Deploy to HF with Git LFS for all media files

.PVS-Studio/State/WindowState.json

@@ -0,0 +1,23 @@
+{
+  "isDataChanged": false,
+  "filters": {
+    "code": "",
+    "cwe": "",
+    "sastId": "",
+    "message": "",
+    "files": "",
+    "level": [
+      0,
+      1,
+      2
+    ],
+    "isColumnFiltersVisible": false,
+    "isLevelFiltersVisible": true,
+    "isGroupFiltersVisible": true,
+    "type": [
+      "General",
+      "Optimization"
+    ]
+  },
+  "loadableProcessIds": []
+}

.PVS-Studio/Temp/.PVS-Studio/.gitignore

@@ -0,0 +1,2 @@
+logs/
+models/

.PVS-Studio/nonAnalyzedProjects.log

@@ -0,0 +1 @@
+[]

.PVS-Studio/project.json

@@ -0,0 +1,329 @@
+{
+  "modules": [
+    {
+      "name": "DarkMoon1",
+      "path": "f:\\DarkMoon1\\",
+      "sources": [
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\DarkFantasyApplication.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\annotation\\ChangePasswordMatch.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\annotation\\RegisterPasswordMatch.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\annotation\\ResetPasswordMatch.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\config\\SchedulingConfig.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\config\\WebConfig.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\constant\\CmsMenu.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\constant\\Routes.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\AdminController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\ArticleController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\ContactMessageController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\DashboardController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\FaqController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\GameCharacterController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\ImageController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\InternalController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\PageController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\StoryController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\UserController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\WorldController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\article\\ArticleResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\article\\CreateArticleRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\article\\UpdateArticleRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\contact\\ContactMessageResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\contact\\CreateContactMessageRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\faq\\CreateFaqRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\faq\\FaqResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\faq\\UpdateFaqRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\gamecharacter\\CreateGameCharacterRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\gamecharacter\\GameCharacterResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\gamecharacter\\UpdateGameCharacterRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\log\\AuditLogResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\story\\CreateStoryRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\story\\StoryResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\story\\UpdateStoryRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\ChangePasswordRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\ForgotPasswordRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\LoginRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\RegisterRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\ResetPasswordRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\UserResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\VerifyOtpRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\world\\CreateWorldRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\world\\UpdateWorldRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\world\\WorldResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\Article.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\AuditLog.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\ContactMessage.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\Faq.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\GameCharacter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\PasswordResetToken.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\Story.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\User.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\World.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\ArticleTypeConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\ContactCategoryConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\ContactPlatformConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\LogActionConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\LogEntityTypeConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\RoleConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\ArticleType.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\ContactCategory.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\ContactPlatform.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\LogAction.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\LogEntityType.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\Role.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\exception\\GlobalExceptionHandler.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\ArticleRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\AuditLogRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\ContactMessageRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\FaqRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\GameCharacterRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\PasswordResetTokenRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\StoryRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\UserRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\WorldRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\security\\ForceChangePasswordInterceptor.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\security\\SecurityConfig.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\ArticleService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\AuditLogService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\ContactMessageService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\CustomUserDetailsService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\FaqService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\FileStorageService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\GameCharacterService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\StoryService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\UserService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\WorldService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\ArticleServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\AuditLogServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\ContactMessageServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\FaqServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\FileStorageServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\GameCharacterServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\StoryServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\UserServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\WorldServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\util\\SecurityUtil.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\util\\TimeUtil.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\validator\\PasswordChangeMatchValidator.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\validator\\PasswordRegisterMatchValidator.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\validator\\ResetPasswordMatchValidator.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\DarkFantasyApplication.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\annotation\\ChangePasswordMatch.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\annotation\\RegisterPasswordMatch.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\annotation\\ResetPasswordMatch.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\config\\SchedulingConfig.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\config\\WebConfig.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\constant\\CmsMenu.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\constant\\Routes.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\AdminController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\ArticleController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\ContactMessageController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\DashboardController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\FaqController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\GameCharacterController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\ImageController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\InternalController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\PageController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\StoryController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\UserController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\controller\\WorldController.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\article\\ArticleResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\article\\CreateArticleRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\article\\UpdateArticleRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\contact\\ContactMessageResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\contact\\CreateContactMessageRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\faq\\CreateFaqRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\faq\\FaqResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\faq\\UpdateFaqRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\gamecharacter\\CreateGameCharacterRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\gamecharacter\\GameCharacterResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\gamecharacter\\UpdateGameCharacterRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\log\\AuditLogResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\story\\CreateStoryRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\story\\StoryResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\story\\UpdateStoryRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\ChangePasswordRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\ForgotPasswordRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\LoginRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\RegisterRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\ResetPasswordRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\UserResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\user\\VerifyOtpRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\world\\CreateWorldRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\world\\UpdateWorldRequest.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\dto\\world\\WorldResponse.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\Article.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\AuditLog.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\ContactMessage.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\Faq.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\GameCharacter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\PasswordResetToken.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\Story.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\User.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\World.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\ArticleTypeConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\ContactCategoryConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\ContactPlatformConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\LogActionConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\LogEntityTypeConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\converter\\RoleConverter.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\ArticleType.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\ContactCategory.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\ContactPlatform.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\LogAction.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\LogEntityType.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\entity\\enums\\Role.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\exception\\GlobalExceptionHandler.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\ArticleRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\AuditLogRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\ContactMessageRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\FaqRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\GameCharacterRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\PasswordResetTokenRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\StoryRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\UserRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\repository\\WorldRepository.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\security\\ForceChangePasswordInterceptor.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\security\\SecurityConfig.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\ArticleService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\AuditLogService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\ContactMessageService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\CustomUserDetailsService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\FaqService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\FileStorageService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\GameCharacterService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\StoryService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\UserService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\WorldService.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\ArticleServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\AuditLogServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\ContactMessageServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\FaqServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\FileStorageServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\GameCharacterServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\StoryServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\UserServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\service\\impl\\WorldServiceImpl.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\util\\SecurityUtil.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\util\\TimeUtil.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\validator\\PasswordChangeMatchValidator.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\validator\\PasswordRegisterMatchValidator.java",
+        "f:\\DarkMoon1\\src\\main\\java\\com\\darkfantasy\\validator\\ResetPasswordMatchValidator.java",
+        "f:\\DarkMoon1\\target\\"
+      ],
+      "testSources": [],
+      "generatedSources": [
+        "f:\\DarkMoon1\\target\\"
+      ],
+      "classpath": [
+        "F:\\DarkMoon1\\target\\classes",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-mail\\3.2.5\\spring-boot-starter-mail-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter\\3.2.5\\spring-boot-starter-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-logging\\3.2.5\\spring-boot-starter-logging-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\ch\\qos\\logback\\logback-classic\\1.4.14\\logback-classic-1.4.14.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\ch\\qos\\logback\\logback-core\\1.4.14\\logback-core-1.4.14.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\apache\\logging\\log4j\\log4j-to-slf4j\\2.21.1\\log4j-to-slf4j-2.21.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\apache\\logging\\log4j\\log4j-api\\2.21.1\\log4j-api-2.21.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\slf4j\\jul-to-slf4j\\2.0.13\\jul-to-slf4j-2.0.13.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-core\\6.1.6\\spring-core-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-jcl\\6.1.6\\spring-jcl-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\yaml\\snakeyaml\\2.2\\snakeyaml-2.2.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-context-support\\6.1.6\\spring-context-support-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-beans\\6.1.6\\spring-beans-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-context\\6.1.6\\spring-context-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\eclipse\\angus\\jakarta.mail\\2.0.3\\jakarta.mail-2.0.3.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\activation\\jakarta.activation-api\\2.1.3\\jakarta.activation-api-2.1.3.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\eclipse\\angus\\angus-activation\\2.0.2\\angus-activation-2.0.2.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\thymeleaf\\extras\\thymeleaf-extras-springsecurity6\\3.1.2.RELEASE\\thymeleaf-extras-springsecurity6-3.1.2.RELEASE.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\thymeleaf\\thymeleaf-spring6\\3.1.2.RELEASE\\thymeleaf-spring6-3.1.2.RELEASE.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\thymeleaf\\thymeleaf\\3.1.2.RELEASE\\thymeleaf-3.1.2.RELEASE.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\attoparser\\attoparser\\2.0.7.RELEASE\\attoparser-2.0.7.RELEASE.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\unbescape\\unbescape\\1.1.6.RELEASE\\unbescape-1.1.6.RELEASE.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\slf4j\\slf4j-api\\2.0.13\\slf4j-api-2.0.13.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-thymeleaf\\3.2.5\\spring-boot-starter-thymeleaf-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\mariadb\\jdbc\\mariadb-java-client\\3.3.3\\mariadb-java-client-3.3.3.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\github\\waffle\\waffle-jna\\3.3.0\\waffle-jna-3.3.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\net\\java\\dev\\jna\\jna\\5.13.0\\jna-5.13.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\net\\java\\dev\\jna\\jna-platform\\5.13.0\\jna-platform-5.13.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\slf4j\\jcl-over-slf4j\\2.0.13\\jcl-over-slf4j-2.0.13.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\github\\ben-manes\\caffeine\\caffeine\\3.1.8\\caffeine-3.1.8.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\google\\errorprone\\error_prone_annotations\\2.21.1\\error_prone_annotations-2.21.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\checkerframework\\checker-qual\\3.32.0\\checker-qual-3.32.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-validation\\3.2.5\\spring-boot-starter-validation-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-el\\10.1.20\\tomcat-embed-el-10.1.20.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\hibernate\\validator\\hibernate-validator\\8.0.1.Final\\hibernate-validator-8.0.1.Final.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\validation\\jakarta.validation-api\\3.0.2\\jakarta.validation-api-3.0.2.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\jboss\\logging\\jboss-logging\\3.5.3.Final\\jboss-logging-3.5.3.Final.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\fasterxml\\classmate\\1.6.0\\classmate-1.6.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-data-jpa\\3.2.5\\spring-boot-starter-data-jpa-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-aop\\3.2.5\\spring-boot-starter-aop-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-aop\\6.1.6\\spring-aop-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\aspectj\\aspectjweaver\\1.9.22\\aspectjweaver-1.9.22.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-jdbc\\3.2.5\\spring-boot-starter-jdbc-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\zaxxer\\HikariCP\\5.0.1\\HikariCP-5.0.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-jdbc\\6.1.6\\spring-jdbc-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\hibernate\\orm\\hibernate-core\\6.4.4.Final\\hibernate-core-6.4.4.Final.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\persistence\\jakarta.persistence-api\\3.1.0\\jakarta.persistence-api-3.1.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\transaction\\jakarta.transaction-api\\2.0.1\\jakarta.transaction-api-2.0.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\hibernate\\common\\hibernate-commons-annotations\\6.0.6.Final\\hibernate-commons-annotations-6.0.6.Final.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\io\\smallrye\\jandex\\3.1.2\\jandex-3.1.2.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\net\\bytebuddy\\byte-buddy\\1.14.13\\byte-buddy-1.14.13.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\xml\\bind\\jakarta.xml.bind-api\\4.0.2\\jakarta.xml.bind-api-4.0.2.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\glassfish\\jaxb\\jaxb-runtime\\4.0.5\\jaxb-runtime-4.0.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\glassfish\\jaxb\\jaxb-core\\4.0.5\\jaxb-core-4.0.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\glassfish\\jaxb\\txw2\\4.0.5\\txw2-4.0.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\sun\\istack\\istack-commons-runtime\\4.1.2\\istack-commons-runtime-4.1.2.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\inject\\jakarta.inject-api\\2.0.1\\jakarta.inject-api-2.0.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\antlr\\antlr4-runtime\\4.13.0\\antlr4-runtime-4.13.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\data\\spring-data-jpa\\3.2.5\\spring-data-jpa-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\data\\spring-data-commons\\3.2.5\\spring-data-commons-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-orm\\6.1.6\\spring-orm-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-tx\\6.1.6\\spring-tx-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-aspects\\6.1.6\\spring-aspects-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\projectlombok\\lombok\\1.18.32\\lombok-1.18.32.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-oauth2-client\\3.2.5\\spring-boot-starter-oauth2-client-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\security\\spring-security-config\\6.2.4\\spring-security-config-6.2.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\security\\spring-security-core\\6.2.4\\spring-security-core-6.2.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\security\\spring-security-crypto\\6.2.4\\spring-security-crypto-6.2.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-expression\\6.1.6\\spring-expression-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\io\\micrometer\\micrometer-observation\\1.12.5\\micrometer-observation-1.12.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\io\\micrometer\\micrometer-commons\\1.12.5\\micrometer-commons-1.12.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\security\\spring-security-oauth2-client\\6.2.4\\spring-security-oauth2-client-6.2.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\security\\spring-security-oauth2-core\\6.2.4\\spring-security-oauth2-core-6.2.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\security\\spring-security-web\\6.2.4\\spring-security-web-6.2.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\nimbusds\\oauth2-oidc-sdk\\9.43.3\\oauth2-oidc-sdk-9.43.3.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\github\\stephenc\\jcip\\jcip-annotations\\1.0-1\\jcip-annotations-1.0-1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\nimbusds\\content-type\\2.2\\content-type-2.2.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\net\\minidev\\json-smart\\2.5.1\\json-smart-2.5.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\net\\minidev\\accessors-smart\\2.5.1\\accessors-smart-2.5.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\ow2\\asm\\asm\\9.6\\asm-9.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\nimbusds\\lang-tag\\1.7\\lang-tag-1.7.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\security\\spring-security-oauth2-jose\\6.2.4\\spring-security-oauth2-jose-6.2.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\nimbusds\\nimbus-jose-jwt\\9.24.4\\nimbus-jose-jwt-9.24.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-web\\3.2.5\\spring-boot-starter-web-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-json\\3.2.5\\spring-boot-starter-json-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\fasterxml\\jackson\\core\\jackson-databind\\2.15.4\\jackson-databind-2.15.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\fasterxml\\jackson\\core\\jackson-annotations\\2.15.4\\jackson-annotations-2.15.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\fasterxml\\jackson\\core\\jackson-core\\2.15.4\\jackson-core-2.15.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\fasterxml\\jackson\\datatype\\jackson-datatype-jdk8\\2.15.4\\jackson-datatype-jdk8-2.15.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\fasterxml\\jackson\\datatype\\jackson-datatype-jsr310\\2.15.4\\jackson-datatype-jsr310-2.15.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\fasterxml\\jackson\\module\\jackson-module-parameter-names\\2.15.4\\jackson-module-parameter-names-2.15.4.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-web\\6.1.6\\spring-web-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\spring-webmvc\\6.1.6\\spring-webmvc-6.1.6.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-tomcat\\3.2.5\\spring-boot-starter-tomcat-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\annotation\\jakarta.annotation-api\\2.1.1\\jakarta.annotation-api-2.1.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-core\\10.1.20\\tomcat-embed-core-10.1.20.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-websocket\\10.1.20\\tomcat-embed-websocket-10.1.20.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-devtools\\3.2.5\\spring-boot-devtools-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot\\3.2.5\\spring-boot-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-autoconfigure\\3.2.5\\spring-boot-autoconfigure-3.2.5.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-jasper\\10.1.20\\tomcat-embed-jasper-10.1.20.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\eclipse\\jdt\\ecj\\3.33.0\\ecj-3.33.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\servlet\\jsp\\jstl\\jakarta.servlet.jsp.jstl-api\\3.0.0\\jakarta.servlet.jsp.jstl-api-3.0.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\servlet\\jakarta.servlet-api\\6.0.0\\jakarta.servlet-api-6.0.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\jakarta\\el\\jakarta.el-api\\5.0.0\\jakarta.el-api-5.0.0.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\org\\glassfish\\web\\jakarta.servlet.jsp.jstl\\3.0.1\\jakarta.servlet.jsp.jstl-3.0.1.jar",
+        "C:\\Users\\Admin\\.m2\\repository\\com\\mysql\\mysql-connector-j\\8.3.0\\mysql-connector-j-8.3.0.jar"
+      ]
+    }
+  ]
+}

.gitattributes

@@ -0,0 +1,7 @@
+/mvnw text eol=lf
+*.cmd text eol=crlf
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.png filter=lfs diff=lfs merge=lfs -text
+*.jpg filter=lfs diff=lfs merge=lfs -text
+*.webp filter=lfs diff=lfs merge=lfs -text
+*.mp4 filter=lfs diff=lfs merge=lfs -text

.gitignore

@@ -0,0 +1,33 @@
+HELP.md
+target/
+.mvn/wrapper/maven-wrapper.jar
+!**/src/main/**/target/
+!**/src/test/**/target/
+
+### STS ###
+.apt_generated
+.classpath
+.factorypath
+.project
+.settings
+.springBeans
+.sts4-cache
+
+### IntelliJ IDEA ###
+.idea
+*.iws
+*.iml
+*.ipr
+
+### NetBeans ###
+/nbproject/private/
+/nbbuild/
+/dist/
+/nbdist/
+/.nb-gradle/
+build/
+!**/src/main/**/build/
+!**/src/test/**/build/
+
+### VS Code ###
+.vscode/

.mvn/wrapper/maven-wrapper.properties

@@ -0,0 +1,3 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.15/apache-maven-3.9.15-bin.zip

DockerFile

@@ -0,0 +1,13 @@
+# ---Build code ---
+FROM maven:3.9.6-eclipse-temurin-21-alpine AS build
+WORKDIR /app
+COPY . .
+# Build run
+RUN mvn clean package -DskipTests
+
+FROM eclipse-temurin:21-jdk-alpine
+WORKDIR /app
+COPY --from=build /app/target/*.war app.war
+
+EXPOSE 8080
+ENTRYPOINT ["java","-jar","app.war"]

README.md

@@ -0,0 +1 @@
+# DarkMoon

TEST_CASES.md

@@ -0,0 +1,104 @@
+# Test Cases - DarkMoon / Moon Blight
+
+| Test Case ID | Mô tả | Pre-condition | Steps | Expected Result | Actual Result | Status |
+|---|---|---|---|---|---|---|
+| TC-PUB-001 | Kiểm tra trang chủ hiển thị đúng dữ liệu nổi bật | Ứng dụng chạy, có dữ liệu article/character/story/world chưa xóa | 1. Mở `/` 2. Quan sát banner, latest articles, characters, top story, top world | Trang chủ load thành công, hiển thị tối đa 3 bài viết mới, 4 nhân vật, story/world ưu tiên cao nhất |  | Chưa chạy |
+| TC-PUB-002 | Kiểm tra trang chủ khi chưa có dữ liệu nổi bật | Database không có dữ liệu public hoặc toàn bộ dữ liệu đã soft-delete | 1. Mở `/` 2. Quan sát các khu vực dữ liệu động | Trang không lỗi 500, các khu vực trống/ẩn hợp lý |  | Chưa chạy |
+| TC-PUB-003 | Kiểm tra trang Story public | Có ít nhất 2 story chưa xóa với priority khác nhau | 1. Mở `/story` 2. Quan sát danh sách story | Chỉ hiển thị story chưa xóa, sắp xếp priority giảm dần |  | Chưa chạy |
+| TC-PUB-004 | Kiểm tra trang Characters public | Có nhân vật chưa xóa và nhân vật đã xóa | 1. Mở `/characters` 2. Quan sát danh sách | Chỉ hiển thị nhân vật chưa xóa, sắp xếp priority giảm dần |  | Chưa chạy |
+| TC-PUB-005 | Kiểm tra trang World public | Có world chưa xóa và world đã xóa | 1. Mở `/world` 2. Quan sát danh sách | Chỉ hiển thị world chưa xóa, sắp xếp priority giảm dần |  | Chưa chạy |
+| TC-PUB-006 | Kiểm tra trang News public mặc định | Có ít nhất 7 bài viết chưa xóa | 1. Mở `/news` 2. Quan sát số bài viết và nút load thêm | Hiển thị 6 bài viết, `hasMore` đúng, có nextLimit = 12 |  | Chưa chạy |
+| TC-PUB-007 | Kiểm tra trang News với tham số limit | Có ít nhất 12 bài viết chưa xóa | 1. Mở `/news?limit=12` 2. Đếm số bài viết | Hiển thị tối đa 12 bài viết, nextLimit = 18 nếu còn dữ liệu |  | Chưa chạy |
+| TC-PUB-008 | Kiểm tra bài viết quan trọng nổi bật trong News | Có bài viết type IMPORTANT chưa xóa mới nhất | 1. Mở `/news` 2. Kiểm tra khu vực featured article | Featured article là bài IMPORTANT mới nhất chưa xóa |  | Chưa chạy |
+| TC-PUB-009 | Kiểm tra chi tiết tin tức hợp lệ | Có bài viết chưa xóa với ID hợp lệ | 1. Mở `/news/{id}` 2. Quan sát nội dung và bài liên quan | Hiển thị đúng bài viết, danh sách liên quan không chứa chính bài đang xem |  | Chưa chạy |
+| TC-PUB-010 | Kiểm tra chi tiết tin tức ID không tồn tại | Không có article với ID test | 1. Mở `/news/999999` | Hệ thống xử lý lỗi hợp lý, không lộ stack trace cho người dùng |  | Chưa chạy |
+| TC-CON-001 | Kiểm tra trang Support hiển thị form và FAQ | Có FAQ chưa xóa | 1. Mở `/support` 2. Quan sát form liên hệ và FAQ | Trang hiển thị categories, platforms và FAQ chưa xóa |  | Chưa chạy |
+| TC-CON-002 | Gửi contact message hợp lệ | Người dùng ở trang `/support` | 1. Nhập tên, email hợp lệ, category, platform, message 2. Submit | Lưu contact message với processed = false, redirect `/support`, hiển thị thông báo thành công |  | Chưa chạy |
+| TC-CON-003 | Gửi contact thiếu tên | Người dùng ở trang `/support` | 1. Để trống tên 2. Nhập các trường còn lại hợp lệ 3. Submit | Không lưu dữ liệu, ở lại trang support, hiển thị lỗi kiểm tra thông tin |  | Chưa chạy |
+| TC-CON-004 | Gửi contact email sai định dạng | Người dùng ở trang `/support` | 1. Nhập email `abc` 2. Nhập các trường khác hợp lệ 3. Submit | Không lưu dữ liệu, hiển thị lỗi email không hợp lệ |  | Chưa chạy |
+| TC-CON-005 | Gửi contact thiếu category | Người dùng ở trang `/support` | 1. Không chọn category 2. Nhập các trường khác hợp lệ 3. Submit | Không lưu dữ liệu, hiển thị lỗi chọn danh mục |  | Chưa chạy |
+| TC-CON-007 | Gửi contact thiếu nội dung | Người dùng ở trang `/support` | 1. Để trống message 2. Nhập các trường khác hợp lệ 3. Submit | Không lưu dữ liệu, hiển thị lỗi nhập nội dung |  | Chưa chạy |
+| TC-CON-008 | Gửi contact message vượt quá 5000 ký tự | Người dùng ở trang `/support` | 1. Nhập message 5001 ký tự 2. Submit | Không lưu dữ liệu, hiển thị lỗi độ dài nội dung |  | Chưa chạy |
+| TC-CON-009 | Xem danh sách contact trong CMS | Có tài khoản STAFF đã đăng nhập, có contact messages | 1. Mở `/contact/blightmoon/list` | Hiển thị danh sách contact phân trang size 20 |  | Chưa chạy |
+| TC-CON-010 | Kiểm tra phân quyền contact CMS khi chưa đăng nhập | Chưa đăng nhập | 1. Mở `/contact/blightmoon/list` | Kỳ vọng bảo mật: bị chặn hoặc chuyển login. Nếu truy cập được là lỗi cấu hình route |  | Chưa chạy |
+| TC-AUTH-002 | Đăng nhập STAFF hợp lệ | Có tài khoản STAFF active, mật khẩu đúng | 1. Nhập username/email và password 2. Submit login | Đăng nhập thành công, tạo session, redirect `/dashboard/moonblight`, ghi audit LOGIN |  | Chưa chạy |
+| TC-AUTH-003 | Đăng nhập ADMIN hợp lệ | Có tài khoản ADMIN active, mật khẩu đúng | 1. Nhập credentials admin 2. Submit login | Đăng nhập thành công, redirect `/admin/moonblight/dashboard`, ghi audit LOGIN |  | Chưa chạy |
+| TC-AUTH-004 | Đăng nhập sai mật khẩu | Có tài khoản hợp lệ | 1. Nhập username/email đúng 2. Nhập password sai 3. Submit | Ở lại login, hiển thị `Tên đăng nhập hoặc mật khẩu không đúng.` |  | Chưa chạy |
+| TC-AUTH-005 | Đăng nhập thiếu username/email | Chưa đăng nhập | 1. Để trống login 2. Nhập password hợp lệ 3. Submit | Validation lỗi, không gọi authenticate, ở lại login |  | Chưa chạy |
+| TC-AUTH-007 | Đăng nhập mật khẩu dưới 8 ký tự | Chưa đăng nhập | 1. Nhập login 2. Nhập password 7 ký tự 3. Submit | Validation lỗi mật khẩu tối thiểu 8 ký tự |  | Chưa chạy |
+| TC-AUTH-008 | Đăng nhập tài khoản bị khóa | Có STAFF isActive = false | 1. Nhập credentials tài khoản bị khóa 2. Submit | Đăng nhập thất bại hoặc bị Spring Security từ chối, không vào dashboard |  | Chưa chạy |
+| TC-AUTH-010 | Đăng ký tài khoản STAFF hợp lệ | Username/email chưa tồn tại | 1. Nhập username 3-30 ký tự chữ/số, email hợp lệ, password >= 8, rePassword khớp, fullName 2. Submit | Tạo user role STAFF, isActive = false, password BCrypt, redirect login, thông báo thành công |  | Chưa chạy |
+| TC-AUTH-011 | Đăng ký username đã tồn tại | Database có username test | 1. Nhập username đã tồn tại 2. Nhập thông tin khác hợp lệ 3. Submit | Không tạo user, hiển thị `Tên đăng nhập đã tồn tại!`, xóa password trên form |  | Chưa chạy |
+| TC-AUTH-012 | Đăng ký email đã tồn tại | Database có email test | 1. Nhập email đã tồn tại 2. Nhập thông tin khác hợp lệ 3. Submit | Không tạo user, hiển thị `Email này đã được đăng ký!`, xóa password trên form |  | Chưa chạy |
+| TC-AUTH-017 | Đăng ký mật khẩu và xác nhận không khớp | Chưa đăng nhập | 1. Nhập password và rePassword khác nhau 2. Submit | Validation lỗi password confirmation, không tạo user |  | Chưa chạy |
+| TC-AUTH-018 | Đăng xuất khi đã đăng nhập | User đã đăng nhập | 1. POST `/user/moonblight/logout` | Session bị clear, redirect login, ghi audit LOGOUT |  | Chưa chạy |
+| TC-AUTH-020 | Gửi OTP cho email tồn tại | Có user với email hợp lệ | 1. Nhập email tồn tại 2. Submit forgot-password | Tạo OTP 6 chữ số, hết hạn sau 5 phút, gửi email, session `OTP_EMAIL`, redirect verify-otp |  | Chưa chạy |
+| TC-AUTH-021 | Gửi OTP cho email không tồn tại | Email chưa có trong DB | 1. Nhập email chưa đăng ký 2. Submit | Ở lại forgot-password, hiển thị `Email không tồn tại` |  | Chưa chạy |
+| TC-AUTH-022 | Verify OTP hợp lệ | Đã gửi OTP, OTP chưa hết hạn | 1. Mở verify-otp 2. Nhập OTP đúng 3. Submit | Session lưu RESET_EMAIL và RESET_OTP, redirect reset-password |  | Chưa chạy |
+| TC-AUTH-023 | Verify OTP sai | Đã gửi OTP | 1. Nhập OTP sai 2. Submit | Ở lại verify-otp, hiển thị `OTP không hợp lệ` |  | Chưa chạy |
+| TC-AUTH-024 | Verify OTP hết hạn | OTP đã quá 5 phút | 1. Nhập OTP hết hạn 2. Submit | Ở lại verify-otp, hiển thị `OTP đã hết hạn` |  | Chưa chạy |
+| TC-AUTH-025 | Reset password hợp lệ sau OTP | Session có RESET_EMAIL và RESET_OTP hợp lệ | 1. Mở reset-password 2. Nhập newPassword >= 8 và confirm khớp 3. Submit | Password được mã hóa mới, OTP marked used, session reset bị xóa, redirect login |  | Chưa chạy |
+| TC-AUTH-027 | Reset password xác nhận không khớp | Session OTP hợp lệ | 1. Nhập newPassword và confirmPassword khác nhau 2. Submit | Validation lỗi, ở lại reset-password |  | Chưa chạy |
+| TC-AUTH-028 | Reset password dưới 8 ký tự | Session OTP hợp lệ | 1. Nhập newPassword 7 ký tự 2. Submit | Validation lỗi min 8, không đổi mật khẩu |  | Chưa chạy |
+| TC-AUTH-029 | Đổi mật khẩu current user hợp lệ | User đã đăng nhập | 1. Mở `/user/moonblight/change-password` 2. Nhập oldPassword đúng, newPassword >= 8, confirm khớp 3. Submit | Password đổi thành công, mustChangePassword = false, redirect theo role, ghi audit UPDATE |  | Chưa chạy |
+| TC-AUTH-031 | Đổi mật khẩu xác nhận không khớp | User đã đăng nhập | 1. Nhập oldPassword đúng 2. Nhập newPassword và confirm khác nhau 3. Submit | Validation/lỗi xác nhận không khớp, không đổi mật khẩu |  | Chưa chạy |
+| TC-SEC-001 | Chặn truy cập dashboard STAFF khi chưa đăng nhập | Chưa đăng nhập | 1. Mở `/dashboard/moonblight` | Không cho xem dashboard, chuyển tới trang login hoặc trả 403 theo cấu hình Spring Security |  | Chưa chạy |
+| TC-SEC-002 | Chặn truy cập CMS Article khi chưa đăng nhập | Chưa đăng nhập | 1. Mở `/article/moonblight/list` | Không cho xem danh sách article CMS |  | Chưa chạy |
+| TC-SEC-003 | Chặn STAFF truy cập admin dashboard | Đăng nhập STAFF active | 1. Mở `/admin/moonblight/dashboard` | Bị từ chối 403 hoặc chuyển trang lỗi, không thấy dữ liệu admin |  | Chưa chạy |
+| TC-SEC-004 | Cho ADMIN truy cập admin dashboard | Đăng nhập ADMIN active | 1. Mở `/admin/moonblight/dashboard` | Hiển thị dashboard admin với totalUsers, activeUsers, inActiveUsers |  | Chưa chạy |
+| TC-SEC-005 | Cho STAFF truy cập CMS content | Đăng nhập STAFF active | 1. Mở `/article/moonblight/list` 2. Mở `/story/moonblight/list` | STAFF truy cập được các trang CMS content |  | Chưa chạy |
+| TC-SEC-007 | Force change password redirect | User đăng nhập có mustChangePassword = true | 1. Mở `/dashboard/moonblight` | Bị redirect tới `/user/moonblight/change-password` |  | Chưa chạy |
+| TC-SEC-008 | Force change password cho phép mở trang change-password | User đăng nhập có mustChangePassword = true | 1. Mở `/user/moonblight/change-password` | Trang đổi mật khẩu hiển thị, không bị redirect vòng lặp |  | Chưa chạy |
+| TC-SEC-010 | Kiểm tra API hash password internal public | Chưa đăng nhập | 1. Gọi `/api/moonblight/internal/hash?password=12345678` | Kỳ vọng bảo mật: API nội bộ không nên public. Nếu trả BCrypt khi chưa đăng nhập là rủi ro cần ghi nhận |  | Chưa chạy |
+| TC-ADM-001 | Xem danh sách tài khoản | Đăng nhập ADMIN | 1. Mở `/admin/moonblight/list` | Hiển thị accounts phân trang size 10, sắp xếp id tăng dần |  | Chưa chạy |
+| TC-ADM-002 | Xem chi tiết tài khoản hợp lệ | Đăng nhập ADMIN, có user ID hợp lệ | 1. Mở `/admin/moonblight/account/{id}` | Hiển thị đúng thông tin account |  | Chưa chạy |
+| TC-ADM-004 | Approve tài khoản STAFF chờ duyệt | Đăng nhập ADMIN, STAFF isActive = false | 1. POST `/admin/moonblight/account/{id}/approve` | User isActive = true, redirect detail, thông báo duyệt thành công, ghi audit UNLOCK |  | Chưa chạy |
+| TC-ADM-006 | Khóa tài khoản STAFF | Đăng nhập ADMIN, STAFF active | 1. POST `/admin/moonblight/account/{id}/lock` | User isActive = false, thông báo khóa thành công, ghi audit LOCK |  | Chưa chạy |
+| TC-ADM-007 | Mở khóa tài khoản STAFF | Đăng nhập ADMIN, STAFF inactive | 1. POST `/admin/moonblight/account/{id}/unlock` | User isActive = true, thông báo mở khóa thành công, ghi audit UNLOCK |  | Chưa chạy |
+| TC-ADM-008 | Không cho khóa tài khoản ADMIN | Đăng nhập ADMIN, target user role ADMIN | 1. POST `/admin/moonblight/account/{adminId}/lock` | Không đổi trạng thái admin, hiển thị lỗi `Không có thẩm quyền` hoặc xử lý lỗi phù hợp |  | Chưa chạy |
+| TC-ADM-009 | Xem audit log | Đăng nhập ADMIN, có audit logs | 1. Mở `/admin/moonblight/log` | Hiển thị logs size 20, sort createdAt giảm dần, activeMenu audit-log |  | Chưa chạy |
+| TC-ADM-010 | Dashboard admin thống kê user | Đăng nhập ADMIN, DB có active/inactive users | 1. Mở `/admin/moonblight/dashboard` | totalUsers = activeUsers + inActiveUsers, số liệu đúng DB |  | Chưa chạy |
+| TC-DASH-001 | Dashboard STAFF hiển thị thống kê content | Đăng nhập STAFF active | 1. Mở `/dashboard/moonblight` | Hiển thị count article/story/world/character/faq và contact chưa xử lý |  | Chưa chạy |
+| TC-ART-001 | Xem danh sách bài viết CMS | Đăng nhập STAFF, có articles | 1. Mở `/article/moonblight/list` | Hiển thị tất cả article kể cả đã xóa, phân trang size 10 |  | Chưa chạy |
+| TC-ART-003 | Tạo bài viết hợp lệ không thumbnail | Đăng nhập STAFF | 1. Nhập title, content, type 2. Không chọn thumbnail 3. Submit | Tạo article, createdBy là current user, redirect list, flash success, ghi audit CREATE |  | Chưa chạy |
+| TC-ART-004 | Tạo bài viết hợp lệ có thumbnail | Đăng nhập STAFF, có file ảnh hợp lệ | 1. Chọn thumbnail 2. Nhập thông tin hợp lệ 3. Submit | File lưu vào `uploads/articles`, thumbnailUrl được set, tạo article thành công |  | Chưa chạy |
+| TC-ART-005 | Tạo bài viết thiếu title | Đăng nhập STAFF | 1. Để trống title 2. Nhập content/type 3. Submit | Không tạo article, ở lại form, hiển thị lỗi title không được trống |  | Chưa chạy |
+| TC-ART-006 | Tạo bài viết title trên 255 ký tự | Đăng nhập STAFF | 1. Nhập title 256 ký tự 2. Nhập content/type 3. Submit | Không tạo article, hiển thị lỗi tiêu đề quá dài |  | Chưa chạy |
+| TC-ART-007 | Tạo bài viết thiếu content | Đăng nhập STAFF | 1. Nhập title/type 2. Để trống content 3. Submit | Không tạo article, hiển thị lỗi nội dung không được trống |  | Chưa chạy |
+| TC-ART-008 | Tạo bài viết thiếu type | Đăng nhập STAFF | 1. Nhập title/content 2. Không chọn type 3. Submit | Không tạo article, hiển thị lỗi loại bài viết không được trống |  | Chưa chạy |
+| TC-ART-009 | Sửa bài viết hợp lệ không đổi thumbnail | Đăng nhập STAFF, có article | 1. Mở `/article/moonblight/{id}/edit` 2. Sửa title/content/type 3. Không chọn thumbnail 4. Submit | Article cập nhật, thumbnailUrl cũ được giữ, updatedBy set, audit UPDATE |  | Chưa chạy |
+| TC-ART-011 | Soft-delete bài viết | Đăng nhập STAFF, có article chưa xóa | 1. POST `/article/moonblight/{id}/delete` | Article deleted = true, public news không còn hiển thị, CMS vẫn thấy, audit DELETE |  | Chưa chạy |
+| TC-ART-012 | Restore bài viết | Đăng nhập STAFF, có article deleted = true | 1. POST `/article/moonblight/{id}/restore` | Article deleted = false, public news hiển thị lại, audit RESTORE |  | Chưa chạy |
+| TC-STO-001 | Xem danh sách story CMS | Đăng nhập STAFF | 1. Mở `/story/moonblight/list` | Hiển thị stories phân trang size 10, activeMenu STORY |  | Chưa chạy |
+| TC-STO-002 | Tạo story hợp lệ có ảnh | Đăng nhập STAFF, có file ảnh | 1. Mở create 2. Nhập tag, title, content, quoteContent, quoteAuthor, priority 3. Chọn image 4. Submit | Tạo story thành công, lưu ảnh `uploads/stories`, audit CREATE |  | Chưa chạy |
+| TC-STO-005 | Tạo story priority nhỏ hơn 0 | Đăng nhập STAFF | 1. Nhập priority = -1 2. Submit | Không tạo story, hiển thị lỗi priority 0-100 |  | Chưa chạy |
+| TC-STO-006 | Tạo story priority lớn hơn 100 | Đăng nhập STAFF | 1. Nhập priority = 101 2. Submit | Không tạo story, hiển thị lỗi priority 0-100 |  | Chưa chạy |
+| TC-STO-007 | Sửa story không đổi ảnh | Đăng nhập STAFF, có story | 1. Mở edit 2. Sửa title/content/priority 3. Không chọn image 4. Submit | Story cập nhật, giữ image cũ, audit UPDATE |  | Chưa chạy |
+| TC-STO-008 | Soft-delete story | Đăng nhập STAFF, có story chưa xóa | 1. POST `/story/moonblight/{id}/delete` | Story deleted = true, public `/story` không hiển thị, audit DELETE |  | Chưa chạy |
+| TC-STO-009 | Restore story | Đăng nhập STAFF, có story deleted = true | 1. POST `/story/moonblight/{id}/restore` | Story deleted = false, public `/story` hiển thị lại, audit RESTORE |  | Chưa chạy |
+| TC-WLD-001 | Xem danh sách world CMS | Đăng nhập STAFF | 1. Mở `/world/moonblight/list` | Hiển thị worlds phân trang size 10, activeMenu WORLD |  | Chưa chạy |
+| TC-WLD-002 | Tạo world hợp lệ có ảnh | Đăng nhập STAFF, có file ảnh | 1. Mở create 2. Nhập tag, title, content, priority 3. Chọn image 4. Submit | Tạo world thành công, lưu ảnh `uploads/worlds`, audit CREATE |  | Chưa chạy |
+| TC-WLD-003 | Tạo world thiếu title | Đăng nhập STAFF | 1. Để trống title 2. Nhập các trường khác hợp lệ 3. Submit | Không tạo world, hiển thị lỗi tiêu đề không được trống |  | Chưa chạy |
+| TC-WLD-005 | Tạo world thiếu content | Đăng nhập STAFF | 1. Để trống content 2. Submit form | Không tạo world, hiển thị lỗi nội dung không được trống |  | Chưa chạy |
+| TC-WLD-007 | Sửa world hợp lệ không đổi ảnh | Đăng nhập STAFF, có world | 1. Mở edit 2. Sửa tag/title/content/priority 3. Không chọn image 4. Submit | World cập nhật, giữ image cũ, audit UPDATE |  | Chưa chạy |
+| TC-WLD-008 | Soft-delete world | Đăng nhập STAFF, có world chưa xóa | 1. POST `/world/moonblight/{id}/delete` | World deleted = true, public `/world` không hiển thị, audit DELETE |  | Chưa chạy |
+| TC-WLD-009 | Restore world | Đăng nhập STAFF, có world deleted = true | 1. POST `/world/moonblight/{id}/restore` | World deleted = false, public `/world` hiển thị lại, audit RESTORE |  | Chưa chạy |
+| TC-CHR-001 | Xem danh sách character CMS | Đăng nhập STAFF | 1. Mở `/character/moonblight/list` | Hiển thị characters phân trang size 10, activeMenu CHARACTER |  | Chưa chạy |
+| TC-CHR-002 | Tạo character hợp lệ có ảnh | Đăng nhập STAFF, có file ảnh | 1. Mở create 2. Nhập name, race, description, quote, priority 3. Chọn image 4. Submit | Tạo character thành công, lưu ảnh `uploads/characters`, audit CREATE |  | Chưa chạy |
+| TC-CHR-003 | Tạo character thiếu name | Đăng nhập STAFF | 1. Để trống name 2. Submit form hợp lệ còn lại | Không tạo character, hiển thị lỗi tên nhân v��t không được trống |  | Chưa chạy |
+| TC-CHR-005 | Tạo character thiếu race | Đăng nhập STAFF | 1. Để trống race 2. Submit | Không tạo character, hiển thị lỗi chủng tộc không được trống |  | Chưa chạy |
+| TC-CHR-008 | Tạo character priority ngoài biên | Đăng nhập STAFF | 1. Nhập priority = 101 hoặc -1 2. Submit | Không tạo character, hiển thị lỗi priority 0-100 |  | Chưa chạy |
+| TC-CHR-009 | Sửa character không đổi ảnh | Đăng nhập STAFF, có character | 1. Mở edit 2. Sửa name/race/description/priority 3. Không chọn image 4. Submit | Character cập nhật, giữ image cũ, audit UPDATE |  | Chưa chạy |
+| TC-CHR-010 | Soft-delete character | Đăng nhập STAFF, có character chưa xóa | 1. POST `/character/moonblight/{id}/delete` | Character deleted = true, public `/characters` không hiển thị, audit DELETE |  | Chưa chạy |
+| TC-CHR-011 | Restore character | Đăng nhập STAFF, có character deleted = true | 1. POST `/character/moonblight/{id}/restore` | Character deleted = false, public `/characters` hiển thị lại, audit RESTORE |  | Chưa chạy |
+| TC-FAQ-001 | Xem danh sách FAQ CMS | Đăng nhập STAFF | 1. Mở `/faq/moonblight/list` | Hiển thị FAQs phân trang size 10, activeMenu FAQ |  | Chưa chạy |
+| TC-FAQ-002 | Tạo FAQ hợp lệ | Đăng nhập STAFF | 1. Mở create 2. Nhập title, content, priority 3. Submit | Tạo FAQ thành công, redirect list, audit CREATE |  | Chưa chạy |
+| TC-FAQ-003 | Tạo FAQ thiếu title | Đăng nhập STAFF | 1. Để trống title 2. Nhập content/priority 3. Submit | Không tạo FAQ, hiển thị lỗi tiêu đề không được trống |  | Chưa chạy |
+| TC-FAQ-006 | Sửa FAQ hợp lệ | Đăng nhập STAFF, có FAQ | 1. Mở `/faq/moonblight/{id}/edit` 2. Sửa title/content/priority 3. Submit | FAQ cập nhật, redirect list, audit UPDATE |  | Chưa chạy |
+| TC-FAQ-007 | Soft-delete FAQ | Đăng nhập STAFF, có FAQ chưa xóa | 1. POST `/faq/moonblight/{id}/delete` | FAQ deleted = true, public support không hiển thị FAQ đó, audit DELETE |  | Chưa chạy |
+| TC-FAQ-008 | Restore FAQ | Đăng nhập STAFF, có FAQ deleted = true | 1. POST `/faq/moonblight/{id}/restore` | FAQ deleted = false, public support hiển thị lại, audit RESTORE |  | Chưa chạy |
+| TC-UPL-001 | Upload ảnh editor hợp lệ | Đăng nhập STAFF hoặc user được phép truy cập editor, có file ảnh | 1. POST `/api/upload` với multipart field `image` | Trả JSON `{url: ...}`, file lưu trong `uploads/editor` |  | Chưa chạy |
+| TC-UPL-002 | Upload ảnh editor file rỗng | Có quyền gọi API upload | 1. POST `/api/upload` với file rỗng | Trả HTTP 400 và JSON error `File upload không hợp lệ` |  | Chưa chạy |
+| TC-AUD-003 | Đánh dấu contact đã xử lý | Đăng nhập STAFF, có contact chưa xử lý | 1. POST `/contact/blightmoon/{id}/process` | Contact processed = true, redirect list, flash success, audit PROCESS |  | Chưa chạy |
+| TC-AUD-004 | Đánh dấu contact chưa xử lý | Đăng nhập STAFF, có contact đã xử lý | 1. POST `/contact/blightmoon/{id}/unprocess` | Contact processed = false, redirect list, flash success |  | Chưa chạy |
+| TC-AUD-005 | Xem chi tiết contact | Đăng nhập STAFF, có contact ID hợp lệ | 1. Mở `/contact/blightmoon/{id}` | Hiển thị đúng visitorName, visitorEmail, category, platform, message, processed |  | Chưa chạy |

mvnw

@@ -0,0 +1,295 @@
+#!/bin/sh
+# ----------------------------------------------------------------------------
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+# ----------------------------------------------------------------------------
+
+# ----------------------------------------------------------------------------
+# Apache Maven Wrapper startup batch script, version 3.3.4
+#
+# Optional ENV vars
+# -----------------
+#   JAVA_HOME - location of a JDK home dir, required when download maven via java source
+#   MVNW_REPOURL - repo url base for downloading maven distribution
+#   MVNW_USERNAME/MVNW_PASSWORD - user and password for downloading maven
+#   MVNW_VERBOSE - true: enable verbose log; debug: trace the mvnw script; others: silence the output
+# ----------------------------------------------------------------------------
+
+set -euf
+[ "${MVNW_VERBOSE-}" != debug ] || set -x
+
+# OS specific support.
+native_path() { printf %s\\n "$1"; }
+case "$(uname)" in
+CYGWIN* | MINGW*)
+  [ -z "${JAVA_HOME-}" ] || JAVA_HOME="$(cygpath --unix "$JAVA_HOME")"
+  native_path() { cygpath --path --windows "$1"; }
+  ;;
+esac
+
+# set JAVACMD and JAVACCMD
+set_java_home() {
+  # For Cygwin and MinGW, ensure paths are in Unix format before anything is touched
+  if [ -n "${JAVA_HOME-}" ]; then
+    if [ -x "$JAVA_HOME/jre/sh/java" ]; then
+      # IBM's JDK on AIX uses strange locations for the executables
+      JAVACMD="$JAVA_HOME/jre/sh/java"
+      JAVACCMD="$JAVA_HOME/jre/sh/javac"
+    else
+      JAVACMD="$JAVA_HOME/bin/java"
+      JAVACCMD="$JAVA_HOME/bin/javac"
+
+      if [ ! -x "$JAVACMD" ] || [ ! -x "$JAVACCMD" ]; then
+        echo "The JAVA_HOME environment variable is not defined correctly, so mvnw cannot run." >&2
+        echo "JAVA_HOME is set to \"$JAVA_HOME\", but \"\$JAVA_HOME/bin/java\" or \"\$JAVA_HOME/bin/javac\" does not exist." >&2
+        return 1
+      fi
+    fi
+  else
+    JAVACMD="$(
+      'set' +e
+      'unset' -f command 2>/dev/null
+      'command' -v java
+    )" || :
+    JAVACCMD="$(
+      'set' +e
+      'unset' -f command 2>/dev/null
+      'command' -v javac
+    )" || :
+
+    if [ ! -x "${JAVACMD-}" ] || [ ! -x "${JAVACCMD-}" ]; then
+      echo "The java/javac command does not exist in PATH nor is JAVA_HOME set, so mvnw cannot run." >&2
+      return 1
+    fi
+  fi
+}
+
+# hash string like Java String::hashCode
+hash_string() {
+  str="${1:-}" h=0
+  while [ -n "$str" ]; do
+    char="${str%"${str#?}"}"
+    h=$(((h * 31 + $(LC_CTYPE=C printf %d "'$char")) % 4294967296))
+    str="${str#?}"
+  done
+  printf %x\\n $h
+}
+
+verbose() { :; }
+[ "${MVNW_VERBOSE-}" != true ] || verbose() { printf %s\\n "${1-}"; }
+
+die() {
+  printf %s\\n "$1" >&2
+  exit 1
+}
+
+trim() {
+  # MWRAPPER-139:
+  #   Trims trailing and leading whitespace, carriage returns, tabs, and linefeeds.
+  #   Needed for removing poorly interpreted newline sequences when running in more
+  #   exotic environments such as mingw bash on Windows.
+  printf "%s" "${1}" | tr -d '[:space:]'
+}
+
+scriptDir="$(dirname "$0")"
+scriptName="$(basename "$0")"
+
+# parse distributionUrl and optional distributionSha256Sum, requires .mvn/wrapper/maven-wrapper.properties
+while IFS="=" read -r key value; do
+  case "${key-}" in
+  distributionUrl) distributionUrl=$(trim "${value-}") ;;
+  distributionSha256Sum) distributionSha256Sum=$(trim "${value-}") ;;
+  esac
+done <"$scriptDir/.mvn/wrapper/maven-wrapper.properties"
+[ -n "${distributionUrl-}" ] || die "cannot read distributionUrl property in $scriptDir/.mvn/wrapper/maven-wrapper.properties"
+
+case "${distributionUrl##*/}" in
+maven-mvnd-*bin.*)
+  MVN_CMD=mvnd.sh _MVNW_REPO_PATTERN=/maven/mvnd/
+  case "${PROCESSOR_ARCHITECTURE-}${PROCESSOR_ARCHITEW6432-}:$(uname -a)" in
+  *AMD64:CYGWIN* | *AMD64:MINGW*) distributionPlatform=windows-amd64 ;;
+  :Darwin*x86_64) distributionPlatform=darwin-amd64 ;;
+  :Darwin*arm64) distributionPlatform=darwin-aarch64 ;;
+  :Linux*x86_64*) distributionPlatform=linux-amd64 ;;
+  *)
+    echo "Cannot detect native platform for mvnd on $(uname)-$(uname -m), use pure java version" >&2
+    distributionPlatform=linux-amd64
+    ;;
+  esac
+  distributionUrl="${distributionUrl%-bin.*}-$distributionPlatform.zip"
+  ;;
+maven-mvnd-*) MVN_CMD=mvnd.sh _MVNW_REPO_PATTERN=/maven/mvnd/ ;;
+*) MVN_CMD="mvn${scriptName#mvnw}" _MVNW_REPO_PATTERN=/org/apache/maven/ ;;
+esac
+
+# apply MVNW_REPOURL and calculate MAVEN_HOME
+# maven home pattern: ~/.m2/wrapper/dists/{apache-maven-<version>,maven-mvnd-<version>-<platform>}/<hash>
+[ -z "${MVNW_REPOURL-}" ] || distributionUrl="$MVNW_REPOURL$_MVNW_REPO_PATTERN${distributionUrl#*"$_MVNW_REPO_PATTERN"}"
+distributionUrlName="${distributionUrl##*/}"
+distributionUrlNameMain="${distributionUrlName%.*}"
+distributionUrlNameMain="${distributionUrlNameMain%-bin}"
+MAVEN_USER_HOME="${MAVEN_USER_HOME:-${HOME}/.m2}"
+MAVEN_HOME="${MAVEN_USER_HOME}/wrapper/dists/${distributionUrlNameMain-}/$(hash_string "$distributionUrl")"
+
+exec_maven() {
+  unset MVNW_VERBOSE MVNW_USERNAME MVNW_PASSWORD MVNW_REPOURL || :
+  exec "$MAVEN_HOME/bin/$MVN_CMD" "$@" || die "cannot exec $MAVEN_HOME/bin/$MVN_CMD"
+}
+
+if [ -d "$MAVEN_HOME" ]; then
+  verbose "found existing MAVEN_HOME at $MAVEN_HOME"
+  exec_maven "$@"
+fi
+
+case "${distributionUrl-}" in
+*?-bin.zip | *?maven-mvnd-?*-?*.zip) ;;
+*) die "distributionUrl is not valid, must match *-bin.zip or maven-mvnd-*.zip, but found '${distributionUrl-}'" ;;
+esac
+
+# prepare tmp dir
+if TMP_DOWNLOAD_DIR="$(mktemp -d)" && [ -d "$TMP_DOWNLOAD_DIR" ]; then
+  clean() { rm -rf -- "$TMP_DOWNLOAD_DIR"; }
+  trap clean HUP INT TERM EXIT
+else
+  die "cannot create temp dir"
+fi
+
+mkdir -p -- "${MAVEN_HOME%/*}"
+
+# Download and Install Apache Maven
+verbose "Couldn't find MAVEN_HOME, downloading and installing it ..."
+verbose "Downloading from: $distributionUrl"
+verbose "Downloading to: $TMP_DOWNLOAD_DIR/$distributionUrlName"
+
+# select .zip or .tar.gz
+if ! command -v unzip >/dev/null; then
+  distributionUrl="${distributionUrl%.zip}.tar.gz"
+  distributionUrlName="${distributionUrl##*/}"
+fi
+
+# verbose opt
+__MVNW_QUIET_WGET=--quiet __MVNW_QUIET_CURL=--silent __MVNW_QUIET_UNZIP=-q __MVNW_QUIET_TAR=''
+[ "${MVNW_VERBOSE-}" != true ] || __MVNW_QUIET_WGET='' __MVNW_QUIET_CURL='' __MVNW_QUIET_UNZIP='' __MVNW_QUIET_TAR=v
+
+# normalize http auth
+case "${MVNW_PASSWORD:+has-password}" in
+'') MVNW_USERNAME='' MVNW_PASSWORD='' ;;
+has-password) [ -n "${MVNW_USERNAME-}" ] || MVNW_USERNAME='' MVNW_PASSWORD='' ;;
+esac
+
+if [ -z "${MVNW_USERNAME-}" ] && command -v wget >/dev/null; then
+  verbose "Found wget ... using wget"
+  wget ${__MVNW_QUIET_WGET:+"$__MVNW_QUIET_WGET"} "$distributionUrl" -O "$TMP_DOWNLOAD_DIR/$distributionUrlName" || die "wget: Failed to fetch $distributionUrl"
+elif [ -z "${MVNW_USERNAME-}" ] && command -v curl >/dev/null; then
+  verbose "Found curl ... using curl"
+  curl ${__MVNW_QUIET_CURL:+"$__MVNW_QUIET_CURL"} -f -L -o "$TMP_DOWNLOAD_DIR/$distributionUrlName" "$distributionUrl" || die "curl: Failed to fetch $distributionUrl"
+elif set_java_home; then
+  verbose "Falling back to use Java to download"
+  javaSource="$TMP_DOWNLOAD_DIR/Downloader.java"
+  targetZip="$TMP_DOWNLOAD_DIR/$distributionUrlName"
+  cat >"$javaSource" <<-END
+	public class Downloader extends java.net.Authenticator
+	{
+	  protected java.net.PasswordAuthentication getPasswordAuthentication()
+	  {
+	    return new java.net.PasswordAuthentication( System.getenv( "MVNW_USERNAME" ), System.getenv( "MVNW_PASSWORD" ).toCharArray() );
+	  }
+	  public static void main( String[] args ) throws Exception
+	  {
+	    setDefault( new Downloader() );
+	    java.nio.file.Files.copy( java.net.URI.create( args[0] ).toURL().openStream(), java.nio.file.Paths.get( args[1] ).toAbsolutePath().normalize() );
+	  }
+	}
+	END
+  # For Cygwin/MinGW, switch paths to Windows format before running javac and java
+  verbose " - Compiling Downloader.java ..."
+  "$(native_path "$JAVACCMD")" "$(native_path "$javaSource")" || die "Failed to compile Downloader.java"
+  verbose " - Running Downloader.java ..."
+  "$(native_path "$JAVACMD")" -cp "$(native_path "$TMP_DOWNLOAD_DIR")" Downloader "$distributionUrl" "$(native_path "$targetZip")"
+fi
+
+# If specified, validate the SHA-256 sum of the Maven distribution zip file
+if [ -n "${distributionSha256Sum-}" ]; then
+  distributionSha256Result=false
+  if [ "$MVN_CMD" = mvnd.sh ]; then
+    echo "Checksum validation is not supported for maven-mvnd." >&2
+    echo "Please disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties." >&2
+    exit 1
+  elif command -v sha256sum >/dev/null; then
+    if echo "$distributionSha256Sum  $TMP_DOWNLOAD_DIR/$distributionUrlName" | sha256sum -c - >/dev/null 2>&1; then
+      distributionSha256Result=true
+    fi
+  elif command -v shasum >/dev/null; then
+    if echo "$distributionSha256Sum  $TMP_DOWNLOAD_DIR/$distributionUrlName" | shasum -a 256 -c >/dev/null 2>&1; then
+      distributionSha256Result=true
+    fi
+  else
+    echo "Checksum validation was requested but neither 'sha256sum' or 'shasum' are available." >&2
+    echo "Please install either command, or disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties." >&2
+    exit 1
+  fi
+  if [ $distributionSha256Result = false ]; then
+    echo "Error: Failed to validate Maven distribution SHA-256, your Maven distribution might be compromised." >&2
+    echo "If you updated your Maven version, you need to update the specified distributionSha256Sum property." >&2
+    exit 1
+  fi
+fi
+
+# unzip and move
+if command -v unzip >/dev/null; then
+  unzip ${__MVNW_QUIET_UNZIP:+"$__MVNW_QUIET_UNZIP"} "$TMP_DOWNLOAD_DIR/$distributionUrlName" -d "$TMP_DOWNLOAD_DIR" || die "failed to unzip"
+else
+  tar xzf${__MVNW_QUIET_TAR:+"$__MVNW_QUIET_TAR"} "$TMP_DOWNLOAD_DIR/$distributionUrlName" -C "$TMP_DOWNLOAD_DIR" || die "failed to untar"
+fi
+
+# Find the actual extracted directory name (handles snapshots where filename != directory name)
+actualDistributionDir=""
+
+# First try the expected directory name (for regular distributions)
+if [ -d "$TMP_DOWNLOAD_DIR/$distributionUrlNameMain" ]; then
+  if [ -f "$TMP_DOWNLOAD_DIR/$distributionUrlNameMain/bin/$MVN_CMD" ]; then
+    actualDistributionDir="$distributionUrlNameMain"
+  fi
+fi
+
+# If not found, search for any directory with the Maven executable (for snapshots)
+if [ -z "$actualDistributionDir" ]; then
+  # enable globbing to iterate over items
+  set +f
+  for dir in "$TMP_DOWNLOAD_DIR"/*; do
+    if [ -d "$dir" ]; then
+      if [ -f "$dir/bin/$MVN_CMD" ]; then
+        actualDistributionDir="$(basename "$dir")"
+        break
+      fi
+    fi
+  done
+  set -f
+fi
+
+if [ -z "$actualDistributionDir" ]; then
+  verbose "Contents of $TMP_DOWNLOAD_DIR:"
+  verbose "$(ls -la "$TMP_DOWNLOAD_DIR")"
+  die "Could not find Maven distribution directory in extracted archive"
+fi
+
+verbose "Found extracted Maven distribution directory: $actualDistributionDir"
+printf %s\\n "$distributionUrl" >"$TMP_DOWNLOAD_DIR/$actualDistributionDir/mvnw.url"
+mv -- "$TMP_DOWNLOAD_DIR/$actualDistributionDir" "$MAVEN_HOME" || [ -d "$MAVEN_HOME" ] || die "fail to move MAVEN_HOME"
+
+clean || :
+exec_maven "$@"

mvnw.cmd

@@ -0,0 +1,189 @@
+<# : batch portion
+@REM ----------------------------------------------------------------------------
+@REM Licensed to the Apache Software Foundation (ASF) under one
+@REM or more contributor license agreements.  See the NOTICE file
+@REM distributed with this work for additional information
+@REM regarding copyright ownership.  The ASF licenses this file
+@REM to you under the Apache License, Version 2.0 (the
+@REM "License"); you may not use this file except in compliance
+@REM with the License.  You may obtain a copy of the License at
+@REM
+@REM    http://www.apache.org/licenses/LICENSE-2.0
+@REM
+@REM Unless required by applicable law or agreed to in writing,
+@REM software distributed under the License is distributed on an
+@REM "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+@REM KIND, either express or implied.  See the License for the
+@REM specific language governing permissions and limitations
+@REM under the License.
+@REM ----------------------------------------------------------------------------
+
+@REM ----------------------------------------------------------------------------
+@REM Apache Maven Wrapper startup batch script, version 3.3.4
+@REM
+@REM Optional ENV vars
+@REM   MVNW_REPOURL - repo url base for downloading maven distribution
+@REM   MVNW_USERNAME/MVNW_PASSWORD - user and password for downloading maven
+@REM   MVNW_VERBOSE - true: enable verbose log; others: silence the output
+@REM ----------------------------------------------------------------------------
+
+@IF "%__MVNW_ARG0_NAME__%"=="" (SET __MVNW_ARG0_NAME__=%~nx0)
+@SET __MVNW_CMD__=
+@SET __MVNW_ERROR__=
+@SET __MVNW_PSMODULEP_SAVE=%PSModulePath%
+@SET PSModulePath=
+@FOR /F "usebackq tokens=1* delims==" %%A IN (`powershell -noprofile "& {$scriptDir='%~dp0'; $script='%__MVNW_ARG0_NAME__%'; icm -ScriptBlock ([Scriptblock]::Create((Get-Content -Raw '%~f0'))) -NoNewScope}"`) DO @(
+  IF "%%A"=="MVN_CMD" (set __MVNW_CMD__=%%B) ELSE IF "%%B"=="" (echo %%A) ELSE (echo %%A=%%B)
+)
+@SET PSModulePath=%__MVNW_PSMODULEP_SAVE%
+@SET __MVNW_PSMODULEP_SAVE=
+@SET __MVNW_ARG0_NAME__=
+@SET MVNW_USERNAME=
+@SET MVNW_PASSWORD=
+@IF NOT "%__MVNW_CMD__%"=="" ("%__MVNW_CMD__%" %*)
+@echo Cannot start maven from wrapper >&2 && exit /b 1
+@GOTO :EOF
+: end batch / begin powershell #>
+
+$ErrorActionPreference = "Stop"
+if ($env:MVNW_VERBOSE -eq "true") {
+  $VerbosePreference = "Continue"
+}
+
+# calculate distributionUrl, requires .mvn/wrapper/maven-wrapper.properties
+$distributionUrl = (Get-Content -Raw "$scriptDir/.mvn/wrapper/maven-wrapper.properties" | ConvertFrom-StringData).distributionUrl
+if (!$distributionUrl) {
+  Write-Error "cannot read distributionUrl property in $scriptDir/.mvn/wrapper/maven-wrapper.properties"
+}
+
+switch -wildcard -casesensitive ( $($distributionUrl -replace '^.*/','') ) {
+  "maven-mvnd-*" {
+    $USE_MVND = $true
+    $distributionUrl = $distributionUrl -replace '-bin\.[^.]*$',"-windows-amd64.zip"
+    $MVN_CMD = "mvnd.cmd"
+    break
+  }
+  default {
+    $USE_MVND = $false
+    $MVN_CMD = $script -replace '^mvnw','mvn'
+    break
+  }
+}
+
+# apply MVNW_REPOURL and calculate MAVEN_HOME
+# maven home pattern: ~/.m2/wrapper/dists/{apache-maven-<version>,maven-mvnd-<version>-<platform>}/<hash>
+if ($env:MVNW_REPOURL) {
+  $MVNW_REPO_PATTERN = if ($USE_MVND -eq $False) { "/org/apache/maven/" } else { "/maven/mvnd/" }
+  $distributionUrl = "$env:MVNW_REPOURL$MVNW_REPO_PATTERN$($distributionUrl -replace "^.*$MVNW_REPO_PATTERN",'')"
+}
+$distributionUrlName = $distributionUrl -replace '^.*/',''
+$distributionUrlNameMain = $distributionUrlName -replace '\.[^.]*$','' -replace '-bin$',''
+
+$MAVEN_M2_PATH = "$HOME/.m2"
+if ($env:MAVEN_USER_HOME) {
+  $MAVEN_M2_PATH = "$env:MAVEN_USER_HOME"
+}
+
+if (-not (Test-Path -Path $MAVEN_M2_PATH)) {
+    New-Item -Path $MAVEN_M2_PATH -ItemType Directory | Out-Null
+}
+
+$MAVEN_WRAPPER_DISTS = $null
+if ((Get-Item $MAVEN_M2_PATH).Target[0] -eq $null) {
+  $MAVEN_WRAPPER_DISTS = "$MAVEN_M2_PATH/wrapper/dists"
+} else {
+  $MAVEN_WRAPPER_DISTS = (Get-Item $MAVEN_M2_PATH).Target[0] + "/wrapper/dists"
+}
+
+$MAVEN_HOME_PARENT = "$MAVEN_WRAPPER_DISTS/$distributionUrlNameMain"
+$MAVEN_HOME_NAME = ([System.Security.Cryptography.SHA256]::Create().ComputeHash([byte[]][char[]]$distributionUrl) | ForEach-Object {$_.ToString("x2")}) -join ''
+$MAVEN_HOME = "$MAVEN_HOME_PARENT/$MAVEN_HOME_NAME"
+
+if (Test-Path -Path "$MAVEN_HOME" -PathType Container) {
+  Write-Verbose "found existing MAVEN_HOME at $MAVEN_HOME"
+  Write-Output "MVN_CMD=$MAVEN_HOME/bin/$MVN_CMD"
+  exit $?
+}
+
+if (! $distributionUrlNameMain -or ($distributionUrlName -eq $distributionUrlNameMain)) {
+  Write-Error "distributionUrl is not valid, must end with *-bin.zip, but found $distributionUrl"
+}
+
+# prepare tmp dir
+$TMP_DOWNLOAD_DIR_HOLDER = New-TemporaryFile
+$TMP_DOWNLOAD_DIR = New-Item -Itemtype Directory -Path "$TMP_DOWNLOAD_DIR_HOLDER.dir"
+$TMP_DOWNLOAD_DIR_HOLDER.Delete() | Out-Null
+trap {
+  if ($TMP_DOWNLOAD_DIR.Exists) {
+    try { Remove-Item $TMP_DOWNLOAD_DIR -Recurse -Force | Out-Null }
+    catch { Write-Warning "Cannot remove $TMP_DOWNLOAD_DIR" }
+  }
+}
+
+New-Item -Itemtype Directory -Path "$MAVEN_HOME_PARENT" -Force | Out-Null
+
+# Download and Install Apache Maven
+Write-Verbose "Couldn't find MAVEN_HOME, downloading and installing it ..."
+Write-Verbose "Downloading from: $distributionUrl"
+Write-Verbose "Downloading to: $TMP_DOWNLOAD_DIR/$distributionUrlName"
+
+$webclient = New-Object System.Net.WebClient
+if ($env:MVNW_USERNAME -and $env:MVNW_PASSWORD) {
+  $webclient.Credentials = New-Object System.Net.NetworkCredential($env:MVNW_USERNAME, $env:MVNW_PASSWORD)
+}
+[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+$webclient.DownloadFile($distributionUrl, "$TMP_DOWNLOAD_DIR/$distributionUrlName") | Out-Null
+
+# If specified, validate the SHA-256 sum of the Maven distribution zip file
+$distributionSha256Sum = (Get-Content -Raw "$scriptDir/.mvn/wrapper/maven-wrapper.properties" | ConvertFrom-StringData).distributionSha256Sum
+if ($distributionSha256Sum) {
+  if ($USE_MVND) {
+    Write-Error "Checksum validation is not supported for maven-mvnd. `nPlease disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties."
+  }
+  Import-Module $PSHOME\Modules\Microsoft.PowerShell.Utility -Function Get-FileHash
+  if ((Get-FileHash "$TMP_DOWNLOAD_DIR/$distributionUrlName" -Algorithm SHA256).Hash.ToLower() -ne $distributionSha256Sum) {
+    Write-Error "Error: Failed to validate Maven distribution SHA-256, your Maven distribution might be compromised. If you updated your Maven version, you need to update the specified distributionSha256Sum property."
+  }
+}
+
+# unzip and move
+Expand-Archive "$TMP_DOWNLOAD_DIR/$distributionUrlName" -DestinationPath "$TMP_DOWNLOAD_DIR" | Out-Null
+
+# Find the actual extracted directory name (handles snapshots where filename != directory name)
+$actualDistributionDir = ""
+
+# First try the expected directory name (for regular distributions)
+$expectedPath = Join-Path "$TMP_DOWNLOAD_DIR" "$distributionUrlNameMain"
+$expectedMvnPath = Join-Path "$expectedPath" "bin/$MVN_CMD"
+if ((Test-Path -Path $expectedPath -PathType Container) -and (Test-Path -Path $expectedMvnPath -PathType Leaf)) {
+  $actualDistributionDir = $distributionUrlNameMain
+}
+
+# If not found, search for any directory with the Maven executable (for snapshots)
+if (!$actualDistributionDir) {
+  Get-ChildItem -Path "$TMP_DOWNLOAD_DIR" -Directory | ForEach-Object {
+    $testPath = Join-Path $_.FullName "bin/$MVN_CMD"
+    if (Test-Path -Path $testPath -PathType Leaf) {
+      $actualDistributionDir = $_.Name
+    }
+  }
+}
+
+if (!$actualDistributionDir) {
+  Write-Error "Could not find Maven distribution directory in extracted archive"
+}
+
+Write-Verbose "Found extracted Maven distribution directory: $actualDistributionDir"
+Rename-Item -Path "$TMP_DOWNLOAD_DIR/$actualDistributionDir" -NewName $MAVEN_HOME_NAME | Out-Null
+try {
+  Move-Item -Path "$TMP_DOWNLOAD_DIR/$MAVEN_HOME_NAME" -Destination $MAVEN_HOME_PARENT | Out-Null
+} catch {
+  if (! (Test-Path -Path "$MAVEN_HOME" -PathType Container)) {
+    Write-Error "fail to move MAVEN_HOME"
+  }
+} finally {
+  try { Remove-Item $TMP_DOWNLOAD_DIR -Recurse -Force | Out-Null }
+  catch { Write-Warning "Cannot remove $TMP_DOWNLOAD_DIR" }
+}
+
+Write-Output "MVN_CMD=$MAVEN_HOME/bin/$MVN_CMD"

pom.xml

@@ -0,0 +1,130 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-starter-parent</artifactId>
+        <version>3.2.5</version>
+        <relativePath />
+    </parent>
+
+    <groupId>com.darkfantasy</groupId>
+    <artifactId>darkfantasy-landing</artifactId>
+    <version>1.0.0</version>
+    <packaging>war</packaging>
+    <name>Dark Fantasy Landing Page</name>
+    <description>Gothic Horror Dark Fantasy Landing Page - Spring Boot + JSP</description>
+
+    <properties>
+        <java.version>21</java.version>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+    </properties>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-mail</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.thymeleaf.extras</groupId>
+            <artifactId>thymeleaf-extras-springsecurity6</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-thymeleaf</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.mariadb.jdbc</groupId>
+            <artifactId>mariadb-java-client</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-validation</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-data-jpa</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.projectlombok</groupId>
+            <artifactId>lombok</artifactId>
+            <!-- <version>1.18.32</version> -->
+            <optional>true</optional>
+        </dependency>
+        <!-- OAuth2 Google Login -->
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-oauth2-client</artifactId>
+        </dependency>
+        <!-- Spring Boot Web -->
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-web</artifactId>
+        </dependency>
+
+        <!-- Embedded Tomcat (not provided so java -jar works) -->
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-tomcat</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-devtools</artifactId>
+            <scope>runtime</scope>
+            <optional>true</optional>
+        </dependency>
+        <!-- JSP support -->
+        <dependency>
+            <groupId>org.apache.tomcat.embed</groupId>
+            <artifactId>tomcat-embed-jasper</artifactId>
+        </dependency>
+
+        <!-- JSTL -->
+        <dependency>
+            <groupId>jakarta.servlet.jsp.jstl</groupId>
+            <artifactId>jakarta.servlet.jsp.jstl-api</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.glassfish.web</groupId>
+            <artifactId>jakarta.servlet.jsp.jstl</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>com.mysql</groupId>
+            <artifactId>mysql-connector-j</artifactId>
+            <scope>runtime</scope>
+        </dependency>
+
+    </dependencies>
+
+    <build>
+        <plugins>
+
+
+            <plugin>
+                <groupId>org.springframework.boot</groupId>
+                <artifactId>spring-boot-maven-plugin</artifactId>
+            </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>3.11.0</version>
+
+                <configuration>
+                    <release>21</release>
+
+                    <annotationProcessorPaths>
+                        <path>
+                            <groupId>org.projectlombok</groupId>
+                            <artifactId>lombok</artifactId>
+                            <version>1.18.32</version>
+                        </path>
+                    </annotationProcessorPaths>
+
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+</project>

src/main/java/com/darkfantasy/DarkFantasyApplication.java

@@ -0,0 +1,19 @@
+package com.darkfantasy;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.boot.web.servlet.support.SpringBootServletInitializer;
+import org.springframework.boot.builder.SpringApplicationBuilder;
+
+@SpringBootApplication
+public class DarkFantasyApplication extends SpringBootServletInitializer {
+
+    @Override
+    protected SpringApplicationBuilder configure(SpringApplicationBuilder application) {
+        return application.sources(DarkFantasyApplication.class);
+    }
+
+    public static void main(String[] args) {
+        SpringApplication.run(DarkFantasyApplication.class, args);
+    }
+}

src/main/java/com/darkfantasy/annotation/ChangePasswordMatch.java

@@ -0,0 +1,23 @@
+package com.darkfantasy.annotation;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+import com.darkfantasy.validator.PasswordChangeMatchValidator;
+
+import jakarta.validation.Constraint;
+import jakarta.validation.Payload;
+
+@Target(ElementType.TYPE)
+@Retention(RetentionPolicy.RUNTIME)
+@Constraint(validatedBy = PasswordChangeMatchValidator.class)
+public @interface ChangePasswordMatch {
+
+    String message() default "Mật khẩu xác nhận không khớp";
+
+    Class<?>[] groups() default {};
+
+    Class<? extends Payload>[] payload() default {};
+}

src/main/java/com/darkfantasy/annotation/RegisterPasswordMatch.java

@@ -0,0 +1,23 @@
+package com.darkfantasy.annotation;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+import com.darkfantasy.validator.PasswordRegisterMatchValidator;
+
+import jakarta.validation.Constraint;
+import jakarta.validation.Payload;
+
+@Target(ElementType.TYPE)
+@Retention(RetentionPolicy.RUNTIME)
+@Constraint(validatedBy = PasswordRegisterMatchValidator.class)
+public @interface RegisterPasswordMatch {
+
+    String message() default "Mật khẩu xác nhận không khớp";
+
+    Class<?>[] groups() default {};
+
+    Class<? extends Payload>[] payload() default {};
+}

src/main/java/com/darkfantasy/annotation/ResetPasswordMatch.java

@@ -0,0 +1,23 @@
+package com.darkfantasy.annotation;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+import com.darkfantasy.validator.ResetPasswordMatchValidator;
+
+import jakarta.validation.Constraint;
+import jakarta.validation.Payload;
+
+@Target(ElementType.TYPE)
+@Retention(RetentionPolicy.RUNTIME)
+@Constraint(validatedBy = ResetPasswordMatchValidator.class)
+public @interface ResetPasswordMatch {
+
+    String message() default "Mật khẩu xác nhận không khớp";
+
+    Class<?>[] groups() default {};
+
+    Class<? extends Payload>[] payload() default {};
+}

src/main/java/com/darkfantasy/config/SchedulingConfig.java

@@ -0,0 +1,5 @@
+// package com.darkfantasy.config;
+
+// public class SchedulingConfig {
+
+// }

src/main/java/com/darkfantasy/config/WebConfig.java

@@ -0,0 +1,27 @@
+package com.darkfantasy.config;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+import com.darkfantasy.security.ForceChangePasswordInterceptor;
+
+import lombok.RequiredArgsConstructor;
+
+@Configuration
+@RequiredArgsConstructor
+public class WebConfig implements WebMvcConfigurer {
+    private final ForceChangePasswordInterceptor interceptor;
+
+    @Override
+    public void addResourceHandlers(ResourceHandlerRegistry registry) {
+        registry.addResourceHandler("/uploads/**")
+                .addResourceLocations("file:uploads/");
+    }
+
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(interceptor);
+    }
+}

src/main/java/com/darkfantasy/constant/CmsMenu.java

@@ -0,0 +1,16 @@
+package com.darkfantasy.constant;
+
+import lombok.AccessLevel;
+import lombok.NoArgsConstructor;
+
+@NoArgsConstructor(access = AccessLevel.PRIVATE)
+public final class CmsMenu {
+    public static final String DASHBOARD = "dashboard";
+    public static final String ARTICLE = "article";
+    public static final String STORY = "story";
+    public static final String WORLD = "world";
+    public static final String CHARACTER = "character";
+    public static final String FAQ = "faq";
+    public static final String CONTRIBUTOR = "contributor";
+    public static final String CONTACT = "contact";
+}

src/main/java/com/darkfantasy/constant/Routes.java

@@ -0,0 +1,18 @@
+package com.darkfantasy.constant;
+
+import lombok.AccessLevel;
+import lombok.NoArgsConstructor;
+
+@NoArgsConstructor(access = AccessLevel.PRIVATE)
+public final class Routes {
+    public static final String USER = "/user/moonblight";
+    public static final String ADMIN = "/admin/moonblight";
+    public static final String DASHBOARD = "/dashboard/moonblight";
+    public static final String ARTICLE = "/article/moonblight";
+    public static final String CHARACTER = "/character/moonblight";
+    public static final String WORLD = "/world/moonblight";
+    public static final String STORY = "/story/moonblight";
+    public static final String FAQ = "/faq/moonblight";
+    public static final String CONTRIBUTOR = "/contributor/moonblight";
+    public static final String CONTACT = "/contact/moonblight";
+}

src/main/java/com/darkfantasy/controller/AdminController.java

@@ -0,0 +1,109 @@
+package com.darkfantasy.controller;
+
+import org.springframework.data.domain.Pageable;
+import org.springframework.data.domain.Sort.Direction;
+import org.springframework.data.web.PageableDefault;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import lombok.RequiredArgsConstructor;
+
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.dto.user.UserResponse;
+import com.darkfantasy.service.AuditLogService;
+import com.darkfantasy.service.UserService;
+import org.springframework.web.bind.annotation.PostMapping;
+
+@Controller
+@RequiredArgsConstructor
+@RequestMapping(Routes.ADMIN + "/")
+public class AdminController {
+        private final AuditLogService auditLogService;
+        private final UserService userService;
+
+        @GetMapping("dashboard")
+        public String toDashboard(Model model) {
+                model.addAttribute("totalUsers", userService.count());
+                model.addAttribute("activeUsers", userService.countActiveUsers());
+                model.addAttribute("inActiveUsers", userService.countInactiveUsers());
+                return "cms/admin/admin-dashboard";
+        }
+
+        @GetMapping("list")
+        public String toAccountList(
+                        @PageableDefault(size = 10) Pageable pageable,
+                        Model model) {
+                model.addAttribute("accounts", userService.getAccounts(pageable));
+                return "cms/admin/account-list";
+        }
+
+        @GetMapping("account/{id}")
+        public String toDetailAccount(
+                        @PathVariable("id") Long id,
+                        Model model) {
+
+                UserResponse response = userService.findAccountById(id);
+
+                model.addAttribute("account", response);
+                return "cms/admin/account-detail";
+        }
+
+        @GetMapping("log")
+        public String toLogList(
+                        @PageableDefault(size = 20, sort = "createdAt", direction = Direction.DESC) Pageable pageable,
+                        Model model) {
+
+                model.addAttribute("logs", auditLogService.getLogs(pageable));
+                model.addAttribute("activeMenu", "audit-log");
+                return "cms/admin/audit-log";
+        }
+
+        @PostMapping("account/{id}/approve")
+        public String approveAccount(
+                        @PathVariable("id") Long id,
+                        RedirectAttributes redirectAttributes) {
+
+                userService.unlockUser(id);
+
+                redirectAttributes.addFlashAttribute("successMessage", "Duyệt tài khoản thành công");
+                return "redirect:" + Routes.ADMIN + "/account/" + id;
+        }
+
+        @PostMapping("account/{id}/reject")
+        public String rejectAccount(
+                        @PathVariable("id") Long id,
+                        RedirectAttributes redirectAttributes) {
+
+                userService.lockUser(id);
+
+                redirectAttributes.addFlashAttribute("successMessage", "Từ chối tài khoản thành công");
+                return "redirect:" + Routes.ADMIN + "/account/" + id;
+        }
+
+        @PostMapping("account/{id}/lock")
+        public String lockAccount(
+                        @PathVariable("id") Long id,
+                        RedirectAttributes redirectAttributes) {
+
+                userService.lockUser(id);
+
+                redirectAttributes.addFlashAttribute("successMessage", "Khóa tài khoản thành công");
+                return "redirect:" + Routes.ADMIN + "/account/" + id;
+        }
+
+        @PostMapping("account/{id}/unlock")
+        public String unlockAccount(
+                        @PathVariable("id") Long id,
+                        RedirectAttributes redirectAttributes) {
+
+                userService.unlockUser(id);
+
+                redirectAttributes.addFlashAttribute("successMessage", "Mở khóa tài khoản thành công");
+                return "redirect:" + Routes.ADMIN + "/account/" + id;
+        }
+
+}

src/main/java/com/darkfantasy/controller/ArticleController.java

@@ -0,0 +1,195 @@
+package com.darkfantasy.controller;
+
+import org.springframework.data.domain.Pageable;
+import org.springframework.data.web.PageableDefault;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.validation.BindingResult;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.multipart.MultipartFile;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.darkfantasy.constant.CmsMenu;
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.dto.article.ArticleResponse;
+import com.darkfantasy.dto.article.CreateArticleRequest;
+import com.darkfantasy.dto.article.UpdateArticleRequest;
+import com.darkfantasy.entity.enums.ArticleType;
+import com.darkfantasy.service.ArticleService;
+import com.darkfantasy.service.FileStorageService;
+
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequestMapping(Routes.ARTICLE + "/")
+@RequiredArgsConstructor
+public class ArticleController {
+
+    private final ArticleService articleService;
+    private final FileStorageService fileStorageService;
+
+    @ModelAttribute("articleTypes")
+    public ArticleType[] articleTypes() {
+        return ArticleType.values();
+    }
+
+    @GetMapping({ "/list", "/list/" })
+    public String articleList(
+            @PageableDefault(size = 10) Pageable pageable,
+            Model model) {
+        model.addAttribute(
+                "articles",
+                articleService.getArticles(pageable));
+        model.addAttribute("activeMenu", CmsMenu.ARTICLE);
+        return "cms/article/article-list";
+    }
+
+    @GetMapping({ "/create", "/create/" })
+    public String toCreatePage(Model model) {
+        model.addAttribute("createArticleRequest", new CreateArticleRequest());
+        return "cms/article/article-create";
+    }
+
+    @PostMapping("/create")
+    public String createArticle(
+            @Valid @ModelAttribute("createArticleRequest") CreateArticleRequest request,
+            BindingResult result,
+            @RequestParam("thumbnail") MultipartFile thumbnailFile,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+
+        if (result.hasErrors()) {
+            return "cms/article/article-create";
+        }
+
+        try {
+
+            if (!thumbnailFile.isEmpty()) {
+                request.setThumbnailUrl(fileStorageService.saveFile(thumbnailFile, "articles"));
+            }
+
+            ArticleResponse response = articleService.createArticle(request);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Tạo bài viết thành công: "
+                            + response.getTitle());
+
+            return "redirect:"+ Routes.ARTICLE +"/list";
+
+        } catch (Exception e) {
+
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/article/article-create";
+        }
+    }
+
+    @PostMapping("{id}/delete")
+    public String deleteArticle(
+            @PathVariable("id") Long id,
+            RedirectAttributes redirectAttributes) {
+
+        try {
+            articleService.deleteArticle(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Xóa bài viết thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:"+ Routes.ARTICLE +"/list";
+    }
+
+    @PostMapping("{id}/restore")
+    public String restoreArticle(
+            @PathVariable("id") Long id,
+            RedirectAttributes redirectAttributes) {
+        try {
+            articleService.restoreArticle(id);
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Khôi phục bài viết thành công");
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+        return "redirect:"+ Routes.ARTICLE +"/list";
+    }
+
+    @GetMapping({ "/{id}/edit", "/{id}/edit/" })
+    public String editArticlePage(
+            @PathVariable Long id,
+            Model model) {
+
+        ArticleResponse article = articleService.getArticleById(id);
+
+        model.addAttribute("article", article);
+
+        return "cms/article/article-edit";
+    }
+
+    @PostMapping("/{id}/edit")
+    public String editArticle(
+            @PathVariable Long id,
+            @Valid @ModelAttribute("article") UpdateArticleRequest request,
+            BindingResult result,
+            @RequestParam("thumbnail") MultipartFile thumbnailFile,
+            Model model) {
+
+        if (result.hasErrors()) {
+            ArticleResponse oldArticle = articleService.getArticleById(id);
+
+            request.setThumbnailUrl(
+                    oldArticle.getThumbnailUrl());
+
+            model.addAttribute(
+                    "articleTypes",
+                    ArticleType.values());
+
+            return "cms/article/article-edit";
+        }
+
+        request.setId(id);
+
+        try {
+
+            if (!thumbnailFile.isEmpty()) {
+
+                request.setThumbnailUrl(
+                        fileStorageService.saveFile(thumbnailFile, "articles"));
+            }
+
+            articleService.updateArticle(request);
+
+            return "redirect:"+ Routes.ARTICLE +"/list";
+
+        } catch (Exception e) {
+
+            model.addAttribute(
+                    "articleTypes",
+                    ArticleType.values());
+
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/article/article-edit";
+        }
+    }
+
+}

src/main/java/com/darkfantasy/controller/ContactMessageController.java

@@ -0,0 +1,62 @@
+package com.darkfantasy.controller;
+
+import org.springframework.data.domain.Pageable;
+import org.springframework.data.web.PageableDefault;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.darkfantasy.constant.CmsMenu;
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.service.ContactMessageService;
+
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequiredArgsConstructor
+@RequestMapping(Routes.CONTACT + "/")
+public class ContactMessageController {
+    private final ContactMessageService contactMessageService;
+    @GetMapping("list")
+    public String toList(
+            @PageableDefault(size = 20) Pageable pageable,
+            Model model) {
+        model.addAttribute("messages", contactMessageService.getMessages(pageable));
+        model.addAttribute("activeMenu", CmsMenu.CONTACT);
+
+        return "cms/contact/contact-list";
+    }
+
+    @GetMapping("{id}")
+    public String detail(
+            @PathVariable Long id,
+            Model model) {
+
+        model.addAttribute("message", contactMessageService.getMessageById(id));
+        model.addAttribute("activeMenu", CmsMenu.CONTACT);
+        return "cms/contact/contact-detail";
+    }
+
+    @PostMapping("{id}/process")
+    public String process(@PathVariable Long id, RedirectAttributes redirectAttributes) {
+        contactMessageService.markAsProcessed(id);
+        redirectAttributes.addFlashAttribute("successMessage", "Đã đánh dấu xử lý.");
+        return "redirect:" + Routes.CONTACT + "/list";
+    }
+
+    @PostMapping("{id}/unprocess")
+    public String unprocess(
+            @PathVariable Long id,
+            RedirectAttributes redirectAttributes) {
+
+        contactMessageService.markAsUnprocessed(id);
+
+        redirectAttributes.addFlashAttribute("successMessage", "Đã đánh dấu chưa xử lý.");
+
+        return "redirect:" + Routes.CONTACT + "/list";
+    }
+}

src/main/java/com/darkfantasy/controller/ContributorController.java

@@ -0,0 +1,181 @@
+package com.darkfantasy.controller;
+
+import org.springframework.data.domain.Pageable;
+import org.springframework.data.web.PageableDefault;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.validation.BindingResult;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.multipart.MultipartFile;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.darkfantasy.constant.CmsMenu;
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.dto.contributor.ContributorResponse;
+import com.darkfantasy.dto.contributor.CreateContributorRequest;
+import com.darkfantasy.dto.contributor.UpdateContributorRequest;
+import com.darkfantasy.service.ContributorService;
+import com.darkfantasy.service.FileStorageService;
+
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequestMapping(Routes.CONTRIBUTOR + "/")
+@RequiredArgsConstructor
+public class ContributorController {
+
+    private final ContributorService contributorService;
+    private final FileStorageService fileStorageService;
+
+    @GetMapping({ "/list", "/list/" })
+    public String contributorList(
+            @PageableDefault(size = 10) Pageable pageable,
+            Model model) {
+        model.addAttribute(
+                "contributors",
+                contributorService.getContributors(pageable));
+        model.addAttribute("activeMenu", CmsMenu.CONTRIBUTOR);
+        return "cms/contributor/contributor-list";
+    }
+
+    @GetMapping({ "/create", "/create/" })
+    public String toCreatePage(Model model) {
+        model.addAttribute("createContributorRequest", new CreateContributorRequest());
+        return "cms/contributor/contributor-create";
+    }
+
+    @PostMapping("/create")
+    public String createContributor(
+            @Valid @ModelAttribute("createContributorRequest") CreateContributorRequest request,
+            BindingResult result,
+            @RequestParam("thumbnail") MultipartFile thumbnailFile,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+
+        if (result.hasErrors()) {
+            return "cms/contributor/contributor-create";
+        }
+
+        try {
+
+            if (!thumbnailFile.isEmpty()) {
+                request.setAvatar(fileStorageService.saveFile(thumbnailFile, "contributors"));
+            }
+
+            ContributorResponse response = contributorService.createContributor(request);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Tạo người đóng góp thành công: "
+                            + response.getName());
+
+            return "redirect:" + Routes.CONTRIBUTOR + "/list";
+
+        } catch (Exception e) {
+
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/contributor/contributor-create";
+        }
+    }
+
+    @PostMapping("{id}/delete")
+    public String deleteContributor(
+            @PathVariable("id") Long id,
+            RedirectAttributes redirectAttributes) {
+
+        try {
+            contributorService.deleteContributor(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Xóa người đóng góp thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:" + Routes.CONTRIBUTOR + "/list";
+    }
+
+    @PostMapping("{id}/restore")
+    public String restoreContributor(
+            @PathVariable("id") Long id,
+            RedirectAttributes redirectAttributes) {
+        try {
+            contributorService.restoreContributor(id);
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Khôi phục người đóng góp thành công");
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+        return "redirect:" + Routes.CONTRIBUTOR + "/list";
+    }
+
+    @GetMapping({ "/{id}/edit", "/{id}/edit/" })
+    public String editContributorPage(
+            @PathVariable Long id,
+            Model model) {
+
+        ContributorResponse contributor = contributorService.getContributorById(id);
+
+        model.addAttribute("contributor", contributor);
+
+        return "cms/contributor/contributor-edit";
+    }
+
+    @PostMapping("/{id}/edit")
+    public String editContributor(
+            @PathVariable Long id,
+            @Valid @ModelAttribute("contributor") UpdateContributorRequest request,
+            BindingResult result,
+            @RequestParam("thumbnail") MultipartFile thumbnailFile,
+            Model model) {
+
+        if (result.hasErrors()) {
+            ContributorResponse oldContributor = contributorService.getContributorById(id);
+
+            request.setAvatar(
+                    oldContributor.getAvatar());
+
+            return "cms/contributor/contributor-edit";
+        }
+
+        request.setId(id);
+
+        try {
+
+            if (!thumbnailFile.isEmpty()) {
+
+                request.setAvatar(
+                        fileStorageService.saveFile(thumbnailFile, "contributors"));
+            }
+
+            contributorService.updateContributor(request);
+
+            return "redirect:" + Routes.CONTRIBUTOR + "/list";
+
+        } catch (Exception e) {
+
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/contributor/contributor-edit";
+        }
+    }
+
+}

src/main/java/com/darkfantasy/controller/DashboardController.java

@@ -0,0 +1,46 @@
+package com.darkfantasy.controller;
+
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.util.RouteMatcher.Route;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+
+import com.darkfantasy.constant.CmsMenu;
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.service.ArticleService;
+import com.darkfantasy.service.ContactMessageService;
+import com.darkfantasy.service.ContributorService;
+import com.darkfantasy.service.FaqService;
+import com.darkfantasy.service.GameCharacterService;
+import com.darkfantasy.service.StoryService;
+import com.darkfantasy.service.WorldService;
+
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequiredArgsConstructor
+@RequestMapping(Routes.DASHBOARD)
+
+public class DashboardController {
+        private final ArticleService articleService;
+        private final GameCharacterService gameCharacterService;
+        private final WorldService worldService;
+        private final StoryService storyService;
+        private final FaqService faqService;
+        private final ContributorService contributorService;
+        private final ContactMessageService contactMessageService;
+
+        @GetMapping({ "", "/" })
+        public String toDashboard(Model model) {
+                model.addAttribute("activeMenu", CmsMenu.DASHBOARD);
+                model.addAttribute("articleCount", articleService.count());
+                model.addAttribute("storyCount", storyService.count());
+                model.addAttribute("worldCount", worldService.count());
+                model.addAttribute("characterCount", gameCharacterService.count());
+                model.addAttribute("faqCount", faqService.count());
+                model.addAttribute("contributorCount", contributorService.count());
+                model.addAttribute("unprocessedContactCount", contactMessageService.countByProcessedFalse());
+                return "cms/dashboard";
+        }
+}

src/main/java/com/darkfantasy/controller/FaqController.java

@@ -0,0 +1,161 @@
+package com.darkfantasy.controller;
+
+import org.springframework.data.domain.Pageable;
+import org.springframework.data.web.PageableDefault;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.util.RouteMatcher.Route;
+import org.springframework.validation.BindingResult;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.darkfantasy.constant.CmsMenu;
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.dto.faq.CreateFaqRequest;
+import com.darkfantasy.dto.faq.FaqResponse;
+import com.darkfantasy.dto.faq.UpdateFaqRequest;
+import com.darkfantasy.service.FaqService;
+
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequiredArgsConstructor
+@RequestMapping(Routes.FAQ + "/")
+public class FaqController {
+    private final FaqService faqService;
+
+    @GetMapping({ "list", "list/" })
+    public String toList(
+            @PageableDefault(size = 10) Pageable pageable,
+            Model model) {
+
+        model.addAttribute(
+                "faqs",
+                faqService.getFaqs(pageable));
+        model.addAttribute("activeMenu", CmsMenu.FAQ);
+        return "cms/faq/faq-list";
+    }
+
+    @GetMapping({ "create", "create/" })
+    public String toCreatePage(Model model) {
+        model.addAttribute("createFaqRequest", new CreateFaqRequest());
+        return "cms/faq/faq-create";
+    }
+
+    @PostMapping({ "create", "create/" })
+    public String createFaq(
+            @Valid @ModelAttribute("createFaqRequest") CreateFaqRequest request,
+            BindingResult result,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+
+        if (result.hasErrors()) {
+            model.addAttribute(
+                    "errorMessage",
+                    "Vui lòng kiểm tra lại thông tin FAQ.");
+            return "cms/faq/faq-create";
+        }
+
+        try {
+
+            FaqResponse response = faqService.createFaq(request);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Tạo FAQ thành công: "
+                            + response.getTitle());
+
+            return "redirect:" + Routes.FAQ + "/list";
+
+        } catch (Exception e) {
+
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/faq/faq-create";
+        }
+    }
+
+    @GetMapping({ "{id}/edit", "{id}/edit/" })
+    public String toEditPage(@PathVariable("id") Long id, Model model) {
+        FaqResponse faq = faqService.getFaqById(id);
+        UpdateFaqRequest request = UpdateFaqRequest.builder()
+                .id(faq.getId())
+                .title(faq.getTitle())
+                .content(faq.getContent())
+                .priority(faq.getPriority())
+                .build();
+
+        model.addAttribute(
+                "updateFaqRequest",
+                request);
+        model.addAttribute("faq", faq);
+        return "cms/faq/faq-edit";
+    }
+
+    @PostMapping("{id}/edit")
+    public String editFaq(@PathVariable Long id,
+            @Valid @ModelAttribute("faq") UpdateFaqRequest request,
+            BindingResult result,
+            Model model) {
+        if (result.hasErrors()) {
+            return "cms/faq/faq-edit";
+        }
+
+        request.setId(id);
+
+        try {
+            faqService.updateFaq(request);
+
+            return "redirect:" + Routes.FAQ + "/list";
+        } catch (Exception e) {
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/faq/faq-edit";
+        }
+    }
+
+    @PostMapping("{id}/delete")
+    public String deleteFaq(@PathVariable("id") Long id, RedirectAttributes redirectAttributes) {
+        try {
+            faqService.deleteFaq(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Xóa faq thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:" + Routes.FAQ + "/list";
+    }
+
+    @PostMapping("{id}/restore")
+    public String restoreFaq(@PathVariable("id") Long id, RedirectAttributes redirectAttributes) {
+        try {
+            faqService.restoreFaq(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Khôi phục faq thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:" + Routes.FAQ + "/list";
+    }
+}

src/main/java/com/darkfantasy/controller/GameCharacterController.java

@@ -0,0 +1,163 @@
+package com.darkfantasy.controller;
+
+import org.springframework.data.domain.Pageable;
+import org.springframework.data.web.PageableDefault;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.validation.BindingResult;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.multipart.MultipartFile;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.darkfantasy.constant.CmsMenu;
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.dto.gamecharacter.CreateGameCharacterRequest;
+import com.darkfantasy.dto.gamecharacter.GameCharacterResponse;
+import com.darkfantasy.dto.gamecharacter.UpdateGameCharacterRequest;
+import com.darkfantasy.service.FileStorageService;
+import com.darkfantasy.service.GameCharacterService;
+
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+
+@Controller
+@RequestMapping(Routes.CHARACTER + "/")
+@RequiredArgsConstructor
+public class GameCharacterController {
+    private final GameCharacterService gameCharacterService;
+    private final FileStorageService fileStorageService;
+
+    @GetMapping({ "list", "list/" })
+    public String toList(
+            @PageableDefault(size = 10) Pageable pageable,
+            Model model) {
+
+        model.addAttribute(
+                "characters",
+                gameCharacterService.getCharacters(pageable));
+        model.addAttribute("activeMenu", CmsMenu.CHARACTER);
+        return "cms/character/character-list";
+    }
+
+    @GetMapping({ "create", "create/" })
+    public String toCreatePage(Model model) {
+        model.addAttribute("createGameCharacterRequest", new CreateGameCharacterRequest());
+        return "cms/character/character-create";
+    }
+
+    @PostMapping({ "create", "create/" })
+    public String createCharacter(
+            @Valid @ModelAttribute("createGameCharacterRequest") CreateGameCharacterRequest request,
+            BindingResult result,
+            @RequestParam(value = "imageFile", required = false) MultipartFile imageFile,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+
+        if (result.hasErrors()) {
+            model.addAttribute("errorMessage", "Vui lòng kiểm tra lại thông tin nhân vật.");
+            return "cms/character/character-create";
+
+        }
+        try {
+            if (imageFile != null && !imageFile.isEmpty()) {
+                request.setImage(fileStorageService.saveFile(imageFile, "characters"));
+            }
+            GameCharacterResponse response = gameCharacterService.createGameCharacter(request);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Tạo nhân vật thành công: "
+                            + response.getName());
+            return "redirect:" + Routes.CHARACTER + "/list";
+        } catch (Exception e) {
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/character/character-create";
+        }
+    }
+
+    @GetMapping({ "{id}/edit", "{id}/edit/" })
+    public String toEditPage(@PathVariable("id") Long id, Model model) {
+        GameCharacterResponse character = gameCharacterService.getGameCharacterById(id);
+        model.addAttribute("character", character);
+        return "cms/character/character-edit";
+    }
+
+    @PostMapping("{id}/edit")
+    public String editCharacter(@PathVariable Long id,
+            @Valid @ModelAttribute("character") UpdateGameCharacterRequest request,
+            BindingResult result,
+            @RequestParam(value = "imageFile", required = false) MultipartFile imageFile,
+            Model model) {
+        if (result.hasErrors()) {
+            GameCharacterResponse oldCharacter = gameCharacterService.getGameCharacterById(id);
+
+            request.setImage(
+                    oldCharacter.getImage());
+
+            return "cms/character/character-edit";
+        }
+
+        request.setId(id);
+
+        try {
+            if (imageFile != null && !imageFile.isEmpty()) {
+                request.setImage(
+                        fileStorageService.saveFile(imageFile, "characters"));
+            }
+            gameCharacterService.updateGameCharacter(request);
+
+            return "redirect:" + Routes.CHARACTER + "/list";
+        } catch (Exception e) {
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/character/character-edit";
+        }
+    }
+
+    @PostMapping("{id}/delete")
+    public String deleteCharacter(@PathVariable("id") Long id, RedirectAttributes redirectAttributes) {
+        try {
+            gameCharacterService.deleteCharacter(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Xóa nhân vật thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:" + Routes.CHARACTER + "/list";
+    }
+
+    @PostMapping("{id}/restore")
+    public String restoreCharacter(@PathVariable("id") Long id, RedirectAttributes redirectAttributes) {
+        try {
+            gameCharacterService.restoreCharacter(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Khôi phục nhân vật thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:" + Routes.CHARACTER + "/list";
+    }
+
+}

src/main/java/com/darkfantasy/controller/ImageController.java

@@ -0,0 +1,42 @@
+package com.darkfantasy.controller;
+
+import java.io.IOException;
+import java.util.Map;
+
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.ResponseBody;
+import org.springframework.web.multipart.MultipartFile;
+
+import com.darkfantasy.service.FileStorageService;
+
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequiredArgsConstructor
+public class ImageController {
+    private final FileStorageService fileStorageService;
+
+    @PostMapping("/api/upload")
+    @ResponseBody
+    public ResponseEntity<?> uploadImage(@RequestParam("image") MultipartFile file) {
+        try {
+            // Gọi Service để lưu file vào thư mục "editor" (nó sẽ tạo ra uploads/editor/)
+            String fileUrl = fileStorageService.saveFile(file, "editors");
+
+            // Trả về JSON cho Quill Frontend: {"url": "/uploads/editor/abc123hash.png"}
+            return ResponseEntity.ok(Map.of("url", fileUrl));
+
+        } catch (IllegalArgumentException e) {
+            // Xử lý lỗi file rỗng theo Exception đã ném ở Service
+            return ResponseEntity.badRequest().body(Map.of("error", e.getMessage()));
+        } catch (IOException e) {
+            // Xử lý lỗi đọc ghi file
+            return ResponseEntity.status(HttpStatus.INTERNAL_SERVER_ERROR)
+                    .body(Map.of("error", "Lỗi xử lý file trên server"));
+        }
+    }
+}

src/main/java/com/darkfantasy/controller/InternalController.java

@@ -0,0 +1,26 @@
+package com.darkfantasy.controller;
+
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.ResponseBody;
+
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequestMapping("/api/moonblight/internal")
+@RequiredArgsConstructor
+public class InternalController {
+
+    private final PasswordEncoder passwordEncoder;
+
+    @GetMapping("/hash")
+    @ResponseBody
+    public String hash(
+            @RequestParam String password) {
+
+        return passwordEncoder.encode(password);
+    }
+}

src/main/java/com/darkfantasy/controller/PageController.java

@@ -0,0 +1,206 @@
+package com.darkfantasy.controller;
+
+import org.springframework.data.domain.Page;
+import org.springframework.data.domain.PageRequest;
+import org.springframework.data.domain.Pageable;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.validation.BindingResult;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.darkfantasy.dto.article.ArticleResponse;
+import com.darkfantasy.dto.contact.CreateContactMessageRequest;
+import com.darkfantasy.dto.contributor.ContributorResponse;
+import com.darkfantasy.entity.enums.ContactCategory;
+import com.darkfantasy.entity.enums.ContactPlatform;
+import com.darkfantasy.service.ArticleService;
+import com.darkfantasy.service.ContactMessageService;
+import com.darkfantasy.service.ContributorService;
+import com.darkfantasy.service.FaqService;
+import com.darkfantasy.service.GameCharacterService;
+import com.darkfantasy.service.StoryService;
+import com.darkfantasy.service.WorldService;
+
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequiredArgsConstructor
+@RequestMapping("/")
+public class PageController {
+    private final ArticleService articleService;
+    private final GameCharacterService gameCharacterService;
+    private final WorldService worldService;
+    private final StoryService storyService;
+    private final FaqService faqService;
+    private final ContactMessageService contactMessageService;
+    private final ContributorService contributorService;
+    @GetMapping
+    public String index(Model model) {
+
+        model.addAttribute("activePage", "home");
+        model.addAttribute("pageTitle", "Moon Blight - Enter the Darkness");
+
+        model.addAttribute("articles", articleService.getLatestArticles(3));
+        model.addAttribute("characters", gameCharacterService.getCharactersLimit(4));
+        model.addAttribute("topWorld", worldService.getWorldDeletedFalseHighestPriority());
+        model.addAttribute("topStory", storyService.getStoryDeletedFalseHighestPriority());
+
+        return "forward:/WEB-INF/views/index.jsp";
+        // return "index";
+    }
+
+    @GetMapping("story")
+    public String story(Model model) {
+        model.addAttribute("activePage", "story");
+        model.addAttribute("pageTitle", "The Story - Moon Blight");
+
+        model.addAttribute("stories", storyService.getStoriesDeletedFalse());
+        return "forward:/WEB-INF/views/storys/story.jsp";
+        // return "story/story";
+    }
+
+    @GetMapping("characters")
+    public String characters(Model model) {
+        model.addAttribute("activePage", "characters");
+        model.addAttribute("pageTitle", "Characters - Moon Blight");
+
+        model.addAttribute("characters", gameCharacterService.getCharactersDeletedFalse());
+        return "forward:/WEB-INF/views/characters/characters.jsp";
+    }
+
+    @GetMapping("enemies")
+    public String enemies(Model model) {
+        model.addAttribute("activePage", "enemies");
+        model.addAttribute("pageTitle", "Enemies - Moon Blight");
+        return "forward:/WEB-INF/views/enemies/enemies.jsp";
+    }
+
+    @GetMapping("weapons")
+    public String weapons(Model model) {
+        model.addAttribute("activePage", "weapons");
+        model.addAttribute("pageTitle", "Weapons - Moon Blight");
+        return "forward:/WEB-INF/views/weapons/weapons.jsp";
+    }
+
+    @GetMapping("world")
+    public String world(Model model) {
+
+        model.addAttribute("activePage", "world");
+        model.addAttribute("pageTitle", "The World - Moon Blight");
+
+        model.addAttribute("worlds", worldService.getWorldsDeletedFalse());
+
+        return "forward:/WEB-INF/views/worlds/world.jsp";
+    }
+
+    @GetMapping("news")
+    public String news(
+            @RequestParam(defaultValue = "6") int limit,
+            Model model) {
+
+        Pageable pageable = PageRequest.of(0, limit);
+
+        Page<ArticleResponse> page = articleService.getArticlesDeletedFalse(pageable);
+
+        model.addAttribute(
+                "articles",
+                page.getContent());
+
+        model.addAttribute(
+                "hasMore",
+                page.getTotalElements() > limit);
+
+        model.addAttribute(
+                "nextLimit",
+                limit + 6);
+        model.addAttribute(
+                "featuredArticle",
+                articleService.getLatestImportantArticle());
+
+        return "forward:/WEB-INF/views/news/news.jsp";
+    }
+
+    @GetMapping("aboutUs")
+    public String community(
+            @RequestParam(defaultValue = "4") int limit,
+            Model model) {
+
+        Pageable pageable = PageRequest.of(0, limit);
+
+        Page<ContributorResponse> page = contributorService.getContributorsDeletedFalse(pageable);
+
+        model.addAttribute(
+                "contributors",
+                page.getContent());
+
+        model.addAttribute(
+                "hasMore",
+                page.getTotalElements() > limit);
+
+        model.addAttribute(
+                "nextLimit",
+                limit + 4);
+
+        model.addAttribute(
+                "activePage",
+                "community");
+
+        model.addAttribute(
+                "pageTitle",
+                "Community - Moon Blight");
+
+        return "forward:/WEB-INF/views/community/aboutUs.jsp";
+    }
+
+    @GetMapping("news/{id}")
+    public String newsDetail(@PathVariable("id") Long id,
+            Model model) {
+        model.addAttribute("article", articleService.getPublicArticleById(id));
+        model.addAttribute("articles", articleService.getLatestArticlesExcept(id, 3));
+        return "forward:/WEB-INF/views/news/newDetail.jsp";
+    }
+
+    @GetMapping("support")
+    public String support(Model model) {
+        populateSupportModel(model);
+        model.addAttribute("contactRequest", new CreateContactMessageRequest());
+        return "forward:/WEB-INF/views/supports/support.jsp";
+    }
+
+    @PostMapping("support")
+    public String submitContactMessage(
+            @Valid @ModelAttribute("contactRequest") CreateContactMessageRequest request,
+            BindingResult result,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+
+        if (result.hasErrors()) {
+            populateSupportModel(model);
+            model.addAttribute("errorMessage", "Vui lòng kiểm tra lại thông tin liên hệ.");
+            return "forward:/WEB-INF/views/supports/support.jsp";
+        }
+
+        contactMessageService.createMessage(request);
+
+        redirectAttributes.addFlashAttribute(
+                "successMessage",
+                "Tin nhắn đã được gửi thành công.");
+
+        return "redirect:/support";
+    }
+
+    private void populateSupportModel(Model model) {
+        model.addAttribute("activePage", "support");
+        model.addAttribute("pageTitle", "Support - Moon Blight");
+        model.addAttribute("faqs", faqService.getFaqsDeletedFalse());
+        model.addAttribute("categories", ContactCategory.values());
+        model.addAttribute("platforms", ContactPlatform.values());
+    }
+}

src/main/java/com/darkfantasy/controller/StoryController.java

@@ -0,0 +1,171 @@
+package com.darkfantasy.controller;
+
+import org.springframework.data.domain.Pageable;
+import org.springframework.data.web.PageableDefault;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.validation.BindingResult;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.multipart.MultipartFile;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.darkfantasy.constant.CmsMenu;
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.dto.story.CreateStoryRequest;
+import com.darkfantasy.dto.story.StoryResponse;
+import com.darkfantasy.dto.story.UpdateStoryRequest;
+import com.darkfantasy.service.FileStorageService;
+import com.darkfantasy.service.StoryService;
+
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequiredArgsConstructor
+@RequestMapping(Routes.STORY + "/")
+public class StoryController {
+    private final StoryService storyService;
+    private final FileStorageService fileStorageService;
+
+    @GetMapping({ "list", "list/" })
+    public String toList(
+            @PageableDefault(size = 10) Pageable pageable,
+            Model model) {
+
+        model.addAttribute(
+                "stories",
+                storyService.getStories(pageable));
+        model.addAttribute("activeMenu", CmsMenu.STORY);
+        return "cms/story/story-list";
+    }
+
+    @GetMapping({ "create", "create/" })
+    public String toCreatePage(Model model) {
+        model.addAttribute("createStoryRequest", new CreateStoryRequest());
+        return "cms/story/story-create";
+    }
+
+    @PostMapping({ "create", "create/" })
+    public String createStory(
+            @Valid @ModelAttribute("createStoryRequest") CreateStoryRequest request,
+            BindingResult result,
+            @RequestParam(value = "imageFile", required = false) MultipartFile imageFile,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+
+        if (result.hasErrors()) {
+            return "cms/story/story-create";
+
+        }
+        try {
+            if (imageFile != null && !imageFile.isEmpty()) {
+                request.setImage(fileStorageService.saveFile(imageFile, "stories"));
+            }
+            StoryResponse response = storyService.createStory(request);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Tạo câu chuyện thành công: "
+                            + response.getTitle());
+            return "redirect:" + Routes.STORY + "/list";
+        } catch (Exception e) {
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/story/story-create";
+        }
+    }
+
+    @GetMapping({ "{id}/edit", "{id}/edit/" })
+    public String toEditPage(@PathVariable("id") Long id, Model model) {
+        StoryResponse story = storyService.getStoryById(id);
+
+        model.addAttribute("story", story);
+        return "cms/story/story-edit";
+    }
+
+    @PostMapping("{id}/edit")
+    public String editStory(@PathVariable Long id,
+            @Valid @ModelAttribute("story") UpdateStoryRequest request,
+            BindingResult result,
+            @RequestParam(value = "imageFile", required = false) MultipartFile imageFile,
+            Model model) {
+        if (result.hasErrors()) {
+            StoryResponse oldStory = storyService.getStoryById(id);
+
+            request.setImage(
+                    oldStory.getImage());
+
+            return "cms/story/story-edit";
+        }
+
+        request.setId(id);
+
+        try {
+            StoryResponse oldStory = storyService.getStoryById(id);
+
+            if (imageFile != null && !imageFile.isEmpty()) {
+
+                request.setImage(
+                        fileStorageService.saveFile(
+                                imageFile,
+                                "stories"));
+
+            } else {
+                request.setImage(
+                        oldStory.getImage());
+            }
+            storyService.updateStory(request);
+
+            return "redirect:" + Routes.STORY + "/list";
+        } catch (Exception e) {
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/story/story-edit";
+        }
+    }
+
+    @PostMapping("{id}/delete")
+    public String deleteStory(@PathVariable("id") Long id, RedirectAttributes redirectAttributes) {
+        try {
+            storyService.deleteStory(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Xóa câu chuyện thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:" + Routes.STORY + "/list";
+    }
+
+    @PostMapping("{id}/restore")
+    public String restoreStory(@PathVariable("id") Long id, RedirectAttributes redirectAttributes) {
+        try {
+            storyService.restoreStory(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Khôi phục câu chuyện thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:" + Routes.STORY + "/list";
+    }
+}

src/main/java/com/darkfantasy/controller/UserController.java

@@ -0,0 +1,321 @@
+package com.darkfantasy.controller;
+
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler;
+import org.springframework.security.web.context.HttpSessionSecurityContextRepository;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.validation.BindingResult;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.dto.user.ChangePasswordRequest;
+import com.darkfantasy.dto.user.ForgotPasswordRequest;
+import com.darkfantasy.dto.user.LoginRequest;
+import com.darkfantasy.dto.user.RegisterRequest;
+import com.darkfantasy.dto.user.ResetPasswordRequest;
+import com.darkfantasy.dto.user.UserResponse;
+import com.darkfantasy.dto.user.VerifyOtpRequest;
+import com.darkfantasy.entity.enums.LogAction;
+import com.darkfantasy.entity.enums.LogEntityType;
+import com.darkfantasy.service.AuditLogService;
+import com.darkfantasy.service.UserService;
+
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import jakarta.servlet.http.HttpSession;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+
+@Controller
+@RequiredArgsConstructor
+@RequestMapping(Routes.USER + "/")
+public class UserController {
+    private final UserService userService;
+    private final AuditLogService auditLogService;
+
+    @GetMapping({ "login", "login/" })
+    public String toLoginPage(Model model) {
+        model.addAttribute("loginRequest", new LoginRequest());
+        return "cms/auth/login";
+    }
+
+    @GetMapping({ "register", "register/" })
+    public String toRegisterPage(Model model) {
+        model.addAttribute("registerRequest", new RegisterRequest());
+        return "cms/auth/register";
+    }
+
+    @GetMapping({ "reset", "reset/" })
+    public String toResetPage() {
+        return "cms/auth/reset";
+    }
+
+    @GetMapping({ "change", "change/" })
+    public String toChangePasswordPage() {
+        return "cms/auth/password-change";
+    }
+
+    @PostMapping("login")
+    public String login(
+            @Valid @ModelAttribute LoginRequest request,
+            BindingResult result,
+            Model model,
+            HttpServletRequest req) {
+
+        if (result.hasErrors()) {
+            return "cms/auth/login";
+        }
+
+        try {
+
+            UserResponse user = userService.login(request);
+
+            req.getSession(true).setAttribute(
+                    HttpSessionSecurityContextRepository.SPRING_SECURITY_CONTEXT_KEY,
+                    SecurityContextHolder.getContext());
+            return switch (user.getRole()) {
+                case "ADMIN" -> "redirect:" + Routes.ADMIN + "/dashboard";
+                case "STAFF" -> "redirect:" + Routes.DASHBOARD;
+                default -> "redirect:/";
+            };
+
+        } catch (AuthenticationException e) {
+
+            model.addAttribute(
+                    "errorMessage",
+                    "Tên đăng nhập hoặc mật khẩu không đúng.");
+
+            return "cms/auth/login";
+        }
+    }
+
+    @PostMapping("logout")
+    public String logout(
+            HttpServletRequest request,
+            HttpServletResponse response,
+            Authentication authentication) {
+        if (authentication != null) {
+            String username = authentication.getName();
+            UserResponse user = userService.findByUsername(username);
+            auditLogService.log(
+                    LogEntityType.USER,
+                    user.getId(),
+                    LogAction.LOGOUT,
+                    "Đăng xuất");
+        }
+
+        new SecurityContextLogoutHandler()
+                .logout(request, response, authentication);
+
+        return "redirect:" + Routes.USER + "/login";
+    }
+
+    @PostMapping("register")
+    public String registerAccount(@Valid @ModelAttribute RegisterRequest request,
+            BindingResult result,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+        if (result.hasErrors()) {
+            return "cms/auth/register";
+        }
+        try {
+            userService.register(request);
+            redirectAttributes.addFlashAttribute("successMessage", "Đăng ký thành công! Chờ admin xác nhận");
+            return "redirect:" + Routes.USER + "/register";
+        } catch (IllegalArgumentException e) {
+            request.setPassword("");
+            request.setRePassword("");
+            model.addAttribute("errorMessage", e.getMessage());
+            return "cms/auth/register";
+        }
+    }
+
+    @GetMapping("change-password")
+    public String changePasswordPage(
+            Model model) {
+
+        model.addAttribute(
+                "changePasswordRequest",
+                new ChangePasswordRequest());
+        return "cms/auth/change-password";
+    }
+
+    @PostMapping("change-password")
+    public String changePassword(
+            @Valid @ModelAttribute("changePasswordRequest") ChangePasswordRequest request,
+            BindingResult result,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+
+        if (result.hasErrors()) {
+            return "cms/auth/change-password";
+        }
+
+        try {
+
+            userService.changeCurrentUserPassword(request);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Đổi mật khẩu thành công");
+
+            return "redirect:" + Routes.USER + "/change-password";
+
+        } catch (Exception e) {
+
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/auth/change-password";
+        }
+    }
+    // @PostMapping("reset/enter")
+    // public String resetPassword(@Valid @ModelAttribute ResetPasswordRequest
+    // request, BindingResult result,
+    // Model model, RedirectAttributes redirectAttributes) {
+    // if (result.hasErrors()) {
+    // return "reset";
+    // }
+    // try {
+    // userService.changeForgottenPassword(request);
+    // redirectAttributes.addAttribute("successMessage", "Thay đổi mật khẩu thành
+    // công!");
+    // return "redirect:/user/login";
+    // } catch (IllegalArgumentException e) {
+    // model.addAttribute("errorMessage", e.getMessage());
+    // return "reset";
+    // }
+
+    // }
+    @GetMapping("forgot-password")
+    public String forgotPasswordPage(Model model) {
+        model.addAttribute("forgotPasswordRequest", new ForgotPasswordRequest());
+        return "cms/auth/forgot-password";
+    }
+
+    @PostMapping("forgot-password")
+    public String forgotPassword(
+            @Valid @ModelAttribute ForgotPasswordRequest request,
+            BindingResult result, HttpSession session,
+            Model model) {
+        if (result.hasErrors()) {
+            return "cms/auth/forgot-password";
+        }
+        try {
+            userService.sendOtp(request);
+            session.setAttribute("OTP_EMAIL", request.getEmail());
+            return "redirect:" + Routes.USER + "/verify-otp";
+        } catch (Exception e) {
+            model.addAttribute("errorMessage", e.getMessage());
+            return "cms/auth/forgot-password";
+        }
+    }
+
+    @GetMapping("verify-otp")
+    public String verifyOtpPage(HttpSession session, Model model) {
+        VerifyOtpRequest request = new VerifyOtpRequest();
+        request.setEmail((String) session.getAttribute("OTP_EMAIL"));
+
+        model.addAttribute("verifyOtpRequest", request);
+        return "cms/auth/verify-otp";
+    }
+
+    @PostMapping("verify-otp")
+    public String verifyOtp(
+            @Valid @ModelAttribute VerifyOtpRequest request,
+            BindingResult result,
+            HttpSession session,
+            Model model) {
+
+        if (result.hasErrors()) {
+            return "cms/auth/verify-otp";
+        }
+
+        try {
+
+            userService.verifyOtp(request);
+            session.setAttribute(
+                    "RESET_OTP",
+                    request.getOtp());
+            session.setAttribute(
+                    "RESET_EMAIL",
+                    request.getEmail());
+            return "redirect:" + Routes.USER + "/reset-password";
+
+        } catch (Exception e) {
+            model.addAttribute(
+                    "errorMessage", e.getMessage());
+
+            return "cms/auth/verify-otp";
+        }
+    }
+
+    @GetMapping("/reset-password")
+    public String resetPasswordPage(
+            HttpSession session,
+            Model model) {
+        ResetPasswordRequest request = new ResetPasswordRequest();
+        request.setEmail(
+                (String) session.getAttribute("RESET_EMAIL"));
+
+        request.setOtp(
+                (String) session.getAttribute("RESET_OTP"));
+
+        model.addAttribute("resetPasswordRequest", request);
+        if (request.getEmail() == null || request.getOtp() == null) {
+            return "redirect:" + Routes.USER + "/forgot-password";
+        }
+        return "cms/auth/reset-password";
+    }
+
+    @PostMapping("/reset-password")
+    public String resetPassword(
+            @Valid @ModelAttribute ResetPasswordRequest request,
+            BindingResult result,
+            HttpSession session,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+        if (result.hasErrors()) {
+            return "cms/auth/reset-password";
+        }
+
+        try {
+            String email = (String) session.getAttribute("RESET_EMAIL");
+            String otp = (String) session.getAttribute("RESET_OTP");
+            if (email == null || otp == null) {
+                return "redirect:" + Routes.USER + "/forgot-password";
+            }
+            request.setEmail(email);
+            request.setOtp(otp);
+            userService.resetPassword(request);
+
+            session.removeAttribute(
+                    "RESET_EMAIL");
+
+            session.removeAttribute(
+                    "RESET_OTP");
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Đổi mật khẩu thành công");
+
+            return "redirect:" + Routes.USER + "/login";
+
+        } catch (Exception e) {
+            e.printStackTrace();
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/auth/reset-password";
+        }
+    }
+}

src/main/java/com/darkfantasy/controller/WorldController.java

@@ -0,0 +1,162 @@
+package com.darkfantasy.controller;
+
+import org.springframework.data.domain.Pageable;
+import org.springframework.data.web.PageableDefault;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.validation.BindingResult;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.multipart.MultipartFile;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.darkfantasy.constant.CmsMenu;
+import com.darkfantasy.constant.Routes;
+import com.darkfantasy.dto.world.CreateWorldRequest;
+import com.darkfantasy.dto.world.UpdateWorldRequest;
+import com.darkfantasy.dto.world.WorldResponse;
+import com.darkfantasy.service.FileStorageService;
+import com.darkfantasy.service.WorldService;
+
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+
+@Controller
+@RequiredArgsConstructor
+@RequestMapping(Routes.WORLD + "/")
+public class WorldController {
+    private final WorldService worldService;
+    private final FileStorageService fileStorageService;
+
+    @GetMapping({ "list", "list/" })
+    public String toList(
+            @PageableDefault(size = 10) Pageable pageable,
+            Model model) {
+
+        model.addAttribute(
+                "worlds",
+                worldService.getWorlds(pageable));
+        model.addAttribute("activeMenu", CmsMenu.WORLD);
+        return "cms/world/world-list";
+    }
+
+    @GetMapping({ "create", "create/" })
+    public String toCreatePage(Model model) {
+        model.addAttribute("createWorldRequest", new CreateWorldRequest());
+        return "cms/world/world-create";
+    }
+
+    @PostMapping({ "create", "create/" })
+    public String createWorld(
+            @Valid @ModelAttribute("createWorldRequest") CreateWorldRequest request,
+            BindingResult result,
+            @RequestParam(value = "imageFile", required = false) MultipartFile imageFile,
+            Model model,
+            RedirectAttributes redirectAttributes) {
+
+        if (result.hasErrors()) {
+            model.addAttribute("errorMessage", "Vui lòng kiểm tra lại thông tin thế giới.");
+            return "cms/world/world-create";
+
+        }
+        try {
+            if (imageFile != null && !imageFile.isEmpty()) {
+                request.setImage(fileStorageService.saveFile(imageFile, "worlds"));
+            }
+            WorldResponse response = worldService.createWorld(request);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Tạo thế giới thành công: "
+                            + response.getTitle());
+            return "redirect:" + Routes.WORLD + "/list";
+        } catch (Exception e) {
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/world/world-create";
+        }
+    }
+
+    @GetMapping({ "{id}/edit", "{id}/edit/" })
+    public String toEditPage(@PathVariable("id") Long id, Model model) {
+        WorldResponse world = worldService.getWorldById(id);
+        model.addAttribute("world", world);
+        return "cms/world/world-edit";
+    }
+
+    @PostMapping("{id}/edit")
+    public String editWorld(@PathVariable Long id,
+            @Valid @ModelAttribute("world") UpdateWorldRequest request,
+            BindingResult result,
+            @RequestParam(value = "imageFile", required = false) MultipartFile imageFile,
+            Model model) {
+        if (result.hasErrors()) {
+            WorldResponse oldWorld = worldService.getWorldById(id);
+
+            request.setImage(
+                    oldWorld.getImage());
+
+            return "cms/world/world-edit";
+        }
+
+        request.setId(id);
+
+        try {
+            if (imageFile != null && !imageFile.isEmpty()) {
+                request.setImage(
+                        fileStorageService.saveFile(imageFile, "worlds"));
+            }
+            worldService.updateWorld(request);
+
+            return "redirect:" + Routes.WORLD + "/list";
+        } catch (Exception e) {
+            model.addAttribute(
+                    "errorMessage",
+                    e.getMessage());
+
+            return "cms/world/world-edit";
+        }
+    }
+
+    @PostMapping("{id}/delete")
+    public String deleteWorld(@PathVariable("id") Long id, RedirectAttributes redirectAttributes) {
+        try {
+            worldService.deleteWorld(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Xóa thế giới thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:" + Routes.WORLD + "/list";
+    }
+
+    @PostMapping("{id}/restore")
+    public String restoreWorld(@PathVariable("id") Long id, RedirectAttributes redirectAttributes) {
+        try {
+            worldService.restoreWorld(id);
+
+            redirectAttributes.addFlashAttribute(
+                    "successMessage",
+                    "Khôi phục thế giới thành công");
+
+        } catch (Exception e) {
+            redirectAttributes.addFlashAttribute(
+                    "errorMessage",
+                    e.getMessage());
+        }
+
+        return "redirect:" + Routes.WORLD + "/list";
+    }
+}

src/main/java/com/darkfantasy/dto/article/ArticleResponse.java

@@ -0,0 +1,58 @@
+package com.darkfantasy.dto.article;
+
+import com.darkfantasy.entity.Article;
+import com.darkfantasy.entity.User;
+import com.darkfantasy.entity.enums.ArticleType;
+import com.darkfantasy.util.TimeUtil;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+
+public class ArticleResponse {
+    private Long id;
+    private String title;
+    private String content;
+    private String authorUsername;
+    private String thumbnailUrl;
+    private String type;
+    private String createdByUserName;
+    private String createdAt;
+    private String updatedByUserName;
+    private String updatedAt;
+    private boolean deleted;
+
+    public static ArticleResponse fromEntity(Article article) {
+        return ArticleResponse.builder()
+                .id(article.getId())
+                .title(article.getTitle())
+                .content(article.getContent())
+                .authorUsername(article.getCreatedBy().getUsername())
+                .thumbnailUrl(article.getThumbnailUrl())
+                .type(article.getType().getDisplayName())
+                .createdByUserName(article.getCreatedBy()!= null? article.getCreatedBy().getUsername() : null)
+                .createdAt(TimeUtil.formatInstant(article.getCreatedAt()))
+                .updatedByUserName(article.getUpdatedBy()!= null? article.getUpdatedBy().getUsername() : null)
+                .updatedAt(TimeUtil.formatInstant(article.getUpdatedAt()))
+                .deleted(article.isDeleted())
+                .build();
+    }
+
+    public String getSummary() {
+        if (content == null) {
+            return "";
+        }
+
+        if (content.length() <= 150) {
+            return content;
+        }
+
+        return content.substring(0, 150) + "...";
+    }
+}

src/main/java/com/darkfantasy/dto/article/CreateArticleRequest.java

@@ -0,0 +1,40 @@
+package com.darkfantasy.dto.article;
+
+import com.darkfantasy.entity.Article;
+import com.darkfantasy.entity.enums.ArticleType;
+
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class CreateArticleRequest {
+
+    @NotBlank(message = "Tiêu đề không được để trống")
+    @Size(max = 255, message = "Tiêu đề quá dài")
+    private String title;
+
+    @NotBlank(message = "Nội dung không được để trống")
+    private String content;
+
+    private String thumbnailUrl;
+
+    @NotNull(message = "Loại bài viết không được để trống")
+    private ArticleType type;
+
+    public Article toEntity() {
+        return Article.builder()
+                .title(this.title)
+                .content(this.content)
+                .thumbnailUrl(this.thumbnailUrl)
+                .type(this.type)
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/article/UpdateArticleRequest.java

@@ -0,0 +1,32 @@
+package com.darkfantasy.dto.article;
+
+import com.darkfantasy.entity.enums.ArticleType;
+
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class UpdateArticleRequest {
+    @NotNull
+    private Long id;
+    @NotBlank(message = "Tiêu đề không được để trống")
+    @Size(max = 255)
+    private String title;
+
+    @NotBlank(message = "Nội dung không được để trống")
+    private String content;
+
+    private String thumbnailUrl;
+
+    @NotNull(message = "Loại bài viết không được để trống")
+    private ArticleType type;
+
+}

src/main/java/com/darkfantasy/dto/contact/ContactMessageResponse.java

@@ -0,0 +1,42 @@
+package com.darkfantasy.dto.contact;
+
+
+import com.darkfantasy.entity.ContactMessage;
+import com.darkfantasy.entity.enums.ContactCategory;
+import com.darkfantasy.entity.enums.ContactPlatform;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class ContactMessageResponse {
+    private Long id;
+    private String visitorName;
+
+    private String visitorEmail;
+
+    private ContactCategory category;
+
+    private ContactPlatform platform;
+
+    private String message;
+
+    private boolean processed;
+
+    public static ContactMessageResponse fromEntity(ContactMessage message) {
+        return ContactMessageResponse.builder()
+                .id(message.getId())
+                .visitorName(message.getVisitorName())
+                .visitorEmail(message.getVisitorEmail())
+                .category(message.getCategory())
+                .platform(message.getPlatform())
+                .message(message.getMessage())
+                .processed(message.isProcessed())
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/contact/CreateContactMessageRequest.java

@@ -0,0 +1,49 @@
+package com.darkfantasy.dto.contact;
+
+import com.darkfantasy.entity.ContactMessage;
+import com.darkfantasy.entity.enums.ContactCategory;
+import com.darkfantasy.entity.enums.ContactPlatform;
+
+import jakarta.validation.constraints.Email;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class CreateContactMessageRequest {
+
+    @NotBlank(message = "Vui lòng nhập tên")
+    private String visitorName;
+
+    @NotBlank(message = "Vui lòng nhập email")
+    @Email(message = "Email không hợp lệ")
+    private String visitorEmail;
+
+    @NotNull(message = "Vui lòng chọn danh mục")
+    private ContactCategory category;
+
+    @NotNull(message = "Vui lòng chọn nền tảng")
+    private ContactPlatform platform;
+
+    @NotBlank(message = "Vui lòng nhập nội dung")
+    @Size(max = 5000)
+    private String message;
+
+    public ContactMessage toEntity() {
+        return ContactMessage.builder()
+                .visitorName(visitorName)
+                .visitorEmail(visitorEmail)
+                .category(category)
+                .platform(platform)
+                .message(message)
+                .processed(false)
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/contributor/ContributorResponse.java

@@ -0,0 +1,41 @@
+package com.darkfantasy.dto.contributor;
+
+import com.darkfantasy.entity.Contributor;
+import com.darkfantasy.util.TimeUtil;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class ContributorResponse {
+    private Long id;
+    private String name;
+    private String position;
+    private String avatar;
+    private Integer priority;
+    private boolean deleted;
+    private String createdByUserName;
+    private String createdAt;
+    private String updatedByUserName;
+    private String updatedAt;
+
+    public static ContributorResponse fromEntity(Contributor contributor) {
+        return ContributorResponse.builder()
+                .id(contributor.getId())
+                .name(contributor.getName())
+                .position(contributor.getPosition())
+                .avatar(contributor.getAvatar())
+                .priority(contributor.getPriority())
+                .deleted(contributor.isDeleted())
+                .createdByUserName(contributor.getCreatedBy() != null ? contributor.getCreatedBy().getUsername() : null)
+                .createdAt(TimeUtil.formatInstant(contributor.getCreatedAt()))
+                .updatedByUserName(contributor.getUpdatedBy() != null ? contributor.getUpdatedBy().getUsername() : null)
+                .updatedAt(TimeUtil.formatInstant(contributor.getUpdatedAt()))
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/contributor/CreateContributorRequest.java

@@ -0,0 +1,44 @@
+package com.darkfantasy.dto.contributor;
+
+import com.darkfantasy.entity.Article;
+import com.darkfantasy.entity.Contributor;
+
+import jakarta.validation.constraints.Max;
+import jakarta.validation.constraints.Min;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class CreateContributorRequest {
+    @NotBlank(message = "Tên người đóng góp không được để trống")
+    @Size(max = 255, message = "Tên người đóng góp không được vượt quá 255 ký tự")
+    private String name;
+
+    @NotBlank(message = "Chức danh không được để trống")
+    @Size(max = 255, message = "Chức danh không được vượt quá 255 ký tự")
+    private String position;
+
+    private String avatar;
+
+    @NotNull(message = "Độ ưu tiên không được để trống")
+    @Min(value = 0, message = "Độ ưu tiên phải từ 0 đến 100")
+    @Max(value = 100, message = "Độ ưu tiên phải từ 0 đến 100")
+    private Integer priority;
+
+    public Contributor toEntity() {
+        return Contributor.builder()
+                .name(this.name)
+                .position(this.position)
+                .avatar(this.avatar)
+                .priority(this.priority)
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/contributor/UpdateContributorRequest.java

@@ -0,0 +1,34 @@
+package com.darkfantasy.dto.contributor;
+
+import jakarta.validation.constraints.Max;
+import jakarta.validation.constraints.Min;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class UpdateContributorRequest {
+    private Long id;
+    @NotBlank(message = "Tên người đóng góp không được để trống")
+    @Size(max = 255, message = "Tên người đóng góp không được vượt quá 255 ký tự")
+    private String name;
+
+    @NotBlank(message = "Chức danh không được để trống")
+    @Size(max = 255, message = "Chức danh không được vượt quá 255 ký tự")
+    private String position;
+
+    private String avatar;
+
+    @NotNull(message = "Độ ưu tiên không được để trống")
+    @Min(value = 0, message = "Độ ưu tiên phải từ 0 đến 100")
+    @Max(value = 100, message = "Độ ưu tiên phải từ 0 đến 100")
+    private Integer priority;
+
+}

src/main/java/com/darkfantasy/dto/faq/CreateFaqRequest.java

@@ -0,0 +1,41 @@
+package com.darkfantasy.dto.faq;
+
+import com.darkfantasy.entity.Faq;
+
+import jakarta.validation.constraints.Max;
+import jakarta.validation.constraints.Min;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class CreateFaqRequest {
+
+    @NotBlank(message = "Tiêu đề không được để trống!")
+    @Size(max = 255, message = "Tiêu đề không được vượt quá 255 ký tự!")
+    private String title;
+    @NotBlank(message = "Nội dung không được để trống!")
+    private String content;
+
+    @NotNull(message = "Độ ưu tiên không được để trống!")
+    @Min(value = 0, message = "Độ ưu tiên phải từ 0 đến 100!")
+    @Max(value = 100, message = "Độ ưu tiên phải từ 0 đến 100!")
+    private Integer priority;
+    private boolean deleted;
+
+    public Faq toEntity() {
+        return Faq.builder()
+                .title(this.title)
+                .content(this.content)
+                .priority(this.priority)
+                .deleted(this.deleted)
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/faq/FaqResponse.java

@@ -0,0 +1,30 @@
+package com.darkfantasy.dto.faq;
+
+import com.darkfantasy.entity.Faq;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class FaqResponse {
+    private Long id;
+    private String title;
+    private String content;
+    private Integer priority;
+    private boolean deleted;
+
+    public static FaqResponse fromEntity(Faq faq) {
+        return FaqResponse.builder()
+                .id(faq.getId())
+                .title(faq.getTitle())
+                .content(faq.getContent())
+                .priority(faq.getPriority())
+                .deleted(faq.isDeleted())
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/faq/UpdateFaqRequest.java

@@ -0,0 +1,29 @@
+package com.darkfantasy.dto.faq;
+
+import jakarta.validation.constraints.Max;
+import jakarta.validation.constraints.Min;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class UpdateFaqRequest {
+    private Long id;
+
+    @NotBlank(message = "Tiêu đề không được để trống!")
+    @Size(max = 255, message = "Tiêu đề không được vượt quá 255 ký tự!")
+    private String title;
+    @NotBlank(message = "Nội dung không được để trống!")
+    private String content;
+    @NotNull(message = "Độ ưu tiên không được để trống!")
+    @Min(value = 0, message = "Độ ưu tiên phải từ 0 đến 100!")
+    @Max(value = 100, message = "Độ ưu tiên phải từ 0 đến 100!")
+    private Integer priority;
+}

src/main/java/com/darkfantasy/dto/gamecharacter/CreateGameCharacterRequest.java

@@ -0,0 +1,52 @@
+package com.darkfantasy.dto.gamecharacter;
+
+import com.darkfantasy.entity.GameCharacter;
+
+import jakarta.validation.constraints.Max;
+import jakarta.validation.constraints.Min;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class CreateGameCharacterRequest {
+
+    @NotBlank(message = "Tên nhân vật không được để trống")
+    @Size(max = 255, message = "Tên nhân vật không được vượt quá 255 ký tự")
+    private String name;
+
+    @NotBlank(message = "Chủng tộc không được để trống")
+    @Size(max = 100, message = "Chủng tộc không được vượt quá 100 ký tự")
+    private String race;
+
+    @NotBlank(message = "Mô tả không được để trống")
+    private String description;
+
+    @Size(max = 255, message = "Quote không được vượt quá 255 ký tự")
+    private String quote;
+
+    private String image;
+
+    @NotNull(message = "Độ ưu tiên không được để trống")
+    @Min(value = 0, message = "Độ ưu tiên phải từ 0 đến 100")
+    @Max(value = 100, message = "Độ ưu tiên phải từ 0 đến 100")
+    private Integer priority;
+
+    public GameCharacter toEntity() {
+        return GameCharacter.builder()
+                .name(this.name)
+                .race(this.race)
+                .description(this.description)
+                .quote(this.quote)
+                .image(this.image)
+                .priority(this.priority)
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/gamecharacter/GameCharacterResponse.java

@@ -0,0 +1,36 @@
+package com.darkfantasy.dto.gamecharacter;
+
+import com.darkfantasy.entity.GameCharacter;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class GameCharacterResponse {
+    private Long id;
+    private String name;
+    private String race;
+    private String description;
+    private String quote;
+    private String image;
+    private Integer priority;
+    private boolean deleted;
+
+    public static GameCharacterResponse fromEntity(GameCharacter character) {
+        return GameCharacterResponse.builder()
+                .id(character.getId())
+                .name(character.getName())
+                .race(character.getRace())
+                .description(character.getDescription())
+                .quote(character.getQuote())
+                .image(character.getImage())
+                .priority(character.getPriority())
+                .deleted(character.isDeleted())
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/gamecharacter/UpdateGameCharacterRequest.java

@@ -0,0 +1,48 @@
+package com.darkfantasy.dto.gamecharacter;
+
+import com.darkfantasy.entity.GameCharacter;
+
+import jakarta.validation.constraints.Max;
+import jakarta.validation.constraints.Min;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class UpdateGameCharacterRequest {
+    private Long id;
+    @NotBlank(message = "Tên nhân vật không được để trống")
+    @Size(max = 255, message = "Tên nhân vật không được vượt quá 255 ký tự")
+    private String name;
+    @NotBlank(message = "Chủng tộc không được để trống")
+    @Size(max = 100, message = "Chủng tộc không được vượt quá 100 ký tự")
+    private String race;
+    @NotBlank(message = "Mô tả không được để trống")
+    private String description;
+    @Size(max = 255, message = "Quote không được vượt quá 255 ký tự")
+    private String quote;
+    private String image;
+    @NotNull(message = "Độ ưu tiên không được để trống")
+    @Min(value = 0, message = "Độ ưu tiên phải từ 0 đến 100")
+    @Max(value = 100, message = "Độ ưu tiên phải từ 0 đến 100")
+    private Integer priority;
+
+    public GameCharacter toEntity() {
+        return GameCharacter.builder()
+                .id(this.id)
+                .name(this.name)
+                .race(this.race)
+                .description(this.description)
+                .quote(this.quote)
+                .image(this.image)
+                .priority(this.priority)
+                .build();
+    }
+}

src/main/java/com/darkfantasy/dto/log/AuditLogResponse.java

@@ -0,0 +1,37 @@
+package com.darkfantasy.dto.log;
+
+import java.time.Instant;
+
+import com.darkfantasy.entity.AuditLog;
+import com.darkfantasy.entity.enums.LogAction;
+import com.darkfantasy.entity.enums.LogEntityType;
+import com.darkfantasy.util.TimeUtil;
+
+import lombok.Builder;
+import lombok.Data;
+
+@Data
+@Builder
+public class AuditLogResponse {
+        private Long id;
+        private Long userId;
+        private String username;
+        private LogEntityType entityType;
+        private Long entityId;
+        private LogAction action;
+        private String description;
+        private String createdAt;
+
+        public static AuditLogResponse fromEntity(AuditLog auditLog) {
+                return AuditLogResponse.builder()
+                                .id(auditLog.getId())
+                                .userId(auditLog.getUser().getId())
+                                .username(auditLog.getUser().getUsername())
+                                .entityType(auditLog.getEntityType())
+                                .entityId(auditLog.getEntityId())
+                                .action(auditLog.getAction())
+                                .description(auditLog.getDescription())
+                                .createdAt(TimeUtil.formatInstant(auditLog.getCreatedAt()))
+                                .build();
+        }
+}

src/main/java/com/darkfantasy/dto/story/CreateStoryRequest.java

@@ -0,0 +1,50 @@
+package com.darkfantasy.dto.story;
+
+import com.darkfantasy.entity.Story;
+
+import jakarta.validation.constraints.Max;
+import jakarta.validation.constraints.Min;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class CreateStoryRequest {
+    @NotBlank(message = "Tag không được để trống!")
+    @Size(max = 255, message = "Tag không được vượt quá 255 ký tự!")
+    private String tag;
+
+    @NotBlank(message = "Tiêu đề không được để trống!")
+    @Size(max = 255, message = "Tiêu đề không được vượt quá 255 ký tự!")
+    private String title;
+    @NotBlank(message = "Nội dung không được để trống!")
+    private String content;
+    private String image;
+    @NotBlank(message = "Nội dung quote không được để trống!")
+    private String quoteContent;
+    @NotBlank(message = "Tác giả trích dẫn không được để trống!")
+    private String quoteAuthor;
+    @NotNull(message = "Độ ưu tiên không được để trống!")
+    @Min(value = 0, message = "Độ ưu tiên phải từ 0 đến 100!")
+    @Max(value = 100, message = "Độ ưu tiên phải từ 0 đến 100!")
+    private Integer priority;
+
+    public Story toEntity() {
+        return Story.builder()
+                .tag(this.tag)
+                .title(this.title)
+                .content(this.content)
+                .image(this.image)
+                .quoteContent(this.quoteContent)
+                .quoteAuthor(this.quoteAuthor)
+                .priority(this.priority)
+                .build();
+    }
+}