chore: release [ci skip]

fix: final commit (#61 )
Co-authored-by: TakahashiNg <83152264+TakahashiNguyen@users.noreply.github.com> Reviewed-on: #61
2026-05-16 03:29:12 +00:00 · 2026-05-15 14:22:35 +00:00 · 2026-05-14 04:22:55 +00:00 · 2026-05-14 03:45:23 +00:00 · 2026-05-13 09:48:14 +00:00 · 2026-05-13 09:24:19 +00:00
163 changed files with 12701 additions and 36 deletions
@@ -0,0 +1,39 @@
+FROM jbangdev/jbang-action:latest AS jbang-provider
+
+FROM node:current-trixie AS base
+
+COPY --from=jbang-provider /jbang /jbang
+
+ENV PATH="/jbang/bin:${PATH}"
+
+ENV PNPM_HOME="/pnpm"
+ENV PATH="$PNPM_HOME:$PATH"
+
+RUN npm install --global pnpm@latest
+
+# Tránh các câu hỏi tương tác trong quá trình cài đặt
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y ca-certificates && apt-get clean
+
+# 1. Cài đặt các công cụ cơ bản
+RUN apt-get update --fix-missing && apt-get install --no-install-recommends --no-install-suggests -y \
+    git \
+    docker-buildx \
+    locales \
+    docker-cli \
+    docker.io \
+    kubectl \
+    openjdk-25-jdk-headless \
+    redis-server \
+    maven \
+    python3-venv
+
+RUN jbang trust add https://repo1.maven.org/maven2/io/quarkus/quarkus-cli/
+RUN jbang app install --fresh --force quarkus@quarkusio
+
+# Fix Locale
+RUN sed -i -e 's/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/' /etc/locale.gen && \
+    locale-gen
+ENV LANG=en_US.UTF-8
+ENV LC_ALL=en_US.UTF-8
@@ -1,33 +1,40 @@
 // For format details, see https://aka.ms/devcontainer.json. For config options, see the
 // README at: https://github.com/devcontainers/templates/tree/main/src/alpine
 {
-	"name": "Alpine",
-	// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
-	"image": "mcr.microsoft.com/devcontainers/base:alpine-3.22",
-	"features": {
-		"ghcr.io/muhmdraouf/devcontainers-features/alpine-apk:0": {
-			"packages": "pnpm",
-			"upgradePackages": true
-		}
+	"build": {
+		"dockerfile": "Dockerfile",
+		"args": {
+			"http_proxy": "http://host.docker.internal:3142"
+		},
+		"options": ["--add-host=host.docker.internal:host-gateway"]
 	},
+	"runArgs": ["--add-host=host.docker.internal:host-gateway"],
+	"mounts": [
+		"source=${localEnv:USERPROFILE}/.kube,target=/root/.kube,type=bind",
+		"source=/var/run/docker.sock,target=/var/run/docker.sock,type=bind"
+	],
+	"remoteUser": "root",
 	"customizations": {
 		"vscode": {
 			"extensions": [
-				"Oracle.oracle-java",
-				"redhat.vscode-quarkus"
+				"redhat.vscode-quarkus",
+				"vscjava.vscode-java-pack",
+				"redhat.vscode-xml",
+				"esbenp.prettier-vscode",
+				"PeterSchmalfeldt.explorer-exclude",
+				"redhat.java",
+				"ryanluker.vscode-coverage-gutters",
+				"ms-python.black-formatter",
+				"ms-python.python"
 			]
 		}
-	}
-
-	// Use 'forwardPorts' to make a list of ports inside the container available locally.
-	// "forwardPorts": [],
-
-	// Use 'postCreateCommand' to run commands after the container is created.
-	// "postCreateCommand": "uname -a",
-
-	// Configure tool-specific properties.
-	// "customizations": {},
-
-	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
-	// "remoteUser": "root"
+	},
+	"containerEnv": {
+		"TESTCONTAINERS_RYUK_DISABLED": "true",
+		"QUARKUS_DEBUG_HOST": "0.0.0.0",
+		"http_proxy": "http://host.docker.internal:3142"
+	},
+	"postStartCommand": "redis-server --daemonize yes",
+	"postCreateCommand": "git config --global --add safe.directory '*'",
+	"forwardPorts": [5005, 8080]
 }
@@ -0,0 +1,86 @@
+name: Release package
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Install dependencies with Proxy
+        env:
+          http_proxy: "http://host.docker.internal:3142"
+          https_proxy: "http://host.docker.internal:3142"
+        run: |
+          # Kiểm tra proxy có hoạt động không
+          echo "Acquire::http::Proxy \"$http_proxy\";" > /etc/apt/apt.conf.d/80proxy
+          apt-get update
+          apt-get install -y --no-install-recommends --no-install-suggests \
+            openjdk-25-jdk-headless docker-cli docker-buildx maven
+
+      - name: Setup SSH Key
+        run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo "${{ secrets.DEPLOY_KEY }}" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+
+          ssh-keyscan -t ed25519 vps.demonkernel.io.vn >> ~/.ssh/known_hosts
+
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.m2/repository
+            **/target/native-image-cache
+            **/target/reports
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-maven-
+
+      - name: Log in to Gitea Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: vps.demonkernel.io.vn
+          username: ${{ github.actor }}
+          password: ${{ secrets.ACCESS_TOKEN }}
+
+      - uses: pnpm/action-setup@v3
+        with:
+          version: latest
+          run_install: false
+          cache: true
+
+      - name: Run Semantic Release
+        env:
+          GITEA_USER: ${{ github.actor }}
+          GITEA_TOKEN: ${{ secrets.ACCESS_TOKEN }}
+        run: |
+          pnpm i
+          pnpm release
+          pnpm format
+
+      - name: Commit & Push Changes
+        run: |
+          if [ -n "$(git status --porcelain)" ]&& [ "${{ github.ref_name }}" = "main" ]; then
+            git config --global user.name "gitea-actions"
+            git config --global user.email "actions-user@noreply.git.demonkernel.io.vn"
+
+            REPO_NAME="${{ gitea.repository }}"
+
+            git remote set-url origin ssh://git@vps.demonkernel.io.vn/${REPO_NAME}.git
+
+            git rm -r --cached .
+            git add .
+            git commit -m "chore: release [ci skip]"
+            
+            git push
+          fi
@@ -0,0 +1,92 @@
+name: Java CI with Maven
+
+on:
+  pull_request:
+    branches:
+      - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  actions: read
+  checks: write
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Install dependencies with Proxy
+        env:
+          http_proxy: "http://host.docker.internal:3142"
+          https_proxy: "http://host.docker.internal:3142"
+        run: |
+          # Kiểm tra proxy có hoạt động không
+          echo "Acquire::http::Proxy \"$http_proxy\";" > /etc/apt/apt.conf.d/80proxy
+          apt-get update
+          apt-get install -y --no-install-recommends --no-install-suggests \
+            openjdk-25-jdk-headless docker-cli docker-buildx zstd maven
+
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.m2/repository
+            **/target/native-image-cache
+            **/target/reports
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-maven-
+
+      - name: Build native with Maven
+        run: |
+          mvn -B clean install -DskipTests -Pnative \
+            -Dquarkus.container-image.push=false
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Install dependencies with Proxy
+        env:
+          http_proxy: "http://host.docker.internal:3142"
+          https_proxy: "http://host.docker.internal:3142"
+        run: |
+          # Kiểm tra proxy có hoạt động không
+          echo "Acquire::http::Proxy \"$http_proxy\";" > /etc/apt/apt.conf.d/80proxy
+          apt-get update
+          apt-get install -y --no-install-recommends --no-install-suggests \
+            openjdk-25-jdk-headless docker-cli docker-buildx zstd maven
+
+      - uses: shogo82148/actions-setup-redis@v1
+        with:
+          redis-version: "7.x"
+
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.m2/repository
+            **/target/native-image-cache
+            **/target/reports
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-maven-
+
+      - name: Run Tests
+        env:
+          TESTCONTAINERS_RYUK_DISABLED: true
+        run: |
+          mvn clean test -Dquarkus.main.run-tests=true
+
+      - name: Publish Test Report
+        uses: dorny/test-reporter@v3
+        if: always()
+        with:
+          name: "JUnit Tests Report"
+          path: "**/target/surefire-reports/*.xml"
+          reporter: java-junit
+          fail-on-error: true
@@ -1,12 +0,0 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for more information:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-# https://containers.dev/guide/dependabot
-
-version: 2
-updates:
- - package-ecosystem: "devcontainers"
-   directory: "/"
-   schedule:
-     interval: weekly
@@ -22,8 +22,8 @@ bin/
 nb-configuration.xml

 # Visual Studio Code
-.vscode
 .factorypath
+*.rdb

 # OSX
 .DS_Store
@@ -43,3 +43,7 @@ nb-configuration.xml
 /.quarkus/cli/plugins/
 # TLS Certificates
 .certs/
+
+# NodeJS
+/node_modules
+/.pnpm-store
@@ -0,0 +1,4 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
+distributionSha256Sum=
@@ -0,0 +1,9 @@
+{
+	"endOfLine": "lf",
+	"printWidth": 80,
+	"singleQuote": false,
+	"tabWidth": 2,
+	"trailingComma": "all",
+	"useTabs": true,
+	"plugins": ["prettier-plugin-java", "@prettier/plugin-xml"]
+}
@@ -0,0 +1,19 @@
+branches:
+  - "main"
+  - name: "dev-*"
+    prerelease: "${name.replace('dev-', '')}"
+    channel: "${name.replace('dev-', '')}"
+
+plugins:
+  - "@semantic-release/commit-analyzer"
+  - "@semantic-release/release-notes-generator"
+  - "@semantic-release/changelog"
+  - - "@semantic-release/exec"
+    - prepareCmd: |
+        mvn versions:set -DnewVersion=${nextRelease.version} &&
+        sed -i "/image:.*-service:/ s|:[^:]*$|:${nextRelease.version}|" k8s/base/*.yaml &&
+        if [ "${branch.name}" = "main" ]; then
+          mvn package -B -Pnative -Dquarkus.container-image.tag=${nextRelease.version} -DskipTests -Ppush
+        fi
+  - - "@saithodev/semantic-release-gitea"
+    - giteaUrl: "https://git.demonkernel.io.vn/"
@@ -0,0 +1,15 @@
+{
+	// Use IntelliSense to learn about possible attributes.
+	// Hover to view descriptions of existing attributes.
+	// For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+	"version": "0.2.0",
+	"configurations": [
+		{
+			"type": "java",
+			"name": "Attach to Quarkus",
+			"request": "attach",
+			"hostName": "localhost",
+			"port": 5005
+		}
+	]
+}
@@ -0,0 +1,17 @@
+{
+	"files.exclude": {
+		"**/.git": true,
+		"**/.svn": true,
+		"**/.hg": true,
+		"**/.DS_Store": true,
+		"**/Thumbs.db": true,
+		"**/target": true,
+		"**/docker": true,
+		"node_modules": true,
+		"**/.mvn": true,
+		"**/venv": true
+	},
+	"explorerExclude.backup": {},
+	"java.compile.nullAnalysis.mode": "automatic",
+	"java.configuration.updateBuildConfiguration": "automatic"
+}
@@ -0,0 +1,337 @@
+## [1.5.32](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.31...v1.5.32) (2026-05-16)
+
+
+### Bug Fixes
+
+* final commit ([#61](https://git.demonkernel.io.vn/FoodSurf/backend/issues/61)) ([aa7bfed](https://git.demonkernel.io.vn/FoodSurf/backend/commit/aa7bfed331be4fb8587bbf4f124170425c523378))
+
+## [1.5.31](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.30...v1.5.31) (2026-05-14)
+
+
+### Bug Fixes
+
+* better shift handler ([#58](https://git.demonkernel.io.vn/FoodSurf/backend/issues/58)) ([c4dce6f](https://git.demonkernel.io.vn/FoodSurf/backend/commit/c4dce6f670a7365ba819fa79aada3c834bfeb032))
+
+## [1.5.30](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.29...v1.5.30) (2026-05-13)
+
+
+### Bug Fixes
+
+* better cart response ([#57](https://git.demonkernel.io.vn/FoodSurf/backend/issues/57)) ([5d0a047](https://git.demonkernel.io.vn/FoodSurf/backend/commit/5d0a0476029cee55f8fbe6ec6e9565ca53ee16bc))
+
+## [1.5.29](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.28...v1.5.29) (2026-05-13)
+
+
+### Bug Fixes
+
+* add menu item fields ([#55](https://git.demonkernel.io.vn/FoodSurf/backend/issues/55)) ([dc5bc73](https://git.demonkernel.io.vn/FoodSurf/backend/commit/dc5bc731b3345663d2640a500ecfb77e81929ab2))
+* better graphql response ([#54](https://git.demonkernel.io.vn/FoodSurf/backend/issues/54)) ([d45ed26](https://git.demonkernel.io.vn/FoodSurf/backend/commit/d45ed26a07ca5af39ea63e82a9e6453e4aedf0c4))
+* trigger release version ([#56](https://git.demonkernel.io.vn/FoodSurf/backend/issues/56)) ([e72ccf4](https://git.demonkernel.io.vn/FoodSurf/backend/commit/e72ccf4e960b1623b604c85cbeef54ab8c8d97b3))
+
+## [1.5.30](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.29...v1.5.30) (2026-05-13)
+
+
+### Bug Fixes
+
+* add menu item fields ([#55](https://git.demonkernel.io.vn/FoodSurf/backend/issues/55)) ([dc5bc73](https://git.demonkernel.io.vn/FoodSurf/backend/commit/dc5bc731b3345663d2640a500ecfb77e81929ab2))
+
+## [1.5.28](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.27...v1.5.28) (2026-05-12)
+
+
+### Bug Fixes
+
+* resolved minor issue ([#53](https://git.demonkernel.io.vn/FoodSurf/backend/issues/53)) ([43734b5](https://git.demonkernel.io.vn/FoodSurf/backend/commit/43734b51aafad7f823ff5d34322cc6fb6f4e6699))
+
+## [1.5.27](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.26...v1.5.27) (2026-05-12)
+
+
+### Bug Fixes
+
+* add payment features ([#52](https://git.demonkernel.io.vn/FoodSurf/backend/issues/52)) ([88244cb](https://git.demonkernel.io.vn/FoodSurf/backend/commit/88244cb56f28193cd8cb0da78d5b8d290870284b))
+
+## [1.5.26](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.25...v1.5.26) (2026-05-12)
+
+
+### Bug Fixes
+
+* add shift features ([#51](https://git.demonkernel.io.vn/FoodSurf/backend/issues/51)) ([345d4c0](https://git.demonkernel.io.vn/FoodSurf/backend/commit/345d4c056ccf6ab5f7c455a17e8a3eedfde3ac62))
+* better getCart ([#49](https://git.demonkernel.io.vn/FoodSurf/backend/issues/49)) ([4290f48](https://git.demonkernel.io.vn/FoodSurf/backend/commit/4290f482f4aa74467982cc5aa6293d9d308538d3))
+
+## [1.5.26](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.25...v1.5.26) (2026-05-11)
+
+
+### Bug Fixes
+
+* better getCart ([#49](https://git.demonkernel.io.vn/FoodSurf/backend/issues/49)) ([4290f48](https://git.demonkernel.io.vn/FoodSurf/backend/commit/4290f482f4aa74467982cc5aa6293d9d308538d3))
+
+## [1.5.25](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.24...v1.5.25) (2026-05-10)
+
+
+### Bug Fixes
+
+* add upload images ([#50](https://git.demonkernel.io.vn/FoodSurf/backend/issues/50)) ([c6683b2](https://git.demonkernel.io.vn/FoodSurf/backend/commit/c6683b28dc303ab89b5285be122f570e914ec167))
+
+## [1.5.24](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.23...v1.5.24) (2026-05-07)
+
+
+### Bug Fixes
+
+* add staff entity ([#48](https://git.demonkernel.io.vn/FoodSurf/backend/issues/48)) ([71575ec](https://git.demonkernel.io.vn/FoodSurf/backend/commit/71575ec2ad5fbb402ec9ad17caba4314e0dd0454))
+
+## [1.5.23](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.22...v1.5.23) (2026-05-07)
+
+
+### Bug Fixes
+
+* resolved image issue ([#47](https://git.demonkernel.io.vn/FoodSurf/backend/issues/47)) ([da6f329](https://git.demonkernel.io.vn/FoodSurf/backend/commit/da6f3295ddc8f34836ae7009c2c76e18e414b4df))
+
+## [1.5.22](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.21...v1.5.22) (2026-05-07)
+
+
+### Bug Fixes
+
+* add cart service ([#46](https://git.demonkernel.io.vn/FoodSurf/backend/issues/46)) ([bb828d7](https://git.demonkernel.io.vn/FoodSurf/backend/commit/bb828d7532fb6f849c247376e339c08f0759f91d))
+
+## [1.5.21](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.20...v1.5.21) (2026-05-07)
+
+
+### Bug Fixes
+
+* add send review and get reviews ([#45](https://git.demonkernel.io.vn/FoodSurf/backend/issues/45)) ([e610111](https://git.demonkernel.io.vn/FoodSurf/backend/commit/e610111e667fa17b38095fd5e156ecd6b1c16604))
+
+## [1.5.20](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.19...v1.5.20) (2026-05-06)
+
+
+### Bug Fixes
+
+* menu items CRUD ([#44](https://git.demonkernel.io.vn/FoodSurf/backend/issues/44)) ([43600fc](https://git.demonkernel.io.vn/FoodSurf/backend/commit/43600fc8cfa2cd93e1d33ee855a2934a49f8d663))
+
+## [1.5.19](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.18...v1.5.19) (2026-05-05)
+
+
+### Bug Fixes
+
+* better graphql response type for native ([#43](https://git.demonkernel.io.vn/FoodSurf/backend/issues/43)) ([b401627](https://git.demonkernel.io.vn/FoodSurf/backend/commit/b4016275063da592a6990a86cf8652b81a63c068))
+
+## [1.5.18](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.17...v1.5.18) (2026-05-04)
+
+
+### Bug Fixes
+
+* better role authorized ([#41](https://git.demonkernel.io.vn/FoodSurf/backend/issues/41)) ([9711ea0](https://git.demonkernel.io.vn/FoodSurf/backend/commit/9711ea045e70159d577922fe2d54324ca8f00e5e))
+* resolved minor issues ([#42](https://git.demonkernel.io.vn/FoodSurf/backend/issues/42)) ([be90005](https://git.demonkernel.io.vn/FoodSurf/backend/commit/be900051152ca61ac0ca1c6672e8f89339df7e7b))
+
+## [1.5.17](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.16...v1.5.17) (2026-04-28)
+
+
+### Bug Fixes
+
+* better graphql handler ([#40](https://git.demonkernel.io.vn/FoodSurf/backend/issues/40)) ([89c4967](https://git.demonkernel.io.vn/FoodSurf/backend/commit/89c496786381bbe8601ea0ee9c38b8700549b704))
+
+## [1.5.16](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.15...v1.5.16) (2026-04-28)
+
+
+### Bug Fixes
+
+* better manager response ([#39](https://git.demonkernel.io.vn/FoodSurf/backend/issues/39)) ([5434445](https://git.demonkernel.io.vn/FoodSurf/backend/commit/5434445a4c8be08c990e84d4162479ffacd34147))
+
+## [1.5.15](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.14...v1.5.15) (2026-04-26)
+
+
+### Bug Fixes
+
+* merge customer and manager login ([#38](https://git.demonkernel.io.vn/FoodSurf/backend/issues/38)) ([e60c0b8](https://git.demonkernel.io.vn/FoodSurf/backend/commit/e60c0b89b924c913d1827ebdcfae536cd9e1cde9))
+
+## [1.5.14](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.13...v1.5.14) (2026-04-26)
+
+
+### Bug Fixes
+
+* add menu creation and query ([#37](https://git.demonkernel.io.vn/FoodSurf/backend/issues/37)) ([c9d6439](https://git.demonkernel.io.vn/FoodSurf/backend/commit/c9d6439cf8839bd20190d4ae3f410763052781e9))
+
+## [1.5.13](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.12...v1.5.13) (2026-04-23)
+
+
+### Bug Fixes
+
+* better release script ([#36](https://git.demonkernel.io.vn/FoodSurf/backend/issues/36)) ([0170bab](https://git.demonkernel.io.vn/FoodSurf/backend/commit/0170bab3de49d8ffd544b3b87f5d5dc7b644b1c3))
+
+## [1.5.10](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.9...v1.5.10) (2026-04-20)
+
+
+### Bug Fixes
+
+* add field role for user model ([#32](https://git.demonkernel.io.vn/FoodSurf/backend/issues/32)) ([6eb075c](https://git.demonkernel.io.vn/FoodSurf/backend/commit/6eb075c4b51a345aa5a5438a5d3ef9dec27dcc2c))
+
+## [1.5.9](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.8...v1.5.9) (2026-04-20)
+
+
+### Bug Fixes
+
+* better redis connection ([#31](https://git.demonkernel.io.vn/FoodSurf/backend/issues/31)) ([b7bf016](https://git.demonkernel.io.vn/FoodSurf/backend/commit/b7bf0164e6a4a7f37324c4cdab5c8e6158e81615))
+
+## [1.5.8](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.7...v1.5.8) (2026-04-19)
+
+
+### Bug Fixes
+
+* add sms otp protocol ([#30](https://git.demonkernel.io.vn/FoodSurf/backend/issues/30)) ([a5359db](https://git.demonkernel.io.vn/FoodSurf/backend/commit/a5359db271fc020dfc579fb62c2aa468852070a8))
+
+## [1.5.7](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.6...v1.5.7) (2026-04-19)
+
+
+### Bug Fixes
+
+* add logout, quick signup and quick login ([#29](https://git.demonkernel.io.vn/FoodSurf/backend/issues/29)) ([4811934](https://git.demonkernel.io.vn/FoodSurf/backend/commit/4811934b84f7684410297a8f7d1f7ff14611a25a))
+
+## [1.5.6](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.5...v1.5.6) (2026-04-19)
+
+
+### Bug Fixes
+
+* response exceptions from sub services ([#28](https://git.demonkernel.io.vn/FoodSurf/backend/issues/28)) ([24df313](https://git.demonkernel.io.vn/FoodSurf/backend/commit/24df313c0f7effeacd89e537896d7ac9452ec526))
+
+## [1.5.5](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.4...v1.5.5) (2026-04-18)
+
+
+### Bug Fixes
+
+* missing required parameters ([#27](https://git.demonkernel.io.vn/FoodSurf/backend/issues/27)) ([96171d3](https://git.demonkernel.io.vn/FoodSurf/backend/commit/96171d3ec254f35d4cf8d11ccab53f8922c94412))
+
+## [1.5.4](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.3...v1.5.4) (2026-04-17)
+
+
+### Bug Fixes
+
+* connect gateway to customer service ([#26](https://git.demonkernel.io.vn/FoodSurf/backend/issues/26)) ([e07ee31](https://git.demonkernel.io.vn/FoodSurf/backend/commit/e07ee318a7985d79689f3dc32fea97bb1051e22a))
+
+## [1.5.3](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.2...v1.5.3) (2026-04-17)
+
+
+### Bug Fixes
+
+* better ci script ([#25](https://git.demonkernel.io.vn/FoodSurf/backend/issues/25)) ([f1ffc63](https://git.demonkernel.io.vn/FoodSurf/backend/commit/f1ffc63a5fe3f04b7de622f4df1406ddd977e8aa))
+* Resolve runtime issue with native build ([#24](https://git.demonkernel.io.vn/FoodSurf/backend/issues/24)) ([a97e9ad](https://git.demonkernel.io.vn/FoodSurf/backend/commit/a97e9ade6e20458eb53bdb7ab9d083cef51408fc))
+
+## [1.5.2](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.5.1...v1.5.2) (2026-04-13)
+
+
+### Bug Fixes
+
+* **semantic-release:** better config ([#22](https://git.demonkernel.io.vn/FoodSurf/backend/issues/22)) ([d925e0d](https://git.demonkernel.io.vn/FoodSurf/backend/commit/d925e0da2296c63384651dbe15316ad555b77bee))
+
+# [1.5.0](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.4.0...v1.5.0) (2026-04-12)
+
+
+### Bug Fixes
+
+* better url ([#20](https://git.demonkernel.io.vn/FoodSurf/backend/issues/20)) ([fdcecf8](https://git.demonkernel.io.vn/FoodSurf/backend/commit/fdcecf836876048af2227313165ec2c52d9ede48))
+
+
+### Features
+
+* add jwt authorization ([#19](https://git.demonkernel.io.vn/FoodSurf/backend/issues/19)) ([00cc6a0](https://git.demonkernel.io.vn/FoodSurf/backend/commit/00cc6a0f1f44eab9e081fb54fff36743b5790313))
+
+# [1.4.0](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.3.0...v1.4.0) (2026-04-08)
+
+
+### Bug Fixes
+
+* update ci script ([#18](https://git.demonkernel.io.vn/FoodSurf/backend/issues/18)) ([e77edb0](https://git.demonkernel.io.vn/FoodSurf/backend/commit/e77edb0e7402afaca494221270d2e289dac3448b))
+
+
+### Features
+
+* init k8s and customer service ([#15](https://git.demonkernel.io.vn/FoodSurf/backend/issues/15)) ([837f5f5](https://git.demonkernel.io.vn/FoodSurf/backend/commit/837f5f595a3b1c5ea5e261f60f265834081071ea))
+
+# [1.1.0-dev.1](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0...v1.1.0-dev.1) (2026-03-24)
+
+
+### Features
+
+* add inventory entity, service, test ([5a72c9f](https://git.demonkernel.io.vn/FoodSurf/backend/commit/5a72c9f9e38cd9f00fe3884d9ddc52675324bd31))
+
+# [1.0.0-dev.21](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.20...v1.0.0-dev.21) (2026-03-23)
+
+
+### Features
+
+* add quick login ([87a9886](https://git.demonkernel.io.vn/FoodSurf/backend/commit/87a98867672b1476faad0721a4c3cbc69a1c6136))
+
+# [1.0.0-dev.20](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.19...v1.0.0-dev.20) (2026-03-23)
+
+
+### Bug Fixes
+
+* update release script ([ec6e8e9](https://git.demonkernel.io.vn/FoodSurf/backend/commit/ec6e8e92676160e7d969bef8a860f963f74397ae))
+
+# [1.0.0-dev.18](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.17...v1.0.0-dev.18) (2026-03-23)
+
+
+### Features
+
+* add existed phone number check when signup ([df716e6](https://git.demonkernel.io.vn/FoodSurf/backend/commit/df716e60e4465668f704895b55e155a497d35ed7))
+
+# [1.0.0-dev.17](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.16...v1.0.0-dev.17) (2026-03-23)
+
+
+### Bug Fixes
+
+* better build configuration ([d49482b](https://git.demonkernel.io.vn/FoodSurf/backend/commit/d49482b4bac51d4ebb305bed8cfde670fa70d9ec))
+
+# [1.0.0-dev.16](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.15...v1.0.0-dev.16) (2026-03-23)
+
+
+### Bug Fixes
+
+* better build configuration ([ec25744](https://git.demonkernel.io.vn/FoodSurf/backend/commit/ec2574494239b5660b740f14947134aa4839f2da))
+
+# [1.0.0-dev.12](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.11...v1.0.0-dev.12) (2026-03-22)
+
+
+### Bug Fixes
+
+* test ([8da7877](https://git.demonkernel.io.vn/FoodSurf/backend/commit/8da7877920b552e1e2f325bb40ccb4eb9a9c0907))
+
+# [1.0.0-dev.11](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.10...v1.0.0-dev.11) (2026-03-22)
+
+
+### Bug Fixes
+
+* better act config ([d851a49](https://git.demonkernel.io.vn/FoodSurf/backend/commit/d851a49fc3d831048eae6482aab1b915fb39f6da))
+
+# [1.0.0-dev.10](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.9...v1.0.0-dev.10) (2026-03-22)
+
+
+### Bug Fixes
+
+* test ([4f66008](https://git.demonkernel.io.vn/FoodSurf/backend/commit/4f66008774e1bd338bc94dd58f9500310490d3f2))
+* test ([db13397](https://git.demonkernel.io.vn/FoodSurf/backend/commit/db13397063c80ddf310510152bbdb397d98730b7))
+
+# [1.0.0-dev.9](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.8...v1.0.0-dev.9) (2026-03-22)
+
+
+### Bug Fixes
+
+* test ([ad77a30](https://git.demonkernel.io.vn/FoodSurf/backend/commit/ad77a3022cd9f03749a764b91ee85942f9b696f9))
+
+# [1.0.0-dev.8](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.7...v1.0.0-dev.8) (2026-03-22)
+
+
+### Bug Fixes
+
+* removed ignore file ([9b2d90d](https://git.demonkernel.io.vn/FoodSurf/backend/commit/9b2d90d29003090954b104b54e7ba723c0bae1f7))
+
+# [1.0.0-dev.7](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.6...v1.0.0-dev.7) (2026-03-22)
+
+
+### Bug Fixes
+
+* better image push ([66df448](https://git.demonkernel.io.vn/FoodSurf/backend/commit/66df4488c0fd9b9bda1df72877d7ab6c4a075d84))
+
+# [1.0.0-dev.6](https://git.demonkernel.io.vn/FoodSurf/backend/compare/v1.0.0-dev.5...v1.0.0-dev.6) (2026-03-22)
+
+
+### Bug Fixes
+
+* test ([a320b6c](https://git.demonkernel.io.vn/FoodSurf/backend/commit/a320b6cd162be6f09381698ee1551e7575c33c1c))
@@ -0,0 +1,5 @@
+*
+!target/*-runner
+!target/*-runner.jar
+!target/lib/*
+!target/quarkus-app/*
@@ -0,0 +1,4 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
+distributionSha256Sum=305773a68d6ddfd413df58c82b3f8050e89778e777f3a745c8e5b8cbea4018ef
@@ -0,0 +1,78 @@
+# account-service
+
+This project uses Quarkus, the Supersonic Subatomic Java Framework.
+
+If you want to learn more about Quarkus, please visit its website: <https://quarkus.io/>.
+
+## Running the application in dev mode
+
+You can run your application in dev mode that enables live coding using:
+
+```shell script
+mvn quarkus:dev
+```
+
+> **_NOTE:_**  Quarkus now ships with a Dev UI, which is available in dev mode only at <http://localhost:8080/q/dev/>.
+
+## Packaging and running the application
+
+The application can be packaged using:
+
+```shell script
+mvn package
+```
+
+It produces the `quarkus-run.jar` file in the `target/quarkus-app/` directory.
+Be aware that it’s not an _über-jar_ as the dependencies are copied into the `target/quarkus-app/lib/` directory.
+
+The application is now runnable using `java -jar target/quarkus-app/quarkus-run.jar`.
+
+If you want to build an _über-jar_, execute the following command:
+
+```shell script
+mvn package -Dquarkus.package.jar.type=uber-jar
+```
+
+The application, packaged as an _über-jar_, is now runnable using `java -jar target/*-runner.jar`.
+
+## Creating a native executable
+
+You can create a native executable using:
+
+```shell script
+mvn package -Dnative
+```
+
+Or, if you don't have GraalVM installed, you can run the native executable build in a container using:
+
+```shell script
+mvn package -Dnative -Dquarkus.native.container-build=true
+```
+
+You can then execute your native executable with: `./target/account-service-1.0.0-SNAPSHOT-runner`
+
+If you want to learn more about building native executables, please consult <https://quarkus.io/guides/maven-tooling>.
+
+## Related Guides
+
+- Hibernate ORM with Panache ([guide](https://quarkus.io/guides/hibernate-orm-panache)): Simplify your persistence code for Hibernate ORM via the active record or the repository pattern
+- JDBC Driver - PostgreSQL ([guide](https://quarkus.io/guides/datasource)): Connect to the PostgreSQL database via JDBC
+- REST Jackson ([guide](https://quarkus.io/guides/rest#json-serialisation)): Jackson serialization support for Quarkus REST. This extension is not compatible with the quarkus-resteasy extension, or any of the extensions that depend on it
+
+## Provided Code
+
+### Hibernate ORM
+
+Create your first JPA entity
+
+[Related guide section...](https://quarkus.io/guides/hibernate-orm)
+
+
+[Related Hibernate with Panache section...](https://quarkus.io/guides/hibernate-orm-panache)
+
+
+### REST
+
+Easily start your REST Web Services
+
+[Related guide section...](https://quarkus.io/guides/getting-started-reactive#reactive-jax-rs-resources)
@@ -0,0 +1,201 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<project
+	xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"
+>
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>com.drinkool</groupId>
+        <artifactId>drinkool</artifactId>
+        <version>1.5.32</version>
+        <relativePath>../pom.xml</relativePath>
+    </parent>
+
+    <artifactId>account-service</artifactId>
+    <packaging>quarkus</packaging>
+
+    <properties>
+
+        <compiler-plugin.version>3.15.0</compiler-plugin.version>
+        <maven.compiler.release>25</maven.compiler.release>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <project.reporting.outputEncoding
+		>UTF-8</project.reporting.outputEncoding>
+        <quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>
+        <quarkus.platform.group-id
+		>io.quarkus.platform</quarkus.platform.group-id>
+        <quarkus.platform.version>3.32.4</quarkus.platform.version>
+        <skipITs>true</skipITs>
+        <surefire-plugin.version>3.5.4</surefire-plugin.version>
+    </properties>
+
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>${quarkus.platform.artifact-id}</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
+    <dependencies>
+        <dependency>
+            <groupId>com.drinkool</groupId>
+            <artifactId>lib</artifactId>
+            <version>${project.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>org.bitbucket.b_c</groupId>
+            <artifactId>jose4j</artifactId>
+            <version>0.9.3</version>
+        </dependency>
+        <dependency>
+            <groupId>net.datafaker</groupId>
+            <artifactId>datafaker</artifactId>
+            <version>2.0.2</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-messaging-kafka</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-test-kafka-companion</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-jdbc-h2</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-hibernate-orm-panache</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-jdbc-postgresql</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-arc</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-hibernate-orm</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-container-image-docker</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-redis-client</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-junit</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.rest-assured</groupId>
+            <artifactId>rest-assured</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>com.password4j</groupId>
+            <artifactId>password4j</artifactId>
+            <version>1.8.2</version>
+        </dependency>
+        <dependency>
+            <groupId>com.googlecode.libphonenumber</groupId>
+            <artifactId>libphonenumber</artifactId>
+            <version>8.13.31</version>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>quarkus-maven-plugin</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <extensions>true</extensions>
+            </plugin>
+            <plugin>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>${compiler-plugin.version}</version>
+                <configuration>
+                    <parameters>true</parameters>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-surefire-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                    <forkCount>1</forkCount>
+                    <reuseForks>true</reuseForks>
+                    <redirectTestOutputToFile>true</redirectTestOutputToFile>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-failsafe-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>integration-test</goal>
+                            <goal>verify</goal>
+                        </goals>
+                    </execution>
+                </executions>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <native.image.path>
+                            ${project.build.directory}/${project.build.finalName}-runner</native.image.path>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+
+    <profiles>
+        <profile>
+            <id>native</id>
+            <activation>
+                <property>
+                    <name>native</name>
+                </property>
+            </activation>
+            <properties>
+                <quarkus.package.jar.enabled>false</quarkus.package.jar.enabled>
+                <skipITs>false</skipITs>
+                <quarkus.native.enabled>true</quarkus.native.enabled>
+            </properties>
+        </profile>
+    </profiles>
+</project>
@@ -0,0 +1,100 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.jvm -t quarkus/account-service-jvm .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/account-service-jvm
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/account-service-jvm
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-25-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+# We make four distinct layers so if there are application changes the library layers can be re-used
+COPY --chown=185 target/quarkus-app/lib/ /deployments/lib/
+COPY --chown=185 target/quarkus-app/*.jar /deployments/
+COPY --chown=185 target/quarkus-app/app/ /deployments/app/
+COPY --chown=185 target/quarkus-app/quarkus/ /deployments/quarkus/
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
+
@@ -0,0 +1,96 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dquarkus.package.jar.type=legacy-jar
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.legacy-jar -t quarkus/account-service-legacy-jar .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/account-service-legacy-jar
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/account-service-legacy-jar
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-25-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+COPY target/lib/* /deployments/lib/
+COPY target/*-runner.jar /deployments/quarkus-run.jar
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
@@ -0,0 +1,32 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
+# It uses a micro base image, tuned for Quarkus native executables.
+# It reduces the size of the resulting container image.
+# Check https://quarkus.io/guides/quarkus-runtime-base-image for further information about this image.
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dnative
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.native-micro -t quarkus/account-service .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/account-service
+#
+# The `quay.io/quarkus/ubi9-quarkus-micro-image:2.0` base image is based on UBI 9.
+# To use UBI 8, switch to `quay.io/quarkus/quarkus-micro-image:2.0`.
+###
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
+WORKDIR /work/
+RUN chown 1001 /work \
+    && chmod "g+rwX" /work \
+    && chown 1001:root /work
+COPY --chown=1001:root --chmod=0755 target/*-runner /work/application
+
+EXPOSE 8080
+USER 1001
+
+ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
@@ -0,0 +1,21 @@
+package com.drinkool.entities;
+
+import com.drinkool.Role;
+import com.drinkool.models.UserModel;
+import jakarta.persistence.*;
+import jakarta.transaction.Transactional;
+import java.util.UUID;
+
+@Entity
+@Table(name = Role.Customer)
+public class CustomerEntity extends UserModel {
+
+	public CustomerEntity() {
+		super(Role.Customer);
+	}
+
+	@Transactional
+	public void signup(String phone) {
+		this.signup(phone, phone, UUID.randomUUID().toString().substring(0, 32));
+	}
+}
@@ -0,0 +1,44 @@
+package com.drinkool.entities;
+
+import com.drinkool.Role;
+import com.drinkool.models.UserModel;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import jakarta.persistence.*;
+import jakarta.transaction.Transactional;
+import java.util.ArrayList;
+import java.util.List;
+
+@Entity
+@Table(name = Role.Manager)
+public class ManagerEntity extends UserModel {
+
+	@JsonIgnore
+	@OneToMany(
+		mappedBy = "serve",
+		cascade = CascadeType.ALL,
+		orphanRemoval = true
+	)
+	public List<StaffEntity> staffs = new ArrayList<>();
+
+	@JsonIgnore
+	@Column(nullable = true)
+	public String bankAccount;
+
+	public ManagerEntity() {
+		super(Role.Manager);
+	}
+
+	@Transactional
+	public ManagerEntity signup(
+		String name,
+		String phone,
+		String bankAccount,
+		String rawPassword
+	) {
+		this.bankAccount = bankAccount;
+
+		super.signup(name, phone, rawPassword);
+
+		return this;
+	}
+}
@@ -0,0 +1,34 @@
+package com.drinkool.entities;
+
+import com.drinkool.Role;
+import com.drinkool.models.UserModel;
+import jakarta.persistence.Entity;
+import jakarta.persistence.FetchType;
+import jakarta.persistence.JoinColumn;
+import jakarta.persistence.ManyToOne;
+import jakarta.persistence.Table;
+import jakarta.transaction.Transactional;
+
+@Entity
+@Table(name = Role.Staff)
+public class StaffEntity extends UserModel {
+
+	public StaffEntity() {
+		super(Role.Staff);
+	}
+
+	@Transactional
+	public void signup(
+		String name,
+		String phone,
+		String rawPassword,
+		ManagerEntity serve
+	) {
+		this.serve = serve;
+		super.signup(name, phone, rawPassword);
+	}
+
+	@ManyToOne(fetch = FetchType.LAZY)
+	@JoinColumn(name = "managerId")
+	public ManagerEntity serve;
+}
@@ -0,0 +1,7 @@
+package com.drinkool.filters;
+
+import com.drinkool.BaseHeaderAuthentication;
+import jakarta.enterprise.context.ApplicationScoped;
+
+@ApplicationScoped
+public class HeaderRolesFilter extends BaseHeaderAuthentication {}
@@ -0,0 +1,16 @@
+package com.drinkool.mapper;
+
+import jakarta.ws.rs.BadRequestException;
+import jakarta.ws.rs.core.Response;
+import org.jboss.resteasy.reactive.server.ServerExceptionMapper;
+
+public class ExceptionHandlersMapper {
+
+	@ServerExceptionMapper
+	public Response mapBadRequestException(BadRequestException x) {
+		return Response.status(Response.Status.BAD_REQUEST)
+			.entity(x.getMessage())
+			.type("text/plain")
+			.build();
+	}
+}
@@ -0,0 +1,59 @@
+package com.drinkool.models;
+
+import com.drinkool.entities.BaseEntity;
+import com.drinkool.utils.PhoneValidator;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.password4j.Password;
+import jakarta.persistence.*;
+import jakarta.transaction.*;
+import jakarta.ws.rs.BadRequestException;
+
+@Entity
+@Inheritance(strategy = InheritanceType.JOINED)
+@Table(name = "users")
+public abstract class UserModel extends BaseEntity {
+
+	@Column(nullable = false)
+	public String name;
+
+	@Column(nullable = false)
+	public String phone;
+
+	@Column(nullable = false, length = 1024)
+	@JsonProperty(access = JsonProperty.Access.WRITE_ONLY)
+	public String hashedPassword;
+
+	@Transient
+	public String role;
+
+	protected UserModel(String role) {
+		this.role = role;
+	}
+
+	public UserModel() {}
+
+	@Transactional
+	public void signup(String name, String phone, String rawPassword) {
+		UserModel existedUser = UserModel.find("phone", phone).firstResult();
+
+		if (existedUser != null) throw new BadRequestException("ExistedUser");
+
+		this.name = name;
+
+		if (!PhoneValidator.isValidInternationalPhone(phone)) {
+			throw new BadRequestException("InvalidPhoneNumber");
+		} else {
+			this.phone = phone;
+		}
+
+		this.hashedPassword = Password.hash(rawPassword).withArgon2().getResult();
+
+		this.persist();
+	}
+
+	public boolean login(String rawPassword) {
+		if (this.hashedPassword == null) return false;
+
+		return Password.check(rawPassword, this.hashedPassword).withArgon2();
+	}
+}
@@ -0,0 +1,42 @@
+package com.drinkool.services;
+
+import com.drinkool.Role;
+import com.drinkool.Url;
+import com.drinkool.dtos.SmsOtp;
+import com.drinkool.entities.ManagerEntity;
+import com.drinkool.entities.StaffEntity;
+import com.drinkool.models.UserModel;
+import jakarta.inject.Inject;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.Response;
+
+@Path("/")
+public class AccountService {
+
+	@Inject
+	OtpService otpService;
+
+	@POST
+	@Path(Url.SmsOtp)
+	public Response smsOtp(SmsOtp input) {
+		UserModel customer = UserModel.find("phone", input.phone).firstResult();
+
+		if (customer == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidPhoneNumber")
+			.build();
+
+		if (
+			ManagerEntity.find("phone", input.phone).firstResult() != null
+		) return Response.accepted().entity(Role.Manager).build();
+
+		if (
+			StaffEntity.find("phone", input.phone).firstResult() != null
+		) return Response.accepted().entity(Role.Staff).build();
+
+		String otp = otpService.generateAndSaveOtp(input.phone);
+
+		System.out.println("OTP cho " + input.phone + " là: " + otp);
+
+		return Response.accepted().entity(Role.Customer).build();
+	}
+}
@@ -0,0 +1,30 @@
+package com.drinkool.services;
+
+import com.drinkool.InternalValue;
+import com.drinkool.Url;
+import com.drinkool.models.UserModel;
+import io.quarkus.hibernate.orm.panache.PanacheRepositoryBase;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.Response;
+import java.util.UUID;
+
+public abstract class BaseService<T extends UserModel> {
+
+	private final PanacheRepositoryBase<T, UUID> repository;
+
+	protected BaseService(Class<T> entityClass) {
+		this.repository = new PanacheRepositoryBase<T, UUID>() {};
+	}
+
+	@GET
+	@Path(Url.Me)
+	@Transactional
+	public Response me(@HeaderParam(InternalValue.userId) UUID id) {
+		if (id == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidUserId")
+			.build();
+
+		return Response.ok(repository.findById(id)).build();
+	}
+}
@@ -0,0 +1,98 @@
+package com.drinkool.services;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import com.drinkool.entities.CustomerEntity;
+import jakarta.inject.Inject;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.*;
+import java.util.UUID;
+
+@Path(Role.Customer)
+public class CustomerService extends BaseService<CustomerEntity> {
+
+	@Inject
+	OtpService otpService;
+
+	public CustomerService() {
+		super(CustomerEntity.class);
+	}
+
+	@POST
+	@Path(Url.Signup)
+	@Transactional
+	public Response signup(Signup input) {
+		CustomerEntity newCustomer = new CustomerEntity();
+
+		newCustomer.signup(input.name, input.phone, input.password);
+
+		return Response.status(Response.Status.CREATED)
+			.header(InternalValue.userId, newCustomer.id.toString())
+			.header(InternalValue.role, Role.Customer)
+			.entity(newCustomer)
+			.build();
+	}
+
+	@POST
+	@Path(Url.QuickSignup)
+	@Transactional
+	public Response quickSignup(QuickSignup input) {
+		CustomerEntity newCustomer = new CustomerEntity();
+
+		newCustomer.signup(input.phone);
+
+		return Response.status(Response.Status.CREATED).build();
+	}
+
+	@POST
+	@Path(Url.Login)
+	public Response login(Login input) {
+		CustomerEntity customer = CustomerEntity.find(
+			"phone",
+			input.phone
+		).firstResult();
+
+		if (customer == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidPhoneNumber")
+			.build();
+
+		if (!customer.login(input.password)) return Response.status(
+			Response.Status.BAD_REQUEST
+		)
+			.entity("InvalidPassword")
+			.build();
+
+		return Response.accepted()
+			.header(InternalValue.userId, customer.id.toString())
+			.header(InternalValue.role, Role.Customer)
+			.build();
+	}
+
+	@POST
+	@Path(Url.QuickLogin)
+	public Response quickLogin(QuickLogin input) {
+		if (!otpService.verifyOtp(input.phone, input.otp)) {
+			return Response.status(Response.Status.UNAUTHORIZED)
+				.entity("InvalidOTP")
+				.build();
+		}
+
+		CustomerEntity customer = CustomerEntity.find(
+			"phone",
+			input.phone
+		).firstResult();
+
+		return Response.accepted()
+			.header(InternalValue.userId, customer.id.toString())
+			.header(InternalValue.role, Role.Customer)
+			.entity(customer)
+			.build();
+	}
+
+	@GET
+	@Path("/{id}")
+	public Response findStaff(@PathParam("id") UUID staffId) {
+		return Response.ok(CustomerEntity.findById(staffId)).build();
+	}
+}
@@ -0,0 +1,110 @@
+package com.drinkool.services;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import com.drinkool.dtos.event.ManagerCreate;
+import com.drinkool.entities.ManagerEntity;
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.*;
+import jakarta.ws.rs.core.*;
+import java.util.UUID;
+import org.eclipse.microprofile.reactive.messaging.*;
+
+@Path(Role.Manager)
+@ApplicationScoped
+public class ManagerService extends BaseService<ManagerEntity> {
+
+	public ManagerService() {
+		super(ManagerEntity.class);
+	}
+
+	@Channel("manager-out")
+	Emitter<ManagerCreate> managerEmitter;
+
+	@POST
+	@Path(Url.Signup)
+	@Transactional
+	public Response signup(ManagerSignup input) {
+		if (ManagerEntity.count() > 0) return Response.status(
+			Response.Status.BAD_REQUEST
+		).build();
+
+		ManagerEntity newManager = new ManagerEntity();
+
+		newManager.signup(
+			input.name,
+			input.phone,
+			input.bankAccount,
+			input.password
+		);
+
+		ManagerCreate message = new ManagerCreate();
+		message.id = newManager.id;
+		message.eateryName = input.eateryName;
+
+		managerEmitter.send(message);
+
+		return Response.status(Response.Status.CREATED)
+			.header(InternalValue.userId, newManager.id.toString())
+			.header(InternalValue.role, Role.Manager)
+			.build();
+	}
+
+	@POST
+	@Path(Url.Login)
+	public Response login(Login input) {
+		ManagerEntity manager = ManagerEntity.find(
+			"phone",
+			input.phone
+		).firstResult();
+
+		if (manager == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidPhoneNumber")
+			.build();
+
+		if (!manager.login(input.password)) return Response.status(
+			Response.Status.BAD_REQUEST
+		)
+			.entity("InvalidPassword")
+			.build();
+
+		return Response.accepted()
+			.entity(manager)
+			.header(InternalValue.userId, manager.id.toString())
+			.header(InternalValue.role, Role.Manager)
+			.build();
+	}
+
+	@GET
+	@Path("/{id}/payment-qr")
+	public Response getManagerPaymentQr(
+		@PathParam("id") UUID id,
+		@QueryParam("amount") Long amount,
+		@QueryParam("cartId") String cartId
+	) {
+		ManagerEntity manager = ManagerEntity.findById(id);
+		if (manager == null) {
+			return Response.status(Response.Status.BAD_REQUEST)
+				.entity("ManagerNotFound")
+				.build();
+		}
+
+		if (manager.bankAccount == null || manager.bankAccount.isEmpty()) {
+			return Response.status(Response.Status.BAD_REQUEST)
+				.entity("ManagerHasNotConfiguredBankInfo")
+				.build();
+		}
+
+		String description = cartId;
+
+		return Response.ok(
+			String.format(
+				"https://img.vietqr.io/image/%s-compact.png?amount=%d&addInfo=%s",
+				manager.bankAccount,
+				amount,
+				description
+			)
+		).build();
+	}
+}
@@ -0,0 +1,39 @@
+package com.drinkool.services;
+
+import io.quarkus.redis.datasource.RedisDataSource;
+import io.quarkus.redis.datasource.value.ValueCommands;
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.inject.Inject;
+import java.util.Random;
+
+@ApplicationScoped
+public class OtpService {
+
+	private final ValueCommands<String, String> countCommands;
+
+	@Inject
+	public OtpService(RedisDataSource ds) {
+		this.countCommands = ds.value(String.class);
+	}
+
+	public String generateAndSaveOtp(String phone) {
+		String otp = String.format("%06d", new Random().nextInt(1000000));
+		String key = "otp:" + phone;
+
+		countCommands.setex(key, 300, otp);
+
+		return otp;
+	}
+
+	public boolean verifyOtp(String phone, String inputOtp) {
+		String key = "otp:" + phone;
+		String savedOtp = countCommands.get(key);
+
+		if (savedOtp != null && savedOtp.equals(inputOtp)) {
+			countCommands.getdel(key);
+			return true;
+		}
+
+		return false;
+	}
+}
@@ -0,0 +1,81 @@
+package com.drinkool.services;
+
+import com.drinkool.InternalValue;
+import com.drinkool.Role;
+import com.drinkool.Url;
+import com.drinkool.dtos.Login;
+import com.drinkool.dtos.Signup;
+import com.drinkool.entities.ManagerEntity;
+import com.drinkool.entities.StaffEntity;
+import io.vertx.core.http.HttpServerRequest;
+import jakarta.annotation.security.RolesAllowed;
+import jakarta.inject.Inject;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.POST;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.PathParam;
+import jakarta.ws.rs.core.Response;
+import java.util.UUID;
+
+@Path(Role.Staff)
+public class StaffService extends BaseService<StaffEntity> {
+
+	@Inject
+	HttpServerRequest request;
+
+	public StaffService() {
+		super(StaffEntity.class);
+	}
+
+	@POST
+	@Path(Url.Signup)
+	@RolesAllowed(Role.Manager)
+	@Transactional
+	public Response signup(Signup input) {
+		UUID managerId = UUID.fromString(request.getHeader(InternalValue.userId));
+		ManagerEntity manager = ManagerEntity.findById(managerId);
+
+		if (manager == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidManager")
+			.build();
+
+		StaffEntity staff = new StaffEntity();
+		staff.signup(input.name, input.phone, input.password, manager);
+
+		return Response.status(Response.Status.CREATED)
+			.header(InternalValue.userId, staff.id.toString())
+			.header(InternalValue.managerId, manager.id.toString())
+			.header(InternalValue.role, Role.Staff)
+			.build();
+	}
+
+	@POST
+	@Path(Url.Login)
+	public Response login(Login input) {
+		StaffEntity staff = StaffEntity.find("phone", input.phone).firstResult();
+
+		if (staff == null) return Response.status(Response.Status.BAD_REQUEST)
+			.entity("InvalidPhoneNumber")
+			.build();
+
+		if (!staff.login(input.password)) return Response.status(
+			Response.Status.BAD_REQUEST
+		)
+			.entity("InvalidPassword")
+			.build();
+
+		return Response.accepted()
+			.entity(staff)
+			.header(InternalValue.userId, staff.id.toString())
+			.header(InternalValue.managerId, staff.serve.id.toString())
+			.header(InternalValue.role, Role.Staff)
+			.build();
+	}
+
+	@GET
+	@Path("/{id}")
+	public Response findStaff(@PathParam("id") UUID staffId) {
+		return Response.ok(StaffEntity.findById(staffId)).build();
+	}
+}
@@ -0,0 +1,20 @@
+package com.drinkool.utils;
+
+import com.google.i18n.phonenumbers.*;
+import com.google.i18n.phonenumbers.Phonenumber.PhoneNumber;
+
+public class PhoneValidator {
+
+	private static final PhoneNumberUtil phoneUtil =
+		PhoneNumberUtil.getInstance();
+
+	public static boolean isValidInternationalPhone(String phone) {
+		try {
+			PhoneNumber numberProto = phoneUtil.parse(phone, "VN");
+
+			return phoneUtil.isValidNumber(numberProto);
+		} catch (NumberParseException e) {
+			return false;
+		}
+	}
+}
@@ -0,0 +1,39 @@
+# Database
+quarkus.datasource.db-kind=postgresql
+quarkus.datasource.username=postgres
+quarkus.datasource.password=password
+quarkus.datasource.jdbc.url=jdbc:postgresql://host.docker.internal:5432/postgres
+
+quarkus.hibernate-orm.database.generation=update
+
+# Docker
+quarkus.container-image.registry=vps.demonkernel.io.vn
+quarkus.container-image.group=foodsurf
+quarkus.container-image.name=account-service
+quarkus.container-image.push=true
+quarkus.container-image.build=true
+quarkus.container-image.builder=docker
+quarkus.container-image.additional-tags=latest
+
+# Redis
+quarkus.redis.hosts=redis://${REDIS_SERVICE_SERVICE_HOST:localhost}:${REDIS_SERVICE_SERVICE_PORT:6379}
+
+
+# Dependency
+quarkus.index-dependency.lib.group-id=com.drinkool
+quarkus.index-dependency.lib.artifact-id=lib
+
+# Build
+quarkus.native.container-build=true
+quarkus.native.remote-container-build=true
+quarkus.native.additional-build-args=--initialize-at-run-time=com.password4j.AlgorithmFinder,--future-defaults=all
+quarkus.native.resources.includes=com/google/i18n/phonenumbers/data/**/*
+
+# Kafka
+%prod.mp.messaging.connector.smallrye-kafka.bootstrap.servers=${KAFKA_SERVICE_SERVICE_HOST:host.docker.internal}:9092
+quarkus.messaging.kafka.serializer-generation.enabled=true
+
+## Create restaurant topic
+mp.messaging.outgoing.manager-out.connector=smallrye-kafka
+mp.messaging.outgoing.manager-out.topic=create-restaurant
+mp.messaging.outgoing.manager-out.value.serializer=io.quarkus.kafka.client.serialization.ObjectMapperSerializer
@@ -0,0 +1,6 @@
+-- This file allow to write SQL commands that will be emitted in test and dev.
+-- The commands are commented as their support depends of the database
+-- insert into myentity (id, field) values(1, 'field-1');
+-- insert into myentity (id, field) values(2, 'field-2');
+-- insert into myentity (id, field) values(3, 'field-3');
+-- alter sequence myentity_seq restart with 4;
@@ -0,0 +1,8 @@
+hash.argon2.version=19
+hash.argon2.type=id
+hash.argon2.memory=4096
+hash.argon2.iterations=20
+hash.argon2.length=128
+hash.argon2.parallelism=4
+
+global.salt.length=64
@@ -0,0 +1,12 @@
+package com.drinkool;
+
+import java.util.Random;
+
+public class Utils {
+
+	public static Random random = new Random();
+
+	public static String generateRandomPhone() {
+		return "+8477" + String.format("%07d", random.nextInt(10000000));
+	}
+}
@@ -0,0 +1,29 @@
+package com.drinkool.entities;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+import com.drinkool.*;
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.transaction.Transactional;
+import org.junit.jupiter.api.*;
+
+@QuarkusTest
+public class CustomerEntityTest {
+
+	@Test
+	@Transactional
+	public void testSignupOneParamSuccess() {
+		CustomerEntity user = new CustomerEntity();
+		String phone = Utils.generateRandomPhone();
+
+		user.signup(phone);
+
+		assertNotNull(user.id, "ID not null after persist");
+		assertEquals(phone, user.name, "Tên mặc định phải là số điện thoại");
+		assertEquals(phone, user.phone);
+		assertNotNull(
+			user.hashedPassword,
+			"Password tự động phải được tạo và hash"
+		);
+	}
+}
@@ -0,0 +1,137 @@
+package com.drinkool.models;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.persistence.Entity;
+import jakarta.persistence.Table;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.BadRequestException;
+import java.util.Random;
+import org.junit.jupiter.api.Test;
+
+@Entity
+@Table(name = "test_users")
+class TestUserEntity extends UserModel {
+
+	public TestUserEntity() {
+		super("TestRole");
+	}
+}
+
+@QuarkusTest
+public class UserModelTest {
+
+	// Helper method để tạo số điện thoại ngẫu nhiên hợp lệ
+	private String generateValidPhone() {
+		return "+8477" + String.format("%07d", (new Random()).nextInt(10000000));
+	}
+
+	// 1. Test case: Đăng ký thành công (đầy đủ tham số)
+	@Test
+	@Transactional
+	public void testSignupSuccess() {
+		TestUserEntity user = new TestUserEntity();
+		String phone = generateValidPhone();
+		String password = "02092006Danh";
+
+		user.signup("Tran Huu Danh", phone, password);
+
+		assertNotNull(user.id, "ID not null after persist");
+		assertEquals("Tran Huu Danh", user.name);
+		assertEquals(phone, user.phone);
+		assertNotNull(user.hashedPassword, "Password phải được hash");
+
+		TestUserEntity savedUser = TestUserEntity.find(
+			"phone",
+			phone
+		).firstResult();
+		assertNotNull(savedUser, "Phải tìm thấy user trong database");
+	}
+
+	// 3. Test case: Đăng ký thất bại do số điện thoại đã tồn tại
+	@Test
+	@Transactional
+	public void testSignupFailExistedUser() {
+		String phone = generateValidPhone();
+		String password = "tungtungtungshahua";
+
+		// Tạo user đầu tiên
+		TestUserEntity existUser = new TestUserEntity();
+		existUser.signup("Nguyen Thanh Quy", phone, password);
+
+		// Tạo user thứ hai với cùng số điện thoại
+		TestUserEntity newUser = new TestUserEntity();
+		BadRequestException exception = assertThrows(
+			BadRequestException.class,
+			() -> {
+				newUser.signup("Nguyen Viet Anh", phone, "02092006Anh");
+			}
+		);
+
+		assertEquals("ExistedUser", exception.getMessage());
+	}
+
+	// 4. Test case: Đăng ký thất bại do số điện thoại sai định dạng
+	@Test
+	@Transactional
+	public void testSignupFailInvalidPhoneNumber() {
+		TestUserEntity user = new TestUserEntity();
+		String invalidPhone = "12345";
+
+		BadRequestException exception = assertThrows(
+			BadRequestException.class,
+			() -> {
+				user.signup("Lam Vi Hoang", invalidPhone, "Pass123");
+			}
+		);
+
+		assertEquals("InvalidPhoneNumber", exception.getMessage());
+	}
+
+	// 5. Test case: Đăng nhập thành công
+	@Test
+	@Transactional
+	public void testLoginSuccess() {
+		TestUserEntity user = new TestUserEntity();
+		String phone = generateValidPhone();
+		String password = "02092006Danh";
+
+		user.signup("Tran Huu Danh", phone, password);
+
+		boolean loginResult = user.login(password);
+
+		assertTrue(loginResult, "Đăng nhập phải thành công với mật khẩu đúng");
+	}
+
+	// 6. Test case: Đăng nhập thất bại do sai mật khẩu
+	@Test
+	@Transactional
+	public void testLoginFailWrongPassword() {
+		TestUserEntity user = new TestUserEntity();
+		String phone = generateValidPhone();
+		String truePassword = "02092006Danh";
+		String wrongPassword = "02092006danhh";
+
+		user.signup("Tran Huu Danh", phone, truePassword);
+
+		boolean loginResult = user.login(wrongPassword);
+
+		assertFalse(loginResult, "Đăng nhập phải thất bại với mật khẩu sai");
+	}
+
+	// 7. Test case: Đăng nhập thất bại do hashedPassword bị null
+	@Test
+	@Transactional
+	public void testLoginFailNullHashedPassword() {
+		TestUserEntity user = new TestUserEntity();
+		user.hashedPassword = null; // Cố tình set null để test lỗi
+
+		boolean loginResult = user.login("anhdomixi");
+
+		assertFalse(
+			loginResult,
+			"Đăng nhập phải thất bại nếu hashedPassword là null"
+		);
+	}
+}
@@ -0,0 +1,40 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.*;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class AccountServiceTest {
+
+	@Test
+	void testSmsOtp() {
+		String phone = Utils.generateRandomPhone();
+		SmsOtp input = new SmsOtp();
+		input.phone = phone;
+
+		Signup signup = new Signup();
+		signup.phone = phone;
+		signup.name = "sms user";
+		signup.password = "password123";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(signup)
+			.when()
+			.post(Role.Customer + Url.Signup)
+			.then();
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Url.SmsOtp)
+			.then()
+			.statusCode(202);
+	}
+}
@@ -0,0 +1,46 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.*;
+import static org.hamcrest.CoreMatchers.*;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class BaseServiceTest {
+
+	@Test
+	public void testMeEndpointWithHeader() {
+		String phone = Utils.generateRandomPhone();
+		Signup input = new Signup();
+		input.name = "Test User";
+		input.phone = phone;
+		input.password = "password123";
+
+		String testUserId = given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.Signup)
+			.then()
+			.extract()
+			.header(InternalValue.userId);
+
+		given()
+			.header(InternalValue.userId, testUserId)
+			.contentType(ContentType.JSON)
+			.when()
+			.get(Role.Customer + Url.Me)
+			.then()
+			.statusCode(200)
+			.body("id", is(testUserId));
+	}
+
+	@Test
+	public void testMeEndpointWithoutHeader() {
+		given().when().get(Role.Customer + Url.Me).then().statusCode(400);
+	}
+}
@@ -0,0 +1,157 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.*;
+import static org.junit.jupiter.api.Assertions.*;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import com.drinkool.entities.CustomerEntity;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import jakarta.inject.Inject;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class CustomerServiceTest {
+
+	@Inject
+	OtpService otpService;
+
+	@Test
+	void testSignup() {
+		String phone = Utils.generateRandomPhone();
+		Signup input = new Signup();
+		input.name = "Test User";
+		input.phone = phone;
+		input.password = "password123";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.Signup)
+			.then()
+			.statusCode(201);
+
+		// Kiểm tra database: Phải tìm thấy 1 user với số điện thoại này
+		assertEquals(1, CustomerEntity.find("phone", phone).count());
+	}
+
+	@Test
+	void testQuickSignup() {
+		String phone = Utils.generateRandomPhone();
+		QuickSignup input = new QuickSignup();
+		input.phone = phone;
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.QuickSignup)
+			.then()
+			.statusCode(201);
+
+		assertEquals(1, CustomerEntity.find("phone", phone).count());
+	}
+
+	@Test
+	void testLoginSuccess() {
+		// BƯỚC 1: Tạo user trước bằng signup
+		String phone = Utils.generateRandomPhone();
+		Signup signupData = new Signup();
+		signupData.name = "Login User";
+		signupData.phone = phone;
+		signupData.password = "secure_pass";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(signupData)
+			.post(Role.Customer + Url.Signup)
+			.then()
+			.statusCode(201);
+
+		// BƯỚC 2: Thử đăng nhập
+		Login loginInput = new Login();
+		loginInput.phone = phone;
+		loginInput.password = "secure_pass";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(loginInput)
+			.when()
+			.post(Role.Customer + Url.Login)
+			.then()
+			.statusCode(202);
+	}
+
+	@Test
+	void testLoginFailWrongPassword() {
+		String phone = Utils.generateRandomPhone();
+		Signup signupData = new Signup();
+		signupData.name = "Wrong Pass User";
+		signupData.phone = phone;
+		signupData.password = "correct_password";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(signupData)
+			.post(Role.Customer + Url.Signup)
+			.then()
+			.statusCode(201);
+
+		Login loginInput = new Login();
+		loginInput.phone = phone;
+		loginInput.password = "wrong_password";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(loginInput)
+			.when()
+			.post(Role.Customer + Url.Login)
+			.then()
+			.statusCode(400); // BadRequestException
+	}
+
+	@Test
+	public void testQuickLogin_Success() {
+		String phone = Utils.generateRandomPhone();
+
+		QuickSignup input = new QuickSignup();
+		input.phone = phone;
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.QuickSignup)
+			.then();
+
+		QuickLogin payload = new QuickLogin();
+		payload.phone = phone;
+		payload.otp = otpService.generateAndSaveOtp(phone);
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(payload)
+			.when()
+			.post(Role.Customer + Url.QuickLogin)
+			.then()
+			.statusCode(202);
+	}
+
+	@Test
+	void testQuickLoginFailInvalidOtp() {
+		String phone = Utils.generateRandomPhone();
+		QuickLogin input = new QuickLogin();
+		input.phone = phone;
+		input.otp = "000000"; // Giả sử mã này luôn sai vì chưa được tạo
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Role.Customer + Url.QuickLogin)
+			.then()
+			.statusCode(401);
+	}
+}
@@ -0,0 +1,131 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.*;
+import static org.junit.jupiter.api.Assertions.*;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import com.drinkool.entities.ManagerEntity;
+import io.quarkus.test.common.QuarkusTestResource;
+import io.quarkus.test.junit.QuarkusTest;
+import io.quarkus.test.kafka.*;
+import io.restassured.http.ContentType;
+import io.smallrye.reactive.messaging.kafka.companion.ConsumerTask;
+import io.smallrye.reactive.messaging.kafka.companion.KafkaCompanion;
+import jakarta.transaction.Transactional;
+import java.time.Duration;
+import org.eclipse.microprofile.config.inject.ConfigProperty;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+@QuarkusTestResource(KafkaCompanionResource.class)
+public class ManagerServiceTest {
+
+	@InjectKafkaCompanion
+	KafkaCompanion companion;
+
+	@ConfigProperty(name = "mp.messaging.outgoing.manager-out.topic")
+	String topicName;
+
+	@BeforeEach
+	@Transactional
+	void setup() {
+		ManagerEntity.deleteAll();
+	}
+
+	@Test
+	void testSignupSuccessAndKafkaMessageSent() {
+		ManagerSignup input = new ManagerSignup();
+		input.name = "Ho Van Quan";
+		input.phone = Utils.generateRandomPhone();
+		input.password = "strong_password";
+		input.eateryName = "Quan Com Ngon";
+
+		ConsumerTask<String, String> consumer = companion
+			.consumeStrings()
+			.fromTopics(topicName, 1);
+
+		// 2. Gọi API POST /signup
+		var response = given()
+			.contentType("application/json")
+			.body(input)
+			.when()
+			.post(Role.Manager + Url.Signup)
+			.then()
+			.statusCode(201)
+			.header(InternalValue.userId, org.hamcrest.Matchers.notNullValue())
+			.header(InternalValue.role, Role.Manager)
+			.extract();
+
+		String userId = response.header(InternalValue.userId);
+
+		var records = consumer.awaitCompletion(Duration.ofSeconds(15)).getRecords();
+
+		assertEquals(1, records.size());
+		String kafkaPayload = records.get(0).value();
+
+		assertTrue(kafkaPayload.contains(userId));
+		assertTrue(kafkaPayload.contains("Quan Com Ngon"));
+	}
+
+	@Test
+	void testLoginSuccess() {
+		// BƯỚC 1: Tạo user trước bằng signup
+		String phone = Utils.generateRandomPhone();
+		ManagerSignup signupData = new ManagerSignup();
+		signupData.name = "Login User";
+		signupData.phone = phone;
+		signupData.password = "secure_pass";
+		signupData.eateryName = "Test Eatery";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(signupData)
+			.post(Role.Manager + Url.Signup)
+			.then()
+			.statusCode(201);
+
+		// BƯỚC 2: Thử đăng nhập
+		Login loginInput = new Login();
+		loginInput.phone = phone;
+		loginInput.password = "secure_pass";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(loginInput)
+			.when()
+			.post(Role.Manager + Url.Login)
+			.then()
+			.statusCode(202);
+	}
+
+	@Test
+	void testLoginFailWrongPassword() {
+		String phone = Utils.generateRandomPhone();
+		ManagerSignup signupData = new ManagerSignup();
+		signupData.name = "Wrong Pass User";
+		signupData.phone = phone;
+		signupData.password = "correct_password";
+		signupData.eateryName = "Test Eatery";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(signupData)
+			.post(Role.Manager + Url.Signup)
+			.then()
+			.statusCode(201);
+
+		Login loginInput = new Login();
+		loginInput.phone = phone;
+		loginInput.password = "wrong_password";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(loginInput)
+			.when()
+			.post(Role.Manager + Url.Login)
+			.then()
+			.statusCode(400); // BadRequestException
+	}
+}
@@ -0,0 +1,86 @@
+package com.drinkool.services;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.inject.Inject;
+import java.util.Random;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class OtpServiceTest {
+
+	@Inject
+	OtpService otpService;
+
+	// 1. Test case: Tạo và lưu OTP thành công
+	@Test
+	public void testGenerateAndSaveOtp() {
+		String phone =
+			"+8477" + String.format("%07d", new Random().nextInt(10000000));
+		String otp = otpService.generateAndSaveOtp(phone);
+
+		assertNotNull(otp, "OTP sinh ra không được null");
+		assertEquals(6, otp.length(), "OTP phải có độ dài đúng 6 ký tự");
+		assertTrue(otp.matches("\\d{6}"), "OTP chỉ được chứa các chữ số");
+	}
+
+	// 2. Test case: Xác thực OTP thành công
+	@Test
+	public void testVerifyOtpSuccess() {
+		String phone =
+			"+8477" + String.format("%07d", new Random().nextInt(10000000));
+		String generatedOtp = otpService.generateAndSaveOtp(phone);
+
+		// Xác thực với OTP vừa tạo ra
+		boolean verifyResult = otpService.verifyOtp(phone, generatedOtp);
+
+		assertTrue(verifyResult, "Xác thực phải thành công với OTP đúng");
+	}
+
+	// 3. Test case: Xác thực thất bại do sai mã OTP
+	@Test
+	public void testVerifyOtpFailWrongOtp() {
+		String phone =
+			"+8477" + String.format("%07d", new Random().nextInt(10000000));
+		otpService.generateAndSaveOtp(phone); // Tạo OTP nhưng không dùng
+
+		String wrongOtp = "999999"; // Giả sử mã sai
+		boolean verifyResult = otpService.verifyOtp(phone, wrongOtp);
+
+		assertFalse(verifyResult, "Xác thực phải thất bại khi truyền sai mã OTP");
+	}
+
+	// 4. Test case: Xác thực thất bại do OTP không tồn tại (chưa tạo hoặc đã hết hạn)
+	@Test
+	public void testVerifyOtpFailNotExists() {
+		String unverifiedPhone =
+			"+8499" + String.format("%07d", new Random().nextInt(10000000));
+
+		// Cố tình xác thực cho một số điện thoại chưa từng gọi generateAndSaveOtp
+		boolean verifyResult = otpService.verifyOtp(unverifiedPhone, "123456");
+
+		assertFalse(
+			verifyResult,
+			"Xác thực phải thất bại với SĐT không có OTP trong Redis"
+		);
+	}
+
+	// 5. Test case: Đảm bảo OTP chỉ được sử dụng 1 lần (đã bị xóa sau khi verify thành công bằng lệnh getdel)
+	@Test
+	public void testVerifyOtpConsumedAfterSuccess() {
+		String phone =
+			"+8477" + String.format("%07d", new Random().nextInt(10000000));
+		String generatedOtp = otpService.generateAndSaveOtp(phone);
+
+		// Lần 1: Xác thực thành công
+		assertTrue(otpService.verifyOtp(phone, generatedOtp));
+
+		// Lần 2: Xác thực lại cùng mã đó sẽ thất bại vì key đã bị getdel xóa khỏi Redis
+		boolean secondVerifyResult = otpService.verifyOtp(phone, generatedOtp);
+		assertFalse(
+			secondVerifyResult,
+			"OTP không được phép tái sử dụng sau khi đã verify thành công"
+		);
+	}
+}
@@ -0,0 +1,116 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.*;
+import static org.junit.jupiter.api.Assertions.*;
+
+import com.drinkool.*;
+import com.drinkool.dtos.*;
+import com.drinkool.entities.ManagerEntity;
+import com.drinkool.entities.StaffEntity;
+import io.quarkus.test.common.QuarkusTestResource;
+import io.quarkus.test.junit.QuarkusTest;
+import io.quarkus.test.kafka.*;
+import io.restassured.http.ContentType;
+import jakarta.enterprise.context.control.ActivateRequestContext;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.core.Response;
+import java.util.concurrent.TimeUnit;
+import net.datafaker.Faker;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+@QuarkusTestResource(KafkaCompanionResource.class)
+public class StaffServiceTest_ {
+
+	private final Faker faker = new Faker();
+
+	private static String managerId;
+
+	@BeforeAll
+	@Transactional
+	@ActivateRequestContext
+	static void setup() throws InterruptedException {
+		ManagerSignup input = new ManagerSignup();
+		input.name = "Ho Van Quan";
+		input.phone = Utils.generateRandomPhone();
+		input.password = "strong_password";
+		input.eateryName = "Quan Com Ngon";
+
+		managerId = (new ManagerEntity()).signup(
+			input.name,
+			input.phone,
+			"",
+			input.password
+		).id.toString();
+	}
+
+	@Test
+	void signup_Success() {
+		String staffName = faker.name().fullName();
+		String staffPhone = Utils.generateRandomPhone();
+
+		Signup signup = new Signup(
+			staffName,
+			staffPhone,
+			faker.famousLastWords().lastWords()
+		);
+
+		given()
+			.contentType(ContentType.JSON)
+			.header(InternalValue.role, Role.Manager)
+			.header(InternalValue.userId, managerId)
+			.body(signup)
+			.when()
+			.post(Role.Staff + Url.Signup)
+			.then()
+			.statusCode(Response.Status.CREATED.getStatusCode())
+			.header(InternalValue.userId, org.hamcrest.Matchers.notNullValue())
+			.header(InternalValue.role, Role.Staff);
+
+		StaffEntity staff = StaffEntity.find("phone", staffPhone).firstResult();
+
+		assertEquals(managerId, staff.serve.id.toString());
+	}
+
+	@Test
+	void signup_FailedDueToInvalidRole() {
+		given()
+			.contentType(ContentType.JSON)
+			.header(InternalValue.role, Role.Customer)
+			.header(InternalValue.userId, managerId)
+			.body("")
+			.when()
+			.post(Role.Staff + Url.Signup)
+			.then()
+			.statusCode(Response.Status.FORBIDDEN.getStatusCode());
+	}
+
+	@Test
+	void testLoginSuccess() {
+		String staffName = faker.name().fullName();
+		String staffPhone = Utils.generateRandomPhone();
+		String password = faker.famousLastWords().lastWords();
+
+		Signup signup = new Signup(staffName, staffPhone, password);
+
+		given()
+			.contentType(ContentType.JSON)
+			.header(InternalValue.role, Role.Manager)
+			.header(InternalValue.userId, managerId)
+			.body(signup)
+			.when()
+			.post(Role.Staff + Url.Signup)
+			.then();
+
+		Login loginInput = new Login(staffPhone, password);
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(loginInput)
+			.when()
+			.post(Role.Staff + Url.Login)
+			.then()
+			.statusCode(Response.Status.ACCEPTED.getStatusCode());
+	}
+}
@@ -0,0 +1,53 @@
+package com.drinkool.utils;
+
+import org.junit.jupiter.api.Assertions;
+import org.junit.jupiter.api.Test;
+
+public class PhoneValidatorTest {
+
+	@Test
+	public void testValidVietnamesePhoneNumbers() {
+		// Số điện thoại VN hợp lệ (có mã vùng hoặc số 0 ở đầu đều được)
+		Assertions.assertTrue(
+			PhoneValidator.isValidInternationalPhone("0987654321")
+		);
+		Assertions.assertTrue(
+			PhoneValidator.isValidInternationalPhone("+84987654321")
+		);
+		Assertions.assertTrue(
+			PhoneValidator.isValidInternationalPhone("84987654321")
+		);
+	}
+
+	@Test
+	public void testValidInternationalPhoneNumbers() {
+		// Số điện thoại quốc tế hợp lệ (Ví dụ: Mỹ +1)
+		Assertions.assertTrue(
+			PhoneValidator.isValidInternationalPhone("+14155552671")
+		);
+	}
+
+	@Test
+	public void testInvalidPhoneNumbers() {
+		// Chuỗi không phải số điện thoại
+		Assertions.assertFalse(
+			PhoneValidator.isValidInternationalPhone("not-a-phone-number")
+		);
+
+		// Số điện thoại quá ngắn hoặc sai định dạng
+		Assertions.assertFalse(PhoneValidator.isValidInternationalPhone("123"));
+		Assertions.assertFalse(
+			PhoneValidator.isValidInternationalPhone("099999999999999")
+		);
+
+		// Chuỗi rỗng
+		Assertions.assertFalse(PhoneValidator.isValidInternationalPhone(""));
+	}
+
+	@Test
+	public void testNullPhoneNumber() {
+		// Cố tình truyền null để xem hàm xử lý thế nào
+		// Lưu ý: Đọc thêm phần "Mẹo nhỏ" bên dưới để pass được test này
+		Assertions.assertFalse(PhoneValidator.isValidInternationalPhone(null));
+	}
+}
@@ -0,0 +1,10 @@
+# Quarkus
+quarkus.http.host=0.0.0.0
+
+# Database
+## Datasource
+%test.quarkus.datasource.db-kind=h2
+%test.quarkus.datasource.jdbc.url=jdbc:h2:mem:test_db;DB_CLOSE_DELAY=-1
+
+## Orm
+%test.quarkus.hibernate-orm.database.generation=drop-and-create
@@ -0,0 +1,5 @@
+*
+!target/*-runner
+!target/*-runner.jar
+!target/lib/*
+!target/quarkus-app/*
@@ -0,0 +1,4 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
+distributionSha256Sum=305773a68d6ddfd413df58c82b3f8050e89778e777f3a745c8e5b8cbea4018ef
@@ -0,0 +1,76 @@
+# cart-service
+
+This project uses Quarkus, the Supersonic Subatomic Java Framework.
+
+If you want to learn more about Quarkus, please visit its website: <https://quarkus.io/>.
+
+## Running the application in dev mode
+
+You can run your application in dev mode that enables live coding using:
+
+```shell script
+mvn compile quarkus:dev
+```
+
+> **_NOTE:_**  Quarkus now ships with a Dev UI, which is available in dev mode only at <http://localhost:8080/q/dev/>.
+
+## Packaging and running the application
+
+The application can be packaged using:
+
+```shell script
+mvn package
+```
+
+It produces the `quarkus-run.jar` file in the `target/quarkus-app/` directory.
+Be aware that it’s not an _über-jar_ as the dependencies are copied into the `target/quarkus-app/lib/` directory.
+
+The application is now runnable using `java -jar target/quarkus-app/quarkus-run.jar`.
+
+If you want to build an _über-jar_, execute the following command:
+
+```shell script
+mvn package -Dquarkus.package.jar.type=uber-jar
+```
+
+The application, packaged as an _über-jar_, is now runnable using `java -jar target/*-runner.jar`.
+
+## Creating a native executable
+
+You can create a native executable using:
+
+```shell script
+mvn package -Dnative
+```
+
+Or, if you don't have GraalVM installed, you can run the native executable build in a container using:
+
+```shell script
+mvn package -Dnative -Dquarkus.native.container-build=true
+```
+
+You can then execute your native executable with: `./target/cart-service-1.0.0-SNAPSHOT-runner`
+
+If you want to learn more about building native executables, please consult <https://quarkus.io/guides/maven-tooling>.
+
+## Related Guides
+
+- Hibernate Validator ([guide](https://quarkus.io/guides/validation)): Validate object properties (field, getter) and method parameters for your beans (REST, CDI, Jakarta Persistence)
+- Messaging - Kafka Connector ([guide](https://quarkus.io/guides/kafka-getting-started)): Connect to Kafka with Reactive Messaging
+- Redis Client ([guide](https://quarkus.io/guides/redis)): Connect to Redis in either imperative or reactive style
+- REST Jackson ([guide](https://quarkus.io/guides/rest#json-serialisation)): Jackson serialization support for Quarkus REST. This extension is not compatible with the quarkus-resteasy extension, or any of the extensions that depend on it
+
+## Provided Code
+
+### Messaging codestart
+
+Use Quarkus Messaging
+
+[Related Apache Kafka guide section...](https://quarkus.io/guides/kafka-reactive-getting-started)
+
+
+### REST
+
+Easily start your REST Web Services
+
+[Related guide section...](https://quarkus.io/guides/getting-started-reactive#reactive-jax-rs-resources)
@@ -0,0 +1,180 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<project
+	xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"
+>
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>com.drinkool</groupId>
+        <artifactId>drinkool</artifactId>
+        <version>1.5.32</version>
+        <relativePath>../pom.xml</relativePath>
+    </parent>
+
+    <artifactId>cart-service</artifactId>
+    <packaging>quarkus</packaging>
+
+    <properties>
+        <compiler-plugin.version>3.15.0</compiler-plugin.version>
+        <maven.compiler.release>25</maven.compiler.release>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <project.reporting.outputEncoding
+		>UTF-8</project.reporting.outputEncoding>
+        <quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>
+        <quarkus.platform.group-id
+		>io.quarkus.platform</quarkus.platform.group-id>
+        <quarkus.platform.version>3.34.6</quarkus.platform.version>
+        <skipITs>true</skipITs>
+        <surefire-plugin.version>3.5.4</surefire-plugin.version>
+        <org.projectlombok.version>1.18.46</org.projectlombok.version>
+    </properties>
+
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>${quarkus.platform.artifact-id}</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
+    <dependencies>
+        <dependency>
+            <groupId>com.drinkool</groupId>
+            <artifactId>lib</artifactId>
+            <version>${project.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>org.projectlombok</groupId>
+            <artifactId>lombok</artifactId>
+            <version>${org.projectlombok.version}</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-container-image-docker</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-junit5-mockito</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-hibernate-validator</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-redis-client</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-arc</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest-client-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-smallrye-graphql-client</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-junit5</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.rest-assured</groupId>
+            <artifactId>rest-assured</artifactId>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>quarkus-maven-plugin</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <extensions>true</extensions>
+            </plugin>
+            <plugin>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>${compiler-plugin.version}</version>
+                <configuration>
+                    <parameters>true</parameters>
+                    <annotationProcessorPaths>
+
+                        <path>
+                            <groupId>org.projectlombok</groupId>
+                            <artifactId>lombok</artifactId>
+                            <version>${org.projectlombok.version}</version>
+                        </path>
+                    </annotationProcessorPaths>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-surefire-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <configuration>
+                    <systemPropertyVariables>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-failsafe-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>integration-test</goal>
+                            <goal>verify</goal>
+                        </goals>
+                    </execution>
+                </executions>
+                <configuration>
+                    <systemPropertyVariables>
+                        <native.image.path>
+                            ${project.build.directory}/${project.build.finalName}-runner</native.image.path>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+
+    <profiles>
+        <profile>
+            <id>native</id>
+            <activation>
+                <property>
+                    <name>native</name>
+                </property>
+            </activation>
+            <properties>
+                <quarkus.package.jar.enabled>false</quarkus.package.jar.enabled>
+                <skipITs>false</skipITs>
+                <quarkus.native.enabled>true</quarkus.native.enabled>
+            </properties>
+        </profile>
+    </profiles>
+</project>
@@ -0,0 +1,100 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.jvm -t quarkus/cart-service-jvm .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/cart-service-jvm
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/cart-service-jvm
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-25:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+# We make four distinct layers so if there are application changes the library layers can be re-used
+COPY --chown=185 target/quarkus-app/lib/ /deployments/lib/
+COPY --chown=185 target/quarkus-app/*.jar /deployments/
+COPY --chown=185 target/quarkus-app/app/ /deployments/app/
+COPY --chown=185 target/quarkus-app/quarkus/ /deployments/quarkus/
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
+
@@ -0,0 +1,96 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dquarkus.package.jar.type=legacy-jar
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.legacy-jar -t quarkus/cart-service-legacy-jar .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/cart-service-legacy-jar
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/cart-service-legacy-jar
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-25:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+COPY target/lib/* /deployments/lib/
+COPY target/*-runner.jar /deployments/quarkus-run.jar
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
@@ -0,0 +1,32 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
+# It uses a micro base image, tuned for Quarkus native executables.
+# It reduces the size of the resulting container image.
+# Check https://quarkus.io/guides/quarkus-runtime-base-image for further information about this image.
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dnative
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.native-micro -t quarkus/cart-service .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/cart-service
+#
+# The `quay.io/quarkus/quarkus-micro-image:2.0` base image is based on UBI 9.
+# To use UBI 8, switch to `quay.io/quarkus/quarkus-micro-image:2.0`.
+###
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
+WORKDIR /work/
+RUN chown 1001 /work \
+    && chmod "g+rwX" /work \
+    && chown 1001:root /work
+COPY --chown=1001:root --chmod=0755 target/*-runner /work/application
+
+EXPOSE 8080
+USER 1001
+
+ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
@@ -0,0 +1,24 @@
+package com.drinkool.controllers;
+
+import io.smallrye.mutiny.Uni;
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.PathParam;
+import jakarta.ws.rs.core.Response;
+import java.util.UUID;
+import org.eclipse.microprofile.rest.client.inject.RegisterRestClient;
+
+@RegisterRestClient(configKey = "eatery")
+@Path("/")
+public interface EateryController {
+	@GET
+	@Path("/{id}")
+	Uni<Response> getEateryById(@PathParam("id") UUID id);
+
+	@GET
+	@Path("/{eateryId}/{menuItemId}")
+	public Uni<Response> checkMenuItemExists(
+		@PathParam("eateryId") UUID eateryId,
+		@PathParam("menuItemId") UUID menuItemId
+	);
+}
@@ -0,0 +1,21 @@
+package com.drinkool.controllers;
+
+import com.drinkool.Role;
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.PathParam;
+import jakarta.ws.rs.QueryParam;
+import jakarta.ws.rs.core.Response;
+import org.eclipse.microprofile.rest.client.inject.RegisterRestClient;
+
+@RegisterRestClient(configKey = "account")
+@Path(Role.Manager)
+public interface ManagerController {
+	@GET
+	@Path("/{id}/payment-qr")
+	public Response getManagerPaymentQr(
+		@PathParam("id") String id,
+		@QueryParam("amount") Long amount,
+		@QueryParam("cartId") String cartId
+	);
+}
@@ -0,0 +1,20 @@
+package com.drinkool.dtos;
+
+import java.util.List;
+import java.util.UUID;
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+@Getter
+@NoArgsConstructor
+@AllArgsConstructor
+public class Cart {
+
+	public UUID Id;
+	public UUID userId;
+	public UUID eateryId;
+	public List<CartItem> items;
+	public long totalAmount;
+	public String paymentQrUrl;
+}
@@ -0,0 +1,17 @@
+package com.drinkool.dtos;
+
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+@Getter
+@NoArgsConstructor
+@AllArgsConstructor
+public class CartItem {
+
+	public String productId;
+	public Integer quantity;
+
+	public Double priceAtTimeOfAdding;
+	public Double subTotal;
+}
@@ -0,0 +1,208 @@
+package com.drinkool.services;
+
+import com.drinkool.InternalValue;
+import com.drinkool.controllers.EateryController;
+import com.drinkool.controllers.ManagerController;
+import com.drinkool.dtos.Cart;
+import com.drinkool.dtos.CartItem;
+import io.quarkus.redis.datasource.RedisDataSource;
+import io.quarkus.redis.datasource.hash.HashCommands;
+import io.quarkus.redis.datasource.value.ValueCommands;
+import io.smallrye.mutiny.Uni;
+import io.smallrye.mutiny.infrastructure.Infrastructure;
+import io.vertx.core.http.HttpServerRequest;
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.inject.Inject;
+import jakarta.ws.rs.core.Response;
+import java.time.Duration;
+import java.util.ArrayList;
+import java.util.Map;
+import java.util.UUID;
+import org.eclipse.microprofile.graphql.GraphQLApi;
+import org.eclipse.microprofile.graphql.GraphQLException;
+import org.eclipse.microprofile.graphql.Mutation;
+import org.eclipse.microprofile.graphql.Name;
+import org.eclipse.microprofile.graphql.Query;
+import org.eclipse.microprofile.rest.client.inject.RestClient;
+
+@ApplicationScoped
+@GraphQLApi
+public class CartService {
+
+	@Inject
+	HttpServerRequest request;
+
+	@Inject
+	@RestClient
+	EateryController eateryController;
+
+	@Inject
+	@RestClient
+	ManagerController managerController;
+
+	private final HashCommands<String, String, String> hashCommands;
+	private final ValueCommands<String, String> valueCommands;
+
+	@Inject
+	public CartService(RedisDataSource ds) {
+		this.hashCommands = ds.hash(String.class, String.class, String.class);
+		this.valueCommands = ds.value(String.class);
+	}
+
+	@Mutation("createCart")
+	public Uni<String> createCart(@Name("eateryId") UUID eateryId) {
+		String userId = request.getHeader(InternalValue.userId);
+
+		return eateryController
+			.getEateryById(eateryId)
+			.emitOn(Infrastructure.getDefaultWorkerPool())
+			.onItem()
+			.transform(response -> {
+				if (response.getStatus() != Response.Status.OK.getStatusCode()) {
+					throw new RuntimeException("NotFoundEatery");
+				}
+
+				String cartId = UUID.randomUUID().toString();
+				String redisKey = "cart:" + cartId;
+				String ownerId = response.readEntity(String.class);
+
+				hashCommands.hset(
+					redisKey,
+					Map.of(
+						"_metadata_owner",
+						userId != null ? userId : "GUEST",
+						"_metadata_eatery",
+						eateryId.toString(),
+						"_metadata_eateryManagerId",
+						ownerId
+					)
+				);
+
+				valueCommands
+					.getDataSource()
+					.key()
+					.expire(redisKey, Duration.ofDays(30));
+
+				return cartId;
+			})
+			.onFailure()
+			.transform(f ->
+				new GraphQLException(
+					"Lỗi kết nối đến dịch vụ nhà hàng: " + f.getMessage()
+				)
+			);
+	}
+
+	@Query("getCart")
+	public Cart getCart(@Name("cartId") UUID cartId) throws GraphQLException {
+		String key = "cart:" + cartId;
+		String priceKey = "cart_prices:" + cartId;
+
+		Map<String, String> data = hashCommands.hgetall(key);
+		Map<String, String> itemPrices = hashCommands.hgetall(priceKey);
+
+		if (data.isEmpty()) {
+			throw new GraphQLException("NotFoundCart");
+		}
+
+		Cart cart = new Cart();
+		cart.Id = cartId;
+		cart.eateryId = UUID.fromString(data.get("_metadata_eatery"));
+		String ownerStr = data.get("_metadata_owner");
+		String managerId = data.get("_metadata_eateryManagerId");
+		cart.userId = "GUEST".equals(ownerStr) ? null : UUID.fromString(ownerStr);
+		cart.items = new ArrayList<>();
+
+		long total = 0;
+
+		for (Map.Entry<String, String> entry : data.entrySet()) {
+			String field = entry.getKey();
+			if (field.startsWith("_metadata_")) continue;
+
+			Integer qty = Integer.parseInt(entry.getValue());
+			Double price = Double.parseDouble(itemPrices.getOrDefault(field, "0"));
+			Double subTotal = qty * price;
+
+			CartItem item = new CartItem();
+			item.productId = field;
+			item.quantity = qty;
+			item.priceAtTimeOfAdding = price;
+			item.subTotal = subTotal;
+
+			cart.items.add(item);
+			total += subTotal;
+		}
+		cart.totalAmount = total;
+
+		try {
+			Response response = managerController.getManagerPaymentQr(
+				managerId,
+				total,
+				cartId.toString()
+			);
+
+			cart.paymentQrUrl = response.readEntity(String.class);
+		} catch (Exception e) {
+			cart.paymentQrUrl = "";
+
+			System.out.println(e.getMessage());
+		}
+
+		return cart;
+	}
+
+	@Mutation("addItem")
+	public Cart addItem(
+		@Name("cartId") UUID cartId,
+		@Name("menuItemId") UUID menuItemId,
+		@Name("quantity") long quantity
+	) throws GraphQLException {
+		String key = "cart:" + cartId;
+		String priceKey = "cart_prices:" + cartId;
+
+		String eateryIdStr = hashCommands.hget(key, "_metadata_eatery");
+		if (eateryIdStr == null) throw new RuntimeException("CartNotFound");
+
+		UUID eateryId = UUID.fromString(eateryIdStr);
+
+		Response response = eateryController
+			.checkMenuItemExists(eateryId, menuItemId)
+			.await()
+			.indefinitely();
+
+		if (response.getStatus() != Response.Status.OK.getStatusCode()) {
+			throw new GraphQLException("NotFoundMenuItemInEatery");
+		}
+
+		Double menuItemPrice = response.readEntity(Double.class);
+
+		hashCommands.hincrby(key, menuItemId.toString(), quantity);
+		hashCommands.hset(
+			priceKey,
+			menuItemId.toString(),
+			String.valueOf(menuItemPrice)
+		);
+
+		hashCommands.getDataSource().key().expire(key, Duration.ofDays(30));
+		hashCommands.getDataSource().key().expire(priceKey, Duration.ofDays(30));
+
+		return getCart(cartId);
+	}
+
+	@Mutation("deleteCart")
+	public Uni<Boolean> deleteCart(@Name("cartId") UUID cartId) {
+		String key = "cart:" + cartId;
+		String priceKey = "cart_prices:" + cartId;
+
+		return Uni.createFrom()
+			.item(() -> {
+				long deletedKeys = hashCommands
+					.getDataSource()
+					.key()
+					.del(key, priceKey);
+
+				return deletedKeys > 0;
+			})
+			.runSubscriptionOn(Infrastructure.getDefaultWorkerPool());
+	}
+}
@@ -0,0 +1,24 @@
+# Docker
+quarkus.container-image.registry=vps.demonkernel.io.vn
+quarkus.container-image.group=foodsurf
+quarkus.container-image.name=cart-service
+quarkus.container-image.push=true
+quarkus.container-image.build=true
+quarkus.container-image.builder=docker
+quarkus.container-image.additional-tags=latest
+
+# Build
+quarkus.native.container-build=true
+quarkus.native.remote-container-build=true
+quarkus.native.additional-build-args=--future-defaults=all
+
+# Dependency
+quarkus.index-dependency.lib.group-id=com.drinkool
+quarkus.index-dependency.lib.artifact-id=lib
+
+# Redis
+quarkus.redis.hosts=redis://${REDIS_SERVICE_SERVICE_HOST:localhost}:${REDIS_SERVICE_SERVICE_PORT:6379}
+
+# Rest Client
+quarkus.rest-client.eatery.url=http://eatery-service
+quarkus.rest-client.account.url=http://account-service
@@ -0,0 +1,157 @@
+package com.drinkool.services;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.when;
+
+import com.drinkool.controllers.EateryController;
+import com.drinkool.controllers.ManagerController;
+import com.drinkool.dtos.Cart;
+import io.quarkus.redis.datasource.RedisDataSource;
+import io.quarkus.redis.datasource.hash.HashCommands;
+import io.quarkus.redis.datasource.value.ValueCommands;
+import io.quarkus.test.InjectMock;
+import io.quarkus.test.junit.QuarkusTest;
+import io.smallrye.mutiny.Uni;
+import io.smallrye.mutiny.helpers.test.UniAssertSubscriber;
+import io.vertx.core.http.HttpServerRequest;
+import jakarta.inject.Inject;
+import jakarta.ws.rs.core.Response;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.UUID;
+import org.eclipse.microprofile.graphql.GraphQLException;
+import org.eclipse.microprofile.rest.client.inject.RestClient;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class CartServiceTest_ {
+
+	@Inject
+	CartService cartService;
+
+	@InjectMock
+	HttpServerRequest request;
+
+	@InjectMock
+	@RestClient
+	EateryController eateryController;
+
+	@InjectMock
+	@RestClient
+	ManagerController managerController;
+
+	@Inject
+	RedisDataSource redisDataSource;
+
+	HashCommands<String, String, String> hashCommands;
+	ValueCommands<String, String> valueCommands;
+
+	@BeforeEach
+	void setup() {
+		redisDataSource.flushall();
+
+		hashCommands = redisDataSource.hash(String.class);
+		valueCommands = redisDataSource.value(String.class);
+	}
+
+	@Test
+	void testCreateCart_SuccessWithoutLogin() {
+		UUID eateryId = UUID.randomUUID();
+
+		when(eateryController.getEateryById(eateryId)).thenReturn(
+			Uni.createFrom().item(Response.ok(UUID.randomUUID()).build())
+		);
+
+		String cartId = cartService
+			.createCart(eateryId)
+			.subscribe()
+			.withSubscriber(UniAssertSubscriber.create())
+			.awaitItem()
+			.getItem();
+
+		assertNotNull(cartId);
+	}
+
+	@Test
+	void testGetCart_Success() throws Exception {
+		UUID cartId = UUID.randomUUID();
+		UUID ownerId = UUID.randomUUID();
+		UUID eateryId = UUID.randomUUID();
+		String key = "cart:" + cartId;
+
+		Map<String, String> mockData = new HashMap<>();
+		mockData.put("_metadata_owner", ownerId.toString());
+		mockData.put("_metadata_eatery", eateryId.toString());
+		mockData.put("product-1", "2");
+		mockData.put("product-2", "5");
+
+		hashCommands.hset(key, mockData);
+
+		Cart result = cartService.getCart(cartId);
+
+		assertNotNull(result);
+		assertEquals(cartId, result.getId());
+		assertEquals(ownerId, result.getUserId());
+		assertEquals(eateryId, result.getEateryId());
+
+		assertEquals(2, result.getItems().size());
+
+		boolean hasProduct1 = result
+			.getItems()
+			.stream()
+			.anyMatch(
+				item ->
+					item.getProductId().equals("product-1") && item.getQuantity() == 2
+			);
+
+		assertTrue(hasProduct1, "Phải chứa product-1 với số lượng 2");
+	}
+
+	@Test
+	void testGetCart_NotFound() {
+		UUID nonExistentId = UUID.randomUUID();
+
+		GraphQLException exception = assertThrows(GraphQLException.class, () -> {
+			cartService.getCart(nonExistentId);
+		});
+
+		assertEquals("NotFoundCart", exception.getMessage());
+	}
+
+	@Test
+	void testAddItem_Success() throws GraphQLException {
+		UUID cartId = UUID.randomUUID();
+		UUID eateryId = UUID.randomUUID();
+		UUID menuItemId = UUID.randomUUID();
+		String key = "cart:" + cartId;
+
+		hashCommands.hset(key, "_metadata_eatery", eateryId.toString());
+		hashCommands.hset(key, "_metadata_owner", UUID.randomUUID().toString());
+
+		when(eateryController.checkMenuItemExists(eateryId, menuItemId)).thenReturn(
+			Uni.createFrom().item(Response.ok(17.0).build())
+		);
+
+		Cart result = cartService.addItem(cartId, menuItemId, 2L);
+
+		assertNotNull(result);
+		assertEquals(cartId, result.getId());
+
+		boolean hasItem = result
+			.getItems()
+			.stream()
+			.anyMatch(
+				item ->
+					item.getProductId().equals(menuItemId.toString()) &&
+					item.getQuantity() == 2
+			);
+		assertTrue(hasItem, "Sản phẩm phải có trong giỏ hàng sau khi thêm");
+
+		String quantityInRedis = hashCommands.hget(key, menuItemId.toString());
+		assertEquals("2", quantityInRedis);
+	}
+}
@@ -0,0 +1,2 @@
+# Redis
+quarkus.redis.hosts=redis://${REDIS_SERVICE_SERVICE_HOST:localhost}:${REDIS_SERVICE_SERVICE_PORT:6379}
@@ -0,0 +1,5 @@
+*
+!target/*-runner
+!target/*-runner.jar
+!target/lib/*
+!target/quarkus-app/*
@@ -0,0 +1,4 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
+distributionSha256Sum=305773a68d6ddfd413df58c82b3f8050e89778e777f3a745c8e5b8cbea4018ef
@@ -0,0 +1,79 @@
+# eatery-service
+
+This project uses Quarkus, the Supersonic Subatomic Java Framework.
+
+If you want to learn more about Quarkus, please visit its website: <https://quarkus.io/>.
+
+## Running the application in dev mode
+
+You can run your application in dev mode that enables live coding using:
+
+```shell script
+mvn quarkus:dev
+```
+
+> **_NOTE:_**  Quarkus now ships with a Dev UI, which is available in dev mode only at <http://localhost:8080/q/dev/>.
+
+## Packaging and running the application
+
+The application can be packaged using:
+
+```shell script
+mvn package
+```
+
+It produces the `quarkus-run.jar` file in the `target/quarkus-app/` directory.
+Be aware that it’s not an _über-jar_ as the dependencies are copied into the `target/quarkus-app/lib/` directory.
+
+The application is now runnable using `java -jar target/quarkus-app/quarkus-run.jar`.
+
+If you want to build an _über-jar_, execute the following command:
+
+```shell script
+mvn package -Dquarkus.package.jar.type=uber-jar
+```
+
+The application, packaged as an _über-jar_, is now runnable using `java -jar target/*-runner.jar`.
+
+## Creating a native executable
+
+You can create a native executable using:
+
+```shell script
+mvn package -Dnative
+```
+
+Or, if you don't have GraalVM installed, you can run the native executable build in a container using:
+
+```shell script
+mvn package -Dnative -Dquarkus.native.container-build=true
+```
+
+You can then execute your native executable with: `./target/eatery-service-1.0.0-SNAPSHOT-runner`
+
+If you want to learn more about building native executables, please consult <https://quarkus.io/guides/maven-tooling>.
+
+## Related Guides
+
+- Hibernate ORM with Panache ([guide](https://quarkus.io/guides/hibernate-orm-panache)): Simplify your persistence code for Hibernate ORM via the active record or the repository pattern
+- Messaging - Kafka Connector ([guide](https://quarkus.io/guides/kafka-getting-started)): Connect to Kafka with Reactive Messaging
+- JDBC Driver - PostgreSQL ([guide](https://quarkus.io/guides/datasource)): Connect to the PostgreSQL database via JDBC
+
+## Provided Code
+
+### Hibernate ORM
+
+Create your first JPA entity
+
+[Related guide section...](https://quarkus.io/guides/hibernate-orm)
+
+
+[Related Hibernate with Panache section...](https://quarkus.io/guides/hibernate-orm-panache)
+
+
+### Messaging codestart
+
+Use Quarkus Messaging
+
+[Related Apache Kafka guide section...](https://quarkus.io/guides/kafka-reactive-getting-started)
+
@@ -0,0 +1,225 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<project
+	xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"
+>
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>com.drinkool</groupId>
+        <artifactId>drinkool</artifactId>
+        <version>1.5.32</version>
+        <relativePath>../pom.xml</relativePath>
+    </parent>
+
+    <artifactId>eatery-service</artifactId>
+    <packaging>quarkus</packaging>
+
+    <properties>
+        <compiler-plugin.version>3.15.0</compiler-plugin.version>
+        <maven.compiler.release>25</maven.compiler.release>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <project.reporting.outputEncoding
+		>UTF-8</project.reporting.outputEncoding>
+        <quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>
+        <quarkus.platform.group-id
+		>io.quarkus.platform</quarkus.platform.group-id>
+        <quarkus.platform.version>3.32.4</quarkus.platform.version>
+        <skipITs>true</skipITs>
+        <surefire-plugin.version>3.5.4</surefire-plugin.version>
+        <org.mapstruct.version>1.6.3</org.mapstruct.version>
+        <org.projectlombok.version>1.18.46</org.projectlombok.version>
+    </properties>
+
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>${quarkus.platform.artifact-id}</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
+    <dependencies>
+        <dependency>
+            <groupId>com.drinkool</groupId>
+            <artifactId>lib</artifactId>
+            <version>${project.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-security</artifactId>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.projectlombok</groupId>
+            <artifactId>lombok</artifactId>
+            <version>${org.projectlombok.version}</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkiverse.mapstruct</groupId>
+            <artifactId>quarkus-mapstruct</artifactId>
+            <version>1.1.0</version>
+        </dependency>
+        <dependency>
+            <groupId>org.mapstruct</groupId>
+            <artifactId>mapstruct</artifactId>
+            <version>${org.mapstruct.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>net.datafaker</groupId>
+            <artifactId>datafaker</artifactId>
+            <version>2.0.2</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-smallrye-graphql</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-messaging-kafka</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.smallrye.reactive</groupId>
+            <artifactId>smallrye-reactive-messaging-in-memory</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.bitbucket.b_c</groupId>
+            <artifactId>jose4j</artifactId>
+            <version>0.9.3</version>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-jdbc-h2</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.rest-assured</groupId>
+            <artifactId>rest-assured</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-hibernate-orm-panache</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-jdbc-postgresql</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-arc</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-hibernate-orm</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-container-image-docker</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-junit</artifactId>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>quarkus-maven-plugin</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <extensions>true</extensions>
+            </plugin>
+            <plugin>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>${compiler-plugin.version}</version>
+                <configuration>
+                    <parameters>true</parameters>
+                    <annotationProcessorPaths>
+                        <path>
+                            <groupId>org.mapstruct</groupId>
+                            <artifactId>mapstruct-processor</artifactId>
+                            <version>${org.mapstruct.version}</version>
+                        </path>
+                        <path>
+                            <groupId>org.projectlombok</groupId>
+                            <artifactId>lombok</artifactId>
+                            <version>${org.projectlombok.version}</version>
+                        </path>
+                    </annotationProcessorPaths>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-surefire-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                    <forkCount>1</forkCount>
+                    <reuseForks>true</reuseForks>
+                    <redirectTestOutputToFile>true</redirectTestOutputToFile>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-failsafe-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>integration-test</goal>
+                            <goal>verify</goal>
+                        </goals>
+                    </execution>
+                </executions>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <native.image.path>
+                            ${project.build.directory}/${project.build.finalName}-runner</native.image.path>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+
+    <profiles>
+        <profile>
+            <id>native</id>
+            <activation>
+                <property>
+                    <name>native</name>
+                </property>
+            </activation>
+            <properties>
+                <quarkus.package.jar.enabled>false</quarkus.package.jar.enabled>
+                <skipITs>false</skipITs>
+                <quarkus.native.enabled>true</quarkus.native.enabled>
+            </properties>
+        </profile>
+    </profiles>
+</project>
@@ -0,0 +1,100 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.jvm -t quarkus/eatery-service-jvm .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service-jvm
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service-jvm
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-25-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+# We make four distinct layers so if there are application changes the library layers can be re-used
+COPY --chown=185 target/quarkus-app/lib/ /deployments/lib/
+COPY --chown=185 target/quarkus-app/*.jar /deployments/
+COPY --chown=185 target/quarkus-app/app/ /deployments/app/
+COPY --chown=185 target/quarkus-app/quarkus/ /deployments/quarkus/
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
+
@@ -0,0 +1,96 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dquarkus.package.jar.type=legacy-jar
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.legacy-jar -t quarkus/eatery-service-legacy-jar .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service-legacy-jar
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service-legacy-jar
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-25-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+COPY target/lib/* /deployments/lib/
+COPY target/*-runner.jar /deployments/quarkus-run.jar
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
@@ -0,0 +1,32 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
+# It uses a micro base image, tuned for Quarkus native executables.
+# It reduces the size of the resulting container image.
+# Check https://quarkus.io/guides/quarkus-runtime-base-image for further information about this image.
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dnative
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.native-micro -t quarkus/eatery-service .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/eatery-service
+#
+# The `quay.io/quarkus/ubi9-quarkus-micro-image:2.0` base image is based on UBI 9.
+# To use UBI 8, switch to `quay.io/quarkus/quarkus-micro-image:2.0`.
+###
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
+WORKDIR /work/
+RUN chown 1001 /work \
+    && chmod "g+rwX" /work \
+    && chown 1001:root /work
+COPY --chown=1001:root --chmod=0755 target/*-runner /work/application
+
+EXPOSE 8080
+USER 1001
+
+ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
@@ -0,0 +1,31 @@
+package com.drinkool.dtos;
+
+import com.drinkool.interfaces.MenuItemInterface;
+import io.quarkus.runtime.annotations.RegisterForReflection;
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+import org.eclipse.microprofile.graphql.Input;
+import org.eclipse.microprofile.graphql.NonNull;
+
+@Input
+@Getter
+@Setter
+@NoArgsConstructor
+@AllArgsConstructor
+@RegisterForReflection
+public class AddMenuItem implements MenuItemInterface {
+
+	@NonNull
+	private String name;
+
+	@NonNull
+	private Double price;
+
+	private Boolean available;
+
+	private String description;
+
+	private String imageUrl;
+}
@@ -0,0 +1,24 @@
+package com.drinkool.dtos;
+
+import java.time.LocalDate;
+import java.time.LocalTime;
+import lombok.NoArgsConstructor;
+import org.eclipse.microprofile.graphql.NonNull;
+
+@NoArgsConstructor
+public class CreateShift {
+
+	@NonNull
+	public LocalDate date;
+
+	@NonNull
+	public LocalTime startTime;
+
+	@NonNull
+	public LocalTime endTime;
+
+	public Integer maxStaff;
+
+	@NonNull
+	public Integer wage;
+}
@@ -0,0 +1,23 @@
+package com.drinkool.dtos;
+
+import com.drinkool.entities.MenuItemEntity;
+import com.drinkool.entities.ReviewEntity;
+import jakarta.enterprise.context.ApplicationScoped;
+import org.mapstruct.BeanMapping;
+import org.mapstruct.Mapper;
+import org.mapstruct.MappingTarget;
+import org.mapstruct.NullValuePropertyMappingStrategy;
+
+@ApplicationScoped
+@Mapper(componentModel = "cdi")
+public interface DtoMapper {
+	@BeanMapping(
+		nullValuePropertyMappingStrategy = NullValuePropertyMappingStrategy.IGNORE
+	)
+	void updateMenuItemToEntity(
+		UpdateMenuItem input,
+		@MappingTarget MenuItemEntity entity
+	);
+
+	ReviewEntity toReviewEntity(SendReview source);
+}
@@ -0,0 +1,10 @@
+package com.drinkool.dtos;
+
+import java.util.UUID;
+import org.eclipse.microprofile.graphql.NonNull;
+
+public class RegisterShift {
+
+	@NonNull
+	public UUID shiftId;
+}
@@ -0,0 +1,34 @@
+package com.drinkool.dtos;
+
+import com.drinkool.interfaces.EntityInterface;
+import com.drinkool.interfaces.MenuItemInterface;
+import io.quarkus.runtime.annotations.RegisterForReflection;
+import java.util.UUID;
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+import org.eclipse.microprofile.graphql.Input;
+import org.eclipse.microprofile.graphql.NonNull;
+
+@Input
+@Getter
+@Setter
+@NoArgsConstructor
+@AllArgsConstructor
+@RegisterForReflection
+public class UpdateMenuItem implements EntityInterface, MenuItemInterface {
+
+	@NonNull
+	UUID id;
+
+	String name;
+
+	Double price;
+
+	Boolean available;
+
+	String description;
+
+	String imageUrl;
+}
@@ -0,0 +1,66 @@
+package com.drinkool.entities;
+
+import jakarta.persistence.*;
+import jakarta.transaction.Transactional;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.UUID;
+
+@Entity
+@Table
+public class EateryEntity extends BaseEntity {
+
+	@Column(unique = true, nullable = false)
+	public UUID ownerId;
+
+	@Column(unique = true, nullable = false)
+	public String name;
+
+	@Column(nullable = false)
+	public boolean isVerified = false;
+
+	@OneToMany(
+		mappedBy = "eatery",
+		cascade = CascadeType.ALL,
+		orphanRemoval = true
+	)
+	public List<MenuItemEntity> menuItems = new ArrayList<>();
+
+	@OneToMany(
+		mappedBy = "eatery",
+		cascade = CascadeType.ALL,
+		orphanRemoval = true
+	)
+	public List<ShiftEntity> shifts = new ArrayList<>();
+
+	public EateryEntity() {}
+
+	@Transactional
+	public EateryEntity create(UUID ownerId, String name) {
+		EateryEntity existedEatery = EateryEntity.find(
+			"ownerId",
+			ownerId
+		).firstResult();
+
+		if (existedEatery != null) throw new RuntimeException("ExistedEatery");
+
+		this.ownerId = ownerId;
+		this.name = name;
+
+		this.persist();
+
+		return this;
+	}
+
+	@Transactional
+	public static EateryEntity findByOwnerId(String ownerId) {
+		UUID ownerUUID = UUID.fromString(ownerId);
+
+		return EateryEntity.find("ownerId", ownerUUID).firstResult();
+	}
+
+	@Transactional
+	public static EateryEntity findByOwnerId(UUID ownerId) {
+		return EateryEntity.find("ownerId", ownerId).firstResult();
+	}
+}
@@ -0,0 +1,60 @@
+package com.drinkool.entities;
+
+import com.drinkool.dtos.AddMenuItem;
+import com.drinkool.interfaces.MenuItemInterface;
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.FetchType;
+import jakarta.persistence.JoinColumn;
+import jakarta.persistence.ManyToOne;
+import jakarta.persistence.Table;
+import jakarta.transaction.Transactional;
+import lombok.Getter;
+import lombok.Setter;
+
+@Entity
+@Table
+@Getter
+@Setter
+public class MenuItemEntity extends BaseEntity implements MenuItemInterface {
+
+	@Column(nullable = false)
+	public String name;
+
+	@Column(nullable = false)
+	public Double price;
+
+	@Column(columnDefinition = "boolean default true")
+	public Boolean available;
+
+	@ManyToOne(fetch = FetchType.LAZY)
+	@JoinColumn(name = "eatery_id")
+	public EateryEntity eatery;
+
+	@Column(columnDefinition = "TEXT default ''")
+	public String description;
+
+	@Column(nullable = true)
+	public String imageUrl;
+
+	MenuItemEntity() {}
+
+	MenuItemEntity(MenuItemInterface input) {
+		this.setName(input.getName());
+		this.setPrice(input.getPrice());
+	}
+
+	/**
+	 * Phương thức tiện ích để tạo nhanh Menu Item từ tên
+	 */
+	@Transactional
+	public static MenuItemEntity create(EateryEntity eatery, AddMenuItem input) {
+		MenuItemEntity menuItem = new MenuItemEntity(input);
+
+		menuItem.eatery = eatery;
+
+		menuItem.persist();
+
+		return menuItem;
+	}
+}
@@ -0,0 +1,34 @@
+package com.drinkool.entities;
+
+import com.drinkool.interfaces.ReviewInterface;
+import jakarta.persistence.*;
+import java.util.UUID;
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+
+@Entity
+@Getter
+@Setter
+@NoArgsConstructor
+@AllArgsConstructor
+@Table(name = "reviews")
+public class ReviewEntity extends BaseEntity implements ReviewInterface {
+
+	@Column(nullable = true)
+	public UUID reviewerId;
+
+	public UUID eateryId;
+
+	public Integer rating;
+
+	public String comment;
+
+	public void setRating(Integer score) {
+		if (score < 1 || score > 5) {
+			throw new IllegalArgumentException("InvalidRatingValue");
+		}
+		this.rating = score;
+	}
+}
@@ -0,0 +1,45 @@
+package com.drinkool.entities;
+
+import jakarta.persistence.CascadeType;
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.FetchType;
+import jakarta.persistence.JoinColumn;
+import jakarta.persistence.ManyToOne;
+import jakarta.persistence.OneToMany;
+import jakarta.persistence.Table;
+import java.time.LocalDate;
+import java.time.LocalTime;
+import java.util.ArrayList;
+import java.util.List;
+
+@Entity
+@Table
+public class ShiftEntity extends BaseEntity {
+
+	@ManyToOne(fetch = FetchType.LAZY)
+	@JoinColumn(name = "eatery_id")
+	public EateryEntity eatery;
+
+	@Column(nullable = false)
+	public LocalDate date;
+
+	@Column(nullable = false)
+	public LocalTime startTime;
+
+	@Column(nullable = false)
+	public LocalTime endTime;
+
+	@Column(nullable = true)
+	public Integer maxStaff;
+
+	@Column(nullable = false)
+	public Integer wage;
+
+	@OneToMany(
+		mappedBy = "shift",
+		cascade = CascadeType.ALL,
+		orphanRemoval = true
+	)
+	public List<ShiftRegistrationEntity> registeredStaff = new ArrayList<>();
+}
@@ -0,0 +1,39 @@
+package com.drinkool.entities;
+
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.FetchType;
+import jakarta.persistence.JoinColumn;
+import jakarta.persistence.ManyToOne;
+import jakarta.persistence.Table;
+import java.util.List;
+import java.util.UUID;
+
+@Entity
+@Table
+public class ShiftRegistrationEntity extends BaseEntity {
+
+	@Column(nullable = false)
+	public UUID staffId;
+
+	@ManyToOne(fetch = FetchType.LAZY)
+	@JoinColumn(name = "shiftId")
+	public ShiftEntity shift;
+
+	public static long countByShift(UUID shiftId) {
+		return count("shift.id = ?1", shiftId);
+	}
+
+	public static List<ShiftRegistrationEntity> findOverlappingShifts(
+		UUID staffId,
+		ShiftEntity registratingShift
+	) {
+		return list(
+			"staffId = ?1 and shift.startTime < ?2 and shift.endTime > ?3 and shift.date = ?4",
+			staffId,
+			registratingShift.endTime,
+			registratingShift.startTime,
+			registratingShift.date
+		);
+	}
+}
@@ -0,0 +1,7 @@
+package com.drinkool.filters;
+
+import com.drinkool.BaseHeaderAuthentication;
+import jakarta.enterprise.context.ApplicationScoped;
+
+@ApplicationScoped
+public class HeaderRolesFilter extends BaseHeaderAuthentication {}
@@ -0,0 +1,156 @@
+package com.drinkool.services;
+
+import com.drinkool.InternalValue;
+import com.drinkool.Role;
+import com.drinkool.dtos.AddMenuItem;
+import com.drinkool.dtos.DtoMapper;
+import com.drinkool.dtos.UpdateMenuItem;
+import com.drinkool.dtos.event.ManagerCreate;
+import com.drinkool.entities.EateryEntity;
+import com.drinkool.entities.MenuItemEntity;
+import io.vertx.core.http.HttpServerRequest;
+import jakarta.annotation.security.RolesAllowed;
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.inject.Inject;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.PathParam;
+import jakarta.ws.rs.core.Response;
+import java.util.List;
+import java.util.UUID;
+import org.eclipse.microprofile.graphql.GraphQLApi;
+import org.eclipse.microprofile.graphql.Mutation;
+import org.eclipse.microprofile.graphql.Name;
+import org.eclipse.microprofile.graphql.Query;
+import org.eclipse.microprofile.reactive.messaging.Incoming;
+
+@ApplicationScoped
+@GraphQLApi
+@Path("/")
+public class EateryService {
+
+	@Inject
+	DtoMapper dtoMapper;
+
+	@Inject
+	HttpServerRequest request;
+
+	@GET
+	@Path("/{id}")
+	public Response checkEateryExists(@PathParam("id") UUID id) {
+		EateryEntity eatery = EateryEntity.findById(id);
+
+		if (eatery == null) {
+			return Response.status(Response.Status.BAD_REQUEST)
+				.entity("NotFoundEatery")
+				.build();
+		}
+
+		return Response.ok(eatery.ownerId.toString()).build();
+	}
+
+	@GET
+	@Path("/{eateryId}/{menuItemId}")
+	public Response getMenuItemPrice(
+		@PathParam("eateryId") UUID eateryId,
+		@PathParam("menuItemId") UUID menuItemId
+	) {
+		MenuItemEntity menuItem = MenuItemEntity.find(
+			"id = ?1 and eatery.id = ?2",
+			menuItemId,
+			eateryId
+		).firstResult();
+
+		if (menuItem == null) {
+			return Response.status(Response.Status.BAD_REQUEST)
+				.entity("NotFoundMenuItem")
+				.build();
+		}
+
+		return Response.ok(menuItem.price).build();
+	}
+
+	@Incoming("manager-in")
+	@Transactional
+	public void consumeManagerSignup(ManagerCreate input) {
+		EateryEntity eatery = new EateryEntity();
+
+		eatery.create(input.id, input.eateryName);
+	}
+
+	@Query("allEateries")
+	public List<EateryEntity> getAll() {
+		return EateryEntity.listAll();
+	}
+
+	@Query("eateryById")
+	public EateryEntity getEatery(@Name("id") UUID id) {
+		return EateryEntity.findById(id);
+	}
+
+	@Mutation("addMenuItem")
+	@RolesAllowed(Role.Manager)
+	@Transactional
+	public MenuItemEntity addMenuItem(@Name("menuItem") AddMenuItem menuItem) {
+		String ownerId = request.getHeader(InternalValue.userId);
+
+		EateryEntity eatery = EateryEntity.findByOwnerId(ownerId);
+		if (eatery == null) return null;
+
+		MenuItemEntity item = MenuItemEntity.create(eatery, menuItem);
+
+		return item;
+	}
+
+	@Mutation("updateMenuItem")
+	@RolesAllowed(Role.Manager)
+	@Transactional
+	public MenuItemEntity updateMenuItem(UpdateMenuItem menuItem) {
+		UUID ownerId = UUID.fromString(request.getHeader(InternalValue.userId));
+
+		MenuItemEntity item = MenuItemEntity.find(
+			"id = ?1 and eatery.ownerId = ?2",
+			menuItem.getId(),
+			ownerId
+		).firstResult();
+
+		if (item == null) return null;
+
+		dtoMapper.updateMenuItemToEntity(menuItem, item);
+
+		item.persist();
+
+		return item;
+	}
+
+	@Mutation("deleteMenuItem")
+	@RolesAllowed(Role.Manager)
+	@Transactional
+	public boolean deleteMenuItem(@Name("menuItemId") UUID menuItemId) {
+		UUID ownerId = UUID.fromString(request.getHeader(InternalValue.userId));
+
+		MenuItemEntity item = MenuItemEntity.find(
+			"id = ?1 and eatery.ownerId = ?2",
+			menuItemId,
+			ownerId
+		).firstResult();
+
+		if (item == null) return false;
+
+		item.delete();
+
+		return true;
+	}
+
+	@Query("menuItemsByEatery")
+	public List<MenuItemEntity> getMenuItemsByEatery(
+		@Name("eateryId") UUID eateryId
+	) {
+		EateryEntity eatery = EateryEntity.findById(eateryId);
+
+		if (eatery == null) return List.of();
+
+		return MenuItemEntity.list("eatery", eatery);
+	}
+}
@@ -0,0 +1,70 @@
+package com.drinkool.services;
+
+import com.drinkool.InternalValue;
+import com.drinkool.Role;
+import com.drinkool.Url;
+import com.drinkool.dtos.DtoMapper;
+import com.drinkool.dtos.SendReview;
+import com.drinkool.entities.ReviewEntity;
+import com.drinkool.enums.SortBy;
+import io.quarkus.panache.common.Sort;
+import io.vertx.core.http.HttpServerRequest;
+import jakarta.inject.Inject;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.DefaultValue;
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.POST;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.PathParam;
+import jakarta.ws.rs.QueryParam;
+import jakarta.ws.rs.core.Response;
+import java.util.UUID;
+
+@Path(Url.Review)
+public class ReviewService {
+
+	@Inject
+	HttpServerRequest request;
+
+	@Inject
+	DtoMapper dtoMapper;
+
+	@GET
+	@Transactional
+	@Path("/{eateryId}")
+	public Response getReviewsByEatery(
+		@PathParam("eateryId") UUID eateryId,
+		@QueryParam("sort") @DefaultValue("LATEST") SortBy sortBy
+	) {
+		Sort sort = switch (sortBy) {
+			case LATEST -> Sort.descending("createDate");
+			case OLDEST -> Sort.ascending("createDate");
+			case HIGHEST -> Sort.descending("rating");
+			case LOWEST -> Sort.ascending("rating");
+		};
+
+		return Response.ok()
+			.entity(ReviewEntity.find("eateryId = ?1", sort, eateryId).list())
+			.build();
+	}
+
+	@POST
+	@Transactional
+	public Response receiveReview(SendReview input) {
+		String userId = request.getHeader(InternalValue.userId);
+
+		try {
+			ReviewEntity entity = dtoMapper.toReviewEntity(input);
+
+			if (userId != null) entity.setReviewerId(UUID.fromString(userId));
+
+			entity.persist();
+
+			return Response.status(Response.Status.CREATED).build();
+		} catch (Exception e) {
+			return Response.status(Response.Status.BAD_REQUEST)
+				.entity(e.getMessage())
+				.build();
+		}
+	}
+}
@@ -0,0 +1,208 @@
+package com.drinkool.services;
+
+import com.drinkool.InternalValue;
+import com.drinkool.Role;
+import com.drinkool.dtos.CreateShift;
+import com.drinkool.dtos.RegisterShift;
+import com.drinkool.entities.EateryEntity;
+import com.drinkool.entities.ShiftEntity;
+import com.drinkool.entities.ShiftRegistrationEntity;
+import io.vertx.core.http.HttpServerRequest;
+import jakarta.annotation.security.RolesAllowed;
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.inject.Inject;
+import jakarta.transaction.Transactional;
+import java.util.List;
+import java.util.UUID;
+import java.util.stream.Collectors;
+import org.eclipse.microprofile.graphql.*;
+
+@GraphQLApi
+@ApplicationScoped
+public class ShiftService {
+
+	@Inject
+	HttpServerRequest request;
+
+	// --- QUERIES ---
+
+	@Query("allShifts")
+	@Description("Lấy danh sách tất cả các loại ca trực")
+	@RolesAllowed({ Role.Staff, Role.Manager })
+	public List<ShiftEntity> getAllShifts() throws GraphQLException {
+		String ownerId = request.getHeader(InternalValue.managerId);
+		if (ownerId == null || ownerId.isEmpty()) {
+			ownerId = request.getHeader(InternalValue.userId);
+		}
+
+		EateryEntity eatery = EateryEntity.findByOwnerId(ownerId);
+
+		return ShiftEntity.list("eatery", eatery);
+	}
+
+	@Query("myRegistrations")
+	@Description("Lấy danh sách ca trực mà nhân viên hiện tại đã đăng ký")
+	@RolesAllowed(Role.Staff)
+	public List<ShiftRegistrationEntity> getMyShifts() {
+		String userId = request.getHeader(InternalValue.userId);
+		return ShiftRegistrationEntity.list("staffId", UUID.fromString(userId));
+	}
+
+	@Query("allRegistrations")
+	@Description("Manager xem toàn bộ danh sách đăng ký của tất cả nhân viên")
+	@RolesAllowed(Role.Manager)
+	public List<ShiftRegistrationEntity> getAllRegistrations() {
+		return ShiftRegistrationEntity.listAll();
+	}
+
+	// --- MUTATIONS ---
+
+	@Mutation("registerShift")
+	@Description("Nhân viên đăng ký vào một ca trực cụ thể")
+	@RolesAllowed(Role.Staff)
+	@Transactional
+	public ShiftRegistrationEntity registerShift(
+		@Name("registration") RegisterShift registration
+	) throws GraphQLException {
+		String userIdStr = request.getHeader(InternalValue.userId);
+		String managerIdStr = request.getHeader(InternalValue.managerId);
+		UUID staffId = UUID.fromString(userIdStr);
+
+		EateryEntity eatery = EateryEntity.findByOwnerId(managerIdStr);
+		if (eatery == null) throw new GraphQLException("NotFoundEatery");
+
+		ShiftEntity shift = ShiftEntity.find(
+			"id = ?1 and eatery.id = ?2",
+			registration.shiftId,
+			eatery.id
+		).firstResult();
+		if (shift == null) throw new GraphQLException("NotFoundShift");
+
+		List<ShiftRegistrationEntity> overlappingShifts =
+			ShiftRegistrationEntity.findOverlappingShifts(staffId, shift);
+
+		if (!overlappingShifts.isEmpty()) {
+			String ids = overlappingShifts
+				.stream()
+				.map(reg -> reg.shift.id.toString())
+				.distinct()
+				.collect(Collectors.joining(", "));
+			throw new GraphQLException("OverlappingShift: " + ids);
+		}
+
+		long currentStaffCount = ShiftRegistrationEntity.countByShift(shift.id);
+		if (shift.maxStaff != null && currentStaffCount >= shift.maxStaff) {
+			throw new GraphQLException("FulledShift");
+		}
+
+		ShiftRegistrationEntity record = new ShiftRegistrationEntity();
+		record.staffId = staffId;
+		record.shift = shift;
+		record.persist();
+
+		return record;
+	}
+
+	@Mutation("createShift")
+	@Description("Quản lý tạo mới một loại ca trực")
+	@RolesAllowed(Role.Manager)
+	@Transactional
+	public ShiftEntity createShift(@Name("shiftInput") CreateShift input)
+		throws GraphQLException {
+		String ownerId = request.getHeader(InternalValue.userId);
+
+		EateryEntity eatery = EateryEntity.findByOwnerId(ownerId);
+		if (eatery == null) return null;
+
+		ShiftEntity shift = new ShiftEntity();
+		shift.eatery = eatery;
+		shift.date = input.date;
+		shift.startTime = input.startTime;
+		shift.endTime = input.endTime;
+		shift.maxStaff = input.maxStaff;
+		shift.wage = input.wage;
+
+		if (shift.endTime.isBefore(shift.startTime)) {
+			throw new GraphQLException("InvalidEndTime");
+		}
+
+		shift.persist();
+		return shift;
+	}
+
+	@Mutation("updateShift")
+	@Description("Quản lý cập nhật thông tin ca trực")
+	@RolesAllowed(Role.Manager)
+	@Transactional
+	public ShiftEntity updateShift(
+		@Name("id") UUID id,
+		@Name("shiftInput") CreateShift input
+	) throws GraphQLException {
+		ShiftEntity shift = ShiftEntity.findById(id);
+		if (shift == null) throw new GraphQLException("NotFoundShift");
+
+		String ownerId = request.getHeader(InternalValue.userId);
+		if (
+			!shift.eatery.ownerId.toString().equals(ownerId)
+		) throw new GraphQLException("InvalidShiftId");
+
+		shift.startTime = input.startTime;
+		shift.endTime = input.endTime;
+		shift.maxStaff = input.maxStaff;
+
+		if (shift.endTime.isBefore(shift.startTime)) {
+			throw new GraphQLException("InvalidEndTime");
+		}
+
+		shift.persist();
+
+		return shift;
+	}
+
+	@Mutation("deleteShift")
+	@Description("Quản lý xóa một ca trực")
+	@RolesAllowed(Role.Manager)
+	@Transactional
+	public boolean deleteShift(@Name("id") UUID id) throws GraphQLException {
+		String ownerId = request.getHeader(InternalValue.userId);
+
+		EateryEntity eatery = EateryEntity.findByOwnerId(ownerId);
+		if (eatery == null) {
+			throw new GraphQLException("NotFoundEatery");
+		}
+
+		ShiftEntity shift = ShiftEntity.find(
+			"id = ?1 and eatery = ?2",
+			id,
+			eatery
+		).firstResult();
+		if (shift == null) {
+			throw new GraphQLException("NotFoundShiftOrAccessDenied");
+		}
+
+		long count = ShiftRegistrationEntity.count("shift.id", id);
+		if (count > 0) throw new GraphQLException(
+			"CannotDeleteShiftWithRegistrations"
+		);
+
+		return ShiftEntity.deleteById(id);
+	}
+
+	@Mutation("cancelRegistration")
+	@Description("Nhân viên hủy ca đã đăng ký")
+	@RolesAllowed(Role.Staff)
+	@Transactional
+	public boolean cancelRegistration(@Name("registrationId") UUID id)
+		throws GraphQLException {
+		String userId = request.getHeader(InternalValue.userId);
+		ShiftRegistrationEntity reg = ShiftRegistrationEntity.findById(id);
+
+		if (reg == null) throw new GraphQLException("RegistrationNotFound");
+		if (!reg.staffId.equals(UUID.fromString(userId))) {
+			throw new GraphQLException("NotYourRegistration");
+		}
+
+		reg.delete();
+		return true;
+	}
+}
@@ -0,0 +1,39 @@
+# Postgress
+## Cấu hình Database
+quarkus.datasource.db-kind=postgresql
+quarkus.datasource.username=postgres
+quarkus.datasource.password=password
+quarkus.datasource.jdbc.url=jdbc:postgresql://host.docker.internal:5432/postgres
+
+## Tự động tạo bảng từ Entity (chỉ dùng cho môi trường dev)
+quarkus.hibernate-orm.database.generation=update
+
+# Docker
+quarkus.container-image.registry=vps.demonkernel.io.vn
+quarkus.container-image.group=foodsurf
+quarkus.container-image.name=eatery-service
+quarkus.container-image.push=true
+quarkus.container-image.build=true
+quarkus.container-image.builder=docker
+quarkus.container-image.additional-tags=latest
+
+# Dependency
+quarkus.index-dependency.lib.group-id=com.drinkool
+quarkus.index-dependency.lib.artifact-id=lib
+
+# Build
+quarkus.native.container-build=true
+quarkus.native.remote-container-build=true
+quarkus.native.additional-build-args=--future-defaults=all
+
+# Kafka
+%prod.mp.messaging.connector.smallrye-kafka.bootstrap.servers=${KAFKA_SERVICE_SERVICE_HOST:host.docker.internal}:9092
+
+## Create restaurant topic
+mp.messaging.incoming.manager-in.connector=smallrye-kafka
+mp.messaging.incoming.manager-in.topic=create-restaurant
+mp.messaging.incoming.manager-in.auto.offset.reset=earliest
+quarkus.messaging.kafka.serializer-generation.enabled=true
+
+# Rest Client
+quarkus.rest-client.account.url=http://account-service
@@ -0,0 +1,6 @@
+-- This file allow to write SQL commands that will be emitted in test and dev.
+-- The commands are commented as their support depends of the database
+-- insert into myentity (id, field) values(1, 'field-1');
+-- insert into myentity (id, field) values(2, 'field-2');
+-- insert into myentity (id, field) values(3, 'field-3');
+-- alter sequence myentity_seq restart with 4;
@@ -0,0 +1,343 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.given;
+import static org.hamcrest.CoreMatchers.is;
+import static org.hamcrest.CoreMatchers.not;
+import static org.hamcrest.CoreMatchers.notNullValue;
+import static org.hamcrest.Matchers.hasItems;
+import static org.hamcrest.Matchers.hasSize;
+
+import com.drinkool.InternalValue;
+import com.drinkool.Role;
+import com.drinkool.dtos.AddMenuItem;
+import com.drinkool.dtos.event.ManagerCreate;
+import com.drinkool.entities.EateryEntity;
+import com.drinkool.entities.MenuItemEntity;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import io.smallrye.reactive.messaging.memory.InMemoryConnector;
+import jakarta.enterprise.context.control.ActivateRequestContext;
+import jakarta.enterprise.inject.Any;
+import jakarta.inject.Inject;
+import jakarta.transaction.Transactional;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.UUID;
+import net.datafaker.Faker;
+import org.junit.jupiter.api.Assertions;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class EateryServiceTest {
+
+	private final Faker faker = new Faker();
+
+	@Inject
+	@Any
+	InMemoryConnector connector;
+
+	@Test
+	@ActivateRequestContext
+	void testConsumeManagerSignup() throws InterruptedException {
+		// 1. Chuẩn bị dữ liệu giả lập
+		ManagerCreate input = new ManagerCreate();
+		input.id = UUID.randomUUID(); // Giả sử manager ID là 99
+		input.eateryName = "Quan Bun Cha Test";
+
+		// 2. Đẩy tin nhắn vào channel "manager-in" bằng InMemoryConnector
+		connector.source("manager-in").send(input);
+
+		Thread.sleep(1000);
+
+		// 3. Kiểm tra kết quả trong Database
+		// Lưu ý: Vì xử lý Kafka là bất đồng bộ, đôi khi cần đợi vài miligiây
+		// nhưng với InMemoryConnector thì thường là tức thì.
+
+		EateryEntity eatery = EateryEntity.find("ownerId", input.id).firstResult();
+
+		Assertions.assertNotNull(eatery, "Eatery should be created in DB");
+		Assertions.assertEquals("Quan Bun Cha Test", eatery.name);
+	}
+
+	private UUID savedEateryId;
+	private String savedEateryName;
+	private UUID savedOwnerId = UUID.randomUUID();
+	private UUID savedMenuItemId;
+
+	@BeforeEach
+	@Transactional
+	void setup() {
+		MenuItemEntity.deleteAll();
+		EateryEntity.deleteAll();
+
+		savedEateryName = faker.restaurant().name();
+
+		EateryEntity eatery = new EateryEntity();
+		eatery = eatery.create(savedOwnerId, savedEateryName);
+		savedEateryId = eatery.id;
+
+		for (int i = 0; i < 2; i++) {
+			EateryEntity e = new EateryEntity();
+			e.create(UUID.randomUUID(), faker.restaurant().name());
+		}
+
+		for (int i = 0; i < 3; i++) {
+			savedMenuItemId = MenuItemEntity.create(
+				eatery,
+				new AddMenuItem(
+					faker.food().dish(),
+					faker.number().randomDouble(2, 10, 100),
+					true,
+					"",
+					""
+				)
+			).id;
+		}
+	}
+
+	@Test
+	void testGetAllEateries() {
+		// Cấu trúc query GraphQL
+		String query = "{ \"query\": \"{ allEateries { ownerId name } }\" }";
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(query)
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			// GraphQL trả về dữ liệu bọc trong object "data"
+			.body("data.allEateries", notNullValue())
+			.body("data.allEateries.name", hasItems(savedEateryName));
+	}
+
+	@Test
+	void testGetEateryById() {
+		// Sử dụng biến id đã lưu ở setup
+		// Lưu ý: Trong GraphQL, String/UUID phải nằm trong dấu ngoặc kép
+		String query = String.format(
+			"{ \"query\": \"{ eateryById(id: \\\"%s\\\") { ownerId name } }\" }",
+			savedEateryId
+		);
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(query)
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("data.eateryById.name", is(savedEateryName));
+	}
+
+	@Test
+	public void testAddMenuItemSuccess() {
+		String mutation =
+			"mutation addMenuItem($menuItem: AddMenuItemInput!) {" +
+			"  addMenuItem(menuItem: $menuItem) {" +
+			"    id" +
+			"    name" +
+			"    price" +
+			"  }" +
+			"}";
+
+		Map<String, Object> menuItemData = new HashMap<>();
+		menuItemData.put("name", "Trà Sữa");
+		menuItemData.put("price", 30000.0);
+
+		Map<String, Object> variables = new HashMap<>();
+		variables.put("menuItem", menuItemData);
+
+		Map<String, Object> requestBody = new HashMap<>();
+		requestBody.put("query", mutation);
+		requestBody.put("variables", variables);
+
+		given()
+			.contentType(ContentType.JSON)
+			.header(InternalValue.role, Role.Manager)
+			.header(InternalValue.userId, savedOwnerId) // Thay "x-user-id" bằng InternalValue.userId của bạn
+			.body(requestBody)
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("data.addMenuItem.name", is("Trà Sữa"))
+			.body("data.addMenuItem.id", notNullValue());
+	}
+
+	@Test
+	public void testAddMenuItemFailInvalidRole() {
+		String mutation =
+			"mutation addMenuItem($menuItem: AddMenuItemInput!) {" +
+			"  addMenuItem(menuItem: $menuItem) {" +
+			"    id" +
+			"    name" +
+			"    price" +
+			"  }" +
+			"}";
+
+		Map<String, Object> menuItemData = new HashMap<>();
+		menuItemData.put("name", "Trà Sữa");
+		menuItemData.put("price", 30000.0);
+
+		Map<String, Object> variables = new HashMap<>();
+		variables.put("menuItem", menuItemData);
+
+		Map<String, Object> requestBody = new HashMap<>();
+		requestBody.put("query", mutation);
+		requestBody.put("variables", variables);
+
+		given()
+			.contentType(ContentType.JSON)
+			.header(InternalValue.role, Role.Customer)
+			.header(InternalValue.userId, savedOwnerId)
+			.body(requestBody)
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200);
+	}
+
+	@Test
+	public void testAddMenuItemFailInvalidOwner() {
+		String mutation =
+			"mutation { addMenuItem(name: \"Coffee\", price: 20000.0) { id } }";
+
+		Map<String, Object> requestBody = new HashMap<>();
+		requestBody.put("query", mutation);
+
+		given()
+			.contentType(ContentType.JSON)
+			.header(InternalValue.role, Role.Manager)
+			.header(InternalValue.userId, UUID.randomUUID())
+			.body(requestBody)
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("data.addMenuItem", is((Object) null));
+	}
+
+	@Test
+	public void testGetMenuItemsByEatery_Success() {
+		String query =
+			"query getItems($id: String!) {" +
+			"  menuItemsByEatery(eateryId: $id) {" +
+			"    id" +
+			"    name" +
+			"    price" +
+			"  }" +
+			"}";
+
+		Map<String, Object> variables = new HashMap<>();
+		variables.put("id", savedEateryId.toString());
+
+		Map<String, Object> requestBody = new HashMap<>();
+		requestBody.put("query", query);
+		requestBody.put("variables", variables);
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(requestBody)
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("data.menuItemsByEatery", hasSize(not(0)));
+	}
+
+	@Test
+	public void testGetMenuItemsByEatery_NotFound() {
+		String randomId = UUID.randomUUID().toString();
+
+		String query =
+			"query getItems($id: String!) {" +
+			"  menuItemsByEatery(eateryId: $id) {" +
+			"    id" +
+			"  }" +
+			"}";
+
+		Map<String, Object> variables = new HashMap<>();
+		variables.put("id", randomId);
+
+		Map<String, Object> requestBody = new HashMap<>();
+		requestBody.put("query", query);
+		requestBody.put("variables", variables);
+
+		given()
+			.contentType(ContentType.JSON)
+			.body(requestBody)
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("data.menuItemsByEatery", hasSize(0)); // Phải trả về List rỗng như code bạn viết
+	}
+
+	@Test
+	public void testUpdateMenuItem_Success() {
+		String mutation = """
+			    mutation updateMenuItem($menuItem: UpdateMenuItemInput!) {
+			        updateMenuItem(menuItem: $menuItem) {
+			            id
+			            name
+			            price
+			        }
+			    }
+			""";
+
+		String newValue = "Phở Bò";
+
+		Map<String, Object> menuItemData = new HashMap<>();
+		menuItemData.put("id", savedMenuItemId);
+		menuItemData.put("name", newValue);
+
+		Map<String, Object> variables = new HashMap<>();
+		variables.put("menuItem", menuItemData);
+
+		Map<String, Object> requestBody = new HashMap<>();
+		requestBody.put("query", mutation);
+		requestBody.put("variables", variables);
+
+		given()
+			.contentType(ContentType.JSON)
+			.header(InternalValue.role, Role.Manager)
+			.header(InternalValue.userId, savedOwnerId)
+			.body(requestBody)
+			.when()
+			.post("/graphql")
+			.then()
+			.body("data.updateMenuItem.name", is(newValue))
+			.body("data.updateMenuItem.id", is(savedMenuItemId.toString()))
+			.statusCode(200);
+	}
+
+	@Test
+	public void testDeleteMenuItem_Success() {
+		String mutation = """
+			    mutation deleteItem($input: String!) {
+			        deleteMenuItem(menuItemId: $input)
+			    }
+			""";
+
+		Map<String, Object> variables = new HashMap<>();
+		variables.put("input", savedMenuItemId.toString());
+
+		Map<String, Object> requestBody = new HashMap<>();
+		requestBody.put("query", mutation);
+		requestBody.put("variables", variables);
+
+		given()
+			.contentType(ContentType.JSON)
+			.header(InternalValue.role, Role.Manager)
+			.header(InternalValue.userId, savedOwnerId)
+			.body(requestBody)
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("data.deleteMenuItem", is(true));
+	}
+}
@@ -0,0 +1,115 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.given;
+import static org.hamcrest.CoreMatchers.is;
+import static org.junit.jupiter.api.Assertions.*;
+
+import com.drinkool.InternalValue;
+import com.drinkool.Role;
+import com.drinkool.Url;
+import com.drinkool.dtos.SendReview;
+import com.drinkool.entities.EateryEntity;
+import com.drinkool.entities.MenuItemEntity;
+import com.drinkool.entities.ReviewEntity;
+import io.quarkus.test.junit.QuarkusTest;
+import io.restassured.http.ContentType;
+import jakarta.transaction.Transactional;
+import jakarta.ws.rs.core.Response;
+import java.util.UUID;
+import net.datafaker.Faker;
+import org.junit.jupiter.api.*;
+
+@QuarkusTest
+public class ReviewServiceTest {
+
+	private final Faker faker = new Faker();
+
+	private UUID savedEateryId;
+	private String savedEateryName;
+	private UUID savedOwnerId;
+
+	@BeforeEach
+	@Transactional
+	void setup() {
+		ReviewEntity.deleteAll();
+		MenuItemEntity.deleteAll();
+		EateryEntity.deleteAll();
+
+		savedEateryName = faker.restaurant().name();
+		savedOwnerId = UUID.randomUUID();
+
+		EateryEntity eatery = new EateryEntity();
+		eatery = eatery.create(savedOwnerId, savedEateryName);
+
+		savedEateryId = eatery.id;
+
+		for (int i = 0; i < 3; i++) {
+			ReviewEntity entity = new ReviewEntity(
+				UUID.randomUUID(),
+				eatery.id,
+				faker.random().nextInt(1, 5),
+				faker.famousLastWords().lastWords()
+			);
+
+			entity.persist();
+		}
+	}
+
+	@Test
+	void receiveReview_Success() {
+		UUID reviewerId = UUID.randomUUID();
+		String comment = faker.famousLastWords().lastWords();
+		int rating = faker.random().nextInt(1, 5);
+
+		SendReview input = new SendReview(
+			reviewerId,
+			savedEateryId,
+			rating,
+			comment
+		);
+
+		given()
+			.header(InternalValue.role, Role.Customer)
+			.header(InternalValue.userId, reviewerId)
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Url.Review)
+			.then()
+			.statusCode(Response.Status.CREATED.getStatusCode());
+
+		assertEquals(1, ReviewEntity.find("reviewerId", reviewerId).count());
+	}
+
+	@Test
+	void receiveReview_FailedDueToInvalidRating() {
+		UUID reviewerId = UUID.randomUUID();
+		UUID eateryId = UUID.randomUUID();
+		String comment = faker.famousLastWords().lastWords();
+		int rating = faker.random().nextInt(6, 10);
+
+		SendReview input = new SendReview(reviewerId, eateryId, rating, comment);
+
+		given()
+			.header(InternalValue.role, Role.Customer)
+			.header(InternalValue.userId, UUID.randomUUID())
+			.contentType(ContentType.JSON)
+			.body(input)
+			.when()
+			.post(Url.Review)
+			.then()
+			.contentType(ContentType.TEXT)
+			.body(is("InvalidRatingValue"))
+			.statusCode(Response.Status.BAD_REQUEST.getStatusCode());
+	}
+
+	@Test
+	public void testGetReviews_DefaultLatest() {
+		given()
+			.when()
+			.get(Url.Review + '/' + savedEateryId.toString())
+			.then()
+			.statusCode(Response.Status.OK.getStatusCode())
+			.contentType(ContentType.JSON);
+	}
+}
@@ -0,0 +1,243 @@
+package com.drinkool.services;
+
+import static io.restassured.RestAssured.given;
+import static org.hamcrest.Matchers.*;
+
+import com.drinkool.InternalValue;
+import com.drinkool.Role;
+import com.drinkool.entities.EateryEntity;
+import com.drinkool.entities.ShiftEntity;
+import com.drinkool.entities.ShiftRegistrationEntity;
+import io.quarkus.test.junit.QuarkusTest;
+import jakarta.transaction.Transactional;
+import java.time.LocalDate;
+import java.time.LocalTime;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.UUID;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+@QuarkusTest
+public class ShiftServiceTest {
+
+	@BeforeEach
+	@Transactional
+	void setup() {
+		ShiftRegistrationEntity.deleteAll();
+		ShiftEntity.deleteAll();
+	}
+
+	// --- TEST QUERIES ---
+
+	@Test
+	void testGetAllShifts() {
+		UUID ownerId = createMockOwner();
+		EateryEntity eatery = createMockEatery(ownerId);
+
+		createMockShift("Ca Sáng", "08:00:00", "12:00:00", eatery);
+
+		given()
+			.header(InternalValue.role, Role.Manager)
+			.header(InternalValue.userId, ownerId)
+			.contentType("application/json")
+			.body("{ \"query\": \"{ allShifts { startTime } }\" }")
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("data.allShifts", hasSize(1));
+	}
+
+	// --- TEST MUTATIONS ---
+
+	@Test
+	void testCreateShift_AsManager() {
+		String query = """
+			mutation createShift($shiftInput: CreateShiftInput!) {
+				createShift(shiftInput: $shiftInput) {
+					id
+					date
+					startTime
+					endTime
+					maxStaff
+					wage
+					registeredStaff {
+						staffId
+					}
+				}
+			}
+			""";
+
+		Map<String, Object> input = new HashMap<>();
+		input.put("date", "26/04/2026");
+		input.put("startTime", "08:00:00");
+		input.put("endTime", "12:00:00");
+		input.put("maxStaff", 5);
+		input.put("wage", 1000000);
+
+		Map<String, Object> body = new HashMap<>();
+		body.put("query", query);
+		body.put("variables", Map.of("shiftInput", input));
+
+		UUID ownerId = createMockOwner();
+		createMockEatery(ownerId);
+
+		given()
+			.contentType("application/json")
+			.header(InternalValue.role, Role.Manager)
+			.header(InternalValue.userId, ownerId)
+			.body(body)
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200);
+	}
+
+	@Test
+	void testRegisterShift_Success() {
+		UUID ownerId = createMockOwner();
+		EateryEntity eatery = createMockEatery(ownerId);
+
+		ShiftEntity shift = createMockShift(
+			"Ca Tối",
+			"18:00:00",
+			"22:00:00",
+			eatery
+		);
+		UUID staffId = UUID.randomUUID();
+
+		String mutation = String.format(
+			"mutation { registerShift(registration: { shiftId: \\\"%s\\\" }) { id staffId } }",
+			shift.id
+		);
+
+		given()
+			.contentType("application/json")
+			.header(InternalValue.role, Role.Staff)
+			.header(InternalValue.userId, staffId.toString())
+			.header(InternalValue.managerId, ownerId.toString())
+			.body("{ \"query\": \"" + mutation + "\" }")
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("data.registerShift.staffId", is(staffId.toString()));
+	}
+
+	@Test
+	void testRegisterShift_Overlap_Fail() {
+		UUID ownerId = createMockOwner();
+		EateryEntity eatery = createMockEatery(ownerId);
+		UUID staffId = UUID.randomUUID();
+
+		// Tạo 2 ca bị trùng giờ nhau
+		ShiftEntity shift1 = createMockShift(
+			"Ca 1",
+			"08:00:00",
+			"12:00:00",
+			eatery
+		);
+		ShiftEntity shift2 = createMockShift(
+			"Ca 2",
+			"10:00:00",
+			"14:00:00",
+			eatery
+		);
+
+		// Đăng ký ca 1 trước
+		registerStaffToShift(staffId, shift1);
+
+		// Đăng ký ca 2 (sẽ bị overlap)
+		String mutation = String.format(
+			"mutation { registerShift(registration: { shiftId: \\\"%s\\\" }) { id } }",
+			shift2.id
+		);
+
+		given()
+			.contentType("application/json")
+			.header(InternalValue.userId, staffId.toString())
+			.header(InternalValue.managerId, ownerId.toString())
+			.header(InternalValue.role, Role.Staff)
+			.body("{ \"query\": \"" + mutation + "\" }")
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("errors", notNullValue())
+			.body("errors[0].message", containsString("OverlappingShift"));
+	}
+
+	@Test
+	void testDeleteShift_WithRegistrations_Fail() {
+		UUID ownerId = createMockOwner();
+		EateryEntity eatery = createMockEatery(ownerId);
+		ShiftEntity shift = createMockShift(
+			"Ca Xóa",
+			"08:00:00",
+			"12:00:00",
+			eatery
+		);
+		registerStaffToShift(UUID.randomUUID(), shift);
+
+		String mutation = String.format(
+			"mutation { deleteShift(id: \\\"%s\\\") }",
+			shift.id
+		);
+
+		given()
+			.header(InternalValue.userId, ownerId.toString())
+			.header(InternalValue.role, Role.Manager)
+			.contentType("application/json")
+			.body("{ \"query\": \"" + mutation + "\" }")
+			.when()
+			.post("/graphql")
+			.then()
+			.statusCode(200)
+			.body("errors[0].message", is("CannotDeleteShiftWithRegistrations"));
+	}
+
+	// --- HELPER METHODS ---
+
+	@Transactional
+	ShiftEntity createMockShift(
+		String name,
+		String start,
+		String end,
+		EateryEntity eatery
+	) {
+		ShiftEntity shift = new ShiftEntity();
+		shift.eatery = eatery;
+		shift.date = LocalDate.now();
+		shift.startTime = LocalTime.parse(start);
+		shift.endTime = LocalTime.parse(end);
+		shift.wage = 10000;
+		shift.maxStaff = 5;
+		shift.persist();
+		return shift;
+	}
+
+	@Transactional
+	void registerStaffToShift(UUID staffId, ShiftEntity shift) {
+		ShiftRegistrationEntity reg = new ShiftRegistrationEntity();
+		reg.staffId = staffId;
+		reg.shift = shift;
+		reg.persist();
+	}
+
+	@Transactional
+	public UUID createMockOwner() {
+		return UUID.randomUUID();
+	}
+
+	@Transactional
+	public EateryEntity createMockEatery(UUID ownerId) {
+		EateryEntity eatery = new EateryEntity();
+		eatery.name = "Nhà hàng " + ownerId.toString().substring(0, 5);
+		eatery.ownerId = ownerId;
+		eatery.persist();
+
+		EateryEntity.getEntityManager().flush();
+		return eatery;
+	}
+}
@@ -0,0 +1,13 @@
+# Quarkus
+quarkus.http.host=0.0.0.0
+
+# Database
+## Datasource
+%test.quarkus.datasource.db-kind=h2
+%test.quarkus.datasource.jdbc.url=jdbc:h2:mem:test_db;DB_CLOSE_DELAY=-1
+
+## Orm
+%test.quarkus.hibernate-orm.database.generation=drop-and-create
+
+# Kafka
+mp.messaging.incoming.manager-in.connector=smallrye-in-memory
@@ -0,0 +1,4 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.15/apache-maven-3.9.15-bin.zip
+distributionSha256Sum=b0d9292f06c5faded31ddcb6cb69099f316d6fea40a7778624b259bad9fed18a
@@ -0,0 +1,124 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<project
+	xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"
+>
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>com.drinkool</groupId>
+        <artifactId>drinkool</artifactId>
+        <version>1.5.32</version>
+        <relativePath>../pom.xml</relativePath>
+    </parent>
+
+    <artifactId>file-service</artifactId>
+
+    <properties>
+        <quarkus.container-image.registry
+		>vps.demonkernel.io.vn</quarkus.container-image.registry>
+        <quarkus.container-image.group>foodsurf</quarkus.container-image.group>
+        <quarkus.container-image.name
+		>file-service</quarkus.container-image.name>
+        <quarkus.container-image.push>true</quarkus.container-image.push>
+
+        <python.image.full.name>
+            ${quarkus.container-image.registry}/${quarkus.container-image.group}/${quarkus.container-image.name}</python.image.full.name>
+    </properties>
+
+    <dependencies>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-container-image-docker</artifactId>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.codehaus.mojo</groupId>
+                <artifactId>exec-maven-plugin</artifactId>
+                <version>3.1.0</version>
+                <executions>
+                    <execution>
+                        <id>docker-build-python</id>
+                        <phase>package</phase>
+                        <goals>
+                            <goal>exec</goal>
+                        </goals>
+                        <configuration>
+                            <executable>docker</executable>
+                            <workingDirectory
+							>${project.basedir}/python</workingDirectory>
+                            <arguments>
+                                <argument>build</argument>
+                                <argument>-t</argument>
+                                <argument
+								>${python.image.full.name}:${parent.version}</argument>
+                                <argument>-t</argument>
+                                <argument
+								>${python.image.full.name}:latest</argument>
+                                <argument>.</argument>
+                            </arguments>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
+
+        </plugins>
+    </build>
+
+    <profiles>
+        <profile>
+            <id>push</id>
+            <activation>
+                <property>
+                    <name>quarkus.container-image.push</name>
+                    <value>true</value>
+                </property>
+            </activation>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>exec-maven-plugin</artifactId>
+                        <executions>
+                            <execution>
+                                <id>docker-push-python-with-version</id>
+                                <phase>package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>docker</executable>
+                                    <arguments>
+                                        <argument>push</argument>
+                                        <argument
+										>${python.image.full.name}:${parent.version}</argument>
+                                    </arguments>
+                                </configuration>
+                            </execution>
+
+                            <execution>
+                                <id>docker-push-python</id>
+                                <phase>package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>docker</executable>
+                                    <arguments>
+                                        <argument>push</argument>
+                                        <argument
+										>${python.image.full.name}</argument>
+                                    </arguments>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+</project>
@@ -0,0 +1,32 @@
+# --- Stage 1: Build (Cài đặt thư viện) ---
+FROM python:3.9-slim AS builder
+
+WORKDIR /build
+
+# Khởi tạo môi trường ảo để tách biệt thư viện
+RUN python -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+
+COPY requirements.txt .
+RUN pip install --upgrade --no-cache-dir -r requirements.txt
+
+
+# --- Stage 2: Runtime (Chỉ chạy Prod) ---
+FROM python:3.9-slim
+
+WORKDIR /app
+
+# Chỉ copy môi trường ảo đã build xong từ Stage 1
+COPY --from=builder /opt/venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+
+# Copy mã nguồn
+COPY main.py .
+
+# Tạo folder lưu ảnh và phân quyền (tăng tính bảo mật)
+RUN mkdir images && chmod 777 images
+
+# Chạy bằng Uvicorn với chế độ production (tắt reload)
+# Port 80 theo yêu cầu trước đó của bạn
+EXPOSE 80
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "80", "--workers", "4"]
@@ -0,0 +1,44 @@
+import uuid
+import io
+from fastapi import FastAPI, File, UploadFile, HTTPException
+from fastapi.responses import FileResponse
+from pathlib import Path
+from PIL import Image
+import filetype
+
+app = FastAPI()
+
+STORAGE_DIR = Path("images")
+STORAGE_DIR.mkdir(exist_ok=True)
+
+
+@app.post("/")
+async def upload_image(file: UploadFile = File(...)):
+    body = await file.read()
+
+    kind = filetype.guess(body)
+    if not kind or not kind.mime.startswith("image/"):
+        raise HTTPException(status_code=400, detail="Chỉ chấp nhận file ảnh.")
+
+    try:
+        img = Image.open(io.BytesIO(body))
+
+        random_filename = f"{uuid.uuid4()}.webp"
+        file_path = STORAGE_DIR / random_filename
+
+        img.save(file_path, format="WEBP", quality=80)
+
+        return {
+            "filename": random_filename,
+        }
+
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=f"Lỗi xử lý ảnh: {str(e)}")
+
+
+@app.get("/{name}")
+async def get_image(name: str):
+    file_path = STORAGE_DIR / name
+    if not file_path.exists():
+        raise HTTPException(status_code=404, detail="NotFoundImage")
+    return FileResponse(file_path, media_type="image/webp")
@@ -0,0 +1,5 @@
+fastapi
+uvicorn
+python-multipart
+Pillow
+filetype
@@ -0,0 +1,5 @@
+*
+!target/*-runner
+!target/*-runner.jar
+!target/lib/*
+!target/quarkus-app/*
@@ -0,0 +1,4 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
+distributionSha256Sum=305773a68d6ddfd413df58c82b3f8050e89778e777f3a745c8e5b8cbea4018ef
@@ -0,0 +1,75 @@
+# gateway-service
+
+This project uses Quarkus, the Supersonic Subatomic Java Framework.
+
+If you want to learn more about Quarkus, please visit its website: <https://quarkus.io/>.
+
+## Running the application in dev mode
+
+You can run your application in dev mode that enables live coding using:
+
+```shell script
+mvn quarkus:dev
+```
+
+> **_NOTE:_**  Quarkus now ships with a Dev UI, which is available in dev mode only at <http://localhost:8080/q/dev/>.
+
+## Packaging and running the application
+
+The application can be packaged using:
+
+```shell script
+mvn package
+```
+
+It produces the `quarkus-run.jar` file in the `target/quarkus-app/` directory.
+Be aware that it’s not an _über-jar_ as the dependencies are copied into the `target/quarkus-app/lib/` directory.
+
+The application is now runnable using `java -jar target/quarkus-app/quarkus-run.jar`.
+
+If you want to build an _über-jar_, execute the following command:
+
+```shell script
+mvn package -Dquarkus.package.jar.type=uber-jar
+```
+
+The application, packaged as an _über-jar_, is now runnable using `java -jar target/*-runner.jar`.
+
+## Creating a native executable
+
+You can create a native executable using:
+
+```shell script
+mvn package -Dnative
+```
+
+Or, if you don't have GraalVM installed, you can run the native executable build in a container using:
+
+```shell script
+mvn package -Dnative -Dquarkus.native.container-build=true
+```
+
+You can then execute your native executable with: `./target/gateway-service-1.0.0-SNAPSHOT-runner`
+
+If you want to learn more about building native executables, please consult <https://quarkus.io/guides/maven-tooling>.
+
+## Related Guides
+
+- Redis Client ([guide](https://quarkus.io/guides/redis)): Connect to Redis in either imperative or reactive style
+- Messaging - Kafka Connector ([guide](https://quarkus.io/guides/kafka-getting-started)): Connect to Kafka with Reactive Messaging
+- REST Jackson ([guide](https://quarkus.io/guides/rest#json-serialisation)): Jackson serialization support for Quarkus REST. This extension is not compatible with the quarkus-resteasy extension, or any of the extensions that depend on it
+
+## Provided Code
+
+### Messaging codestart
+
+Use Quarkus Messaging
+
+[Related Apache Kafka guide section...](https://quarkus.io/guides/kafka-reactive-getting-started)
+
+
+### REST
+
+Easily start your REST Web Services
+
+[Related guide section...](https://quarkus.io/guides/getting-started-reactive#reactive-jax-rs-resources)
@@ -0,0 +1,183 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<project
+	xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"
+>
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>com.drinkool</groupId>
+        <artifactId>drinkool</artifactId>
+        <version>1.5.32</version>
+        <relativePath>../pom.xml</relativePath>
+    </parent>
+
+    <artifactId>gateway-service</artifactId>
+    <packaging>quarkus</packaging>
+
+    <properties>
+        <compiler-plugin.version>3.15.0</compiler-plugin.version>
+        <maven.compiler.release>25</maven.compiler.release>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <project.reporting.outputEncoding
+		>UTF-8</project.reporting.outputEncoding>
+        <quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>
+        <quarkus.platform.group-id
+		>io.quarkus.platform</quarkus.platform.group-id>
+        <quarkus.platform.version>3.32.4</quarkus.platform.version>
+        <skipITs>true</skipITs>
+        <surefire-plugin.version>3.5.4</surefire-plugin.version>
+        <org.projectlombok.version>1.18.46</org.projectlombok.version>
+    </properties>
+
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>${quarkus.platform.artifact-id}</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.bitbucket.b_c</groupId>
+            <artifactId>jose4j</artifactId>
+            <version>0.9.6</version>
+        </dependency>
+        <dependency>
+            <groupId>org.projectlombok</groupId>
+            <artifactId>lombok</artifactId>
+            <version>${org.projectlombok.version}</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-smallrye-openapi</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-security</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-smallrye-graphql-client</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>com.drinkool</groupId>
+            <artifactId>lib</artifactId>
+            <version>${project.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-arc</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-container-image-docker</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-rest-client-jackson</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-junit</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.rest-assured</groupId>
+            <artifactId>rest-assured</artifactId>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>${quarkus.platform.group-id}</groupId>
+                <artifactId>quarkus-maven-plugin</artifactId>
+                <version>${quarkus.platform.version}</version>
+                <extensions>true</extensions>
+            </plugin>
+            <plugin>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>${compiler-plugin.version}</version>
+                <configuration>
+                    <parameters>true</parameters>
+                    <annotationProcessorPaths>
+                        <path>
+                            <groupId>org.projectlombok</groupId>
+                            <artifactId>lombok</artifactId>
+                            <version>${org.projectlombok.version}</version>
+                        </path>
+                    </annotationProcessorPaths>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-surefire-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                    <forkCount>1</forkCount>
+                    <reuseForks>true</reuseForks>
+                    <redirectTestOutputToFile>true</redirectTestOutputToFile>
+                </configuration>
+            </plugin>
+            <plugin>
+                <artifactId>maven-failsafe-plugin</artifactId>
+                <version>${surefire-plugin.version}</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>integration-test</goal>
+                            <goal>verify</goal>
+                        </goals>
+                    </execution>
+                </executions>
+                <configuration>
+                    <argLine>@{argLine}</argLine>
+                    <systemPropertyVariables>
+                        <native.image.path>
+                            ${project.build.directory}/${project.build.finalName}-runner</native.image.path>
+                        <java.util.logging.manager
+						>org.jboss.logmanager.LogManager</java.util.logging.manager>
+                        <maven.home>${maven.home}</maven.home>
+                    </systemPropertyVariables>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+    <profiles>
+        <profile>
+            <id>native</id>
+            <activation>
+                <property>
+                    <name>native</name>
+                </property>
+            </activation>
+            <properties>
+                <quarkus.package.jar.enabled>false</quarkus.package.jar.enabled>
+                <skipITs>false</skipITs>
+                <quarkus.native.enabled>true</quarkus.native.enabled>
+            </properties>
+        </profile>
+    </profiles>
+</project>
@@ -0,0 +1,100 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.jvm -t quarkus/gateway-service-jvm .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service-jvm
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service-jvm
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-25-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+# We make four distinct layers so if there are application changes the library layers can be re-used
+COPY --chown=185 target/quarkus-app/lib/ /deployments/lib/
+COPY --chown=185 target/quarkus-app/*.jar /deployments/
+COPY --chown=185 target/quarkus-app/app/ /deployments/app/
+COPY --chown=185 target/quarkus-app/quarkus/ /deployments/quarkus/
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
+
@@ -0,0 +1,96 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dquarkus.package.jar.type=legacy-jar
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.legacy-jar -t quarkus/gateway-service-legacy-jar .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service-legacy-jar
+#
+# If you want to include the debug port into your docker image
+# you will have to expose the debug port (default 5005 being the default) like this :  EXPOSE 8080 5005.
+# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
+# when running the container
+#
+# Then run the container using :
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service-legacy-jar
+#
+# This image uses the `run-java.sh` script to run the application.
+# This scripts computes the command line to execute your Java application, and
+# includes memory/GC tuning.
+# You can configure the behavior using the following environment properties:
+# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") - Be aware that this will override
+# the default JVM options, use `JAVA_OPTS_APPEND` to append options
+# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
+#   in JAVA_OPTS (example: "-Dsome.property=foo")
+# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
+#   used to calculate a default maximal heap memory based on a containers restriction.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
+#   of the container available memory as set here. The default is `50` which means 50%
+#   of the available memory is used as an upper boundary. You can skip this mechanism by
+#   setting this value to `0` in which case no `-Xmx` option is added.
+# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
+#   is used to calculate a default initial heap memory based on the maximum heap memory.
+#   If used in a container without any memory constraints for the container then this
+#   option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
+#   of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
+#   is used as the initial heap size. You can skip this mechanism by setting this value
+#   to `0` in which case no `-Xms` option is added (example: "25")
+# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
+#   This is used to calculate the maximum value of the initial heap memory. If used in
+#   a container without any memory constraints for the container then this option has
+#   no effect. If there is a memory constraint then `-Xms` is limited to the value set
+#   here. The default is 4096MB which means the calculated value of `-Xms` never will
+#   be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
+# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
+#   when things are happening. This option, if set to true, will set
+#  `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
+# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
+#    true").
+# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
+# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
+#   https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
+# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
+# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
+#   (example: "20")
+# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
+#   (example: "40")
+# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
+#   (example: "4")
+# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
+#   previous GC times. (example: "90")
+# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
+# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
+# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
+#   contain the necessary JRE command-line options to specify the required GC, which
+#   will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
+# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
+# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
+# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
+#   accessed directly. (example: "foo.example.com,bar.example.com")
+#
+# You can find more information about the UBI base runtime images and their configuration here:
+# https://rh-openjdk.github.io/redhat-openjdk-containers/
+###
+FROM registry.access.redhat.com/ubi9/openjdk-25-runtime:1.24
+
+ENV LANGUAGE='en_US:en'
+
+
+COPY target/lib/* /deployments/lib/
+COPY target/*-runner.jar /deployments/quarkus-run.jar
+
+EXPOSE 8080
+USER 185
+ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
@@ -0,0 +1,32 @@
+####
+# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
+# It uses a micro base image, tuned for Quarkus native executables.
+# It reduces the size of the resulting container image.
+# Check https://quarkus.io/guides/quarkus-runtime-base-image for further information about this image.
+#
+# Before building the container image run:
+#
+# ./mvnw package -Dnative
+#
+# Then, build the image with:
+#
+# docker build -f src/main/docker/Dockerfile.native-micro -t quarkus/gateway-service .
+#
+# Then run the container using:
+#
+# docker run -i --rm -p 8080:8080 quarkus/gateway-service
+#
+# The `quay.io/quarkus/ubi9-quarkus-micro-image:2.0` base image is based on UBI 9.
+# To use UBI 8, switch to `quay.io/quarkus/quarkus-micro-image:2.0`.
+###
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
+WORKDIR /work/
+RUN chown 1001 /work \
+    && chmod "g+rwX" /work \
+    && chown 1001:root /work
+COPY --chown=1001:root --chmod=0755 target/*-runner /work/application
+
+EXPOSE 8080
+USER 1001
+
+ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
--- a/Show More
+++ b/Show More