Login and Session Cart

Goal

This snapshot advances Stonequay Market by teaching you to authenticate users and keep a session shopping cart.

Every numbered folder is a complete app. Run this stage independently, then compare it with the previous folder.

Prerequisites

Use PHP 8.2+, Composer, Node.js 20+, and Docker for MySQL stages.

Port 8005 must be free. Copy .env.example before database stages.

• PHP and Composer
• Node.js and npm
• Docker from part 4 onward

Concepts

Session auth restores the user; the cart lives in session as product id to quantity until checkout.

Twig escapes output by default; Tailwind styles the storefront; Doctrine owns persistence and voters enforce ownership.

Walkthrough

Add login/logout and an Add to Cart action that updates session state.

Read the example, then open the matching snapshot. The repository includes validation, CSRF, and the surrounding structure.

$cart = $session->get('cart', []);
$cart[$id] = ($cart[$id] ?? 0) + 1;
$session->set('cart', $cart);

Run and verify

Enter 07-Login-And-Cart, composer install, copy .env, migrate, seed, build assets, and serve on port 8005.

Open http://127.0.0.1:8005. From data lessons onward, Ada and Grace use password123.

docker compose up -d
git clone https://github.com/michaeldunga1/fcc-symfony-ecommerce.git
cd fcc-symfony-ecommerce/07-Login-And-Cart
composer install
npm install
cp .env.example .env
php bin/console doctrine:migrations:migrate -n
php bin/console app:seed
npm run build
symfony server:start --port=8005 --no-tls
# or: php -S 0.0.0.0:8005 -t public

Troubleshooting

A changed session secret invalidates sessions; clear cookies and try again.

For database failures, confirm Docker and the stone_NN name. Never commit .env, vendor, or node_modules.

• Read the first exception first
• Rebuild assets after Tailwind class changes
• Never commit secrets

Try this

Log in as Ada, add two items, refresh, and confirm the cart badge persists.

Test a happy path and one invalid or unauthorized request.

• Make one small change
• Test it in the browser
• Compare with the next snapshot only after it works