Page 10 - Mironsoft Blog

A custom loyalty points tab in the customer account dashboard shows exactly how to extend Magento_Customer cleanly: a layout XML addition for the sidebar navigation, a controller with proper customer authentication, a ViewModel for the data and Alpine.js for filtering and detail views without a page reload, all without copying a single core template.

Symfony as the backend framework, API Platform as the REST layer and React as the frontend form a stack where every layer plays to its strengths. The result: a type-safe fullstack application where the TypeScript client is generated from the OpenAPI schema and JWT authentication is cleanly integrated into both layers.

A plain destructuring assignment breaks the reactivity of a reactive() object, because individual fields become plain copies. toRef() and toRefs() solve exactly this problem by turning each property into a standalone ref that stays coupled to the original source.

A plain console output with green and red checkmarks answers whether a test run succeeded, but delivers neither the visual context needed for a failure nor a way to track how a test suite develops over several weeks. Allure Report closes this gap by turning the structured results from Cypress, Playwright, or practically any other test framework into an interactive, searchable HTML dashboard that brings screenshots, videos, step-by-step logs, and trend charts across multiple runs together in one central place.

Server logs almost always contain personal data such as IP addresses, which makes any GDPR log retention a concrete legal question. Anyone who knows the retention periods, configures logrotate correctly and implements pseudonymization technically operates logging that remains both forensically useful and privacy compliant.

Since June 2025, the German Accessibility Strengthening Act, based on the European Accessibility Act, has obligated numerous online stores to provide digital accessibility. This article explains which businesses are affected, which store areas must be compliant, which deadlines apply, and which concrete steps Magento and Hyva store owners take to meet the legal requirements in practice.

Tailwind CSS v4 is not an incremental update, it is a paradigm shift. The JavaScript configuration file gives way to pure CSS configuration, PostCSS is replaced by Lightning CSS, and the design token system now works directly through CSS custom properties. This guide shows how to structure the migration from v3 to v4 without introducing regressions.

GraphQL endpoints in Magento stores open new attack paths: enabled introspection exposes the full schema, deeply nested queries overload the database and server, and alias-based batching enables brute-force attacks against login forms. This article shows how to disable introspection in production, limit query depth and complexity, control batching, and correctly implement field-level authorization so your Magento GraphQL endpoint stays resilient against targeted attacks.

Webhooks from Stripe, GitHub, Shopify or your own services arrive as HTTP POST requests, without type safety, without schema guarantees, and potentially from spoofed senders. Symfony offers a complete infrastructure with the Webhook component, Messenger and HMAC signature verification to process external events safely, type-safely and asynchronously.

Docker in GitLab CI is powerful, but the configuration is full of pitfalls: the wrong runner type, insecure Docker-in-Docker, build caches that never hit, and artifacts that transfer unnecessary megabytes. Once you understand the mechanisms, you build pipelines that finish in three minutes instead of thirty.