phpreaction-frontend-account-react

Summary

• What it is: An interface for account management, allowing users to view, verify, and modify their account information.
• Goal: Offer a simplified interface for managing user account information, allowing users to easily view, verify, and modify their account details with minimal clicks.
• Repository: GitHub repository — https://github.com/PHPCreation/phpreaction-frontend-account-react 
• README (clone, run, repo Docker): README.md on default branch — https://github.com/PHPCreation/phpreaction-frontend-account-react/blob/main/README.md 
• Primary users: Authenticated end-users managing their own account.

Features

• Account information display with user details (ID, username, email).
• Account information modification with password confirmation.
• Password change flow via one-time email verification code.
• Email change flow with dual-code verification (current + new email).
• TOTP-based two-factor authentication (2FA) setup.
• Gravatar integration for user avatar display.
• User preferences management (theme, locale, timezone).
• CSRF protection on form submissions.
• reCAPTCHA integration for bot mitigation.
• Rate limiting for API endpoints.
• Internationalization support (en, fr).
• Status pages for API/config/cache/token diagnostics.

Deployed environments

Multi-environment setup (react-doc).

Integrations & dependencies

APIs

• PHPR API Link : https://TENANT.cdk-ecs-dev.phpreaction.com/open-api/v3 

  • dev : https://TENANT.cdk-ecs-dev.phpreaction.com/open-api/v3 
  • staging : https://TENANT.cdk-ecs-staging.phpreaction.com/open-api/v3 
  • production : https://TENANT.phpreaction.com/open-api/v3 

• Account API Link : https://TENANT.dev.account.solidservice.link/api/v1/docs 

  • dev : https://TENANT.dev.account.solidservice.link/api/v1 
  • staging : https://TENANT.staging.account.solidservice.link/api/v1 
  • prod : https://TENANT.account.solidservice.link/api/v1 

PHPR Bundles

• Authorization Bundle 
• Components Bundle 
• Config Bundle 
• CRUD Bundle 
• DynamoDB Bundle 
• Icons Bundle 
• Status Bundle 
• Utils Bundle 

Dependencies & Dependents Apps

• Dependencies : Apps and services that phpreaction-frontend-account-react uses

  • Account API ({tenant}.account.solidservice.link)
  • Config API (for tenant/config-based runtime settings)
  • Google reCAPTCHA v3 verification API
  • DynamoDB cache tables (App cache and Config cache)

• Dependents : Apps and services that use phpreaction-frontend-account-react

  • PHPReaction frontend applications linking to account management
  • Login-CAS for account-related features (phpreaction-login-cas )

Routes

Main Routes :

• /[locale]/ : Account page - Main interface for viewing and managing account information.
• /[locale]/edit : Edit account page - Interface for modifying account information.
• /[locale]/change-password : Change password page - Interface for changing user password.
• /[locale]/change-email : Change email page - Interface for changing user email.
• /[locale]/preferences : Preferences page - Interface for managing user preferences (theme, locale, timezone).
• /[locale]/security : Security page - Overview of security settings.
• /[locale]/security/totp : TOTP 2FA page - Interface for enabling TOTP two-factor authentication.
• /[locale]/security/webauthn : WebAuthn page - Interface for managing WebAuthn/passkey authentication.
• /[locale]/user-details : User details page.
• /[locale]/support : Support page.

Status Routes :

• /[locale]/status/all : List all status page.
• /[locale]/status/api : APIs status page.
• /[locale]/status/cache : Cache status page.
• /[locale]/status/configs : Configs status page.
• /[locale]/status/user-token/check : Checks if user token exists and is valid.
• /[locale]/status/user-token/display : Displays user token information.
• /[locale]/status/user-token/expected : Displays expected user token information

Support Routes :

• /[locale]/support : Support page.

Security implementation

• CSRF token validation on account modification and sensitive form endpoints.
• reCAPTCHA v3 verification on change password, change email, and 2FA setup endpoints.
• Rate limiting for authentication and API requests.
• Input validation and sanitization with Zod schemas.
• XSS prevention with DOMPurify.
• Role-based access control (ROLE_ADMIN for cache, ROLE_SUPERADMIN for email/username edit).
• Secure cookie-based session handling.

Related links

Repo

• Github 
• Issues, Features & Backlog 

Docs

• Internal doc

• Client doc 

• Docker local setup

• API Calls

• Environment Variables

• KVS

• User Roles

Compliance

• Security Checklist 

All text (tours, errors, translation)

Here are the PDFs showing how many times each word is used (updated the Jun 12 2026):

Stats for french words: Download the PDF

Stats for english words: Download the PDF