ? 'bg-blue-50 text-blue-700 font-medium' : 'text-gray-600 hover:bg-gray-50 hover:text-gray-900'}" class="block px-3 py-2 rounded-lg transition-colors">Utilisateurs</a>
+                <a href="/admin/logs/paiements" th:classappend="${requestURI != null and requestURI.startsWith('/admin/logs/paiements') ? 'bg-blue-50 text-blue-700 font-medium' : 'text-gray-600 hover:bg-gray-50 hover:text-gray-900'}" class="block px-3 py-2 rounded-lg transition-colors">Logs Paiements</a>
             </th:block>
         </nav>
         <div class="p-4 border-t border-gray-200">

as-talange-web/src/main/resources/templates/index.html

@@ -1,5 +1,5 @@
 <!DOCTYPE html>
-<html xmlns:th="http://www.thymeleaf.org">
+<html xmlns:th="http://www.thymeleaf.org" xmlns:sec="http://www.thymeleaf.org/extras/spring-security">
 <head>
     <meta charset="UTF-8">
     <title>Tableau de bord - AS Talange</title>
@@ -55,7 +55,7 @@
                 </div>
 
                 <!-- Total Encaissé -->
-                <div class="bg-white rounded-xl shadow-sm border border-gray-100 p-6 flex items-center space-x-4">
+                <div sec:authorize="!hasRole('ROLE_AGENT_SAISIE')" class="bg-white rounded-xl shadow-sm border border-gray-100 p-6 flex items-center space-x-4">
                     <div class="p-3 bg-purple-50 text-purple-600 rounded-lg">
                         <svg class="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8c-1.657 0-3 .895-3 2s1.343 2 3 2 3 .895 3 2-1.343 2-3 2m0-8c1.11 0 2.08.402 2.599 1M12 8V7m0 1v8m0 0v1m0-1c-1.11 0-2.08-.402-2.599-1M21 12a9 9 0 11-18 0 9 9 0 0118 0z"></path></svg>
                     </div>
@@ -66,7 +66,7 @@
                 </div>
 
                 <!-- Reste à Recouvrer -->
-                <div class="bg-white rounded-xl shadow-sm border border-gray-100 p-6 flex items-center space-x-4">
+                <div sec:authorize="!hasRole('ROLE_AGENT_SAISIE')" class="bg-white rounded-xl shadow-sm border border-gray-100 p-6 flex items-center space-x-4">
                     <div class="p-3 bg-red-50 text-red-600 rounded-lg">
                         <svg class="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 17h8m0 0V9m0 8l-8-8-4 4-6-6"></path></svg>
                     </div>