fix: missing required parameters (#27 )

Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #27
chore: release [ci skip]
2026-04-18 10:22:18 +00:00 · 2026-04-17 12:12:43 +00:00 · 2026-04-17 12:03:19 +00:00 · 2026-04-17 06:14:34 +00:00 · 2026-04-17 05:59:35 +00:00 · 2026-04-17 05:39:21 +00:00
99 changed files with 4603 additions and 411 deletions
@@ -1,20 +1,30 @@
-FROM alpine:3.22
+FROM jbangdev/jbang-action:latest AS jbang-provider

-RUN apk update && apk add --no-cache \
-    curl \
-    bash \
-    openjdk21-jdk \
-    maven \
+FROM node:current-trixie AS base
+
+COPY --from=jbang-provider /jbang /jbang
+
+ENV PATH="/jbang/bin:${PATH}"
+
+ENV PNPM_HOME="/pnpm"
+ENV PATH="$PNPM_HOME:$PATH"
+
+RUN npm install --global pnpm@latest
+
+# Tránh các câu hỏi tương tác trong quá trình cài đặt
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y ca-certificates && apt-get clean
+
+# 1. Cài đặt các công cụ cơ bản
+RUN apt-get update --fix-missing && apt-get install --no-install-recommends --no-install-suggests -y \
    git \
-    ca-certificates \
-    pnpm
+    docker-buildx \
+    docker-cli \
+    docker.io \
+    kubectl \
+    openjdk-25-jdk-headless \
+    maven 

-# git trust all directories
-RUN git config --global --add safe.directory '*'
-
-# Install quarkus
-ENV JBANG_DIR="/root/.jbang"
-ENV PATH="${JBANG_DIR}/bin:${PATH}"
-
-RUN curl -Ls https://sh.jbang.dev | bash -s - trust add https://repo1.maven.org/maven2/io/quarkus/quarkus-cli/
-RUN curl -Ls https://sh.jbang.dev | bash -s - app install --fresh --force quarkus@quarkusio
+RUN jbang trust add https://repo1.maven.org/maven2/io/quarkus/quarkus-cli/
+RUN jbang app install --fresh --force quarkus@quarkusio
@@ -1,24 +1,37 @@
 // For format details, see https://aka.ms/devcontainer.json. For config options, see the
 // README at: https://github.com/devcontainers/templates/tree/main/src/alpine
 {
-	"dockerComposeFile": "docker-compose.main.yaml",
+	"build": {
+		"dockerfile": "Dockerfile",
+		"args": {
+			"http_proxy": "http://host.docker.internal:3142"
+		},
+		"options": ["--add-host=host.docker.internal:host-gateway"]
+	},
+	"runArgs": ["--add-host=host.docker.internal:host-gateway"],
 	"mounts": [
+		"source=${localEnv:USERPROFILE}/.kube,target=/root/.kube,type=bind",
 		"source=/var/run/docker.sock,target=/var/run/docker.sock,type=bind"
 	],
 	"remoteUser": "root",
-	"service": "devcontainer",
-	"workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
 	"customizations": {
 		"vscode": {
 			"extensions": [
 				"redhat.vscode-quarkus",
 				"vscjava.vscode-java-pack",
 				"redhat.vscode-xml",
-				"esbenp.prettier-vscode"
+				"esbenp.prettier-vscode",
+				"PeterSchmalfeldt.explorer-exclude",
+				"redhat.java",
+				"ryanluker.vscode-coverage-gutters"
 			]
 		}
 	},
 	"containerEnv": {
-		"TESTCONTAINERS_RYUK_DISABLED": "true"
-	}
+		"TESTCONTAINERS_RYUK_DISABLED": "true",
+		"QUARKUS_DEBUG_HOST": "0.0.0.0",
+		"http_proxy": "http://host.docker.internal:3142"
+	},
+	"postCreateCommand": "git config --global --add safe.directory '*'",
+	"forwardPorts": [5005, 8080]
 }
@@ -1,29 +0,0 @@
-services:
-  kafka:
-    image: apache/kafka:latest
-    restart: unless-stopped
-    network_mode: host
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
-    environment:
-      KAFKA_NODE_ID: 1
-      KAFKA_PROCESS_ROLES: broker,controller
-      KAFKA_LISTENERS: PLAINTEXT://:9092,CONTROLLER://:9093
-      KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://localhost:9092
-      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: CONTROLLER:PLAINTEXT,PLAINTEXT:PLAINTEXT
-      KAFKA_CONTROLLER_QUORUM_VOTERS: 1@localhost:9093
-      KAFKA_CONTROLLER_LISTENER_NAMES: CONTROLLER
-      KAFKA_AUTO_CREATE_TOPICS_ENABLE: "true"
-      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
-
-  kafdrop:
-    image: obsidiandynamics/kafdrop:latest
-    restart: unless-stopped
-    depends_on:
-      - kafka
-    network_mode: host
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
-    command: sh -c "sleep 5 && exec ./start-app"
-    environment:
-      KAFKA_BROKERCONNECT: "localhost:9092"
@@ -1,15 +0,0 @@
-include:
-  - ./docker-compose.kafka.yaml
-  - ./docker-compose.postgres.yaml
-
-services:
-  devcontainer:
-    build:
-      context: .
-      dockerfile: Dockerfile
-    volumes:
-      - ../..:/workspaces:cached
-    network_mode: host
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
-    command: sleep infinity
@@ -1,13 +0,0 @@
-services:
-  postgres:
-    image: postgres:alpine
-    environment:
-      - POSTGRES_PASSWORD=password
-    network_mode: host
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
-    volumes:
-      - postgres_data:/var/lib/postgresql/data
-
-volumes:
-  postgres_data:
@@ -4,7 +4,6 @@ on:
  push:
    branches:
      - main
-      - dev-*

 jobs:
  release:
@@ -12,37 +11,30 @@ jobs:
    permissions:
      contents: write
    steps:
+      - name: Install dependencies with Proxy
+        env:
+          http_proxy: "http://host.docker.internal:3142"
+          https_proxy: "http://host.docker.internal:3142"
+        run: |
+          # Kiểm tra proxy có hoạt động không
+          echo "Acquire::http::Proxy \"$http_proxy\";" > /etc/apt/apt.conf.d/80proxy
+          apt-get update
+          apt-get install -y --no-install-recommends --no-install-suggests \
+            openjdk-25-jdk-headless docker-cli docker-buildx
+
+      - name: Setup SSH Key
+        run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo "${{ secrets.DEPLOY_KEY }}" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+
+          ssh-keyscan -t ed25519 vps.demonkernel.io.vn >> ~/.ssh/known_hosts
+
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

-      - name: Set up JDK
-        uses: actions/setup-java@v5
-        with:
-          distribution: "temurin"
-          java-version: "25"
-
-      - name: Log in to Gitea Container Registry
-        uses: docker/login-action@v3
-        with:
-          registry: git.demonkernel.io.vn
-          username: ${{ github.actor }}
-          password: ${{ secrets.ACCESS_TOKEN }}
-
-      - uses: actions/setup-node@v6
-        with:
-          node-version: latest
-
-      - uses: pnpm/action-setup@v3
-        with:
-          version: latest
-          run_install: false
-
-      - name: Get pnpm store directory
-        shell: bash
-        run: |
-          echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
-
      - name: Cache Maven packages
        uses: actions/cache@v4
        with:
@@ -51,13 +43,18 @@ jobs:
          restore-keys: |
            ${{ runner.os }}-maven-

-      - uses: actions/cache@v4
-        name: Setup pnpm cache
+      - name: Log in to Gitea Container Registry
+        uses: docker/login-action@v3
        with:
-          path: ${{ env.STORE_PATH }}
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/package.json') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-
+          registry: vps.demonkernel.io.vn
+          username: ${{ github.actor }}
+          password: ${{ secrets.ACCESS_TOKEN }}
+
+      - uses: pnpm/action-setup@v3
+        with:
+          version: latest
+          run_install: false
+          cache: true

      - name: Run Semantic Release
        env:
@@ -65,21 +62,22 @@ jobs:
          GITEA_TOKEN: ${{ secrets.ACCESS_TOKEN }}
        run: |
          pnpm i
-          pnpm format
          pnpm release
+          pnpm format

      - name: Commit & Push Changes
-        env:
-          MY_PAT_TOKEN: ${{ secrets.ACCESS_TOKEN }}
        run: |
-          if [ -n "$(git status --porcelain)" ]; then
+          if [ -n "$(git status --porcelain)" ]&& [ "${{ github.ref_name }}" = "main" ]; then
            git config --global user.name "gitea-actions"
            git config --global user.email "actions-user@noreply.git.demonkernel.io.vn"

-            git remote set-url origin https://x-access-token:${MY_PAT_TOKEN}@git.demonkernel.io.vn/${{ github.repository }}.git
+            REPO_NAME="${{ gitea.repository }}"

+            git remote set-url origin ssh://git@vps.demonkernel.io.vn/${REPO_NAME}.git
+
+            git rm -r --cached .
            git add .
            git commit -m "chore: release [ci skip]"
            
-            git push origin HEAD:${{ github.ref_name }}
+            git push
          fi
@@ -0,0 +1,61 @@
+name: Java CI with Maven
+
+on:
+  pull_request:
+    branches:
+      - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  actions: read
+  checks: write
+
+jobs:
+  build-and-test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - uses: shogo82148/actions-setup-redis@v1
+        with:
+          redis-version: "7.x"
+
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-maven-
+
+      - name: Install dependencies with Proxy
+        env:
+          http_proxy: "http://host.docker.internal:3142"
+          https_proxy: "http://host.docker.internal:3142"
+        run: |
+          # Kiểm tra proxy có hoạt động không
+          echo "Acquire::http::Proxy \"$http_proxy\";" > /etc/apt/apt.conf.d/80proxy
+          apt-get update
+          apt-get install -y --no-install-recommends --no-install-suggests \
+            openjdk-25-jdk-headless docker-cli docker-buildx
+
+      - name: Build and Test all modules
+        run: |
+          ./mvnw -B install \
+            -Dquarkus.container-image.push=false
+
+      - name: Publish Test Report
+        uses: dorny/test-reporter@v3
+        if: always()
+        with:
+          name: "JUnit Tests Report"
+          path: "**/target/surefire-reports/*.xml"
+          reporter: java-junit
+          fail-on-error: true
@@ -1,12 +0,0 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for more information:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-# https://containers.dev/guide/dependabot
-
-version: 2
-updates:
- - package-ecosystem: "devcontainers"
-   directory: "/"
-   schedule:
-     interval: weekly
@@ -1,4 +1,4 @@
 wrapperVersion=3.3.4
 distributionType=only-script
 distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
-distributionSha256Sum=305773a68d6ddfd413df58c82b3f8050e89778e777f3a745c8e5b8cbea4018ef
+distributionSha256Sum=
@@ -1,19 +0,0 @@
-{
-  "branches": ["main", { "name": "dev-*", "prerelease": "dev" }],
-  "plugins": [
-    "@semantic-release/commit-analyzer",
-    "@semantic-release/release-notes-generator",
-    "@semantic-release/changelog",
-    [
-      "@semantic-release/exec",
-      {
-        "prepareCmd": "./mvnw versions:set -DnewVersion=${nextRelease.version}",
-        "publishCmd": "./mvnw package -Dquarkus.container-image.tag=${nextRelease.version} -DskipTests"
-      }
-    ],
-    ["@saithodev/semantic-release-gitea", {
-      "giteaUrl": "https://git.demonkernel.io.vn/"
-      
-    }]
-  ]
-}
@@ -0,0 +1,19 @@
+branches:
+  - "main"
+  - name: "dev-*"
+    prerelease: "${name.replace('dev-', '')}"
+    channel: "${name.replace('dev-', '')}"
+
+plugins:
+  - "@semantic-release/commit-analyzer"
+  - "@semantic-release/release-notes-generator"
+  - "@semantic-release/changelog"
+  - - "@semantic-release/exec"
+    - prepareCmd: |
+        ./mvnw versions:set -DnewVersion=${nextRelease.version} &&
+        sed -i "/-service:/ s|:[^:]*$|:${nextRelease.version}|" k8s.yaml &&
+        if [ "${branch.name}" = "main" ]; then
+          ./mvnw package -B -Dquarkus.container-image.tag=${nextRelease.version} -DskipTests
+        fi
+  - - "@saithodev/semantic-release-gitea"
+    - giteaUrl: "https://git.demonkernel.io.vn/"
@@ -1,3 +1,84 @@
+## [1.5.4](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.3...v1.5.4) (2026-04-17)
+
+
+### Bug Fixes
+
+* connect gateway to customer service ([#26](https://git.demonkernel.io.vn/FoodSurf/backend/issues/26)) ([e07ee31](https://git.demonkernel.io.vn/FoodSurf/backend/commit/e07ee318a7985d79689f3dc32fea97bb1051e22a))
+
+## [1.5.3](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.2...v1.5.3) (2026-04-17)
+
+
+### Bug Fixes
+
+* better ci script ([#25](https://git.demonkernel.io.vn/FoodSurf/backend/issues/25)) ([f1ffc63](https://git.demonkernel.io.vn/FoodSurf/backend/commit/f1ffc63a5fe3f04b7de622f4df1406ddd977e8aa))
+* Resolve runtime issue with native build ([#24](https://git.demonkernel.io.vn/FoodSurf/backend/issues/24)) ([a97e9ad](https://git.demonkernel.io.vn/FoodSurf/backend/commit/a97e9ade6e20458eb53bdb7ab9d083cef51408fc))
+
+## [1.5.2](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.1...v1.5.2) (2026-04-13)
+
+
+### Bug Fixes
+
+* **semantic-release:** better config ([#22](https://git.demonkernel.io.vn/FoodSurf/backend/issues/22)) ([d925e0d](https://git.demonkernel.io.vn/FoodSurf/backend/commit/d925e0da2296c63384651dbe15316ad555b77bee))
+
+# [1.5.0](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.4.0...v1.5.0) (2026-04-12)
+
+
+### Bug Fixes
+
+* better url ([#20](https://git.demonkernel.io.vn/FoodSurf/backend/issues/20)) ([fdcecf8](https://git.demonkernel.io.vn/FoodSurf/backend/commit/fdcecf836876048af2227313165ec2c52d9ede48))
+
+
+### Features
+
+* add jwt authorization ([#19](https://git.demonkernel.io.vn/FoodSurf/backend/issues/19)) ([00cc6a0](https://git.demonkernel.io.vn/FoodSurf/backend/commit/00cc6a0f1f44eab9e081fb54fff36743b5790313))
+
+# [1.4.0](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.3.0...v1.4.0) (2026-04-08)
+
+
+### Bug Fixes
+
+* update ci script ([#18](https://git.demonkernel.io.vn/FoodSurf/backend/issues/18)) ([e77edb0](https://git.demonkernel.io.vn/FoodSurf/backend/commit/e77edb0e7402afaca494221270d2e289dac3448b))
+
+
+### Features
+
+* init k8s and customer service ([#15](https://git.demonkernel.io.vn/FoodSurf/backend/issues/15)) ([837f5f5](https://git.demonkernel.io.vn/FoodSurf/backend/commit/837f5f595a3b1c5ea5e261f60f265834081071ea))
+
+# [1.1.0-dev.1](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0...v1.1.0-dev.1) (2026-03-24)
+
+
+### Features
+
+* add inventory entity, service, test ([5a72c9f](https://git.demonkernel.io.vn/FoodSurf/backend/commit/5a72c9f9e38cd9f00fe3884d9ddc52675324bd31))
+
+# [1.0.0-dev.21](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.20...v1.0.0-dev.21) (2026-03-23)
+
+
+### Features
+
+* add quick login ([87a9886](https://git.demonkernel.io.vn/FoodSurf/backend/commit/87a98867672b1476faad0721a4c3cbc69a1c6136))
+
+# [1.0.0-dev.20](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.19...v1.0.0-dev.20) (2026-03-23)
+
+
+### Bug Fixes
+
+* update release script ([ec6e8e9](https://git.demonkernel.io.vn/FoodSurf/backend/commit/ec6e8e92676160e7d969bef8a860f963f74397ae))
+
+# [1.0.0-dev.18](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.17...v1.0.0-dev.18) (2026-03-23)
+
+
+### Features
+
+* add existed phone number check when signup ([df716e6](https://git.demonkernel.io.vn/FoodSurf/backend/commit/df716e60e4465668f704895b55e155a497d35ed7))
+
+# [1.0.0-dev.17](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.16...v1.0.0-dev.17) (2026-03-23)
+
+
+### Bug Fixes
+
+* better build configuration ([d49482b](https://git.demonkernel.io.vn/FoodSurf/backend/commit/d49482b4bac51d4ebb305bed8cfde670fa70d9ec))
+
 # [1.0.0-dev.16](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.15...v1.0.0-dev.16) (2026-03-23)


@@ -1,45 +0,0 @@
-#Maven
-target/
-pom.xml.tag
-pom.xml.releaseBackup
-pom.xml.versionsBackup
-release.properties
-.flattened-pom.xml
-
-# Eclipse
-.project
-.classpath
-.settings/
-bin/
-
-# IntelliJ
-.idea
-*.ipr
-*.iml
-*.iws
-
-# NetBeans
-nb-configuration.xml
-
-# Visual Studio Code
-.vscode
-.factorypath
-
-# OSX
-.DS_Store
-
-# Vim
-*.swp
-*.swo
-
-# patch
-*.orig
-*.rej
-
-# Local environment
-.env
-
-# Plugin directory
-/.quarkus/cli/plugins/
-# TLS Certificates
-.certs/
@@ -5,14 +5,23 @@
 	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"
 >
    <modelVersion>4.0.0</modelVersion>
-    <groupId>com.drinkool</groupId>
+
+    <parent>
+        <groupId>com.drinkool</groupId>
+        <artifactId>drinkool</artifactId>
+        <version>1.5.4</version>
+        <relativePath>../pom.xml</relativePath>
+    </parent>
+
    <artifactId>account-service</artifactId>
-    <version>1.0.0-SNAPSHOT</version>
    <packaging>quarkus</packaging>

    <properties>
+                <quarkus.package.jar.enabled>false</quarkus.package.jar.enabled>
+                <skipITs>false</skipITs>
+                <quarkus.native.enabled>true</quarkus.native.enabled>
        <compiler-plugin.version>3.15.0</compiler-plugin.version>
-        <maven.compiler.release>21</maven.compiler.release>
+        <maven.compiler.release>25</maven.compiler.release>
        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
        <project.reporting.outputEncoding
 		>UTF-8</project.reporting.outputEncoding>
@@ -37,6 +46,16 @@
    </dependencyManagement>

    <dependencies>
+        <dependency>
+            <groupId>com.drinkool</groupId>
+            <artifactId>lib</artifactId>
+            <version>${project.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-jdbc-h2</artifactId>
+            <scope>test</scope>
+        </dependency>
        <dependency>
            <groupId>io.quarkus</groupId>
            <artifactId>quarkus-hibernate-orm-panache</artifactId>
@@ -65,6 +84,10 @@
            <groupId>io.quarkus</groupId>
            <artifactId>quarkus-container-image-docker</artifactId>
        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-redis-client</artifactId>
+        </dependency>
        <dependency>
            <groupId>io.quarkus</groupId>
            <artifactId>quarkus-junit</artifactId>
@@ -112,6 +135,9 @@
 						>org.jboss.logmanager.LogManager</java.util.logging.manager>
                        <maven.home>${maven.home}</maven.home>
                    </systemPropertyVariables>
+                    <forkCount>1</forkCount>
+                    <reuseForks>true</reuseForks>
+                    <redirectTestOutputToFile>true</redirectTestOutputToFile>
                </configuration>
            </plugin>
            <plugin>
@@ -128,8 +154,8 @@
                <configuration>
                    <argLine>@{argLine}</argLine>
                    <systemPropertyVariables>
-                        <native.image.path
-						>${project.build.directory}/${project.build.finalName}-runner</native.image.path>
+                        <native.image.path>
+                            ${project.build.directory}/${project.build.finalName}-runner</native.image.path>
                        <java.util.logging.manager
 						>org.jboss.logmanager.LogManager</java.util.logging.manager>
                        <maven.home>${maven.home}</maven.home>
@@ -138,20 +164,4 @@
            </plugin>
        </plugins>
    </build>
-
-    <profiles>
-        <profile>
-            <id>native</id>
-            <activation>
-                <property>
-                    <name>native</name>
-                </property>
-            </activation>
-            <properties>
-                <quarkus.package.jar.enabled>false</quarkus.package.jar.enabled>
-                <skipITs>false</skipITs>
-                <quarkus.native.enabled>true</quarkus.native.enabled>
-            </properties>
-        </profile>
-    </profiles>
 </project>
@@ -1,47 +0,0 @@
-package com.drinkool;
-
-import com.drinkool.dtos.*;
-import com.drinkool.models.Customer;
-import jakarta.transaction.Transactional;
-import jakarta.ws.rs.*;
-import jakarta.ws.rs.core.*;
-
-@Path("/api")
-public class RestAPI {
-
-	@POST
-	@Path("/signup")
-	@Transactional
-	public Response signup(Signup input) {
-		Customer newCustomer = new Customer();
-
-		newCustomer.signup(input.name, input.phone, input.password);
-
-		return Response.status(Response.Status.CREATED).build();
-	}
-
-	@POST
-	@Path("/quickSignup")
-	@Transactional
-	public Response quickSignup(QuickSignup input) {
-		Customer newCustomer = new Customer();
-
-		newCustomer.signup(input.phone);
-
-		return Response.status(Response.Status.CREATED).build();
-	}
-
-	@POST
-	@Path("/login")
-	public Response login(Login input) {
-		Customer customer = Customer.find("phone", input.phone).firstResult();
-
-		if (customer == null) throw new BadRequestException("InvalidPhoneNumber");
-
-		if (!customer.login(input.password)) throw new BadRequestException(
-			"InvalidPassword"
-		);
-
-		return Response.accepted().build();
-	}
-}
@@ -0,0 +1,17 @@
+package com.drinkool.entities;
+
+import com.drinkool.Role;
+import com.drinkool.models.UserModel;
+import jakarta.persistence.*;
+import jakarta.transaction.Transactional;
+import java.util.UUID;
+
+@Entity
+@Table(name = Role.Customer)
+public class CustomerEntity extends UserModel {
+
+	@Transactional
+	public void signup(String phone) {
+		this.signup(phone, phone, UUID.randomUUID().toString().substring(0, 32));
+	}
+}
@@ -0,0 +1,27 @@
+package com.drinkool.entities;
+
+import com.drinkool.Role;
+import com.drinkool.models.UserModel;
+import jakarta.persistence.*;
+
+@Entity
+@Table(name = Role.Manager)
+public class ManagerEntity extends UserModel {
+
+	public String eateryName;
+
+	public boolean isVerified;
+
+	public void signup(
+		String name,
+		String phone,
+		String rawPassword,
+		String eateryName
+	) {
+		this.eateryName = eateryName;
+
+		this.isVerified = false;
+
+		this.signup(name, phone, rawPassword);
+	}
+}
@@ -1,7 +0,0 @@
-package com.drinkool.models;
-
-import jakarta.persistence.*;
-
-@Entity
-@Table(name = "customer")
-public class Customer extends User {}
@@ -1,17 +1,17 @@
 package com.drinkool.models;

+import com.drinkool.entities.BaseEntity;
 import com.drinkool.utils.PhoneValidator;
+import com.fasterxml.jackson.annotation.JsonProperty;
 import com.password4j.Password;
-import io.quarkus.hibernate.orm.panache.PanacheEntity;
 import jakarta.persistence.*;
 import jakarta.transaction.*;
 import jakarta.ws.rs.BadRequestException;
-import java.util.UUID;

@Entity
@Inheritance(strategy = InheritanceType.JOINED)
@Table(name = "users")
-public abstract class User extends PanacheEntity {
+public abstract class UserModel extends BaseEntity {

 	@Column(nullable = false)
 	public String name;
@@ -20,19 +20,15 @@ public abstract class User extends PanacheEntity {
 	public String phone;

 	@Column(nullable = false, length = 1024)
+	@JsonProperty(access = JsonProperty.Access.WRITE_ONLY)
 	public String hashedPassword;

-	public User() {
-		super();
-	}
-
-	@Transactional
-	public void signup(String phone) {
-		this.signup(phone, phone, UUID.randomUUID().toString().substring(0, 32));
-	}
-
 	@Transactional
 	public void signup(String name, String phone, String rawPassword) {
+		UserModel existedUser = UserModel.find("phone", phone).firstResult();
+
+		if (existedUser != null) throw new BadRequestException("ExistedUser");
+
 		this.name = name;

 		if (!PhoneValidator.isValidInternationalPhone(phone)) {
@@ -0,0 +1,32 @@
+package com.drinkool.services;
+
+import com.drinkool.Url;
+import com.drinkool.dtos.SmsOtp;
+import com.drinkool.models.UserModel;
+import jakarta.inject.Inject;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.Response;
+
+@Path("")
+public class AccountService {
+
+	@Inject
+	OtpService otpService;
+
+	@POST
+	@Path(Url.SmsOtp)
+	public Response smsOtp(SmsOtp input) {
+		UserModel customer = UserModel.find("phone", input.phone).firstResult();
+
+		if (customer == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidPhoneNumber")
+			.build();
+
+		String otp = otpService.generateAndSaveOtp(input.phone);
+
+		// Ở đây bạn sẽ gọi Kafka để gửi SMS thực tế
+		System.out.println("OTP cho " + input.phone + " là: " + otp);
+
+		return Response.accepted().build();
+	}
+}
@@ -0,0 +1,30 @@
+package com.drinkool.services;
+
+import com.drinkool.InternalValue;
+import com.drinkool.Url;
+import com.drinkool.models.UserModel;
+import io.quarkus.hibernate.orm.panache.PanacheRepositoryBase;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.Response;
+import java.util.UUID;
+
+public abstract class BaseService<T extends UserModel> {
+
+	private final PanacheRepositoryBase<T, UUID> repository;
+
+	protected BaseService(Class<T> entityClass) {
+		this.repository = new PanacheRepositoryBase<T, UUID>() {};
+	}
+
+	@GET
+	@Path(Url.Me)
+	@Transactional
+	public Response me(@HeaderParam(InternalValue.userId) UUID id) {
+		if (id == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidUserId")
+			.build();
+
+		return Response.ok(repository.findById(id)).build();
+	}
+}
@@ -0,0 +1,96 @@
+package com.drinkool.services;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import com.drinkool.entities.CustomerEntity;
+import jakarta.inject.Inject;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.*;
+
+@Path(Role.Customer)
+public class CustomerService extends BaseService<CustomerEntity> {
+
+	@Inject
+	OtpService otpService;
+
+	public CustomerService() {
+		super(CustomerEntity.class);
+	}
+
+	@POST
+	@Path(Url.Signup)
+	@Transactional
+	public Response signup(Signup input) {
+		CustomerEntity newCustomer = new CustomerEntity();
+
+		newCustomer.signup(input.name, input.phone, input.password);
+
+		return Response.status(Response.Status.CREATED)
+			.header(InternalValue.userId, newCustomer.id.toString())
+			.header(InternalValue.role, Role.Customer)
+			.entity(newCustomer)
+			.build();
+	}
+
+	@POST
+	@Path(Url.QuickSignup)
+	@Transactional
+	public Response quickSignup(QuickSignup input) {
+		CustomerEntity newCustomer = new CustomerEntity();
+
+		newCustomer.signup(input.phone);
+
+		return Response.status(Response.Status.CREATED)
+			.header(InternalValue.userId, newCustomer.id.toString())
+			.header(InternalValue.role, Role.Customer)
+			.entity(newCustomer)
+			.build();
+	}
+
+	@POST
+	@Path(Url.Login)
+	public Response login(Login input) {
+		CustomerEntity customer = CustomerEntity.find(
+			"phone",
+			input.phone
+		).firstResult();
+
+		if (customer == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidPhoneNumber")
+			.build();
+
+		if (!customer.login(input.password)) return Response.status(
+			Response.Status.BAD_REQUEST
+		)
+			.entity("InvalidPassword")
+			.build();
+
+		return Response.accepted()
+			.header(InternalValue.userId, customer.id.toString())
+			.header(InternalValue.role, Role.Customer)
+			.entity(customer)
+			.build();
+	}
+
+	@POST
+	@Path(Url.QuickLogin)
+	public Response quickLogin(QuickLogin input) {
+		if (!otpService.verifyOtp(input.phone, input.otp)) {
+			return Response.status(Response.Status.UNAUTHORIZED)
+				.entity("InvalidOTP")
+				.build();
+		}
+
+		CustomerEntity customer = CustomerEntity.find(
+			"phone",
+			input.phone
+		).firstResult();
+
+		return Response.accepted()
+			.header(InternalValue.userId, customer.id.toString())
+			.header(InternalValue.role, Role.Customer)
+			.entity(customer)
+			.build();
+	}
+}
@@ -0,0 +1,55 @@
+package com.drinkool.services;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import com.drinkool.entities.ManagerEntity;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.*;
+
+@Path(Role.Manager)
+public class ManagerService {
+
+	@POST
+	@Path(Url.Signup)
+	@Transactional
+	public Response signup(ManagerSignup input) {
+		ManagerEntity newManager = new ManagerEntity();
+
+		newManager.signup(
+			input.name,
+			input.phone,
+			input.password,
+			input.eateryName
+		);
+
+		return Response.status(Response.Status.CREATED)
+			.header(InternalValue.userId, newManager.id.toString())
+			.header(InternalValue.role, Role.Manager)
+			.build();
+	}
+
+	@POST
+	@Path(Url.Login)
+	public Response login(Login input) {
+		ManagerEntity customer = ManagerEntity.find(
+			"phone",
+			input.phone
+		).firstResult();
+
+		if (customer == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidPhoneNumber")
+			.build();
+
+		if (!customer.login(input.password)) return Response.status(
+			Response.Status.BAD_REQUEST
+		)
+			.entity("InvalidPassword")
+			.build();
+
+		return Response.accepted()
+			.header(InternalValue.userId, customer.id.toString())
+			.header(InternalValue.role, Role.Manager)
+			.build();
+	}
+}
@@ -0,0 +1,39 @@
+package com.drinkool.services;
+
+import io.quarkus.redis.datasource.RedisDataSource;
+import io.quarkus.redis.datasource.value.ValueCommands;
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.inject.Inject;
+import java.util.Random;
+
+@ApplicationScoped
+public class OtpService {
+
+	private final ValueCommands<String, String> countCommands;
+
+	@Inject
+	public OtpService(RedisDataSource ds) {
+		this.countCommands = ds.value(String.class);
+	}
+
+	public String generateAndSaveOtp(String phone) {
+		String otp = String.format("%06d", new Random().nextInt(1000000));
+		String key = "otp:" + phone;
+
+		countCommands.setex(key, 300, otp);
+
+		return otp;
+	}
+
+	public boolean verifyOtp(String phone, String inputOtp) {
+		String key = "otp:" + phone;
+		String savedOtp = countCommands.get(key);
+
+		if (savedOtp != null && savedOtp.equals(inputOtp)) {
+			countCommands.getdel(key);
+			return true;
+		}
+
+		return false;
+	}
+}
@@ -1,16 +1,30 @@
-# Cấu hình Database
+# Database
 quarkus.datasource.db-kind=postgresql
 quarkus.datasource.username=postgres
 quarkus.datasource.password=password
 quarkus.datasource.jdbc.url=jdbc:postgresql://localhost:5432/postgres

-# Tự động tạo bảng từ Entity (chỉ dùng cho môi trường dev)
 quarkus.hibernate-orm.database.generation=update

-# URL của Gitea Registry (thường là gitea.yourdomain.com)
-quarkus.container-image.registry=git.demonkernel.io.vn
+# Docker
+quarkus.container-image.registry=vps.demonkernel.io.vn
 quarkus.container-image.group=foodsurf
 quarkus.container-image.name=account-service
 quarkus.container-image.push=true
 quarkus.container-image.build=true
-quarkus.container-image.builder=docker
+quarkus.container-image.builder=docker
+quarkus.container-image.additional-tags=latest
+
+# Redis
+quarkus.redis.hosts=redis://localhost:6379
+
+
+# Dependency
+quarkus.index-dependency.lib.group-id=com.drinkool
+quarkus.index-dependency.lib.artifact-id=lib
+
+# Build
+quarkus.native.container-build=true
+quarkus.native.remote-container-build=true
+quarkus.native.additional-build-args=--initialize-at-run-time=com.password4j.AlgorithmFinder,--future-defaults=all
+quarkus.native.resources.includes=com/google/i18n/phonenumbers/data/**/*
@@ -1,8 +0,0 @@
-package com.drinkool;
-
-import io.quarkus.test.junit.QuarkusIntegrationTest;
-
-@QuarkusIntegrationTest
-class GreetingResourceIT extends GreetingResourceTest {
-	// Execute the same tests but in packaged mode.
-}
@@ -1,21 +0,0 @@
-package com.drinkool;
-
-import static io.restassured.RestAssured.given;
-import static org.hamcrest.CoreMatchers.is;
-
-import io.quarkus.test.junit.QuarkusTest;
-import org.junit.jupiter.api.Test;
-
-@QuarkusTest
-class GreetingResourceTest {
-
-	@Test
-	void testHelloEndpoint() {
-		given()
-			.when()
-			.get("/hello")
-			.then()
-			.statusCode(200)
-			.body(is("Hello from Quarkus REST"));
-	}
-}
@@ -0,0 +1,12 @@
+package com.drinkool;
+
+import java.util.Random;
+
+public class Utils {
+
+	public static Random random = new Random();
+
+	public static String generateRandomPhone() {
+		return "+8477" + String.format("%07d", random.nextInt(10000000));
+	}
+}
@@ -0,0 +1,29 @@
+package com.drinkool.entities;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+import com.drinkool.*;
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.transaction.Transactional;
+import org.junit.jupiter.api.*;
+
+@QuarkusTest
+public class CustomerEntityTest {
+
+	@Test
+	@Transactional
+	public void testSignupOneParamSuccess() {
+		CustomerEntity user = new CustomerEntity();
+		String phone = Utils.generateRandomPhone();
+
+		user.signup(phone);
+
+		assertNotNull(user.id, "ID not null after persist");
+		assertEquals(phone, user.name, "Tên mặc định phải là số điện thoại");
+		assertEquals(phone, user.phone);
+		assertNotNull(
+			user.hashedPassword,
+			"Password tự động phải được tạo và hash"
+		);
+	}
+}
@@ -0,0 +1,132 @@
+package com.drinkool.models;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.persistence.Entity;
+import jakarta.persistence.Table;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.BadRequestException;
+import java.util.Random;
+import org.junit.jupiter.api.Test;
+
+@Entity
+@Table(name = "test_users")
+class TestUserEntity extends UserModel {}
+
+@QuarkusTest
+public class UserModelTest {
+
+	// Helper method để tạo số điện thoại ngẫu nhiên hợp lệ
+	private String generateValidPhone() {
+		return "+8477" + String.format("%07d", (new Random()).nextInt(10000000));
+	}
+
+	// 1. Test case: Đăng ký thành công (đầy đủ tham số)
+	@Test
+	@Transactional
+	public void testSignupSuccess() {
+		TestUserEntity user = new TestUserEntity();
+		String phone = generateValidPhone();
+		String password = "02092006Danh";
+
+		user.signup("Tran Huu Danh", phone, password);
+
+		assertNotNull(user.id, "ID not null after persist");
+		assertEquals("Tran Huu Danh", user.name);
+		assertEquals(phone, user.phone);
+		assertNotNull(user.hashedPassword, "Password phải được hash");
+
+		TestUserEntity savedUser = TestUserEntity.find(
+			"phone",
+			phone
+		).firstResult();
+		assertNotNull(savedUser, "Phải tìm thấy user trong database");
+	}
+
+	// 3. Test case: Đăng ký thất bại do số điện thoại đã tồn tại
+	@Test
+	@Transactional
+	public void testSignupFailExistedUser() {
+		String phone = generateValidPhone();
+		String password = "tungtungtungshahua";
+
+		// Tạo user đầu tiên
+		TestUserEntity existUser = new TestUserEntity();
+		existUser.signup("Nguyen Thanh Quy", phone, password);
+
+		// Tạo user thứ hai với cùng số điện thoại
+		TestUserEntity newUser = new TestUserEntity();
+		BadRequestException exception = assertThrows(
+			BadRequestException.class,
+			() -> {
+				newUser.signup("Nguyen Viet Anh", phone, "02092006Anh");
+			}
+		);
+
+		assertEquals("ExistedUser", exception.getMessage());
+	}
+
+	// 4. Test case: Đăng ký thất bại do số điện thoại sai định dạng
+	@Test
+	@Transactional
+	public void testSignupFailInvalidPhoneNumber() {
+		TestUserEntity user = new TestUserEntity();
+		String invalidPhone = "12345";
+
+		BadRequestException exception = assertThrows(
+			BadRequestException.class,
+			() -> {
+				user.signup("Lam Vi Hoang", invalidPhone, "Pass123");
+			}
+		);
+
+		assertEquals("InvalidPhoneNumber", exception.getMessage());
+	}
+
+	// 5. Test case: Đăng nhập thành công
+	@Test
+	@Transactional
+	public void testLoginSuccess() {
+		TestUserEntity user = new TestUserEntity();
+		String phone = generateValidPhone();
+		String password = "02092006Danh";
+
+		user.signup("Tran Huu Danh", phone, password);
+
+		boolean loginResult = user.login(password);
+
+		assertTrue(loginResult, "Đăng nhập phải thành công với mật khẩu đúng");
+	}
+
+	// 6. Test case: Đăng nhập thất bại do sai mật khẩu
+	@Test
+	@Transactional
+	public void testLoginFailWrongPassword() {
+		TestUserEntity user = new TestUserEntity();
+		String phone = generateValidPhone();
+		String truePassword = "02092006Danh";
+		String wrongPassword = "02092006danhh";
+
+		user.signup("Tran Huu Danh", phone, truePassword);
+
+		boolean loginResult = user.login(wrongPassword);
+
+		assertFalse(loginResult, "Đăng nhập phải thất bại với mật khẩu sai");
+	}
+
+	// 7. Test case: Đăng nhập thất bại do hashedPassword bị null
+	@Test
+	@Transactional
+	public void testLoginFailNullHashedPassword() {
+		TestUserEntity user = new TestUserEntity();
+		user.hashedPassword = null; // Cố tình set null để test lỗi
+
+		boolean loginResult = user.login("anhdomixi");
+
+		assertFalse(
+			loginResult,
+			"Đăng nhập phải thất bại nếu hashedPassword là null"
+		);
+	}
+}
@@ -0,0 +1,40 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.*;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class AccountServiceTest {
+
+	@Test
+	void testSmsOtp() {
+		String phone = Utils.generateRandomPhone();
+		SmsOtp input = new SmsOtp();
+		input.phone = phone;
+
+		Signup signup = new Signup();
+		signup.phone = phone;
+		signup.name = "sms user";
+		signup.password = "password123";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(signup)
+			.when()
+			.post(Role.Customer + Url.Signup)
+			.then();
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Url.SmsOtp)
+			.then()
+			.statusCode(202);
+	}
+}
@@ -0,0 +1,44 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.*;
+import static org.hamcrest.CoreMatchers.*;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class BaseServiceTest {
+
+	@Test
+	public void testMeEndpointWithHeader() {
+		String phone = Utils.generateRandomPhone();
+		QuickSignup input = new QuickSignup();
+		input.phone = phone;
+
+		String testUserId = given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.QuickSignup)
+			.then()
+			.extract()
+			.header(InternalValue.userId);
+
+		given()
+			.header(InternalValue.userId, testUserId)
+			.contentType(ContentType.JSON)
+			.when()
+			.get(Role.Customer + Url.Me)
+			.then()
+			.statusCode(200)
+			.body("id", is(testUserId));
+	}
+
+	@Test
+	public void testMeEndpointWithoutHeader() {
+		given().when().get(Role.Customer + Url.Me).then().statusCode(400);
+	}
+}
@@ -0,0 +1,160 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.*;
+import static org.hamcrest.CoreMatchers.*;
+import static org.junit.jupiter.api.Assertions.*;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import com.drinkool.entities.CustomerEntity;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import jakarta.inject.Inject;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class CustomerServiceTest {
+
+	@Inject
+	OtpService otpService;
+
+	@Test
+	void testSignup() {
+		String phone = Utils.generateRandomPhone();
+		Signup input = new Signup();
+		input.name = "Test User";
+		input.phone = phone;
+		input.password = "password123";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.Signup)
+			.then()
+			.statusCode(201);
+
+		// Kiểm tra database: Phải tìm thấy 1 user với số điện thoại này
+		assertEquals(1, CustomerEntity.find("phone", phone).count());
+	}
+
+	@Test
+	void testQuickSignup() {
+		String phone = Utils.generateRandomPhone();
+		QuickSignup input = new QuickSignup();
+		input.phone = phone;
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.QuickSignup)
+			.then()
+			.header(InternalValue.userId, notNullValue())
+			.header(InternalValue.role, is(Role.Customer))
+			.statusCode(201);
+
+		assertEquals(1, CustomerEntity.find("phone", phone).count());
+	}
+
+	@Test
+	void testLoginSuccess() {
+		// BƯỚC 1: Tạo user trước bằng signup
+		String phone = Utils.generateRandomPhone();
+		Signup signupData = new Signup();
+		signupData.name = "Login User";
+		signupData.phone = phone;
+		signupData.password = "secure_pass";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(signupData)
+			.post(Role.Customer + Url.Signup)
+			.then()
+			.statusCode(201);
+
+		// BƯỚC 2: Thử đăng nhập
+		Login loginInput = new Login();
+		loginInput.phone = phone;
+		loginInput.password = "secure_pass";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(loginInput)
+			.when()
+			.post(Role.Customer + Url.Login)
+			.then()
+			.statusCode(202);
+	}
+
+	@Test
+	void testLoginFailWrongPassword() {
+		String phone = Utils.generateRandomPhone();
+		Signup signupData = new Signup();
+		signupData.name = "Wrong Pass User";
+		signupData.phone = phone;
+		signupData.password = "correct_password";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(signupData)
+			.post(Role.Customer + Url.Signup)
+			.then()
+			.statusCode(201);
+
+		Login loginInput = new Login();
+		loginInput.phone = phone;
+		loginInput.password = "wrong_password";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(loginInput)
+			.when()
+			.post(Role.Customer + Url.Login)
+			.then()
+			.statusCode(400); // BadRequestException
+	}
+
+	@Test
+	public void testQuickLogin_Success() {
+		String phone = Utils.generateRandomPhone();
+
+		QuickSignup input = new QuickSignup();
+		input.phone = phone;
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.QuickSignup)
+			.then();
+
+		QuickLogin payload = new QuickLogin();
+		payload.phone = phone;
+		payload.otp = otpService.generateAndSaveOtp(phone);
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(payload)
+			.when()
+			.post(Role.Customer + Url.QuickLogin)
+			.then()
+			.statusCode(202);
+	}
+
+	@Test
+	void testQuickLoginFailInvalidOtp() {
+		String phone = Utils.generateRandomPhone();
+		QuickLogin input = new QuickLogin();
+		input.phone = phone;
+		input.otp = "000000"; // Giả sử mã này luôn sai vì chưa được tạo
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.QuickLogin)
+			.then()
+			.statusCode(401);
+	}
+}
@@ -0,0 +1,86 @@
+package com.drinkool.services;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.inject.Inject;
+import java.util.Random;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class OtpServiceTest {
+
+	@Inject
+	OtpService otpService;
+
+	// 1. Test case: Tạo và lưu OTP thành công
+	@Test
+	public void testGenerateAndSaveOtp() {
+		String phone =
+			"+8477" + String.format("%07d", new Random().nextInt(10000000));
+		String otp = otpService.generateAndSaveOtp(phone);
+
+		assertNotNull(otp, "OTP sinh ra không được null");
+		assertEquals(6, otp.length(), "OTP phải có độ dài đúng 6 ký tự");
+		assertTrue(otp.matches("\\d{6}"), "OTP chỉ được chứa các chữ số");
+	}
+
+	// 2. Test case: Xác thực OTP thành công
+	@Test
+	public void testVerifyOtpSuccess() {
+		String phone =
+			"+8477" + String.format("%07d", new Random().nextInt(10000000));
+		String generatedOtp = otpService.generateAndSaveOtp(phone);
+
+		// Xác thực với OTP vừa tạo ra
+		boolean verifyResult = otpService.verifyOtp(phone, generatedOtp);
+
+		assertTrue(verifyResult, "Xác thực phải thành công với OTP đúng");
+	}
+
+	// 3. Test case: Xác thực thất bại do sai mã OTP
+	@Test
+	public void testVerifyOtpFailWrongOtp() {
+		String phone =
+			"+8477" + String.format("%07d", new Random().nextInt(10000000));
+		otpService.generateAndSaveOtp(phone); // Tạo OTP nhưng không dùng
+
+		String wrongOtp = "999999"; // Giả sử mã sai
+		boolean verifyResult = otpService.verifyOtp(phone, wrongOtp);
+
+		assertFalse(verifyResult, "Xác thực phải thất bại khi truyền sai mã OTP");
+	}
+
+	// 4. Test case: Xác thực thất bại do OTP không tồn tại (chưa tạo hoặc đã hết hạn)
+	@Test
+	public void testVerifyOtpFailNotExists() {
+		String unverifiedPhone =
+			"+8499" + String.format("%07d", new Random().nextInt(10000000));
+
+		// Cố tình xác thực cho một số điện thoại chưa từng gọi generateAndSaveOtp
+		boolean verifyResult = otpService.verifyOtp(unverifiedPhone, "123456");
+
+		assertFalse(
+			verifyResult,
+			"Xác thực phải thất bại với SĐT không có OTP trong Redis"
+		);
+	}
+
+	// 5. Test case: Đảm bảo OTP chỉ được sử dụng 1 lần (đã bị xóa sau khi verify thành công bằng lệnh getdel)
+	@Test
+	public void testVerifyOtpConsumedAfterSuccess() {
+		String phone =
+			"+8477" + String.format("%07d", new Random().nextInt(10000000));
+		String generatedOtp = otpService.generateAndSaveOtp(phone);
+
+		// Lần 1: Xác thực thành công
+		assertTrue(otpService.verifyOtp(phone, generatedOtp));
+
+		// Lần 2: Xác thực lại cùng mã đó sẽ thất bại vì key đã bị getdel xóa khỏi Redis
+		boolean secondVerifyResult = otpService.verifyOtp(phone, generatedOtp);
+		assertFalse(
+			secondVerifyResult,
+			"OTP không được phép tái sử dụng sau khi đã verify thành công"
+		);
+	}
+}
@@ -0,0 +1,53 @@
+package com.drinkool.utils;
+
+import org.junit.jupiter.api.Assertions;
+import org.junit.jupiter.api.Test;
+
+public class PhoneValidatorTest {
+
+	@Test
+	public void testValidVietnamesePhoneNumbers() {
+		// Số điện thoại VN hợp lệ (có mã vùng hoặc số 0 ở đầu đều được)
+		Assertions.assertTrue(
+			PhoneValidator.isValidInternationalPhone("0987654321")
+		);
+		Assertions.assertTrue(
+			PhoneValidator.isValidInternationalPhone("+84987654321")
+		);
+		Assertions.assertTrue(
+			PhoneValidator.isValidInternationalPhone("84987654321")
+		);
+	}
+
+	@Test
+	public void testValidInternationalPhoneNumbers() {
+		// Số điện thoại quốc tế hợp lệ (Ví dụ: Mỹ +1)
+		Assertions.assertTrue(
+			PhoneValidator.isValidInternationalPhone("+14155552671")
+		);
+	}
+
+	@Test
+	public void testInvalidPhoneNumbers() {
+		// Chuỗi không phải số điện thoại
+		Assertions.assertFalse(
+			PhoneValidator.isValidInternationalPhone("not-a-phone-number")
+		);
+
+		// Số điện thoại quá ngắn hoặc sai định dạng
+		Assertions.assertFalse(PhoneValidator.isValidInternationalPhone("123"));
+		Assertions.assertFalse(
+			PhoneValidator.isValidInternationalPhone("099999999999999")
+		);
+
+		// Chuỗi rỗng
+		Assertions.assertFalse(PhoneValidator.isValidInternationalPhone(""));
+	}
+
+	@Test
+	public void testNullPhoneNumber() {
+		// Cố tình truyền null để xem hàm xử lý thế nào
+		// Lưu ý: Đọc thêm phần "Mẹo nhỏ" bên dưới để pass được test này
+		Assertions.assertFalse(PhoneValidator.isValidInternationalPhone(null));
+	}
+}
@@ -0,0 +1,10 @@
+# Quarkus
+quarkus.http.host=0.0.0.0
+
+# Database
+## Datasource
+%test.quarkus.datasource.db-kind=h2
+%test.quarkus.datasource.jdbc.url=jdbc:h2:mem:test_db;DB_CLOSE_DELAY=-1
+
+## Orm
+%test.quarkus.hibernate-orm.database.generation=drop-and-create
@@ -0,0 +1,5 @@
+mvn package -DskipTests -Dquarkus.container-image.push=false \
+    -Dquarkus.container-image.registry=git.demonkernel.io.vn \
+    -Dquarkus.log.category."org.jboss.resteasy.reactive.client.logging".level=DEBUG \
+    -Dquarkus.rest-client.logging.scope=full \
+    -Dquarkus.rest-client.logging.body-limit=1024
@@ -0,0 +1,5 @@
+*
+!target/*-runner
+!target/*-runner.jar
+!target/lib/*
+!target/quarkus-app/*
@@ -0,0 +1,4 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
+distributionSha256Sum=305773a68d6ddfd413df58c82b3f8050e89778e777f3a745c8e5b8cbea4018ef
@@ -0,0 +1,79 @@
+# eatery-service
+
+This project uses Quarkus, the Supersonic Subatomic Java Framework.
+
+If you want to learn more about Quarkus, please visit its website: <https://quarkus.io/>.
+
+## Running the application in dev mode
+
+You can run your application in dev mode that enables live coding using:
+
+```shell script
+./mvnw quarkus:dev
+```
+
+> **_NOTE:_**  Quarkus now ships with a Dev UI, which is available in dev mode only at <http://localhost:8080/q/dev/>.
+
+## Packaging and running the application
+
+The application can be packaged using:
+
+```shell script
+./mvnw package
+```
+
+It produces the `quarkus-run.jar` file in the `target/quarkus-app/` directory.
+Be aware that it’s not an _über-jar_ as the dependencies are copied into the `target/quarkus-app/lib/` directory.
+
+The application is now runnable using `java -jar target/quarkus-app/quarkus-run.jar`.
+
+If you want to build an _über-jar_, execute the following command:
+
+```shell script
+./mvnw package -Dquarkus.package.jar.type=uber-jar
+```
+
+The application, packaged as an _über-jar_, is now runnable using `java -jar target/*-runner.jar`.
+
+## Creating a native executable
+
+You can create a native executable using:
+
+```shell script
+./mvnw package -Dnative
+```
+
+Or, if you don't have GraalVM installed, you can run the native executable build in a container using:
+
+```shell script
+./mvnw package -Dnative -Dquarkus.native.container-build=true
+```
+
+You can then execute your native executable with: `./target/eatery-service-1.0.0-SNAPSHOT-runner`
+
+If you want to learn more about building native executables, please consult <https://quarkus.io/guides/maven-tooling>.
+
+## Related Guides
+
+- Hibernate ORM with Panache ([guide](https://quarkus.io/guides/hibernate-orm-panache)): Simplify your persistence code for Hibernate ORM via the active record or the repository pattern
+- Messaging - Kafka Connector ([guide](https://quarkus.io/guides/kafka-getting-started)): Connect to Kafka with Reactive Messaging
+- JDBC Driver - PostgreSQL ([guide](https://quarkus.io/guides/datasource)): Connect to the PostgreSQL database via JDBC
+
+## Provided Code
+
+### Hibernate ORM
+
+Create your first JPA entity
+
+[Related guide section...](https://quarkus.io/guides/hibernate-orm)
+
+
+[Related Hibernate with Panache section...](https://quarkus.io/guides/hibernate-orm-panache)
+
+
+### Messaging codestart
+
+Use Quarkus Messaging
+
+[Related Apache Kafka guide section...](https://quarkus.io/guides/kafka-reactive-getting-started)
+
@@ -0,0 +1,295 @@
+#!/bin/sh
+# ----------------------------------------------------------------------------
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+# ----------------------------------------------------------------------------
+
+# ----------------------------------------------------------------------------
+# Apache Maven Wrapper startup batch script, version 3.3.4
+#
+# Optional ENV vars
+# -----------------
+#   JAVA_HOME - location of a JDK home dir, required when download maven via java source
+#   MVNW_REPOURL - repo url base for downloading maven distribution
+#   MVNW_USERNAME/MVNW_PASSWORD - user and password for downloading maven
+#   MVNW_VERBOSE - true: enable verbose log; debug: trace the mvnw script; others: silence the output
+# ----------------------------------------------------------------------------
+
+set -euf
+[ "${MVNW_VERBOSE-}" != debug ] || set -x
+
+# OS specific support.
+native_path() { printf %s\\n "$1"; }
+case "$(uname)" in
+CYGWIN* | MINGW*)
+  [ -z "${JAVA_HOME-}" ] || JAVA_HOME="$(cygpath --unix "$JAVA_HOME")"
+  native_path() { cygpath --path --windows "$1"; }
+  ;;
+esac
+
+# set JAVACMD and JAVACCMD
+set_java_home() {
+  # For Cygwin and MinGW, ensure paths are in Unix format before anything is touched
+  if [ -n "${JAVA_HOME-}" ]; then
+    if [ -x "$JAVA_HOME/jre/sh/java" ]; then
+      # IBM's JDK on AIX uses strange locations for the executables
+      JAVACMD="$JAVA_HOME/jre/sh/java"
+      JAVACCMD="$JAVA_HOME/jre/sh/javac"
+    else
+      JAVACMD="$JAVA_HOME/bin/java"
+      JAVACCMD="$JAVA_HOME/bin/javac"
+
+      if [ ! -x "$JAVACMD" ] || [ ! -x "$JAVACCMD" ]; then
+        echo "The JAVA_HOME environment variable is not defined correctly, so mvnw cannot run." >&2
+        echo "JAVA_HOME is set to \"$JAVA_HOME\", but \"\$JAVA_HOME/bin/java\" or \"\$JAVA_HOME/bin/javac\" does not exist." >&2
+        return 1
+      fi
+    fi
+  else
+    JAVACMD="$(
+      'set' +e
+      'unset' -f command 2>/dev/null
+      'command' -v java
+    )" || :
+    JAVACCMD="$(
+      'set' +e
+      'unset' -f command 2>/dev/null
+      'command' -v javac
+    )" || :
+
+    if [ ! -x "${JAVACMD-}" ] || [ ! -x "${JAVACCMD-}" ]; then
+      echo "The java/javac command does not exist in PATH nor is JAVA_HOME set, so mvnw cannot run." >&2
+      return 1
+    fi
+  fi
+}
+
+# hash string like Java String::hashCode
+hash_string() {
+  str="${1:-}" h=0
+  while [ -n "$str" ]; do
+    char="${str%"${str#?}"}"
+    h=$(((h * 31 + $(LC_CTYPE=C printf %d "'$char")) % 4294967296))
+    str="${str#?}"
+  done
+  printf %x\\n $h
+}
+
+verbose() { :; }
+[ "${MVNW_VERBOSE-}" != true ] || verbose() { printf %s\\n "${1-}"; }
+
+die() {
+  printf %s\\n "$1" >&2
+  exit 1
+}
+
+trim() {
+  # MWRAPPER-139:
+  #   Trims trailing and leading whitespace, carriage returns, tabs, and linefeeds.
+  #   Needed for removing poorly interpreted newline sequences when running in more
+  #   exotic environments such as mingw bash on Windows.
+  printf "%s" "${1}" | tr -d '[:space:]'
+}
+
+scriptDir="$(dirname "$0")"
+scriptName="$(basename "$0")"
+
+# parse distributionUrl and optional distributionSha256Sum, requires .mvn/wrapper/maven-wrapper.properties
+while IFS="=" read -r key value; do
+  case "${key-}" in
+  distributionUrl) distributionUrl=$(trim "${value-}") ;;
+  distributionSha256Sum) distributionSha256Sum=$(trim "${value-}") ;;
+  esac
+done <"$scriptDir/.mvn/wrapper/maven-wrapper.properties"
+[ -n "${distributionUrl-}" ] || die "cannot read distributionUrl property in $scriptDir/.mvn/wrapper/maven-wrapper.properties"
+
+case "${distributionUrl##*/}" in
+maven-mvnd-*bin.*)
+  MVN_CMD=mvnd.sh _MVNW_REPO_PATTERN=/maven/mvnd/
+  case "${PROCESSOR_ARCHITECTURE-}${PROCESSOR_ARCHITEW6432-}:$(uname -a)" in
+  *AMD64:CYGWIN* | *AMD64:MINGW*) distributionPlatform=windows-amd64 ;;
+  :Darwin*x86_64) distributionPlatform=darwin-amd64 ;;
+  :Darwin*arm64) distributionPlatform=darwin-aarch64 ;;
+  :Linux*x86_64*) distributionPlatform=linux-amd64 ;;
+  *)
+    echo "Cannot detect native platform for mvnd on $(uname)-$(uname -m), use pure java version" >&2
+    distributionPlatform=linux-amd64
+    ;;
+  esac
+  distributionUrl="${distributionUrl%-bin.*}-$distributionPlatform.zip"
+  ;;
+maven-mvnd-*) MVN_CMD=mvnd.sh _MVNW_REPO_PATTERN=/maven/mvnd/ ;;
+*) MVN_CMD="mvn${scriptName#mvnw}" _MVNW_REPO_PATTERN=/org/apache/maven/ ;;
+esac
+
+# apply MVNW_REPOURL and calculate MAVEN_HOME
+# maven home pattern: ~/.m2/wrapper/dists/{apache-maven-<version>,maven-mvnd-<version>-<platform>}/<hash>
+[ -z "${MVNW_REPOURL-}" ] || distributionUrl="$MVNW_REPOURL$_MVNW_REPO_PATTERN${distributionUrl#*"$_MVNW_REPO_PATTERN"}"
+distributionUrlName="${distributionUrl##*/}"
+distributionUrlNameMain="${distributionUrlName%.*}"
+distributionUrlNameMain="${distributionUrlNameMain%-bin}"
+MAVEN_USER_HOME="${MAVEN_USER_HOME:-${HOME}/.m2}"
+MAVEN_HOME="${MAVEN_USER_HOME}/wrapper/dists/${distributionUrlNameMain-}/$(hash_string "$distributionUrl")"
+
+exec_maven() {
+  unset MVNW_VERBOSE MVNW_USERNAME MVNW_PASSWORD MVNW_REPOURL || :
+  exec "$MAVEN_HOME/bin/$MVN_CMD" "$@" || die "cannot exec $MAVEN_HOME/bin/$MVN_CMD"
+}
+
+if [ -d "$MAVEN_HOME" ]; then
+  verbose "found existing MAVEN_HOME at $MAVEN_HOME"
+  exec_maven "$@"
+fi
+
+case "${distributionUrl-}" in
+*?-bin.zip | *?maven-mvnd-?*-?*.zip) ;;
+*) die "distributionUrl is not valid, must match *-bin.zip or maven-mvnd-*.zip, but found '${distributionUrl-}'" ;;
+esac
+
+# prepare tmp dir
+if TMP_DOWNLOAD_DIR="$(mktemp -d)" && [ -d "$TMP_DOWNLOAD_DIR" ]; then
+  clean() { rm -rf -- "$TMP_DOWNLOAD_DIR"; }
+  trap clean HUP INT TERM EXIT
+else
+  die "cannot create temp dir"
+fi
+
+mkdir -p -- "${MAVEN_HOME%/*}"
+
+# Download and Install Apache Maven
+verbose "Couldn't find MAVEN_HOME, downloading and installing it ..."
+verbose "Downloading from: $distributionUrl"
+verbose "Downloading to: $TMP_DOWNLOAD_DIR/$distributionUrlName"
+
+# select .zip or .tar.gz
+if ! command -v unzip >/dev/null; then
+  distributionUrl="${distributionUrl%.zip}.tar.gz"
+  distributionUrlName="${distributionUrl##*/}"
+fi
+
+# verbose opt
+__MVNW_QUIET_WGET=--quiet __MVNW_QUIET_CURL=--silent __MVNW_QUIET_UNZIP=-q __MVNW_QUIET_TAR=''
+[ "${MVNW_VERBOSE-}" != true ] || __MVNW_QUIET_WGET='' __MVNW_QUIET_CURL='' __MVNW_QUIET_UNZIP='' __MVNW_QUIET_TAR=v
+
+# normalize http auth
+case "${MVNW_PASSWORD:+has-password}" in
+'') MVNW_USERNAME='' MVNW_PASSWORD='' ;;
+has-password) [ -n "${MVNW_USERNAME-}" ] || MVNW_USERNAME='' MVNW_PASSWORD='' ;;
+esac
+
+if [ -z "${MVNW_USERNAME-}" ] && command -v wget >/dev/null; then
+  verbose "Found wget ... using wget"
+  wget ${__MVNW_QUIET_WGET:+"$__MVNW_QUIET_WGET"} "$distributionUrl" -O "$TMP_DOWNLOAD_DIR/$distributionUrlName" || die "wget: Failed to fetch $distributionUrl"
+elif [ -z "${MVNW_USERNAME-}" ] && command -v curl >/dev/null; then
+  verbose "Found curl ... using curl"
+  curl ${__MVNW_QUIET_CURL:+"$__MVNW_QUIET_CURL"} -f -L -o "$TMP_DOWNLOAD_DIR/$distributionUrlName" "$distributionUrl" || die "curl: Failed to fetch $distributionUrl"
+elif set_java_home; then
+  verbose "Falling back to use Java to download"
+  javaSource="$TMP_DOWNLOAD_DIR/Downloader.java"
+  targetZip="$TMP_DOWNLOAD_DIR/$distributionUrlName"
+  cat >"$javaSource" <<-END
+	public class Downloader extends java.net.Authenticator
+	{
+	  protected java.net.PasswordAuthentication getPasswordAuthentication()
+	  {
+	    return new java.net.PasswordAuthentication( System.getenv( "MVNW_USERNAME" ), System.getenv( "MVNW_PASSWORD" ).toCharArray() );
+	  }
+	  public static void main( String[] args ) throws Exception
+	  {
+	    setDefault( new Downloader() );
+	    java.nio.file.Files.copy( java.net.URI.create( args[0] ).toURL().openStream(), java.nio.file.Paths.get( args[1] ).toAbsolutePath().normalize() );
+	  }
+	}
+	END
+  # For Cygwin/MinGW, switch paths to Windows format before running javac and java
+  verbose " - Compiling Downloader.java ..."
+  "$(native_path "$JAVACCMD")" "$(native_path "$javaSource")" || die "Failed to compile Downloader.java"
+  verbose " - Running Downloader.java ..."
+  "$(native_path "$JAVACMD")" -cp "$(native_path "$TMP_DOWNLOAD_DIR")" Downloader "$distributionUrl" "$(native_path "$targetZip")"
+fi
+
+# If specified, validate the SHA-256 sum of the Maven distribution zip file
+if [ -n "${distributionSha256Sum-}" ]; then
+  distributionSha256Result=false
+  if [ "$MVN_CMD" = mvnd.sh ]; then
+    echo "Checksum validation is not supported for maven-mvnd." >&2
+    echo "Please disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties." >&2
+    exit 1
+  elif command -v sha256sum >/dev/null; then
+    if echo "$distributionSha256Sum  $TMP_DOWNLOAD_DIR/$distributionUrlName" | sha256sum -c - >/dev/null 2>&1; then
+      distributionSha256Result=true
+    fi
+  elif command -v shasum >/dev/null; then
+    if echo "$distributionSha256Sum  $TMP_DOWNLOAD_DIR/$distributionUrlName" | shasum -a 256 -c >/dev/null 2>&1; then
+      distributionSha256Result=true
+    fi
+  else
+    echo "Checksum validation was requested but neither 'sha256sum' or 'shasum' are available." >&2
+    echo "Please install either command, or disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties." >&2
+    exit 1
+  fi
+  if [ $distributionSha256Result = false ]; then
+    echo "Error: Failed to validate Maven distribution SHA-256, your Maven distribution might be compromised." >&2
+    echo "If you updated your Maven version, you need to update the specified distributionSha256Sum property." >&2
+    exit 1
+  fi
+fi
+
+# unzip and move
+if command -v unzip >/dev/null; then
+  unzip ${__MVNW_QUIET_UNZIP:+"$__MVNW_QUIET_UNZIP"} "$TMP_DOWNLOAD_DIR/$distributionUrlName" -d "$TMP_DOWNLOAD_DIR" || die "failed to unzip"
+else
+  tar xzf${__MVNW_QUIET_TAR:+"$__MVNW_QUIET_TAR"} "$TMP_DOWNLOAD_DIR/$distributionUrlName" -C "$TMP_DOWNLOAD_DIR" || die "failed to untar"
+fi
+
+# Find the actual extracted directory name (handles snapshots where filename != directory name)
+actualDistributionDir=""
+
+# First try the expected directory name (for regular distributions)
+if [ -d "$TMP_DOWNLOAD_DIR/$distributionUrlNameMain" ]; then
+  if [ -f "$TMP_DOWNLOAD_DIR/$distributionUrlNameMain/bin/$MVN_CMD" ]; then
+    actualDistributionDir="$distributionUrlNameMain"
+  fi
+fi
+
+# If not found, search for any directory with the Maven executable (for snapshots)
+if [ -z "$actualDistributionDir" ]; then
+  # enable globbing to iterate over items
+  set +f
+  for dir in "$TMP_DOWNLOAD_DIR"/*; do
+    if [ -d "$dir" ]; then
+      if [ -f "$dir/bin/$MVN_CMD" ]; then
+        actualDistributionDir="$(basename "$dir")"
+        break
+      fi
+    fi
+  done
+  set -f
+fi
+
+if [ -z "$actualDistributionDir" ]; then
+  verbose "Contents of $TMP_DOWNLOAD_DIR:"
+  verbose "$(ls -la "$TMP_DOWNLOAD_DIR")"
+  die "Could not find Maven distribution directory in extracted archive"
+fi
+
+verbose "Found extracted Maven distribution directory: $actualDistributionDir"
+printf %s\\n "$distributionUrl" >"$TMP_DOWNLOAD_DIR/$actualDistributionDir/mvnw.url"
+mv -- "$TMP_DOWNLOAD_DIR/$actualDistributionDir" "$MAVEN_HOME" || [ -d "$MAVEN_HOME" ] || die "fail to move MAVEN_HOME"
+
+clean || :
+exec_maven "$@"
@@ -0,0 +1,189 @@
+<# : batch portion
+@REM ----------------------------------------------------------------------------
+@REM Licensed to the Apache Software Foundation (ASF) under one
+@REM or more contributor license agreements.  See the NOTICE file
+@REM distributed with this work for additional information
+@REM regarding copyright ownership.  The ASF licenses this file
+@REM to you under the Apache License, Version 2.0 (the
+@REM "License"); you may not use this file except in compliance
+@REM with the License.  You may obtain a copy of the License at
+@REM
+@REM    http://www.apache.org/licenses/LICENSE-2.0
+@REM
+@REM Unless required by applicable law or agreed to in writing,
+@REM software distributed under the License is distributed on an
+@REM "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+@REM KIND, either express or implied.  See the License for the
+@REM specific language governing permissions and limitations
+@REM under the License.
+@REM ----------------------------------------------------------------------------
+
+@REM ----------------------------------------------------------------------------
+@REM Apache Maven Wrapper startup batch script, version 3.3.4
+@REM
+@REM Optional ENV vars
+@REM   MVNW_REPOURL - repo url base for downloading maven distribution
+@REM   MVNW_USERNAME/MVNW_PASSWORD - user and password for downloading maven
+@REM   MVNW_VERBOSE - true: enable verbose log; others: silence the output
+@REM ----------------------------------------------------------------------------
+
+@IF "%__MVNW_ARG0_NAME__%"=="" (SET __MVNW_ARG0_NAME__=%~nx0)
+@SET __MVNW_CMD__=
+@SET __MVNW_ERROR__=
+@SET __MVNW_PSMODULEP_SAVE=%PSModulePath%
+@SET PSModulePath=
+@FOR /F "usebackq tokens=1* delims==" %%A IN (`powershell -noprofile "& {$scriptDir='%~dp0'; $script='%__MVNW_ARG0_NAME__%'; icm -ScriptBlock ([Scriptblock]::Create((Get-Content -Raw '%~f0'))) -NoNewScope}"`) DO @(
+  IF "%%A"=="MVN_CMD" (set __MVNW_CMD__=%%B) ELSE IF "%%B"=="" (echo %%A) ELSE (echo %%A=%%B)
+)
+@SET PSModulePath=%__MVNW_PSMODULEP_SAVE%
+@SET __MVNW_PSMODULEP_SAVE=
+@SET __MVNW_ARG0_NAME__=
+@SET MVNW_USERNAME=
+@SET MVNW_PASSWORD=
+@IF NOT "%__MVNW_CMD__%"=="" ("%__MVNW_CMD__%" %*)
+@echo Cannot start maven from wrapper >&2 && exit /b 1
+@GOTO :EOF
+: end batch / begin powershell #>
+
+$ErrorActionPreference = "Stop"
+if ($env:MVNW_VERBOSE -eq "true") {
+  $VerbosePreference = "Continue"
+}
+
+# calculate distributionUrl, requires .mvn/wrapper/maven-wrapper.properties
+$distributionUrl = (Get-Content -Raw "$scriptDir/.mvn/wrapper/maven-wrapper.properties" | ConvertFrom-StringData).distributionUrl
+if (!$distributionUrl) {
+  Write-Error "cannot read distributionUrl property in $scriptDir/.mvn/wrapper/maven-wrapper.properties"
+}
+
+switch -wildcard -casesensitive ( $($distributionUrl -replace '^.*/','') ) {
+  "maven-mvnd-*" {
+    $USE_MVND = $true
+    $distributionUrl = $distributionUrl -replace '-bin\.[^.]*$',"-windows-amd64.zip"
+    $MVN_CMD = "mvnd.cmd"
+    break
+  }
+  default {
+    $USE_MVND = $false
+    $MVN_CMD = $script -replace '^mvnw','mvn'
+    break
+  }
+}
+
+# apply MVNW_REPOURL and calculate MAVEN_HOME
+# maven home pattern: ~/.m2/wrapper/dists/{apache-maven-<version>,maven-mvnd-<version>-<platform>}/<hash>
+if ($env:MVNW_REPOURL) {
+  $MVNW_REPO_PATTERN = if ($USE_MVND -eq $False) { "/org/apache/maven/" } else { "/maven/mvnd/" }
+  $distributionUrl = "$env:MVNW_REPOURL$MVNW_REPO_PATTERN$($distributionUrl -replace "^.*$MVNW_REPO_PATTERN",'')"
+}
+$distributionUrlName = $distributionUrl -replace '^.*/',''
+$distributionUrlNameMain = $distributionUrlName -replace '\.[^.]*$','' -replace '-bin$',''
+
+$MAVEN_M2_PATH = "$HOME/.m2"
+if ($env:MAVEN_USER_HOME) {
+  $MAVEN_M2_PATH = "$env:MAVEN_USER_HOME"
+}
+
+if (-not (Test-Path -Path $MAVEN_M2_PATH)) {
+    New-Item -Path $MAVEN_M2_PATH -ItemType Directory | Out-Null
+}
+
+$MAVEN_WRAPPER_DISTS = $null
+if ((Get-Item $MAVEN_M2_PATH).Target[0] -eq $null) {
+  $MAVEN_WRAPPER_DISTS = "$MAVEN_M2_PATH/wrapper/dists"
+} else {
+  $MAVEN_WRAPPER_DISTS = (Get-Item $MAVEN_M2_PATH).Target[0] + "/wrapper/dists"
+}
+
+$MAVEN_HOME_PARENT = "$MAVEN_WRAPPER_DISTS/$distributionUrlNameMain"
+$MAVEN_HOME_NAME = ([System.Security.Cryptography.SHA256]::Create().ComputeHash([byte[]][char[]]$distributionUrl) | ForEach-Object {$_.ToString("x2")}) -join ''
+$MAVEN_HOME = "$MAVEN_HOME_PARENT/$MAVEN_HOME_NAME"
+
+if (Test-Path -Path "$MAVEN_HOME" -PathType Container) {
+  Write-Verbose "found existing MAVEN_HOME at $MAVEN_HOME"
+  Write-Output "MVN_CMD=$MAVEN_HOME/bin/$MVN_CMD"
+  exit $?
+}
+
+if (! $distributionUrlNameMain -or ($distributionUrlName -eq $distributionUrlNameMain)) {
+  Write-Error "distributionUrl is not valid, must end with *-bin.zip, but found $distributionUrl"
+}
+
+# prepare tmp dir
+$TMP_DOWNLOAD_DIR_HOLDER = New-TemporaryFile
+$TMP_DOWNLOAD_DIR = New-Item -Itemtype Directory -Path "$TMP_DOWNLOAD_DIR_HOLDER.dir"
+$TMP_DOWNLOAD_DIR_HOLDER.Delete() | Out-Null
+trap {
+  if ($TMP_DOWNLOAD_DIR.Exists) {
+    try { Remove-Item $TMP_DOWNLOAD_DIR -Recurse -Force | Out-Null }
+    catch { Write-Warning "Cannot remove $TMP_DOWNLOAD_DIR" }
+  }
+}
+
+New-Item -Itemtype Directory -Path "$MAVEN_HOME_PARENT" -Force | Out-Null
+
+# Download and Install Apache Maven
+Write-Verbose "Couldn't find MAVEN_HOME, downloading and installing it ..."
+Write-Verbose "Downloading from: $distributionUrl"
+Write-Verbose "Downloading to: $TMP_DOWNLOAD_DIR/$distributionUrlName"
+
+$webclient = New-Object System.Net.WebClient
+if ($env:MVNW_USERNAME -and $env:MVNW_PASSWORD) {
+  $webclient.Credentials = New-Object System.Net.NetworkCredential($env:MVNW_USERNAME, $env:MVNW_PASSWORD)
+}
+[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+$webclient.DownloadFile($distributionUrl, "$TMP_DOWNLOAD_DIR/$distributionUrlName") | Out-Null
+
+# If specified, validate the SHA-256 sum of the Maven distribution zip file
+$distributionSha256Sum = (Get-Content -Raw "$scriptDir/.mvn/wrapper/maven-wrapper.properties" | ConvertFrom-StringData).distributionSha256Sum
+if ($distributionSha256Sum) {
+  if ($USE_MVND) {
+    Write-Error "Checksum validation is not supported for maven-mvnd. `nPlease disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties."
+  }
+  Import-Module $PSHOME\Modules\Microsoft.PowerShell.Utility -Function Get-FileHash
+  if ((Get-FileHash "$TMP_DOWNLOAD_DIR/$distributionUrlName" -Algorithm SHA256).Hash.ToLower() -ne $distributionSha256Sum) {
+    Write-Error "Error: Failed to validate Maven distribution SHA-256, your Maven distribution might be compromised. If you updated your Maven version, you need to update the specified distributionSha256Sum property."
+  }
+}
+
+# unzip and move
+Expand-Archive "$TMP_DOWNLOAD_DIR/$distributionUrlName" -DestinationPath "$TMP_DOWNLOAD_DIR" | Out-Null
+
+# Find the actual extracted directory name (handles snapshots where filename != directory name)
+$actualDistributionDir = ""
+
+# First try the expected directory name (for regular distributions)
+$expectedPath = Join-Path "$TMP_DOWNLOAD_DIR" "$distributionUrlNameMain"
+$expectedMvnPath = Join-Path "$expectedPath" "bin/$MVN_CMD"
+if ((Test-Path -Path $expectedPath -PathType Container) -and (Test-Path -Path $expectedMvnPath -PathType Leaf)) {
+  $actualDistributionDir = $distributionUrlNameMain
+}
+
+# If not found, search for any directory with the Maven executable (for snapshots)
+if (!$actualDistributionDir) {
+  Get-ChildItem -Path "$TMP_DOWNLOAD_DIR" -Directory | ForEach-Object {
+    $testPath = Join-Path $_.FullName "bin/$MVN_CMD"
+    if (Test-Path -Path $testPath -PathType Leaf) {
+      $actualDistributionDir = $_.Name
+    }
+  }
+}
+
+if (!$actualDistributionDir) {
+  Write-Error "Could not find Maven distribution directory in extracted archive"
+}
+
+Write-Verbose "Found extracted Maven distribution directory: $actualDistributionDir"
+Rename-Item -Path "$TMP_DOWNLOAD_DIR/$actualDistributionDir" -NewName $MAVEN_HOME_NAME | Out-Null
+try {
+  Move-Item -Path "$TMP_DOWNLOAD_DIR/$MAVEN_HOME_NAME" -Destination $MAVEN_HOME_PARENT | Out-Null
+} catch {
+  if (! (Test-Path -Path "$MAVEN_HOME" -PathType Container)) {
+    Write-Error "fail to move MAVEN_HOME"
+  }
+} finally {
+  try { Remove-Item $TMP_DOWNLOAD_DIR -Recurse -Force | Out-Null }
+  catch { Write-Warning "Cannot remove $TMP_DOWNLOAD_DIR" }
+}
+
+Write-Output "MVN_CMD=$MAVEN_HOME/bin/$MVN_CMD"
@@ -0,0 +1,153 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<project
+	xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"
+>
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>com.drinkool</groupId>
+        <artifactId>drinkool</artifactId>
+        <version>1.5.4</version>
+        <relativePath>../pom.xml</relativePath>
+    </parent>
+
+    <artifactId>eatery-service</artifactId>
+    <packaging>quarkus</packaging>
+
+    <properties>
+         <quarkus.package.jar.enabled>false</quarkus.package.jar.enabled>
+                <skipITs>false</skipITs>
+                <quarkus.native.enabled>true</quarkus.native.enabled>
+        <compiler-plugin.version>3.15.0</compiler-plugin.version>
+        <maven.compiler.release>25</maven.compiler.release>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <project.reporting.outputEncoding
+		>UTF-8</project.reporting.outputEncoding>
+        <quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>
+        <quarkus.platform.group-id
+		>io.quarkus.platform</quarkus.platform.group-id>
+        <quarkus.platform.version>3.32.4</quarkus.platform.version>
+        <skipITs>true</skipITs>
+        <surefire-plugin.version>3.5.4</surefire-plugin.version>
+    </properties>
+
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>${quarkus.platform.artifact-id}</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
+    <dependencies>
+        <dependency>
+            <groupId>com.drinkool</groupId>
+            <artifactId>lib</artifactId>
+            <version>${project.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-jdbc-h2</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.rest-assured</groupId>
+            <artifactId>rest-assured</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-hibernate-orm-panache</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-jdbc-postgresql</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-arc</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-hibernate-orm</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-container-image-docker</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-junit</artifactId>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>quarkus-maven-plugin</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <extensions>true</extensions>
+            </plugin>
+            <plugin>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>${compiler-plugin.version}</version>
+                <configuration>
+                    <parameters>true</parameters>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-surefire-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                    <forkCount>1</forkCount>
+                    <reuseForks>true</reuseForks>
+                    <redirectTestOutputToFile>true</redirectTestOutputToFile>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-failsafe-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>integration-test</goal>
+                            <goal>verify</goal>
+                        </goals>
+                    </execution>
+                </executions>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <native.image.path>
+                            ${project.build.directory}/${project.build.finalName}-runner</native.image.path>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+</project>
@@ -0,0 +1,100 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.jvm -t quarkus/eatery-service-jvm .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service-jvm
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service-jvm
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+# We make four distinct layers so if there are application changes the library layers can be re-used
+COPY --chown=185 target/quarkus-app/lib/ /deployments/lib/
+COPY --chown=185 target/quarkus-app/*.jar /deployments/
+COPY --chown=185 target/quarkus-app/app/ /deployments/app/
+COPY --chown=185 target/quarkus-app/quarkus/ /deployments/quarkus/
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
+
@@ -0,0 +1,96 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dquarkus.package.jar.type=legacy-jar
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.legacy-jar -t quarkus/eatery-service-legacy-jar .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service-legacy-jar
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service-legacy-jar
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+COPY target/lib/* /deployments/lib/
+COPY target/*-runner.jar /deployments/quarkus-run.jar
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
@@ -0,0 +1,29 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dnative
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.native -t quarkus/eatery-service .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service
+#
+# The ` registry.access.redhat.com/ubi9/ubi-minimal:9.7` base image is based on UBI 9.
+# To use UBI 8, switch to `quay.io/ubi8/ubi-minimal:8.10`.
+###
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7
+WORKDIR /work/
+RUN chown 1001 /work \
+    && chmod "g+rwX" /work \
+    && chown 1001:root /work
+COPY --chown=1001:root --chmod=0755 target/*-runner /work/application
+
+EXPOSE 8080
+USER 1001
+
+ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
@@ -0,0 +1,32 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
+# It uses a micro base image, tuned for Quarkus native executables.
+# It reduces the size of the resulting container image.
+# Check https://quarkus.io/guides/quarkus-runtime-base-image for further information about this image.
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dnative
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.native-micro -t quarkus/eatery-service .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service
+#
+# The `quay.io/quarkus/ubi9-quarkus-micro-image:2.0` base image is based on UBI 9.
+# To use UBI 8, switch to `quay.io/quarkus/quarkus-micro-image:2.0`.
+###
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
+WORKDIR /work/
+RUN chown 1001 /work \
+    && chmod "g+rwX" /work \
+    && chown 1001:root /work
+COPY --chown=1001:root --chmod=0755 target/*-runner /work/application
+
+EXPOSE 8080
+USER 1001
+
+ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
@@ -0,0 +1,50 @@
+package com.drinkool.entities;
+
+import jakarta.persistence.*;
+import jakarta.transaction.Transactional;
+
+@Entity
+@Table
+public class EateryInventoryItemEntity extends BaseEntity {
+
+	public double quantity;
+
+	@ManyToOne(fetch = FetchType.LAZY)
+	@JoinColumn(name = "inventory_item_id")
+	public InventoryItemEntity inventoryItem;
+
+	private EateryInventoryItemEntity() {}
+
+	// Create
+	@Transactional
+	public static EateryInventoryItemEntity create(
+		String name,
+		double quantity,
+		String unit
+	) {
+		String itemName = name.toLowerCase();
+
+		InventoryItemEntity item = InventoryItemEntity.find(
+			"name",
+			itemName
+		).firstResult();
+
+		if (item == null || item.unit != unit) {
+			if (unit != null || unit == "") {
+				item = InventoryItemEntity.create(itemName, unit);
+			} else {
+				item = InventoryItemEntity.create(itemName);
+			}
+		}
+
+		EateryInventoryItemEntity eateryInventoryItem =
+			new EateryInventoryItemEntity();
+
+		eateryInventoryItem.quantity = quantity;
+		eateryInventoryItem.inventoryItem = item;
+
+		eateryInventoryItem.persist();
+
+		return eateryInventoryItem;
+	}
+}
@@ -0,0 +1,33 @@
+package com.drinkool.entities;
+
+import jakarta.persistence.Entity;
+import jakarta.persistence.Table;
+import jakarta.transaction.Transactional;
+
+@Entity
+@Table(name = "inventory_items")
+public class InventoryItemEntity extends BaseEntity {
+
+	public String name;
+	public String unit;
+
+	private InventoryItemEntity() {}
+
+	// Create
+	@Transactional
+	public static InventoryItemEntity create(String name, String unit) {
+		InventoryItemEntity item = new InventoryItemEntity();
+
+		item.name = name;
+		item.unit = unit;
+
+		item.persist();
+
+		return item;
+	}
+
+	@Transactional
+	public static InventoryItemEntity create(String name) {
+		return InventoryItemEntity.create(name, "unit");
+	}
+}
@@ -0,0 +1,55 @@
+package com.drinkool.entities;
+
+import jakarta.persistence.*;
+import jakarta.transaction.Transactional;
+import java.util.*;
+
+@Entity
+@Table
+public class MenuItemEntity extends BaseEntity {
+
+	public String name;
+	public double price;
+
+	// Danh sách các nguyên liệu cấu thành món ăn này
+	@OneToMany(
+		mappedBy = "menuItem",
+		cascade = CascadeType.ALL,
+		orphanRemoval = true
+	)
+	public List<MenuItemIngredientEntity> ingredients = new ArrayList<>();
+
+	/**
+	 * Thêm nguyên liệu vào món ăn với định lượng cụ thể
+	 */
+	@Transactional
+	public void addIngredient(
+		EateryInventoryItemEntity inventoryItem,
+		double requiredQty
+	) {
+		MenuItemIngredientEntity ingredient = MenuItemIngredientEntity.create(
+			this,
+			inventoryItem,
+			requiredQty
+		);
+
+		this.ingredients.add(ingredient);
+
+		this.persist();
+	}
+
+	/**
+	 * Phương thức tiện ích để tạo nhanh Menu Item từ tên
+	 */
+	@Transactional
+	public static MenuItemEntity create(String name, double price) {
+		MenuItemEntity menu = new MenuItemEntity();
+
+		menu.name = name;
+		menu.price = price;
+
+		menu.persist();
+
+		return menu;
+	}
+}
@@ -0,0 +1,36 @@
+package com.drinkool.entities;
+
+import jakarta.persistence.*;
+
+@Entity
+@Table(name = "menu_item_ingredients")
+public class MenuItemIngredientEntity extends BaseEntity {
+
+	@ManyToOne(fetch = FetchType.LAZY)
+	@JoinColumn(name = "menu_item_id")
+	public MenuItemEntity menuItem;
+
+	@ManyToOne(fetch = FetchType.LAZY)
+	@JoinColumn(name = "inventory_item_id")
+	public EateryInventoryItemEntity inventoryItem;
+
+	public double requiredQuantity;
+
+	private MenuItemIngredientEntity() {}
+
+	public static MenuItemIngredientEntity create(
+		MenuItemEntity menuItem,
+		EateryInventoryItemEntity inventoryItem,
+		double requiredQuantity
+	) {
+		MenuItemIngredientEntity ingredient = new MenuItemIngredientEntity();
+
+		ingredient.menuItem = menuItem;
+		ingredient.inventoryItem = inventoryItem;
+		ingredient.requiredQuantity = requiredQuantity;
+
+		ingredient.persist();
+
+		return ingredient;
+	}
+}
@@ -0,0 +1,35 @@
+package com.drinkool.entities;
+
+import com.drinkool.models.ReviewModel;
+import jakarta.persistence.*;
+import jakarta.transaction.Transactional;
+import java.util.UUID;
+
+@Entity
+@Table(name = "reviews")
+public class ReviewEntity extends ReviewModel {
+
+	public UUID reviewerId;
+
+	public UUID eateryId;
+
+	private ReviewEntity(ReviewModel input) {
+		super(input);
+	}
+
+	@Transactional
+	public static ReviewEntity create(
+		UUID reviewerId,
+		UUID eateryId,
+		ReviewModel reviewInput
+	) {
+		ReviewEntity review = new ReviewEntity(reviewInput);
+
+		review.reviewerId = reviewerId;
+		review.eateryId = eateryId;
+
+		review.persist();
+
+		return review;
+	}
+}
@@ -0,0 +1,20 @@
+package com.drinkool.services;
+
+import com.drinkool.dtos.AddInventory;
+import com.drinkool.entities.InventoryItemEntity;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.Response;
+
+@Path("/api/inventory")
+public class InventoryService {
+
+	@POST
+	@Path("/create")
+	@Transactional
+	public Response create(AddInventory input) {
+		InventoryItemEntity.create(input.name, input.unit);
+
+		return Response.ok().build();
+	}
+}
@@ -0,0 +1,20 @@
+package com.drinkool.services;
+
+import com.drinkool.dtos.SendReview;
+import com.drinkool.entities.ReviewEntity;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.Response;
+
+@Path("/api/review")
+public class ReviewService {
+
+	@POST
+	@Path("/create")
+	@Transactional
+	public Response create(SendReview input) {
+		ReviewEntity.create(input.reviewerId, input.orderId, input.review);
+
+		return Response.status(201).build();
+	}
+}
@@ -0,0 +1,27 @@
+# Postgress
+## Cấu hình Database
+quarkus.datasource.db-kind=postgresql
+quarkus.datasource.username=postgres
+quarkus.datasource.password=password
+quarkus.datasource.jdbc.url=jdbc:postgresql://localhost:5432/eatery
+
+## Tự động tạo bảng từ Entity (chỉ dùng cho môi trường dev)
+quarkus.hibernate-orm.database.generation=update
+
+# Docker
+quarkus.container-image.registry=vps.demonkernel.io.vn
+quarkus.container-image.group=foodsurf
+quarkus.container-image.name=eatery-service
+quarkus.container-image.push=true
+quarkus.container-image.build=true
+quarkus.container-image.builder=docker
+quarkus.container-image.additional-tags=latest
+
+# Dependency
+quarkus.index-dependency.lib.group-id=com.drinkool
+quarkus.index-dependency.lib.artifact-id=lib
+
+# Build
+quarkus.native.container-build=true
+quarkus.native.remote-container-build=true
+quarkus.native.additional-build-args=--future-defaults=all
@@ -0,0 +1,6 @@
+-- This file allow to write SQL commands that will be emitted in test and dev.
+-- The commands are commented as their support depends of the database
+-- insert into myentity (id, field) values(1, 'field-1');
+-- insert into myentity (id, field) values(2, 'field-2');
+-- insert into myentity (id, field) values(3, 'field-3');
+-- alter sequence myentity_seq restart with 4;
@@ -0,0 +1,52 @@
+package com.drinkool.entities;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.transaction.Transactional;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class EateryInventoryItemEntityTest {
+
+	@Test
+	@Transactional
+	void testAdd_WhenItemExists_ShouldUseExistingItem() {
+		String itemName = "Coca Cola";
+		int quantity = 10;
+
+		InventoryItemEntity.create(itemName);
+
+		EateryInventoryItemEntity eateryItem = EateryInventoryItemEntity.create(
+			itemName,
+			quantity,
+			""
+		);
+
+		EateryInventoryItemEntity savedEntity = EateryInventoryItemEntity.find(
+			"id",
+			eateryItem.id
+		).firstResult();
+		assertNotNull(savedEntity);
+	}
+
+	@Test
+	@Transactional
+	void testAdd_WhenItemDoesNotExist_ShouldCreateNewItem() {
+		String itemName = "Pepsi";
+		int quantity = 5;
+		String unit = "Bottle";
+
+		EateryInventoryItemEntity eateryItem = EateryInventoryItemEntity.create(
+			itemName,
+			quantity,
+			unit
+		);
+
+		EateryInventoryItemEntity savedEntity = EateryInventoryItemEntity.find(
+			"id",
+			eateryItem.id
+		).firstResult();
+		assertNotNull(savedEntity);
+	}
+}
@@ -0,0 +1,50 @@
+package com.drinkool.entities;
+
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.transaction.Transactional;
+import org.junit.jupiter.api.Assertions;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class InventoryItemEntityTest {
+
+	@Test
+	@Transactional
+	public void testCreateInventoryItem() {
+		// 1. Chuẩn bị dữ liệu (Lưu ý: Không còn biến quantity nữa)
+		String name = "Trà sữa truyền thống";
+		String unit = "Ly";
+
+		// 2. Gọi hàm static create (Không dùng new hay hàm add nữa)
+		// Hàm này vừa tạo object, vừa gán data, vừa gọi persist() luôn
+		InventoryItemEntity item = InventoryItemEntity.create(name, unit);
+
+		// 3. Kiểm chứng
+		Assertions.assertNotNull(item, "Entity tạo ra không được null");
+		Assertions.assertEquals(name, item.name, "Tên không khớp");
+		Assertions.assertEquals(unit, item.unit, "Đơn vị không khớp");
+		Assertions.assertNotNull(
+			item.id,
+			"ID phải được sinh ra tự động sau khi persist"
+		);
+	}
+
+	@Test
+	@Transactional
+	public void testCreateWithDefaultUnit() {
+		// 1. Chuẩn bị dữ liệu
+		String name = "Trân châu đen";
+
+		// 2. Gọi hàm static create rút gọn (chỉ truyền name, unit sẽ tự là "unit")
+		InventoryItemEntity item = InventoryItemEntity.create(name);
+
+		// 3. Kiểm chứng
+		Assertions.assertNotNull(item, "Entity tạo ra không được null");
+		Assertions.assertEquals(name, item.name, "Tên không khớp");
+		Assertions.assertEquals("unit", item.unit, "Unit mặc định phải là 'unit'");
+		Assertions.assertNotNull(
+			item.id,
+			"ID phải được sinh ra tự động sau khi persist"
+		);
+	}
+}
@@ -0,0 +1,90 @@
+package com.drinkool.entities;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.transaction.Transactional;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class MenuItemEntityTest {
+
+	@Test
+	@Transactional
+	public void testCreateMenuItemSuccessfully() {
+		// 1. Chuẩn bị dữ liệu (Arrange)
+		String name = "Cà phê sữa đá";
+		double price = 29000.0;
+
+		// 2. Thực thi (Act) - Gọi hàm tĩnh create
+		MenuItemEntity menuItem = MenuItemEntity.create(name, price);
+
+		// 3. Kiểm chứng (Assert)
+		assertNotNull(menuItem, "Thực thể MenuItem không được null");
+		assertEquals(name, menuItem.name, "Tên món ăn không khớp");
+		assertEquals(price, menuItem.price, "Giá món ăn không khớp");
+		assertNotNull(menuItem.id, "ID phải được tự động sinh ra sau khi persist");
+		assertTrue(
+			menuItem.ingredients.isEmpty(),
+			"Danh sách nguyên liệu ban đầu phải rỗng"
+		);
+	}
+
+	@Test
+	@Transactional
+	public void testAddIngredientSuccessfully() {
+		// 1. Chuẩn bị dữ liệu (Arrange)
+		// Tạo món ăn
+		MenuItemEntity menuItem = MenuItemEntity.create(
+			"Trà sữa trân châu",
+			45000.0
+		);
+
+		// Tạo nguyên liệu trong kho (Dùng đúng hàm add() của EateryInventoryItemEntity như đã fix)
+		EateryInventoryItemEntity inventoryItem = EateryInventoryItemEntity.create(
+			"Trân châu đen",
+			50,
+			"kg"
+		);
+
+		double requiredQty = 0.2; // Cần 0.2 kg trân châu cho 1 ly
+
+		// 2. Thực thi (Act) - Thêm nguyên liệu vào món ăn
+		menuItem.addIngredient(inventoryItem, requiredQty);
+
+		// 3. Kiểm chứng (Assert)
+		// Kiểm tra danh sách nguyên liệu của món ăn
+		assertFalse(
+			menuItem.ingredients.isEmpty(),
+			"Danh sách nguyên liệu không được rỗng sau khi thêm"
+		);
+		assertEquals(
+			1,
+			menuItem.ingredients.size(),
+			"Phải có đúng 1 nguyên liệu trong danh sách"
+		);
+
+		// Lấy phần tử nguyên liệu đầu tiên ra để kiểm tra chi tiết các liên kết
+		MenuItemIngredientEntity addedIngredient = menuItem.ingredients.get(0);
+
+		assertNotNull(
+			addedIngredient.id,
+			"ID của Entity trung gian phải được sinh ra"
+		);
+		assertEquals(
+			menuItem.id,
+			addedIngredient.menuItem.id,
+			"Khóa ngoại MenuItem bị sai"
+		);
+		assertEquals(
+			inventoryItem.id,
+			addedIngredient.inventoryItem.id,
+			"Khóa ngoại InventoryItem bị sai"
+		);
+		assertEquals(
+			requiredQty,
+			addedIngredient.requiredQuantity,
+			"Định lượng (requiredQty) không khớp"
+		);
+	}
+}
@@ -0,0 +1,60 @@
+package com.drinkool.entities;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.transaction.Transactional;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class MenuItemIngredientEntityTest {
+
+	@Test
+	@Transactional
+	void testCreate_ShouldPersistIngredientSuccessfully() {
+		// 1. Chuẩn bị dữ liệu giả định
+
+		String menuItemName = "Milk Tea";
+		double menuItemPrice = 40;
+
+		MenuItemEntity menuItem = MenuItemEntity.create(
+			menuItemName,
+			menuItemPrice
+		);
+
+		String inventoryItemName = "Water";
+		int inventoryItemQuantity = 10; // Đổi thành int cho khớp với kiểu của EateryInventoryItemEntity
+		String inventoryItemUnit = "l";
+
+		// SỬA Ở ĐÂY: Khởi tạo bằng new và dùng hàm add() đúng như cấu trúc class của bạn
+		EateryInventoryItemEntity inventoryItem = EateryInventoryItemEntity.create(
+			inventoryItemName,
+			inventoryItemQuantity,
+			inventoryItemUnit
+		);
+		// Lưu ý: Hàm add() của bạn đã có sẵn lệnh this.persist() bên trong nên không cần gọi lại nữa!
+
+		double requiredQuantity = 0.5;
+
+		// 2. Gọi hàm static create cần test
+		MenuItemIngredientEntity createdIngredient =
+			MenuItemIngredientEntity.create(
+				menuItem,
+				inventoryItem,
+				requiredQuantity
+			);
+
+		// 3. Kiểm tra kết quả
+		assertNotNull(createdIngredient.id, "ID không được null sau khi persist");
+
+		// Truy vấn lại từ Database để đảm bảo dữ liệu đã được lưu đúng
+		MenuItemIngredientEntity savedEntity = MenuItemIngredientEntity.findById(
+			createdIngredient.id
+		);
+
+		assertNotNull(savedEntity);
+		assertEquals(menuItem.id, savedEntity.menuItem.id);
+		assertEquals(inventoryItem.id, savedEntity.inventoryItem.id);
+		assertEquals(requiredQuantity, savedEntity.requiredQuantity);
+	}
+}
@@ -0,0 +1,57 @@
+package com.drinkool.entities;
+
+import com.drinkool.models.ReviewModel;
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.transaction.Transactional;
+import java.util.UUID;
+import org.junit.jupiter.api.Assertions;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class ReviewEntityTest {
+
+	@Test
+	@Transactional
+	public void testCreateReview() {
+		// 1. Chuẩn bị dữ liệu (Arrange)
+		UUID testReviewerId = UUID.randomUUID();
+		UUID testEateryId = UUID.randomUUID();
+
+		// Truyền trực tiếp rating và comment vào constructor của ReviewModel
+		ReviewModel inputModel = new ReviewModel(5, "Món ăn tuyệt vời!");
+
+		// 2. Thực thi (Act)
+		ReviewEntity savedReview = ReviewEntity.create(
+			testReviewerId,
+			testEateryId,
+			inputModel
+		);
+
+		// 3. Kiểm chứng (Assert)
+		Assertions.assertNotNull(
+			savedReview,
+			"Thực thể Review sau khi tạo không được null"
+		);
+		Assertions.assertEquals(
+			testReviewerId,
+			savedReview.reviewerId,
+			"Reviewer ID không khớp"
+		);
+		Assertions.assertEquals(
+			testEateryId,
+			savedReview.eateryId,
+			"Eatery ID không khớp"
+		);
+		Assertions.assertEquals(5, savedReview.rating, "Rating không khớp");
+		Assertions.assertEquals(
+			"Món ăn tuyệt vời!",
+			savedReview.comment,
+			"Comment không khớp"
+		);
+
+		Assertions.assertNotNull(
+			savedReview.id,
+			"ID phải được tự động sinh ra sau khi persist"
+		);
+	}
+}
@@ -0,0 +1,32 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.given;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import com.drinkool.dtos.AddInventory;
+import com.drinkool.entities.InventoryItemEntity;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import java.util.UUID;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class InventoryServiceTest {
+
+	@Test
+	void add() {
+		String name = UUID.randomUUID().toString();
+
+		AddInventory input = new AddInventory();
+		input.name = name;
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post("/api/inventory/create")
+			.then();
+
+		assertEquals(1, InventoryItemEntity.find("name", name).count());
+	}
+}
@@ -0,0 +1,43 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.given;
+import static org.junit.jupiter.api.Assertions.*;
+
+import com.drinkool.dtos.SendReview;
+import com.drinkool.entities.ReviewEntity;
+import com.drinkool.models.ReviewModel;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import java.util.Random;
+import java.util.UUID;
+import org.junit.jupiter.api.*;
+
+@QuarkusTest
+public class ReviewServiceTest {
+
+	@Test
+	void receiveReview() {
+		Random random = new Random();
+
+		UUID reviewerId = UUID.randomUUID();
+		UUID orderId = UUID.randomUUID();
+		String comment = UUID.randomUUID().toString();
+		int rating = random.nextInt();
+
+		SendReview input = new SendReview();
+		input.reviewerId = reviewerId;
+		input.orderId = orderId;
+		ReviewModel reviewModel = new ReviewModel(rating, comment);
+		input.review = reviewModel;
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post("/api/review/create")
+			.then()
+			.statusCode(201);
+
+		assertEquals(1, ReviewEntity.find("reviewerId", reviewerId).count());
+	}
+}
@@ -0,0 +1,10 @@
+# Quarkus
+quarkus.http.host=0.0.0.0
+
+# Database
+## Datasource
+%test.quarkus.datasource.db-kind=h2
+%test.quarkus.datasource.jdbc.url=jdbc:h2:mem:test_db;DB_CLOSE_DELAY=-1
+
+## Orm
+%test.quarkus.hibernate-orm.database.generation=drop-and-create
@@ -0,0 +1,5 @@
+*
+!target/*-runner
+!target/*-runner.jar
+!target/lib/*
+!target/quarkus-app/*
@@ -0,0 +1,4 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
+distributionSha256Sum=305773a68d6ddfd413df58c82b3f8050e89778e777f3a745c8e5b8cbea4018ef
@@ -0,0 +1,75 @@
+# gateway-service
+
+This project uses Quarkus, the Supersonic Subatomic Java Framework.
+
+If you want to learn more about Quarkus, please visit its website: <https://quarkus.io/>.
+
+## Running the application in dev mode
+
+You can run your application in dev mode that enables live coding using:
+
+```shell script
+./mvnw quarkus:dev
+```
+
+> **_NOTE:_**  Quarkus now ships with a Dev UI, which is available in dev mode only at <http://localhost:8080/q/dev/>.
+
+## Packaging and running the application
+
+The application can be packaged using:
+
+```shell script
+./mvnw package
+```
+
+It produces the `quarkus-run.jar` file in the `target/quarkus-app/` directory.
+Be aware that it’s not an _über-jar_ as the dependencies are copied into the `target/quarkus-app/lib/` directory.
+
+The application is now runnable using `java -jar target/quarkus-app/quarkus-run.jar`.
+
+If you want to build an _über-jar_, execute the following command:
+
+```shell script
+./mvnw package -Dquarkus.package.jar.type=uber-jar
+```
+
+The application, packaged as an _über-jar_, is now runnable using `java -jar target/*-runner.jar`.
+
+## Creating a native executable
+
+You can create a native executable using:
+
+```shell script
+./mvnw package -Dnative
+```
+
+Or, if you don't have GraalVM installed, you can run the native executable build in a container using:
+
+```shell script
+./mvnw package -Dnative -Dquarkus.native.container-build=true
+```
+
+You can then execute your native executable with: `./target/gateway-service-1.0.0-SNAPSHOT-runner`
+
+If you want to learn more about building native executables, please consult <https://quarkus.io/guides/maven-tooling>.
+
+## Related Guides
+
+- Redis Client ([guide](https://quarkus.io/guides/redis)): Connect to Redis in either imperative or reactive style
+- Messaging - Kafka Connector ([guide](https://quarkus.io/guides/kafka-getting-started)): Connect to Kafka with Reactive Messaging
+- REST Jackson ([guide](https://quarkus.io/guides/rest#json-serialisation)): Jackson serialization support for Quarkus REST. This extension is not compatible with the quarkus-resteasy extension, or any of the extensions that depend on it
+
+## Provided Code
+
+### Messaging codestart
+
+Use Quarkus Messaging
+
+[Related Apache Kafka guide section...](https://quarkus.io/guides/kafka-reactive-getting-started)
+
+
+### REST
+
+Easily start your REST Web Services
+
+[Related guide section...](https://quarkus.io/guides/getting-started-reactive#reactive-jax-rs-resources)
@@ -0,0 +1,295 @@
+#!/bin/sh
+# ----------------------------------------------------------------------------
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+# ----------------------------------------------------------------------------
+
+# ----------------------------------------------------------------------------
+# Apache Maven Wrapper startup batch script, version 3.3.4
+#
+# Optional ENV vars
+# -----------------
+#   JAVA_HOME - location of a JDK home dir, required when download maven via java source
+#   MVNW_REPOURL - repo url base for downloading maven distribution
+#   MVNW_USERNAME/MVNW_PASSWORD - user and password for downloading maven
+#   MVNW_VERBOSE - true: enable verbose log; debug: trace the mvnw script; others: silence the output
+# ----------------------------------------------------------------------------
+
+set -euf
+[ "${MVNW_VERBOSE-}" != debug ] || set -x
+
+# OS specific support.
+native_path() { printf %s\\n "$1"; }
+case "$(uname)" in
+CYGWIN* | MINGW*)
+  [ -z "${JAVA_HOME-}" ] || JAVA_HOME="$(cygpath --unix "$JAVA_HOME")"
+  native_path() { cygpath --path --windows "$1"; }
+  ;;
+esac
+
+# set JAVACMD and JAVACCMD
+set_java_home() {
+  # For Cygwin and MinGW, ensure paths are in Unix format before anything is touched
+  if [ -n "${JAVA_HOME-}" ]; then
+    if [ -x "$JAVA_HOME/jre/sh/java" ]; then
+      # IBM's JDK on AIX uses strange locations for the executables
+      JAVACMD="$JAVA_HOME/jre/sh/java"
+      JAVACCMD="$JAVA_HOME/jre/sh/javac"
+    else
+      JAVACMD="$JAVA_HOME/bin/java"
+      JAVACCMD="$JAVA_HOME/bin/javac"
+
+      if [ ! -x "$JAVACMD" ] || [ ! -x "$JAVACCMD" ]; then
+        echo "The JAVA_HOME environment variable is not defined correctly, so mvnw cannot run." >&2
+        echo "JAVA_HOME is set to \"$JAVA_HOME\", but \"\$JAVA_HOME/bin/java\" or \"\$JAVA_HOME/bin/javac\" does not exist." >&2
+        return 1
+      fi
+    fi
+  else
+    JAVACMD="$(
+      'set' +e
+      'unset' -f command 2>/dev/null
+      'command' -v java
+    )" || :
+    JAVACCMD="$(
+      'set' +e
+      'unset' -f command 2>/dev/null
+      'command' -v javac
+    )" || :
+
+    if [ ! -x "${JAVACMD-}" ] || [ ! -x "${JAVACCMD-}" ]; then
+      echo "The java/javac command does not exist in PATH nor is JAVA_HOME set, so mvnw cannot run." >&2
+      return 1
+    fi
+  fi
+}
+
+# hash string like Java String::hashCode
+hash_string() {
+  str="${1:-}" h=0
+  while [ -n "$str" ]; do
+    char="${str%"${str#?}"}"
+    h=$(((h * 31 + $(LC_CTYPE=C printf %d "'$char")) % 4294967296))
+    str="${str#?}"
+  done
+  printf %x\\n $h
+}
+
+verbose() { :; }
+[ "${MVNW_VERBOSE-}" != true ] || verbose() { printf %s\\n "${1-}"; }
+
+die() {
+  printf %s\\n "$1" >&2
+  exit 1
+}
+
+trim() {
+  # MWRAPPER-139:
+  #   Trims trailing and leading whitespace, carriage returns, tabs, and linefeeds.
+  #   Needed for removing poorly interpreted newline sequences when running in more
+  #   exotic environments such as mingw bash on Windows.
+  printf "%s" "${1}" | tr -d '[:space:]'
+}
+
+scriptDir="$(dirname "$0")"
+scriptName="$(basename "$0")"
+
+# parse distributionUrl and optional distributionSha256Sum, requires .mvn/wrapper/maven-wrapper.properties
+while IFS="=" read -r key value; do
+  case "${key-}" in
+  distributionUrl) distributionUrl=$(trim "${value-}") ;;
+  distributionSha256Sum) distributionSha256Sum=$(trim "${value-}") ;;
+  esac
+done <"$scriptDir/.mvn/wrapper/maven-wrapper.properties"
+[ -n "${distributionUrl-}" ] || die "cannot read distributionUrl property in $scriptDir/.mvn/wrapper/maven-wrapper.properties"
+
+case "${distributionUrl##*/}" in
+maven-mvnd-*bin.*)
+  MVN_CMD=mvnd.sh _MVNW_REPO_PATTERN=/maven/mvnd/
+  case "${PROCESSOR_ARCHITECTURE-}${PROCESSOR_ARCHITEW6432-}:$(uname -a)" in
+  *AMD64:CYGWIN* | *AMD64:MINGW*) distributionPlatform=windows-amd64 ;;
+  :Darwin*x86_64) distributionPlatform=darwin-amd64 ;;
+  :Darwin*arm64) distributionPlatform=darwin-aarch64 ;;
+  :Linux*x86_64*) distributionPlatform=linux-amd64 ;;
+  *)
+    echo "Cannot detect native platform for mvnd on $(uname)-$(uname -m), use pure java version" >&2
+    distributionPlatform=linux-amd64
+    ;;
+  esac
+  distributionUrl="${distributionUrl%-bin.*}-$distributionPlatform.zip"
+  ;;
+maven-mvnd-*) MVN_CMD=mvnd.sh _MVNW_REPO_PATTERN=/maven/mvnd/ ;;
+*) MVN_CMD="mvn${scriptName#mvnw}" _MVNW_REPO_PATTERN=/org/apache/maven/ ;;
+esac
+
+# apply MVNW_REPOURL and calculate MAVEN_HOME
+# maven home pattern: ~/.m2/wrapper/dists/{apache-maven-<version>,maven-mvnd-<version>-<platform>}/<hash>
+[ -z "${MVNW_REPOURL-}" ] || distributionUrl="$MVNW_REPOURL$_MVNW_REPO_PATTERN${distributionUrl#*"$_MVNW_REPO_PATTERN"}"
+distributionUrlName="${distributionUrl##*/}"
+distributionUrlNameMain="${distributionUrlName%.*}"
+distributionUrlNameMain="${distributionUrlNameMain%-bin}"
+MAVEN_USER_HOME="${MAVEN_USER_HOME:-${HOME}/.m2}"
+MAVEN_HOME="${MAVEN_USER_HOME}/wrapper/dists/${distributionUrlNameMain-}/$(hash_string "$distributionUrl")"
+
+exec_maven() {
+  unset MVNW_VERBOSE MVNW_USERNAME MVNW_PASSWORD MVNW_REPOURL || :
+  exec "$MAVEN_HOME/bin/$MVN_CMD" "$@" || die "cannot exec $MAVEN_HOME/bin/$MVN_CMD"
+}
+
+if [ -d "$MAVEN_HOME" ]; then
+  verbose "found existing MAVEN_HOME at $MAVEN_HOME"
+  exec_maven "$@"
+fi
+
+case "${distributionUrl-}" in
+*?-bin.zip | *?maven-mvnd-?*-?*.zip) ;;
+*) die "distributionUrl is not valid, must match *-bin.zip or maven-mvnd-*.zip, but found '${distributionUrl-}'" ;;
+esac
+
+# prepare tmp dir
+if TMP_DOWNLOAD_DIR="$(mktemp -d)" && [ -d "$TMP_DOWNLOAD_DIR" ]; then
+  clean() { rm -rf -- "$TMP_DOWNLOAD_DIR"; }
+  trap clean HUP INT TERM EXIT
+else
+  die "cannot create temp dir"
+fi
+
+mkdir -p -- "${MAVEN_HOME%/*}"
+
+# Download and Install Apache Maven
+verbose "Couldn't find MAVEN_HOME, downloading and installing it ..."
+verbose "Downloading from: $distributionUrl"
+verbose "Downloading to: $TMP_DOWNLOAD_DIR/$distributionUrlName"
+
+# select .zip or .tar.gz
+if ! command -v unzip >/dev/null; then
+  distributionUrl="${distributionUrl%.zip}.tar.gz"
+  distributionUrlName="${distributionUrl##*/}"
+fi
+
+# verbose opt
+__MVNW_QUIET_WGET=--quiet __MVNW_QUIET_CURL=--silent __MVNW_QUIET_UNZIP=-q __MVNW_QUIET_TAR=''
+[ "${MVNW_VERBOSE-}" != true ] || __MVNW_QUIET_WGET='' __MVNW_QUIET_CURL='' __MVNW_QUIET_UNZIP='' __MVNW_QUIET_TAR=v
+
+# normalize http auth
+case "${MVNW_PASSWORD:+has-password}" in
+'') MVNW_USERNAME='' MVNW_PASSWORD='' ;;
+has-password) [ -n "${MVNW_USERNAME-}" ] || MVNW_USERNAME='' MVNW_PASSWORD='' ;;
+esac
+
+if [ -z "${MVNW_USERNAME-}" ] && command -v wget >/dev/null; then
+  verbose "Found wget ... using wget"
+  wget ${__MVNW_QUIET_WGET:+"$__MVNW_QUIET_WGET"} "$distributionUrl" -O "$TMP_DOWNLOAD_DIR/$distributionUrlName" || die "wget: Failed to fetch $distributionUrl"
+elif [ -z "${MVNW_USERNAME-}" ] && command -v curl >/dev/null; then
+  verbose "Found curl ... using curl"
+  curl ${__MVNW_QUIET_CURL:+"$__MVNW_QUIET_CURL"} -f -L -o "$TMP_DOWNLOAD_DIR/$distributionUrlName" "$distributionUrl" || die "curl: Failed to fetch $distributionUrl"
+elif set_java_home; then
+  verbose "Falling back to use Java to download"
+  javaSource="$TMP_DOWNLOAD_DIR/Downloader.java"
+  targetZip="$TMP_DOWNLOAD_DIR/$distributionUrlName"
+  cat >"$javaSource" <<-END
+	public class Downloader extends java.net.Authenticator
+	{
+	  protected java.net.PasswordAuthentication getPasswordAuthentication()
+	  {
+	    return new java.net.PasswordAuthentication( System.getenv( "MVNW_USERNAME" ), System.getenv( "MVNW_PASSWORD" ).toCharArray() );
+	  }
+	  public static void main( String[] args ) throws Exception
+	  {
+	    setDefault( new Downloader() );
+	    java.nio.file.Files.copy( java.net.URI.create( args[0] ).toURL().openStream(), java.nio.file.Paths.get( args[1] ).toAbsolutePath().normalize() );
+	  }
+	}
+	END
+  # For Cygwin/MinGW, switch paths to Windows format before running javac and java
+  verbose " - Compiling Downloader.java ..."
+  "$(native_path "$JAVACCMD")" "$(native_path "$javaSource")" || die "Failed to compile Downloader.java"
+  verbose " - Running Downloader.java ..."
+  "$(native_path "$JAVACMD")" -cp "$(native_path "$TMP_DOWNLOAD_DIR")" Downloader "$distributionUrl" "$(native_path "$targetZip")"
+fi
+
+# If specified, validate the SHA-256 sum of the Maven distribution zip file
+if [ -n "${distributionSha256Sum-}" ]; then
+  distributionSha256Result=false
+  if [ "$MVN_CMD" = mvnd.sh ]; then
+    echo "Checksum validation is not supported for maven-mvnd." >&2
+    echo "Please disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties." >&2
+    exit 1
+  elif command -v sha256sum >/dev/null; then
+    if echo "$distributionSha256Sum  $TMP_DOWNLOAD_DIR/$distributionUrlName" | sha256sum -c - >/dev/null 2>&1; then
+      distributionSha256Result=true
+    fi
+  elif command -v shasum >/dev/null; then
+    if echo "$distributionSha256Sum  $TMP_DOWNLOAD_DIR/$distributionUrlName" | shasum -a 256 -c >/dev/null 2>&1; then
+      distributionSha256Result=true
+    fi
+  else
+    echo "Checksum validation was requested but neither 'sha256sum' or 'shasum' are available." >&2
+    echo "Please install either command, or disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties." >&2
+    exit 1
+  fi
+  if [ $distributionSha256Result = false ]; then
+    echo "Error: Failed to validate Maven distribution SHA-256, your Maven distribution might be compromised." >&2
+    echo "If you updated your Maven version, you need to update the specified distributionSha256Sum property." >&2
+    exit 1
+  fi
+fi
+
+# unzip and move
+if command -v unzip >/dev/null; then
+  unzip ${__MVNW_QUIET_UNZIP:+"$__MVNW_QUIET_UNZIP"} "$TMP_DOWNLOAD_DIR/$distributionUrlName" -d "$TMP_DOWNLOAD_DIR" || die "failed to unzip"
+else
+  tar xzf${__MVNW_QUIET_TAR:+"$__MVNW_QUIET_TAR"} "$TMP_DOWNLOAD_DIR/$distributionUrlName" -C "$TMP_DOWNLOAD_DIR" || die "failed to untar"
+fi
+
+# Find the actual extracted directory name (handles snapshots where filename != directory name)
+actualDistributionDir=""
+
+# First try the expected directory name (for regular distributions)
+if [ -d "$TMP_DOWNLOAD_DIR/$distributionUrlNameMain" ]; then
+  if [ -f "$TMP_DOWNLOAD_DIR/$distributionUrlNameMain/bin/$MVN_CMD" ]; then
+    actualDistributionDir="$distributionUrlNameMain"
+  fi
+fi
+
+# If not found, search for any directory with the Maven executable (for snapshots)
+if [ -z "$actualDistributionDir" ]; then
+  # enable globbing to iterate over items
+  set +f
+  for dir in "$TMP_DOWNLOAD_DIR"/*; do
+    if [ -d "$dir" ]; then
+      if [ -f "$dir/bin/$MVN_CMD" ]; then
+        actualDistributionDir="$(basename "$dir")"
+        break
+      fi
+    fi
+  done
+  set -f
+fi
+
+if [ -z "$actualDistributionDir" ]; then
+  verbose "Contents of $TMP_DOWNLOAD_DIR:"
+  verbose "$(ls -la "$TMP_DOWNLOAD_DIR")"
+  die "Could not find Maven distribution directory in extracted archive"
+fi
+
+verbose "Found extracted Maven distribution directory: $actualDistributionDir"
+printf %s\\n "$distributionUrl" >"$TMP_DOWNLOAD_DIR/$actualDistributionDir/mvnw.url"
+mv -- "$TMP_DOWNLOAD_DIR/$actualDistributionDir" "$MAVEN_HOME" || [ -d "$MAVEN_HOME" ] || die "fail to move MAVEN_HOME"
+
+clean || :
+exec_maven "$@"
@@ -0,0 +1,189 @@
+<# : batch portion
+@REM ----------------------------------------------------------------------------
+@REM Licensed to the Apache Software Foundation (ASF) under one
+@REM or more contributor license agreements.  See the NOTICE file
+@REM distributed with this work for additional information
+@REM regarding copyright ownership.  The ASF licenses this file
+@REM to you under the Apache License, Version 2.0 (the
+@REM "License"); you may not use this file except in compliance
+@REM with the License.  You may obtain a copy of the License at
+@REM
+@REM    http://www.apache.org/licenses/LICENSE-2.0
+@REM
+@REM Unless required by applicable law or agreed to in writing,
+@REM software distributed under the License is distributed on an
+@REM "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+@REM KIND, either express or implied.  See the License for the
+@REM specific language governing permissions and limitations
+@REM under the License.
+@REM ----------------------------------------------------------------------------
+
+@REM ----------------------------------------------------------------------------
+@REM Apache Maven Wrapper startup batch script, version 3.3.4
+@REM
+@REM Optional ENV vars
+@REM   MVNW_REPOURL - repo url base for downloading maven distribution
+@REM   MVNW_USERNAME/MVNW_PASSWORD - user and password for downloading maven
+@REM   MVNW_VERBOSE - true: enable verbose log; others: silence the output
+@REM ----------------------------------------------------------------------------
+
+@IF "%__MVNW_ARG0_NAME__%"=="" (SET __MVNW_ARG0_NAME__=%~nx0)
+@SET __MVNW_CMD__=
+@SET __MVNW_ERROR__=
+@SET __MVNW_PSMODULEP_SAVE=%PSModulePath%
+@SET PSModulePath=
+@FOR /F "usebackq tokens=1* delims==" %%A IN (`powershell -noprofile "& {$scriptDir='%~dp0'; $script='%__MVNW_ARG0_NAME__%'; icm -ScriptBlock ([Scriptblock]::Create((Get-Content -Raw '%~f0'))) -NoNewScope}"`) DO @(
+  IF "%%A"=="MVN_CMD" (set __MVNW_CMD__=%%B) ELSE IF "%%B"=="" (echo %%A) ELSE (echo %%A=%%B)
+)
+@SET PSModulePath=%__MVNW_PSMODULEP_SAVE%
+@SET __MVNW_PSMODULEP_SAVE=
+@SET __MVNW_ARG0_NAME__=
+@SET MVNW_USERNAME=
+@SET MVNW_PASSWORD=
+@IF NOT "%__MVNW_CMD__%"=="" ("%__MVNW_CMD__%" %*)
+@echo Cannot start maven from wrapper >&2 && exit /b 1
+@GOTO :EOF
+: end batch / begin powershell #>
+
+$ErrorActionPreference = "Stop"
+if ($env:MVNW_VERBOSE -eq "true") {
+  $VerbosePreference = "Continue"
+}
+
+# calculate distributionUrl, requires .mvn/wrapper/maven-wrapper.properties
+$distributionUrl = (Get-Content -Raw "$scriptDir/.mvn/wrapper/maven-wrapper.properties" | ConvertFrom-StringData).distributionUrl
+if (!$distributionUrl) {
+  Write-Error "cannot read distributionUrl property in $scriptDir/.mvn/wrapper/maven-wrapper.properties"
+}
+
+switch -wildcard -casesensitive ( $($distributionUrl -replace '^.*/','') ) {
+  "maven-mvnd-*" {
+    $USE_MVND = $true
+    $distributionUrl = $distributionUrl -replace '-bin\.[^.]*$',"-windows-amd64.zip"
+    $MVN_CMD = "mvnd.cmd"
+    break
+  }
+  default {
+    $USE_MVND = $false
+    $MVN_CMD = $script -replace '^mvnw','mvn'
+    break
+  }
+}
+
+# apply MVNW_REPOURL and calculate MAVEN_HOME
+# maven home pattern: ~/.m2/wrapper/dists/{apache-maven-<version>,maven-mvnd-<version>-<platform>}/<hash>
+if ($env:MVNW_REPOURL) {
+  $MVNW_REPO_PATTERN = if ($USE_MVND -eq $False) { "/org/apache/maven/" } else { "/maven/mvnd/" }
+  $distributionUrl = "$env:MVNW_REPOURL$MVNW_REPO_PATTERN$($distributionUrl -replace "^.*$MVNW_REPO_PATTERN",'')"
+}
+$distributionUrlName = $distributionUrl -replace '^.*/',''
+$distributionUrlNameMain = $distributionUrlName -replace '\.[^.]*$','' -replace '-bin$',''
+
+$MAVEN_M2_PATH = "$HOME/.m2"
+if ($env:MAVEN_USER_HOME) {
+  $MAVEN_M2_PATH = "$env:MAVEN_USER_HOME"
+}
+
+if (-not (Test-Path -Path $MAVEN_M2_PATH)) {
+    New-Item -Path $MAVEN_M2_PATH -ItemType Directory | Out-Null
+}
+
+$MAVEN_WRAPPER_DISTS = $null
+if ((Get-Item $MAVEN_M2_PATH).Target[0] -eq $null) {
+  $MAVEN_WRAPPER_DISTS = "$MAVEN_M2_PATH/wrapper/dists"
+} else {
+  $MAVEN_WRAPPER_DISTS = (Get-Item $MAVEN_M2_PATH).Target[0] + "/wrapper/dists"
+}
+
+$MAVEN_HOME_PARENT = "$MAVEN_WRAPPER_DISTS/$distributionUrlNameMain"
+$MAVEN_HOME_NAME = ([System.Security.Cryptography.SHA256]::Create().ComputeHash([byte[]][char[]]$distributionUrl) | ForEach-Object {$_.ToString("x2")}) -join ''
+$MAVEN_HOME = "$MAVEN_HOME_PARENT/$MAVEN_HOME_NAME"
+
+if (Test-Path -Path "$MAVEN_HOME" -PathType Container) {
+  Write-Verbose "found existing MAVEN_HOME at $MAVEN_HOME"
+  Write-Output "MVN_CMD=$MAVEN_HOME/bin/$MVN_CMD"
+  exit $?
+}
+
+if (! $distributionUrlNameMain -or ($distributionUrlName -eq $distributionUrlNameMain)) {
+  Write-Error "distributionUrl is not valid, must end with *-bin.zip, but found $distributionUrl"
+}
+
+# prepare tmp dir
+$TMP_DOWNLOAD_DIR_HOLDER = New-TemporaryFile
+$TMP_DOWNLOAD_DIR = New-Item -Itemtype Directory -Path "$TMP_DOWNLOAD_DIR_HOLDER.dir"
+$TMP_DOWNLOAD_DIR_HOLDER.Delete() | Out-Null
+trap {
+  if ($TMP_DOWNLOAD_DIR.Exists) {
+    try { Remove-Item $TMP_DOWNLOAD_DIR -Recurse -Force | Out-Null }
+    catch { Write-Warning "Cannot remove $TMP_DOWNLOAD_DIR" }
+  }
+}
+
+New-Item -Itemtype Directory -Path "$MAVEN_HOME_PARENT" -Force | Out-Null
+
+# Download and Install Apache Maven
+Write-Verbose "Couldn't find MAVEN_HOME, downloading and installing it ..."
+Write-Verbose "Downloading from: $distributionUrl"
+Write-Verbose "Downloading to: $TMP_DOWNLOAD_DIR/$distributionUrlName"
+
+$webclient = New-Object System.Net.WebClient
+if ($env:MVNW_USERNAME -and $env:MVNW_PASSWORD) {
+  $webclient.Credentials = New-Object System.Net.NetworkCredential($env:MVNW_USERNAME, $env:MVNW_PASSWORD)
+}
+[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+$webclient.DownloadFile($distributionUrl, "$TMP_DOWNLOAD_DIR/$distributionUrlName") | Out-Null
+
+# If specified, validate the SHA-256 sum of the Maven distribution zip file
+$distributionSha256Sum = (Get-Content -Raw "$scriptDir/.mvn/wrapper/maven-wrapper.properties" | ConvertFrom-StringData).distributionSha256Sum
+if ($distributionSha256Sum) {
+  if ($USE_MVND) {
+    Write-Error "Checksum validation is not supported for maven-mvnd. `nPlease disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties."
+  }
+  Import-Module $PSHOME\Modules\Microsoft.PowerShell.Utility -Function Get-FileHash
+  if ((Get-FileHash "$TMP_DOWNLOAD_DIR/$distributionUrlName" -Algorithm SHA256).Hash.ToLower() -ne $distributionSha256Sum) {
+    Write-Error "Error: Failed to validate Maven distribution SHA-256, your Maven distribution might be compromised. If you updated your Maven version, you need to update the specified distributionSha256Sum property."
+  }
+}
+
+# unzip and move
+Expand-Archive "$TMP_DOWNLOAD_DIR/$distributionUrlName" -DestinationPath "$TMP_DOWNLOAD_DIR" | Out-Null
+
+# Find the actual extracted directory name (handles snapshots where filename != directory name)
+$actualDistributionDir = ""
+
+# First try the expected directory name (for regular distributions)
+$expectedPath = Join-Path "$TMP_DOWNLOAD_DIR" "$distributionUrlNameMain"
+$expectedMvnPath = Join-Path "$expectedPath" "bin/$MVN_CMD"
+if ((Test-Path -Path $expectedPath -PathType Container) -and (Test-Path -Path $expectedMvnPath -PathType Leaf)) {
+  $actualDistributionDir = $distributionUrlNameMain
+}
+
+# If not found, search for any directory with the Maven executable (for snapshots)
+if (!$actualDistributionDir) {
+  Get-ChildItem -Path "$TMP_DOWNLOAD_DIR" -Directory | ForEach-Object {
+    $testPath = Join-Path $_.FullName "bin/$MVN_CMD"
+    if (Test-Path -Path $testPath -PathType Leaf) {
+      $actualDistributionDir = $_.Name
+    }
+  }
+}
+
+if (!$actualDistributionDir) {
+  Write-Error "Could not find Maven distribution directory in extracted archive"
+}
+
+Write-Verbose "Found extracted Maven distribution directory: $actualDistributionDir"
+Rename-Item -Path "$TMP_DOWNLOAD_DIR/$actualDistributionDir" -NewName $MAVEN_HOME_NAME | Out-Null
+try {
+  Move-Item -Path "$TMP_DOWNLOAD_DIR/$MAVEN_HOME_NAME" -Destination $MAVEN_HOME_PARENT | Out-Null
+} catch {
+  if (! (Test-Path -Path "$MAVEN_HOME" -PathType Container)) {
+    Write-Error "fail to move MAVEN_HOME"
+  }
+} finally {
+  try { Remove-Item $TMP_DOWNLOAD_DIR -Recurse -Force | Out-Null }
+  catch { Write-Warning "Cannot remove $TMP_DOWNLOAD_DIR" }
+}
+
+Write-Output "MVN_CMD=$MAVEN_HOME/bin/$MVN_CMD"
@@ -0,0 +1,145 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<project
+	xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"
+>
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>com.drinkool</groupId>
+        <artifactId>drinkool</artifactId>
+        <version>1.5.4</version>
+        <relativePath>../pom.xml</relativePath>
+    </parent>
+
+    <artifactId>gateway-service</artifactId>
+    <packaging>quarkus</packaging>
+
+    <properties>
+        <quarkus.package.jar.enabled>false</quarkus.package.jar.enabled>
+        <skipITs>false</skipITs>
+        <quarkus.native.enabled>true</quarkus.native.enabled>
+        <compiler-plugin.version>3.15.0</compiler-plugin.version>
+        <maven.compiler.release>25</maven.compiler.release>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <project.reporting.outputEncoding
+		>UTF-8</project.reporting.outputEncoding>
+        <quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>
+        <quarkus.platform.group-id
+		>io.quarkus.platform</quarkus.platform.group-id>
+        <quarkus.platform.version>3.32.4</quarkus.platform.version>
+        <skipITs>true</skipITs>
+        <surefire-plugin.version>3.5.4</surefire-plugin.version>
+    </properties>
+
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>${quarkus.platform.artifact-id}</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.bitbucket.b_c</groupId>
+            <artifactId>jose4j</artifactId>
+            <version>0.9.6</version>
+        </dependency>
+        <dependency>
+            <groupId>com.drinkool</groupId>
+            <artifactId>lib</artifactId>
+            <version>${project.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-arc</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-container-image-docker</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest-client-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-junit</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.rest-assured</groupId>
+            <artifactId>rest-assured</artifactId>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>quarkus-maven-plugin</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <extensions>true</extensions>
+            </plugin>
+            <plugin>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>${compiler-plugin.version}</version>
+                <configuration>
+                    <parameters>true</parameters>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-surefire-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                    <forkCount>1</forkCount>
+                    <reuseForks>true</reuseForks>
+                    <redirectTestOutputToFile>true</redirectTestOutputToFile>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-failsafe-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>integration-test</goal>
+                            <goal>verify</goal>
+                        </goals>
+                    </execution>
+                </executions>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <native.image.path>
+                            ${project.build.directory}/${project.build.finalName}-runner</native.image.path>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+</project>
@@ -0,0 +1,100 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.jvm -t quarkus/gateway-service-jvm .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service-jvm
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service-jvm
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+# We make four distinct layers so if there are application changes the library layers can be re-used
+COPY --chown=185 target/quarkus-app/lib/ /deployments/lib/
+COPY --chown=185 target/quarkus-app/*.jar /deployments/
+COPY --chown=185 target/quarkus-app/app/ /deployments/app/
+COPY --chown=185 target/quarkus-app/quarkus/ /deployments/quarkus/
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
+
@@ -0,0 +1,96 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dquarkus.package.jar.type=legacy-jar
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.legacy-jar -t quarkus/gateway-service-legacy-jar .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service-legacy-jar
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service-legacy-jar
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+COPY target/lib/* /deployments/lib/
+COPY target/*-runner.jar /deployments/quarkus-run.jar
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
@@ -0,0 +1,29 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dnative
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.native -t quarkus/gateway-service .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service
+#
+# The ` registry.access.redhat.com/ubi9/ubi-minimal:9.7` base image is based on UBI 9.
+# To use UBI 8, switch to `quay.io/ubi8/ubi-minimal:8.10`.
+###
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7
+WORKDIR /work/
+RUN chown 1001 /work \
+    && chmod "g+rwX" /work \
+    && chown 1001:root /work
+COPY --chown=1001:root --chmod=0755 target/*-runner /work/application
+
+EXPOSE 8080
+USER 1001
+
+ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
@@ -0,0 +1,32 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
+# It uses a micro base image, tuned for Quarkus native executables.
+# It reduces the size of the resulting container image.
+# Check https://quarkus.io/guides/quarkus-runtime-base-image for further information about this image.
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dnative
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.native-micro -t quarkus/gateway-service .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service
+#
+# The `quay.io/quarkus/ubi9-quarkus-micro-image:2.0` base image is based on UBI 9.
+# To use UBI 8, switch to `quay.io/quarkus/quarkus-micro-image:2.0`.
+###
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
+WORKDIR /work/
+RUN chown 1001 /work \
+    && chmod "g+rwX" /work \
+    && chown 1001:root /work
+COPY --chown=1001:root --chmod=0755 target/*-runner /work/application
+
+EXPOSE 8080
+USER 1001
+
+ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
@@ -0,0 +1,36 @@
+package com.drinkool.controller;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import com.drinkool.services.CustomerService;
+import io.smallrye.mutiny.Uni;
+import jakarta.inject.Inject;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.Response;
+import java.util.*;
+import org.eclipse.microprofile.rest.client.inject.RestClient;
+
+@Path("/api/" + Role.Customer)
+public class CustomerController {
+
+	@Inject
+	@RestClient
+	CustomerService accountService;
+
+	@POST
+	@Path(Url.Signup)
+	public Uni<Response> proxySignup(Signup input) {
+		return accountService.signup(input);
+	}
+
+	@POST
+	@Path(Url.Login)
+	public Uni<Response> proxyLogin(Login input) {
+		return accountService.login(input);
+	}
+
+	@GET
+	public Uni<Response> me(@HeaderParam(InternalValue.userId) UUID id) {
+		return accountService.me(id);
+	}
+}
@@ -0,0 +1,131 @@
+package com.drinkool.filters;
+
+import com.drinkool.InternalValue;
+import io.smallrye.mutiny.Uni;
+import jakarta.ws.rs.Priorities;
+import jakarta.ws.rs.container.*;
+import jakarta.ws.rs.core.*;
+import java.util.*;
+import org.eclipse.microprofile.config.inject.ConfigProperty;
+import org.jboss.resteasy.reactive.server.ServerRequestFilter;
+import org.jboss.resteasy.reactive.server.ServerResponseFilter;
+import org.jose4j.jws.AlgorithmIdentifiers;
+import org.jose4j.jws.JsonWebSignature;
+import org.jose4j.jwt.JwtClaims;
+import org.jose4j.jwt.consumer.JwtConsumer;
+import org.jose4j.jwt.consumer.JwtConsumerBuilder;
+import org.jose4j.keys.HmacKey;
+
+public class InternalHeaderGatewayFilter {
+
+	@ConfigProperty(name = "gateway.jwt.secret")
+	String SECRET_KEY;
+
+	private boolean isSystemClaim(String key) {
+		return List.of("iss", "sub", "aud", "exp", "nbf", "iat", "jti").contains(
+			key
+		);
+	}
+
+	@ServerRequestFilter(preMatching = true)
+	public Uni<Response> handleRequestHeaders(
+		ContainerRequestContext requestContext
+	) {
+		requestContext
+			.getHeaders()
+			.keySet()
+			.removeIf(
+				key ->
+					key.equalsIgnoreCase(InternalValue.headerId) ||
+					key.toLowerCase().startsWith(InternalValue.headerId.toLowerCase())
+			);
+
+		Map<String, Cookie> cookies = requestContext.getCookies();
+		Cookie authCookie = cookies.get(InternalValue.cookieName);
+
+		if (authCookie == null) return Uni.createFrom().nullItem();
+
+		return Uni.createFrom().item(() -> {
+			try {
+				String token = authCookie.getValue();
+
+				JwtConsumer jwtConsumer = new JwtConsumerBuilder()
+					.setRequireExpirationTime()
+					.setVerificationKey(new HmacKey(SECRET_KEY.getBytes()))
+					.build();
+
+				JwtClaims claims = jwtConsumer.processToClaims(token);
+
+				Map<String, Object> allClaims = claims.getClaimsMap();
+
+				allClaims.forEach((key, value) -> {
+					if (!isSystemClaim(key) && value != null) {
+						String headerName = InternalValue.headerId + (key);
+
+						requestContext.getHeaders().add(headerName, value.toString());
+					}
+				});
+			} catch (Exception e) {
+				return Response.status(Response.Status.UNAUTHORIZED)
+					.entity("InvalidToken")
+					.build();
+			}
+
+			return null;
+		});
+	}
+
+	@ServerResponseFilter(priority = Priorities.USER + 100)
+	public void handleResponseHeaders(ContainerResponseContext responseContext) {
+		JwtClaims claims = new JwtClaims();
+		boolean hasInternalData = false;
+
+		MultivaluedMap<String, Object> headers = responseContext.getHeaders();
+
+		List<String> keysToRemove = new ArrayList<>();
+
+		for (String key : headers.keySet()) {
+			if (key.toLowerCase().startsWith(InternalValue.headerId.toLowerCase())) {
+				Object value = headers.getFirst(key);
+				if (value != null) {
+					String claimKey = key.substring(InternalValue.headerId.length());
+					claims.setClaim(claimKey, value.toString());
+					hasInternalData = true;
+				}
+				keysToRemove.add(key);
+			}
+		}
+
+		for (String key : keysToRemove) {
+			headers.remove(key);
+		}
+
+		if (hasInternalData) {
+			try {
+				claims.setExpirationTimeMinutesInTheFuture(60);
+				claims.setGeneratedJwtId();
+				claims.setIssuedAtToNow();
+
+				JsonWebSignature jws = new JsonWebSignature();
+				jws.setPayload(claims.toJson());
+				jws.setKey(new HmacKey(SECRET_KEY.getBytes()));
+				jws.setAlgorithmHeaderValue(AlgorithmIdentifiers.HMAC_SHA256);
+
+				String jwt = jws.getCompactSerialization();
+
+				NewCookie jwtCookie = new NewCookie.Builder(InternalValue.cookieName)
+					.value(jwt)
+					.path("/")
+					.httpOnly(true)
+					.secure(true)
+					.sameSite(NewCookie.SameSite.STRICT)
+					.maxAge(3600)
+					.build();
+
+				headers.add(HttpHeaders.SET_COOKIE, jwtCookie);
+			} catch (Exception e) {
+				e.printStackTrace();
+			}
+		}
+	}
+}
@@ -0,0 +1,33 @@
+package com.drinkool.services;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import io.smallrye.mutiny.Uni;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.Response;
+import java.util.*;
+import org.eclipse.microprofile.rest.client.inject.RegisterRestClient;
+
+@RegisterRestClient(configKey = "account")
+@Path(Role.Customer)
+public interface CustomerService {
+	@POST
+	@Path(Url.Signup)
+	Uni<Response> signup(Signup input);
+
+	@POST
+	@Path(Url.QuickSignup)
+	Uni<Response> quickSignup(QuickSignup input);
+
+	@POST
+	@Path(Url.Login)
+	Uni<Response> login(Login input);
+
+	@POST
+	@Path(Url.QuickLogin)
+	Uni<Response> quickLogin(QuickSignup input);
+
+	@GET
+	@Path(Url.Me)
+	Uni<Response> me(@HeaderParam(InternalValue.userId) UUID id);
+}
@@ -0,0 +1,13 @@
+# Docker
+quarkus.container-image.registry=vps.demonkernel.io.vn
+quarkus.container-image.group=foodsurf
+quarkus.container-image.name=gateway-service
+quarkus.container-image.push=true
+quarkus.container-image.build=true
+quarkus.container-image.builder=docker
+quarkus.container-image.additional-tags=latest
+
+# Build
+quarkus.native.container-build=true
+quarkus.native.remote-container-build=true
+quarkus.native.additional-build-args=--future-defaults=all
@@ -0,0 +1,97 @@
+package com.drinkool.filters;
+
+import static io.restassured.RestAssured.*;
+import static org.hamcrest.CoreMatchers.*;
+import static org.junit.jupiter.api.Assertions.*;
+
+import com.drinkool.InternalValue;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.response.Response;
+import org.eclipse.microprofile.config.inject.ConfigProperty;
+import org.jose4j.jws.AlgorithmIdentifiers;
+import org.jose4j.jws.JsonWebSignature;
+import org.jose4j.jwt.JwtClaims;
+import org.jose4j.keys.HmacKey;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class InternalHeaderGatewayFilterTest {
+
+	@ConfigProperty(name = "gateway.jwt.secret")
+	String TEST_SECRET;
+
+	private String createTestToken(String userId) throws Exception {
+		JwtClaims claims = new JwtClaims();
+		claims.setExpirationTimeMinutesInTheFuture(10);
+		claims.setClaim("UserId", userId);
+		claims.setClaim("Role", "user");
+
+		JsonWebSignature jws = new JsonWebSignature();
+		jws.setPayload(claims.toJson());
+		jws.setKey(new HmacKey(TEST_SECRET.getBytes()));
+		jws.setAlgorithmHeaderValue(AlgorithmIdentifiers.HMAC_SHA256);
+		return jws.getCompactSerialization();
+	}
+
+	@Test
+	@DisplayName("Nên xóa header X-Internal nếu client tự ý gửi lên")
+	public void testShouldRemoveClentInternalHeaders() {
+		given()
+			.header("X-Internal-userId", "hacker-id")
+			.when()
+			.get("/test-gateway")
+			.then()
+			.statusCode(200)
+			.body(is("not-found")); // Filter phải xóa sạch trước khi vào Resource
+	}
+
+	@Test
+	@DisplayName("Nên trích xuất JWT từ Cookie và gắn vào Header nội bộ")
+	public void testValidJwtInCookie() throws Exception {
+		String token = createTestToken("user123");
+
+		given()
+			.cookie(InternalValue.cookieName, token)
+			.when()
+			.get("/test-gateway")
+			.then()
+			.statusCode(200)
+			.body(is("user123")); // Resource nhận được userId từ Header do Filter gắn vào
+	}
+
+	@Test
+	@DisplayName("Nên trả về 401 nếu JWT sai chữ ký")
+	public void testInvalidSignature() {
+		given()
+			.cookie(InternalValue.cookieName, "invalid.token.string")
+			.when()
+			.get("/test-gateway")
+			.then()
+			.statusCode(401)
+			.body(containsString("InvalidToken"));
+	}
+
+	@Test
+	@DisplayName(
+		"Nên đóng gói X-Internal headers từ service thành JWT gửi về client"
+	)
+	public void testResponseFilterConvertsHeadersToJwt() throws Exception {
+		String token = createTestToken("user123");
+
+		Response response = given()
+			.cookie(InternalValue.cookieName, token)
+			.when()
+			.post("/test-gateway/update")
+			.then()
+			.statusCode(200)
+			.cookie(InternalValue.cookieName) // Kiểm tra có Set-Cookie trả về không
+			.header("X-Internal-newStatus", nullValue()) // Header nội bộ phải bị xóa khỏi response
+			.extract()
+			.response();
+
+		String setCookie = response.getHeader("Set-Cookie");
+		assertTrue(setCookie.contains("HttpOnly"));
+		assertTrue(setCookie.contains("SameSite=Strict"));
+	}
+}
@@ -0,0 +1,28 @@
+package com.drinkool.utils;
+
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.Context;
+import jakarta.ws.rs.core.HttpHeaders;
+import jakarta.ws.rs.core.Response;
+
+@Path("/test-gateway")
+public class TestResource {
+
+	@GET
+	public Response getHeaders(@Context HttpHeaders headers) {
+		// Trả về header nội bộ để chúng ta kiểm tra xem Filter có gắn đúng không
+		String userId = headers.getHeaderString("X-Internal-userId");
+		return Response.ok().entity(userId != null ? userId : "not-found").build();
+	}
+
+	@POST
+	@Path("/update")
+	public Response updateInternal(
+		@HeaderParam("X-Internal-userId") String userId
+	) {
+		// Giả lập service trả về header nội bộ để Gateway đóng gói vào JWT
+		return Response.ok("updated")
+			.header("X-Internal-newStatus", "active")
+			.build();
+	}
+}
@@ -0,0 +1,5 @@
+# Quarkus
+quarkus.http.host=0.0.0.0
+
+# JWT
+gateway.jwt.secret=1uZk07Hqu1316z9YqrcSGPTTJDhMWU1ZhFSLBrDQvmU=
@@ -0,0 +1,208 @@
+# 1. ACCOUNT SERVICE
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: account-deploy
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: account
+  template:
+    metadata:
+      labels:
+        app: account
+    spec:
+      containers:
+        - name: account-pod
+          image: git.demonkernel.io.vn/foodsurf/account-service:1.5.4
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 8080
+          env:
+            - name: QUARKUS_REDIS_HOST
+              value: "redis-service"
+            - name: QUARKUS_DATASOURCE_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: password
+            - name: QUARKUS_DATASOURCE_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: username
+            - name: QUARKUS_DATASOURCE_JDBC_URL
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: url
+          resources:
+            requests:
+              memory: "32Mi"
+              cpu: "50m"
+            limits:
+              memory: "64Mi"
+              cpu: "250m"
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: account-service
+spec:
+  selector:
+    app: account
+  ports:
+    - port: 80
+      targetPort: 8080
+---
+# 2. EATERY SERVICE
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: eatery-deploy
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: eatery
+  template:
+    metadata:
+      labels:
+        app: eatery
+    spec:
+      containers:
+        - name: eatery-pod
+          image: git.demonkernel.io.vn/foodsurf/eatery-service:1.5.4
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 8080
+          env:
+            - name: QUARKUS_DATASOURCE_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: password
+            - name: QUARKUS_DATASOURCE_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: username
+            - name: QUARKUS_DATASOURCE_JDBC_URL
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: url
+          resources:
+            requests:
+              memory: "32Mi"
+              cpu: "50m"
+            limits:
+              memory: "64Mi"
+              cpu: "250m"
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: eatery-service
+spec:
+  selector:
+    app: eatery
+  ports:
+    - port: 80
+      targetPort: 8080
+---
+# 3. GATEWAY SERVICE
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: gateway-deploy
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: gateway
+  template:
+    metadata:
+      labels:
+        app: gateway
+    spec:
+      containers:
+        - name: gateway-pod
+          image: git.demonkernel.io.vn/foodsurf/gateway-service:1.5.4
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 8080
+          env:
+            - name: QUARKUS_REST_CLIENT_ACCOUNT_URL
+              value: "http://account-service"
+            - name: GATEWAY_JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: jwt-secret
+                  key: secret
+          resources:
+            requests:
+              memory: "32Mi"
+              cpu: "50m"
+            limits:
+              memory: "64Mi"
+              cpu: "250m"
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: gateway-service
+spec:
+  type: NodePort
+  selector:
+    app: gateway
+  ports:
+    - port: 80
+      targetPort: 8080
+      nodePort: 32080
+---
+# 4. REDIS
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: redis-deploy
+spec:
+  selector:
+    matchLabels:
+      app: redis
+  template:
+    metadata:
+      labels:
+        app: redis
+    spec:
+      containers:
+        - name: redis-pod
+          image: redis:alpine
+          ports:
+            - containerPort: 6379
+          resources:
+            limits:
+              cpu: "100m"
+              memory: "128Mi"
+            requests:
+              cpu: "20m"
+              memory: "64Mi"
+          command:
+            [
+              "redis-server",
+              "--maxmemory",
+              "96mb",
+              "--maxmemory-policy",
+              "allkeys-lru",
+            ]
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: redis-service
+spec:
+  selector:
+    app: redis
+  ports:
+    - port: 6379
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<project
+	xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"
+>
+  <modelVersion>4.0.0</modelVersion>
+
+  <parent>
+    <groupId>com.drinkool</groupId>
+    <artifactId>drinkool</artifactId>
+    <version>1.5.4</version>
+    <relativePath>../pom.xml</relativePath>
+  </parent>
+
+  <artifactId>lib</artifactId>
+  <properties>
+    <maven.compiler.source>25</maven.compiler.source>
+    <maven.compiler.target>25</maven.compiler.target>
+    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+  </properties>
+
+  <dependencies>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-annotations</artifactId>
+      <version>2.15.2</version>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.persistence</groupId>
+      <artifactId>jakarta.persistence-api</artifactId>
+      <version>3.1.0</version>
+      <scope>provided</scope>
+    </dependency>
+    <dependency>
+      <groupId>io.quarkus</groupId>
+      <artifactId>quarkus-hibernate-orm-panache</artifactId>
+      <version>3.32.4</version>
+      <scope>provided</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.junit.jupiter</groupId>
+      <artifactId>junit-jupiter-api</artifactId>
+      <version>5.10.0</version>
+      <scope>test</scope>
+    </dependency>
+  </dependencies>
+</project>
@@ -0,0 +1,9 @@
+package com.drinkool;
+
+public class InternalValue {
+
+	public static final String cookieName = "auth";
+	public static final String headerId = "X-Internal-";
+	public static final String userId = headerId + "UserId";
+	public static final String role = headerId + "Role";
+}
@@ -0,0 +1,7 @@
+package com.drinkool;
+
+public class Role {
+
+	public static final String Customer = "customer";
+	public static final String Manager = "manager";
+}
@@ -0,0 +1,11 @@
+package com.drinkool;
+
+public class Url {
+
+	public static final String Signup = "/signup";
+	public static final String QuickSignup = "/quick_signup";
+	public static final String Login = "/login";
+	public static final String QuickLogin = "/quick_login";
+	public static final String SmsOtp = "/sms_otp";
+	public static final String Me = "/me";
+}
@@ -0,0 +1,7 @@
+package com.drinkool.dtos;
+
+public class AddInventory {
+
+	public String name;
+	public String unit;
+}
@@ -0,0 +1,6 @@
+package com.drinkool.dtos;
+
+public class ManagerSignup extends Signup {
+
+	public String eateryName;
+}
@@ -0,0 +1,7 @@
+package com.drinkool.dtos;
+
+public class QuickLogin {
+
+	public String phone;
+	public String otp;
+}
@@ -0,0 +1,11 @@
+package com.drinkool.dtos;
+
+import com.drinkool.models.ReviewModel;
+import java.util.UUID;
+
+public class SendReview {
+
+	public UUID reviewerId;
+	public UUID orderId;
+	public ReviewModel review;
+}
@@ -0,0 +1,6 @@
+package com.drinkool.dtos;
+
+public class SmsOtp {
+
+	public String phone;
+}
@@ -0,0 +1,13 @@
+package com.drinkool.entities;
+
+import io.quarkus.hibernate.orm.panache.PanacheEntityBase;
+import jakarta.persistence.*;
+import java.util.UUID;
+
+@MappedSuperclass
+public class BaseEntity extends PanacheEntityBase {
+
+	@Id
+	@GeneratedValue(strategy = GenerationType.UUID)
+	public UUID id;
+}
@@ -0,0 +1,30 @@
+package com.drinkool.models;
+
+import com.drinkool.entities.BaseEntity;
+import jakarta.persistence.*;
+import java.time.LocalDateTime;
+
+@MappedSuperclass
+public class ReviewModel extends BaseEntity {
+
+	@Column
+	public int rating;
+
+	@Column
+	public String comment;
+
+	public ReviewModel(int rating, String comment) {
+		this.rating = rating;
+		this.comment = comment;
+	}
+
+	public ReviewModel() {}
+
+	public ReviewModel(ReviewModel input) {
+		this(input.rating, input.comment);
+	}
+
+	@org.hibernate.annotations.CreationTimestamp
+	@Column(name = "review_date", updatable = false)
+	public LocalDateTime reviewDate;
+}
@@ -15,7 +15,7 @@
 		"@semantic-release/commit-analyzer": "^13.0.1",
 		"@semantic-release/exec": "^7.1.0",
 		"@semantic-release/release-notes-generator": "^14.1.0",
-		"prettier": "^3.8.1",
+		"prettier": "^3.8.2",
 		"prettier-plugin-java": "^2.8.1",
 		"semantic-release": "^25.0.3"
 	}
@@ -9,7 +9,7 @@ importers:
    devDependencies:
      "@prettier/plugin-xml":
        specifier: ^3.4.2
-        version: 3.4.2(prettier@3.8.1)
+        version: 3.4.2(prettier@3.8.2)
      "@saithodev/semantic-release-gitea":
        specifier: ^2.1.0
        version: 2.1.0
@@ -26,11 +26,11 @@ importers:
        specifier: ^14.1.0
        version: 14.1.0(semantic-release@25.0.3)
      prettier:
-        specifier: ^3.8.1
-        version: 3.8.1
+        specifier: ^3.8.2
+        version: 3.8.2
      prettier-plugin-java:
        specifier: ^2.8.1
-        version: 2.8.1(prettier@3.8.1)
+        version: 2.8.1(prettier@3.8.2)
      semantic-release:
        specifier: ^25.0.3
        version: 25.0.3
@@ -395,10 +395,10 @@ packages:
      }
    deprecated: This is a stub types definition. minimatch provides its own type definitions, so you do not need this installed.

-  "@types/node@25.5.0":
+  "@types/node@25.6.0":
    resolution:
      {
-        integrity: sha512-jp2P3tQMSxWugkCUKLRPVUpGaL5MVFwF8RDuSRztfwgN1wmqJeMSbKlnEtQqU8UrhTmzEmZdu2I6v2dpp7XIxw==,
+        integrity: sha512-+qIYRKdNYJwY3vRCZMdJbPLJAtGjQBudzZzdzwQYkEPQd+PJGixUL5QfvCLDaULoLv+RhT3LDkwEfKaAkgSmNQ==,
      }

  "@types/normalize-package-data@2.4.4":
@@ -544,16 +544,16 @@ packages:
        integrity: sha512-VHiNCbI1lKdl44tGrhNfU3lup0Tj/ZBMJB5/2ZbNXRCPuRCO7ed2mgcK4r17y+KB2EfuYuRaVlwNbAeaWGSpbw==,
      }

-  brace-expansion@1.1.12:
+  brace-expansion@1.1.14:
    resolution:
      {
-        integrity: sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==,
+        integrity: sha512-MWPGfDxnyzKU7rNOW9SP/c50vi3xrmrua/+6hfPbCS2ABNWfx24vPidzvC7krjU/RTo235sV776ymlsMtGKj8g==,
      }

-  brace-expansion@5.0.4:
+  brace-expansion@5.0.5:
    resolution:
      {
-        integrity: sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==,
+        integrity: sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==,
      }
    engines: { node: 18 || 20 || >=22 }

@@ -738,10 +738,10 @@ packages:
        integrity: sha512-qj+f8APARXHrM0hraqXYb2/bOVSV4PvJQlNZ/DVj0QrmNM2q2euizkeuVckQ57J+W0mRH6Hvi+k50M4Jul2VRQ==,
      }

-  conventional-changelog-angular@8.3.0:
+  conventional-changelog-angular@8.3.1:
    resolution:
      {
-        integrity: sha512-DOuBwYSqWzfwuRByY9O4oOIvDlkUCTDzfbOgcSbkY+imXXj+4tmrEFao3K+FxemClYfYnZzsvudbwrhje9VHDA==,
+        integrity: sha512-6gfI3otXK5Ph5DfCOI1dblr+kN3FAm5a97hYoQkqNZxOaYa5WKfXH+AnpsmS+iUH2mgVC2Cg2Qw9m5OKcmNrIg==,
      }
    engines: { node: ">=18" }

@@ -760,10 +760,10 @@ packages:
      }
    engines: { node: ">=18" }

-  conventional-commits-parser@6.3.0:
+  conventional-commits-parser@6.4.0:
    resolution:
      {
-        integrity: sha512-RfOq/Cqy9xV9bOA8N+ZH6DlrDR+5S3Mi0B5kACEjESpE+AviIpAptx9a9cFpWCCvgRtWT+0BbUw+e1BZfts9jg==,
+        integrity: sha512-tvRg7FIBNlyPzjdG8wWRlPHQJJHI7DylhtRGeU9Lq+JuoPh5BKpPRX83ZdLrvXuOSu5Eo/e7SzOQhU4Hd2Miuw==,
      }
    engines: { node: ">=18" }
    hasBin: true
@@ -1229,10 +1229,10 @@ packages:
        integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==,
      }

-  handlebars@4.7.8:
+  handlebars@4.7.9:
    resolution:
      {
-        integrity: sha512-vafaFqs8MZkRrSX7sFVUdo3ap/eNiLnb4IakshzvP56X5Nr1iGKAIqdX6tMlm6HcNRIkr6AxO5jFEoJzzpT8aQ==,
+        integrity: sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==,
      }
    engines: { node: ">=0.4.7" }
    hasBin: true
@@ -1589,10 +1589,10 @@ packages:
        integrity: sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==,
      }

-  lodash-es@4.17.23:
+  lodash-es@4.18.1:
    resolution:
      {
-        integrity: sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==,
+        integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==,
      }

  lodash.capitalize@4.2.1:
@@ -1631,10 +1631,10 @@ packages:
        integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==,
      }

-  lodash@4.17.23:
+  lodash@4.18.1:
    resolution:
      {
-        integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==,
+        integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==,
      }

  lowercase-keys@2.0.0:
@@ -1650,10 +1650,10 @@ packages:
        integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==,
      }

-  lru-cache@11.2.7:
+  lru-cache@11.3.3:
    resolution:
      {
-        integrity: sha512-aY/R+aEsRelme17KGQa/1ZSIpLpNYYrhcrepKTZgE+W3WM16YMCaPwOHLHsmopZHELU0Ojin1lPVxKR0MihncA==,
+        integrity: sha512-JvNw9Y81y33E+BEYPr0U7omo+U9AySnsMsEiXgwT6yqd31VQWTLNQqmT4ou5eqPFUrTfIDFta2wKhB1hyohtAQ==,
      }
    engines: { node: 20 || >=22 }

@@ -1758,10 +1758,10 @@ packages:
      }
    engines: { node: ">=8" }

-  minimatch@10.2.4:
+  minimatch@10.2.5:
    resolution:
      {
-        integrity: sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==,
+        integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==,
      }
    engines: { node: 18 || 20 || >=22 }

@@ -1850,10 +1850,10 @@ packages:
      }
    engines: { node: ">=18" }

-  npm@11.12.0:
+  npm@11.12.1:
    resolution:
      {
-        integrity: sha512-xPhOap4ZbJWyd7DAOukP564WFwNSGu/2FeTRFHhiiKthcauxhH/NpkJAQm24xD+cAn8av5tQ00phi98DqtfLsg==,
+        integrity: sha512-zcoUuF1kezGSAo0CqtvoLXX3mkRqzuqYdL6Y5tdo8g69NVV3CkjQ6ZBhBgB4d7vGkPcV6TcvLi3GRKPDFX+xTA==,
      }
    engines: { node: ^20.17.0 || >=22.9.0 }
    hasBin: true
@@ -2136,17 +2136,17 @@ packages:
        integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==,
      }

-  picomatch@2.3.1:
+  picomatch@2.3.2:
    resolution:
      {
-        integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==,
+        integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==,
      }
    engines: { node: ">=8.6" }

-  picomatch@4.0.3:
+  picomatch@4.0.4:
    resolution:
      {
-        integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==,
+        integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==,
      }
    engines: { node: ">=12" }

@@ -2172,10 +2172,10 @@ packages:
    peerDependencies:
      prettier: ^3.0.0

-  prettier@3.8.1:
+  prettier@3.8.2:
    resolution:
      {
-        integrity: sha512-UOnG6LftzbdaHZcKoPFtOcCKztrQ57WkHDeRD9t/PTQtmT0NHSeWWepj6pS0z/N7+08BHFDQVUrfmfMRcZwbMg==,
+        integrity: sha512-8c3mgTe0ASwWAJK+78dpviD+A8EqhndQPUBpNUIPt6+xWlIigCwfN01lWr9MAede4uqXGTEKeQWTvzb3vjia0Q==,
      }
    engines: { node: ">=14" }
    hasBin: true
@@ -2570,10 +2570,10 @@ packages:
      }
    engines: { node: ">=12" }

-  tinyglobby@0.2.15:
+  tinyglobby@0.2.16:
    resolution:
      {
-        integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==,
+        integrity: sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==,
      }
    engines: { node: ">=12.0.0" }

@@ -2648,10 +2648,10 @@ packages:
    engines: { node: ">=0.8.0" }
    hasBin: true

-  undici-types@7.18.2:
+  undici-types@7.19.2:
    resolution:
      {
-        integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==,
+        integrity: sha512-qYVnV5OEm2AW8cJMCpdV20CDyaN3g0AjDlOGf1OW4iaDEx8MwdtChUp4zu4H0VP3nDRF/8RKWH+IPp9uW0YGZg==,
      }

  undici@6.24.1:
@@ -2661,10 +2661,10 @@ packages:
      }
    engines: { node: ">=18.17" }

-  undici@7.24.5:
+  undici@7.24.8:
    resolution:
      {
-        integrity: sha512-3IWdCpjgxp15CbJnsi/Y9TCDE7HWVN19j1hmzVhoAkY/+CJx449tVxT5wZc1Gwg8J+P0LWvzlBzxYRnHJ+1i7Q==,
+        integrity: sha512-6KQ/+QxK49Z/p3HO6E5ZCZWNnCasyZLa5ExaVYyvPxUwKtbCPMKELJOqh7EqOle0t9cH/7d2TaaTRRa6Nhs4YQ==,
      }
    engines: { node: ">=20.18.1" }

@@ -2966,10 +2966,10 @@ snapshots:
      "@pnpm/network.ca-file": 1.0.2
      config-chain: 1.1.13

-  "@prettier/plugin-xml@3.4.2(prettier@3.8.1)":
+  "@prettier/plugin-xml@3.4.2(prettier@3.8.2)":
    dependencies:
      "@xml-tools/parser": 1.0.11
-      prettier: 3.8.1
+      prettier: 3.8.2

  "@saithodev/semantic-release-gitea@2.1.0":
    dependencies:
@@ -2981,7 +2981,7 @@ snapshots:
      fs-extra: 8.1.0
      globby: 10.0.2
      got: 10.7.0
-      lodash: 4.17.23
+      lodash: 4.18.1
      querystring: 0.2.1
      url-join: 4.0.1
    transitivePeerDependencies:
@@ -2994,18 +2994,18 @@ snapshots:
      "@semantic-release/error": 3.0.0
      aggregate-error: 3.1.0
      fs-extra: 11.3.4
-      lodash: 4.17.23
+      lodash: 4.18.1
      semantic-release: 25.0.3

  "@semantic-release/commit-analyzer@13.0.1(semantic-release@25.0.3)":
    dependencies:
-      conventional-changelog-angular: 8.3.0
+      conventional-changelog-angular: 8.3.1
      conventional-changelog-writer: 8.4.0
      conventional-commits-filter: 5.0.0
-      conventional-commits-parser: 6.3.0
+      conventional-commits-parser: 6.4.0
      debug: 4.4.3
      import-from-esm: 2.0.0
-      lodash-es: 4.17.23
+      lodash-es: 4.18.1
      micromatch: 4.0.8
      semantic-release: 25.0.3
    transitivePeerDependencies:
@@ -3023,7 +3023,7 @@ snapshots:
      aggregate-error: 3.1.0
      debug: 4.4.3
      execa: 9.6.1
-      lodash-es: 4.17.23
+      lodash-es: 4.18.1
      parse-json: 8.3.0
      semantic-release: 25.0.3
    transitivePeerDependencies:
@@ -3042,12 +3042,12 @@ snapshots:
      http-proxy-agent: 7.0.2
      https-proxy-agent: 7.0.6
      issue-parser: 7.0.1
-      lodash-es: 4.17.23
+      lodash-es: 4.18.1
      mime: 4.1.0
      p-filter: 4.1.0
      semantic-release: 25.0.3
-      tinyglobby: 0.2.15
-      undici: 7.24.5
+      tinyglobby: 0.2.16
+      undici: 7.24.8
      url-join: 5.0.0
    transitivePeerDependencies:
      - supports-color
@@ -3060,10 +3060,10 @@ snapshots:
      env-ci: 11.2.0
      execa: 9.6.1
      fs-extra: 11.3.4
-      lodash-es: 4.17.23
+      lodash-es: 4.18.1
      nerf-dart: 1.0.0
      normalize-url: 9.0.0
-      npm: 11.12.0
+      npm: 11.12.1
      rc: 1.2.8
      read-pkg: 10.1.0
      registry-auth-token: 5.1.1
@@ -3073,15 +3073,15 @@ snapshots:

  "@semantic-release/release-notes-generator@14.1.0(semantic-release@25.0.3)":
    dependencies:
-      conventional-changelog-angular: 8.3.0
+      conventional-changelog-angular: 8.3.1
      conventional-changelog-writer: 8.4.0
      conventional-commits-filter: 5.0.0
-      conventional-commits-parser: 6.3.0
+      conventional-commits-parser: 6.4.0
      debug: 4.4.3
      get-stream: 7.0.1
      import-from-esm: 2.0.0
      into-stream: 7.0.0
-      lodash-es: 4.17.23
+      lodash-es: 4.18.1
      read-package-up: 11.0.0
      semantic-release: 25.0.3
    transitivePeerDependencies:
@@ -3103,33 +3103,33 @@ snapshots:
    dependencies:
      "@types/http-cache-semantics": 4.2.0
      "@types/keyv": 3.1.4
-      "@types/node": 25.5.0
+      "@types/node": 25.6.0
      "@types/responselike": 1.0.3

  "@types/glob@7.2.0":
    dependencies:
      "@types/minimatch": 6.0.0
-      "@types/node": 25.5.0
+      "@types/node": 25.6.0

  "@types/http-cache-semantics@4.2.0": {}

  "@types/keyv@3.1.4":
    dependencies:
-      "@types/node": 25.5.0
+      "@types/node": 25.6.0

  "@types/minimatch@6.0.0":
    dependencies:
-      minimatch: 10.2.4
+      minimatch: 10.2.5

-  "@types/node@25.5.0":
+  "@types/node@25.6.0":
    dependencies:
-      undici-types: 7.18.2
+      undici-types: 7.19.2

  "@types/normalize-package-data@2.4.4": {}

  "@types/responselike@1.0.3":
    dependencies:
-      "@types/node": 25.5.0
+      "@types/node": 25.6.0

  "@xml-tools/parser@1.0.11":
    dependencies:
@@ -3185,12 +3185,12 @@ snapshots:

  bottleneck@2.19.5: {}

-  brace-expansion@1.1.12:
+  brace-expansion@1.1.14:
    dependencies:
      balanced-match: 1.0.2
      concat-map: 0.0.1

-  brace-expansion@5.0.4:
+  brace-expansion@5.0.5:
    dependencies:
      balanced-match: 4.0.4

@@ -3238,7 +3238,7 @@ snapshots:
  chevrotain-allstar@0.3.1(chevrotain@11.0.3):
    dependencies:
      chevrotain: 11.0.3
-      lodash-es: 4.17.23
+      lodash-es: 4.18.1

  chevrotain@11.0.3:
    dependencies:
@@ -3318,7 +3318,7 @@ snapshots:
      ini: 1.3.8
      proto-list: 1.2.4

-  conventional-changelog-angular@8.3.0:
+  conventional-changelog-angular@8.3.1:
    dependencies:
      compare-func: 2.0.0

@@ -3326,13 +3326,13 @@ snapshots:
    dependencies:
      "@simple-libs/stream-utils": 1.2.0
      conventional-commits-filter: 5.0.0
-      handlebars: 4.7.8
+      handlebars: 4.7.9
      meow: 13.2.0
      semver: 7.7.4

  conventional-commits-filter@5.0.0: {}

-  conventional-commits-parser@6.3.0:
+  conventional-commits-parser@6.4.0:
    dependencies:
      "@simple-libs/stream-utils": 1.2.0
      meow: 13.2.0
@@ -3477,9 +3477,9 @@ snapshots:
    dependencies:
      reusify: 1.1.0

-  fdir@6.5.0(picomatch@4.0.3):
+  fdir@6.5.0(picomatch@4.0.4):
    optionalDependencies:
-      picomatch: 4.0.3
+      picomatch: 4.0.4

  figures@2.0.0:
    dependencies:
@@ -3631,7 +3631,7 @@ snapshots:

  graceful-fs@4.2.11: {}

-  handlebars@4.7.8:
+  handlebars@4.7.9:
    dependencies:
      minimist: 1.2.8
      neo-async: 2.6.2
@@ -3664,7 +3664,7 @@ snapshots:

  hosted-git-info@9.0.2:
    dependencies:
-      lru-cache: 11.2.7
+      lru-cache: 11.3.3

  http-cache-semantics@4.2.0: {}

@@ -3808,7 +3808,7 @@ snapshots:

  lodash-es@4.17.21: {}

-  lodash-es@4.17.23: {}
+  lodash-es@4.18.1: {}

  lodash.capitalize@4.2.1: {}

@@ -3822,13 +3822,13 @@ snapshots:

  lodash@4.17.21: {}

-  lodash@4.17.23: {}
+  lodash@4.18.1: {}

  lowercase-keys@2.0.0: {}

  lru-cache@10.4.3: {}

-  lru-cache@11.2.7: {}
+  lru-cache@11.3.3: {}

  make-asynchronous@1.1.0:
    dependencies:
@@ -3860,7 +3860,7 @@ snapshots:
  micromatch@4.0.8:
    dependencies:
      braces: 3.0.3
-      picomatch: 2.3.1
+      picomatch: 2.3.2

  mime-db@1.52.0: {}

@@ -3876,13 +3876,13 @@ snapshots:

  mimic-response@2.1.0: {}

-  minimatch@10.2.4:
+  minimatch@10.2.5:
    dependencies:
-      brace-expansion: 5.0.4
+      brace-expansion: 5.0.5

  minimatch@3.1.5:
    dependencies:
-      brace-expansion: 1.1.12
+      brace-expansion: 1.1.14

  minimist@1.2.8: {}

@@ -3930,7 +3930,7 @@ snapshots:
      path-key: 4.0.0
      unicorn-magic: 0.3.0

-  npm@11.12.0: {}
+  npm@11.12.1: {}

  object-assign@4.1.1: {}

@@ -4026,9 +4026,9 @@ snapshots:

  picocolors@1.1.1: {}

-  picomatch@2.3.1: {}
+  picomatch@2.3.2: {}

-  picomatch@4.0.3: {}
+  picomatch@4.0.4: {}

  pify@3.0.0: {}

@@ -4037,12 +4037,12 @@ snapshots:
      find-up: 2.1.0
      load-json-file: 4.0.0

-  prettier-plugin-java@2.8.1(prettier@3.8.1):
+  prettier-plugin-java@2.8.1(prettier@3.8.2):
    dependencies:
      java-parser: 3.0.1
-      prettier: 3.8.1
+      prettier: 3.8.2

-  prettier@3.8.1: {}
+  prettier@3.8.2: {}

  pretty-ms@9.3.0:
    dependencies:
@@ -4149,7 +4149,7 @@ snapshots:
      hook-std: 4.0.0
      hosted-git-info: 9.0.2
      import-from-esm: 2.0.0
-      lodash-es: 4.17.23
+      lodash-es: 4.18.1
      marked: 15.0.12
      marked-terminal: 7.3.0(marked@15.0.12)
      micromatch: 4.0.8
@@ -4294,10 +4294,10 @@ snapshots:
    dependencies:
      convert-hrtime: 5.0.0

-  tinyglobby@0.2.15:
+  tinyglobby@0.2.16:
    dependencies:
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4

  to-readable-stream@2.1.0: {}

@@ -4324,11 +4324,11 @@ snapshots:
  uglify-js@3.19.3:
    optional: true

-  undici-types@7.18.2: {}
+  undici-types@7.19.2: {}

  undici@6.24.1: {}

-  undici@7.24.5: {}
+  undici@7.24.8: {}

  unicode-emoji-modifier-base@1.0.0: {}

@@ -7,16 +7,21 @@
  <modelVersion>4.0.0</modelVersion>
  <groupId>com.drinkool</groupId>
  <artifactId>drinkool</artifactId>
-  <version>1.0.0-dev.16</version>
+  <version>1.5.4</version>
  <packaging>pom</packaging>
  <properties>
-    <maven.compiler.source>17</maven.compiler.source>
+    <maven.compiler.source>25</maven.compiler.source>
    <quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>
    <quarkus.platform.group-id>io.quarkus.platform</quarkus.platform.group-id>
    <quarkus.platform.version>3.32.3</quarkus.platform.version>
+
+    <surefire-plugin.version>3.5.4</surefire-plugin.version>
  </properties>
  <modules>
+    <module>lib</module>
+    <module>eatery-service</module>
    <module>account-service</module>
+    <module>gateway-service</module>
  </modules>
  <dependencyManagement>
    <dependencies>
Author	SHA1	Message	Date
TakahashiNguyen	96171d3ec2	fix: missing required parameters (#27 ) Release package / release (push) Successful in 16m8s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #27	2026-04-18 10:22:18 +00:00
gitea-actions	bb8a9c5691	chore: release [ci skip]	2026-04-17 12:12:43 +00:00
TakahashiNguyen	e07ee318a7	fix: connect gateway to customer service (#26 ) Release package / release (push) Successful in 9m5s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #26	2026-04-17 12:03:19 +00:00
gitea-actions	d91b20357a	chore: release [ci skip]	2026-04-17 06:14:34 +00:00
TakahashiNguyen	f1ffc63a5f	fix: better ci script (#25 ) Release package / release (push) Successful in 15m33s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #25	2026-04-17 05:59:35 +00:00
TakahashiNguyen	a97e9ade6e	fix: Resolve runtime issue with native build (#24 ) Release package / release (push) Has been cancelled Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #24	2026-04-17 05:39:21 +00:00
gitea-actions	80ee08757d	chore: release [ci skip]	2026-04-13 08:43:04 +00:00
TakahashiNguyen	d925e0da22	fix(semantic-release): better config (#22 ) Release package / release (push) Successful in 57m40s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #22	2026-04-13 07:45:29 +00:00
TakahashiNguyen	b35b4be62e	fix: include external resources (#21 ) Release package / release (push) Failing after 12m42s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #21	2026-04-13 01:26:24 +00:00
gitea-actions	188c7e24c3	chore: release [ci skip]	2026-04-12 15:17:54 +00:00
TakahashiNguyen	fdcecf8368	fix: better url (#20 ) Release package / release (push) Successful in 50m34s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #20	2026-04-12 14:27:37 +00:00
gitea-actions	9bf7233436	chore: release [ci skip]	2026-04-09 03:28:20 +00:00
TakahashiNguyen	00cc6a0f1f	feat: add jwt authorization (#19 ) Release package / release (push) Failing after 3m18s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #19	2026-04-09 03:05:40 +00:00
gitea-actions	c632504b4f	chore: release [ci skip]	2026-04-08 14:03:21 +00:00
TakahashiNguyen	e77edb0e74	fix: update ci script (#18 ) Release package / release (push) Successful in 35m0s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #18	2026-04-08 13:28:35 +00:00
TakahashiNguyen	be8bdde6cf	ci: better script (#17 ) Release package / release (push) Failing after 15s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #17	2026-04-08 08:48:56 +00:00
TakahashiNguyen	cb9096dd1b	ci: update dependencies (#16 ) Release package / release (push) Failing after 49s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #16	2026-04-08 08:35:50 +00:00
TakahashiNguyen	837f5f595a	feat: init k8s and customer service (#15 ) Release package / release (push) Failing after 2m10s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #15	2026-04-08 08:24:00 +00:00
gitea-actions	dd3c09865f	chore: release [ci skip]	2026-04-01 08:29:21 +00:00
TranHuuDanh	5a7b70145c	feature/danh-dev-new-branch-yeu-cau-viet-anh (#14 ) Release package / release (push) Successful in 10m45s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Co-authored-by: TranHuuDanh <tranhuudanh@demonkernel.io.vn> Co-authored-by: TakahashiNguyen <takahashi.ng@icloud.com> Reviewed-on: #14 Reviewed-by: TakahashiNguyen <takahashi.ng@icloud.com> Co-authored-by: TranHuuDanh <tranhuudanh@noreply.localhost> Co-committed-by: TranHuuDanh <tranhuudanh@noreply.localhost>	2026-04-01 08:20:41 +00:00
TakahashiNguyen	bcbda39ed4	feat(k8s): init (#13 ) Release package / release (push) Failing after 16m12s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #13	2026-03-31 13:15:39 +00:00
gitea-actions	554e8767d8	chore: release [ci skip]	2026-03-31 10:10:39 +00:00
TakahashiNguyen	6938b764fc	chore: add test (#11 ) Release package / release (push) Successful in 3m37s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Co-authored-by: TranHuuDanh <tranhuudanh@demonkernel.io.vn> Reviewed-on: #11	2026-03-31 10:07:49 +00:00
TakahashiNguyen	4ae4fa6f2e	fix: better ci (#10 ) Release package / release (push) Failing after 8m28s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #10	2026-03-30 09:29:43 +00:00
TakahashiNguyen	d9646ab9d1	feat(eatery-service): init menu item (#9 ) Release package / release (push) Failing after 3m24s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #9	2026-03-30 08:46:44 +00:00
TakahashiNguyen	0fa8e37c88	chore(test): update test user model (#7 ) Java CI with Maven / build-and-test (push) Successful in 7m2s Details Release package / release (push) Failing after 12m15s Details Co-authored-by: TranHuuDanh <tranhuudanh@demonkernel.io.vn> Co-authored-by: gitea-actions <actions-user@noreply.git.demonkernel.io.vn> Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #7	2026-03-25 07:45:49 +00:00
TakahashiNg	bfd12e32f9	Merge branch 'main' of https://git.demonkernel.io.vn/FoodSurf/backend Release package / release (push) Successful in 3m14s Details Java CI with Maven / build-and-test (push) Successful in 3m29s Details	2026-03-25 07:24:31 +00:00
TakahashiNg	3fe3540e7f	Mergh origin main branch 'dev-better-ci'	2026-03-25 07:23:59 +00:00
gitea-actions	6931ef71bc	chore: release [ci skip]	2026-03-25 07:17:58 +00:00
TakahashiNg	afda64befb	ci: update Release package / release (push) Successful in 3m26s Details Java CI with Maven / build-and-test (push) Successful in 3m46s Details	2026-03-25 07:15:11 +00:00
TakahashiNg	7faca4e681	ci: update Release package / release (push) Failing after 3m37s Details Java CI with Maven / build-and-test (push) Successful in 3m55s Details	2026-03-25 07:09:37 +00:00
TakahashiNg	2bfd7a1364	ci: test Release package / release (push) Failing after 1m10s Details Java CI with Maven / build-and-test (push) Successful in 3m10s Details	2026-03-25 07:05:44 +00:00
TakahashiNg	1c5bc62d11	ci: update Release package / release (push) Failing after 2m1s Details Java CI with Maven / build-and-test (push) Successful in 3m42s Details	2026-03-25 07:00:06 +00:00
TakahashiNg	dd51dd5f5a	ci: update Release package / release (push) Failing after 3m47s Details Java CI with Maven / build-and-test (push) Successful in 3m51s Details	2026-03-25 06:54:12 +00:00
TakahashiNg	76e4df8384	ci: update Release package / release (push) Failing after 3m33s Details Java CI with Maven / build-and-test (push) Successful in 3m49s Details	2026-03-25 06:44:20 +00:00
TakahashiNguyen	7db7e6de1e	fix: deploy using deploy key (#5 ) Release package / release (push) Successful in 3m1s Details Java CI with Maven / build-and-test (push) Successful in 3m19s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #5	2026-03-25 04:41:50 +00:00
TakahashiNg	910ef30c12	chore: update Release package / release (push) Has been cancelled Details Java CI with Maven / build-and-test (push) Has been cancelled Details	2026-03-25 04:35:20 +00:00
TakahashiNg	3af40b3725	ci: update	2026-03-25 04:31:52 +00:00
TakahashiNg	0eaf52b727	ci: update Release package / release (push) Failing after 1m20s Details Java CI with Maven / build-and-test (push) Successful in 3m9s Details	2026-03-25 04:22:33 +00:00
TakahashiNg	11aab29fe7	ci: update Release package / release (push) Failing after 56s Details Java CI with Maven / build-and-test (push) Successful in 2m48s Details	2026-03-25 04:15:58 +00:00
TakahashiNg	44457d0510	ci: test Java CI with Maven / build-and-test (push) Successful in 4m14s Details Release package / release (push) Failing after 4m25s Details	2026-03-25 04:09:41 +00:00
TakahashiNg	7736761a11	ci: better ssh setup Java CI with Maven / build-and-test (push) Successful in 2m27s Details Release package / release (push) Failing after 58s Details	2026-03-25 04:01:38 +00:00
TakahashiNg	0793e1ceab	Merge branch 'dev-better-ci' of https://git.demonkernel.io.vn/FoodSurf/backend into dev-better-ci Release package / release (push) Failing after 1m3s Details Java CI with Maven / build-and-test (push) Successful in 2m44s Details	2026-03-25 03:57:11 +00:00
TakahashiNg	20f669f3bc	ci: better variable	2026-03-25 03:57:07 +00:00
TakahashiNguyen	232faa6897	Merge branch 'main' into dev-better-ci Release package / release (push) Failing after 23s Details Java CI with Maven / build-and-test (push) Successful in 2m15s Details	2026-03-25 03:53:24 +00:00
TakahashiNg	689a153d7f	chore: update to deploy using deploy key Release package / release (push) Failing after 32s Details Java CI with Maven / build-and-test (push) Has been cancelled Details	2026-03-25 03:49:41 +00:00
TakahashiNguyen	b375feb538	fix: better publish script (#4 ) Release package / release (push) Failing after 4m16s Details Java CI with Maven / build-and-test (push) Successful in 2m53s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #4	2026-03-25 03:33:56 +00:00
TakahashiNg	2af438c308	ci: better publish script Release package / release (push) Has started running Details Java CI with Maven / build-and-test (push) Has been cancelled Details	2026-03-25 03:26:42 +00:00
TakahashiNguyen	cda46248df	feat(eatery-service): init with tests (#3 ) Release package / release (push) Has been cancelled Details Java CI with Maven / build-and-test (push) Has been cancelled Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Co-authored-by: gitea-actions <actions-user@noreply.git.demonkernel.io.vn> Co-authored-by: TranHuuDanh <tranhuudanh@demonkernel.io.vn> Reviewed-on: #3	2026-03-25 02:08:19 +00:00
TakahashiNguyen	a2b9de91f5	feat: init customer authentication (#2 ) Release package / release (push) Failing after 2m57s Details Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Co-authored-by: gitea-actions <actions-user@noreply.git.demonkernel.io.vn> Reviewed-on: #2	2026-03-23 13:21:00 +00:00