initial commit

2023-09-16 21:45:26 +02:00
commit 2d458f08f3
64 changed files with 4655 additions and 0 deletions
--- a/private/minis-backend/.gitignore
+++ b/private/minis-backend/.gitignore
@@ -0,0 +1,36 @@
+.gradle
+build/
+!gradle/wrapper/gradle-wrapper.jar
+!**/src/main/**/build/
+!**/src/test/**/build/
+
+### STS ###
+.apt_generated
+.classpath
+.factorypath
+.project
+.settings
+.springBeans
+.sts4-cache
+bin/
+!**/src/main/**/bin/
+!**/src/test/**/bin/
+
+### IntelliJ IDEA ###
+.idea
+*.iws
+*.iml
+*.ipr
+out/
+!**/src/main/**/out/
+!**/src/test/**/out/
+
+### NetBeans ###
+/nbproject/private/
+/nbbuild/
+/dist/
+/nbdist/
+/.nb-gradle/
+
+### VS Code ###
+.vscode/
--- a/private/minis-backend/build.gradle.kts
+++ b/private/minis-backend/build.gradle.kts
@@ -0,0 +1,46 @@
+val ktor_version: String by project
+val kotlin_version: String by project
+val logback_version: String by project
+
+val exposed_version: String by project
+val h2_version: String by project
+plugins {
+    kotlin("jvm") version "1.9.0"
+    id("io.ktor.plugin") version "2.3.3"
+    kotlin("plugin.serialization") version "1.9.0"
+}
+
+group = "de.walamana"
+version = "0.0.1"
+
+application {
+    mainClass.set("de.walamana.ApplicationKt")
+
+    val isDevelopment: Boolean = project.ext.has("development")
+    applicationDefaultJvmArgs = listOf("-Dio.ktor.development=$isDevelopment")
+}
+
+repositories {
+    mavenCentral()
+}
+
+dependencies {
+    implementation("io.ktor:ktor-server-core-jvm")
+    implementation("io.ktor:ktor-server-auth-jvm")
+    implementation("io.ktor:ktor-server-auth-jwt-jvm")
+    implementation("io.ktor:ktor-server-sessions-jvm")
+    implementation("io.ktor:ktor-server-host-common-jvm")
+    implementation("io.ktor:ktor-server-cors-jvm")
+    implementation("io.ktor:ktor-server-content-negotiation-jvm")
+    implementation("io.ktor:ktor-serialization-kotlinx-json-jvm")
+    implementation("org.jetbrains.exposed:exposed-core:$exposed_version")
+    implementation("org.jetbrains.exposed:exposed-jdbc:$exposed_version")
+    implementation("com.h2database:h2:$h2_version")
+    implementation("io.ktor:ktor-server-netty-jvm")
+    implementation("ch.qos.logback:logback-classic:$logback_version")
+
+    implementation("at.favre.lib:bcrypt:0.10.2")
+
+    testImplementation("io.ktor:ktor-server-tests-jvm")
+    testImplementation("org.jetbrains.kotlin:kotlin-test-junit:$kotlin_version")
+}
--- a/private/minis-backend/gradle.properties
+++ b/private/minis-backend/gradle.properties
@@ -0,0 +1,6 @@
+ktor_version=2.3.3
+kotlin_version=1.9.0
+logback_version=1.2.11
+kotlin.code.style=official
+exposed_version=0.41.1
+h2_version=2.1.214
--- a/private/minis-backend/gradle/wrapper/gradle-wrapper.jar
+++ b/private/minis-backend/gradle/wrapper/gradle-wrapper.jar
--- a/private/minis-backend/gradle/wrapper/gradle-wrapper.properties
+++ b/private/minis-backend/gradle/wrapper/gradle-wrapper.properties
@@ -0,0 +1,5 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-7.5.1-bin.zip
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists
--- a/private/minis-backend/gradlew
+++ b/private/minis-backend/gradlew
@@ -0,0 +1,234 @@
+#!/bin/sh
+
+#
+# Copyright © 2015-2021 the original authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+##############################################################################
+#
+#   Gradle start up script for POSIX generated by Gradle.
+#
+#   Important for running:
+#
+#   (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is
+#       noncompliant, but you have some other compliant shell such as ksh or
+#       bash, then to run this script, type that shell name before the whole
+#       command line, like:
+#
+#           ksh Gradle
+#
+#       Busybox and similar reduced shells will NOT work, because this script
+#       requires all of these POSIX shell features:
+#         * functions;
+#         * expansions «$var», «${var}», «${var:-default}», «${var+SET}»,
+#           «${var#prefix}», «${var%suffix}», and «$( cmd )»;
+#         * compound commands having a testable exit status, especially «case»;
+#         * various built-in commands including «command», «set», and «ulimit».
+#
+#   Important for patching:
+#
+#   (2) This script targets any POSIX shell, so it avoids extensions provided
+#       by Bash, Ksh, etc; in particular arrays are avoided.
+#
+#       The "traditional" practice of packing multiple parameters into a
+#       space-separated string is a well documented source of bugs and security
+#       problems, so this is (mostly) avoided, by progressively accumulating
+#       options in "$@", and eventually passing that to Java.
+#
+#       Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS,
+#       and GRADLE_OPTS) rely on word-splitting, this is performed explicitly;
+#       see the in-line comments for details.
+#
+#       There are tweaks for specific operating systems such as AIX, CygWin,
+#       Darwin, MinGW, and NonStop.
+#
+#   (3) This script is generated from the Groovy template
+#       https://github.com/gradle/gradle/blob/master/subprojects/plugins/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt
+#       within the Gradle project.
+#
+#       You can find Gradle at https://github.com/gradle/gradle/.
+#
+##############################################################################
+
+# Attempt to set APP_HOME
+
+# Resolve links: $0 may be a link
+app_path=$0
+
+# Need this for daisy-chained symlinks.
+while
+    APP_HOME=${app_path%"${app_path##*/}"}  # leaves a trailing /; empty if no leading path
+    [ -h "$app_path" ]
+do
+    ls=$( ls -ld "$app_path" )
+    link=${ls#*' -> '}
+    case $link in             #(
+      /*)   app_path=$link ;; #(
+      *)    app_path=$APP_HOME$link ;;
+    esac
+done
+
+APP_HOME=$( cd "${APP_HOME:-./}" && pwd -P ) || exit
+
+APP_NAME="Gradle"
+APP_BASE_NAME=${0##*/}
+
+# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
+DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"'
+
+# Use the maximum available, or set MAX_FD != -1 to use that value.
+MAX_FD=maximum
+
+warn () {
+    echo "$*"
+} >&2
+
+die () {
+    echo
+    echo "$*"
+    echo
+    exit 1
+} >&2
+
+# OS specific support (must be 'true' or 'false').
+cygwin=false
+msys=false
+darwin=false
+nonstop=false
+case "$( uname )" in                #(
+  CYGWIN* )         cygwin=true  ;; #(
+  Darwin* )         darwin=true  ;; #(
+  MSYS* | MINGW* )  msys=true    ;; #(
+  NONSTOP* )        nonstop=true ;;
+esac
+
+CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar
+
+
+# Determine the Java command to use to start the JVM.
+if [ -n "$JAVA_HOME" ] ; then
+    if [ -x "$JAVA_HOME/jre/sh/java" ] ; then
+        # IBM's JDK on AIX uses strange locations for the executables
+        JAVACMD=$JAVA_HOME/jre/sh/java
+    else
+        JAVACMD=$JAVA_HOME/bin/java
+    fi
+    if [ ! -x "$JAVACMD" ] ; then
+        die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+    fi
+else
+    JAVACMD=java
+    which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+fi
+
+# Increase the maximum file descriptors if we can.
+if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then
+    case $MAX_FD in #(
+      max*)
+        MAX_FD=$( ulimit -H -n ) ||
+            warn "Could not query maximum file descriptor limit"
+    esac
+    case $MAX_FD in  #(
+      '' | soft) :;; #(
+      *)
+        ulimit -n "$MAX_FD" ||
+            warn "Could not set maximum file descriptor limit to $MAX_FD"
+    esac
+fi
+
+# Collect all arguments for the java command, stacking in reverse order:
+#   * args from the command line
+#   * the main class name
+#   * -classpath
+#   * -D...appname settings
+#   * --module-path (only if needed)
+#   * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables.
+
+# For Cygwin or MSYS, switch paths to Windows format before running java
+if "$cygwin" || "$msys" ; then
+    APP_HOME=$( cygpath --path --mixed "$APP_HOME" )
+    CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" )
+
+    JAVACMD=$( cygpath --unix "$JAVACMD" )
+
+    # Now convert the arguments - kludge to limit ourselves to /bin/sh
+    for arg do
+        if
+            case $arg in                                #(
+              -*)   false ;;                            # don't mess with options #(
+              /?*)  t=${arg#/} t=/${t%%/*}              # looks like a POSIX filepath
+                    [ -e "$t" ] ;;                      #(
+              *)    false ;;
+            esac
+        then
+            arg=$( cygpath --path --ignore --mixed "$arg" )
+        fi
+        # Roll the args list around exactly as many times as the number of
+        # args, so each arg winds up back in the position where it started, but
+        # possibly modified.
+        #
+        # NB: a `for` loop captures its iteration list before it begins, so
+        # changing the positional parameters here affects neither the number of
+        # iterations, nor the values presented in `arg`.
+        shift                   # remove old arg
+        set -- "$@" "$arg"      # push replacement arg
+    done
+fi
+
+# Collect all arguments for the java command;
+#   * $DEFAULT_JVM_OPTS, $JAVA_OPTS, and $GRADLE_OPTS can contain fragments of
+#     shell script including quotes and variable substitutions, so put them in
+#     double quotes to make sure that they get re-expanded; and
+#   * put everything else in single quotes, so that it's not re-expanded.
+
+set -- \
+        "-Dorg.gradle.appname=$APP_BASE_NAME" \
+        -classpath "$CLASSPATH" \
+        org.gradle.wrapper.GradleWrapperMain \
+        "$@"
+
+# Use "xargs" to parse quoted args.
+#
+# With -n1 it outputs one arg per line, with the quotes and backslashes removed.
+#
+# In Bash we could simply go:
+#
+#   readarray ARGS < <( xargs -n1 <<<"$var" ) &&
+#   set -- "${ARGS[@]}" "$@"
+#
+# but POSIX shell has neither arrays nor command substitution, so instead we
+# post-process each arg (as a line of input to sed) to backslash-escape any
+# character that might be a shell metacharacter, then use eval to reverse
+# that process (while maintaining the separation between arguments), and wrap
+# the whole thing up as a single "set" statement.
+#
+# This will of course break if any of these variables contains a newline or
+# an unmatched quote.
+#
+
+eval "set -- $(
+        printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" |
+        xargs -n1 |
+        sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' |
+        tr '\n' ' '
+    )" '"$@"'
+
+exec "$JAVACMD" "$@"
--- a/private/minis-backend/gradlew.bat
+++ b/private/minis-backend/gradlew.bat
@@ -0,0 +1,89 @@
+@rem
+@rem Copyright 2015 the original author or authors.
+@rem
+@rem Licensed under the Apache License, Version 2.0 (the "License");
+@rem you may not use this file except in compliance with the License.
+@rem You may obtain a copy of the License at
+@rem
+@rem      https://www.apache.org/licenses/LICENSE-2.0
+@rem
+@rem Unless required by applicable law or agreed to in writing, software
+@rem distributed under the License is distributed on an "AS IS" BASIS,
+@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+@rem See the License for the specific language governing permissions and
+@rem limitations under the License.
+@rem
+
+@if "%DEBUG%" == "" @echo off
+@rem ##########################################################################
+@rem
+@rem  Gradle startup script for Windows
+@rem
+@rem ##########################################################################
+
+@rem Set local scope for the variables with windows NT shell
+if "%OS%"=="Windows_NT" setlocal
+
+set DIRNAME=%~dp0
+if "%DIRNAME%" == "" set DIRNAME=.
+set APP_BASE_NAME=%~n0
+set APP_HOME=%DIRNAME%
+
+@rem Resolve any "." and ".." in APP_HOME to make it shorter.
+for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi
+
+@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
+set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m"
+
+@rem Find java.exe
+if defined JAVA_HOME goto findJavaFromJavaHome
+
+set JAVA_EXE=java.exe
+%JAVA_EXE% -version >NUL 2>&1
+if "%ERRORLEVEL%" == "0" goto execute
+
+echo.
+echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
+echo.
+echo Please set the JAVA_HOME variable in your environment to match the
+echo location of your Java installation.
+
+goto fail
+
+:findJavaFromJavaHome
+set JAVA_HOME=%JAVA_HOME:"=%
+set JAVA_EXE=%JAVA_HOME%/bin/java.exe
+
+if exist "%JAVA_EXE%" goto execute
+
+echo.
+echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME%
+echo.
+echo Please set the JAVA_HOME variable in your environment to match the
+echo location of your Java installation.
+
+goto fail
+
+:execute
+@rem Setup the command line
+
+set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar
+
+
+@rem Execute Gradle
+"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %*
+
+:end
+@rem End local scope for the variables with windows NT shell
+if "%ERRORLEVEL%"=="0" goto mainEnd
+
+:fail
+rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of
+rem the _cmd.exe /c_ return code!
+if  not "" == "%GRADLE_EXIT_CONSOLE%" exit 1
+exit /b 1
+
+:mainEnd
+if "%OS%"=="Windows_NT" endlocal
+
+:omega
--- a/private/minis-backend/settings.gradle.kts
+++ b/private/minis-backend/settings.gradle.kts
@@ -0,0 +1 @@
+rootProject.name = "minis-backend"
--- a/private/minis-backend/src/main/kotlin/de/walamana/Application.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/Application.kt
@@ -0,0 +1,32 @@
+package de.walamana
+
+import de.walamana.plugins.*
+import de.walamana.views.*
+import io.ktor.server.application.*
+import io.ktor.server.engine.*
+import io.ktor.server.netty.*
+import io.ktor.server.routing.*
+
+//fun main() {
+//    embeddedServer(Netty, port = 8080, host = "0.0.0.0", module = Application::module)
+//        .start(wait = true)
+//}
+
+fun main(args: Array<String>): Unit = EngineMain.main(args)
+
+fun Application.module() {
+    configureSecurity()
+    configureHTTP()
+    configureSerialization()
+    configureDatabases()
+
+    routing {
+        route("/api") {
+            configureMinistrantenRoutes()
+            configureGottesdiensteRoutes()
+            configureMarksView()
+            configurePlanRoutes()
+            configureAuthenticationRoutes()
+        }
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/models/Gottesdienste.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/models/Gottesdienste.kt
@@ -0,0 +1,75 @@
+package de.walamana.models
+
+import de.walamana.plugins.DateAsLong
+import de.walamana.plugins.dbQuery
+import kotlinx.serialization.Serializable
+import org.jetbrains.exposed.sql.*
+import org.jetbrains.exposed.sql.SqlExpressionBuilder.eq
+import java.util.Date
+
+@Serializable
+data class Gottesdienst(
+    val id: Int,
+    val name: String,
+    val date: DateAsLong,
+    val attendance: DateAsLong,
+    val planId: Int
+)
+
+object Gottesdienste : Table() {
+    val id = integer("id").autoIncrement()
+    val name = varchar("name", 128).default("")
+    val date = long("date")
+    val attendance = long("attendance")
+    val planId = integer("planId")
+
+    override val primaryKey = PrimaryKey(id, planId)
+}
+
+object GottesdiensteDao {
+
+    private fun resultRowToGottesdienst(row: ResultRow) = Gottesdienst(
+        row[Gottesdienste.id],
+        row[Gottesdienste.name],
+        Date(row[Gottesdienste.date]),
+        Date(row[Gottesdienste.attendance]),
+        row[Gottesdienste.planId]
+    )
+
+    suspend fun allGottesdienste(): List<Gottesdienst> = dbQuery {
+        Gottesdienste.selectAll().map(::resultRowToGottesdienst)
+    }
+
+    suspend fun getGottesdiensteForPlan(planId: Int): List<Gottesdienst> = dbQuery {
+        Gottesdienste.select { Gottesdienste.planId eq planId }.map(::resultRowToGottesdienst)
+    }
+
+    suspend fun createGottesdienst(name: String, date: Date, attendance: Date, planId: Int): Gottesdienst? = dbQuery {
+        val statement = Gottesdienste.insert {
+            it[Gottesdienste.name] = name
+            it[Gottesdienste.date] = date.time
+            it[Gottesdienste.attendance] = attendance.time
+            it[Gottesdienste.planId] = planId
+        }
+        statement.resultedValues?.singleOrNull()?.let(::resultRowToGottesdienst)
+    }
+
+    suspend fun deleteGottesdienst(id: Int): Boolean = dbQuery {
+        Gottesdienste.deleteWhere { Gottesdienste.id eq id } > 0
+    }
+
+    suspend fun updateGottesdienst(
+        id: Int,
+        name: String? = null,
+        date: Date? = null,
+        attendance: Date? = null,
+        planId: Int? = null
+    ): Boolean = dbQuery {
+        Gottesdienste.update({ Gottesdienste.id eq id }) {
+            if (name != null) it[Gottesdienste.name] = name
+            if (date != null) it[Gottesdienste.date] = date.time
+            if (attendance != null) it[Gottesdienste.attendance] = attendance.time
+            if (planId != null) it[Gottesdienste.planId] = planId
+        } > 0
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/models/Marks.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/models/Marks.kt
@@ -0,0 +1,54 @@
+package de.walamana.models
+
+import de.walamana.plugins.dbQuery
+import kotlinx.serialization.Serializable
+import org.jetbrains.exposed.sql.*
+import org.jetbrains.exposed.sql.SqlExpressionBuilder.eq
+
+@Serializable
+data class Mark(
+    val mid: Int,
+    val gid: Int,
+    val value: Int
+)
+
+object Marks : Table() {
+    val mid = integer("mid")
+        .references(Ministranten.id);
+    val gid = integer("gid")
+        .references(Gottesdienste.id);
+    val value = integer("value");
+
+    override val primaryKey = PrimaryKey(mid, gid)
+}
+
+object MarksDao {
+
+    private fun resultRowToMark(row: ResultRow) = Mark(
+        row[Marks.mid],
+        row[Marks.gid],
+        row[Marks.value]
+    )
+
+    suspend fun allMarksForPlan(planId: Int): List<Mark> = dbQuery {
+        Gottesdienste.join(Marks, JoinType.INNER, onColumn = Marks.gid, otherColumn = Gottesdienste.id)
+            .select { Gottesdienste.planId eq planId }
+            .map(::resultRowToMark)
+    }
+
+    suspend fun setMark(ministrantId: Int, gottesdienstId: Int, value: Int): Boolean = dbQuery {
+        Marks.insert {
+            it[Marks.mid] = ministrantId
+            it[Marks.gid] = gottesdienstId
+            it[Marks.value] = value
+        }.resultedValues?.isNotEmpty() ?: false
+    }
+
+    suspend fun removeMark(ministrantId: Int, gottesdienstId: Int): Boolean = dbQuery {
+        Marks.deleteWhere {
+            (Marks.gid eq gottesdienstId) and
+                    (Marks.mid eq ministrantId)
+        } > 0
+    }
+
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/models/Ministranten.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/models/Ministranten.kt
@@ -0,0 +1,108 @@
+package de.walamana.models
+
+import de.walamana.plugins.*
+import kotlinx.serialization.Contextual
+import kotlinx.serialization.KSerializer
+import kotlinx.serialization.Serializable
+import kotlinx.serialization.descriptors.PrimitiveKind
+import kotlinx.serialization.descriptors.PrimitiveSerialDescriptor
+import kotlinx.serialization.descriptors.SerialDescriptor
+import kotlinx.serialization.encoding.Decoder
+import kotlinx.serialization.encoding.Encoder
+import org.jetbrains.exposed.sql.*
+import org.jetbrains.exposed.sql.SqlExpressionBuilder.eq
+import java.util.*
+
+@Serializable
+data class Ministrant(
+    val id: Int,
+    val username: String,
+    val passwordHash: String,
+    val firstname: String,
+    val lastname: String,
+    val birthday: DateAsLong,
+    val privileges: CommaSeperatedStringList
+)
+
+@Serializable
+data class SimplifiedMinistrant(
+    val id: Int,
+    val firstname: String,
+    val lastname: String
+)
+
+object Ministranten : Table() {
+    val id = integer("id").autoIncrement()
+    val username = varchar("username", 128)
+    val passwordHash = varchar("passwordHash", 1024)
+    val firstname = varchar("firstname", 128)
+    val lastname = varchar("lastname", 128)
+    val birthday = long("birthday")
+    val privileges = varchar("privileges", 1024)
+
+    override val primaryKey = PrimaryKey(id)
+}
+
+object MinistrantenDao {
+    private fun resultRowToMinistrant(row: ResultRow, showPasswordHash: Boolean = false) = Ministrant (
+        row[Ministranten.id],
+        row[Ministranten.username],
+        if(showPasswordHash) row[Ministranten.passwordHash] else "",
+        row[Ministranten.firstname],
+        row[Ministranten.lastname],
+        Date(row[Ministranten.birthday]),
+        row[Ministranten.privileges].split(",")
+    )
+
+    suspend fun allMinistranten(): List<Ministrant> = dbQuery {
+        Ministranten.selectAll().map(::resultRowToMinistrant)
+    }
+
+    suspend fun simplifiedMinistranten(): List<SimplifiedMinistrant> = dbQuery {
+        Ministranten.selectAll().map { row ->
+            SimplifiedMinistrant(row[Ministranten.id], row[Ministranten.firstname], row[Ministranten.lastname])
+        }
+    }
+
+    suspend fun getMinistrant(username: String, showPasswordHash: Boolean = false): Ministrant? = dbQuery {
+        Ministranten.select(Ministranten.username eq username).map {
+            resultRowToMinistrant(it, showPasswordHash)
+        }.firstOrNull()
+    }
+
+    suspend fun createMinistrant(username: String, passwordHash: String, firstname: String, lastname: String, birthday: Date, privileges: List<String>) = dbQuery {
+        val statement = Ministranten.insert {
+            it[Ministranten.username] = username
+            it[Ministranten.passwordHash] = ""
+            it[Ministranten.firstname] = firstname
+            it[Ministranten.lastname] = lastname
+            it[Ministranten.birthday] = birthday.time
+            it[Ministranten.privileges] = privileges.joinToString(",")
+        }
+        Security.setPassword(username, passwordHash)
+        statement.resultedValues?.singleOrNull()?.let(::resultRowToMinistrant)
+    }
+
+    suspend fun deleteMinistrant(id: Int): Boolean = dbQuery {
+        Ministranten.deleteWhere { Ministranten.id eq id } > 0
+    }
+
+    suspend fun updateMinistrant(
+        id: Int,
+        username: String? = null,
+        passwordHash: String? = null,
+        firstname: String? = null,
+        lastname: String? = null,
+        birthday: Date? = null,
+        privileges: List<String>? = null
+    ) = dbQuery{
+        Ministranten.update({Ministranten.id eq id}) {
+            if(username != null) it[Ministranten.username] = username
+            if(passwordHash != null) it[Ministranten.passwordHash] = passwordHash
+            if(firstname != null) it[Ministranten.firstname] = firstname
+            if(lastname != null) it[Ministranten.lastname] = lastname
+            if(birthday != null) it[Ministranten.birthday] = birthday.time
+            if(privileges != null) it[Ministranten.privileges] = privileges.joinToString(",")
+        }
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/plugins/Databases.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/plugins/Databases.kt
@@ -0,0 +1,26 @@
+package de.walamana.plugins
+
+import de.walamana.models.Gottesdienste
+import de.walamana.models.Marks
+import de.walamana.models.Ministranten
+import io.ktor.server.application.*
+import io.ktor.server.routing.*
+import kotlinx.coroutines.Dispatchers
+import org.jetbrains.exposed.sql.*
+import org.jetbrains.exposed.sql.transactions.experimental.newSuspendedTransaction
+import org.jetbrains.exposed.sql.transactions.transaction
+
+fun Application.configureDatabases() {
+    val driverClassName = "org.h2.Driver"
+    val jdbcURL = "jdbc:h2:file:./build/db"
+    val database = Database.connect(jdbcURL, driverClassName)
+
+    transaction {
+        SchemaUtils.create(Gottesdienste)
+        SchemaUtils.create(Ministranten)
+        SchemaUtils.create(Marks)
+    }
+}
+
+suspend fun <T> dbQuery(block: suspend () -> T): T =
+    newSuspendedTransaction(Dispatchers.IO) { block() }
--- a/private/minis-backend/src/main/kotlin/de/walamana/plugins/HTTP.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/plugins/HTTP.kt
@@ -0,0 +1,20 @@
+package de.walamana.plugins
+
+import io.ktor.http.*
+import io.ktor.server.application.*
+import io.ktor.server.plugins.cors.routing.*
+
+fun Application.configureHTTP() {
+    install(CORS) {
+        allowMethod(HttpMethod.Options)
+        allowMethod(HttpMethod.Put)
+        allowMethod(HttpMethod.Delete)
+        allowMethod(HttpMethod.Patch)
+        allowMethod(HttpMethod.Options)
+        allowHeader(HttpHeaders.Authorization)
+        allowHeader(HttpHeaders.AccessControlAllowOrigin)
+        allowNonSimpleContentTypes = true
+//        allowHeader("MyCustomHeader")
+        anyHost() // @TODO: Don't do this in production if possible. Try to limit it.
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/plugins/Security.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/plugins/Security.kt
@@ -0,0 +1,102 @@
+package de.walamana.plugins
+
+import at.favre.lib.crypto.bcrypt.BCrypt
+import com.auth0.jwt.JWT
+import com.auth0.jwt.algorithms.Algorithm
+import com.auth0.jwt.interfaces.Payload
+import de.walamana.models.Ministrant
+import de.walamana.models.MinistrantenDao
+import io.ktor.http.*
+import io.ktor.server.application.*
+import io.ktor.server.auth.*
+import io.ktor.server.auth.jwt.*
+import io.ktor.server.response.*
+import io.ktor.server.routing.*
+import io.ktor.server.sessions.*
+import java.util.*
+
+
+const val SALT_ROUNDS = 10;
+data class JWTEnvironment(
+    val secret: String,
+    val issuer: String,
+    val audience: String,
+)
+
+fun Application.configureSecurity() {
+    val jwtEnv = getJWTEnvironment()
+    authentication {
+        jwt() {
+            verifier(
+                JWT
+                    .require(Algorithm.HMAC256(jwtEnv.secret))
+                    .withAudience(jwtEnv.audience)
+                    .withIssuer(jwtEnv.issuer)
+                    .build()
+            )
+            validate { credential ->
+                if (credential.payload.audience.contains(jwtEnv.audience)) JWTPrincipal(credential.payload) else null
+            }
+            challenge { _, _ ->
+                call.respond(HttpStatusCode.Unauthorized, hashMapOf("msg" to "Token is not valid or has expired"))
+            }
+        }
+    }
+
+}
+
+fun Application.getJWTEnvironment(): JWTEnvironment{
+
+    val secret = environment.config.property("jwt.secret").getString()
+    val issuer = environment.config.property("jwt.issuer").getString()
+    val audience = environment.config.property("jwt.audience").getString()
+    return JWTEnvironment(secret, issuer, audience)
+}
+
+fun Payload.username() = getClaim("username").asString()
+fun Payload.mid() = getClaim("id").asInt()
+
+
+object Security {
+    suspend fun authenticateUser(application: Application, username: String, password: String): Ministrant? {
+        if(username == "admin") {
+            val adminPw = application.environment.config.property("admin.password").getString()
+            if(adminPw == password) {
+                val allMinis = MinistrantenDao.allMinistranten().map { it.username }
+                return Ministrant(
+                    0, "admin", "", "admin", "admin", Date(), allMinis
+                )
+            }
+            return null
+        }
+
+        val ministrant = MinistrantenDao.getMinistrant(username, true)
+            ?: return null
+
+        if(!BCrypt.verifyer().verify(password.toCharArray(), ministrant.passwordHash).verified) {
+            return null
+        }
+
+        return ministrant
+    }
+
+    suspend fun setPassword(username: String, password: String): Boolean {
+        val ministrant = MinistrantenDao.getMinistrant(username) ?: return false
+
+        val hash = BCrypt.withDefaults().hashToString(SALT_ROUNDS, password.toCharArray())
+
+        print(hash)
+
+        MinistrantenDao.updateMinistrant(ministrant.id, passwordHash = hash)
+
+        return true
+    }
+
+    fun createToken(jwtEnv: JWTEnvironment, ministrant: Ministrant) = JWT.create()
+            .withAudience(jwtEnv.audience)
+            .withIssuer(jwtEnv.issuer)
+            .withClaim("username", ministrant.username)
+            .withClaim("id", ministrant.id)
+            .withExpiresAt(Date(System.currentTimeMillis() + 1000*60*60))
+            .sign(Algorithm.HMAC256(jwtEnv.secret))
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/plugins/Serialization.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/plugins/Serialization.kt
@@ -0,0 +1,66 @@
+package de.walamana.plugins
+
+import io.ktor.serialization.kotlinx.json.*
+import io.ktor.server.application.*
+import io.ktor.server.application.*
+import io.ktor.server.application.*
+import io.ktor.server.plugins.contentnegotiation.*
+import io.ktor.server.response.*
+import io.ktor.server.routing.*
+import kotlinx.serialization.KSerializer
+import kotlinx.serialization.Serializable
+import kotlinx.serialization.descriptors.PrimitiveKind
+import kotlinx.serialization.descriptors.PrimitiveSerialDescriptor
+import kotlinx.serialization.descriptors.SerialDescriptor
+import kotlinx.serialization.encoding.Decoder
+import kotlinx.serialization.encoding.Encoder
+import kotlinx.serialization.json.Json
+import java.util.*
+
+fun Application.configureSerialization() {
+    install(ContentNegotiation) {
+        json(Json {
+            prettyPrint = true
+        })
+
+    }
+
+    routing {
+        get("/json/kotlinx-serialization") {
+            println("Test")
+//            call.respond("Test")
+            call.respond(mapOf("hello" to "world"))
+        }
+    }
+}
+
+typealias CommaSeperatedStringList = @Serializable(StringListAsCommaSeperatedString::class) List<String>;
+
+object StringListAsCommaSeperatedString : KSerializer<List<String>> {
+    override val descriptor: SerialDescriptor
+            = PrimitiveSerialDescriptor("List<String>", PrimitiveKind.STRING)
+
+    override fun deserialize(decoder: Decoder): List<String> {
+        return decoder.decodeString().split(",")
+    }
+
+    override fun serialize(encoder: Encoder, value: List<String>) {
+        encoder.encodeString(value.joinToString(","))
+    }
+
+}
+
+
+typealias DateAsLong = @Serializable(DateAsLongSerializer::class) Date
+object DateAsLongSerializer : KSerializer<Date> {
+    override val descriptor: SerialDescriptor
+            = PrimitiveSerialDescriptor("Date", PrimitiveKind.LONG)
+
+    override fun serialize(encoder: Encoder, value: Date) {
+        encoder.encodeLong(value.time)
+    }
+
+    override fun deserialize(decoder: Decoder): Date {
+        return Date(decoder.decodeLong())
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/plugins/UsersSchema.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/plugins/UsersSchema.kt
@@ -0,0 +1,59 @@
+package de.walamana.plugins
+
+import org.jetbrains.exposed.sql.transactions.transaction
+import org.jetbrains.exposed.sql.transactions.experimental.newSuspendedTransaction
+import org.jetbrains.exposed.sql.SqlExpressionBuilder.eq
+import kotlinx.serialization.Serializable
+import kotlinx.coroutines.Dispatchers
+import org.jetbrains.exposed.sql.*
+
+@Serializable
+data class ExposedUser(val name: String, val age: Int)
+class UserService(private val database: Database) {
+    object Users : Table() {
+        val id = integer("id").autoIncrement()
+        val name = varchar("name", length = 50)
+        val age = integer("age")
+
+        override val primaryKey = PrimaryKey(id)
+    }
+
+    init {
+        transaction(database) {
+            SchemaUtils.create(Users)
+        }
+    }
+
+    suspend fun <T> dbQuery(block: suspend () -> T): T =
+        newSuspendedTransaction(Dispatchers.IO) { block() }
+
+    suspend fun create(user: ExposedUser): Int = dbQuery {
+        Users.insert {
+            it[name] = user.name
+            it[age] = user.age
+        }[Users.id]
+    }
+
+    suspend fun read(id: Int): ExposedUser? {
+        return dbQuery {
+            Users.select { Users.id eq id }
+                .map { ExposedUser(it[Users.name], it[Users.age]) }
+                .singleOrNull()
+        }
+    }
+
+    suspend fun update(id: Int, user: ExposedUser) {
+        dbQuery {
+            Users.update({ Users.id eq id }) {
+                it[name] = user.name
+                it[age] = user.age
+            }
+        }
+    }
+
+    suspend fun delete(id: Int) {
+        dbQuery {
+            Users.deleteWhere { Users.id.eq(id) }
+        }
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/service/Plan.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/service/Plan.kt
@@ -0,0 +1,24 @@
+package de.walamana.service
+
+import de.walamana.models.*
+import kotlinx.serialization.Serializable
+
+
+@Serializable
+data class Plan (
+    val gottesdienste: List<Gottesdienst>,
+    val ministranten: List<SimplifiedMinistrant>,
+    val marks: List<Mark>
+)
+
+object PlanDao {
+
+    suspend fun constructPlan(planId: Int): Plan {
+        val gottesdienste = GottesdiensteDao.getGottesdiensteForPlan(planId)
+        val ministranten = MinistrantenDao.simplifiedMinistranten()
+        val marks = MarksDao.allMarksForPlan(planId)
+
+        return Plan(gottesdienste, ministranten, marks)
+    }
+
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/views/AuthenticationView.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/views/AuthenticationView.kt
@@ -0,0 +1,89 @@
+package de.walamana.views
+
+import at.favre.lib.crypto.bcrypt.BCrypt
+import com.auth0.jwt.JWT
+import com.auth0.jwt.algorithms.Algorithm
+import de.walamana.models.MinistrantenDao
+import de.walamana.plugins.Security
+import de.walamana.plugins.getJWTEnvironment
+import de.walamana.plugins.mid
+import de.walamana.plugins.username
+import io.ktor.server.application.*
+import io.ktor.server.auth.*
+import io.ktor.server.auth.jwt.*
+import io.ktor.server.request.*
+import io.ktor.server.response.*
+import io.ktor.server.routing.*
+import kotlinx.serialization.Serializable
+import java.util.*
+import kotlin.math.max
+import kotlin.math.min
+
+@Serializable
+data class AuthenticationRequest(
+    val username: String,
+    val password: String
+)
+
+@Serializable
+data class AuthenticationResult(
+    val success: Boolean,
+    val token: String? = null
+)
+
+@Serializable
+data class AuthenticationUpdateRequest(
+    val newPassword: String
+)
+
+@Serializable
+data class PasswordResetRequest(
+    val username: String
+)
+
+fun Route.configureAuthenticationRoutes() {
+    route("/auth") {
+        post {
+            val request = call.receive<AuthenticationRequest>()
+            val jwtEnv = application.getJWTEnvironment();
+
+            val ministrant = Security.authenticateUser(application, request.username, request.password)
+            if(ministrant == null){
+                call.respond(AuthenticationResult(false))
+                return@post
+            }
+
+            val token = Security.createToken(jwtEnv, ministrant)
+
+            call.respond(AuthenticationResult(true, token.toString()))
+        }
+
+        authenticate {
+            put("update") {
+                val principal = call.principal<JWTPrincipal>()!!
+                val request = call.receive<AuthenticationUpdateRequest>()
+
+                Security.setPassword(principal.payload.username(), request.newPassword)
+
+                call.respond(hashMapOf("success" to true))
+            }
+            post("reset") {
+                val principal = call.principal<JWTPrincipal>()!!
+                if(principal.payload.username() != "admin") {
+                    // TODO: fail
+                    return@post
+                }
+                val request = call.receive<PasswordResetRequest>()
+                val newPassword = BCrypt.withDefaults()
+                    .hash(Math.random().toInt() * 3 + 4, Math.random().toString().toCharArray())
+                    .toString().substring(3..10);
+
+                Security.setPassword(request.username, newPassword)
+
+                call.respond(hashMapOf("password" to newPassword))
+
+
+            }
+        }
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/views/GottesdiensteView.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/views/GottesdiensteView.kt
@@ -0,0 +1,47 @@
+package de.walamana.views
+
+import de.walamana.models.Gottesdienst
+import de.walamana.models.Gottesdienste
+import de.walamana.models.GottesdiensteDao
+import io.ktor.http.*
+import io.ktor.server.application.*
+import io.ktor.server.request.*
+import io.ktor.server.response.*
+import io.ktor.server.routing.*
+import io.ktor.server.util.*
+
+fun Route.configureGottesdiensteRoutes() {
+    route("/gottesdienste") {
+        get {
+            val data = GottesdiensteDao.allGottesdienste()
+            call.respond(data)
+        }
+        put {
+            val data = call.receive<Gottesdienst>()
+            val gottesdienst = GottesdiensteDao.createGottesdienst(
+                data.name,
+                data.date,
+                data.attendance,
+                data.planId
+            )
+            call.respond(mapOf("id" to gottesdienst?.id))
+        }
+        patch {
+            // TODO: Access only by admin
+            val data = call.receive<Gottesdienst>()
+            val changed = GottesdiensteDao.updateGottesdienst(
+                data.id,
+                data.name,
+                data.date,
+                data.attendance,
+                data.planId
+            )
+            call.respond(HttpStatusCode.OK)
+        }
+        delete {
+            val id = call.request.queryParameters["id"]?.toInt() ?: TODO("fail")
+            GottesdiensteDao.deleteGottesdienst(id)
+            call.respond(HttpStatusCode.OK)
+        }
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/views/MarksView.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/views/MarksView.kt
@@ -0,0 +1,41 @@
+package de.walamana.views
+
+import de.walamana.models.*
+import io.ktor.http.*
+import io.ktor.server.application.*
+import io.ktor.server.request.*
+import io.ktor.server.response.*
+import io.ktor.server.routing.*
+import io.ktor.server.util.*
+
+fun Route.configureMarksView() {
+    route("/marks") {
+        get {
+            val data = MarksDao.allMarksForPlan(call.receiveParameters().getOrFail("id").toInt())
+            call.respond(data)
+        }
+        put {
+            val data = call.receive<Mark>()
+            val mark = MarksDao.setMark(
+                data.mid,
+                data.gid,
+                data.value
+            )
+            call.respond(HttpStatusCode.OK)
+        }
+        patch {
+            // TODO: Access only by admin
+            val data = call.receive<Mark>()
+            val changed = MarksDao.setMark(
+                data.mid,
+                data.gid,
+                data.value
+            )
+            call.respond(HttpStatusCode.OK)
+        }
+        delete {
+            GottesdiensteDao.deleteGottesdienst(call.receiveParameters().getOrFail("id").toInt())
+            call.respond(HttpStatusCode.OK)
+        }
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/views/MinistrantenView.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/views/MinistrantenView.kt
@@ -0,0 +1,50 @@
+package de.walamana.views
+
+import de.walamana.models.Ministrant
+import de.walamana.models.MinistrantenDao
+import io.ktor.http.*
+import io.ktor.server.application.*
+import io.ktor.server.request.*
+import io.ktor.server.response.*
+import io.ktor.server.routing.*
+import io.ktor.server.util.*
+
+fun Route.configureMinistrantenRoutes() {
+    route("/ministranten") {
+        get {
+            val data = MinistrantenDao.allMinistranten();
+            call.respond(data)
+        }
+        put {
+            val data = call.receive<Ministrant>()
+            val ministrant = MinistrantenDao.createMinistrant(
+                data.username,
+                data.passwordHash,
+                data.firstname,
+                data.lastname,
+                data.birthday,
+                data.privileges
+            )
+            call.respond(mapOf("id" to ministrant?.id))
+        }
+        patch {
+            // TODO: Access only by admin
+            val data = call.receive<Ministrant>()
+            val changed = MinistrantenDao.updateMinistrant(
+                data.id,
+                data.username,
+                data.passwordHash,
+                data.firstname,
+                data.lastname,
+                data.birthday,
+                data.privileges
+            )
+            call.respond(HttpStatusCode.OK)
+        }
+        delete {
+            val id = call.request.queryParameters["id"]?.toInt() ?: TODO("fail")
+            MinistrantenDao.deleteMinistrant(id)
+            call.respond(HttpStatusCode.OK)
+        }
+    }
+}
--- a/private/minis-backend/src/main/kotlin/de/walamana/views/PlanView.kt
+++ b/private/minis-backend/src/main/kotlin/de/walamana/views/PlanView.kt
@@ -0,0 +1,18 @@
+package de.walamana.views
+
+import de.walamana.service.PlanDao
+import io.ktor.server.application.*
+import io.ktor.server.request.*
+import io.ktor.server.response.*
+import io.ktor.server.routing.*
+import io.ktor.server.util.*
+
+fun Route.configurePlanRoutes() {
+    route("/plan") {
+        get {
+            val id = call.parameters.getOrFail("id").toInt()
+            val plan = PlanDao.constructPlan(id);
+            call.respond(plan)
+        }
+    }
+}
--- a/private/minis-backend/src/main/resources/application.conf
+++ b/private/minis-backend/src/main/resources/application.conf
@@ -0,0 +1,20 @@
+ktor {
+  development = true
+  deployment {
+    port = 8080
+  }
+  application {
+    modules = [ de.walamana.ApplicationKt.module ]
+  }
+}
+
+jwt {
+  secret = ${SECRET}
+  issuer = "http://0.0.0.0:8080/"
+  audience = "http://0.0.0.0:8080/"
+  realm = "mini-data"
+}
+
+admin {
+  password = ${ADMIN}
+}
--- a/private/minis-backend/src/main/resources/logback.xml
+++ b/private/minis-backend/src/main/resources/logback.xml
@@ -0,0 +1,12 @@
+<configuration>
+    <appender name="STDOUT" class="ch.qos.logback.core.ConsoleAppender">
+        <encoder>
+            <pattern>%d{YYYY-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{36} - %msg%n</pattern>
+        </encoder>
+    </appender>
+    <root level="trace">
+        <appender-ref ref="STDOUT"/>
+    </root>
+    <logger name="org.eclipse.jetty" level="INFO"/>
+    <logger name="io.netty" level="INFO"/>
+</configuration>
--- a/private/minis-backend/src/main/resources/static/index.html
+++ b/private/minis-backend/src/main/resources/static/index.html
@@ -0,0 +1,7 @@
+<html>
+<head>
+</head>
+<body>
+<h1>Hello Ktor!</h1>
+</body>
+</html>
--- a/private/minis-backend/src/test/kotlin/de/walamana/ApplicationTest.kt
+++ b/private/minis-backend/src/test/kotlin/de/walamana/ApplicationTest.kt
@@ -0,0 +1,21 @@
+package de.walamana
+
+import de.walamana.plugins.*
+import io.ktor.client.request.*
+import io.ktor.client.statement.*
+import io.ktor.http.*
+import io.ktor.server.testing.*
+import kotlin.test.*
+
+class ApplicationTest {
+    @Test
+    fun testRoot() = testApplication {
+//        application {
+//            configureRouting()
+//        }
+//        client.get("/").apply {
+//            assertEquals(HttpStatusCode.OK, status)
+//            assertEquals("Hello World!", bodyAsText())
+//        }
+    }
+}