From 97b95b69b9dc669313019eff33a6de8020d23f0c Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 4 Nov 2024 10:17:43 +0100
Subject: [PATCH 01/30] fix: N+1 query

---
 humitifier-server/src/hosts/models.py | 23 ++++++++++++++++++++---
 1 file changed, 20 insertions(+), 3 deletions(-)

diff --git a/humitifier-server/src/hosts/models.py b/humitifier-server/src/hosts/models.py
index 6bc4497..db3582b 100644
--- a/humitifier-server/src/hosts/models.py
+++ b/humitifier-server/src/hosts/models.py
@@ -134,15 +134,32 @@ def regenerate_alerts(self):
 
     @property
     def num_critical_alerts(self):
-        return self.alerts.filter(level=AlertLevel.CRITICAL).count()
+        return self._get_alerts_for_level(AlertLevel.CRITICAL, count=True)
 
     @property
     def num_warning_alerts(self):
-        return self.alerts.filter(level=AlertLevel.WARNING).count()
+        return self._get_alerts_for_level(AlertLevel.WARNING, count=True)
 
     @property
     def num_info_alerts(self):
-        return self.alerts.filter(level=AlertLevel.INFO).count()
+        return self._get_alerts_for_level(AlertLevel.INFO, count=True)
+
+    def _get_alerts_for_level(self, level, count=False):
+        # Use the prefetched objects if they are available
+        # It's not quicker for a single query, but it is for multiple queries
+        # (Read: the list page)
+        if 'alerts' in self._prefetched_objects_cache:
+            alerts =  [alert for alert in self.alerts.all() if (alert.level ==
+                                                             level)]
+            if count:
+                return len(alerts)
+            return alerts
+
+        qs = self.alerts.filter(level=level)
+
+        if count:
+            return qs.count()
+        return qs
 
     ##
     ## Display methods

From d03a63de95e3c47ee0caad3b56b9ba52d3a1c245 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 4 Nov 2024 10:18:12 +0100
Subject: [PATCH 02/30] fix: run server using exec

---
 humitifier-server/docker/entrypoint.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/humitifier-server/docker/entrypoint.sh b/humitifier-server/docker/entrypoint.sh
index 2d263bc..49c4daa 100644
--- a/humitifier-server/docker/entrypoint.sh
+++ b/humitifier-server/docker/entrypoint.sh
@@ -7,4 +7,4 @@ source /app/.venv/bin/activate
 python src/manage.py migrate
 
 # Run da server
-gunicorn humitifier_server.wsgi:application -c gunicorn.conf.py "$@"
\ No newline at end of file
+exec gunicorn humitifier_server.wsgi:application -c gunicorn.conf.py "$@"
\ No newline at end of file

From 4170fc738c47ef742ea16fd414ef64a4d53747c4 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 4 Nov 2024 13:22:37 +0100
Subject: [PATCH 03/30] feat: OIDC login support

---
 humitifier-server/poetry.lock                 | 194 +++++++++++++++++-
 humitifier-server/pyproject.toml              |   1 +
 .../src/humitifier_server/oidc_backend.py     |  35 ++++
 .../src/humitifier_server/settings.py         |  67 ++++++
 .../src/humitifier_server/urls.py             |  20 +-
 .../templates/base/page_parts/header.html     |  10 +-
 6 files changed, 324 insertions(+), 3 deletions(-)
 create mode 100644 humitifier-server/src/humitifier_server/oidc_backend.py

diff --git a/humitifier-server/poetry.lock b/humitifier-server/poetry.lock
index 13d0d4c..82f0f6a 100644
--- a/humitifier-server/poetry.lock
+++ b/humitifier-server/poetry.lock
@@ -121,6 +121,85 @@ files = [
     {file = "certifi-2024.8.30.tar.gz", hash = "sha256:bec941d2aa8195e248a60b31ff9f0558284cf01a52591ceda73ea9afffd69fd9"},
 ]
 
+[[package]]
+name = "cffi"
+version = "1.17.1"
+description = "Foreign Function Interface for Python calling C code."
+optional = false
+python-versions = ">=3.8"
+files = [
+    {file = "cffi-1.17.1-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:df8b1c11f177bc2313ec4b2d46baec87a5f3e71fc8b45dab2ee7cae86d9aba14"},
+    {file = "cffi-1.17.1-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:8f2cdc858323644ab277e9bb925ad72ae0e67f69e804f4898c070998d50b1a67"},
+    {file = "cffi-1.17.1-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:edae79245293e15384b51f88b00613ba9f7198016a5948b5dddf4917d4d26382"},
+    {file = "cffi-1.17.1-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:45398b671ac6d70e67da8e4224a065cec6a93541bb7aebe1b198a61b58c7b702"},
+    {file = "cffi-1.17.1-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:ad9413ccdeda48c5afdae7e4fa2192157e991ff761e7ab8fdd8926f40b160cc3"},
+    {file = "cffi-1.17.1-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:5da5719280082ac6bd9aa7becb3938dc9f9cbd57fac7d2871717b1feb0902ab6"},
+    {file = "cffi-1.17.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:2bb1a08b8008b281856e5971307cc386a8e9c5b625ac297e853d36da6efe9c17"},
+    {file = "cffi-1.17.1-cp310-cp310-musllinux_1_1_aarch64.whl", hash = "sha256:045d61c734659cc045141be4bae381a41d89b741f795af1dd018bfb532fd0df8"},
+    {file = "cffi-1.17.1-cp310-cp310-musllinux_1_1_i686.whl", hash = "sha256:6883e737d7d9e4899a8a695e00ec36bd4e5e4f18fabe0aca0efe0a4b44cdb13e"},
+    {file = "cffi-1.17.1-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:6b8b4a92e1c65048ff98cfe1f735ef8f1ceb72e3d5f0c25fdb12087a23da22be"},
+    {file = "cffi-1.17.1-cp310-cp310-win32.whl", hash = "sha256:c9c3d058ebabb74db66e431095118094d06abf53284d9c81f27300d0e0d8bc7c"},
+    {file = "cffi-1.17.1-cp310-cp310-win_amd64.whl", hash = "sha256:0f048dcf80db46f0098ccac01132761580d28e28bc0f78ae0d58048063317e15"},
+    {file = "cffi-1.17.1-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:a45e3c6913c5b87b3ff120dcdc03f6131fa0065027d0ed7ee6190736a74cd401"},
+    {file = "cffi-1.17.1-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:30c5e0cb5ae493c04c8b42916e52ca38079f1b235c2f8ae5f4527b963c401caf"},
+    {file = "cffi-1.17.1-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:f75c7ab1f9e4aca5414ed4d8e5c0e303a34f4421f8a0d47a4d019ceff0ab6af4"},
+    {file = "cffi-1.17.1-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:a1ed2dd2972641495a3ec98445e09766f077aee98a1c896dcb4ad0d303628e41"},
+    {file = "cffi-1.17.1-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:46bf43160c1a35f7ec506d254e5c890f3c03648a4dbac12d624e4490a7046cd1"},
+    {file = "cffi-1.17.1-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:a24ed04c8ffd54b0729c07cee15a81d964e6fee0e3d4d342a27b020d22959dc6"},
+    {file = "cffi-1.17.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:610faea79c43e44c71e1ec53a554553fa22321b65fae24889706c0a84d4ad86d"},
+    {file = "cffi-1.17.1-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:a9b15d491f3ad5d692e11f6b71f7857e7835eb677955c00cc0aefcd0669adaf6"},
+    {file = "cffi-1.17.1-cp311-cp311-musllinux_1_1_i686.whl", hash = "sha256:de2ea4b5833625383e464549fec1bc395c1bdeeb5f25c4a3a82b5a8c756ec22f"},
+    {file = "cffi-1.17.1-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:fc48c783f9c87e60831201f2cce7f3b2e4846bf4d8728eabe54d60700b318a0b"},
+    {file = "cffi-1.17.1-cp311-cp311-win32.whl", hash = "sha256:85a950a4ac9c359340d5963966e3e0a94a676bd6245a4b55bc43949eee26a655"},
+    {file = "cffi-1.17.1-cp311-cp311-win_amd64.whl", hash = "sha256:caaf0640ef5f5517f49bc275eca1406b0ffa6aa184892812030f04c2abf589a0"},
+    {file = "cffi-1.17.1-cp312-cp312-macosx_10_9_x86_64.whl", hash = "sha256:805b4371bf7197c329fcb3ead37e710d1bca9da5d583f5073b799d5c5bd1eee4"},
+    {file = "cffi-1.17.1-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:733e99bc2df47476e3848417c5a4540522f234dfd4ef3ab7fafdf555b082ec0c"},
+    {file = "cffi-1.17.1-cp312-cp312-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:1257bdabf294dceb59f5e70c64a3e2f462c30c7ad68092d01bbbfb1c16b1ba36"},
+    {file = "cffi-1.17.1-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:da95af8214998d77a98cc14e3a3bd00aa191526343078b530ceb0bd710fb48a5"},
+    {file = "cffi-1.17.1-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:d63afe322132c194cf832bfec0dc69a99fb9bb6bbd550f161a49e9e855cc78ff"},
+    {file = "cffi-1.17.1-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:f79fc4fc25f1c8698ff97788206bb3c2598949bfe0fef03d299eb1b5356ada99"},
+    {file = "cffi-1.17.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:b62ce867176a75d03a665bad002af8e6d54644fad99a3c70905c543130e39d93"},
+    {file = "cffi-1.17.1-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:386c8bf53c502fff58903061338ce4f4950cbdcb23e2902d86c0f722b786bbe3"},
+    {file = "cffi-1.17.1-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:4ceb10419a9adf4460ea14cfd6bc43d08701f0835e979bf821052f1805850fe8"},
+    {file = "cffi-1.17.1-cp312-cp312-win32.whl", hash = "sha256:a08d7e755f8ed21095a310a693525137cfe756ce62d066e53f502a83dc550f65"},
+    {file = "cffi-1.17.1-cp312-cp312-win_amd64.whl", hash = "sha256:51392eae71afec0d0c8fb1a53b204dbb3bcabcb3c9b807eedf3e1e6ccf2de903"},
+    {file = "cffi-1.17.1-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:f3a2b4222ce6b60e2e8b337bb9596923045681d71e5a082783484d845390938e"},
+    {file = "cffi-1.17.1-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:0984a4925a435b1da406122d4d7968dd861c1385afe3b45ba82b750f229811e2"},
+    {file = "cffi-1.17.1-cp313-cp313-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:d01b12eeeb4427d3110de311e1774046ad344f5b1a7403101878976ecd7a10f3"},
+    {file = "cffi-1.17.1-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:706510fe141c86a69c8ddc029c7910003a17353970cff3b904ff0686a5927683"},
+    {file = "cffi-1.17.1-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:de55b766c7aa2e2a3092c51e0483d700341182f08e67c63630d5b6f200bb28e5"},
+    {file = "cffi-1.17.1-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:c59d6e989d07460165cc5ad3c61f9fd8f1b4796eacbd81cee78957842b834af4"},
+    {file = "cffi-1.17.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:dd398dbc6773384a17fe0d3e7eeb8d1a21c2200473ee6806bb5e6a8e62bb73dd"},
+    {file = "cffi-1.17.1-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:3edc8d958eb099c634dace3c7e16560ae474aa3803a5df240542b305d14e14ed"},
+    {file = "cffi-1.17.1-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:72e72408cad3d5419375fc87d289076ee319835bdfa2caad331e377589aebba9"},
+    {file = "cffi-1.17.1-cp313-cp313-win32.whl", hash = "sha256:e03eab0a8677fa80d646b5ddece1cbeaf556c313dcfac435ba11f107ba117b5d"},
+    {file = "cffi-1.17.1-cp313-cp313-win_amd64.whl", hash = "sha256:f6a16c31041f09ead72d69f583767292f750d24913dadacf5756b966aacb3f1a"},
+    {file = "cffi-1.17.1-cp38-cp38-macosx_10_9_x86_64.whl", hash = "sha256:636062ea65bd0195bc012fea9321aca499c0504409f413dc88af450b57ffd03b"},
+    {file = "cffi-1.17.1-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:c7eac2ef9b63c79431bc4b25f1cd649d7f061a28808cbc6c47b534bd789ef964"},
+    {file = "cffi-1.17.1-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:e221cf152cff04059d011ee126477f0d9588303eb57e88923578ace7baad17f9"},
+    {file = "cffi-1.17.1-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:31000ec67d4221a71bd3f67df918b1f88f676f1c3b535a7eb473255fdc0b83fc"},
+    {file = "cffi-1.17.1-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:6f17be4345073b0a7b8ea599688f692ac3ef23ce28e5df79c04de519dbc4912c"},
+    {file = "cffi-1.17.1-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:0e2b1fac190ae3ebfe37b979cc1ce69c81f4e4fe5746bb401dca63a9062cdaf1"},
+    {file = "cffi-1.17.1-cp38-cp38-win32.whl", hash = "sha256:7596d6620d3fa590f677e9ee430df2958d2d6d6de2feeae5b20e82c00b76fbf8"},
+    {file = "cffi-1.17.1-cp38-cp38-win_amd64.whl", hash = "sha256:78122be759c3f8a014ce010908ae03364d00a1f81ab5c7f4a7a5120607ea56e1"},
+    {file = "cffi-1.17.1-cp39-cp39-macosx_10_9_x86_64.whl", hash = "sha256:b2ab587605f4ba0bf81dc0cb08a41bd1c0a5906bd59243d56bad7668a6fc6c16"},
+    {file = "cffi-1.17.1-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:28b16024becceed8c6dfbc75629e27788d8a3f9030691a1dbf9821a128b22c36"},
+    {file = "cffi-1.17.1-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:1d599671f396c4723d016dbddb72fe8e0397082b0a77a4fab8028923bec050e8"},
+    {file = "cffi-1.17.1-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:ca74b8dbe6e8e8263c0ffd60277de77dcee6c837a3d0881d8c1ead7268c9e576"},
+    {file = "cffi-1.17.1-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:f7f5baafcc48261359e14bcd6d9bff6d4b28d9103847c9e136694cb0501aef87"},
+    {file = "cffi-1.17.1-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:98e3969bcff97cae1b2def8ba499ea3d6f31ddfdb7635374834cf89a1a08ecf0"},
+    {file = "cffi-1.17.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:cdf5ce3acdfd1661132f2a9c19cac174758dc2352bfe37d98aa7512c6b7178b3"},
+    {file = "cffi-1.17.1-cp39-cp39-musllinux_1_1_aarch64.whl", hash = "sha256:9755e4345d1ec879e3849e62222a18c7174d65a6a92d5b346b1863912168b595"},
+    {file = "cffi-1.17.1-cp39-cp39-musllinux_1_1_i686.whl", hash = "sha256:f1e22e8c4419538cb197e4dd60acc919d7696e5ef98ee4da4e01d3f8cfa4cc5a"},
+    {file = "cffi-1.17.1-cp39-cp39-musllinux_1_1_x86_64.whl", hash = "sha256:c03e868a0b3bc35839ba98e74211ed2b05d2119be4e8a0f224fba9384f1fe02e"},
+    {file = "cffi-1.17.1-cp39-cp39-win32.whl", hash = "sha256:e31ae45bc2e29f6b2abd0de1cc3b9d5205aa847cafaecb8af1476a609a2f6eb7"},
+    {file = "cffi-1.17.1-cp39-cp39-win_amd64.whl", hash = "sha256:d016c76bdd850f3c626af19b0542c9677ba156e4ee4fccfdd7848803533ef662"},
+    {file = "cffi-1.17.1.tar.gz", hash = "sha256:1c39c6016c32bc48dd54561950ebd6836e1670f2ae46128f67cf49e789c52824"},
+]
+
+[package.dependencies]
+pycparser = "*"
+
 [[package]]
 name = "charset-normalizer"
 version = "3.4.0"
@@ -260,6 +339,55 @@ files = [
     {file = "colorama-0.4.6.tar.gz", hash = "sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44"},
 ]
 
+[[package]]
+name = "cryptography"
+version = "43.0.3"
+description = "cryptography is a package which provides cryptographic recipes and primitives to Python developers."
+optional = false
+python-versions = ">=3.7"
+files = [
+    {file = "cryptography-43.0.3-cp37-abi3-macosx_10_9_universal2.whl", hash = "sha256:bf7a1932ac4176486eab36a19ed4c0492da5d97123f1406cf15e41b05e787d2e"},
+    {file = "cryptography-43.0.3-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:63efa177ff54aec6e1c0aefaa1a241232dcd37413835a9b674b6e3f0ae2bfd3e"},
+    {file = "cryptography-43.0.3-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:7e1ce50266f4f70bf41a2c6dc4358afadae90e2a1e5342d3c08883df1675374f"},
+    {file = "cryptography-43.0.3-cp37-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:443c4a81bb10daed9a8f334365fe52542771f25aedaf889fd323a853ce7377d6"},
+    {file = "cryptography-43.0.3-cp37-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:74f57f24754fe349223792466a709f8e0c093205ff0dca557af51072ff47ab18"},
+    {file = "cryptography-43.0.3-cp37-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:9762ea51a8fc2a88b70cf2995e5675b38d93bf36bd67d91721c309df184f49bd"},
+    {file = "cryptography-43.0.3-cp37-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:81ef806b1fef6b06dcebad789f988d3b37ccaee225695cf3e07648eee0fc6b73"},
+    {file = "cryptography-43.0.3-cp37-abi3-win32.whl", hash = "sha256:cbeb489927bd7af4aa98d4b261af9a5bc025bd87f0e3547e11584be9e9427be2"},
+    {file = "cryptography-43.0.3-cp37-abi3-win_amd64.whl", hash = "sha256:f46304d6f0c6ab8e52770addfa2fc41e6629495548862279641972b6215451cd"},
+    {file = "cryptography-43.0.3-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:8ac43ae87929a5982f5948ceda07001ee5e83227fd69cf55b109144938d96984"},
+    {file = "cryptography-43.0.3-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:846da004a5804145a5f441b8530b4bf35afbf7da70f82409f151695b127213d5"},
+    {file = "cryptography-43.0.3-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:0f996e7268af62598f2fc1204afa98a3b5712313a55c4c9d434aef49cadc91d4"},
+    {file = "cryptography-43.0.3-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:f7b178f11ed3664fd0e995a47ed2b5ff0a12d893e41dd0494f406d1cf555cab7"},
+    {file = "cryptography-43.0.3-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:c2e6fc39c4ab499049df3bdf567f768a723a5e8464816e8f009f121a5a9f4405"},
+    {file = "cryptography-43.0.3-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:e1be4655c7ef6e1bbe6b5d0403526601323420bcf414598955968c9ef3eb7d16"},
+    {file = "cryptography-43.0.3-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:df6b6c6d742395dd77a23ea3728ab62f98379eff8fb61be2744d4679ab678f73"},
+    {file = "cryptography-43.0.3-cp39-abi3-win32.whl", hash = "sha256:d56e96520b1020449bbace2b78b603442e7e378a9b3bd68de65c782db1507995"},
+    {file = "cryptography-43.0.3-cp39-abi3-win_amd64.whl", hash = "sha256:0c580952eef9bf68c4747774cde7ec1d85a6e61de97281f2dba83c7d2c806362"},
+    {file = "cryptography-43.0.3-pp310-pypy310_pp73-macosx_10_9_x86_64.whl", hash = "sha256:d03b5621a135bffecad2c73e9f4deb1a0f977b9a8ffe6f8e002bf6c9d07b918c"},
+    {file = "cryptography-43.0.3-pp310-pypy310_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:a2a431ee15799d6db9fe80c82b055bae5a752bef645bba795e8e52687c69efe3"},
+    {file = "cryptography-43.0.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:281c945d0e28c92ca5e5930664c1cefd85efe80e5c0d2bc58dd63383fda29f83"},
+    {file = "cryptography-43.0.3-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:f18c716be16bc1fea8e95def49edf46b82fccaa88587a45f8dc0ff6ab5d8e0a7"},
+    {file = "cryptography-43.0.3-pp39-pypy39_pp73-macosx_10_9_x86_64.whl", hash = "sha256:4a02ded6cd4f0a5562a8887df8b3bd14e822a90f97ac5e544c162899bc467664"},
+    {file = "cryptography-43.0.3-pp39-pypy39_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:53a583b6637ab4c4e3591a15bc9db855b8d9dee9a669b550f311480acab6eb08"},
+    {file = "cryptography-43.0.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:1ec0bcf7e17c0c5669d881b1cd38c4972fade441b27bda1051665faaa89bdcaa"},
+    {file = "cryptography-43.0.3-pp39-pypy39_pp73-win_amd64.whl", hash = "sha256:2ce6fae5bdad59577b44e4dfed356944fbf1d925269114c28be377692643b4ff"},
+    {file = "cryptography-43.0.3.tar.gz", hash = "sha256:315b9001266a492a6ff443b61238f956b214dbec9910a081ba5b6646a055a805"},
+]
+
+[package.dependencies]
+cffi = {version = ">=1.12", markers = "platform_python_implementation != \"PyPy\""}
+
+[package.extras]
+docs = ["sphinx (>=5.3.0)", "sphinx-rtd-theme (>=1.1.1)"]
+docstest = ["pyenchant (>=1.6.11)", "readme-renderer", "sphinxcontrib-spelling (>=4.0.1)"]
+nox = ["nox"]
+pep8test = ["check-sdist", "click", "mypy", "ruff"]
+sdist = ["build"]
+ssh = ["bcrypt (>=3.1.5)"]
+test = ["certifi", "cryptography-vectors (==43.0.3)", "pretend", "pytest (>=6.2.0)", "pytest-benchmark", "pytest-cov", "pytest-xdist"]
+test-randomorder = ["pytest-randomly"]
+
 [[package]]
 name = "curtsies"
 version = "0.4.2"
@@ -561,6 +689,24 @@ files = [
 [package.dependencies]
 ansicon = {version = "*", markers = "platform_system == \"Windows\""}
 
+[[package]]
+name = "josepy"
+version = "1.14.0"
+description = "JOSE protocol implementation in Python"
+optional = false
+python-versions = ">=3.7,<4.0"
+files = [
+    {file = "josepy-1.14.0-py3-none-any.whl", hash = "sha256:d2b36a30f316269f3242f4c2e45e15890784178af5ec54fa3e49cf9234ee22e0"},
+    {file = "josepy-1.14.0.tar.gz", hash = "sha256:308b3bf9ce825ad4d4bba76372cf19b5dc1c2ce96a9d298f9642975e64bd13dd"},
+]
+
+[package.dependencies]
+cryptography = ">=1.5"
+pyopenssl = ">=0.13"
+
+[package.extras]
+docs = ["sphinx (>=4.3.0)", "sphinx-rtd-theme (>=1.0)"]
+
 [[package]]
 name = "markdown"
 version = "3.7"
@@ -576,6 +722,23 @@ files = [
 docs = ["mdx-gh-links (>=0.2)", "mkdocs (>=1.5)", "mkdocs-gen-files", "mkdocs-literate-nav", "mkdocs-nature (>=0.6)", "mkdocs-section-index", "mkdocstrings[python]"]
 testing = ["coverage", "pyyaml"]
 
+[[package]]
+name = "mozilla-django-oidc"
+version = "4.0.1"
+description = "A lightweight authentication and access management library for integration with OpenID Connect enabled authentication services."
+optional = false
+python-versions = "*"
+files = [
+    {file = "mozilla-django-oidc-4.0.1.tar.gz", hash = "sha256:4ff8c64069e3e05c539cecf9345e73225a99641a25e13b7a5f933ec897b58918"},
+    {file = "mozilla_django_oidc-4.0.1-py2.py3-none-any.whl", hash = "sha256:04ef58759be69f22cdc402d082480aaebf193466cad385dc9e4f8df2a0b187ca"},
+]
+
+[package.dependencies]
+cryptography = "*"
+Django = ">=3.2"
+josepy = "*"
+requests = "*"
+
 [[package]]
 name = "mypy-extensions"
 version = "1.0.0"
@@ -719,6 +882,17 @@ files = [
     {file = "psycopg2_binary-2.9.10-cp39-cp39-win_amd64.whl", hash = "sha256:30e34c4e97964805f715206c7b789d54a78b70f3ff19fbe590104b71c45600e5"},
 ]
 
+[[package]]
+name = "pycparser"
+version = "2.22"
+description = "C parser in Python"
+optional = false
+python-versions = ">=3.8"
+files = [
+    {file = "pycparser-2.22-py3-none-any.whl", hash = "sha256:c3702b6d3dd8c7abc1afa565d7e63d53a1d0bd86cdc24edd75470f4de499cfcc"},
+    {file = "pycparser-2.22.tar.gz", hash = "sha256:491c8be9c040f5390f5bf44a5b07752bd07f56edf992381b05c701439eec10f6"},
+]
+
 [[package]]
 name = "pygments"
 version = "2.18.0"
@@ -733,6 +907,24 @@ files = [
 [package.extras]
 windows-terminal = ["colorama (>=0.4.6)"]
 
+[[package]]
+name = "pyopenssl"
+version = "24.2.1"
+description = "Python wrapper module around the OpenSSL library"
+optional = false
+python-versions = ">=3.7"
+files = [
+    {file = "pyOpenSSL-24.2.1-py3-none-any.whl", hash = "sha256:967d5719b12b243588573f39b0c677637145c7a1ffedcd495a487e58177fbb8d"},
+    {file = "pyopenssl-24.2.1.tar.gz", hash = "sha256:4247f0dbe3748d560dcbb2ff3ea01af0f9a1a001ef5f7c4c647956ed8cbf0e95"},
+]
+
+[package.dependencies]
+cryptography = ">=41.0.5,<44"
+
+[package.extras]
+docs = ["sphinx (!=5.2.0,!=5.2.0.post0,!=7.2.5)", "sphinx-rtd-theme"]
+test = ["pretend", "pytest (>=3.0.1)", "pytest-rerunfailures"]
+
 [[package]]
 name = "python-dateutil"
 version = "2.9.0.post0"
@@ -925,4 +1117,4 @@ brotli = ["brotli"]
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.11"
-content-hash = "9b90c3ab84c9ce2596c31f902fd6f3f9c7d99f57ce6d8c7bab0344ee85a5de88"
+content-hash = "f2a3fb3936f903bd3481633a38f004156863e773f1ca3457c38f0d24f8f4b157"
diff --git a/humitifier-server/pyproject.toml b/humitifier-server/pyproject.toml
index 0eefb52..7ede8c4 100644
--- a/humitifier-server/pyproject.toml
+++ b/humitifier-server/pyproject.toml
@@ -16,6 +16,7 @@ django-debug-toolbar = "^4.4.6"
 django-simple-menu = "^2.1.3"
 whitenoise = "^6.8.2"
 sentry-sdk = {extras = ["django"], version = "^2.17.0"}
+mozilla-django-oidc = "^4.0.1"
 
 
 [tool.poetry.group.dev.dependencies]
diff --git a/humitifier-server/src/humitifier_server/oidc_backend.py b/humitifier-server/src/humitifier_server/oidc_backend.py
new file mode 100644
index 0000000..75f1180
--- /dev/null
+++ b/humitifier-server/src/humitifier_server/oidc_backend.py
@@ -0,0 +1,35 @@
+from mozilla_django_oidc.auth import OIDCAuthenticationBackend
+
+
+class HumitifierOIDCAuthenticationBackend(OIDCAuthenticationBackend):
+
+    def create_user(self, claims):
+        email = claims.get('email')
+        first_name = claims.get('given_name')
+        last_name = claims.get('family_name')
+        username = self.get_username(claims)
+
+        return self.UserModel.objects.create_user(username, email=email,
+                                            first_name=first_name, last_name=last_name)
+
+    def filter_users_by_claims(self, claims):
+        username = self.get_username(claims)
+        if not username:
+            return self.UserModel.objects.none()
+        return self.UserModel.objects.filter(username=username)
+
+    def get_username(self, claims):
+        return claims.get('preferred_username')
+
+    def update_user(self, user, claims):
+        email = claims.get('email')
+        first_name = claims.get('given_name')
+        last_name = claims.get('family_name')
+
+        user.email = email
+        user.first_name = first_name
+        user.last_name = last_name
+
+        user.save()
+
+        return user
\ No newline at end of file
diff --git a/humitifier-server/src/humitifier_server/settings.py b/humitifier-server/src/humitifier_server/settings.py
index 1817d34..8ecab2c 100644
--- a/humitifier-server/src/humitifier_server/settings.py
+++ b/humitifier-server/src/humitifier_server/settings.py
@@ -11,6 +11,11 @@
 """
 
 from pathlib import Path
+import re
+
+from django.core.exceptions import ImproperlyConfigured
+from rest_framework.reverse import reverse_lazy
+
 from . import env
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
@@ -116,6 +121,68 @@
     }
 }
 
+# OpenID Connect
+
+
+LOGIN_REDIRECT_URL = reverse_lazy("main:home")
+LOGOUT_REDIRECT_URL = reverse_lazy("main:home")
+
+
+if env.get_boolean("DJANGO_OIDC_ENABLED", default=False):
+    try:
+        index = INSTALLED_APPS.index('django.contrib.auth')
+        INSTALLED_APPS.insert(index + 1, "mozilla_django_oidc")
+    except ValueError:
+        raise ImproperlyConfigured(
+            "Cannot enable OIDC; django.contrib.auth is not enabled"
+        )
+
+    MIDDLEWARE.append("mozilla_django_oidc.middleware.SessionRefresh")
+
+    AUTHENTICATION_BACKENDS = [
+        "humitifier_server.oidc_backend.HumitifierOIDCAuthenticationBackend",
+        "django.contrib.auth.backends.ModelBackend",
+    ]
+
+    OIDC_EXEMPT_URLS = [
+        re.compile(r"^api/.*$"),
+    ]
+
+    OIDC_CREATE_USER = env.get_boolean("OIDC_CREATE_USER", default=False)
+    OIDC_RP_SCOPES = env.get("OIDC_RP_SCOPES", default="openid email profile")
+
+    OIDC_RP_SIGN_ALGO = env.get("OIDC_RP_SIGN_ALGO", default="RS256")
+
+    if client_id :=env.get("OIDC_RP_CLIENT_ID", default=None):
+        OIDC_RP_CLIENT_ID = client_id
+    else:
+        raise ImproperlyConfigured("OIDC_RP_CLIENT_ID is required")
+
+    if client_secret := env.get("OIDC_RP_CLIENT_SECRET", default=None):
+        OIDC_RP_CLIENT_SECRET = client_secret
+    else:
+        raise ImproperlyConfigured("OIDC_RP_CLIENT_SECRET is required")
+
+    if jwk_endpoint := env.get("OIDC_OP_JWKS_ENDPOINT", default=None):
+        OIDC_OP_JWKS_ENDPOINT = jwk_endpoint
+    else:
+        raise ImproperlyConfigured("OIDC_OP_JWKS_ENDPOINT is required")
+
+    if auth_endpoint := env.get("OIDC_OP_AUTHORIZATION_ENDPOINT", default=None):
+        OIDC_OP_AUTHORIZATION_ENDPOINT = auth_endpoint
+    else:
+        raise ImproperlyConfigured("OIDC_OP_AUTHORIZATION_ENDPOINT is required")
+
+    if token_endpoint := env.get("OIDC_OP_TOKEN_ENDPOINT", default=None):
+        OIDC_OP_TOKEN_ENDPOINT = token_endpoint
+    else:
+        raise ImproperlyConfigured("OIDC_OP_TOKEN_ENDPOINT is required")
+
+    if user_endpoint := env.get("OIDC_OP_USER_ENDPOINT", default=None):
+        OIDC_OP_USER_ENDPOINT = user_endpoint
+    else:
+        raise ImproperlyConfigured("OIDC_OP_USER_ENDPOINT is required")
+
 
 # Security
 
diff --git a/humitifier-server/src/humitifier_server/urls.py b/humitifier-server/src/humitifier_server/urls.py
index 2a989a3..ec59f5c 100644
--- a/humitifier-server/src/humitifier_server/urls.py
+++ b/humitifier-server/src/humitifier_server/urls.py
@@ -18,6 +18,8 @@
 from django.conf import settings
 from django.contrib import admin
 from django.urls import include, path
+from mozilla_django_oidc.urls import OIDCAuthenticateClass, OIDCCallbackClass
+from mozilla_django_oidc.views import OIDCLogoutView
 
 urlpatterns = [
     path("admin/", admin.site.urls),
@@ -31,4 +33,20 @@
 
     urlpatterns = [
         path("__debug__/", include(debug_toolbar.urls)),
-    ] + urlpatterns
\ No newline at end of file
+    ] + urlpatterns
+
+if hasattr(settings, 'OIDC_RP_CLIENT_ID'):
+    # Custom OIDC url conf, because we're hijacking an existing RP config
+    urlpatterns += [
+        path(
+            "redirect_uri/",
+            OIDCCallbackClass.as_view(),
+            name="oidc_authentication_callback"
+        ),
+        path(
+            "oidc/authenticate/",
+            OIDCAuthenticateClass.as_view(),
+            name="oidc_authentication_init",
+        ),
+        path("oidc/logout/", OIDCLogoutView.as_view(), name="oidc_logout"),
+    ]
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/base/page_parts/header.html b/humitifier-server/src/main/templates/base/page_parts/header.html
index 0741e6c..a3ee71b 100644
--- a/humitifier-server/src/main/templates/base/page_parts/header.html
+++ b/humitifier-server/src/main/templates/base/page_parts/header.html
@@ -31,6 +31,14 @@
     </div>
 
     <div class="px-4 flex items-center h-full">
-        Humitifier User
+        {{ user.get_full_name }}
     </div>
+    {% if user.is_authenticated %}
+      <form action="{% url 'oidc_logout' %}" method="post">
+        {% csrf_token %}
+        <input type="submit" value="Logout" class="cursor-pointer">
+      </form>
+    {% else %}
+      <a href="{% url 'oidc_authentication_init' %}">Login</a>
+    {% endif %}
 </div>
\ No newline at end of file

From 2a0474f411ae6dc5ee4dbfea93d341a746a5ad63 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 4 Nov 2024 13:35:49 +0100
Subject: [PATCH 04/30] feat: optional OIDC session refresh

---
 humitifier-server/src/humitifier_server/settings.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/humitifier-server/src/humitifier_server/settings.py b/humitifier-server/src/humitifier_server/settings.py
index 8ecab2c..8aa9dc4 100644
--- a/humitifier-server/src/humitifier_server/settings.py
+++ b/humitifier-server/src/humitifier_server/settings.py
@@ -137,7 +137,8 @@
             "Cannot enable OIDC; django.contrib.auth is not enabled"
         )
 
-    MIDDLEWARE.append("mozilla_django_oidc.middleware.SessionRefresh")
+    if env.get_boolean("DJANGO_OIDC_SESSION_REFRESH", default=False):
+        MIDDLEWARE.append("mozilla_django_oidc.middleware.SessionRefresh")
 
     AUTHENTICATION_BACKENDS = [
         "humitifier_server.oidc_backend.HumitifierOIDCAuthenticationBackend",

From 3b65a5563d93cc12d698ae9a9f7516f1defa7aaf Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 4 Nov 2024 16:16:10 +0100
Subject: [PATCH 05/30] feat: initial authorization + login logic

---
 humitifier-server/src/hosts/menus.py          |   4 +
 humitifier-server/src/hosts/models.py         |  18 +-
 humitifier-server/src/hosts/views.py          |  19 +-
 .../src/humitifier_server/settings.py         |   5 +-
 .../src/main/context_processors.py            |   3 +
 humitifier-server/src/main/menus.py           |   4 +
 .../src/main/static/main/css/tailwind.css     | 182 +++++++++++++++++-
 .../templates/base/base_html_template.html    |  33 ++++
 .../templates/base/base_page_template.html    |  46 +----
 .../main/templates/registration/login.html    |  77 ++++++++
 humitifier-server/src/main/urls.py            |   3 +
 humitifier-server/src/main/views.py           |  59 +++++-
 12 files changed, 396 insertions(+), 57 deletions(-)
 create mode 100644 humitifier-server/src/main/templates/base/base_html_template.html
 create mode 100644 humitifier-server/src/main/templates/registration/login.html

diff --git a/humitifier-server/src/hosts/menus.py b/humitifier-server/src/hosts/menus.py
index 1d809f4..1fc7213 100644
--- a/humitifier-server/src/hosts/menus.py
+++ b/humitifier-server/src/hosts/menus.py
@@ -9,6 +9,7 @@
         weight=10,
         icon="icons/host.html",
         separator=True,
+        check=lambda request: request.user.is_authenticated,
     )
 )
 
@@ -19,6 +20,7 @@
         reverse("hosts:tasks"),
         weight=10,
         icon="icons/tasks.html",
+        check=lambda request: request.user.is_superuser,
     )
 )
 
@@ -29,6 +31,7 @@
         reverse("hosts:scan_profiles"),
         weight=10,
         icon="icons/terminal.html",
+        check=lambda request: request.user.is_superuser,
     )
 )
 
@@ -39,5 +42,6 @@
         reverse("hosts:data_sources"),
         weight=10,
         icon="icons/databases.html",
+        check=lambda request: request.user.is_superuser,
     )
 )
diff --git a/humitifier-server/src/hosts/models.py b/humitifier-server/src/hosts/models.py
index db3582b..d7eea56 100644
--- a/humitifier-server/src/hosts/models.py
+++ b/humitifier-server/src/hosts/models.py
@@ -41,7 +41,14 @@ def _json_value(field: str):
 class HostManager(models.Manager):
 
     def get_for_user(self, user):
-        # TODO: implement this when we have user support
+        if user.is_anonymous:
+            return self.get_queryset().none()
+
+        if user.is_superuser:
+            return self.get_queryset()
+
+        # TODO: access profile
+
         return self.get_queryset()
 
 
@@ -208,7 +215,14 @@ class Meta:
 class AlertManager(models.Manager):
 
         def get_for_user(self, user):
-            # TODO: implement this when we have user support
+            if user.is_anonymous:
+                return self.get_queryset().none()
+
+            if user.is_superuser:
+                return self.get_queryset()
+
+            # TODO: access profile
+
             return self.get_queryset()
 
 
diff --git a/humitifier-server/src/hosts/views.py b/humitifier-server/src/hosts/views.py
index 706805c..23b1011 100644
--- a/humitifier-server/src/hosts/views.py
+++ b/humitifier-server/src/hosts/views.py
@@ -1,5 +1,6 @@
 import json
 
+from django.contrib.auth.mixins import LoginRequiredMixin
 from django.core.exceptions import ObjectDoesNotExist, ValidationError
 from django.forms import Form
 from django.http import HttpResponse, HttpResponseRedirect
@@ -11,14 +12,14 @@
     SingleObjectTemplateResponseMixin
 from django.views.generic.edit import FormMixin
 
-from main.views import FilteredListView
+from main.views import FilteredListView, SuperuserRequiredMixin
 
 from .filters import HostFilters
 from .models import Host
 
 # Create your views here.
 
-class HostsListView(FilteredListView):
+class HostsListView(LoginRequiredMixin, FilteredListView):
     model = Host
     filterset_class = HostFilters
     paginate_by = 50
@@ -49,7 +50,7 @@ def get_queryset(self):
 
         return filtered_qs.distinct()
 
-class HostDetailView(TemplateView):
+class HostDetailView(LoginRequiredMixin, TemplateView):
     template_name = 'hosts/detail.html'
 
     LATEST_KEY = 'latest'
@@ -88,7 +89,7 @@ def get_context_data(self, **kwargs):
         return context
 
 
-class HostsRawDownloadView(View):
+class HostsRawDownloadView(LoginRequiredMixin, View):
 
     def get(self, request, fqdn):
         host = Host.objects.get_for_user(request.user).get(fqdn=fqdn)
@@ -113,6 +114,8 @@ def get(self, request, fqdn):
 
 
 class ArchiveHostView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
     SingleObjectTemplateResponseMixin,
     FormMixin,
     BaseDetailView
@@ -154,14 +157,14 @@ def form_valid(self, form):
         return HttpResponseRedirect(success_url)
 
 
-class ExportView(TemplateView):
+class ExportView(LoginRequiredMixin, TemplateView):
     template_name = 'main/not_implemented.html'
 
-class TasksView(TemplateView):
+class TasksView(LoginRequiredMixin, SuperuserRequiredMixin, TemplateView):
     template_name = 'main/not_implemented.html'
 
-class ScanProfilesView(TemplateView):
+class ScanProfilesView(LoginRequiredMixin, SuperuserRequiredMixin, TemplateView):
     template_name = 'main/not_implemented.html'
 
-class DataSourcesView(TemplateView):
+class DataSourcesView(LoginRequiredMixin, SuperuserRequiredMixin, TemplateView):
     template_name = 'main/not_implemented.html'
\ No newline at end of file
diff --git a/humitifier-server/src/humitifier_server/settings.py b/humitifier-server/src/humitifier_server/settings.py
index 8aa9dc4..470470d 100644
--- a/humitifier-server/src/humitifier_server/settings.py
+++ b/humitifier-server/src/humitifier_server/settings.py
@@ -121,12 +121,13 @@
     }
 }
 
-# OpenID Connect
-
+# Authentication
 
+LOGIN_URL = reverse_lazy("main:login")
 LOGIN_REDIRECT_URL = reverse_lazy("main:home")
 LOGOUT_REDIRECT_URL = reverse_lazy("main:home")
 
+## OpenID Connect
 
 if env.get_boolean("DJANGO_OIDC_ENABLED", default=False):
     try:
diff --git a/humitifier-server/src/main/context_processors.py b/humitifier-server/src/main/context_processors.py
index a7867de..bcdcdaf 100644
--- a/humitifier-server/src/main/context_processors.py
+++ b/humitifier-server/src/main/context_processors.py
@@ -18,6 +18,8 @@ def layout_context(request):
 
     wild_wasteland = settings.DEBUG  # TODO: user setting
 
+    oidc_enabled = hasattr(settings, "OIDC_RP_CLIENT_ID")
+
     if wild_wasteland:
         jokes = [
             "Performs best on a 386",
@@ -40,6 +42,7 @@ def layout_context(request):
             "num_info_alerts": all_alerts.filter(level=AlertLevel.INFO).count(),
             "num_warning_alerts": all_alerts.filter(level=AlertLevel.WARNING).count(),
             "num_critical_alerts": all_alerts.filter(level=AlertLevel.CRITICAL).count(),
+            "oidc_enabled": oidc_enabled,
             "wild_wasteland": wild_wasteland,
             "tag_line": tag_line,
         }
diff --git a/humitifier-server/src/main/menus.py b/humitifier-server/src/main/menus.py
index f050b55..0cf2237 100644
--- a/humitifier-server/src/main/menus.py
+++ b/humitifier-server/src/main/menus.py
@@ -8,6 +8,7 @@
         reverse("main:dashboard"),
         weight=1,
         icon="icons/dashboard.html",
+        check=lambda request: request.user.is_authenticated,
     )
 )
 
@@ -19,6 +20,7 @@
         weight=20,
         icon="icons/users.html",
         separator=True,
+        check=lambda request: request.user.is_superuser,
     )
 )
 
@@ -28,6 +30,7 @@
         "Access profiles",
         reverse("main:access_profiles"),
         weight=21,
+        check=lambda request: request.user.is_superuser,
         icon="icons/shield.html",
     )
 )
@@ -38,6 +41,7 @@
         "OAuth2 Applications",
         reverse("main:oauth_applications"),
         weight=21,
+        check=lambda request: request.user.is_superuser,
         icon="icons/api.html",
     )
 )
diff --git a/humitifier-server/src/main/static/main/css/tailwind.css b/humitifier-server/src/main/static/main/css/tailwind.css
index ce746a2..7a51916 100644
--- a/humitifier-server/src/main/static/main/css/tailwind.css
+++ b/humitifier-server/src/main/static/main/css/tailwind.css
@@ -693,6 +693,25 @@ video {
   background-color: rgb(63 63 70 / var(--tw-bg-opacity));
 }
 
+.btn-primary {
+  --tw-bg-opacity: 1;
+  background-color: rgb(255 205 0 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
+.btn-primary:hover {
+  --tw-bg-opacity: 1;
+  background-color: rgb(234 179 8 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
+.text-orange {
+  --tw-text-opacity: 1;
+  color: rgb(249 115 22 / var(--tw-text-opacity));
+}
+
 .visible {
   visibility: visible;
 }
@@ -754,6 +773,11 @@ video {
   margin-bottom: 0.5rem;
 }
 
+.mx-auto {
+  margin-left: auto;
+  margin-right: auto;
+}
+
 .mb-0 {
   margin-bottom: 0px;
 }
@@ -790,12 +814,32 @@ video {
   margin-top: 1rem;
 }
 
+.mt-6 {
+  margin-top: 1.5rem;
+}
+
+.mb-8 {
+  margin-bottom: 2rem;
+}
+
 .mt-3 {
   margin-top: 0.75rem;
 }
 
-.mt-6 {
-  margin-top: 1.5rem;
+.mb-7 {
+  margin-bottom: 1.75rem;
+}
+
+.mb-2 {
+  margin-bottom: 0.5rem;
+}
+
+.mb-20 {
+  margin-bottom: 5rem;
+}
+
+.mb-10 {
+  margin-bottom: 2.5rem;
 }
 
 .block {
@@ -848,6 +892,18 @@ video {
   height: 100vh;
 }
 
+.h-dvh {
+  height: 100dvh;
+}
+
+.h-24 {
+  height: 6rem;
+}
+
+.h-px {
+  height: 1px;
+}
+
 .max-h-\[50vh\] {
   max-height: 50vh;
 }
@@ -876,6 +932,14 @@ video {
   width: 100%;
 }
 
+.w-dvw {
+  width: 100dvw;
+}
+
+.w-24 {
+  width: 6rem;
+}
+
 .flex-shrink {
   flex-shrink: 1;
 }
@@ -968,6 +1032,10 @@ video {
   justify-content: flex-end;
 }
 
+.justify-center {
+  justify-content: center;
+}
+
 .justify-between {
   justify-content: space-between;
 }
@@ -984,6 +1052,14 @@ video {
   gap: 1rem;
 }
 
+.gap-5 {
+  gap: 1.25rem;
+}
+
+.gap-8 {
+  gap: 2rem;
+}
+
 .gap-x-2 {
   -moz-column-gap: 0.5rem;
        column-gap: 0.5rem;
@@ -1119,6 +1195,21 @@ video {
   background-color: rgb(255 255 255 / var(--tw-bg-opacity));
 }
 
+.bg-gray-400 {
+  --tw-bg-opacity: 1;
+  background-color: rgb(161 161 170 / var(--tw-bg-opacity));
+}
+
+.bg-gray-600 {
+  --tw-bg-opacity: 1;
+  background-color: rgb(82 82 91 / var(--tw-bg-opacity));
+}
+
+.bg-gray-50 {
+  --tw-bg-opacity: 1;
+  background-color: rgb(250 250 250 / var(--tw-bg-opacity));
+}
+
 .stroke-2 {
   stroke-width: 2;
 }
@@ -1139,6 +1230,10 @@ video {
   padding: 1.25rem;
 }
 
+.p-8 {
+  padding: 2rem;
+}
+
 .px-2 {
   padding-left: 0.5rem;
   padding-right: 0.5rem;
@@ -1247,6 +1342,11 @@ video {
   line-height: 1.75rem;
 }
 
+.text-4xl {
+  font-size: 2.25rem;
+  line-height: 2.5rem;
+}
+
 .font-bold {
   font-weight: 700;
 }
@@ -1319,6 +1419,11 @@ video {
   color: rgb(255 255 255 / var(--tw-text-opacity));
 }
 
+.text-gray-600 {
+  --tw-text-opacity: 1;
+  color: rgb(82 82 91 / var(--tw-text-opacity));
+}
+
 .underline {
   text-decoration-line: underline;
 }
@@ -1400,6 +1505,20 @@ html:not(.dark) .light\:btn-primary:hover {
   background-color: rgb(63 63 70 / var(--tw-bg-opacity));
 }
 
+.dark\:btn-primary:where(.dark, .dark *) {
+  --tw-bg-opacity: 1;
+  background-color: rgb(255 205 0 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
+.dark\:btn-primary:where(.dark, .dark *):hover {
+  --tw-bg-opacity: 1;
+  background-color: rgb(234 179 8 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
 .last\:mb-0:last-child {
   margin-bottom: 0px;
 }
@@ -1436,6 +1555,22 @@ html:not(.dark) .light\:btn-primary:hover {
     width: 16rem;
   }
 
+  .md\:w-96 {
+    width: 24rem;
+  }
+
+  .md\:w-\[100rem\] {
+    width: 100rem;
+  }
+
+  .md\:w-\[70rem\] {
+    width: 70rem;
+  }
+
+  .md\:w-\[60rem\] {
+    width: 60rem;
+  }
+
   .md\:translate-x-0 {
     --tw-translate-x: 0px;
     transform: translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));
@@ -1444,6 +1579,10 @@ html:not(.dark) .light\:btn-primary:hover {
   .md\:grid-cols-\[1fr_2fr\] {
     grid-template-columns: 1fr 2fr;
   }
+
+  .md\:flex-row {
+    flex-direction: row;
+  }
 }
 
 @media (min-width: 1024px) {
@@ -1451,10 +1590,34 @@ html:not(.dark) .light\:btn-primary:hover {
     display: table-cell;
   }
 
+  .lg\:h-auto {
+    height: auto;
+  }
+
+  .lg\:w-96 {
+    width: 24rem;
+  }
+
+  .lg\:w-\[60rem\] {
+    width: 60rem;
+  }
+
   .lg\:columns-2 {
     -moz-columns: 2;
          columns: 2;
   }
+
+  .lg\:flex-row {
+    flex-direction: row;
+  }
+
+  .lg\:justify-center {
+    justify-content: center;
+  }
+
+  .lg\:justify-between {
+    justify-content: space-between;
+  }
 }
 
 @media (min-width: 1280px) {
@@ -1569,6 +1732,21 @@ html:not(.dark) .light\:btn-primary:hover {
   background-color: rgb(153 27 27 / var(--tw-bg-opacity));
 }
 
+.dark\:bg-gray-400:where(.dark, .dark *) {
+  --tw-bg-opacity: 1;
+  background-color: rgb(161 161 170 / var(--tw-bg-opacity));
+}
+
+.dark\:bg-gray-300:where(.dark, .dark *) {
+  --tw-bg-opacity: 1;
+  background-color: rgb(212 212 216 / var(--tw-bg-opacity));
+}
+
+.dark\:bg-gray-500:where(.dark, .dark *) {
+  --tw-bg-opacity: 1;
+  background-color: rgb(113 113 122 / var(--tw-bg-opacity));
+}
+
 .dark\:text-blue-300:where(.dark, .dark *) {
   --tw-text-opacity: 1;
   color: rgb(147 197 253 / var(--tw-text-opacity));
diff --git a/humitifier-server/src/main/templates/base/base_html_template.html b/humitifier-server/src/main/templates/base/base_html_template.html
new file mode 100644
index 0000000..f7196da
--- /dev/null
+++ b/humitifier-server/src/main/templates/base/base_html_template.html
@@ -0,0 +1,33 @@
+{% load static %}
+
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>{% block page_title %}Humitifier{% endblock %}</title>
+    <script src="{% static 'main/js/alpine.min.js' %}" defer></script>
+    <link rel="stylesheet" href="{% static 'main/css/tailwind.css' %}">
+    {% if debug %}
+        <style>
+            #djDebug #djDebugToolbarHandle {
+                bottom: 35px;
+                top: unset !important;
+            }
+        </style>
+    {% endif %}
+    {% block head %}{% endblock %}
+    <script>
+        function setTheme() {
+            document.documentElement.classList.toggle(
+                'dark',
+                localStorage.theme === 'dark' || (!('theme' in localStorage) && window.matchMedia('(prefers-color-scheme: dark)').matches)
+            )
+        }
+        setTheme();
+    </script>
+</head>
+<body class="bg-gray-200 text-gray-900 dark:bg-gray-950 dark:text-gray-50 transition ease-in-out duration-150" x-data="{show_sidebar:false}">
+{% block body %}{% endblock %}
+</body>
+</html>
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/base/base_page_template.html b/humitifier-server/src/main/templates/base/base_page_template.html
index c4a75a7..ad42c73 100644
--- a/humitifier-server/src/main/templates/base/base_page_template.html
+++ b/humitifier-server/src/main/templates/base/base_page_template.html
@@ -1,42 +1,14 @@
+{% extends 'base/base_html_template.html' %}
 {% load static %}
 
-<!DOCTYPE html>
-<html>
-<head>
-    <meta charset="utf-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1">
-    <title>{% block page_title %}Humitifier{% endblock %}</title>
-    <script src="{% static 'main/js/alpine.min.js' %}" defer></script>
-    <link rel="stylesheet" href="{% static 'main/css/tailwind.css' %}">
-    {% if debug %}
-        <style>
-            #djDebug #djDebugToolbarHandle {
-                bottom: 35px;
-                top: unset !important;
-            }
-        </style>
-    {% endif %}
-    {% block head %}{% endblock %}
-    <script>
-        function setTheme() {
-            document.documentElement.classList.toggle(
-                'dark',
-                localStorage.theme === 'dark' || (!('theme' in localStorage) && window.matchMedia('(prefers-color-scheme: dark)').matches)
-            )
-        }
-        setTheme();
-    </script>
-</head>
-<body class="bg-gray-200 text-gray-900 dark:bg-gray-950 dark:text-gray-50 transition ease-in-out duration-150" x-data="{show_sidebar:false}">
+{% block body %}
+    {% include 'base/page_parts/sidebar.html' %}
 
-{% include 'base/page_parts/sidebar.html' %}
+    <section class="relative top-0 md:ml-72 min-h-screen">
+        {% include 'base/page_parts/header.html' %}
 
-<section class="relative top-0 md:ml-72 min-h-screen">
-    {% include 'base/page_parts/header.html' %}
+        {% block content %}
+        {% endblock %}
 
-    {% block content %}
-    {% endblock %}
-
-</section>
-</body>
-</html>
\ No newline at end of file
+    </section>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/registration/login.html b/humitifier-server/src/main/templates/registration/login.html
new file mode 100644
index 0000000..39c366f
--- /dev/null
+++ b/humitifier-server/src/main/templates/registration/login.html
@@ -0,0 +1,77 @@
+{% extends 'base/base_html_template.html' %}
+{% load static %}
+
+{% block page_title %}Login {{ block.super }}{% endblock %}
+
+
+{% block body %}
+    <div class="w-dvw h-dvh flex flex-col items-center lg:justify-center">
+
+        <section class="flex flex-col lg:flex-row gap-8 items-center lg:justify-between w-full lg:w-[60rem] h-full lg:h-auto bg-gray-50 dark:bg-gray-800 p-8 rounded">
+            <div class="flex items-center justify-center gap-3">
+                <img
+                    src="{% static 'main/img/cm_hs_avatar_corporate.png' %}"
+                    alt="UU Logo"
+                    class="w-24 h-24"
+                />
+                <div>
+                <div class="text-4xl font-semibold">
+                    Humitifier
+                </div>
+                    <div class="text-gray-600 dark:text-gray-400">
+                        Humanities-IT Services CMDB
+                    </div>
+                </div>
+            </div>
+            <div class="w-full lg:w-96">
+                <h1 class="text-3xl font-semibold mb-10">Login</h1>
+
+                {% if user.is_authenticated  %}
+                    <p class="text-orange mb-7">
+                        Your account doesn't have access to this page. To proceed,
+                        please login with an account that has access.
+                    </p>
+                {% endif %}
+
+                {% if form.errors %}
+                    <p class="text-red-500 mb-4">Your username and password didn't match. Please try again.</p>
+                {% endif %}
+
+                <form method="post" action="{% url 'main:login' %}" class="flex gap-4 flex-col">
+                    {% csrf_token %}
+                    <div class="">
+                        <label class="font-bold block mb-2">
+                            {{ form.username.label_tag }}
+                        </label>
+                        <div class="">
+                            {{ form.username }}
+                        </div>
+                    </div>
+                    <div class="">
+                        <label class="font-bold block mb-2">
+                            {{ form.password.label_tag }}
+                        </label>
+                        <div class="">
+                            {{ form.password }}
+                        </div>
+                    </div>
+                    <input type="hidden" name="next" value="{{ next }}">
+                    <button class="btn light:btn-primary dark:btn-outline dark:bg-gray-700 mt-4" type="submit">
+                        Login
+                    </button>
+                </form>
+
+                {% if layout.oidc_enabled %}
+                    <div class="flex items-center gap-2 mt-3 mb-3">
+                        <div class="h-px bg-gray-600 dark:bg-gray-500 flex-grow"></div>
+                        <div>or</div>
+                        <div class="h-px bg-gray-600 dark:bg-gray-500 flex-grow"></div>
+                    </div>
+                    <a href="{% url 'oidc_authentication_init' %}" class="btn block light:btn-primary dark:btn-outline dark:bg-gray-700 text-center">
+                        Login with Solis-ID
+                    </a>
+                {% endif %}
+            </div>
+        </section>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/urls.py b/humitifier-server/src/main/urls.py
index 66cb867..fca87e0 100644
--- a/humitifier-server/src/main/urls.py
+++ b/humitifier-server/src/main/urls.py
@@ -1,3 +1,4 @@
+from django.contrib.auth.views import LoginView
 from django.urls import path
 
 from .views import AccessProfilesView, DashboardView, HomeRedirectView, \
@@ -12,4 +13,6 @@
     path("users/", UsersView.as_view(), name="users"),
     path("access-profiles/", AccessProfilesView.as_view(), name="access_profiles"),
     path("oauth-applications/", OAuthApplicationsView.as_view(), name="oauth_applications"),
+
+    path("login", LoginView.as_view(), name="login"),
 ]
diff --git a/humitifier-server/src/main/views.py b/humitifier-server/src/main/views.py
index f7c247b..cd647a0 100644
--- a/humitifier-server/src/main/views.py
+++ b/humitifier-server/src/main/views.py
@@ -1,9 +1,48 @@
+from urllib.parse import urlparse
+
+from django.contrib.auth.mixins import AccessMixin, LoginRequiredMixin
+from django.contrib.auth.views import redirect_to_login
 from django.db.models import Count
+from django.shortcuts import resolve_url
 from django.urls import reverse
 from django.views.generic import ListView, RedirectView, TemplateView
 
 from hosts.filters import AlertFilters
-from hosts.models import Alert, AlertType, Host
+from hosts.models import Alert, Host
+
+###
+### Mixins
+###
+
+class SuperuserRequiredMixin(AccessMixin):
+    """
+    Require users to be superusers to access the view.
+    """
+
+    def dispatch(self, request, *args, **kwargs):
+        """Call the appropriate handler if the user is a superuser"""
+        if not request.user.is_superuser:
+            return self.handle_no_permission()
+
+        return super().dispatch(request, *args, **kwargs)
+
+    def handle_no_permission(self):
+        """Redirect to the login page if the user is not a superuser"""
+        path = self.request.build_absolute_uri()
+        resolved_login_url = resolve_url(self.get_login_url())
+        # If the login url is the same scheme and net location then use the
+        # path as the "next" url.
+        login_scheme, login_netloc = urlparse(resolved_login_url)[:2]
+        current_scheme, current_netloc = urlparse(path)[:2]
+        if (not login_scheme or login_scheme == current_scheme) and (
+                not login_netloc or login_netloc == current_netloc
+        ):
+            path = self.request.get_full_path()
+        return redirect_to_login(
+            path,
+            resolved_login_url,
+            self.get_redirect_field_name(),
+        )
 
 
 ###
@@ -70,14 +109,14 @@ def get_ordering_fields(self):
 ### Page views
 ###
 
-class HomeRedirectView(RedirectView):
+class HomeRedirectView(LoginRequiredMixin, RedirectView):
 
     def get_redirect_url(self, *args, **kwargs):
         # TODO: user preferences
         return reverse('hosts:list')
 
 
-class DashboardView(FilteredListView):
+class DashboardView(LoginRequiredMixin, FilteredListView):
     model = Alert
     filterset_class = AlertFilters
     paginate_by = 20
@@ -126,11 +165,19 @@ def get_context_data(self, **kwargs):
 
         return context
 
-class UsersView(TemplateView):
+class UsersView(LoginRequiredMixin, SuperuserRequiredMixin, TemplateView):
     template_name = 'main/not_implemented.html'
 
-class AccessProfilesView(TemplateView):
+class AccessProfilesView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    TemplateView
+):
     template_name = 'main/not_implemented.html'
 
-class OAuthApplicationsView(TemplateView):
+class OAuthApplicationsView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    TemplateView
+):
     template_name = 'main/not_implemented.html'
\ No newline at end of file

From 503e32db46ea6881f0fb925bb1e5f910111757c5 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 4 Nov 2024 16:47:56 +0100
Subject: [PATCH 06/30] feat: implement access profiles and some user
 attributes

---
 humitifier-server/src/hosts/models.py         | 18 +++--
 .../src/main/context_processors.py            |  4 +-
 ...ccessprofile_user_default_home_and_more.py | 66 +++++++++++++++++++
 humitifier-server/src/main/models.py          | 62 ++++++++++++++++-
 4 files changed, 144 insertions(+), 6 deletions(-)
 create mode 100644 humitifier-server/src/main/migrations/0002_accessprofile_user_default_home_and_more.py

diff --git a/humitifier-server/src/hosts/models.py b/humitifier-server/src/hosts/models.py
index d7eea56..005277e 100644
--- a/humitifier-server/src/hosts/models.py
+++ b/humitifier-server/src/hosts/models.py
@@ -47,9 +47,14 @@ def get_for_user(self, user):
         if user.is_superuser:
             return self.get_queryset()
 
-        # TODO: access profile
+        if user.access_profile:
+            return self.get_queryset().filter(
+                department__in=user.access_profile.departments_for_filter
+            )
 
-        return self.get_queryset()
+        # When a non-superuser has no access profile, THEY GET NOTHING
+        # They lose! Good day sir!
+        return self.get_queryset().none()
 
 
 class Host(models.Model):
@@ -221,9 +226,14 @@ def get_for_user(self, user):
             if user.is_superuser:
                 return self.get_queryset()
 
-            # TODO: access profile
+            if user.access_profile:
+                return self.get_queryset().filter(
+                    host__department__in=user.access_profile.departments_for_filter
+                )
 
-            return self.get_queryset()
+            # When a non-superuser has no access profile, THEY GET NOTHING
+            # They lose! Good day sir!
+            return self.get_queryset().none()
 
 
 class Alert(models.Model):
diff --git a/humitifier-server/src/main/context_processors.py b/humitifier-server/src/main/context_processors.py
index bcdcdaf..bc2b557 100644
--- a/humitifier-server/src/main/context_processors.py
+++ b/humitifier-server/src/main/context_processors.py
@@ -16,7 +16,9 @@ def layout_context(request):
 
     tag_line = "HumIT CMDB"
 
-    wild_wasteland = settings.DEBUG  # TODO: user setting
+    wild_wasteland = False
+    if user.is_authenticated:
+        wild_wasteland = user.wild_wasteland_mode
 
     oidc_enabled = hasattr(settings, "OIDC_RP_CLIENT_ID")
 
diff --git a/humitifier-server/src/main/migrations/0002_accessprofile_user_default_home_and_more.py b/humitifier-server/src/main/migrations/0002_accessprofile_user_default_home_and_more.py
new file mode 100644
index 0000000..e04b2bd
--- /dev/null
+++ b/humitifier-server/src/main/migrations/0002_accessprofile_user_default_home_and_more.py
@@ -0,0 +1,66 @@
+# Generated by Django 5.1.2 on 2024-11-04 15:34
+
+import django.contrib.postgres.fields
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("main", "0001_initial"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="AccessProfile",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("name", models.CharField(max_length=200)),
+                ("description", models.TextField(blank=True)),
+                (
+                    "departments",
+                    django.contrib.postgres.fields.ArrayField(
+                        base_field=models.CharField(max_length=200), size=None
+                    ),
+                ),
+            ],
+        ),
+        migrations.AddField(
+            model_name="user",
+            name="default_home",
+            field=models.CharField(
+                choices=[("dashboard", "Dashboard"), ("hosts", "Hosts")],
+                default="hosts",
+                max_length=20,
+            ),
+        ),
+        migrations.AddField(
+            model_name="user",
+            name="is_local_account",
+            field=models.BooleanField(default=True),
+        ),
+        migrations.AddField(
+            model_name="user",
+            name="wild_wasteland_mode",
+            field=models.BooleanField(default=False),
+        ),
+        migrations.AddField(
+            model_name="user",
+            name="access_profile",
+            field=models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.SET_NULL,
+                to="main.accessprofile",
+            ),
+        ),
+    ]
diff --git a/humitifier-server/src/main/models.py b/humitifier-server/src/main/models.py
index c8e51ca..73d8e76 100644
--- a/humitifier-server/src/main/models.py
+++ b/humitifier-server/src/main/models.py
@@ -1,7 +1,67 @@
 from django.contrib.auth.models import AbstractUser
+from django.contrib.postgres.fields import ArrayField
 from django.db import models
 
 # Create your models here.
 
+class HomeOptions(models.TextChoices):
+    DASHBOARD = 'dashboard', 'Dashboard'
+    HOSTS = 'hosts', 'Hosts'
+
 class User(AbstractUser):
-    pass
\ No newline at end of file
+
+    is_local_account = models.BooleanField(default=True)
+
+    wild_wasteland_mode = models.BooleanField(default=False)
+
+    default_home = models.CharField(
+        max_length=20,
+        choices=HomeOptions.choices,
+        default=HomeOptions.HOSTS
+    )
+
+    access_profile = models.ForeignKey(
+        'AccessProfile',
+        blank=True,
+        null=True,
+        on_delete=models.SET_NULL
+    )
+
+
+class AccessProfile(models.Model):
+    name = models.CharField(max_length=200)
+    description = models.TextField(blank=True)
+
+    departments = ArrayField(
+        models.CharField(max_length=200),
+    )
+
+    @property
+    def departments_for_filter(self):
+        departments = []
+
+        for department in self.departments:
+            departments.append(department)
+
+            # Explanation for the following: the department field on hosts
+            # is generated from JSON data. For some reason, this adds
+            # quotes around the department name.
+            # The following code is some safeguarding to make sure that
+            # the filter works as expected. (As 'self.departments' is human
+            # input)
+
+            # If we have a department with quotes, we need to add an option
+            # without quotes as well, just to be sure.
+            if department.endswith('"'):
+                departments.append(department[1:-1])
+            # And the other way around too
+            else:
+                departments.append(f'"{department}"')
+
+        return departments
+
+    def __str__(self):
+        return self.name
+
+    def __repr__(self):
+        return f"<AccessProfile: {self.name}>"
\ No newline at end of file

From b746a96c5aa25da8cca72f890b42a9aa5b652be7 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 4 Nov 2024 17:16:03 +0100
Subject: [PATCH 07/30] feat: implement favicon

---
 .../src/main/static/main/img/favicon.ico      | Bin 15406 -> 15086 bytes
 .../main/img/wild_wasteland_favicon.ico       | Bin 0 -> 15406 bytes
 .../templates/base/base_html_template.html    |   7 +++++++
 3 files changed, 7 insertions(+)
 create mode 100644 humitifier-server/src/main/static/main/img/wild_wasteland_favicon.ico

diff --git a/humitifier-server/src/main/static/main/img/favicon.ico b/humitifier-server/src/main/static/main/img/favicon.ico
index 807024cdb71a5e53c69d99101d3260dd6ecaed0a..6f2db548d127f860bf45415a3d1b643f1d7b6f2c 100644
GIT binary patch
literal 15086
zcmeHOcYIdGwmmx)NeCSwAcW9EPau>~Lx+T7Kzc_y0i+0s0@4I&h9Y9ag7l^!TtUQ(
z1-*(5>-8#L5kV190SWnL=B+i81EG2GdGCAgkN5r9%y-Ur&di>fJ$tXcX5x9`1$+7O
zc_?GNp&_1^=y_gDjJsZk`%mCrjT+h4<vg!tVb80GXYdo=aQ9Jo9-jMGA1PTOSSr-2
z<P|8^zF1PrB~_ZVT;bJdk}TC4mXM0Iqkivwsnw#i<S&vg3C;I-(Xof38m43wYtTx2
zRU534hMm?(!RT2MpPY2PI;2#kcqtmQL=s#7L#ot2hB~w~>7u1U2aR{Kq;A^_QYrCA
zsZ?i|lqg?Ux{eF=>k-e3k}63VQls%#QZxCyH0f-l(?~7dCTQs~NlV&jEluyx(l|{^
z*%~LMX44PlmWbMy-cM{jQYs|;RcbW3D6RWx>2t4^iH~WS_o9{u|DxsI=d=u&r={%x
zjeZ#D`khp7v`MNrE&yGMO0m*&(DskgqL;Dl&D^48?N?fMo;Kc#XN+t<re(=KR|o5_
z+g3~QGW(@?+1lt+Q;geTNos#V+78q*ewCIrf7i0@2NOPXzs_~{ZXNR6*G9IT&@y|Q
zmOI8mhmNe{s8nq*L&{WZFJ-EKY{#q17%j85YI)%&6SDMOT{-`wdP3KibdBYEl(+L|
zBg@~=(tifVw4=c|ekx_F-;a51g?jc#?N(a&{>&}PzQ6cwJ+#|a{mG$!=mw9yq`V#I
z$MV<R`;Bfln4_;@5A$Fv4WY{`7?(^*xzml?y03N6x+A9avc0;>qp#?Q)gNdN{gJsZ
zXv`bt0rQjC>bO)*x=&)_V&t~+(=mU?q*Wgyz3$QWxsCtS)Y<C2?FTK((Dv{JT2cmS
zsohe+R{n-D?2I{-h@^J2i#KW;Kwpg2q2Dwu_dKIz@yl8sdR5E)oAK^KE$xSBFR6nm
zSTo5KYSR9o7hS#>ZJ<*5@)avIOL;q}Zkx|w1DVpihmp>(nVyqj3sarW&3kBRbi4NA
z>KrZFIQ3*g?ZocB{jii;ttv=N<-xGoH!(KfOPw}KlDpb>FuzLbwfj}#n;ph{Z;?X9
z`*}^fhvj_V*3qz2EbOTZY+=0@Q~AZnM(xiQuGhkN6>1;AI-uPTk@_hOVDCX!zw2Ma
z7J^~l)xDxIZK4~tdA4eDn=M}XT7#r~d>!b2&HB~TJnuqY&pQ(CdHaJQsC+sF6<!km
z9!frQ2G3q7<#~LUekKOe1VaC0KXg2Q@`I*Cq6$Px%igz1NLXc5S6yx`SwUL&Ex_OY
zWcAm5-L~0rSW&c-hVN}9EZ37>yFs6qsZ#yuz<zy?g;%NfPt5N|{8mnaLrP#y6D1)z
z;<}an!JDYF1f-5suD1j0Q{nqs2@c-wbsl5N)o-eY4D7GNo84igS@$>aTLX!!+gk3p
z>to3k@ieYuA-VrxllF1E7b@+C-Y!LMdmrDoN`YHf!2cO3Q1lyIzlSvdUy-Qsu#qlf
zjnq&52=`ZEUiM47f#>l3amce$tND8PT$;m8fAC%;BvH!MJSex1G!mI_Gp<)-?J4*O
zjqgUf-|gZ6zmIxI!RKfR3N|u$u95Ny7x2tx_`oyv{XF>}yxGR#V<OPUMR=d%d6#q;
zdP+JD{}tZ@m;)^n9#ybA7e{(Phg%}GOy8j7wh9_+Nz2_&D9M%ENK`>BL+5L(yEAxq
ziiCttl)CMj{VP4tMrX8l0rBW7yte|jeipvpSU=9TW^B^%%UW9Y(lTzP#@g4i;3W;)
z)G}};eA0M~Ly!^rx{kvQ>NtkBUzd6*2Jd_g`>b~(9q?>*$S8@e`UZ5*Ld?y?wSn)`
zGUs_M#bUMehTj|Y5Ph|l2X<=sB*d^+G;P6_oQG!JwM<*5B~N~gPagQpF-FoxDU8);
zsINC9&(%60{uGu{aZ^Mj9ly_&=vX5YAJ@`hn3nL|S_aM5GU-Xgw{}_{eoI?hSc&q^
zIZ77p(bD%mB@gT%CO}MhO~cn|DO^I!nB|D~<Bf#h@)PP^Afe%JVNUM3rv35>{b28m
zRcFyQ=gi2hrL^3)*2R}{H4!uR^ShFazcT(SdG1RsE8kM`$lFR*y`yF93MKP*X&L;0
zmdf=Jub>a-gZ2^{7J&c%&5lL0?uR8`;pm(?puGkX5w#KH`aS9~cAQIA)L4J8ul0<-
zuCHwKna^x2mmQ~!>^N=Y`IB0<|ET4O52y>`(<BAGfN#>Z<j$iJXSAeez&>UX=bXVh
z;o7|9^YKhI*vzB2*Awz4bmN-VvJiGP0`ak7CuQ-&)1PSBbX3cWzzjPP_bFF@f9ew@
z&wfE$RMrlrZ{YgSh<k1vJZ~S`co_3ATw*F%--P%+5n~^~Tpz)_WlGUfoG*j8sb%z1
zEsq|ejjKy-v(4SV8gIu>#@lk#$Sz#(`XyT*luv)^=4i#6TmxG27Sa-t*VR|AT>x0l
zNV`ElNSpq3I0yKxr$m=I23x);{ibV~`mB-}8{L@QaTo1f$@(L}ZD@yWZ#rs1(jQm3
z+uWz}B#cnuo#(3HIlzR#b(h9v=>a9ZrYPwR+(Nr0))>D^VNL?@m9I#l=)D*N*S_af
z#h5U>z6&wX2lfMB(|sb=-F7Xj4+Hm|K>ZkR^gC$Qc3mcHf~xJU)3v?LdSHVsDtX}4
zfJbae{b&=^cO`6rYp7KpZT(Xy?9lV*%O*g&Lt=rAqR`e(lnQf{WwCIp-da+J08;{!
z4V|y7trKh6_RpH&sT*|VkVU$lx6h1Bepi3@_j7vKoJ9fesZU+|)L|WTx%W9`$1`n|
zMoiGaPsEs6@I~JMBYzE_F$+GX0C4#>_}Rl4o0C|pS_a(j*4)??4zE45UtR9MYrj&^
zLOm+^J$>}c^V%3~hRj-cxqa$MtUPDClDpA=+R)H>^bzzM#OoJeo8JKYPsA7qq#C3Z
zgg)OOzPhzfA2((h*3{qJ`pWLVOj)nf>MjX<ap;8p?d;Fy+?i8);C*ug-qTo@>^q;^
z@K2W`FlVUV7{0Io;+Amy1CW`JA&_<u!Fo(Ze)I_Z!@I!xM(%nTzHFzmxSqO?dqmm1
zfpzct)yTq^b!_*ss?mfws^PfVDrwC9swn4w!#COO<GB@YC>gm}S=*Zr+nl*sSs$9z
zK}*Sshv186qwNH1|H<9%v%X^Zf{)?<&Rc!yI~h}G1N146zN=-+_m}L8xZT@w{F1=`
zT=oa_0gu0r_^?9*3t{~gcJ@c#O@H2X9OCDQ6OuaE*?-{@EfC|Mgbx}Folaw27#mk+
z!}jU-Qtnj1?QRWjLC)llF~>Ql@czbcwLJT|zO?oh?{n)oCeGmo&pU`1xEnrUmn1YR
zV*BrTxzKJ?_~?P~Kd-{(-5eyg(!c^PM_775%diKPAcql-bIx}89l4b}_YW7FMlL}-
zz<AMq3Kw^Mp8S*o7SX`?#833U4cNB-LEdr~?DCw~W6}lKfrc*h1H?AY|MMPWFvo%M
zhjE8%eDz@^Pko}{^Bgu|F30?qZ8KgacXR!Q5A+)09&uYj^W(s<HT|}2*?&fCSX|=a
z&Rx5j(j`l3FHe3WBNibyMJywhVXn+PtzL>-5A<z}dFdHS7QKu(u}I1No7k?h`Cyr9
z8o4v$r;P)!a?`R|vaZ#nx$$bZ&X7+GGKMQZQF-zV7&T(}`M5d_jMr~^06sbZ>|zkF
zv6gnb`Z^;Qr9UMHK-`nuRSD;q@t$+UcImU3FNftah@S>IdcaHWrn+|PX4<EweuP%R
zhFtr>oaFNI6<z_~mx<W07FgtM#G#8ecDCr{>LVVY9TVeFkJ42TCxJhR6}VQBOWN2q
zda078UAf-Bg{^IZ|GS9%^e431>Drbr-vOS9M$X+I?=^;`!uH=qJU8$W#FB3Qi37Qg
z=+7eaF}5gh1{z!g`VC*fF)LP@>mM;MZV&321Pt;c?0uxS<J1jvL|+R$9|lQ54nG@s
z=QAl$ZXvFBpl?|i7iUkju@*fw#>iOQQyz02hIPv}OIP^;&p(W3pOV{0ox^&bkL!kz
zYjRt^&8tg18;tiyL+5$;z8qsX5xM$t=yC|xuOO~wfhTbJ2XS~p^B-}46S$Tm$WwOU
z`vQ!^Bx%#{8DPSeSJ!_t*Qg^H!o0FN=58U@Cu8SA_>Xk2=j30b<LjGtEnDc&mOYvO
z9K&w|u#TU{e0>Y-+Yi^J;M0&r|G5w92?lnL2QD9l@3mlGtGtxKr{ikZJ2!d4`185q
zo18`a#MZ50Cp}@C0}#)P|G8Fg{I=vRSQPno!=SKS9YTVnGv=g?By~tY`+vBvhMx<i
zjM-nz7|)xA32mH-@&fA0mhdC!KjnSMe#Fac37_s+E<%pvxQ}P#O!o7<kMH4-yr{b`
z>ozem&Ae97wTY&gnAU*wgNPS{|M4m7ivR!r$`Qc)5-SBkia}D4V-5pGp8<!mG*@`|
zO5Dpp4m<<#o&M|AE8qU#y8@>eiI|Wi!J+ge#C&}qnZyVl;zsTGnr7X)b*5V7IOElA
zhg>zC{Kb8c(vV1S!o7jTlfXyZ@;})Nw4EDL9DKqi<dmn8qcEPl2T6gPVw?vLr5ZO#
z(gzM4P<3i0DDU=k4WG;WmHJnL)WzCdCIe=if!}%&*A4&EeL(&einu^*%l6VBYk~J1
zcj|dR<N6NBhrs-Xm?{`CBu`|d4kB-np26Jn1N`0<QW??_crHU)^=02VFMM}2Kyzzp
z-8<yp-51my4g9wdano@Cp0^$MI)Pt0BgCWmZ&kSd2y#lABmT|UsDRa693oFK7Z|N^
z+FAV0T<!qk!5QGApMkll|5iu`$Qi7YQ^5I*s}_U)*?yoNuFX)$48%Jlqn9z~;CRh~
zqyq1MiyR&tP;cr_U5v$Y%U@T>_gzdU=3faeBfgot<})3J0>iCCAH(_HJ&<jZuZXeu
ziu)p%r$4JZ-$y;oAS)oru+z7Zs~EX+_AkIKFW}yB2spoq3K*0;lGCqRLv67yF&KX*
z_e5@lC9jE%7J@hEG}7-ga*MD`;6Vk9pkSlS#fC%Z(>Qkc_s2idvPUC~&zE?a<N64s
zHSpL8S+v&xpSrQmsULZNUYD)m_JiuSbJtCQWy$Z9s^s)f>YyyHj|HZ6bsJz1Wx0?-
z(X4kPgn8=*%N_NZTK|t~4~!HGEcL$SaC7I$LS3|%(U6~EE6n>8_*B<E$9>@*<ka9e
z1#7iLIp~j^hrBHH>oXPH4{|SJVPa5Xf6iC<E$)5hFps}a4wuh!>>q->2Hmkgb~oqu
zAg*sZ`r_GqkeZn11BgWid}t<gVh&FqW8gO(2l3!;W%D@RW8T6Xj(I}CVlHnQvs?kE
zX_<l?jd^R{g5WdjXq!uR8RPm!9*#UG`yQ6dpAQ9`?RcHu_pqOwlU0zL@=JJbAcQ=9
z7x4AR;iJi^T3#LZoZT>oB9}1=Ic0FDMsBEN>v3`<%JN#w%gH%1PtADMai6sN5epq(
zM&6S8l6zu~7+clX-B=!(>x0~B_$}<`en?wL4ahb5Sx(!Mu&^?CrW3^RNR0jLKlS1m
zHoXJ-hPXcT03S(yl6gFJ<KEj7A8-zo%~7BHh`Ecioq0Po;;j45ev!XSgME?X^zDqc
z)vAw@Cq8s}KJyOGTMuagSqu3RIM{L<Id%5GBagTRdF^`eUB94y`svjW##Qo;8n)ze
zYtAWcK3@^+86w9dr&Ya?vV8;(hdl_#(`^2Zd38Xxo-p8QF`jsT_gRDZtn8j7If;2M
zD$9pQ=5^dCb9eskI63OinDPbmp<ias`WX6nT{{Ag)D&a%lMGv6kb@emC-^$#>%Pr!
zzG>&=3@5KvQW&;dr>(oD4W|wc;5Q==A5_ShmE{XFUJclC(cXYOcF5UI+W`SQqlNve
z+0@xO*ED$`&IRYeZ!@Z(vHTu6Kk_GT|Du9F<~d8eLtK&$yZj#9@~_rMkl&?!a80t#
z&~V3NzwndeF=!v7!NpnrYfnI)`@7TI=OuTXa-59Mlad!%{4(YN^E4FxK0ev;68yc>
zh|9KFs5o<Jav0>>$bmZU#q+j6k8AeuaF4NqK9~50dF@K@Bi!SFJ;J8Rm2qC9V_6UP
z<(=(v?G1S#0RN~QM+@%$Y7QyqHSL{z){`G8Z~_6h_Yd7u2UB<K`@r{-=O+h4AJB0)
z?Thnq1Tq<t3@Mm%-1!~%IzzsNjD^&L?1kVx<ni2ZAaB9>CZ{xL7Ja|M9)_E9j@>5M
zGI{Wvy58_Rp4;$^vpb%3;22d(q<ttGr@1bM!%sz*x$KkNI#>ps4nr9GFYQ+erV?@c
zG1!U0*@7RCdwh=dl4WC&Z-?|b@y)mw<i?rtiF<Z)wmbX29(VX6_6)dQulrkeUmx5Z
zu-u!^{mt5{EN9L=N55^x#N3Ew#mkao!<mCY274|m{5b&Lh>~*guUd|G+#}?)3`F5f
zi9&wjY_DVm=kuZpkTZ8&8}*}|lh^mh+Shga3FEE)NPG9JR^GF)F<cAJmiWK(dAmo1
zb;Laq?wz&n>-;eH8A`>G({nb<*tP)sTJv`)?3>ZYf_tk*`-sf89b!zztdm&#*r$n6
zI6I*1{s{SIjtyfgImjtbXLGPq1HhDlEA*jm@PEPGrl|1vu7SvsDS?8aja6jnPJyuM
zX@Q`g@Sj)jGqDeg_XU6v0@7<T`CxFZ@J;liY?pg}<RE!2sA$ZO@GUc;=T68R$fa0@
z@5Ldhkf9K+0~i%-pX1Fv5c<ve;2Lqx#M%VMZ#%}`A9t3tl?kg<bWoZ~@Sf6%-X>iy
zXt$~5ZPcAAtXC<m`eu3DL*jG(d(@w6fF*s>dgx4koS2rlh<l~f!`Tw^re=`VkcJS;
z*`X{7Ax8cJ!nnme!+*ywVLwsCz*x8Auy+Id@_nMO3-ua2SC#kfR!KqoP5q#~rmpvr
z=~n3t{qdV;^|GZI0dM%iz!my)&9ffb1~F0jcpr!7T)Vyw)Qvd!QOHP$J==wS<gVC@
z%tAiO^9lyO3}=hrAA18gLLbW|b1g82koV{QGGi3+j<35v{!V|L6tpi}_t*6Yuboz)
zbj-30=s#@1Rr+JzSkJ?6DSLiv=4OWt*&aD;?jtkavu~+GE`moqk39(HLcbyA_ptWg
zerOMS&Wig}=^0rT3v%zDdo@e;DOvHRLhJ-5|1tI;zR-3*fc8mWezpF0+VRI8+RLU}
z#ml-=|D_oZU0;9t0PgWIM<C9A3hg}ho<_UGrcMvy5B6y|umR6&bRK;Uv7uY``i;X}
zjDyhjC&Au+v>1)CHdh4pNMSd$Lt@F;s^skh=wkqD!TD0Z57vGjP-VS|s(YokIPTbk
zyZo{GUu{2J^J~9S$aw?c?gLV~vcu%u7h}6@pL)=Li=2mk2Ot@cL68!ce5hL&3Ai^6
z;^*jY4Kt4=P9dIM@E7<6tYLp&*w;PVe!M&9>c+8CvfkZyQYn>XvMydU7c(=pR!T2f
zjJ?dO_4nVWFXo&Qo6=sY1D9}r<nr3(8er@y3+V!R4icX|{yf*h^*jtR9{Au8@&{wF
zGS3b$meWRwuZW4c_siJz2>hqtzOVntCAxH6VxV2OUV#q1`m2t;`|FhMeQ@17P`OT0
zz~eaQ^gn#>;e!F}2QxN0+hJQ<(H8fK8TT8d;rtx--a|q!K)=n9o)Gdd_N)RhbrIwo
zd*NHo0z+kDonElMo@<Kd0|(7kz<|o``xJ_H{&dRI^gma|BiaJ6v<IK<VK2*jC|mfQ
zvJ}3YW9-K;`b_74jLp%iBq{8p@yv<BI(2Jz7TV|fTlO0FJh6s>5h^5{!MP>ovld4K
z=Y?9_KYXFVd6S=k^S7Zd=fLSOU%l+d3PN|<5b?f^nFo<u{T28j2WF#g#G*G6Uw4i>
zbD#OU9G2$u%;)I$ecpvWJR}U<67me5A>zIfbLmk_$cJq}e7%$hU{7!?*2rn}iRWav
zHpsy^zsp>O<H7l)&*8pQn|=!C9Re25SzWG*WxV%$Li|meXHM6=N5EqACHr~)1p956
zrzV||JLbMTc06z7d2d6`+5DhziJ|`5&EbQXHzq=8TOYu#kc%c^A8QlxF2qHaJnP2X
zF9BGNSoHam2In#Y77t%<O<&Uo*bJZJUi8e(ZtjTB8RMCQHR(c3=<+<q8|M4uA3cxz
zOPwKUkozIm>=oi(HOOE{FU0O;;4m**3{L!1v&m(?gJ(S%2WZR0?erJalRB+GlI>Gz
z+gHs2$NQPjl-=8<?Gy8)r7O!va4eY1aL(y7$t97uSoIFpAMiT47sr461!eP`WAA^*
z{qFGdzX6{HEG{NjP_fpP`CR=}$3^k%Lrt_-wz|XYYtWyblNb{mFY&~OE)RS1Bj=--
zcd@^WQQam4EFPpUD^*E>hev!wydp=(v%0?B()Q!((B54R#`7u>QNQ8$G+*bOrBrKB
z2>iwy(8C19#HpYV<U@X4^uxrYY@cTycrK6mFnt1TwoQLvZD0=i#*s?`G7qtP>v8bV
zzzei7`mwRgUEbJ!h_ZRr&eJ&Cg?sc7r7LqE+>J$T^v7=(We|Q3imk@@W02SE#ah1M
zewdW1*gYsX`26VfQF_+QnF{+SZVi(+;W;bjNQ^72pL^W&Av}LT{)9X<$Cz9M_uiiY
z7D#IE#+rNdv=8QR%+>ikV+(zK{S>D!{R}Y=`IEYB6~@*?<j$?<&!4Xb4;sXCl)p%9
zmG(Ku{5s!rhXe<&S@7V4X6@RwDk36MbC2C(@{~d3i=FO8O1d)<#7I1c#WP*hopFtR
zm%fVU6u4i_Gi&@#zewHbCyOIDBqzXJp1<)OjtO}ht_fft556LAR9?Mx>sB>m#te?*
zD(HJNd(D+2BO*S*-UG(C8|O6>=T*K$EGG}jJ$H+fZ7e2_#(T60jwSsP$B}2V$g!}$
z+zVg~=a>^a60iAudt6<|ztIP{b3ni>K^NiYP5?g!XtPn!1M~16bT50I@xIZm_Fkjg
zPukq4O48%daSY@H<f1*dNsLIFqVD7)s3W;3`fPHSTqjm1{7wu^|H9bK+;H(eB|Nv{
z=eXqDp2T|RSx@etabKQ%aZFqm+BaUU7Du7vb$!l_lm|u&mj2U6BWGKTx^9Ee_cp{l
zZ$TVz=U9Cnk!zW2!yi*}nT*kX{}}6NGvr46xuT61jd9oHt9YJe>Kf$fdA`Ckj6u)a
zXY&<41rBe(jr9Dz`*=SDk{iO9(HBx5eD;^ffiJ?(G9J>G;mjfOdGc+v8(#B_A91|D
zUr`O~nb*FpaX*In57!l+XH3ms<QUFVX4=0;al9q>0^fl!9{tO+9XIL+--R$QZUx-*
zvfR5S6Sg@O*Bv2a;rouFKj1XS`?~ONHONmmEJpo!KKQZsh>2bQc#mA_xRqE-L0_Yu
z5s*~)v)NeRnc#i6&d5U*gIxN%og3+RGxt$X8N|y2SWk@O%%3^WW8o{8TW-Bn+;_M>
z2>Ate<9xZlKf%12JS1bE+jDv!XKsGMIbQB9Ex<jF$LEliz*(PwD|iLp?HRV4(d}lR
zkuJldG2XpUcYO$X?Kar|-E8;7M3`IjhK#l6m3cl9<BYmF#ym5vz}s-&Z!V-6>X~D6
z!TvLz!F317I!Ilt|GqM0#(!*&9&O;C{jV_M?`&|ezX4-0ub2ZNcRB|6;DQGqUa5RJ
z8+*!?F0FB{2G||EfXn|le@`H%<390O;NE+2T@XSZ>c4I4H#-m6`iJ80kg6f3PeRPu
zigxQlhC{vu4`sZ>Ho8^wX6DmRKQ)b$>bo;`9kJK#d}D2t<KY7~1H(^-U#f!ZkU!G?
zzw=qN9SNbI3Wuai-+R}Ar{9|^H1w@9v9a%j1qZzapR@;@!5aKN0g@lWvBqEa{NMY?
z>`lSI3hYmQXh*xqkJy!4=5GJD+lFH|u*giH6b~vHvn{VJb-t*^yuO%Segg-@>sPV(
zSgr>7$TA-cb{hUR3Z>T=C5N+==MjAI+OX^ZLW3nn+b?kj%3j+N&!6Nq*v$Pb(P6(l
zl6`HT1M0N*uk)P!9rtaCzrwI3+Vku2OTV1}>%~bjTjtQ~3jNTY->!WQdg>Uw*BJd8
t1B0K25-$W9l;49uX89e0B}-K_q%TWdG-Mh}vn|YytGVFD*ABer{TCEaxmf@J

literal 15406
zcmeHO33L=i8Xg2)bro^fW0e3ANVp+EZdP&-lFSiTeCm3OE;kYo5D*X)To4gOx#U(9
z5K(RrPwqf6LA({$TTpTF0FMQc{`dQ8Qf*I9_snDxaQ8juy?)hQ^&ekV{dN6+jmJ~P
zQ`J+Wh6ib~r*}1vr;W$sNlp%ZH$2<pnUB1*w6gM4kEiHdkEbDMzygj?K9ab8{#T?$
zAZX0Mvj@+SvWM?8Smq|AU6FB`FKEmP1m##ksfg3VGSZONDu>_xQrYCh!#sb<FOs|I
zkSUY2RvExHOY^pRY_}v0TOe(ocwN!wy!4HndBffE$7@DOosmxnXjMLWh{3m8(gLL+
z%<Z3gS8CimURpo?nw*97!ojoU^s7fo>xH`|P;yMpFPtuEv$lu$!Q(5IG=GUPQ|tB@
z|02GfKdW;8&ZE+1(HoNU(zoiHG@0x6$=UyyXnvCyIQD4%SShhLo4(oPC$ArUWasmj
zVbJ+m%Ri9RUiV4owV#>1EF-U-zs;2ArDlFF>9jc1e$-j_x;v$2UJq$De0~JK9e>kd
za}{mVp>q^1v5;5s51S|a?zkYR$`pP}`w>&-vOSXI>mw~jFEVxUJ+<dV>9XNVX*Ye7
zG#~YNNH%zN|1}@^m^A1;NjlCe7VownRe$OF>+}-zW8G^<O8&<0gniEbqYVHD?ADOZ
zYd)1mg;S;39Scl5(Y$S^y(|s-+%LJ$f2FZ2`ys#8egnZ{k~U_E<i2>o#7`NNuVvZo
zSIbCr{E%P&5*@#qzq~2unPfbfcsM^*^q0R=st1bYTJ+D{f>NUd?REgqFJ;dGm4`CY
zkhY@wG=IS^sgJQR2YP<c{S+%DEqQXmtL2n8Rkjl}CP7xjIF6-Xmy;JbCRyjicyO@J
z;C)@osc5QX#n~1dd!YZSqB`yTl&QzHTN~sSsd^`@J0J5)$7kNh-2RO@rmZ*vrN(~h
zaMI5{a%*$nj-Q2VP={sjVV*qdD7(eXZBo_WUp!rUiYK?1)Vkv_@$EPgK}#J@_JI8R
ztyuLt*Udk49TJiY*{5AO99Z^*$!#*_MOA)s!9YnKy+qEqZjAaqx9=3SMr&C*r7mk5
zc#9<!<N9Y^uG3bJ?oxF*DZj5;qic^?C{^-$<LM)fAADXi)_f++W1UaAY_Mdk-K%i1
z-hb{rS>-ppe|;EM%BC*r)ELk&^R!ND`j>$-rK;~%^y$A$8SS2YM^3(UppvcH8oJNC
z{w~Shu-~MijNFX}6<xJJq2z7(A*@Vc2paRKKc`gADhL`sTJ`Gp{H;Gq=NG?@;O+AA
zw~{h`r6diVFU@Ceb+w7qdsi!*O{Z>*kU^c)?F-5^T3=<SS<il<^j|P&R-}Hk5p{E(
ztZcnn9`{|ei<)RBoo7wU=JlX8ud?60MTdnroaAC01cBk-PGyPY`L_Q@E}pnrT8>{X
zKIn}lgSuh+M`O{k+zVTzd^cJ@=BSig?lJdtO$I;WN~>j1cP#yABT2jaN$fp)O09xh
zCF9Ar9Obr}wAR$E_my3q3m=nOuTH5uR{LkK_#jN~Mc0hLp6yr|24YOUYFHQ@F?5(y
z6h^1@>QuEqY(RfIrQEmb`sg%!)yH9Sy<5JIpdoGhS=&rHVzkRIv%je0kGiy8om%Bm
zCT)#p16{7uE*SqT=bpFrWdo(%j9<?v%t!s_#F~GIyMDK^VX`~S*%48f#sjB^(WKqA
z#H8VPASSzh>W()5>h{W6zYqO8RLMxb@^;DJ{Jkk#({OxHXOr7zsD9V&&9h0ZKtHM7
z^|tWwQ#Su{4S*e*>rcj#H`SS@8O}tsA3ctFKFVJ8QMe4Wq1Nw|@;p=T`p_Az!|c%c
zRMP>UT7RhDy8gDGxkZgN-G{Zi4wSZ2Uy87KEypd*So*d(Cep?%4m;=A*I#15nRl|5
z#XU~v)t^ZEJ<BlW`>S?uRQRyj7Mji}4HO@hM*SZO*#hQ_mJ?Ql=_U{A9=89Wez*Ns
z9@g3hy(TGn4f{@(fXiI2vG}$h7TO5U)mh8mkLVxhcHDmvgWLX-ec!O(g9?MaAGKa<
zs%_7j$9LG7>;9Aa`E%QU`?me0))uyhU2Z(zz!Y=;9YO$G*dZxwr+DPXL!)HHdH&EC
zXb+g5ev|W;#=x{9=TGulWmV)|oxe*@{Q0{gnExMm=_jGHsT-ck@RLAH<WHnZZjtdP
z&h!2fxfFh;2^bS={H4abn2W#TJ}C6yJ!rg#_jRPf(>1R|8j#mBMox+pe0+1R6dY-H
zN(*nXF$kDe0^2@3Mm%GlG$C5!3-bC(jUlLOOUgXHs6*2IMMh13P!<Bimt5~~-ijM{
zME$@^8K}p8%FNp>$;Yb>U0yZL1Li@268SCyM~wYOy!5oWf?dWi>hi!gE2}Q>{k1O$
z%6i~W*k=}h9e8$-_4y@|QE~iI#lK5>V!feHGjTg9Xa7(ap0Cj#g&t30{m}R+IR*ad
z+aTvqylq$6bQl*u5ktmCIkkL!fp#yJKH!J{IQm}tc$X6c=H`Lr=?Bc`J=}ap6~&AG
zRB@^1@GGX{yp`kNhqCKX{ZK6Z<LLvA8|?Y_*=5+j{n*bl#z&uO?&d?Tz7#884)&<@
z3({|>eRNgw`$(NT7pr=(ZdQ8hJI8|>(^2Lnb!IH(JQFRZX-KElpGtlB>F5Woamxfb
zx8FlTpIjEsgl-sEcHXTI19vYIyRHNMx|Ee!cCNPK*6)yOa1PAgVVv*Q4{E%|@cXn~
z{HC0G#W3Z6HT9SImg(QM`b4#E`eUo#G|t3b{f4p97O~Fsxy6W=jxzJl>UNKKaZb{F
z_7rw>6nl>mPWZX@VZJ(O=h5Gc$1*Of`=0*d)2|vK)o&apr(Jc2S)Z!#%cjpOQMQ!_
z{|SBTj0dZ_qMgs_H95@p+68Cnv%60;>riX>qbg>p_1aU^;gJ7zscWqR=BH}#In1`x
zTEDa5v(o-^`i?KUYpLpQjswPtlVQX3NfYNu-hRp+&hI}h%qLA7p)cHSV_DCBY1Xk?
z!2qEz+fHM}g7s(-G3z>Djk*|lpIB+^@3ddGH`_gB!m5ZE1by?3CU5vPRzaI8dpJhx
zjeAD&xBlRWi&&dY+ho?i_K3%Y{#82${SErBh*{yscn0>N$cwo*$Ur;uo&e)6T9!2>
zj`mC6QEktA0DR6tyrJ!qw;bagR^HrA2Vsk2Rh>`&`^bp6ft40|=${<Qy*K*d41BM$
zmRIzh_a{2Pa6mn7K5DxT*1f@fYeRj8al$(hb{gw9G4uS87c?%w`{&lO-|9VM-Con?
zQYNg7h5vK!tCH&7DcQh(!uDp-+J-jIxq)j0$5=F4V&<6-=bzEh=uUK5+Uy+|>rY2r
z%QPl+7A=<5`ul$&MZ2o8&NLPt&^(Lh?O1e`UCx*c@2+&52jfK?gMP$BbYLxmpTPJ!
z5#B_3yjTMm%c9?$zUW$iD-_0f5~%~`&~JHuP818{UOAXEoZ{(DG6R@bi8aaJC*+3)
zeqD!7i$eFOocP@GU_0>7ln+1cl5vWb|9slSk$m-Vb&rZ=Zn~JCi#>=_Jd1T`apx1_
zceqy&O&+nA*M8_{Z*|`qb>~aRBAD`?7Go;W^wDmtJl6M=?h_>MW#{`DZZc^<@Rhyk
zR_>JVMa(}Hx~#g@yBBNbl;<4xH<ZKutBy5A@S^@Ki&cL+9^iimbLa|tezfm=>{Hm*
zP8b;5WxUIYpYZ`F9-UX`iXjpBX^+utGEicyEART{h3(hxHqH?X<B54L=UK*#HCCsz
z{>|gUc)2fc|HxKhT*fUv&h?9DO4Kp#{e!>gh%~)@wj&m&Hq?E=IV#ED&ykPyX)$I|
z*!bn$N8YPU^7oa@r{9a{Q(}gnAyBq|+pG1&O4*-`B{KGDZ^u|R%sZQQ9)5F9%EJ9B
zt($8>;{nqYZLLcSRm@PA=@dBj;_hQgBKzlj+~H|7U}^-G27M+A$A{KoPiaG(XLx5p
z)dR8dl<wo@l7+9BcFy+cwD=9Fb9rceV|<e~YnKH&wST5x2zE3W{+`2j8n<ui@NPLI
zO@{nxN4!J9d$ycsqVX|y++prcX^s0+893K)EulQk!|~s+?*poSw4L_2|7<NM9p`;w
z);?Z!CpTz(q-8K=e7p4n8>IP&N2T@T^^%EuZn-#<Sl4-C&0hJD{B=Qzs5>1N99CKJ
zzB87YK6a_uuZ-3Dw*O?-P0K-j_FL}^I-TEnH-O_u+biGe-*h+btSnXW-&pZttt+0C
z?aTUG$46bn_wDz$wJgm0Vdr<AgR>ErK);y2{e1Y;QhMBL;@9<H%GiJUxMk=I=R1d5
zPrPX+&dl|07-No$y0}Y|z2d_NyP-T_JedEQk)(YO*3?@f{m>TXIiBr8d(6W8#k)fF
zt{<)DGhLTd)Q@W>>Egwz>By6V`|(W%%?xX!y4Q^o-f?h}iM%6>H(4=T-(g2JK!Y<u
zr2mlecweT?LoW#XR@Z@d*mK~Q(757FX@BWspEBjtzHETH$Ikl|F4(z7MfD%DE{wIn
zzCLrq!7-b&{`0UsP(6$bw|#@F9JEKr`6W{O@<D38$;4gEX!}oKIzVjJ_I7*6nf^xf
zfvYc(n0U8J-Tx??%bSl}SnfWc9H+Ln*BLa2VE5hK@J8mx7r)?t6H<Fjl$zLk(iZG`
zE8`pc`*O!GSRc-*p%{#NKd|k%-l{WL6n|gB^}t;$Vqh#QvW?@(kt$dxx^X->jp>AO
z!EU1QQWx50FZ??_%M&+pt5Il7pV;`RZ<lm(!;?rpV>4)z-gv%=)^-&sV{9Dbw2-<I
z!59xu-e%*1(Eq^XL)7JPMeh&b|1pPQFCSB;Z@W<^9t;(wG4F5iK0$)_H^3LVzfoe`
zjy6AG_cy}pE>(Db;2FrjTQY%ZH2P#Yd;)JFg>R|s{tW#D>a2~sDx}#ZopZJs7m`=+
Qfy3qg{`GqcoR}8)FQ4)eApigX

diff --git a/humitifier-server/src/main/static/main/img/wild_wasteland_favicon.ico b/humitifier-server/src/main/static/main/img/wild_wasteland_favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..807024cdb71a5e53c69d99101d3260dd6ecaed0a
GIT binary patch
literal 15406
zcmeHO33L=i8Xg2)bro^fW0e3ANVp+EZdP&-lFSiTeCm3OE;kYo5D*X)To4gOx#U(9
z5K(RrPwqf6LA({$TTpTF0FMQc{`dQ8Qf*I9_snDxaQ8juy?)hQ^&ekV{dN6+jmJ~P
zQ`J+Wh6ib~r*}1vr;W$sNlp%ZH$2<pnUB1*w6gM4kEiHdkEbDMzygj?K9ab8{#T?$
zAZX0Mvj@+SvWM?8Smq|AU6FB`FKEmP1m##ksfg3VGSZONDu>_xQrYCh!#sb<FOs|I
zkSUY2RvExHOY^pRY_}v0TOe(ocwN!wy!4HndBffE$7@DOosmxnXjMLWh{3m8(gLL+
z%<Z3gS8CimURpo?nw*97!ojoU^s7fo>xH`|P;yMpFPtuEv$lu$!Q(5IG=GUPQ|tB@
z|02GfKdW;8&ZE+1(HoNU(zoiHG@0x6$=UyyXnvCyIQD4%SShhLo4(oPC$ArUWasmj
zVbJ+m%Ri9RUiV4owV#>1EF-U-zs;2ArDlFF>9jc1e$-j_x;v$2UJq$De0~JK9e>kd
za}{mVp>q^1v5;5s51S|a?zkYR$`pP}`w>&-vOSXI>mw~jFEVxUJ+<dV>9XNVX*Ye7
zG#~YNNH%zN|1}@^m^A1;NjlCe7VownRe$OF>+}-zW8G^<O8&<0gniEbqYVHD?ADOZ
zYd)1mg;S;39Scl5(Y$S^y(|s-+%LJ$f2FZ2`ys#8egnZ{k~U_E<i2>o#7`NNuVvZo
zSIbCr{E%P&5*@#qzq~2unPfbfcsM^*^q0R=st1bYTJ+D{f>NUd?REgqFJ;dGm4`CY
zkhY@wG=IS^sgJQR2YP<c{S+%DEqQXmtL2n8Rkjl}CP7xjIF6-Xmy;JbCRyjicyO@J
z;C)@osc5QX#n~1dd!YZSqB`yTl&QzHTN~sSsd^`@J0J5)$7kNh-2RO@rmZ*vrN(~h
zaMI5{a%*$nj-Q2VP={sjVV*qdD7(eXZBo_WUp!rUiYK?1)Vkv_@$EPgK}#J@_JI8R
ztyuLt*Udk49TJiY*{5AO99Z^*$!#*_MOA)s!9YnKy+qEqZjAaqx9=3SMr&C*r7mk5
zc#9<!<N9Y^uG3bJ?oxF*DZj5;qic^?C{^-$<LM)fAADXi)_f++W1UaAY_Mdk-K%i1
z-hb{rS>-ppe|;EM%BC*r)ELk&^R!ND`j>$-rK;~%^y$A$8SS2YM^3(UppvcH8oJNC
z{w~Shu-~MijNFX}6<xJJq2z7(A*@Vc2paRKKc`gADhL`sTJ`Gp{H;Gq=NG?@;O+AA
zw~{h`r6diVFU@Ceb+w7qdsi!*O{Z>*kU^c)?F-5^T3=<SS<il<^j|P&R-}Hk5p{E(
ztZcnn9`{|ei<)RBoo7wU=JlX8ud?60MTdnroaAC01cBk-PGyPY`L_Q@E}pnrT8>{X
zKIn}lgSuh+M`O{k+zVTzd^cJ@=BSig?lJdtO$I;WN~>j1cP#yABT2jaN$fp)O09xh
zCF9Ar9Obr}wAR$E_my3q3m=nOuTH5uR{LkK_#jN~Mc0hLp6yr|24YOUYFHQ@F?5(y
z6h^1@>QuEqY(RfIrQEmb`sg%!)yH9Sy<5JIpdoGhS=&rHVzkRIv%je0kGiy8om%Bm
zCT)#p16{7uE*SqT=bpFrWdo(%j9<?v%t!s_#F~GIyMDK^VX`~S*%48f#sjB^(WKqA
z#H8VPASSzh>W()5>h{W6zYqO8RLMxb@^;DJ{Jkk#({OxHXOr7zsD9V&&9h0ZKtHM7
z^|tWwQ#Su{4S*e*>rcj#H`SS@8O}tsA3ctFKFVJ8QMe4Wq1Nw|@;p=T`p_Az!|c%c
zRMP>UT7RhDy8gDGxkZgN-G{Zi4wSZ2Uy87KEypd*So*d(Cep?%4m;=A*I#15nRl|5
z#XU~v)t^ZEJ<BlW`>S?uRQRyj7Mji}4HO@hM*SZO*#hQ_mJ?Ql=_U{A9=89Wez*Ns
z9@g3hy(TGn4f{@(fXiI2vG}$h7TO5U)mh8mkLVxhcHDmvgWLX-ec!O(g9?MaAGKa<
zs%_7j$9LG7>;9Aa`E%QU`?me0))uyhU2Z(zz!Y=;9YO$G*dZxwr+DPXL!)HHdH&EC
zXb+g5ev|W;#=x{9=TGulWmV)|oxe*@{Q0{gnExMm=_jGHsT-ck@RLAH<WHnZZjtdP
z&h!2fxfFh;2^bS={H4abn2W#TJ}C6yJ!rg#_jRPf(>1R|8j#mBMox+pe0+1R6dY-H
zN(*nXF$kDe0^2@3Mm%GlG$C5!3-bC(jUlLOOUgXHs6*2IMMh13P!<Bimt5~~-ijM{
zME$@^8K}p8%FNp>$;Yb>U0yZL1Li@268SCyM~wYOy!5oWf?dWi>hi!gE2}Q>{k1O$
z%6i~W*k=}h9e8$-_4y@|QE~iI#lK5>V!feHGjTg9Xa7(ap0Cj#g&t30{m}R+IR*ad
z+aTvqylq$6bQl*u5ktmCIkkL!fp#yJKH!J{IQm}tc$X6c=H`Lr=?Bc`J=}ap6~&AG
zRB@^1@GGX{yp`kNhqCKX{ZK6Z<LLvA8|?Y_*=5+j{n*bl#z&uO?&d?Tz7#884)&<@
z3({|>eRNgw`$(NT7pr=(ZdQ8hJI8|>(^2Lnb!IH(JQFRZX-KElpGtlB>F5Woamxfb
zx8FlTpIjEsgl-sEcHXTI19vYIyRHNMx|Ee!cCNPK*6)yOa1PAgVVv*Q4{E%|@cXn~
z{HC0G#W3Z6HT9SImg(QM`b4#E`eUo#G|t3b{f4p97O~Fsxy6W=jxzJl>UNKKaZb{F
z_7rw>6nl>mPWZX@VZJ(O=h5Gc$1*Of`=0*d)2|vK)o&apr(Jc2S)Z!#%cjpOQMQ!_
z{|SBTj0dZ_qMgs_H95@p+68Cnv%60;>riX>qbg>p_1aU^;gJ7zscWqR=BH}#In1`x
zTEDa5v(o-^`i?KUYpLpQjswPtlVQX3NfYNu-hRp+&hI}h%qLA7p)cHSV_DCBY1Xk?
z!2qEz+fHM}g7s(-G3z>Djk*|lpIB+^@3ddGH`_gB!m5ZE1by?3CU5vPRzaI8dpJhx
zjeAD&xBlRWi&&dY+ho?i_K3%Y{#82${SErBh*{yscn0>N$cwo*$Ur;uo&e)6T9!2>
zj`mC6QEktA0DR6tyrJ!qw;bagR^HrA2Vsk2Rh>`&`^bp6ft40|=${<Qy*K*d41BM$
zmRIzh_a{2Pa6mn7K5DxT*1f@fYeRj8al$(hb{gw9G4uS87c?%w`{&lO-|9VM-Con?
zQYNg7h5vK!tCH&7DcQh(!uDp-+J-jIxq)j0$5=F4V&<6-=bzEh=uUK5+Uy+|>rY2r
z%QPl+7A=<5`ul$&MZ2o8&NLPt&^(Lh?O1e`UCx*c@2+&52jfK?gMP$BbYLxmpTPJ!
z5#B_3yjTMm%c9?$zUW$iD-_0f5~%~`&~JHuP818{UOAXEoZ{(DG6R@bi8aaJC*+3)
zeqD!7i$eFOocP@GU_0>7ln+1cl5vWb|9slSk$m-Vb&rZ=Zn~JCi#>=_Jd1T`apx1_
zceqy&O&+nA*M8_{Z*|`qb>~aRBAD`?7Go;W^wDmtJl6M=?h_>MW#{`DZZc^<@Rhyk
zR_>JVMa(}Hx~#g@yBBNbl;<4xH<ZKutBy5A@S^@Ki&cL+9^iimbLa|tezfm=>{Hm*
zP8b;5WxUIYpYZ`F9-UX`iXjpBX^+utGEicyEART{h3(hxHqH?X<B54L=UK*#HCCsz
z{>|gUc)2fc|HxKhT*fUv&h?9DO4Kp#{e!>gh%~)@wj&m&Hq?E=IV#ED&ykPyX)$I|
z*!bn$N8YPU^7oa@r{9a{Q(}gnAyBq|+pG1&O4*-`B{KGDZ^u|R%sZQQ9)5F9%EJ9B
zt($8>;{nqYZLLcSRm@PA=@dBj;_hQgBKzlj+~H|7U}^-G27M+A$A{KoPiaG(XLx5p
z)dR8dl<wo@l7+9BcFy+cwD=9Fb9rceV|<e~YnKH&wST5x2zE3W{+`2j8n<ui@NPLI
zO@{nxN4!J9d$ycsqVX|y++prcX^s0+893K)EulQk!|~s+?*poSw4L_2|7<NM9p`;w
z);?Z!CpTz(q-8K=e7p4n8>IP&N2T@T^^%EuZn-#<Sl4-C&0hJD{B=Qzs5>1N99CKJ
zzB87YK6a_uuZ-3Dw*O?-P0K-j_FL}^I-TEnH-O_u+biGe-*h+btSnXW-&pZttt+0C
z?aTUG$46bn_wDz$wJgm0Vdr<AgR>ErK);y2{e1Y;QhMBL;@9<H%GiJUxMk=I=R1d5
zPrPX+&dl|07-No$y0}Y|z2d_NyP-T_JedEQk)(YO*3?@f{m>TXIiBr8d(6W8#k)fF
zt{<)DGhLTd)Q@W>>Egwz>By6V`|(W%%?xX!y4Q^o-f?h}iM%6>H(4=T-(g2JK!Y<u
zr2mlecweT?LoW#XR@Z@d*mK~Q(757FX@BWspEBjtzHETH$Ikl|F4(z7MfD%DE{wIn
zzCLrq!7-b&{`0UsP(6$bw|#@F9JEKr`6W{O@<D38$;4gEX!}oKIzVjJ_I7*6nf^xf
zfvYc(n0U8J-Tx??%bSl}SnfWc9H+Ln*BLa2VE5hK@J8mx7r)?t6H<Fjl$zLk(iZG`
zE8`pc`*O!GSRc-*p%{#NKd|k%-l{WL6n|gB^}t;$Vqh#QvW?@(kt$dxx^X->jp>AO
z!EU1QQWx50FZ??_%M&+pt5Il7pV;`RZ<lm(!;?rpV>4)z-gv%=)^-&sV{9Dbw2-<I
z!59xu-e%*1(Eq^XL)7JPMeh&b|1pPQFCSB;Z@W<^9t;(wG4F5iK0$)_H^3LVzfoe`
zjy6AG_cy}pE>(Db;2FrjTQY%ZH2P#Yd;)JFg>R|s{tW#D>a2~sDx}#ZopZJs7m`=+
Qfy3qg{`GqcoR}8)FQ4)eApigX

literal 0
HcmV?d00001

diff --git a/humitifier-server/src/main/templates/base/base_html_template.html b/humitifier-server/src/main/templates/base/base_html_template.html
index f7196da..e61a069 100644
--- a/humitifier-server/src/main/templates/base/base_html_template.html
+++ b/humitifier-server/src/main/templates/base/base_html_template.html
@@ -7,6 +7,13 @@
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <title>{% block page_title %}Humitifier{% endblock %}</title>
     <script src="{% static 'main/js/alpine.min.js' %}" defer></script>
+
+    {% if layout.wild_wasteland %}
+        <link rel="icon" type="image/x-icon" href="{% static 'main/img/wild_wasteland_favicon.ico' %}">
+    {% else %}
+        <link rel="icon" type="image/x-icon" href="{% static 'main/img/favicon.ico' %}">
+    {% endif %}
+
     <link rel="stylesheet" href="{% static 'main/css/tailwind.css' %}">
     {% if debug %}
         <style>

From 55ccebf63776195d140ad675f97dbcac9dac6928 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Wed, 6 Nov 2024 13:11:26 +0100
Subject: [PATCH 08/30] feat: some kind of table framework

---
 .../src/main/easy_tables/__init__.py          |   2 +
 .../src/main/easy_tables/columns.py           | 278 ++++++++++++++++++
 .../src/main/easy_tables/tables.py            | 158 ++++++++++
 .../src/main/static/main/css/tailwind.css     | 204 +++++--------
 .../templates/easy_tables/columns/link.html   |   5 +
 .../src/main/templates/easy_tables/table.html |  34 +++
 humitifier-server/src/main/views.py           |  20 ++
 humitifier-server/tailwind.config.js          |   8 +
 8 files changed, 574 insertions(+), 135 deletions(-)
 create mode 100644 humitifier-server/src/main/easy_tables/__init__.py
 create mode 100644 humitifier-server/src/main/easy_tables/columns.py
 create mode 100644 humitifier-server/src/main/easy_tables/tables.py
 create mode 100644 humitifier-server/src/main/templates/easy_tables/columns/link.html
 create mode 100644 humitifier-server/src/main/templates/easy_tables/table.html

diff --git a/humitifier-server/src/main/easy_tables/__init__.py b/humitifier-server/src/main/easy_tables/__init__.py
new file mode 100644
index 0000000..b57f8c7
--- /dev/null
+++ b/humitifier-server/src/main/easy_tables/__init__.py
@@ -0,0 +1,2 @@
+from .tables import BaseTable
+from .columns import *
diff --git a/humitifier-server/src/main/easy_tables/columns.py b/humitifier-server/src/main/easy_tables/columns.py
new file mode 100644
index 0000000..f676082
--- /dev/null
+++ b/humitifier-server/src/main/easy_tables/columns.py
@@ -0,0 +1,278 @@
+from typing import Callable
+
+from django.template.defaultfilters import date
+from django.template.loader import render_to_string
+from django.utils.safestring import mark_safe
+from django_filters.conf import is_callable
+
+class BaseColumn:
+
+    def __init__(
+            self,
+            header: str | None = None,
+            mark_safe: bool = False,
+            hide_breakpoint: str | None = None,
+            column_classes: list[str] | None = None,
+            **kwargs,
+    ):
+        self.header = header
+        self.mark_safe = mark_safe
+        self.hide_breakpoint = hide_breakpoint
+        self._column_classes = column_classes or []
+
+        self.table = None
+
+        self.extra = kwargs
+
+    @property
+    def column_classes(self):
+        classes = self._column_classes.copy()
+
+        if self.hide_breakpoint:
+            classes.append('hidden')
+            classes.append(f'{self.hide_breakpoint}:table-cell')
+
+        return ' '.join(classes)
+
+    @property
+    def header_classes(self):
+        classes = []
+
+        if self.hide_breakpoint:
+            classes.append('hidden')
+            classes.append(f'{self.hide_breakpoint}:table-cell')
+
+        return ' '.join(classes)
+
+    def contribute_to_class(self, cls):
+        self.table = cls
+
+    def render(self, obj):
+        raise NotImplementedError('Subclasses must implement this method')
+
+class MethodColumn(BaseColumn):
+
+        def __init__(
+                self,
+                *args,
+                method_name: str,
+                **kwargs,
+        ):
+            super().__init__(*args, **kwargs)
+            self.method_name = method_name
+
+        def render(self, obj):
+            method = getattr(self.table, self.method_name, None)
+
+            if not method:
+                return ''
+
+            return method(obj)
+
+
+class ValueColumn(BaseColumn):
+
+    def __init__(
+            self,
+            *args,
+            value_attr: Callable | str = None,
+            default_value: str = '',
+            **kwargs,
+    ):
+        super().__init__(*args, **kwargs)
+        self.value_attr = value_attr
+        self.default_value = default_value
+
+    def get_value(self, obj):
+        if isinstance(obj, dict):
+            if self.value_attr in obj:
+                value = obj[self.value_attr]
+            else:
+                value = None
+        else:
+            value = getattr(obj, self.value_attr, None)
+
+        if not value:
+            return self.default_value
+
+        if is_callable(value):
+            value = value()
+
+        return value
+
+    def render(self, obj):
+        value = self.get_value(obj)
+
+        if self.mark_safe:
+            return mark_safe(value)
+
+        return value
+
+
+class ModelValueColumn(ValueColumn):
+
+    def get_value(self, obj):
+        if hasattr(obj, f"get_{self.value_attr}_display"):
+            return getattr(obj, f"get_{self.value_attr}_display")()
+
+        return getattr(obj, self.value_attr)
+
+
+class BooleanColumn(ValueColumn):
+
+    def __init__(self, *args, yes_no_values = None, **kwargs):
+        super().__init__(*args, **kwargs)
+        self.yes_no_values = yes_no_values or {True: 'Yes', False: 'No',
+                                               None: 'Unknown'}
+
+    def render(self, obj):
+        value = self.get_value(obj)
+
+        # We don't do a direct dict lookup, as we want to handle 'truthy' and
+        # 'falsy' values as well.
+
+        if value is None:
+            return self.yes_no_values[None]
+
+        if value:
+            return self.yes_no_values[True]
+
+        return self.yes_no_values[False]
+
+
+class CompoundColumn(BaseColumn):
+
+    def __init__(
+            self,
+            *args,
+            columns: list[BaseColumn],
+            **kwargs,
+    ):
+        super().__init__(*args, **kwargs)
+        self.columns = columns
+
+    def render(self, obj):
+        output = [
+            column.render(obj) for column in self.columns
+        ]
+        return mark_safe(' '.join(output))
+
+
+class DateColumn(ValueColumn):
+
+    def __init__(
+            self,
+            *args,
+            date_format: str = 'Y-m-d',
+            **kwargs,
+    ):
+        super().__init__(*args, **kwargs)
+        self.date_format = date_format
+
+    def render(self, obj):
+        value = self.get_value(obj)
+
+        if not value:
+            return ''
+
+        return date(value, self.date_format)
+
+
+class DateTimeColumn(DateColumn):
+
+    def __init__(
+            self,
+            *args,
+            date_format: str = "Y-m-d H:i",
+            **kwargs,
+    ):
+        super().__init__(*args, date_format=date_format, **kwargs)
+
+
+class TemplatedColumn(BaseColumn):
+
+    def __init__(
+            self,
+            *args,
+            template_name: str,
+            context: dict | None = None,
+            **kwargs,
+    ):
+        super().__init__(*args, **kwargs)
+        self.template_name = template_name
+        self.context = context or {}
+
+    def get_context(self, obj):
+        context = self.context
+
+        context.update({
+            'column': self,
+            'obj':    obj,
+            'table':  self.table,
+        })
+
+        return context
+
+    def render(self, obj):
+        context = self.get_context(obj)
+
+        return render_to_string(self.template_name, context)
+
+
+class LinkColumn(TemplatedColumn):
+
+    def __init__(
+            self,
+            *args,
+            url: str | Callable,
+            text: str | Callable,
+            open_in_new_tab: bool = False,
+            css_classes: str = 'underline',
+            **kwargs,
+    ):
+        if 'template_name' not in kwargs:
+            kwargs['template_name'] = 'easy_tables/columns/link.html'
+
+        super().__init__(*args, **kwargs)
+
+        self.url = url
+        self.text = text
+        self.open_in_new_tab = open_in_new_tab
+        self.css_classes = css_classes
+
+    def get_url(self, obj):
+        if is_callable(self.url):
+            return self.url(obj)
+
+        return self.url
+
+    def get_text(self, obj):
+        if is_callable(self.text):
+            return self.text(obj)
+
+        return self.text
+
+    def get_context(self, obj):
+        context = super().get_context(obj)
+
+        context.update({
+            'url': self.get_url(obj),
+            'text': self.get_text(obj),
+            'open_in_new_tab': self.open_in_new_tab,
+            'css_classes': self.css_classes,
+        })
+
+        return context
+
+
+class ButtonColumn(LinkColumn):
+
+    def __init__(
+            self,
+            button_class: str = 'btn light:btn-primary dark:btn-outline',
+            *args,
+            **kwargs,
+    ):
+        super().__init__(*args, **kwargs)
+
+        self.css_classes = button_class
diff --git a/humitifier-server/src/main/easy_tables/tables.py b/humitifier-server/src/main/easy_tables/tables.py
new file mode 100644
index 0000000..16469b7
--- /dev/null
+++ b/humitifier-server/src/main/easy_tables/tables.py
@@ -0,0 +1,158 @@
+import copy
+from collections import OrderedDict
+from inspect import isclass
+from typing import Iterable
+
+from django.template.loader import render_to_string
+
+from main.easy_tables.columns import BaseColumn, ModelValueColumn
+
+
+class TableOptions:
+
+    def __init__(self, meta):
+        self.template = getattr(meta, 'template', 'easy_tables/table.html')
+        self.model = getattr(meta, 'model', None)
+        self.columns = getattr(meta, 'columns', [])
+        self.meta = meta
+        self.table = None
+        self.column_type_overrides = getattr(meta, 'column_type_overrides', {})
+        self.column_breakpoint_overrides = getattr(meta, 'column_breakpoint_overrides', {})
+
+    def contribute_to_class(self, cls):
+        self.table = cls
+        columns = []
+
+        if self.model:
+            for field in self.model._meta.fields:
+                if field.name in self.columns:
+
+                    if field.name in self.column_type_overrides:
+                        column = self.column_type_overrides[field.name]
+
+                        if isclass(column):
+                            instance = column(header=field.verbose_name, value_attr=field.name)
+                            columns.append((field.name, instance))
+                        else:
+                            if column.header is None:
+                                column.header = field.verbose_name
+
+                            if hasattr(column, 'value_attr') and column.value_attr is None:
+                                column.value_attr = field.name
+
+                            columns.append((field.name, column))
+                    else:
+                        columns.append((field.name, ModelValueColumn(header=field.verbose_name, value_attr=field.name)))
+
+        return columns
+
+
+class DeclarativeColumnsMetaclass(type):
+    def __new__(mcs, name, bases, attrs):
+
+        # Ignore base class.
+        if not bases:
+            return super().__new__(mcs, name, bases, attrs)
+
+        # Collect columns from current class and remove them from attrs.
+        columns = [
+            (key, value)
+            for key, value in list(attrs.items())
+            if isinstance(value, BaseColumn)
+        ]
+        for key, _ in columns:
+            attrs.pop(key)
+
+        # Create the new class.
+        new_class = super().__new__(mcs, name, bases, attrs)
+
+        # Handle Meta options
+        meta = attrs.get('Meta', None)
+        if meta:
+            meta = TableOptions(meta)
+            new_class._meta = meta
+            extra_columns = meta.contribute_to_class(new_class)
+            if extra_columns:
+                column_keys = [column[0] for column in columns]
+                for key, column in extra_columns:
+                    # Do not override columns declared explicitly in the class.
+                    if key not in column_keys:
+                        columns.append((key, column))
+
+        # Walk through the MRO.
+        declared_columns = OrderedDict(columns)
+        for base in reversed(new_class.__mro__):
+            if hasattr(base, 'declared_columns'):
+                declared_columns.update(base.declared_columns)
+            for key, value in base.__dict__.items():
+                if isinstance(value, BaseColumn):
+                    declared_columns[key] = value
+
+        # If columns are declared in the options class, reorder the columns
+        # based on that order.
+        if new_class._meta.columns:
+            new_order = OrderedDict()
+            for column_name in new_class._meta.columns:
+                if column_name not in declared_columns:
+                    raise ValueError(f'Column {column_name} not found in declared columns.')
+
+                new_order[column_name] = declared_columns[column_name]
+
+            declared_columns = new_order
+
+        for column, bp in new_class._meta.column_breakpoint_overrides.items():
+            if column in declared_columns:
+                declared_columns[column].hide_breakpoint = bp
+
+        new_class.declared_columns = declared_columns
+
+        for column in declared_columns.values():
+            column.contribute_to_class(new_class)
+
+        return new_class
+
+
+class BaseTable(metaclass=DeclarativeColumnsMetaclass):
+
+    def __init__(
+        self,
+        *args,
+        data: Iterable | None = None,
+        paginator=None,
+        ordering: str | None = None,
+        ordering_fields: dict[str, str] | None =None,
+        page_sizes: list[int] | None = None,
+        **kwargs
+    ):
+        self.columns : dict[str, BaseColumn] = copy.deepcopy(self.declared_columns)
+        self.data = data
+        self.paginator = paginator
+        self.ordering = ordering
+        self.ordering_fields = ordering_fields
+        self.page_sizes = page_sizes
+
+        super().__init__(*args, **kwargs)
+
+    def render(self, obj_list = None, paginator = None):
+        data = obj_list or self.data
+        paginator = paginator or self.paginator
+
+        rows = []
+        for obj in data:
+            row = []
+            for column in self.columns.values():
+                row.append((column, column.render(obj)))
+            rows.append(row)
+
+        context = {
+            'table': self,
+            'columns': self.columns,
+            'rows': rows,
+            'has_pagination': paginator is not None,
+            'paginator': paginator,
+            'page_sizes': self.page_sizes,
+            'ordering': self.ordering,
+            'ordering_fields': self.ordering_fields,
+        }
+
+        return render_to_string(self._meta.template, context)
diff --git a/humitifier-server/src/main/static/main/css/tailwind.css b/humitifier-server/src/main/static/main/css/tailwind.css
index 7a51916..248362e 100644
--- a/humitifier-server/src/main/static/main/css/tailwind.css
+++ b/humitifier-server/src/main/static/main/css/tailwind.css
@@ -693,20 +693,6 @@ video {
   background-color: rgb(63 63 70 / var(--tw-bg-opacity));
 }
 
-.btn-primary {
-  --tw-bg-opacity: 1;
-  background-color: rgb(255 205 0 / var(--tw-bg-opacity));
-  --tw-text-opacity: 1;
-  color: rgb(0 0 0 / var(--tw-text-opacity));
-}
-
-.btn-primary:hover {
-  --tw-bg-opacity: 1;
-  background-color: rgb(234 179 8 / var(--tw-bg-opacity));
-  --tw-text-opacity: 1;
-  color: rgb(0 0 0 / var(--tw-text-opacity));
-}
-
 .text-orange {
   --tw-text-opacity: 1;
   color: rgb(249 115 22 / var(--tw-text-opacity));
@@ -773,15 +759,18 @@ video {
   margin-bottom: 0.5rem;
 }
 
-.mx-auto {
-  margin-left: auto;
-  margin-right: auto;
-}
-
 .mb-0 {
   margin-bottom: 0px;
 }
 
+.mb-10 {
+  margin-bottom: 2.5rem;
+}
+
+.mb-2 {
+  margin-bottom: 0.5rem;
+}
+
 .mb-3 {
   margin-bottom: 0.75rem;
 }
@@ -794,6 +783,10 @@ video {
   margin-bottom: 1.5rem;
 }
 
+.mb-7 {
+  margin-bottom: 1.75rem;
+}
+
 .ml-auto {
   margin-left: auto;
 }
@@ -810,36 +803,16 @@ video {
   margin-top: 0.25rem;
 }
 
-.mt-4 {
-  margin-top: 1rem;
-}
-
-.mt-6 {
-  margin-top: 1.5rem;
-}
-
-.mb-8 {
-  margin-bottom: 2rem;
-}
-
 .mt-3 {
   margin-top: 0.75rem;
 }
 
-.mb-7 {
-  margin-bottom: 1.75rem;
-}
-
-.mb-2 {
-  margin-bottom: 0.5rem;
-}
-
-.mb-20 {
-  margin-bottom: 5rem;
+.mt-4 {
+  margin-top: 1rem;
 }
 
-.mb-10 {
-  margin-bottom: 2.5rem;
+.mt-6 {
+  margin-top: 1.5rem;
 }
 
 .block {
@@ -884,26 +857,26 @@ video {
   height: 0.5rem;
 }
 
-.h-full {
-  height: 100%;
-}
-
-.h-screen {
-  height: 100vh;
+.h-24 {
+  height: 6rem;
 }
 
 .h-dvh {
   height: 100dvh;
 }
 
-.h-24 {
-  height: 6rem;
+.h-full {
+  height: 100%;
 }
 
 .h-px {
   height: 1px;
 }
 
+.h-screen {
+  height: 100vh;
+}
+
 .max-h-\[50vh\] {
   max-height: 50vh;
 }
@@ -916,6 +889,10 @@ video {
   width: 50%;
 }
 
+.w-24 {
+  width: 6rem;
+}
+
 .w-64 {
   width: 16rem;
 }
@@ -928,16 +905,12 @@ video {
   width: calc(100vw - 3.5rem);
 }
 
-.w-full {
-  width: 100%;
-}
-
 .w-dvw {
   width: 100dvw;
 }
 
-.w-24 {
-  width: 6rem;
+.w-full {
+  width: 100%;
 }
 
 .flex-shrink {
@@ -1052,10 +1025,6 @@ video {
   gap: 1rem;
 }
 
-.gap-5 {
-  gap: 1.25rem;
-}
-
 .gap-8 {
   gap: 2rem;
 }
@@ -1151,6 +1120,16 @@ video {
   background-color: rgb(228 228 231 / var(--tw-bg-opacity));
 }
 
+.bg-gray-50 {
+  --tw-bg-opacity: 1;
+  background-color: rgb(250 250 250 / var(--tw-bg-opacity));
+}
+
+.bg-gray-600 {
+  --tw-bg-opacity: 1;
+  background-color: rgb(82 82 91 / var(--tw-bg-opacity));
+}
+
 .bg-green-400 {
   --tw-bg-opacity: 1;
   background-color: rgb(74 222 128 / var(--tw-bg-opacity));
@@ -1195,21 +1174,6 @@ video {
   background-color: rgb(255 255 255 / var(--tw-bg-opacity));
 }
 
-.bg-gray-400 {
-  --tw-bg-opacity: 1;
-  background-color: rgb(161 161 170 / var(--tw-bg-opacity));
-}
-
-.bg-gray-600 {
-  --tw-bg-opacity: 1;
-  background-color: rgb(82 82 91 / var(--tw-bg-opacity));
-}
-
-.bg-gray-50 {
-  --tw-bg-opacity: 1;
-  background-color: rgb(250 250 250 / var(--tw-bg-opacity));
-}
-
 .stroke-2 {
   stroke-width: 2;
 }
@@ -1332,6 +1296,11 @@ video {
   line-height: 2.25rem;
 }
 
+.text-4xl {
+  font-size: 2.25rem;
+  line-height: 2.5rem;
+}
+
 .text-sm {
   font-size: 0.875rem;
   line-height: 1.25rem;
@@ -1342,11 +1311,6 @@ video {
   line-height: 1.75rem;
 }
 
-.text-4xl {
-  font-size: 2.25rem;
-  line-height: 2.5rem;
-}
-
 .font-bold {
   font-weight: 700;
 }
@@ -1384,6 +1348,11 @@ video {
   color: rgb(113 113 122 / var(--tw-text-opacity));
 }
 
+.text-gray-600 {
+  --tw-text-opacity: 1;
+  color: rgb(82 82 91 / var(--tw-text-opacity));
+}
+
 .text-gray-700 {
   --tw-text-opacity: 1;
   color: rgb(63 63 70 / var(--tw-text-opacity));
@@ -1419,11 +1388,6 @@ video {
   color: rgb(255 255 255 / var(--tw-text-opacity));
 }
 
-.text-gray-600 {
-  --tw-text-opacity: 1;
-  color: rgb(82 82 91 / var(--tw-text-opacity));
-}
-
 .underline {
   text-decoration-line: underline;
 }
@@ -1505,20 +1469,6 @@ html:not(.dark) .light\:btn-primary:hover {
   background-color: rgb(63 63 70 / var(--tw-bg-opacity));
 }
 
-.dark\:btn-primary:where(.dark, .dark *) {
-  --tw-bg-opacity: 1;
-  background-color: rgb(255 205 0 / var(--tw-bg-opacity));
-  --tw-text-opacity: 1;
-  color: rgb(0 0 0 / var(--tw-text-opacity));
-}
-
-.dark\:btn-primary:where(.dark, .dark *):hover {
-  --tw-bg-opacity: 1;
-  background-color: rgb(234 179 8 / var(--tw-bg-opacity));
-  --tw-text-opacity: 1;
-  color: rgb(0 0 0 / var(--tw-text-opacity));
-}
-
 .last\:mb-0:last-child {
   margin-bottom: 0px;
 }
@@ -1538,6 +1488,12 @@ html:not(.dark) .light\:btn-primary:hover {
   outline-offset: 2px;
 }
 
+@media (min-width: 640px) {
+  .sm\:table-cell {
+    display: table-cell;
+  }
+}
+
 @media (min-width: 768px) {
   .md\:ml-72 {
     margin-left: 18rem;
@@ -1547,6 +1503,10 @@ html:not(.dark) .light\:btn-primary:hover {
     display: block;
   }
 
+  .md\:table-cell {
+    display: table-cell;
+  }
+
   .md\:hidden {
     display: none;
   }
@@ -1555,22 +1515,6 @@ html:not(.dark) .light\:btn-primary:hover {
     width: 16rem;
   }
 
-  .md\:w-96 {
-    width: 24rem;
-  }
-
-  .md\:w-\[100rem\] {
-    width: 100rem;
-  }
-
-  .md\:w-\[70rem\] {
-    width: 70rem;
-  }
-
-  .md\:w-\[60rem\] {
-    width: 60rem;
-  }
-
   .md\:translate-x-0 {
     --tw-translate-x: 0px;
     transform: translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));
@@ -1579,10 +1523,6 @@ html:not(.dark) .light\:btn-primary:hover {
   .md\:grid-cols-\[1fr_2fr\] {
     grid-template-columns: 1fr 2fr;
   }
-
-  .md\:flex-row {
-    flex-direction: row;
-  }
 }
 
 @media (min-width: 1024px) {
@@ -1663,6 +1603,10 @@ html:not(.dark) .light\:btn-primary:hover {
 }
 
 @media (min-width: 2000px) {
+  .ultrawide\:table-cell {
+    display: table-cell;
+  }
+
   .ultrawide\:columns-4 {
     -moz-columns: 4;
          columns: 4;
@@ -1692,6 +1636,11 @@ html:not(.dark) .light\:btn-primary:hover {
   background-color: rgb(30 64 175 / var(--tw-bg-opacity));
 }
 
+.dark\:bg-gray-500:where(.dark, .dark *) {
+  --tw-bg-opacity: 1;
+  background-color: rgb(113 113 122 / var(--tw-bg-opacity));
+}
+
 .dark\:bg-gray-700:where(.dark, .dark *) {
   --tw-bg-opacity: 1;
   background-color: rgb(63 63 70 / var(--tw-bg-opacity));
@@ -1732,21 +1681,6 @@ html:not(.dark) .light\:btn-primary:hover {
   background-color: rgb(153 27 27 / var(--tw-bg-opacity));
 }
 
-.dark\:bg-gray-400:where(.dark, .dark *) {
-  --tw-bg-opacity: 1;
-  background-color: rgb(161 161 170 / var(--tw-bg-opacity));
-}
-
-.dark\:bg-gray-300:where(.dark, .dark *) {
-  --tw-bg-opacity: 1;
-  background-color: rgb(212 212 216 / var(--tw-bg-opacity));
-}
-
-.dark\:bg-gray-500:where(.dark, .dark *) {
-  --tw-bg-opacity: 1;
-  background-color: rgb(113 113 122 / var(--tw-bg-opacity));
-}
-
 .dark\:text-blue-300:where(.dark, .dark *) {
   --tw-text-opacity: 1;
   color: rgb(147 197 253 / var(--tw-text-opacity));
diff --git a/humitifier-server/src/main/templates/easy_tables/columns/link.html b/humitifier-server/src/main/templates/easy_tables/columns/link.html
new file mode 100644
index 0000000..0a791e2
--- /dev/null
+++ b/humitifier-server/src/main/templates/easy_tables/columns/link.html
@@ -0,0 +1,5 @@
+<a
+    href="{{ url }}"
+    class="{{ css_classes }}"
+    {% if open_in_new_tab %}target="_blank"{% endif %}
+>{{ text }}</a>
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/easy_tables/table.html b/humitifier-server/src/main/templates/easy_tables/table.html
new file mode 100644
index 0000000..62fa39c
--- /dev/null
+++ b/humitifier-server/src/main/templates/easy_tables/table.html
@@ -0,0 +1,34 @@
+{% if has_pagination %}
+    <div class="px-7 py-4">
+        {% include 'base/page_parts/paginator_top.html' %}
+    </div>
+{% endif %}
+
+ <table class="w-full table-auto">
+     <thead>
+        <tr class="text-left">
+            {% for column in columns.values %}
+                <th class="{% if forloop.first %}pl-7 {% endif %}{% if forloop.last %}pr-7 {% endif %}py-3 bg-gray-200 dark:bg-gray-700 transition ease-in-out duration-150 {{ column.header_classes }}">
+                    {{ column.header|default:"unknown"|capfirst }}
+                </th>
+            {% endfor %}
+        </tr>
+    </thead>
+    <tbody>
+        {% for row in rows %}
+            <tr class="border-b border-gray-200 hover:bg-neutral-100 dark:border-gray-700 dark:hover:bg-gray-800 transition ease-in-out duration-150">
+                {% for column, content in row %}
+                    <td class="{% if forloop.first %}pl-7 {% endif %}{% if forloop.last %}pr-7 {% endif %}py-5 {{ column.column_classes }}">
+                        {{ content }}
+                    </td>
+                {% endfor %}
+            </tr>
+        {% endfor %}
+    </tbody>
+</table>
+
+{% if has_pagination %}
+    <div class="px-7 py-5">
+        {% include 'base/page_parts/paginator_bottom.html' %}
+    </div>
+{% endif %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/views.py b/humitifier-server/src/main/views.py
index cd647a0..cb7f688 100644
--- a/humitifier-server/src/main/views.py
+++ b/humitifier-server/src/main/views.py
@@ -44,6 +44,26 @@ def handle_no_permission(self):
             self.get_redirect_field_name(),
         )
 
+class TableMixin:
+    table_class = None
+
+    def get_table_class(self):
+        return self.table_class
+
+    def get_context_data(self, **kwargs):
+        context = super().get_context_data(**kwargs)
+
+        table_class = self.get_table_class()
+
+        context['table'] = table_class(
+            data=context['object_list'],
+            paginator=context['paginator'],
+            ordering=context['ordering'],
+            ordering_fields=context['ordering_fields'],
+            page_sizes=context['page_sizes'],
+        )
+
+        return context
 
 ###
 ### Generic views
diff --git a/humitifier-server/tailwind.config.js b/humitifier-server/tailwind.config.js
index 872ebca..6a2b007 100644
--- a/humitifier-server/tailwind.config.js
+++ b/humitifier-server/tailwind.config.js
@@ -3,6 +3,14 @@ const colors = require('tailwindcss/colors')
 /** @type {import('tailwindcss').Config} */
 module.exports = {
     content: ["./src/*/templates/**/*.html"],
+    safelist: [
+        'sm:table-cell',
+        'md:table-cell',
+        'lg:table-cell',
+        'xl:table-cell',
+        '2xl:table-cell',
+        'ultrawide:table-cell',
+    ],
     darkMode: ['selector'],
     theme: {
         container: {

From 78739040a0e16c6bcdc7fc44b5a931a41f100c37 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Wed, 6 Nov 2024 13:12:00 +0100
Subject: [PATCH 09/30] refactor: migrate host table to new table framework

---
 ...9_alter_host_created_at_alter_host_fqdn.py | 23 +++++++++
 humitifier-server/src/hosts/models.py         | 10 +++-
 humitifier-server/src/hosts/tables.py         | 36 +++++++++++++
 .../src/hosts/templates/hosts/list.html       | 50 +------------------
 .../templates/hosts/list_parts/host.html      | 41 ---------------
 .../hosts/list_parts/host_status.html         | 19 +++++++
 humitifier-server/src/hosts/views.py          |  7 +--
 7 files changed, 91 insertions(+), 95 deletions(-)
 create mode 100644 humitifier-server/src/hosts/migrations/0009_alter_host_created_at_alter_host_fqdn.py
 create mode 100644 humitifier-server/src/hosts/tables.py
 delete mode 100644 humitifier-server/src/hosts/templates/hosts/list_parts/host.html
 create mode 100644 humitifier-server/src/hosts/templates/hosts/list_parts/host_status.html

diff --git a/humitifier-server/src/hosts/migrations/0009_alter_host_created_at_alter_host_fqdn.py b/humitifier-server/src/hosts/migrations/0009_alter_host_created_at_alter_host_fqdn.py
new file mode 100644
index 0000000..694a506
--- /dev/null
+++ b/humitifier-server/src/hosts/migrations/0009_alter_host_created_at_alter_host_fqdn.py
@@ -0,0 +1,23 @@
+# Generated by Django 5.1.2 on 2024-11-06 12:10
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("hosts", "0008_host_archival_date_host_archived"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="host",
+            name="created_at",
+            field=models.DateTimeField(auto_now_add=True, verbose_name="Registered"),
+        ),
+        migrations.AlterField(
+            model_name="host",
+            name="fqdn",
+            field=models.CharField(max_length=255, verbose_name="Hostname"),
+        ),
+    ]
diff --git a/humitifier-server/src/hosts/models.py b/humitifier-server/src/hosts/models.py
index 005277e..dcc3252 100644
--- a/humitifier-server/src/hosts/models.py
+++ b/humitifier-server/src/hosts/models.py
@@ -63,7 +63,10 @@ class Meta:
 
     objects = HostManager()
 
-    fqdn = models.CharField(max_length=255)
+    fqdn = models.CharField(
+        "Hostname",
+        max_length=255
+    )
 
     last_scan_cache = models.JSONField(
         null=True,
@@ -73,7 +76,10 @@ class Meta:
         null=True,
     )
 
-    created_at = models.DateTimeField(auto_now_add=True)
+    created_at = models.DateTimeField(
+        "Registered",
+        auto_now_add=True,
+    )
 
     protected = models.BooleanField(default=False)
 
diff --git a/humitifier-server/src/hosts/tables.py b/humitifier-server/src/hosts/tables.py
new file mode 100644
index 0000000..edf18ba
--- /dev/null
+++ b/humitifier-server/src/hosts/tables.py
@@ -0,0 +1,36 @@
+from django.urls import reverse
+
+from hosts.models import Host
+from main.easy_tables import BaseTable, DateTimeColumn, LinkColumn, TemplatedColumn
+
+
+class HostsTable(BaseTable):
+    class Meta:
+        model = Host
+        columns = [
+            'fqdn',
+            'os',
+            'last_scan_date',
+            'created_at',
+            'department',
+            'status',
+        ]
+        column_type_overrides = {
+            'fqdn': LinkColumn(
+                url=lambda obj: reverse('hosts:detail', args=[obj.fqdn]),
+                text=lambda obj: obj.fqdn,
+            ),
+            'last_scan_date': DateTimeColumn,
+            'created_at': DateTimeColumn,
+        }
+        column_breakpoint_overrides = {
+            'os': 'lg',
+            'last_scan_date': 'xl',
+            'created_at': '2xl',
+            'department': 'lg',
+        }
+
+    status = TemplatedColumn(
+        "Status",
+        template_name='hosts/list_parts/host_status.html',
+    )
\ No newline at end of file
diff --git a/humitifier-server/src/hosts/templates/hosts/list.html b/humitifier-server/src/hosts/templates/hosts/list.html
index 27cf4e7..264ed36 100644
--- a/humitifier-server/src/hosts/templates/hosts/list.html
+++ b/humitifier-server/src/hosts/templates/hosts/list.html
@@ -19,54 +19,6 @@ <h1 class="text-3xl font-bold">Hosts</h1>
             </div>
         </div>
 
-        <div class="px-7 py-4">
-            {% include 'base/page_parts/paginator_top.html' %}
-        </div>
-        <table class="w-full table-auto">
-            <thead>
-            <tr class="text-left">
-                <th class="pl-7 py-3 bg-gray-200 dark:bg-gray-700 transition ease-in-out duration-150">
-                    Hostname
-                </th>
-                <th class="py-3 bg-gray-200 dark:bg-gray-700 hidden lg:table-cell transition ease-in-out duration-150">
-                    Operating System
-                </th>
-                <th class="py-3 bg-gray-200 dark:bg-gray-700 hidden xl:table-cell transition ease-in-out duration-150">
-                    Last scan
-                </th>
-                <th class="py-3 bg-gray-200 dark:bg-gray-700 hidden 2xl:table-cell transition ease-in-out duration-150">
-                    Registered
-                </th>
-                <th class="py-3 bg-gray-200 dark:bg-gray-700 hidden lg:table-cell transition ease-in-out duration-150">
-                    Department
-                </th>
-                <th class="pr-7 bg-gray-200 dark:bg-gray-700 transition ease-in-out duration-150">
-                    Status
-                </th>
-            </tr>
-            </thead>
-            <tbody>
-            {% for host in object_list %}
-                {% with host=host %}
-                    {% include 'hosts/list_parts/host.html' %}
-                {% endwith %}
-            {% endfor %}
-            {% if object_list.count == 0 %}
-                <tr>
-                    <td colspan="5" class="text-center py-10">
-                        {% if layout.wild_wasteland %}
-                            No hosts found, have you looked under the rug?
-                        {% else %}
-                            No hosts found
-                        {% endif %}
-                    </td>
-                </tr>
-            {% endif %}
-            </tbody>
-        </table>
-
-        <div class="px-7 py-5">
-            {% include 'base/page_parts/paginator_bottom.html' %}
-        </div>
+        {{ table.render }}
     </div>
 {% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/hosts/templates/hosts/list_parts/host.html b/humitifier-server/src/hosts/templates/hosts/list_parts/host.html
deleted file mode 100644
index 2010b2e..0000000
--- a/humitifier-server/src/hosts/templates/hosts/list_parts/host.html
+++ /dev/null
@@ -1,41 +0,0 @@
-{% load strip_quotes %}
-<tr class="border-b border-gray-200 hover:bg-neutral-100 dark:border-gray-700 dark:hover:bg-gray-800 transition ease-in-out duration-150">
-    <td class="py-5 pl-7">
-        <a href="{% url 'hosts:detail' host.fqdn %}" class="underline">
-            {{ host.fqdn }}
-        </a>
-    </td>
-    <td class="hidden lg:table-cell">
-        {{ host.get_os_display }}
-    </td>
-    <td class="hidden xl:table-cell">
-        {{ host.last_scan_date|date:"Y-m-d H:i" }}
-    </td>
-    <td class="hidden 2xl:table-cell">
-        {{ host.created_at|date:"Y-m-d H:i" }}
-    </td>
-    <td class="hidden lg:table-cell">
-        {{ host.get_department_display }}
-    </td>
-    <td class="pr-7 py-3">
-        <div class="flex gap-3 font-bold">
-            {% if host.alerts.count %}
-                {% if host.num_info_alerts %}
-                    <div class="text-blue-600 dark:text-blue-300">
-                        {% include 'icons/info.html' %} {{ host.num_info_alerts }}
-                    </div>
-                {% endif %}
-                {% if host.num_warning_alerts %}
-                    <div class="text-orange-600 dark:text-orange-500">
-                        {% include 'icons/warning.html' %} {{ host.num_warning_alerts }}
-                    </div>
-                {% endif %}
-                {% if host.num_critical_alerts %}
-                    <div class="text-red-500">
-                        {% include 'icons/critical.html' %} {{ host.num_critical_alerts }}
-                    </div>
-                {% endif %}
-            {% endif %}
-        </div>
-    </td>
-</tr>
diff --git a/humitifier-server/src/hosts/templates/hosts/list_parts/host_status.html b/humitifier-server/src/hosts/templates/hosts/list_parts/host_status.html
new file mode 100644
index 0000000..3582c3f
--- /dev/null
+++ b/humitifier-server/src/hosts/templates/hosts/list_parts/host_status.html
@@ -0,0 +1,19 @@
+<div class="flex gap-3 font-bold">
+    {% if obj.alerts.count %}
+        {% if obj.num_info_alerts %}
+            <div class="text-blue-600 dark:text-blue-300">
+                {% include 'icons/info.html' %} {{ obj.num_info_alerts }}
+            </div>
+        {% endif %}
+        {% if obj.num_warning_alerts %}
+            <div class="text-orange-600 dark:text-orange-500">
+                {% include 'icons/warning.html' %} {{ obj.num_warning_alerts }}
+            </div>
+        {% endif %}
+        {% if obj.num_critical_alerts %}
+            <div class="text-red-500">
+                {% include 'icons/critical.html' %} {{ obj.num_critical_alerts }}
+            </div>
+        {% endif %}
+    {% endif %}
+</div>
\ No newline at end of file
diff --git a/humitifier-server/src/hosts/views.py b/humitifier-server/src/hosts/views.py
index 23b1011..6bcd33d 100644
--- a/humitifier-server/src/hosts/views.py
+++ b/humitifier-server/src/hosts/views.py
@@ -12,15 +12,16 @@
     SingleObjectTemplateResponseMixin
 from django.views.generic.edit import FormMixin
 
-from main.views import FilteredListView, SuperuserRequiredMixin
+from main.views import FilteredListView, SuperuserRequiredMixin, TableMixin
 
 from .filters import HostFilters
 from .models import Host
+from .tables import HostsTable
 
-# Create your views here.
 
-class HostsListView(LoginRequiredMixin, FilteredListView):
+class HostsListView(LoginRequiredMixin, TableMixin, FilteredListView):
     model = Host
+    table_class = HostsTable
     filterset_class = HostFilters
     paginate_by = 50
     template_name = 'hosts/list.html'

From e254eb05e5cb239d9a4c262e447023ab84ce1faf Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Wed, 6 Nov 2024 13:32:02 +0100
Subject: [PATCH 10/30] fix: added missing page_obj variable

---
 humitifier-server/src/main/easy_tables/tables.py | 3 +++
 humitifier-server/src/main/views.py              | 1 +
 2 files changed, 4 insertions(+)

diff --git a/humitifier-server/src/main/easy_tables/tables.py b/humitifier-server/src/main/easy_tables/tables.py
index 16469b7..f716cc7 100644
--- a/humitifier-server/src/main/easy_tables/tables.py
+++ b/humitifier-server/src/main/easy_tables/tables.py
@@ -119,6 +119,7 @@ def __init__(
         *args,
         data: Iterable | None = None,
         paginator=None,
+        page_object=None,
         ordering: str | None = None,
         ordering_fields: dict[str, str] | None =None,
         page_sizes: list[int] | None = None,
@@ -127,6 +128,7 @@ def __init__(
         self.columns : dict[str, BaseColumn] = copy.deepcopy(self.declared_columns)
         self.data = data
         self.paginator = paginator
+        self.page_object = page_object
         self.ordering = ordering
         self.ordering_fields = ordering_fields
         self.page_sizes = page_sizes
@@ -150,6 +152,7 @@ def render(self, obj_list = None, paginator = None):
             'rows': rows,
             'has_pagination': paginator is not None,
             'paginator': paginator,
+            'page_obj': self.page_object,
             'page_sizes': self.page_sizes,
             'ordering': self.ordering,
             'ordering_fields': self.ordering_fields,
diff --git a/humitifier-server/src/main/views.py b/humitifier-server/src/main/views.py
index cb7f688..4ebd216 100644
--- a/humitifier-server/src/main/views.py
+++ b/humitifier-server/src/main/views.py
@@ -58,6 +58,7 @@ def get_context_data(self, **kwargs):
         context['table'] = table_class(
             data=context['object_list'],
             paginator=context['paginator'],
+            page_object=context['page_obj'],
             ordering=context['ordering'],
             ordering_fields=context['ordering_fields'],
             page_sizes=context['page_sizes'],

From 86634248e4e9e6973a71fe7a26ee955c996e959c Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Wed, 6 Nov 2024 14:26:05 +0100
Subject: [PATCH 11/30] fix: added missing filterset variable

---
 humitifier-server/src/main/easy_tables/tables.py | 3 +++
 humitifier-server/src/main/views.py              | 1 +
 2 files changed, 4 insertions(+)

diff --git a/humitifier-server/src/main/easy_tables/tables.py b/humitifier-server/src/main/easy_tables/tables.py
index f716cc7..05aab61 100644
--- a/humitifier-server/src/main/easy_tables/tables.py
+++ b/humitifier-server/src/main/easy_tables/tables.py
@@ -123,6 +123,7 @@ def __init__(
         ordering: str | None = None,
         ordering_fields: dict[str, str] | None =None,
         page_sizes: list[int] | None = None,
+        filterset=None,
         **kwargs
     ):
         self.columns : dict[str, BaseColumn] = copy.deepcopy(self.declared_columns)
@@ -132,6 +133,7 @@ def __init__(
         self.ordering = ordering
         self.ordering_fields = ordering_fields
         self.page_sizes = page_sizes
+        self.filterset = filterset
 
         super().__init__(*args, **kwargs)
 
@@ -156,6 +158,7 @@ def render(self, obj_list = None, paginator = None):
             'page_sizes': self.page_sizes,
             'ordering': self.ordering,
             'ordering_fields': self.ordering_fields,
+            'filterset': self.filterset,
         }
 
         return render_to_string(self._meta.template, context)
diff --git a/humitifier-server/src/main/views.py b/humitifier-server/src/main/views.py
index 4ebd216..c424068 100644
--- a/humitifier-server/src/main/views.py
+++ b/humitifier-server/src/main/views.py
@@ -59,6 +59,7 @@ def get_context_data(self, **kwargs):
             data=context['object_list'],
             paginator=context['paginator'],
             page_object=context['page_obj'],
+            filterset=context['filterset'],
             ordering=context['ordering'],
             ordering_fields=context['ordering_fields'],
             page_sizes=context['page_sizes'],

From 90c0e6597cf685e3bc2b2362c7da0ce2c642bc03 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Wed, 6 Nov 2024 15:39:02 +0100
Subject: [PATCH 12/30] refactor: go to M2M for access profiles

---
 humitifier-server/src/hosts/models.py         | 13 +++++-----
 ...ser_access_profile_user_access_profiles.py | 24 +++++++++++++++++++
 humitifier-server/src/main/models.py          | 16 +++++++++----
 3 files changed, 43 insertions(+), 10 deletions(-)
 create mode 100644 humitifier-server/src/main/migrations/0003_remove_user_access_profile_user_access_profiles.py

diff --git a/humitifier-server/src/hosts/models.py b/humitifier-server/src/hosts/models.py
index dcc3252..0aaa062 100644
--- a/humitifier-server/src/hosts/models.py
+++ b/humitifier-server/src/hosts/models.py
@@ -2,6 +2,7 @@
 from django.db.models import Case, F, Value, When
 from django.utils.safestring import mark_safe
 
+from main.models import User
 from main.templatetags.strip_quotes import strip_quotes
 
 
@@ -40,16 +41,16 @@ def _json_value(field: str):
 
 class HostManager(models.Manager):
 
-    def get_for_user(self, user):
+    def get_for_user(self, user: User):
         if user.is_anonymous:
             return self.get_queryset().none()
 
         if user.is_superuser:
             return self.get_queryset()
 
-        if user.access_profile:
+        if user.access_profiles.exists():
             return self.get_queryset().filter(
-                department__in=user.access_profile.departments_for_filter
+                department__in=user.departments_for_filter
             )
 
         # When a non-superuser has no access profile, THEY GET NOTHING
@@ -225,16 +226,16 @@ class Meta:
 
 class AlertManager(models.Manager):
 
-        def get_for_user(self, user):
+        def get_for_user(self, user: User):
             if user.is_anonymous:
                 return self.get_queryset().none()
 
             if user.is_superuser:
                 return self.get_queryset()
 
-            if user.access_profile:
+            if user.access_profiles.exists():
                 return self.get_queryset().filter(
-                    host__department__in=user.access_profile.departments_for_filter
+                    host__department__in=user.departments_for_filter
                 )
 
             # When a non-superuser has no access profile, THEY GET NOTHING
diff --git a/humitifier-server/src/main/migrations/0003_remove_user_access_profile_user_access_profiles.py b/humitifier-server/src/main/migrations/0003_remove_user_access_profile_user_access_profiles.py
new file mode 100644
index 0000000..0ef23d5
--- /dev/null
+++ b/humitifier-server/src/main/migrations/0003_remove_user_access_profile_user_access_profiles.py
@@ -0,0 +1,24 @@
+# Generated by Django 5.1.2 on 2024-11-06 12:48
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("main", "0002_accessprofile_user_default_home_and_more"),
+    ]
+
+    operations = [
+        migrations.RemoveField(
+            model_name="user",
+            name="access_profile",
+        ),
+        migrations.AddField(
+            model_name="user",
+            name="access_profiles",
+            field=models.ManyToManyField(
+                blank=True, related_name="users", to="main.accessprofile"
+            ),
+        ),
+    ]
diff --git a/humitifier-server/src/main/models.py b/humitifier-server/src/main/models.py
index 73d8e76..4341d6c 100644
--- a/humitifier-server/src/main/models.py
+++ b/humitifier-server/src/main/models.py
@@ -2,12 +2,12 @@
 from django.contrib.postgres.fields import ArrayField
 from django.db import models
 
-# Create your models here.
 
 class HomeOptions(models.TextChoices):
     DASHBOARD = 'dashboard', 'Dashboard'
     HOSTS = 'hosts', 'Hosts'
 
+
 class User(AbstractUser):
 
     is_local_account = models.BooleanField(default=True)
@@ -20,13 +20,21 @@ class User(AbstractUser):
         default=HomeOptions.HOSTS
     )
 
-    access_profile = models.ForeignKey(
+    access_profiles = models.ManyToManyField(
         'AccessProfile',
         blank=True,
-        null=True,
-        on_delete=models.SET_NULL
+        related_name='users',
     )
 
+    @property
+    def departments_for_filter(self):
+        departments = set()
+
+        for access_profile in self.access_profiles.all():
+            departments.update(access_profile.departments_for_filter)
+
+        return departments
+
 
 class AccessProfile(models.Model):
     name = models.CharField(max_length=200)

From b7f82be4fd1f9862d5484846d57e5bde77964e44 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Wed, 6 Nov 2024 15:48:52 +0100
Subject: [PATCH 13/30] fix: use correct redirect_uri

---
 humitifier-server/src/humitifier_server/urls.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/humitifier-server/src/humitifier_server/urls.py b/humitifier-server/src/humitifier_server/urls.py
index ec59f5c..43b48d0 100644
--- a/humitifier-server/src/humitifier_server/urls.py
+++ b/humitifier-server/src/humitifier_server/urls.py
@@ -39,7 +39,7 @@
     # Custom OIDC url conf, because we're hijacking an existing RP config
     urlpatterns += [
         path(
-            "redirect_uri/",
+            "redirect_uri", # NO TRAILING SLASH. IMPORTANT!
             OIDCCallbackClass.as_view(),
             name="oidc_authentication_callback"
         ),

From be5eed00258f5b9ed5fd459cd4d323bad01bfca3 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Wed, 6 Nov 2024 15:50:22 +0100
Subject: [PATCH 14/30] feat: add MFA OIDC acr_values support

---
 humitifier-server/src/humitifier_server/settings.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/humitifier-server/src/humitifier_server/settings.py b/humitifier-server/src/humitifier_server/settings.py
index 470470d..03cdab8 100644
--- a/humitifier-server/src/humitifier_server/settings.py
+++ b/humitifier-server/src/humitifier_server/settings.py
@@ -155,6 +155,13 @@
 
     OIDC_RP_SIGN_ALGO = env.get("OIDC_RP_SIGN_ALGO", default="RS256")
 
+    OIDC_AUTH_REQUEST_EXTRA_PARAMS = {}
+
+    _acr_values = env.get("OIDC_RP_ACR_VALUES", default=None)
+
+    if _acr_values:
+        OIDC_AUTH_REQUEST_EXTRA_PARAMS["acr_values"] = _acr_values
+
     if client_id :=env.get("OIDC_RP_CLIENT_ID", default=None):
         OIDC_RP_CLIENT_ID = client_id
     else:

From 834f752384864f7af3bc3d5181010695d36730fd Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Thu, 7 Nov 2024 15:15:22 +0100
Subject: [PATCH 15/30] feat: re-implement no-data message

---
 humitifier-server/src/hosts/tables.py           |  2 ++
 .../src/main/easy_tables/tables.py              | 17 +++++++++++++++++
 humitifier-server/src/main/views.py             |  1 +
 3 files changed, 20 insertions(+)

diff --git a/humitifier-server/src/hosts/tables.py b/humitifier-server/src/hosts/tables.py
index edf18ba..4f51e93 100644
--- a/humitifier-server/src/hosts/tables.py
+++ b/humitifier-server/src/hosts/tables.py
@@ -29,6 +29,8 @@ class Meta:
             'created_at': '2xl',
             'department': 'lg',
         }
+        no_data_message = "No hosts found. Please check your filters."
+        no_data_message_wild_wasteland = "Oh no! Where have our hosts gone?"
 
     status = TemplatedColumn(
         "Status",
diff --git a/humitifier-server/src/main/easy_tables/tables.py b/humitifier-server/src/main/easy_tables/tables.py
index 05aab61..2d7e017 100644
--- a/humitifier-server/src/main/easy_tables/tables.py
+++ b/humitifier-server/src/main/easy_tables/tables.py
@@ -18,6 +18,16 @@ def __init__(self, meta):
         self.table = None
         self.column_type_overrides = getattr(meta, 'column_type_overrides', {})
         self.column_breakpoint_overrides = getattr(meta, 'column_breakpoint_overrides', {})
+        self.no_data_message = getattr(
+            meta,
+            'no_data_message',
+            'No data available. Please check your filters.'
+        )
+        self.no_data_message_wild_wasteland = getattr(
+            meta,
+            'no_data_message_wild_wasteland',
+            "Oops! Looks like we ran out of data. Time to panic!"
+        )
 
     def contribute_to_class(self, cls):
         self.table = cls
@@ -124,6 +134,7 @@ def __init__(
         ordering_fields: dict[str, str] | None =None,
         page_sizes: list[int] | None = None,
         filterset=None,
+        request=None,
         **kwargs
     ):
         self.columns : dict[str, BaseColumn] = copy.deepcopy(self.declared_columns)
@@ -134,6 +145,7 @@ def __init__(
         self.ordering_fields = ordering_fields
         self.page_sizes = page_sizes
         self.filterset = filterset
+        self.request = request
 
         super().__init__(*args, **kwargs)
 
@@ -148,6 +160,10 @@ def render(self, obj_list = None, paginator = None):
                 row.append((column, column.render(obj)))
             rows.append(row)
 
+        no_data_message = self._meta.no_data_message
+        if self.request and self.request.user.wild_wasteland_mode:
+            no_data_message = self._meta.no_data_message_wild_wasteland
+
         context = {
             'table': self,
             'columns': self.columns,
@@ -159,6 +175,7 @@ def render(self, obj_list = None, paginator = None):
             'ordering': self.ordering,
             'ordering_fields': self.ordering_fields,
             'filterset': self.filterset,
+            'no_data_message': no_data_message,
         }
 
         return render_to_string(self._meta.template, context)
diff --git a/humitifier-server/src/main/views.py b/humitifier-server/src/main/views.py
index c424068..c82e901 100644
--- a/humitifier-server/src/main/views.py
+++ b/humitifier-server/src/main/views.py
@@ -63,6 +63,7 @@ def get_context_data(self, **kwargs):
             ordering=context['ordering'],
             ordering_fields=context['ordering_fields'],
             page_sizes=context['page_sizes'],
+            request=self.request,
         )
 
         return context

From 158b81ce7d0aa47be3fe37038d5b29a63ae6a574 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Thu, 7 Nov 2024 15:24:41 +0100
Subject: [PATCH 16/30] feat: re-implement no-data message

---
 .../src/main/templates/easy_tables/table.html              | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/humitifier-server/src/main/templates/easy_tables/table.html b/humitifier-server/src/main/templates/easy_tables/table.html
index 62fa39c..7260915 100644
--- a/humitifier-server/src/main/templates/easy_tables/table.html
+++ b/humitifier-server/src/main/templates/easy_tables/table.html
@@ -27,6 +27,13 @@
     </tbody>
 </table>
 
+{# Not in the table as it's a pain to deal with colspan and responsiveness #}
+{% if rows|length == 0 %}
+    <div class="pl-7 py-8 text-center" >
+        {{ no_data_message }}
+    </div>
+{% endif %}
+
 {% if has_pagination %}
     <div class="px-7 py-5">
         {% include 'base/page_parts/paginator_bottom.html' %}

From b6abd573352fa086a316ca8d3ae601c6e29dc098 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Thu, 7 Nov 2024 15:24:57 +0100
Subject: [PATCH 17/30] feat: add a check-hide function

---
 humitifier-server/src/main/easy_tables/columns.py | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/humitifier-server/src/main/easy_tables/columns.py b/humitifier-server/src/main/easy_tables/columns.py
index f676082..0eca8f0 100644
--- a/humitifier-server/src/main/easy_tables/columns.py
+++ b/humitifier-server/src/main/easy_tables/columns.py
@@ -270,9 +270,17 @@ class ButtonColumn(LinkColumn):
     def __init__(
             self,
             button_class: str = 'btn light:btn-primary dark:btn-outline',
+            show_check_function: Callable = None,
             *args,
             **kwargs,
     ):
         super().__init__(*args, **kwargs)
 
         self.css_classes = button_class
+        self.show_check_function = show_check_function
+
+    def render(self, obj):
+        if self.show_check_function and not self.show_check_function(obj):
+            return ''
+
+        return super().render(obj)

From 8119cc0899b6be3015140c52721e76a29700b11c Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Thu, 7 Nov 2024 15:25:12 +0100
Subject: [PATCH 18/30] chore: rebuild tailwind

---
 .../src/main/static/main/css/tailwind.css     | 46 +++++++++++++++++++
 .../main/static/main/css/tailwind.input.css   |  4 ++
 2 files changed, 50 insertions(+)

diff --git a/humitifier-server/src/main/static/main/css/tailwind.css b/humitifier-server/src/main/static/main/css/tailwind.css
index 248362e..a76d52e 100644
--- a/humitifier-server/src/main/static/main/css/tailwind.css
+++ b/humitifier-server/src/main/static/main/css/tailwind.css
@@ -641,6 +641,21 @@ video {
   border-color: rgb(82 82 91 / var(--tw-border-opacity));
 }
 
+.input:disabled {
+  cursor: not-allowed;
+  --tw-bg-opacity: 1;
+  background-color: rgb(228 228 231 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(113 113 122 / var(--tw-text-opacity));
+}
+
+.input:disabled:where(.dark, .dark *) {
+  --tw-bg-opacity: 1;
+  background-color: rgb(39 39 42 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(161 161 170 / var(--tw-text-opacity));
+}
+
 .btn {
   border-radius: 0.25rem;
   border-width: 1px;
@@ -693,6 +708,16 @@ video {
   background-color: rgb(63 63 70 / var(--tw-bg-opacity));
 }
 
+.text-blue {
+  --tw-text-opacity: 1;
+  color: rgb(37 99 235 / var(--tw-text-opacity));
+}
+
+.text-blue:where(.dark, .dark *) {
+  --tw-text-opacity: 1;
+  color: rgb(147 197 253 / var(--tw-text-opacity));
+}
+
 .text-orange {
   --tw-text-opacity: 1;
   color: rgb(249 115 22 / var(--tw-text-opacity));
@@ -815,6 +840,10 @@ video {
   margin-top: 1.5rem;
 }
 
+.mt-8 {
+  margin-top: 2rem;
+}
+
 .block {
   display: block;
 }
@@ -905,6 +934,10 @@ video {
   width: calc(100vw - 3.5rem);
 }
 
+.w-auto {
+  width: auto;
+}
+
 .w-dvw {
   width: 100dvw;
 }
@@ -913,6 +946,10 @@ video {
   width: 100%;
 }
 
+.max-w-xl {
+  max-width: 36rem;
+}
+
 .flex-shrink {
   flex-shrink: 1;
 }
@@ -1001,6 +1038,10 @@ video {
   align-items: stretch;
 }
 
+.justify-start {
+  justify-content: flex-start;
+}
+
 .justify-end {
   justify-content: flex-end;
 }
@@ -1258,6 +1299,11 @@ video {
   padding-bottom: 1.25rem;
 }
 
+.py-8 {
+  padding-top: 2rem;
+  padding-bottom: 2rem;
+}
+
 .pb-0 {
   padding-bottom: 0px;
 }
diff --git a/humitifier-server/src/main/static/main/css/tailwind.input.css b/humitifier-server/src/main/static/main/css/tailwind.input.css
index 73cdd63..9abb6f0 100644
--- a/humitifier-server/src/main/static/main/css/tailwind.input.css
+++ b/humitifier-server/src/main/static/main/css/tailwind.input.css
@@ -24,6 +24,10 @@
         @apply w-full px-3 py-2 bg-gray-50 dark:bg-gray-900 text-sm text-gray-700 dark:text-gray-50 placeholder-gray-400 border border-gray-200 dark:border-gray-700 rounded focus-visible:outline-none focus-visible:border-gray-400 dark:focus-visible:border-gray-600 transition duration-150 ease-in-out;
     }
 
+    .input:disabled {
+        @apply bg-gray-200 dark:bg-gray-800 text-gray-500 dark:text-gray-400 cursor-not-allowed;
+    }
+
     .btn {
         @apply px-3 py-2 font-bold rounded transition duration-150 ease-in-out border border-primary;
     }

From ff288760e2bc23cf4646f04f712615f1bb8a9abe Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Thu, 7 Nov 2024 15:26:06 +0100
Subject: [PATCH 19/30] fix: form layout fixes

---
 .../templates/base/forms/field_template.html  | 23 +++++++++++++------
 .../templates/base/forms/form_template.html   | 16 ++++++++++++-
 .../django/forms/widgets/checkbox.html        |  1 +
 .../django/forms/widgets/input_option.html    |  8 +++++++
 .../forms/widgets/input_option_field.html     |  9 ++++++++
 5 files changed, 49 insertions(+), 8 deletions(-)
 create mode 100644 humitifier-server/src/main/templates/django/forms/widgets/checkbox.html
 create mode 100644 humitifier-server/src/main/templates/django/forms/widgets/input_option.html
 create mode 100644 humitifier-server/src/main/templates/django/forms/widgets/input_option_field.html

diff --git a/humitifier-server/src/main/templates/base/forms/field_template.html b/humitifier-server/src/main/templates/base/forms/field_template.html
index 7c27fb9..748054a 100644
--- a/humitifier-server/src/main/templates/base/forms/field_template.html
+++ b/humitifier-server/src/main/templates/base/forms/field_template.html
@@ -1,8 +1,17 @@
-<div class="">
-    {% if field.label %}
-        <label class="font-bold mb-6">{{ field.label }}</label>
+{% load is_checkbox %}
+
+<div class="mb-2">
+    {% if field.field.widget|is_checkbox %}
+        <label class="flex gap-2 font-bold mb-3">
+            {{ field }}
+            <span>{{ field.label }}</span>
+        </label>
+    {% else %}
+        {% if field.label %}
+            <label class="block font-bold mb-3">{{ field.label }}</label>
+        {% endif %}
+        <div>
+            {{ field }}
+        </div>
     {% endif %}
-    <div class="">
-        {{ field }}
-    </div>
-</div>
+</div>
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/base/forms/form_template.html b/humitifier-server/src/main/templates/base/forms/form_template.html
index fb740fc..d07f3a8 100644
--- a/humitifier-server/src/main/templates/base/forms/form_template.html
+++ b/humitifier-server/src/main/templates/base/forms/form_template.html
@@ -1,10 +1,24 @@
-{{ errors }}
+{% if errors %}
+    <div class="text-red-500 mb-4">
+    {{ errors }}
+    </div>
+{% endif %}
+
 {% if errors and not fields %}
   <div>{% for field in hidden_fields %}{{ field }}{% endfor %}</div>
 {% endif %}
 {% for field, errors in fields %}
     {{ field.as_field_group }}
 
+    {% if errors %}
+        <div class="text-red-500 text-sm mt-1">
+            {% for error in errors %}
+                {{ error }}
+            {% endfor %}
+        </div>
+    {% endif %}
+    <div class="mb-4"></div>
+
     {% if forloop.last %}
       {% for field in hidden_fields %}{{ field }}{% endfor %}
     {% endif %}
diff --git a/humitifier-server/src/main/templates/django/forms/widgets/checkbox.html b/humitifier-server/src/main/templates/django/forms/widgets/checkbox.html
new file mode 100644
index 0000000..25859cf
--- /dev/null
+++ b/humitifier-server/src/main/templates/django/forms/widgets/checkbox.html
@@ -0,0 +1 @@
+{% include "django/forms/widgets/input_option_field.html" %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/django/forms/widgets/input_option.html b/humitifier-server/src/main/templates/django/forms/widgets/input_option.html
new file mode 100644
index 0000000..a6a41e4
--- /dev/null
+++ b/humitifier-server/src/main/templates/django/forms/widgets/input_option.html
@@ -0,0 +1,8 @@
+{% if widget.wrap_label %}
+    <label{% if widget.attrs.id %} for="{{ widget.attrs.id }}"{% endif %} class="flex gap-2 justify-start">
+{% endif %}
+{% include "django/forms/widgets/input_option_field.html" %}
+{% if widget.wrap_label %}
+    <span>{{ widget.label }}</span>
+    </label>
+{% endif %}
diff --git a/humitifier-server/src/main/templates/django/forms/widgets/input_option_field.html b/humitifier-server/src/main/templates/django/forms/widgets/input_option_field.html
new file mode 100644
index 0000000..a1b5bd2
--- /dev/null
+++ b/humitifier-server/src/main/templates/django/forms/widgets/input_option_field.html
@@ -0,0 +1,9 @@
+<input
+    type="{{ widget.type }}"
+    class="input w-auto"
+    name="{{ widget.name }}"
+    {% if widget.value != None %}
+    value="{{ widget.value|stringformat:'s' }}"
+    {% endif %}
+    {% include "django/forms/widgets/attrs.html" %}
+>

From ca056807177072facf4cc04b72bd283eab08ae38 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Fri, 8 Nov 2024 15:53:00 +0100
Subject: [PATCH 20/30] feat: add form help text support

---
 .../src/main/templates/base/forms/field_template.html  | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/humitifier-server/src/main/templates/base/forms/field_template.html b/humitifier-server/src/main/templates/base/forms/field_template.html
index 748054a..2a917db 100644
--- a/humitifier-server/src/main/templates/base/forms/field_template.html
+++ b/humitifier-server/src/main/templates/base/forms/field_template.html
@@ -2,14 +2,20 @@
 
 <div class="mb-2">
     {% if field.field.widget|is_checkbox %}
-        <label class="flex gap-2 font-bold mb-3">
+        <label class="flex gap-2 font-bold">
             {{ field }}
             <span>{{ field.label }}</span>
         </label>
+        <div class="text-gray-500 mb-3">
+            {{ field.help_text }}
+        </div>
     {% else %}
         {% if field.label %}
-            <label class="block font-bold mb-3">{{ field.label }}</label>
+            <label class="block font-bold">{{ field.label }}</label>
         {% endif %}
+        <div class="text-gray-500 mb-3">
+            {{ field.help_text }}
+        </div>
         <div>
             {{ field }}
         </div>

From 4917236838c37d51a6e07cacd2fb07a1856af3d8 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Fri, 8 Nov 2024 15:53:48 +0100
Subject: [PATCH 21/30] feat: user management

---
 humitifier-server/src/hosts/filters.py        |  13 +-
 .../src/humitifier_server/oidc_backend.py     |   2 +-
 humitifier-server/src/main/filters.py         |  45 +++++
 humitifier-server/src/main/forms.py           | 113 ++++++++++++-
 .../0004_alter_user_default_home_and_more.py  |  31 ++++
 humitifier-server/src/main/models.py          |   8 +-
 .../src/main/static/main/css/tailwind.css     | 137 ++++++++++++++-
 .../main/static/main/css/tailwind.input.css   |  11 +-
 humitifier-server/src/main/tables.py          |  79 +++++++++
 .../templates/base/page_parts/header.html     |  27 +--
 .../main/templates/main/user_deactivate.html  |  29 ++++
 .../src/main/templates/main/user_form.html    |  39 +++++
 .../src/main/templates/main/user_list.html    |  32 ++++
 .../templates/main/user_list_parts/user.html  |  23 +++
 .../src/main/templates/main/user_profile.html |  48 ++++++
 .../main/user_set_password_form.html          |  24 +++
 .../src/main/templatetags/is_checkbox.py      |   8 +
 humitifier-server/src/main/urls.py            |  16 +-
 humitifier-server/src/main/views.py           | 160 +++++++++++++++++-
 humitifier-server/tailwind.config.js          |   2 +
 20 files changed, 811 insertions(+), 36 deletions(-)
 create mode 100644 humitifier-server/src/main/filters.py
 create mode 100644 humitifier-server/src/main/migrations/0004_alter_user_default_home_and_more.py
 create mode 100644 humitifier-server/src/main/tables.py
 create mode 100644 humitifier-server/src/main/templates/main/user_deactivate.html
 create mode 100644 humitifier-server/src/main/templates/main/user_form.html
 create mode 100644 humitifier-server/src/main/templates/main/user_list.html
 create mode 100644 humitifier-server/src/main/templates/main/user_list_parts/user.html
 create mode 100644 humitifier-server/src/main/templates/main/user_profile.html
 create mode 100644 humitifier-server/src/main/templates/main/user_set_password_form.html
 create mode 100644 humitifier-server/src/main/templatetags/is_checkbox.py

diff --git a/humitifier-server/src/hosts/filters.py b/humitifier-server/src/hosts/filters.py
index 81adf20..36283f9 100644
--- a/humitifier-server/src/hosts/filters.py
+++ b/humitifier-server/src/hosts/filters.py
@@ -1,11 +1,10 @@
-from collections import OrderedDict
-
 import django_filters
 from django.db.models.expressions import RawSQL
-from django.forms import Form
 from django_filters import ChoiceFilter
 
 from hosts.models import Alert, AlertLevel, AlertType, Host
+from main.filters import FiltersForm
+
 
 def _get_choices(field, strip_quotes=True):
     # The empty order_by() is required to remove the default ordering
@@ -91,14 +90,6 @@ def filter(self, qs, value):
         return qs
 
 
-class FiltersForm(Form):
-    template_name = 'base/page_parts/filters_form_template.html'
-
-    def __init__(self, *args, **kwargs):
-        super().__init__(*args, **kwargs)
-
-        for field_name, field in self.fields.items():
-            self.fields[field_name].widget.attrs['placeholder'] = field.label
 
 
 class HostFilters(django_filters.FilterSet):
diff --git a/humitifier-server/src/humitifier_server/oidc_backend.py b/humitifier-server/src/humitifier_server/oidc_backend.py
index 75f1180..d0578e3 100644
--- a/humitifier-server/src/humitifier_server/oidc_backend.py
+++ b/humitifier-server/src/humitifier_server/oidc_backend.py
@@ -16,7 +16,7 @@ def filter_users_by_claims(self, claims):
         username = self.get_username(claims)
         if not username:
             return self.UserModel.objects.none()
-        return self.UserModel.objects.filter(username=username)
+        return self.UserModel.objects.filter(username=username, is_local_account=False)
 
     def get_username(self, claims):
         return claims.get('preferred_username')
diff --git a/humitifier-server/src/main/filters.py b/humitifier-server/src/main/filters.py
new file mode 100644
index 0000000..5d9f96e
--- /dev/null
+++ b/humitifier-server/src/main/filters.py
@@ -0,0 +1,45 @@
+import django_filters
+from django.forms import Form
+
+from main.models import AccessProfile, User
+
+
+class FiltersForm(Form):
+    template_name = 'base/page_parts/filters_form_template.html'
+
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+
+        for field_name, field in self.fields.items():
+            self.fields[field_name].widget.attrs['placeholder'] = field.label
+
+
+class UserFilters(django_filters.FilterSet):
+    class Meta:
+        model = User
+        fields = ['is_active', 'is_local_account', 'access_profile']
+        form = FiltersForm
+
+    is_active = django_filters.ChoiceFilter(
+        empty_label="Is active",
+        field_name="is_active",
+        choices=[
+            (True, "Yes"),
+            (False, "No"),
+        ]
+    )
+
+    is_local_account = django_filters.ChoiceFilter(
+        empty_label="Is local account",
+        field_name="is_local_account",
+        choices=[
+            (True, "Yes"),
+            (False, "No"),
+        ]
+    )
+
+    access_profile = django_filters.ModelChoiceFilter(
+        field_name="access_profile",
+        queryset=AccessProfile.objects.all(),
+        empty_label="Access profile",
+    )
\ No newline at end of file
diff --git a/humitifier-server/src/main/forms.py b/humitifier-server/src/main/forms.py
index 9c0f5ff..c232fd6 100644
--- a/humitifier-server/src/main/forms.py
+++ b/humitifier-server/src/main/forms.py
@@ -1,6 +1,117 @@
+from django import forms
 from django.forms.renderers import TemplatesSetting
 
+from main.models import User
+
 
 class CustomFormRenderer(TemplatesSetting):
-    form_template_name = 'base/forms/form_template.html'
+    form_template_name = "base/forms/form_template.html"
     field_template_name = "base/forms/field_template.html"
+
+
+class UserForm(forms.ModelForm):
+    class Meta:
+        model = User
+        fields = [
+            "username",
+            "email",
+            "first_name",
+            "last_name",
+            "wild_wasteland_mode",
+            "default_home",
+            "is_superuser",
+            "access_profiles",
+        ]
+        widgets = {
+            "access_profiles": forms.CheckboxSelectMultiple,
+        }
+
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+
+        if self.instance and not self.instance.is_local_account:
+            self.fields['username'].disabled = True
+            self.fields['email'].disabled = True
+            self.fields['first_name'].disabled = True
+            self.fields['last_name'].disabled = True
+
+    def clean_username(self):
+        if self.instance and not self.instance.is_local_account:
+            return self.instance.username
+        return self.cleaned_data['username']
+
+    def clean_email(self):
+        if self.instance and not self.instance.is_local_account:
+            return self.instance.email
+        return self.cleaned_data['email']
+
+    def clean_first_name(self):
+        if self.instance and not self.instance.is_local_account:
+            return self.instance.first_name
+        return self.cleaned_data['first_name']
+
+    def clean_last_name(self):
+        if self.instance and not self.instance.is_local_account:
+            return self.instance.last_name
+        return self.cleaned_data['last_name']
+
+
+class UserProfileForm(forms.ModelForm):
+    class Meta:
+        model = User
+        fields = [
+            "wild_wasteland_mode",
+            "default_home",
+        ]
+        widgets = {
+            "wild_wasteland_mode": forms.CheckboxInput,
+        }
+
+
+class CreateSolisUserForm(forms.ModelForm):
+    class Meta:
+        model = User
+        fields = [
+            "username",
+            "is_superuser",
+            "access_profiles",
+        ]
+        widgets = {
+            "access_profiles": forms.CheckboxSelectMultiple,
+        }
+
+
+class SetPasswordForm(forms.ModelForm):
+    class Meta:
+        model = User
+        fields = []
+
+    new_password = forms.CharField(
+        widget=forms.PasswordInput,
+        label='New Password',
+    )
+    password_confirm = forms.CharField(
+        widget=forms.PasswordInput,
+        label='Confirm Password',
+    )
+
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+
+
+        self.fields['new_password'].widget.attrs['placeholder'] = 'hunter2'
+        self.fields['password_confirm'].widget.attrs['placeholder'] = 'hunter2'
+
+    def clean(self):
+        cleaned_data = super().clean()
+        new_password = cleaned_data.get('new_password')
+        password_confirm = cleaned_data.get('password_confirm')
+
+        if new_password != password_confirm:
+            raise forms.ValidationError("Passwords do not match")
+
+        return cleaned_data
+
+    def save(self, commit=True):
+        self.instance.set_password(self.cleaned_data['new_password'])
+        return super().save(commit=commit)
\ No newline at end of file
diff --git a/humitifier-server/src/main/migrations/0004_alter_user_default_home_and_more.py b/humitifier-server/src/main/migrations/0004_alter_user_default_home_and_more.py
new file mode 100644
index 0000000..1d24cd5
--- /dev/null
+++ b/humitifier-server/src/main/migrations/0004_alter_user_default_home_and_more.py
@@ -0,0 +1,31 @@
+# Generated by Django 5.1.2 on 2024-11-08 14:53
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("main", "0003_remove_user_access_profile_user_access_profiles"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="user",
+            name="default_home",
+            field=models.CharField(
+                choices=[("dashboard", "Dashboard"), ("hosts", "Hosts")],
+                default="hosts",
+                help_text="The default page to redirect to after login.",
+                max_length=20,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="user",
+            name="wild_wasteland_mode",
+            field=models.BooleanField(
+                default=False,
+                help_text="Enables easter eggs, non-default as it's less professional.",
+            ),
+        ),
+    ]
diff --git a/humitifier-server/src/main/models.py b/humitifier-server/src/main/models.py
index 4341d6c..d8ca20e 100644
--- a/humitifier-server/src/main/models.py
+++ b/humitifier-server/src/main/models.py
@@ -12,12 +12,16 @@ class User(AbstractUser):
 
     is_local_account = models.BooleanField(default=True)
 
-    wild_wasteland_mode = models.BooleanField(default=False)
+    wild_wasteland_mode = models.BooleanField(
+        default=False,
+        help_text="Enables easter eggs, non-default as it's less professional."
+    )
 
     default_home = models.CharField(
         max_length=20,
         choices=HomeOptions.choices,
-        default=HomeOptions.HOSTS
+        default=HomeOptions.HOSTS,
+        help_text="The default page to redirect to after login."
     )
 
     access_profiles = models.ManyToManyField(
diff --git a/humitifier-server/src/main/static/main/css/tailwind.css b/humitifier-server/src/main/static/main/css/tailwind.css
index a76d52e..139c99f 100644
--- a/humitifier-server/src/main/static/main/css/tailwind.css
+++ b/humitifier-server/src/main/static/main/css/tailwind.css
@@ -568,6 +568,10 @@ video {
   min-height: calc(100vh - 3.5rem);
 }
 
+.top-header {
+  top: 3.5rem;
+}
+
 .section {
   --tw-bg-opacity: 1;
   background-color: rgb(250 250 250 / var(--tw-bg-opacity));
@@ -708,6 +712,66 @@ video {
   background-color: rgb(63 63 70 / var(--tw-bg-opacity));
 }
 
+.btn-primary {
+  --tw-bg-opacity: 1;
+  background-color: rgb(255 205 0 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
+.btn-primary:hover {
+  --tw-bg-opacity: 1;
+  background-color: rgb(234 179 8 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
+.btn-primary:where(.dark, .dark *) {
+  --tw-bg-opacity: 1;
+  background-color: rgb(234 179 8 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
+.btn-primary:hover:where(.dark, .dark *) {
+  --tw-border-opacity: 1;
+  border-color: rgb(250 204 21 / var(--tw-border-opacity));
+  --tw-bg-opacity: 1;
+  background-color: rgb(250 204 21 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
+.btn-danger {
+  --tw-border-opacity: 1;
+  border-color: rgb(239 68 68 / var(--tw-border-opacity));
+  --tw-bg-opacity: 1;
+  background-color: rgb(239 68 68 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(255 255 255 / var(--tw-text-opacity));
+}
+
+.btn-danger:hover {
+  --tw-border-opacity: 1;
+  border-color: rgb(220 38 38 / var(--tw-border-opacity));
+  --tw-bg-opacity: 1;
+  background-color: rgb(220 38 38 / var(--tw-bg-opacity));
+}
+
+.btn-danger:where(.dark, .dark *) {
+  --tw-border-opacity: 1;
+  border-color: rgb(185 28 28 / var(--tw-border-opacity));
+  --tw-bg-opacity: 1;
+  background-color: rgb(185 28 28 / var(--tw-bg-opacity));
+}
+
+.btn-danger:hover:where(.dark, .dark *) {
+  --tw-border-opacity: 1;
+  border-color: rgb(239 68 68 / var(--tw-border-opacity));
+  --tw-bg-opacity: 1;
+  background-color: rgb(239 68 68 / var(--tw-bg-opacity));
+}
+
 .text-blue {
   --tw-text-opacity: 1;
   color: rgb(37 99 235 / var(--tw-text-opacity));
@@ -751,6 +815,10 @@ video {
   left: 0px;
 }
 
+.right-2 {
+  right: 0.5rem;
+}
+
 .top-0 {
   top: 0px;
 }
@@ -767,6 +835,10 @@ video {
   z-index: 40;
 }
 
+.z-50 {
+  z-index: 50;
+}
+
 .col-span-2 {
   grid-column: span 2 / span 2;
 }
@@ -804,10 +876,6 @@ video {
   margin-bottom: 1rem;
 }
 
-.mb-6 {
-  margin-bottom: 1.5rem;
-}
-
 .mb-7 {
   margin-bottom: 1.75rem;
 }
@@ -844,6 +912,22 @@ video {
   margin-top: 2rem;
 }
 
+.mt-5 {
+  margin-top: 1.25rem;
+}
+
+.mt-7 {
+  margin-top: 1.75rem;
+}
+
+.ml-3 {
+  margin-left: 0.75rem;
+}
+
+.ml-2 {
+  margin-left: 0.5rem;
+}
+
 .block {
   display: block;
 }
@@ -946,6 +1030,10 @@ video {
   width: 100%;
 }
 
+.min-w-40 {
+  min-width: 10rem;
+}
+
 .max-w-xl {
   max-width: 36rem;
 }
@@ -1105,6 +1193,11 @@ video {
   border-radius: 0.5rem;
 }
 
+.rounded-b {
+  border-bottom-right-radius: 0.25rem;
+  border-bottom-left-radius: 0.25rem;
+}
+
 .rounded-tl {
   border-top-left-radius: 0.25rem;
 }
@@ -1141,6 +1234,11 @@ video {
   border-color: rgb(253 224 71 / var(--tw-border-opacity));
 }
 
+.border-b-gray-300 {
+  --tw-border-opacity: 1;
+  border-bottom-color: rgb(212 212 216 / var(--tw-border-opacity));
+}
+
 .bg-black {
   --tw-bg-opacity: 1;
   background-color: rgb(0 0 0 / var(--tw-bg-opacity));
@@ -1304,6 +1402,11 @@ video {
   padding-bottom: 2rem;
 }
 
+.py-7 {
+  padding-top: 1.75rem;
+  padding-bottom: 1.75rem;
+}
+
 .pb-0 {
   padding-bottom: 0px;
 }
@@ -1490,6 +1593,22 @@ html:not(.dark) .light\:btn-primary:hover {
   color: rgb(0 0 0 / var(--tw-text-opacity));
 }
 
+html:not(.dark) .light\:btn-primary:where(.dark, .dark *) {
+  --tw-bg-opacity: 1;
+  background-color: rgb(234 179 8 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
+html:not(.dark) .light\:btn-primary:hover:where(.dark, .dark *) {
+  --tw-border-opacity: 1;
+  border-color: rgb(250 204 21 / var(--tw-border-opacity));
+  --tw-bg-opacity: 1;
+  background-color: rgb(250 204 21 / var(--tw-bg-opacity));
+  --tw-text-opacity: 1;
+  color: rgb(0 0 0 / var(--tw-text-opacity));
+}
+
 .dark\:btn-outline:where(.dark, .dark *) {
   border-width: 1px;
   --tw-border-opacity: 1;
@@ -1519,6 +1638,11 @@ html:not(.dark) .light\:btn-primary:hover {
   margin-bottom: 0px;
 }
 
+.hover\:bg-gray-300:hover {
+  --tw-bg-opacity: 1;
+  background-color: rgb(212 212 216 / var(--tw-bg-opacity));
+}
+
 .hover\:bg-neutral-100:hover {
   --tw-bg-opacity: 1;
   background-color: rgb(245 245 245 / var(--tw-bg-opacity));
@@ -1672,6 +1796,11 @@ html:not(.dark) .light\:btn-primary:hover {
   border-color: rgb(63 63 70 / var(--tw-border-opacity));
 }
 
+.dark\:border-b-gray-800:where(.dark, .dark *) {
+  --tw-border-opacity: 1;
+  border-bottom-color: rgb(39 39 42 / var(--tw-border-opacity));
+}
+
 .dark\:bg-blue-300:where(.dark, .dark *) {
   --tw-bg-opacity: 1;
   background-color: rgb(147 197 253 / var(--tw-bg-opacity));
diff --git a/humitifier-server/src/main/static/main/css/tailwind.input.css b/humitifier-server/src/main/static/main/css/tailwind.input.css
index 9abb6f0..9655522 100644
--- a/humitifier-server/src/main/static/main/css/tailwind.input.css
+++ b/humitifier-server/src/main/static/main/css/tailwind.input.css
@@ -12,6 +12,11 @@
         @apply min-h-[calc(100vh-3.5rem)];
     }
 
+    .top-header
+    {
+        @apply top-[3.5rem];
+    }
+
     .section {
         @apply bg p-7 pt-5 rounded;
     }
@@ -45,7 +50,11 @@
     }
 
     .btn-primary {
-        @apply bg-primary text-black hover:bg-yellow-500 hover:text-black;
+        @apply bg-primary text-black hover:bg-yellow-500 hover:text-black dark:bg-yellow-500 dark:text-black dark:hover:bg-yellow-400 dark:hover:border-yellow-400 dark:hover:text-black;
+    }
+
+    .btn-danger {
+        @apply bg-red-500 text-white hover:bg-red-600 border-red-500 hover:border-red-600 dark:border-red-700 dark:bg-red-700 dark:hover:bg-red-500 dark:hover:border-red-500;
     }
 
     .text-blue {
diff --git a/humitifier-server/src/main/tables.py b/humitifier-server/src/main/tables.py
new file mode 100644
index 0000000..2f4061e
--- /dev/null
+++ b/humitifier-server/src/main/tables.py
@@ -0,0 +1,79 @@
+from django.urls import reverse
+from django.utils.safestring import mark_safe
+
+from main.easy_tables import BooleanColumn, BaseTable, ButtonColumn, \
+    CompoundColumn, \
+    MethodColumn, ValueColumn
+from main.models import User
+
+
+class UsersTable(BaseTable):
+    class Meta:
+        model = User
+        columns = [
+            'username',
+            'full_name',
+            'email',
+            'access_profiles',
+            'is_active',
+            'is_local_account',
+            'actions',
+        ]
+        column_type_overrides = {
+            'is_active': BooleanColumn,
+            'is_local_account': BooleanColumn(
+                yes_no_values={True: 'Local', False: 'Solis', None: 'Unknown'}
+            ),
+        }
+        column_breakpoint_overrides = {
+            'full_name': 'lg',
+            'email': 'md',
+            'is_active': 'xl',
+            'is_local_account': '2xl',
+            'access_profiles': 'sm',
+        }
+        no_data_message = "No users found. Please check your filters."
+        no_data_message_wild_wasteland = "It's lonely in here... Where did all the users go?"
+
+    full_name = ValueColumn(
+        "Name",
+        value_attr='get_full_name'
+    )
+
+    actions = CompoundColumn(
+        'Actions',
+        columns=[
+            ButtonColumn(
+                text='Edit',
+                button_class='btn light:btn-primary dark:btn-outline mr-2',
+                url=lambda obj: reverse('main:edit_user', args=[obj.pk]),
+            ),
+            ButtonColumn(
+                text=lambda obj: 'Disable' if obj.is_active else 'Enable',
+                button_class='btn btn-danger mr-2',
+                url=lambda obj: reverse('main:deactivate_user', args=[obj.pk]),
+            ),
+            ButtonColumn(
+                text="Change Password",
+                button_class='btn btn-outline',
+                url=lambda obj: reverse('main:user_change_password', args=[obj.pk]),
+                show_check_function=lambda obj: obj.is_local_account,
+            ),
+        ]
+    )
+
+    # M2M fields are not supported by easy_tables, so let's use a MethodColumn
+    access_profiles = MethodColumn(
+        'Access Profiles',
+        method_name='get_access_profiles'
+    )
+
+    @staticmethod
+    def get_access_profiles(obj: User):
+        if obj.is_superuser:
+            return mark_safe("<span class='text-gray-500'>Superuser</span")
+
+        if obj.access_profiles.exists():
+            return  ', '.join([profile.name for profile in obj.access_profiles.all()])
+
+        return mark_safe("<span class='text-gray-500'>None</span")
diff --git a/humitifier-server/src/main/templates/base/page_parts/header.html b/humitifier-server/src/main/templates/base/page_parts/header.html
index a3ee71b..e1b991d 100644
--- a/humitifier-server/src/main/templates/base/page_parts/header.html
+++ b/humitifier-server/src/main/templates/base/page_parts/header.html
@@ -1,8 +1,9 @@
 <div class="sticky top-0 flex items-center w-100 h-14 bg-primary dark:bg-gray-900 font-semibold px-4 border-b border-yellow-300 dark:border-gray-700 transition ease-in-out duration-150">
 
     <div class="md:hidden mr-2 cursor-pointer" @click="show_sidebar = !show_sidebar">
-        <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="size-6">
-          <path stroke-linecap="round" stroke-linejoin="round" d="M3.75 6.75h16.5M3.75 12h16.5m-16.5 5.25h16.5" />
+        <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor"
+             class="size-6">
+            <path stroke-linecap="round" stroke-linejoin="round" d="M3.75 6.75h16.5M3.75 12h16.5m-16.5 5.25h16.5"/>
         </svg>
     </div>
 
@@ -30,15 +31,19 @@
         </div>
     </div>
 
-    <div class="px-4 flex items-center h-full">
+    <div class="px-4 flex items-center h-full cursor-pointer relative" x-data="{show_dropdown: false}"
+         @click="show_dropdown = !show_dropdown">
         {{ user.get_full_name }}
+        <div x-html="show_dropdown ? '&uarr;' : '&darr;'" class="ml-2"></div>
+        <div class="absolute min-w-40 bg-gray-200 dark:bg-gray-700 top-header right-2 z-50 rounded-b flex-col" x-bind:class="show_dropdown ? 'flex' : 'hidden'">
+            <a href="#" class="px-4 py-3 hover:bg-gray-300 dark:hover:bg-gray-800 border-b border-b-gray-300 dark:border-b-gray-800 text-center">Profile</a>
+            {% if user.is_local_user %}
+                <a href="#" class="px-4 py-3 hover:bg-gray-300 dark:hover:bg-gray-800 border-b border-b-gray-300 dark:border-b-gray-800 text-center">Set password</a>
+            {% endif %}
+            <form action="{% url 'oidc_logout' %}" method="post">
+                {% csrf_token %}
+                <input type="submit" value="Logout" class="px-4 py-3 w-full hover:bg-gray-300 dark:hover:bg-gray-800 w-100">
+            </form>
+        </div>
     </div>
-    {% if user.is_authenticated %}
-      <form action="{% url 'oidc_logout' %}" method="post">
-        {% csrf_token %}
-        <input type="submit" value="Logout" class="cursor-pointer">
-      </form>
-    {% else %}
-      <a href="{% url 'oidc_authentication_init' %}">Login</a>
-    {% endif %}
 </div>
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/main/user_deactivate.html b/humitifier-server/src/main/templates/main/user_deactivate.html
new file mode 100644
index 0000000..ba914e5
--- /dev/null
+++ b/humitifier-server/src/main/templates/main/user_deactivate.html
@@ -0,0 +1,29 @@
+{% extends 'base/base_page_template.html' %}
+
+{% block content %}
+    <div class="h-full--header w-full bg px-7 py-5 ">
+        {% if object.is_active %}
+            <h1 class="text-3xl font-bold">Enable user</h1>
+            <p class="mt-6">
+                Are you sure you want to enable user '<strong>{{ object }}</strong>'?
+            </p>
+        {% else %}
+            <h1 class="text-3xl font-bold">Disable user</h1>
+            <p class="mt-6">
+                Are you sure you want to disable user '<strong>{{ object }}</strong>'?
+            </p>
+        {% endif %}
+        <form method="post">
+            {% csrf_token %}
+            {{ form }}
+            <div class="flex gap-2 mt-6">
+                <a href="{% url 'main:users' %}" class="btn btn-outline">
+                    Cancel
+                </a>
+                <button type="submit" class="btn light:btn-primary dark:btn-outline">
+                    Confirm
+                </button>
+            </div>
+        </form>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/main/user_form.html b/humitifier-server/src/main/templates/main/user_form.html
new file mode 100644
index 0000000..1c88085
--- /dev/null
+++ b/humitifier-server/src/main/templates/main/user_form.html
@@ -0,0 +1,39 @@
+{% extends 'base/base_page_template.html' %}
+
+{% block content %}
+    <div class="h-full--header w-full bg px-7 py-5">
+        {% if object %}
+            <h1 class="text-3xl font-bold">Edit {% if is_solis %}solis-{% endif %}user</h1>
+        {% else %}
+            <h1 class="text-3xl font-bold">Create new {% if is_solis %}solis-{% endif %}user</h1>
+        {% endif %}
+
+        {% if object and not object.is_local_account %}
+            <div class="mt-8 flex gap-2 items-center text-blue">
+                {% include 'icons/warning.html' %}
+                You are editing a Solis user. Some fields are provided by OIDC and cannot be changed.
+            </div>
+        {% endif %}
+
+        <form method="post" class="max-w-xl mt-8">
+            {% csrf_token %}
+            {{ form }}
+
+            {% if object %}
+                <div class="font-bold mb-3 mt-5">Date joined</div>
+                <div class="text-gray-500">{{ form_user.date_joined }}</div>
+                <div class="font-bold mb-3 mt-5">Last login</div>
+                <div class="text-gray-500">{{ form_user.last_login }}</div>
+            {% endif %}
+
+            <div class="flex gap-2 mt-6">
+                <a href="{% url 'main:users' %}" class="btn btn-outline">
+                    Cancel
+                </a>
+                <button type="submit" class="btn light:btn-primary dark:btn-outline">
+                    Confirm
+                </button>
+            </div>
+        </form>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/main/user_list.html b/humitifier-server/src/main/templates/main/user_list.html
new file mode 100644
index 0000000..57dc30a
--- /dev/null
+++ b/humitifier-server/src/main/templates/main/user_list.html
@@ -0,0 +1,32 @@
+{% extends "base/base_page_template.html" %}
+
+{% load humanize %}
+{% load param_replace %}
+
+{% block page_title %}Users | {{ block.super }}{% endblock %}
+
+{% block content %}
+    <div class="h-full--header w-full bg transition ease-in-out duration-150">
+        <div class="px-7 py-5 flex justify-between">
+            <h1 class="text-3xl font-bold">Users</h1>
+            <div class="flex gap-3 text-sm">
+                <a
+                    href="{% url 'main:create_user' %}"
+                    class="btn light:btn-primary dark:btn-outline"
+                >
+                    New {% if layout.oidc_enabled %}local {% endif %}user
+                </a>
+                {% if layout.oidc_enabled %}
+                    <a
+                        href="{% url 'main:create_solis_user' %}"
+                        class="btn light:btn-primary dark:btn-outline"
+                    >
+                        New Solis user
+                    </a>
+                {% endif %}
+            </div>
+        </div>
+
+        {{ table.render }}
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/main/user_list_parts/user.html b/humitifier-server/src/main/templates/main/user_list_parts/user.html
new file mode 100644
index 0000000..730c854
--- /dev/null
+++ b/humitifier-server/src/main/templates/main/user_list_parts/user.html
@@ -0,0 +1,23 @@
+{% load strip_quotes %}
+<tr class="border-b border-gray-200 hover:bg-neutral-100 dark:border-gray-700 dark:hover:bg-gray-800 transition ease-in-out duration-150">
+    <td class="py-5 pl-7">
+        {{ user.get_full_name }}
+    </td>
+    <td class="hidden lg:table-cell">
+        {{ user.email }}
+    </td>
+    <td class="hidden xl:table-cell">
+        {{ user.get_access_profile_display }}
+    </td>
+    <td class="hidden 2xl:table-cell">
+        {{ user.is_active|yesno:"Yes,No" }} {# TODO: icon? #}
+    </td>
+    {% if layout.oidc_enabled %}
+        <td class="hidden lg:table-cell">
+            {{ user.is_local_account|yesno:"Local,Solis" }}
+        </td>
+    {% endif %}
+    <td class="pr-7 py-3">
+        Meep!
+    </td>
+</tr>
diff --git a/humitifier-server/src/main/templates/main/user_profile.html b/humitifier-server/src/main/templates/main/user_profile.html
new file mode 100644
index 0000000..4c3974e
--- /dev/null
+++ b/humitifier-server/src/main/templates/main/user_profile.html
@@ -0,0 +1,48 @@
+{% extends 'base/base_page_template.html' %}
+
+{% block content %}
+    <div class="h-full--header w-full bg px-7 py-5">
+        <h1 class="text-3xl font-bold">User profile</h1>
+        <div class="py-7">
+            <div class="font-bold mb-3">Username</div>
+            <div class="text-gray-500">{{ form_user.username }}</div>
+
+            <div class="font-bold mb-3 mt-5">Email</div>
+            <div class="text-gray-500">{{ form_user.email }}</div>
+
+            <div class="font-bold mb-3 mt-5">First name</div>
+            <div class="text-gray-500">{{ form_user.first_name }}</div>
+
+            <div class="font-bold mb-3 mt-5">Last name</div>
+            <div class="text-gray-500">{{ form_user.last_name }}</div>
+
+            <div class="font-bold mb-3 mt-5">Is superuser</div>
+            <div class="text-gray-500">{{ form_user.is_superuser|yesno:'Yes,No' }}</div>
+
+            <div class="font-bold mb-3 mt-5">Access profiles</div>
+            <div class="text-gray-500">
+                {% if form_user.access_profiles.exists %}
+                    {% for profile in form_user.access_profiles.all %}
+                        {{ profile }}<br>
+                    {% endfor %}
+                {% else %}
+                    No profiles
+                {% endif %}
+            </div>
+
+            <div class="font-bold mb-3 mt-5">Date joined</div>
+            <div class="text-gray-500">{{ form_user.date_joined }}</div>
+        </div>
+
+        <h1 class="text-2xl font-bold mt-4 ">Settings</h1>
+        <form method="post" class="max-w-xl mt-7">
+            {% csrf_token %}
+            {{ form }}
+            <div class="flex gap-2 mt-6">
+                <button type="submit" class="btn light:btn-primary dark:btn-outline">
+                    Save
+                </button>
+            </div>
+        </form>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/main/user_set_password_form.html b/humitifier-server/src/main/templates/main/user_set_password_form.html
new file mode 100644
index 0000000..0522f9e
--- /dev/null
+++ b/humitifier-server/src/main/templates/main/user_set_password_form.html
@@ -0,0 +1,24 @@
+{% extends 'base/base_page_template.html' %}
+
+{% block content %}
+    <div class="h-full--header w-full bg px-7 py-5">
+        <h1 class="text-3xl font-bold">Set password</h1>
+
+        <p>
+            Set a new password for user '<strong>{{ object }}</strong>'.
+        </p>
+
+        <form method="post" class="max-w-xl mt-8">
+            {% csrf_token %}
+            {{ form }}
+            <div class="flex gap-2 mt-6">
+                <a href="{% url 'main:users' %}" class="btn btn-outline">
+                    Cancel
+                </a>
+                <button type="submit" class="btn light:btn-primary dark:btn-outline">
+                    Confirm
+                </button>
+            </div>
+        </form>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/templatetags/is_checkbox.py b/humitifier-server/src/main/templatetags/is_checkbox.py
new file mode 100644
index 0000000..521cc71
--- /dev/null
+++ b/humitifier-server/src/main/templatetags/is_checkbox.py
@@ -0,0 +1,8 @@
+from django import template
+from django.forms.fields import CheckboxInput
+
+register = template.Library()
+
+@register.filter(name='is_checkbox')
+def is_checkbox(value):
+    return isinstance(value, CheckboxInput)
\ No newline at end of file
diff --git a/humitifier-server/src/main/urls.py b/humitifier-server/src/main/urls.py
index fca87e0..79a5d2d 100644
--- a/humitifier-server/src/main/urls.py
+++ b/humitifier-server/src/main/urls.py
@@ -1,16 +1,28 @@
 from django.contrib.auth.views import LoginView
 from django.urls import path
 
-from .views import AccessProfilesView, DashboardView, HomeRedirectView, \
+from .views import AccessProfilesView, CreateSolisUserView, CreateUserView, \
+    DashboardView, \
+    DeActivateUserView, \
+    EditUserView, HomeRedirectView, \
     OAuthApplicationsView, \
-    UsersView
+    SetPasswordView, UserProfileView, UsersView
 
 app_name = 'main'
 
 urlpatterns = [
     path("", HomeRedirectView.as_view(), name="home"),
     path("dashboard/", DashboardView.as_view(), name="dashboard"),
+    path("user_profile/", UserProfileView.as_view(), name="user_profile"),
     path("users/", UsersView.as_view(), name="users"),
+    path("users/create/", CreateUserView.as_view(), name="create_user"),
+    path("users/create-solis/", CreateSolisUserView.as_view(),
+         name="create_solis_user"),
+    path("users/<int:pk>/edit/", EditUserView.as_view(),
+         name="edit_user"),
+    path("users/<int:pk>/change-password/", SetPasswordView.as_view(),
+         name="user_change_password"),
+    path("users/<int:pk>/deactivate/", DeActivateUserView.as_view(), name="deactivate_user"),
     path("access-profiles/", AccessProfilesView.as_view(), name="access_profiles"),
     path("oauth-applications/", OAuthApplicationsView.as_view(), name="oauth_applications"),
 
diff --git a/humitifier-server/src/main/views.py b/humitifier-server/src/main/views.py
index c82e901..bbd6444 100644
--- a/humitifier-server/src/main/views.py
+++ b/humitifier-server/src/main/views.py
@@ -3,12 +3,25 @@
 from django.contrib.auth.mixins import AccessMixin, LoginRequiredMixin
 from django.contrib.auth.views import redirect_to_login
 from django.db.models import Count
+from django.forms import Form
+from django.http import HttpResponseRedirect
 from django.shortcuts import resolve_url
 from django.urls import reverse
-from django.views.generic import ListView, RedirectView, TemplateView
+from django.views.generic import ListView, RedirectView, TemplateView, \
+    UpdateView
+from django.views.generic.detail import BaseDetailView, \
+    SingleObjectTemplateResponseMixin
+from django.views.generic.edit import CreateView, FormMixin
+from rest_framework.reverse import reverse_lazy
 
 from hosts.filters import AlertFilters
 from hosts.models import Alert, Host
+from main.filters import UserFilters
+from main.forms import CreateSolisUserForm, SetPasswordForm, UserForm, \
+    UserProfileForm
+from main.models import User
+from main.tables import UsersTable
+
 
 ###
 ### Mixins
@@ -188,8 +201,149 @@ def get_context_data(self, **kwargs):
 
         return context
 
-class UsersView(LoginRequiredMixin, SuperuserRequiredMixin, TemplateView):
-    template_name = 'main/not_implemented.html'
+class UsersView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    TableMixin,
+    FilteredListView
+):
+    model = User
+    table_class = UsersTable
+    filterset_class = UserFilters
+    paginate_by = 50
+    template_name = 'main/user_list.html'
+    ordering = 'username'
+    ordering_fields = {
+        'username': 'Username',
+        'email': 'Email',
+        'first_name': 'First name',
+        'last_name': 'Last name',
+        'access_profile': 'Access profile',
+    }
+
+    def get_queryset(self):
+        qs = super().get_queryset()
+
+        return qs.prefetch_related('access_profiles')
+
+
+class DeActivateUserView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    SingleObjectTemplateResponseMixin,
+    FormMixin,
+    BaseDetailView
+):
+    model = User
+    form_class = Form
+    template_name = 'main/user_deactivate.html'
+
+    def get_success_url(self):
+        return reverse('main:users')
+
+    def post(self, request, *args, **kwargs):
+        self.object = self.get_object()
+        form = self.get_form()
+        if form.is_valid():
+            return self.form_valid(form)
+        else:
+            return self.form_invalid(form)
+
+    def form_valid(self, form):
+        success_url = self.get_success_url()
+
+        self.object.is_active = not self.object.is_active
+        self.object.save()
+
+        return HttpResponseRedirect(success_url)
+
+class CreateUserView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    CreateView
+):
+    model = User
+    form_class = UserForm
+    success_url = reverse_lazy('main:users')
+    context_object_name = 'form_user' # needed to keep the view from
+    # overriding the user object in the context
+
+
+class CreateSolisUserView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    CreateView
+):
+    model = User
+    form_class = CreateSolisUserForm
+    success_url = reverse_lazy('main:users')
+    context_object_name = 'form_user' # needed to keep the view from
+    # overriding the user object in the context
+
+    def get_context_data(self, **kwargs):
+        context = super().get_context_data(**kwargs)
+
+        context['is_solis'] = True
+
+        return context
+
+    def form_valid(self, form):
+        form.instance.is_local_account = False
+        return super().form_valid(form)
+
+
+class EditUserView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    UpdateView
+):
+    model = User
+    form_class = UserForm
+    success_url = reverse_lazy('main:users')
+    context_object_name = 'form_user' # needed to keep the view from
+    # overriding the user object in the context
+
+
+class UserProfileView(
+    LoginRequiredMixin,
+    UpdateView
+):
+    model = User
+    form_class = UserProfileForm
+    success_url = reverse_lazy('main:user_profile')
+    template_name = 'main/user_profile.html'
+    context_object_name = 'form_user' # needed to keep the view from
+    # overriding the user object in the context
+
+    def get_object(self, queryset=None):
+        return self.request.user
+
+
+class SetPasswordView(
+    LoginRequiredMixin,
+    UpdateView,
+):
+    model = User
+    form_class = SetPasswordForm
+    template_name = 'main/user_set_password_form.html'
+    success_url = reverse_lazy('main:users')
+    context_object_name = 'form_user' # needed to keep the view from
+    # overriding the user object in the context
+
+    def dispatch(self, request, *args, **kwargs):
+        requested_user = self.get_object()
+
+        # Only local accounts can have their password changed
+        if not requested_user.is_local_account:
+            return self.handle_no_permission()
+
+        # Only superusers can change the password of other users
+        if not request.user.is_superuser and request.user != requested_user:
+            return self.handle_no_permission()
+
+        return super().dispatch(request, *args, **kwargs)
+
+
 
 class AccessProfilesView(
     LoginRequiredMixin,
diff --git a/humitifier-server/tailwind.config.js b/humitifier-server/tailwind.config.js
index 6a2b007..177819c 100644
--- a/humitifier-server/tailwind.config.js
+++ b/humitifier-server/tailwind.config.js
@@ -10,6 +10,8 @@ module.exports = {
         'xl:table-cell',
         '2xl:table-cell',
         'ultrawide:table-cell',
+        'btn-danger',
+        'btn-primary',
     ],
     darkMode: ['selector'],
     theme: {

From 313594fd14fea6271b5f67c39cb9866b61dd4ea6 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 11 Nov 2024 13:02:54 +0100
Subject: [PATCH 22/30] feat: ignore sentry logs for non-allowed hosts

---
 .../src/humitifier_server/settings.py             | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/humitifier-server/src/humitifier_server/settings.py b/humitifier-server/src/humitifier_server/settings.py
index 03cdab8..05a60bb 100644
--- a/humitifier-server/src/humitifier_server/settings.py
+++ b/humitifier-server/src/humitifier_server/settings.py
@@ -9,9 +9,9 @@
 For the full list of settings and their values, see
 https://docs.djangoproject.com/en/5.1/ref/settings/
 """
-
 from pathlib import Path
 import re
+from urllib.parse import urlparse
 
 from django.core.exceptions import ImproperlyConfigured
 from rest_framework.reverse import reverse_lazy
@@ -298,6 +298,18 @@
 
 import sentry_sdk
 
+
+def before_send(event, hint):
+    if "request" in event and "url" in event["request"]:
+        url_string = event["request"]["url"]
+        parsed_url = urlparse(url_string)
+        hostname = parsed_url.hostname
+
+        if hostname not in ALLOWED_HOSTS:
+            return None
+
+    return None
+
 DSN = env.get("SENTRY_DSN", default=None)
 if DSN:
     sentry_sdk.init(
@@ -306,4 +318,5 @@
         _experiments={
             "continuous_profiling_auto_start": True,
         },
+        before_send=before_send,
     )

From e3dbb5038dc0e8235b3bac7332964b61cd75296c Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 11 Nov 2024 13:15:20 +0100
Subject: [PATCH 23/30] fix: ehh, don't ignore EVERY error lol

---
 humitifier-server/src/humitifier_server/settings.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/humitifier-server/src/humitifier_server/settings.py b/humitifier-server/src/humitifier_server/settings.py
index 05a60bb..532abfe 100644
--- a/humitifier-server/src/humitifier_server/settings.py
+++ b/humitifier-server/src/humitifier_server/settings.py
@@ -308,7 +308,7 @@ def before_send(event, hint):
         if hostname not in ALLOWED_HOSTS:
             return None
 
-    return None
+    return event
 
 DSN = env.get("SENTRY_DSN", default=None)
 if DSN:

From 844141e3c2f58fc44fa1e3fc1a35e9a91162a031 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 11 Nov 2024 19:11:45 +0100
Subject: [PATCH 24/30] feat: implement access profile management

---
 humitifier-server/src/main/filters.py         | 11 ++++
 humitifier-server/src/main/forms.py           | 47 +++++++++++++++-
 humitifier-server/src/main/models.py          |  4 ++
 humitifier-server/src/main/tables.py          | 32 ++++++++++-
 .../django/forms/widgets/textarea.html        |  5 ++
 .../main/accessprofile_confirm_delete.html    | 24 +++++++++
 .../templates/main/accessprofile_form.html    | 25 +++++++++
 .../templates/main/accessprofile_list.html    | 24 +++++++++
 humitifier-server/src/main/urls.py            | 12 ++++-
 humitifier-server/src/main/views.py           | 53 ++++++++++++++++---
 10 files changed, 225 insertions(+), 12 deletions(-)
 create mode 100644 humitifier-server/src/main/templates/django/forms/widgets/textarea.html
 create mode 100644 humitifier-server/src/main/templates/main/accessprofile_confirm_delete.html
 create mode 100644 humitifier-server/src/main/templates/main/accessprofile_form.html
 create mode 100644 humitifier-server/src/main/templates/main/accessprofile_list.html

diff --git a/humitifier-server/src/main/filters.py b/humitifier-server/src/main/filters.py
index 5d9f96e..7d95401 100644
--- a/humitifier-server/src/main/filters.py
+++ b/humitifier-server/src/main/filters.py
@@ -42,4 +42,15 @@ class Meta:
         field_name="access_profile",
         queryset=AccessProfile.objects.all(),
         empty_label="Access profile",
+    )
+
+class AccessProfileFilters(django_filters.FilterSet):
+    class Meta:
+        model = AccessProfile
+        fields = ['departments']
+        form = FiltersForm
+
+    departments = django_filters.CharFilter(
+        field_name="departments",
+        lookup_expr='icontains',
     )
\ No newline at end of file
diff --git a/humitifier-server/src/main/forms.py b/humitifier-server/src/main/forms.py
index c232fd6..6e07969 100644
--- a/humitifier-server/src/main/forms.py
+++ b/humitifier-server/src/main/forms.py
@@ -1,7 +1,9 @@
 from django import forms
 from django.forms.renderers import TemplatesSetting
+from django.utils.safestring import mark_safe
 
-from main.models import User
+from hosts.filters import _get_choices
+from main.models import AccessProfile, User
 
 
 class CustomFormRenderer(TemplatesSetting):
@@ -114,4 +116,45 @@ def clean(self):
 
     def save(self, commit=True):
         self.instance.set_password(self.cleaned_data['new_password'])
-        return super().save(commit=commit)
\ No newline at end of file
+        return super().save(commit=commit)
+
+
+class DepartmentsWidget(forms.CheckboxSelectMultiple):
+
+    def format_value(self, value):
+        if value is None:
+            return []
+        return value.split(',')
+
+    def optgroups(self, name, value, attrs=None):
+        # First, reset the choices with the current options from the DB
+        # This cannot be done in __init__ because the choices change over time
+        self.choices = _get_choices('department')
+        print(value)
+
+        # Then, add any values that are not in the choices (but are in the
+        # value) to the options, as they might be departments that were removed
+        # from the dataset at some point
+        for val in value:
+            if val not in dict(self.choices):
+                label = val.strip('"')
+                # Mark the label as gray to indicate it's not in the dataset
+                label = mark_safe(f"<span class='text-gray-500'>{label}</span>")
+                self.choices.append((val, label))
+
+        self.choices = sorted(self.choices, key=lambda x: x[0])
+
+        return super().optgroups(name, value, attrs)
+
+
+class AccessProfileForm(forms.ModelForm):
+    class Meta:
+        model = AccessProfile
+        fields = [
+            "name",
+            "description",
+            "departments",
+        ]
+        widgets = {
+            "departments": DepartmentsWidget,
+        }
\ No newline at end of file
diff --git a/humitifier-server/src/main/models.py b/humitifier-server/src/main/models.py
index d8ca20e..7dfdcda 100644
--- a/humitifier-server/src/main/models.py
+++ b/humitifier-server/src/main/models.py
@@ -48,6 +48,10 @@ class AccessProfile(models.Model):
         models.CharField(max_length=200),
     )
 
+    def get_departments_display(self):
+        stripped = [department.strip('"') for department in self.departments]
+        return ', '.join(stripped)
+
     @property
     def departments_for_filter(self):
         departments = []
diff --git a/humitifier-server/src/main/tables.py b/humitifier-server/src/main/tables.py
index 2f4061e..5697130 100644
--- a/humitifier-server/src/main/tables.py
+++ b/humitifier-server/src/main/tables.py
@@ -4,7 +4,7 @@
 from main.easy_tables import BooleanColumn, BaseTable, ButtonColumn, \
     CompoundColumn, \
     MethodColumn, ValueColumn
-from main.models import User
+from main.models import AccessProfile, User
 
 
 class UsersTable(BaseTable):
@@ -77,3 +77,33 @@ def get_access_profiles(obj: User):
             return  ', '.join([profile.name for profile in obj.access_profiles.all()])
 
         return mark_safe("<span class='text-gray-500'>None</span")
+
+
+class AccessProfilesTable(BaseTable):
+    class Meta:
+        model = AccessProfile
+        columns = [
+            'name',
+            'description',
+            'departments',
+            'actions',
+        ]
+        no_data_message = "No access profiles found. Please check your filters."
+        no_data_message_wild_wasteland = ("There are no access profiles here! "
+                                          "Stop looking! There's nothing to see!")
+
+    actions = CompoundColumn(
+        'Actions',
+        columns=[
+            ButtonColumn(
+                text='Edit',
+                button_class='btn light:btn-primary dark:btn-outline mr-2',
+                url=lambda obj: reverse('main:edit_access_profile', args=[obj.pk]),
+            ),
+            ButtonColumn(
+                text='Delete',
+                button_class='btn btn-danger',
+                url=lambda obj: reverse('main:delete_access_profile', args=[obj.pk]),
+            ),
+        ]
+    )
diff --git a/humitifier-server/src/main/templates/django/forms/widgets/textarea.html b/humitifier-server/src/main/templates/django/forms/widgets/textarea.html
new file mode 100644
index 0000000..db4cff5
--- /dev/null
+++ b/humitifier-server/src/main/templates/django/forms/widgets/textarea.html
@@ -0,0 +1,5 @@
+<textarea
+    name="{{ widget.name }}"
+    class="input"
+    {% include "django/forms/widgets/attrs.html" %}
+>{% if widget.value %}{{ widget.value }}{% endif %}</textarea>
diff --git a/humitifier-server/src/main/templates/main/accessprofile_confirm_delete.html b/humitifier-server/src/main/templates/main/accessprofile_confirm_delete.html
new file mode 100644
index 0000000..2ead50b
--- /dev/null
+++ b/humitifier-server/src/main/templates/main/accessprofile_confirm_delete.html
@@ -0,0 +1,24 @@
+{% extends 'base/base_page_template.html' %}
+
+{% block content %}
+    <div class="h-full--header w-full bg px-7 py-5 ">
+        <h1 class="text-3xl font-bold">Delete access profile</h1>
+        <p class="mt-6">
+            Are you sure you want to delete the access profile "{{ object }}"?
+            All users currently using this access profile will have their access
+            granted through this profile revoked.
+        </p>
+        <form method="post">
+            {% csrf_token %}
+            {{ form }}
+            <div class="flex gap-2 mt-6">
+                <a href="{% url 'main:access_profiles' %}" class="btn btn-outline">
+                    Cancel
+                </a>
+                <button type="submit" class="btn btn-danger">
+                    Confirm
+                </button>
+            </div>
+        </form>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/main/accessprofile_form.html b/humitifier-server/src/main/templates/main/accessprofile_form.html
new file mode 100644
index 0000000..addc919
--- /dev/null
+++ b/humitifier-server/src/main/templates/main/accessprofile_form.html
@@ -0,0 +1,25 @@
+{% extends 'base/base_page_template.html' %}
+
+{% block content %}
+    <div class="h-full--header w-full bg px-7 py-5">
+        {% if object %}
+            <h1 class="text-3xl font-bold">Edit access profile</h1>
+        {% else %}
+            <h1 class="text-3xl font-bold">Create new access profile</h1>
+        {% endif %}
+
+        <form method="post" class="max-w-xl mt-8">
+            {% csrf_token %}
+            {{ form }}
+
+            <div class="flex gap-2 mt-6">
+                <a href="{% url 'main:access_profiles' %}" class="btn btn-outline">
+                    Cancel
+                </a>
+                <button type="submit" class="btn light:btn-primary dark:btn-outline">
+                    Confirm
+                </button>
+            </div>
+        </form>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/templates/main/accessprofile_list.html b/humitifier-server/src/main/templates/main/accessprofile_list.html
new file mode 100644
index 0000000..285cc61
--- /dev/null
+++ b/humitifier-server/src/main/templates/main/accessprofile_list.html
@@ -0,0 +1,24 @@
+{% extends "base/base_page_template.html" %}
+
+{% load humanize %}
+{% load param_replace %}
+
+{% block page_title %}Access Profiles | {{ block.super }}{% endblock %}
+
+{% block content %}
+    <div class="h-full--header w-full bg transition ease-in-out duration-150">
+        <div class="px-7 py-5 flex justify-between">
+            <h1 class="text-3xl font-bold">Access Profiles</h1>
+            <div class="flex gap-3 text-sm">
+                <a
+                    href="{% url 'main:create_access_profile' %}"
+                    class="btn light:btn-primary dark:btn-outline"
+                >
+                    New access profile
+                </a>
+            </div>
+        </div>
+
+        {{ table.render }}
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/main/urls.py b/humitifier-server/src/main/urls.py
index 79a5d2d..3ad3838 100644
--- a/humitifier-server/src/main/urls.py
+++ b/humitifier-server/src/main/urls.py
@@ -1,10 +1,12 @@
 from django.contrib.auth.views import LoginView
 from django.urls import path
 
-from .views import AccessProfilesView, CreateSolisUserView, CreateUserView, \
+from .views import AccessProfilesView, CreateAccessProfileView, \
+    CreateSolisUserView, CreateUserView, \
     DashboardView, \
     DeActivateUserView, \
-    EditUserView, HomeRedirectView, \
+    DeleteAccessProfileView, EditAccessProfileView, EditUserView, \
+    HomeRedirectView, \
     OAuthApplicationsView, \
     SetPasswordView, UserProfileView, UsersView
 
@@ -24,6 +26,12 @@
          name="user_change_password"),
     path("users/<int:pk>/deactivate/", DeActivateUserView.as_view(), name="deactivate_user"),
     path("access-profiles/", AccessProfilesView.as_view(), name="access_profiles"),
+    path("access-profiles/create/", CreateAccessProfileView.as_view(),
+         name="create_access_profile"),
+    path("access-profiles/<int:pk>/edit/", EditAccessProfileView.as_view(),
+         name="edit_access_profile"),
+    path("access-profiles/<int:pk>/delete/", DeleteAccessProfileView.as_view(),
+         name="delete_access_profile"),
     path("oauth-applications/", OAuthApplicationsView.as_view(), name="oauth_applications"),
 
     path("login", LoginView.as_view(), name="login"),
diff --git a/humitifier-server/src/main/views.py b/humitifier-server/src/main/views.py
index bbd6444..2b68053 100644
--- a/humitifier-server/src/main/views.py
+++ b/humitifier-server/src/main/views.py
@@ -7,7 +7,8 @@
 from django.http import HttpResponseRedirect
 from django.shortcuts import resolve_url
 from django.urls import reverse
-from django.views.generic import ListView, RedirectView, TemplateView, \
+from django.views.generic import DeleteView, ListView, RedirectView, \
+    TemplateView, \
     UpdateView
 from django.views.generic.detail import BaseDetailView, \
     SingleObjectTemplateResponseMixin
@@ -16,11 +17,12 @@
 
 from hosts.filters import AlertFilters
 from hosts.models import Alert, Host
-from main.filters import UserFilters
-from main.forms import CreateSolisUserForm, SetPasswordForm, UserForm, \
+from main.filters import AccessProfileFilters, UserFilters
+from main.forms import AccessProfileForm, CreateSolisUserForm, SetPasswordForm, \
+    UserForm, \
     UserProfileForm
-from main.models import User
-from main.tables import UsersTable
+from main.models import AccessProfile, User
+from main.tables import AccessProfilesTable, UsersTable
 
 
 ###
@@ -348,9 +350,46 @@ def dispatch(self, request, *args, **kwargs):
 class AccessProfilesView(
     LoginRequiredMixin,
     SuperuserRequiredMixin,
-    TemplateView
+    TableMixin,
+    FilteredListView
+):
+    model = AccessProfile
+    table_class = AccessProfilesTable
+    filterset_class = AccessProfileFilters
+    paginate_by = 50
+    template_name = 'main/accessprofile_list.html'
+    ordering = 'name'
+    ordering_fields = {
+        'name': 'name',
+    }
+
+class CreateAccessProfileView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    CreateView
+):
+    model = AccessProfile
+    form_class = AccessProfileForm
+    success_url = reverse_lazy('main:access_profiles')
+
+
+class EditAccessProfileView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    UpdateView
+):
+    model = AccessProfile
+    form_class = AccessProfileForm
+    success_url = reverse_lazy('main:access_profiles')
+
+
+class DeleteAccessProfileView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    DeleteView
 ):
-    template_name = 'main/not_implemented.html'
+    model = AccessProfile
+    success_url = reverse_lazy('main:access_profiles')
 
 class OAuthApplicationsView(
     LoginRequiredMixin,

From 9fce0ad72b118a7c20820988e715e7c04f7a96ef Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Mon, 11 Nov 2024 19:13:19 +0100
Subject: [PATCH 25/30] fix: added link to user profile to dropdown menu

---
 .../src/main/templates/base/page_parts/header.html              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/humitifier-server/src/main/templates/base/page_parts/header.html b/humitifier-server/src/main/templates/base/page_parts/header.html
index e1b991d..c1b3ed8 100644
--- a/humitifier-server/src/main/templates/base/page_parts/header.html
+++ b/humitifier-server/src/main/templates/base/page_parts/header.html
@@ -36,7 +36,7 @@
         {{ user.get_full_name }}
         <div x-html="show_dropdown ? '&uarr;' : '&darr;'" class="ml-2"></div>
         <div class="absolute min-w-40 bg-gray-200 dark:bg-gray-700 top-header right-2 z-50 rounded-b flex-col" x-bind:class="show_dropdown ? 'flex' : 'hidden'">
-            <a href="#" class="px-4 py-3 hover:bg-gray-300 dark:hover:bg-gray-800 border-b border-b-gray-300 dark:border-b-gray-800 text-center">Profile</a>
+            <a href="{% url 'main:user_profile' %}" class="px-4 py-3 hover:bg-gray-300 dark:hover:bg-gray-800 border-b border-b-gray-300 dark:border-b-gray-800 text-center">Profile</a>
             {% if user.is_local_user %}
                 <a href="#" class="px-4 py-3 hover:bg-gray-300 dark:hover:bg-gray-800 border-b border-b-gray-300 dark:border-b-gray-800 text-center">Set password</a>
             {% endif %}

From 63906b252c474803a5031c82c85d63dba328c25f Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Tue, 12 Nov 2024 13:58:51 +0100
Subject: [PATCH 26/30] feat: api auth + api docs + api implementations

---
 humitifier-server/poetry.lock                 | 325 +++++++++++++++++-
 humitifier-server/pyproject.toml              |   2 +
 humitifier-server/src/api/filters.py          |  11 +
 humitifier-server/src/api/forms.py            |  33 ++
 humitifier-server/src/api/menus.py            |  25 ++
 .../src/api/migrations/0001_initial.py        | 137 ++++++++
 ..._alter_oauth2application_access_profile.py |  26 ++
 humitifier-server/src/api/models.py           |  25 +-
 humitifier-server/src/api/permissions.py      |  16 +
 humitifier-server/src/api/router.py           |   7 +
 humitifier-server/src/api/scopes.py           |  16 +
 humitifier-server/src/api/serializers.py      |  23 ++
 humitifier-server/src/api/tables.py           |  52 +++
 .../api/application_confirm_delete.html       |  23 ++
 .../api/templates/api/application_form.html   |  25 ++
 .../api/templates/api/application_list.html   |  24 ++
 humitifier-server/src/api/urls.py             |  34 +-
 humitifier-server/src/api/views.py            |  37 --
 humitifier-server/src/api/views/__init__.py   |   3 +
 .../src/api/views/applications.py             |  63 ++++
 humitifier-server/src/api/views/read.py       |  31 ++
 humitifier-server/src/api/views/system.py     |  78 +++++
 humitifier-server/src/hosts/filters.py        |   6 +-
 humitifier-server/src/hosts/models.py         |   9 +
 .../src/humitifier_server/settings.py         |  36 ++
 humitifier-server/src/main/menus.py           |  11 -
 .../src/main/static/main/css/tailwind.css     |  16 +
 .../src/main/templates/icons/document.html    |   3 +
 humitifier-server/src/main/urls.py            |   2 -
 humitifier-server/src/main/views.py           |   7 -
 30 files changed, 1044 insertions(+), 62 deletions(-)
 create mode 100644 humitifier-server/src/api/filters.py
 create mode 100644 humitifier-server/src/api/forms.py
 create mode 100644 humitifier-server/src/api/menus.py
 create mode 100644 humitifier-server/src/api/migrations/0001_initial.py
 create mode 100644 humitifier-server/src/api/migrations/0002_alter_oauth2application_access_profile.py
 create mode 100644 humitifier-server/src/api/permissions.py
 create mode 100644 humitifier-server/src/api/router.py
 create mode 100644 humitifier-server/src/api/scopes.py
 create mode 100644 humitifier-server/src/api/serializers.py
 create mode 100644 humitifier-server/src/api/tables.py
 create mode 100644 humitifier-server/src/api/templates/api/application_confirm_delete.html
 create mode 100644 humitifier-server/src/api/templates/api/application_form.html
 create mode 100644 humitifier-server/src/api/templates/api/application_list.html
 delete mode 100644 humitifier-server/src/api/views.py
 create mode 100644 humitifier-server/src/api/views/__init__.py
 create mode 100644 humitifier-server/src/api/views/applications.py
 create mode 100644 humitifier-server/src/api/views/read.py
 create mode 100644 humitifier-server/src/api/views/system.py
 create mode 100644 humitifier-server/src/main/templates/icons/document.html

diff --git a/humitifier-server/poetry.lock b/humitifier-server/poetry.lock
index 82f0f6a..53b7102 100644
--- a/humitifier-server/poetry.lock
+++ b/humitifier-server/poetry.lock
@@ -25,6 +25,25 @@ files = [
 [package.extras]
 tests = ["mypy (>=0.800)", "pytest", "pytest-asyncio"]
 
+[[package]]
+name = "attrs"
+version = "24.2.0"
+description = "Classes Without Boilerplate"
+optional = false
+python-versions = ">=3.7"
+files = [
+    {file = "attrs-24.2.0-py3-none-any.whl", hash = "sha256:81921eb96de3191c8258c199618104dd27ac608d9366f5e35d011eae1867ede2"},
+    {file = "attrs-24.2.0.tar.gz", hash = "sha256:5cfb1b9148b5b086569baec03f20d7b6bf3bcacc9a42bebf87ffaaca362f6346"},
+]
+
+[package.extras]
+benchmark = ["cloudpickle", "hypothesis", "mypy (>=1.11.1)", "pympler", "pytest (>=4.3.0)", "pytest-codspeed", "pytest-mypy-plugins", "pytest-xdist[psutil]"]
+cov = ["cloudpickle", "coverage[toml] (>=5.3)", "hypothesis", "mypy (>=1.11.1)", "pympler", "pytest (>=4.3.0)", "pytest-mypy-plugins", "pytest-xdist[psutil]"]
+dev = ["cloudpickle", "hypothesis", "mypy (>=1.11.1)", "pre-commit", "pympler", "pytest (>=4.3.0)", "pytest-mypy-plugins", "pytest-xdist[psutil]"]
+docs = ["cogapp", "furo", "myst-parser", "sphinx", "sphinx-notfound-page", "sphinxcontrib-towncrier", "towncrier (<24.7)"]
+tests = ["cloudpickle", "hypothesis", "mypy (>=1.11.1)", "pympler", "pytest (>=4.3.0)", "pytest-mypy-plugins", "pytest-xdist[psutil]"]
+tests-mypy = ["mypy (>=1.11.1)", "pytest-mypy-plugins"]
+
 [[package]]
 name = "black"
 version = "24.10.0"
@@ -511,6 +530,23 @@ files = [
 [package.dependencies]
 Django = ">=4.2"
 
+[[package]]
+name = "django-oauth-toolkit"
+version = "3.0.1"
+description = "OAuth2 Provider for Django"
+optional = false
+python-versions = ">=3.8"
+files = [
+    {file = "django_oauth_toolkit-3.0.1-py3-none-any.whl", hash = "sha256:3ef00b062a284f2031b0732b32dc899e3bbf0eac221bbb1cffcb50b8932e55ed"},
+    {file = "django_oauth_toolkit-3.0.1.tar.gz", hash = "sha256:7200e4a9fb229b145a6d808cbf0423b6d69a87f68557437733eec3c0cf71db02"},
+]
+
+[package.dependencies]
+django = ">=4.2"
+jwcrypto = ">=1.5.0"
+oauthlib = ">=3.2.2"
+requests = ">=2.13.0"
+
 [[package]]
 name = "django-simple-menu"
 version = "2.1.3"
@@ -539,6 +575,29 @@ files = [
 [package.dependencies]
 django = ">=4.2"
 
+[[package]]
+name = "drf-spectacular"
+version = "0.27.2"
+description = "Sane and flexible OpenAPI 3 schema generation for Django REST framework"
+optional = false
+python-versions = ">=3.7"
+files = [
+    {file = "drf-spectacular-0.27.2.tar.gz", hash = "sha256:a199492f2163c4101055075ebdbb037d59c6e0030692fc83a1a8c0fc65929981"},
+    {file = "drf_spectacular-0.27.2-py3-none-any.whl", hash = "sha256:b1c04bf8b2fbbeaf6f59414b4ea448c8787aba4d32f76055c3b13335cf7ec37b"},
+]
+
+[package.dependencies]
+Django = ">=2.2"
+djangorestframework = ">=3.10.3"
+inflection = ">=0.3.1"
+jsonschema = ">=2.6.0"
+PyYAML = ">=5.1"
+uritemplate = ">=2.0.0"
+
+[package.extras]
+offline = ["drf-spectacular-sidecar"]
+sidecar = ["drf-spectacular-sidecar"]
+
 [[package]]
 name = "faker"
 version = "30.8.1"
@@ -675,6 +734,17 @@ files = [
 [package.extras]
 all = ["flake8 (>=7.1.1)", "mypy (>=1.11.2)", "pytest (>=8.3.2)", "ruff (>=0.6.2)"]
 
+[[package]]
+name = "inflection"
+version = "0.5.1"
+description = "A port of Ruby on Rails inflector to Python"
+optional = false
+python-versions = ">=3.5"
+files = [
+    {file = "inflection-0.5.1-py2.py3-none-any.whl", hash = "sha256:f38b2b640938a4f35ade69ac3d053042959b62a0f1076a5bbaa1b9526605a8a2"},
+    {file = "inflection-0.5.1.tar.gz", hash = "sha256:1a29730d366e996aaacffb2f1f1cb9593dc38e2ddd30c91250c6dde09ea9b417"},
+]
+
 [[package]]
 name = "jinxed"
 version = "1.3.0"
@@ -707,6 +777,56 @@ pyopenssl = ">=0.13"
 [package.extras]
 docs = ["sphinx (>=4.3.0)", "sphinx-rtd-theme (>=1.0)"]
 
+[[package]]
+name = "jsonschema"
+version = "4.23.0"
+description = "An implementation of JSON Schema validation for Python"
+optional = false
+python-versions = ">=3.8"
+files = [
+    {file = "jsonschema-4.23.0-py3-none-any.whl", hash = "sha256:fbadb6f8b144a8f8cf9f0b89ba94501d143e50411a1278633f56a7acf7fd5566"},
+    {file = "jsonschema-4.23.0.tar.gz", hash = "sha256:d71497fef26351a33265337fa77ffeb82423f3ea21283cd9467bb03999266bc4"},
+]
+
+[package.dependencies]
+attrs = ">=22.2.0"
+jsonschema-specifications = ">=2023.03.6"
+referencing = ">=0.28.4"
+rpds-py = ">=0.7.1"
+
+[package.extras]
+format = ["fqdn", "idna", "isoduration", "jsonpointer (>1.13)", "rfc3339-validator", "rfc3987", "uri-template", "webcolors (>=1.11)"]
+format-nongpl = ["fqdn", "idna", "isoduration", "jsonpointer (>1.13)", "rfc3339-validator", "rfc3986-validator (>0.1.0)", "uri-template", "webcolors (>=24.6.0)"]
+
+[[package]]
+name = "jsonschema-specifications"
+version = "2024.10.1"
+description = "The JSON Schema meta-schemas and vocabularies, exposed as a Registry"
+optional = false
+python-versions = ">=3.9"
+files = [
+    {file = "jsonschema_specifications-2024.10.1-py3-none-any.whl", hash = "sha256:a09a0680616357d9a0ecf05c12ad234479f549239d0f5b55f3deea67475da9bf"},
+    {file = "jsonschema_specifications-2024.10.1.tar.gz", hash = "sha256:0f38b83639958ce1152d02a7f062902c41c8fd20d558b0c34344292d417ae272"},
+]
+
+[package.dependencies]
+referencing = ">=0.31.0"
+
+[[package]]
+name = "jwcrypto"
+version = "1.5.6"
+description = "Implementation of JOSE Web standards"
+optional = false
+python-versions = ">= 3.8"
+files = [
+    {file = "jwcrypto-1.5.6-py3-none-any.whl", hash = "sha256:150d2b0ebbdb8f40b77f543fb44ffd2baeff48788be71f67f03566692fd55789"},
+    {file = "jwcrypto-1.5.6.tar.gz", hash = "sha256:771a87762a0c081ae6166958a954f80848820b2ab066937dc8b8379d65b1b039"},
+]
+
+[package.dependencies]
+cryptography = ">=3.4"
+typing-extensions = ">=4.5.0"
+
 [[package]]
 name = "markdown"
 version = "3.7"
@@ -750,6 +870,22 @@ files = [
     {file = "mypy_extensions-1.0.0.tar.gz", hash = "sha256:75dbf8955dc00442a438fc4d0666508a9a97b6bd41aa2f0ffe9d2f2725af0782"},
 ]
 
+[[package]]
+name = "oauthlib"
+version = "3.2.2"
+description = "A generic, spec-compliant, thorough implementation of the OAuth request-signing logic"
+optional = false
+python-versions = ">=3.6"
+files = [
+    {file = "oauthlib-3.2.2-py3-none-any.whl", hash = "sha256:8139f29aac13e25d502680e9e19963e83f16838d48a0d71c287fe40e7067fbca"},
+    {file = "oauthlib-3.2.2.tar.gz", hash = "sha256:9859c40929662bec5d64f34d01c99e093149682a3f38915dc0655d5a633dd918"},
+]
+
+[package.extras]
+rsa = ["cryptography (>=3.0.0)"]
+signals = ["blinker (>=1.4.0)"]
+signedtoken = ["cryptography (>=3.0.0)", "pyjwt (>=2.0.0,<3)"]
+
 [[package]]
 name = "packaging"
 version = "24.1"
@@ -950,6 +1086,83 @@ files = [
     {file = "pyxdg-0.28.tar.gz", hash = "sha256:3267bb3074e934df202af2ee0868575484108581e6f3cb006af1da35395e88b4"},
 ]
 
+[[package]]
+name = "pyyaml"
+version = "6.0.2"
+description = "YAML parser and emitter for Python"
+optional = false
+python-versions = ">=3.8"
+files = [
+    {file = "PyYAML-6.0.2-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:0a9a2848a5b7feac301353437eb7d5957887edbf81d56e903999a75a3d743086"},
+    {file = "PyYAML-6.0.2-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:29717114e51c84ddfba879543fb232a6ed60086602313ca38cce623c1d62cfbf"},
+    {file = "PyYAML-6.0.2-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:8824b5a04a04a047e72eea5cec3bc266db09e35de6bdfe34c9436ac5ee27d237"},
+    {file = "PyYAML-6.0.2-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:7c36280e6fb8385e520936c3cb3b8042851904eba0e58d277dca80a5cfed590b"},
+    {file = "PyYAML-6.0.2-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:ec031d5d2feb36d1d1a24380e4db6d43695f3748343d99434e6f5f9156aaa2ed"},
+    {file = "PyYAML-6.0.2-cp310-cp310-musllinux_1_1_aarch64.whl", hash = "sha256:936d68689298c36b53b29f23c6dbb74de12b4ac12ca6cfe0e047bedceea56180"},
+    {file = "PyYAML-6.0.2-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:23502f431948090f597378482b4812b0caae32c22213aecf3b55325e049a6c68"},
+    {file = "PyYAML-6.0.2-cp310-cp310-win32.whl", hash = "sha256:2e99c6826ffa974fe6e27cdb5ed0021786b03fc98e5ee3c5bfe1fd5015f42b99"},
+    {file = "PyYAML-6.0.2-cp310-cp310-win_amd64.whl", hash = "sha256:a4d3091415f010369ae4ed1fc6b79def9416358877534caf6a0fdd2146c87a3e"},
+    {file = "PyYAML-6.0.2-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:cc1c1159b3d456576af7a3e4d1ba7e6924cb39de8f67111c735f6fc832082774"},
+    {file = "PyYAML-6.0.2-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:1e2120ef853f59c7419231f3bf4e7021f1b936f6ebd222406c3b60212205d2ee"},
+    {file = "PyYAML-6.0.2-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:5d225db5a45f21e78dd9358e58a98702a0302f2659a3c6cd320564b75b86f47c"},
+    {file = "PyYAML-6.0.2-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:5ac9328ec4831237bec75defaf839f7d4564be1e6b25ac710bd1a96321cc8317"},
+    {file = "PyYAML-6.0.2-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:3ad2a3decf9aaba3d29c8f537ac4b243e36bef957511b4766cb0057d32b0be85"},
+    {file = "PyYAML-6.0.2-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:ff3824dc5261f50c9b0dfb3be22b4567a6f938ccce4587b38952d85fd9e9afe4"},
+    {file = "PyYAML-6.0.2-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:797b4f722ffa07cc8d62053e4cff1486fa6dc094105d13fea7b1de7d8bf71c9e"},
+    {file = "PyYAML-6.0.2-cp311-cp311-win32.whl", hash = "sha256:11d8f3dd2b9c1207dcaf2ee0bbbfd5991f571186ec9cc78427ba5bd32afae4b5"},
+    {file = "PyYAML-6.0.2-cp311-cp311-win_amd64.whl", hash = "sha256:e10ce637b18caea04431ce14fabcf5c64a1c61ec9c56b071a4b7ca131ca52d44"},
+    {file = "PyYAML-6.0.2-cp312-cp312-macosx_10_9_x86_64.whl", hash = "sha256:c70c95198c015b85feafc136515252a261a84561b7b1d51e3384e0655ddf25ab"},
+    {file = "PyYAML-6.0.2-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:ce826d6ef20b1bc864f0a68340c8b3287705cae2f8b4b1d932177dcc76721725"},
+    {file = "PyYAML-6.0.2-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:1f71ea527786de97d1a0cc0eacd1defc0985dcf6b3f17bb77dcfc8c34bec4dc5"},
+    {file = "PyYAML-6.0.2-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:9b22676e8097e9e22e36d6b7bda33190d0d400f345f23d4065d48f4ca7ae0425"},
+    {file = "PyYAML-6.0.2-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:80bab7bfc629882493af4aa31a4cfa43a4c57c83813253626916b8c7ada83476"},
+    {file = "PyYAML-6.0.2-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:0833f8694549e586547b576dcfaba4a6b55b9e96098b36cdc7ebefe667dfed48"},
+    {file = "PyYAML-6.0.2-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:8b9c7197f7cb2738065c481a0461e50ad02f18c78cd75775628afb4d7137fb3b"},
+    {file = "PyYAML-6.0.2-cp312-cp312-win32.whl", hash = "sha256:ef6107725bd54b262d6dedcc2af448a266975032bc85ef0172c5f059da6325b4"},
+    {file = "PyYAML-6.0.2-cp312-cp312-win_amd64.whl", hash = "sha256:7e7401d0de89a9a855c839bc697c079a4af81cf878373abd7dc625847d25cbd8"},
+    {file = "PyYAML-6.0.2-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:efdca5630322a10774e8e98e1af481aad470dd62c3170801852d752aa7a783ba"},
+    {file = "PyYAML-6.0.2-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:50187695423ffe49e2deacb8cd10510bc361faac997de9efef88badc3bb9e2d1"},
+    {file = "PyYAML-6.0.2-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:0ffe8360bab4910ef1b9e87fb812d8bc0a308b0d0eef8c8f44e0254ab3b07133"},
+    {file = "PyYAML-6.0.2-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:17e311b6c678207928d649faa7cb0d7b4c26a0ba73d41e99c4fff6b6c3276484"},
+    {file = "PyYAML-6.0.2-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:70b189594dbe54f75ab3a1acec5f1e3faa7e8cf2f1e08d9b561cb41b845f69d5"},
+    {file = "PyYAML-6.0.2-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:41e4e3953a79407c794916fa277a82531dd93aad34e29c2a514c2c0c5fe971cc"},
+    {file = "PyYAML-6.0.2-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:68ccc6023a3400877818152ad9a1033e3db8625d899c72eacb5a668902e4d652"},
+    {file = "PyYAML-6.0.2-cp313-cp313-win32.whl", hash = "sha256:bc2fa7c6b47d6bc618dd7fb02ef6fdedb1090ec036abab80d4681424b84c1183"},
+    {file = "PyYAML-6.0.2-cp313-cp313-win_amd64.whl", hash = "sha256:8388ee1976c416731879ac16da0aff3f63b286ffdd57cdeb95f3f2e085687563"},
+    {file = "PyYAML-6.0.2-cp38-cp38-macosx_10_9_x86_64.whl", hash = "sha256:24471b829b3bf607e04e88d79542a9d48bb037c2267d7927a874e6c205ca7e9a"},
+    {file = "PyYAML-6.0.2-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:d7fded462629cfa4b685c5416b949ebad6cec74af5e2d42905d41e257e0869f5"},
+    {file = "PyYAML-6.0.2-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:d84a1718ee396f54f3a086ea0a66d8e552b2ab2017ef8b420e92edbc841c352d"},
+    {file = "PyYAML-6.0.2-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:9056c1ecd25795207ad294bcf39f2db3d845767be0ea6e6a34d856f006006083"},
+    {file = "PyYAML-6.0.2-cp38-cp38-musllinux_1_1_x86_64.whl", hash = "sha256:82d09873e40955485746739bcb8b4586983670466c23382c19cffecbf1fd8706"},
+    {file = "PyYAML-6.0.2-cp38-cp38-win32.whl", hash = "sha256:43fa96a3ca0d6b1812e01ced1044a003533c47f6ee8aca31724f78e93ccc089a"},
+    {file = "PyYAML-6.0.2-cp38-cp38-win_amd64.whl", hash = "sha256:01179a4a8559ab5de078078f37e5c1a30d76bb88519906844fd7bdea1b7729ff"},
+    {file = "PyYAML-6.0.2-cp39-cp39-macosx_10_9_x86_64.whl", hash = "sha256:688ba32a1cffef67fd2e9398a2efebaea461578b0923624778664cc1c914db5d"},
+    {file = "PyYAML-6.0.2-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:a8786accb172bd8afb8be14490a16625cbc387036876ab6ba70912730faf8e1f"},
+    {file = "PyYAML-6.0.2-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:d8e03406cac8513435335dbab54c0d385e4a49e4945d2909a581c83647ca0290"},
+    {file = "PyYAML-6.0.2-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:f753120cb8181e736c57ef7636e83f31b9c0d1722c516f7e86cf15b7aa57ff12"},
+    {file = "PyYAML-6.0.2-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:3b1fdb9dc17f5a7677423d508ab4f243a726dea51fa5e70992e59a7411c89d19"},
+    {file = "PyYAML-6.0.2-cp39-cp39-musllinux_1_1_aarch64.whl", hash = "sha256:0b69e4ce7a131fe56b7e4d770c67429700908fc0752af059838b1cfb41960e4e"},
+    {file = "PyYAML-6.0.2-cp39-cp39-musllinux_1_1_x86_64.whl", hash = "sha256:a9f8c2e67970f13b16084e04f134610fd1d374bf477b17ec1599185cf611d725"},
+    {file = "PyYAML-6.0.2-cp39-cp39-win32.whl", hash = "sha256:6395c297d42274772abc367baaa79683958044e5d3835486c16da75d2a694631"},
+    {file = "PyYAML-6.0.2-cp39-cp39-win_amd64.whl", hash = "sha256:39693e1f8320ae4f43943590b49779ffb98acb81f788220ea932a6b6c51004d8"},
+    {file = "pyyaml-6.0.2.tar.gz", hash = "sha256:d584d9ec91ad65861cc08d42e834324ef890a082e591037abe114850ff7bbc3e"},
+]
+
+[[package]]
+name = "referencing"
+version = "0.35.1"
+description = "JSON Referencing + Python"
+optional = false
+python-versions = ">=3.8"
+files = [
+    {file = "referencing-0.35.1-py3-none-any.whl", hash = "sha256:eda6d3234d62814d1c64e305c1331c9a3a6132da475ab6382eaa997b21ee75de"},
+    {file = "referencing-0.35.1.tar.gz", hash = "sha256:25b42124a6c8b632a425174f24087783efb348a6f1e0008e63cd4466fedf703c"},
+]
+
+[package.dependencies]
+attrs = ">=22.2.0"
+rpds-py = ">=0.7.0"
+
 [[package]]
 name = "requests"
 version = "2.32.3"
@@ -971,6 +1184,105 @@ urllib3 = ">=1.21.1,<3"
 socks = ["PySocks (>=1.5.6,!=1.5.7)"]
 use-chardet-on-py3 = ["chardet (>=3.0.2,<6)"]
 
+[[package]]
+name = "rpds-py"
+version = "0.21.0"
+description = "Python bindings to Rust's persistent data structures (rpds)"
+optional = false
+python-versions = ">=3.9"
+files = [
+    {file = "rpds_py-0.21.0-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:a017f813f24b9df929674d0332a374d40d7f0162b326562daae8066b502d0590"},
+    {file = "rpds_py-0.21.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:20cc1ed0bcc86d8e1a7e968cce15be45178fd16e2ff656a243145e0b439bd250"},
+    {file = "rpds_py-0.21.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:ad116dda078d0bc4886cb7840e19811562acdc7a8e296ea6ec37e70326c1b41c"},
+    {file = "rpds_py-0.21.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:808f1ac7cf3b44f81c9475475ceb221f982ef548e44e024ad5f9e7060649540e"},
+    {file = "rpds_py-0.21.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:de552f4a1916e520f2703ec474d2b4d3f86d41f353e7680b597512ffe7eac5d0"},
+    {file = "rpds_py-0.21.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:efec946f331349dfc4ae9d0e034c263ddde19414fe5128580f512619abed05f1"},
+    {file = "rpds_py-0.21.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:b80b4690bbff51a034bfde9c9f6bf9357f0a8c61f548942b80f7b66356508bf5"},
+    {file = "rpds_py-0.21.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:085ed25baac88953d4283e5b5bd094b155075bb40d07c29c4f073e10623f9f2e"},
+    {file = "rpds_py-0.21.0-cp310-cp310-musllinux_1_2_aarch64.whl", hash = "sha256:daa8efac2a1273eed2354397a51216ae1e198ecbce9036fba4e7610b308b6153"},
+    {file = "rpds_py-0.21.0-cp310-cp310-musllinux_1_2_i686.whl", hash = "sha256:95a5bad1ac8a5c77b4e658671642e4af3707f095d2b78a1fdd08af0dfb647624"},
+    {file = "rpds_py-0.21.0-cp310-cp310-musllinux_1_2_x86_64.whl", hash = "sha256:3e53861b29a13d5b70116ea4230b5f0f3547b2c222c5daa090eb7c9c82d7f664"},
+    {file = "rpds_py-0.21.0-cp310-none-win32.whl", hash = "sha256:ea3a6ac4d74820c98fcc9da4a57847ad2cc36475a8bd9683f32ab6d47a2bd682"},
+    {file = "rpds_py-0.21.0-cp310-none-win_amd64.whl", hash = "sha256:b8f107395f2f1d151181880b69a2869c69e87ec079c49c0016ab96860b6acbe5"},
+    {file = "rpds_py-0.21.0-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:5555db3e618a77034954b9dc547eae94166391a98eb867905ec8fcbce1308d95"},
+    {file = "rpds_py-0.21.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:97ef67d9bbc3e15584c2f3c74bcf064af36336c10d2e21a2131e123ce0f924c9"},
+    {file = "rpds_py-0.21.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:4ab2c2a26d2f69cdf833174f4d9d86118edc781ad9a8fa13970b527bf8236027"},
+    {file = "rpds_py-0.21.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:4e8921a259f54bfbc755c5bbd60c82bb2339ae0324163f32868f63f0ebb873d9"},
+    {file = "rpds_py-0.21.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:8a7ff941004d74d55a47f916afc38494bd1cfd4b53c482b77c03147c91ac0ac3"},
+    {file = "rpds_py-0.21.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:5145282a7cd2ac16ea0dc46b82167754d5e103a05614b724457cffe614f25bd8"},
+    {file = "rpds_py-0.21.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:de609a6f1b682f70bb7163da745ee815d8f230d97276db049ab447767466a09d"},
+    {file = "rpds_py-0.21.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:40c91c6e34cf016fa8e6b59d75e3dbe354830777fcfd74c58b279dceb7975b75"},
+    {file = "rpds_py-0.21.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:d2132377f9deef0c4db89e65e8bb28644ff75a18df5293e132a8d67748397b9f"},
+    {file = "rpds_py-0.21.0-cp311-cp311-musllinux_1_2_i686.whl", hash = "sha256:0a9e0759e7be10109645a9fddaaad0619d58c9bf30a3f248a2ea57a7c417173a"},
+    {file = "rpds_py-0.21.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:9e20da3957bdf7824afdd4b6eeb29510e83e026473e04952dca565170cd1ecc8"},
+    {file = "rpds_py-0.21.0-cp311-none-win32.whl", hash = "sha256:f71009b0d5e94c0e86533c0b27ed7cacc1239cb51c178fd239c3cfefefb0400a"},
+    {file = "rpds_py-0.21.0-cp311-none-win_amd64.whl", hash = "sha256:e168afe6bf6ab7ab46c8c375606298784ecbe3ba31c0980b7dcbb9631dcba97e"},
+    {file = "rpds_py-0.21.0-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:30b912c965b2aa76ba5168fd610087bad7fcde47f0a8367ee8f1876086ee6d1d"},
+    {file = "rpds_py-0.21.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:ca9989d5d9b1b300bc18e1801c67b9f6d2c66b8fd9621b36072ed1df2c977f72"},
+    {file = "rpds_py-0.21.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:6f54e7106f0001244a5f4cf810ba8d3f9c542e2730821b16e969d6887b664266"},
+    {file = "rpds_py-0.21.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:fed5dfefdf384d6fe975cc026886aece4f292feaf69d0eeb716cfd3c5a4dd8be"},
+    {file = "rpds_py-0.21.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:590ef88db231c9c1eece44dcfefd7515d8bf0d986d64d0caf06a81998a9e8cab"},
+    {file = "rpds_py-0.21.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:f983e4c2f603c95dde63df633eec42955508eefd8d0f0e6d236d31a044c882d7"},
+    {file = "rpds_py-0.21.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:b229ce052ddf1a01c67d68166c19cb004fb3612424921b81c46e7ea7ccf7c3bf"},
+    {file = "rpds_py-0.21.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:ebf64e281a06c904a7636781d2e973d1f0926a5b8b480ac658dc0f556e7779f4"},
+    {file = "rpds_py-0.21.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:998a8080c4495e4f72132f3d66ff91f5997d799e86cec6ee05342f8f3cda7dca"},
+    {file = "rpds_py-0.21.0-cp312-cp312-musllinux_1_2_i686.whl", hash = "sha256:98486337f7b4f3c324ab402e83453e25bb844f44418c066623db88e4c56b7c7b"},
+    {file = "rpds_py-0.21.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:a78d8b634c9df7f8d175451cfeac3810a702ccb85f98ec95797fa98b942cea11"},
+    {file = "rpds_py-0.21.0-cp312-none-win32.whl", hash = "sha256:a58ce66847711c4aa2ecfcfaff04cb0327f907fead8945ffc47d9407f41ff952"},
+    {file = "rpds_py-0.21.0-cp312-none-win_amd64.whl", hash = "sha256:e860f065cc4ea6f256d6f411aba4b1251255366e48e972f8a347cf88077b24fd"},
+    {file = "rpds_py-0.21.0-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:ee4eafd77cc98d355a0d02f263efc0d3ae3ce4a7c24740010a8b4012bbb24937"},
+    {file = "rpds_py-0.21.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:688c93b77e468d72579351a84b95f976bd7b3e84aa6686be6497045ba84be560"},
+    {file = "rpds_py-0.21.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:c38dbf31c57032667dd5a2f0568ccde66e868e8f78d5a0d27dcc56d70f3fcd3b"},
+    {file = "rpds_py-0.21.0-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:2d6129137f43f7fa02d41542ffff4871d4aefa724a5fe38e2c31a4e0fd343fb0"},
+    {file = "rpds_py-0.21.0-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:520ed8b99b0bf86a176271f6fe23024323862ac674b1ce5b02a72bfeff3fff44"},
+    {file = "rpds_py-0.21.0-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:aaeb25ccfb9b9014a10eaf70904ebf3f79faaa8e60e99e19eef9f478651b9b74"},
+    {file = "rpds_py-0.21.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:af04ac89c738e0f0f1b913918024c3eab6e3ace989518ea838807177d38a2e94"},
+    {file = "rpds_py-0.21.0-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:b9b76e2afd585803c53c5b29e992ecd183f68285b62fe2668383a18e74abe7a3"},
+    {file = "rpds_py-0.21.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:5afb5efde74c54724e1a01118c6e5c15e54e642c42a1ba588ab1f03544ac8c7a"},
+    {file = "rpds_py-0.21.0-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:52c041802a6efa625ea18027a0723676a778869481d16803481ef6cc02ea8cb3"},
+    {file = "rpds_py-0.21.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:ee1e4fc267b437bb89990b2f2abf6c25765b89b72dd4a11e21934df449e0c976"},
+    {file = "rpds_py-0.21.0-cp313-none-win32.whl", hash = "sha256:0c025820b78817db6a76413fff6866790786c38f95ea3f3d3c93dbb73b632202"},
+    {file = "rpds_py-0.21.0-cp313-none-win_amd64.whl", hash = "sha256:320c808df533695326610a1b6a0a6e98f033e49de55d7dc36a13c8a30cfa756e"},
+    {file = "rpds_py-0.21.0-cp39-cp39-macosx_10_12_x86_64.whl", hash = "sha256:2c51d99c30091f72a3c5d126fad26236c3f75716b8b5e5cf8effb18889ced928"},
+    {file = "rpds_py-0.21.0-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:cbd7504a10b0955ea287114f003b7ad62330c9e65ba012c6223dba646f6ffd05"},
+    {file = "rpds_py-0.21.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:6dcc4949be728ede49e6244eabd04064336012b37f5c2200e8ec8eb2988b209c"},
+    {file = "rpds_py-0.21.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:f414da5c51bf350e4b7960644617c130140423882305f7574b6cf65a3081cecb"},
+    {file = "rpds_py-0.21.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:9afe42102b40007f588666bc7de82451e10c6788f6f70984629db193849dced1"},
+    {file = "rpds_py-0.21.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:3b929c2bb6e29ab31f12a1117c39f7e6d6450419ab7464a4ea9b0b417174f044"},
+    {file = "rpds_py-0.21.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:8404b3717da03cbf773a1d275d01fec84ea007754ed380f63dfc24fb76ce4592"},
+    {file = "rpds_py-0.21.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:e12bb09678f38b7597b8346983d2323a6482dcd59e423d9448108c1be37cac9d"},
+    {file = "rpds_py-0.21.0-cp39-cp39-musllinux_1_2_aarch64.whl", hash = "sha256:58a0e345be4b18e6b8501d3b0aa540dad90caeed814c515e5206bb2ec26736fd"},
+    {file = "rpds_py-0.21.0-cp39-cp39-musllinux_1_2_i686.whl", hash = "sha256:c3761f62fcfccf0864cc4665b6e7c3f0c626f0380b41b8bd1ce322103fa3ef87"},
+    {file = "rpds_py-0.21.0-cp39-cp39-musllinux_1_2_x86_64.whl", hash = "sha256:c2b2f71c6ad6c2e4fc9ed9401080badd1469fa9889657ec3abea42a3d6b2e1ed"},
+    {file = "rpds_py-0.21.0-cp39-none-win32.whl", hash = "sha256:b21747f79f360e790525e6f6438c7569ddbfb1b3197b9e65043f25c3c9b489d8"},
+    {file = "rpds_py-0.21.0-cp39-none-win_amd64.whl", hash = "sha256:0626238a43152918f9e72ede9a3b6ccc9e299adc8ade0d67c5e142d564c9a83d"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-macosx_10_12_x86_64.whl", hash = "sha256:6b4ef7725386dc0762857097f6b7266a6cdd62bfd209664da6712cb26acef035"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl", hash = "sha256:6bc0e697d4d79ab1aacbf20ee5f0df80359ecf55db33ff41481cf3e24f206919"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:da52d62a96e61c1c444f3998c434e8b263c384f6d68aca8274d2e08d1906325c"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:98e4fe5db40db87ce1c65031463a760ec7906ab230ad2249b4572c2fc3ef1f9f"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:30bdc973f10d28e0337f71d202ff29345320f8bc49a31c90e6c257e1ccef4333"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:faa5e8496c530f9c71f2b4e1c49758b06e5f4055e17144906245c99fa6d45356"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:32eb88c30b6a4f0605508023b7141d043a79b14acb3b969aa0b4f99b25bc7d4a"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:a89a8ce9e4e75aeb7fa5d8ad0f3fecdee813802592f4f46a15754dcb2fd6b061"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl", hash = "sha256:241e6c125568493f553c3d0fdbb38c74babf54b45cef86439d4cd97ff8feb34d"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl", hash = "sha256:3b766a9f57663396e4f34f5140b3595b233a7b146e94777b97a8413a1da1be18"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl", hash = "sha256:af4a644bf890f56e41e74be7d34e9511e4954894d544ec6b8efe1e21a1a8da6c"},
+    {file = "rpds_py-0.21.0-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:3e30a69a706e8ea20444b98a49f386c17b26f860aa9245329bab0851ed100677"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-macosx_10_12_x86_64.whl", hash = "sha256:031819f906bb146561af051c7cef4ba2003d28cff07efacef59da973ff7969ba"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl", hash = "sha256:b876f2bc27ab5954e2fd88890c071bd0ed18b9c50f6ec3de3c50a5ece612f7a6"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:dc5695c321e518d9f03b7ea6abb5ea3af4567766f9852ad1560f501b17588c7b"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:b4de1da871b5c0fd5537b26a6fc6814c3cc05cabe0c941db6e9044ffbb12f04a"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:878f6fea96621fda5303a2867887686d7a198d9e0f8a40be100a63f5d60c88c9"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:a8eeec67590e94189f434c6d11c426892e396ae59e4801d17a93ac96b8c02a6c"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:1ff2eba7f6c0cb523d7e9cff0903f2fe1feff8f0b2ceb6bd71c0e20a4dcee271"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:a429b99337062877d7875e4ff1a51fe788424d522bd64a8c0a20ef3021fdb6ed"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl", hash = "sha256:d167e4dbbdac48bd58893c7e446684ad5d425b407f9336e04ab52e8b9194e2ed"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl", hash = "sha256:4eb2de8a147ffe0626bfdc275fc6563aa7bf4b6db59cf0d44f0ccd6ca625a24e"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl", hash = "sha256:e78868e98f34f34a88e23ee9ccaeeec460e4eaf6db16d51d7a9b883e5e785a5e"},
+    {file = "rpds_py-0.21.0-pp39-pypy39_pp73-win_amd64.whl", hash = "sha256:4991ca61656e3160cdaca4851151fd3f4a92e9eba5c7a530ab030d6aee96ec89"},
+    {file = "rpds_py-0.21.0.tar.gz", hash = "sha256:ed6378c9d66d0de903763e7706383d60c33829581f0adff47b6535f1802fa6db"},
+]
+
 [[package]]
 name = "sentry-sdk"
 version = "2.17.0"
@@ -1072,6 +1384,17 @@ files = [
     {file = "tzdata-2024.2.tar.gz", hash = "sha256:7d85cc416e9382e69095b7bdf4afd9e3880418a2413feec7069d533d6b4e31cc"},
 ]
 
+[[package]]
+name = "uritemplate"
+version = "4.1.1"
+description = "Implementation of RFC 6570 URI Templates"
+optional = false
+python-versions = ">=3.6"
+files = [
+    {file = "uritemplate-4.1.1-py2.py3-none-any.whl", hash = "sha256:830c08b8d99bdd312ea4ead05994a38e8936266f84b9a7878232db50b044e02e"},
+    {file = "uritemplate-4.1.1.tar.gz", hash = "sha256:4346edfc5c3b79f694bccd6d6099a322bbeb628dbf2cd86eea55a456ce5124f0"},
+]
+
 [[package]]
 name = "urllib3"
 version = "2.2.3"
@@ -1117,4 +1440,4 @@ brotli = ["brotli"]
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.11"
-content-hash = "f2a3fb3936f903bd3481633a38f004156863e773f1ca3457c38f0d24f8f4b157"
+content-hash = "40439739d190ac3163f493a441e90f25e537bbbd096bf257f281ad5c96eebaab"
diff --git a/humitifier-server/pyproject.toml b/humitifier-server/pyproject.toml
index 7ede8c4..2e7cad1 100644
--- a/humitifier-server/pyproject.toml
+++ b/humitifier-server/pyproject.toml
@@ -17,6 +17,8 @@ django-simple-menu = "^2.1.3"
 whitenoise = "^6.8.2"
 sentry-sdk = {extras = ["django"], version = "^2.17.0"}
 mozilla-django-oidc = "^4.0.1"
+drf-spectacular = "^0.27.2"
+django-oauth-toolkit = "^3.0.1"
 
 
 [tool.poetry.group.dev.dependencies]
diff --git a/humitifier-server/src/api/filters.py b/humitifier-server/src/api/filters.py
new file mode 100644
index 0000000..be423b3
--- /dev/null
+++ b/humitifier-server/src/api/filters.py
@@ -0,0 +1,11 @@
+import django_filters
+
+from api.models import OAuth2Application
+from main.filters import FiltersForm
+
+
+class OAuth2ApplicationFilters(django_filters.FilterSet):
+    class Meta:
+        model = OAuth2Application
+        fields = ['access_profile']
+        form = FiltersForm
\ No newline at end of file
diff --git a/humitifier-server/src/api/forms.py b/humitifier-server/src/api/forms.py
new file mode 100644
index 0000000..88bd5b8
--- /dev/null
+++ b/humitifier-server/src/api/forms.py
@@ -0,0 +1,33 @@
+from django import forms
+from django.conf import settings
+
+from api.models import OAuth2Application
+
+class ScopeWidget(forms.CheckboxSelectMultiple):
+
+    def format_value(self, value):
+        if value is None:
+            return []
+        return value.split(',')
+
+    def optgroups(self, name, value, attrs=None):
+        self.choices = [
+            (scope, scope)
+            for scope in set(settings.OAUTH2_PROVIDER['SCOPES'].keys())
+        ]
+
+        return super().optgroups(name, value, attrs)
+
+class OAuth2ApplicationForm(forms.ModelForm):
+    class Meta:
+        model = OAuth2Application
+        fields = [
+            'name',
+            'client_id',
+            'client_secret',
+            'access_profile',
+            'allowed_scopes',
+        ]
+        widgets = {
+            'allowed_scopes': ScopeWidget,
+        }
\ No newline at end of file
diff --git a/humitifier-server/src/api/menus.py b/humitifier-server/src/api/menus.py
new file mode 100644
index 0000000..881f9af
--- /dev/null
+++ b/humitifier-server/src/api/menus.py
@@ -0,0 +1,25 @@
+from django.urls import reverse
+from simple_menu import Menu, MenuItem
+
+
+Menu.add_item(
+    "main",
+    MenuItem(
+        "API documentation",
+        reverse("api:redoc"),
+        weight=22,
+        icon="icons/document.html",
+        separator=True,
+    )
+)
+
+Menu.add_item(
+    "main",
+    MenuItem(
+        "OAuth2 Applications",
+        reverse("api:oauth_applications"),
+        weight=23,
+        check=lambda request: request.user.is_superuser,
+        icon="icons/api.html",
+    )
+)
diff --git a/humitifier-server/src/api/migrations/0001_initial.py b/humitifier-server/src/api/migrations/0001_initial.py
new file mode 100644
index 0000000..a5c22a6
--- /dev/null
+++ b/humitifier-server/src/api/migrations/0001_initial.py
@@ -0,0 +1,137 @@
+# Generated by Django 5.1.2 on 2024-11-11 19:54
+
+import django.contrib.postgres.fields
+import django.db.models.deletion
+import oauth2_provider.generators
+import oauth2_provider.models
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ("main", "0004_alter_user_default_home_and_more"),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="OAuth2Application",
+            fields=[
+                ("id", models.BigAutoField(primary_key=True, serialize=False)),
+                (
+                    "client_id",
+                    models.CharField(
+                        db_index=True,
+                        default=oauth2_provider.generators.generate_client_id,
+                        max_length=100,
+                        unique=True,
+                    ),
+                ),
+                (
+                    "redirect_uris",
+                    models.TextField(
+                        blank=True, help_text="Allowed URIs list, space separated"
+                    ),
+                ),
+                (
+                    "post_logout_redirect_uris",
+                    models.TextField(
+                        blank=True,
+                        default="",
+                        help_text="Allowed Post Logout URIs list, space separated",
+                    ),
+                ),
+                (
+                    "client_type",
+                    models.CharField(
+                        choices=[
+                            ("confidential", "Confidential"),
+                            ("public", "Public"),
+                        ],
+                        max_length=32,
+                    ),
+                ),
+                (
+                    "authorization_grant_type",
+                    models.CharField(
+                        choices=[
+                            ("authorization-code", "Authorization code"),
+                            ("implicit", "Implicit"),
+                            ("password", "Resource owner password-based"),
+                            ("client-credentials", "Client credentials"),
+                            ("openid-hybrid", "OpenID connect hybrid"),
+                        ],
+                        max_length=32,
+                    ),
+                ),
+                (
+                    "client_secret",
+                    oauth2_provider.models.ClientSecretField(
+                        blank=True,
+                        db_index=True,
+                        default=oauth2_provider.generators.generate_client_secret,
+                        help_text="Hashed on Save. Copy it now if this is a new secret.",
+                        max_length=255,
+                    ),
+                ),
+                ("hash_client_secret", models.BooleanField(default=True)),
+                ("name", models.CharField(blank=True, max_length=255)),
+                ("skip_authorization", models.BooleanField(default=False)),
+                ("created", models.DateTimeField(auto_now_add=True)),
+                ("updated", models.DateTimeField(auto_now=True)),
+                (
+                    "algorithm",
+                    models.CharField(
+                        blank=True,
+                        choices=[
+                            ("", "No OIDC support"),
+                            ("RS256", "RSA with SHA-2 256"),
+                            ("HS256", "HMAC with SHA-2 256"),
+                        ],
+                        default="",
+                        max_length=5,
+                    ),
+                ),
+                (
+                    "allowed_origins",
+                    models.TextField(
+                        blank=True,
+                        default="",
+                        help_text="Allowed origins list to enable CORS, space separated",
+                    ),
+                ),
+                (
+                    "allowed_scopes",
+                    django.contrib.postgres.fields.ArrayField(
+                        base_field=models.CharField(max_length=20), size=None
+                    ),
+                ),
+                (
+                    "access_profile",
+                    models.ForeignKey(
+                        null=True,
+                        on_delete=django.db.models.deletion.SET_NULL,
+                        related_name="oauth_applications",
+                        to="main.accessprofile",
+                    ),
+                ),
+                (
+                    "user",
+                    models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="%(app_label)s_%(class)s",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
+            ],
+            options={
+                "abstract": False,
+            },
+        ),
+    ]
diff --git a/humitifier-server/src/api/migrations/0002_alter_oauth2application_access_profile.py b/humitifier-server/src/api/migrations/0002_alter_oauth2application_access_profile.py
new file mode 100644
index 0000000..2d4ab39
--- /dev/null
+++ b/humitifier-server/src/api/migrations/0002_alter_oauth2application_access_profile.py
@@ -0,0 +1,26 @@
+# Generated by Django 5.1.2 on 2024-11-12 12:57
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("api", "0001_initial"),
+        ("main", "0004_alter_user_default_home_and_more"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="oauth2application",
+            name="access_profile",
+            field=models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.SET_NULL,
+                related_name="oauth_applications",
+                to="main.accessprofile",
+            ),
+        ),
+    ]
diff --git a/humitifier-server/src/api/models.py b/humitifier-server/src/api/models.py
index 71a8362..3e0b570 100644
--- a/humitifier-server/src/api/models.py
+++ b/humitifier-server/src/api/models.py
@@ -1,3 +1,26 @@
+from django.conf import settings
+from django.contrib.postgres.fields import ArrayField
 from django.db import models
+from jsonschema.exceptions import ValidationError
+from oauth2_provider.models import AbstractApplication
 
-# Create your models here.
+
+class OAuth2Application(AbstractApplication):
+    access_profile = models.ForeignKey(
+        "main.AccessProfile",
+        on_delete=models.SET_NULL,
+        related_name="oauth_applications",
+        blank=True,
+        null=True,
+    )
+    allowed_scopes = ArrayField(
+        models.CharField(max_length=20),
+    )
+
+    def clean(self):
+        super().clean()
+        if self.allowed_scopes:
+            allowed_scopes_set = set(self.allowed_scopes)
+            available_scopes_set = set(settings.OAUTH2_PROVIDER['SCOPES'].keys())
+            if not allowed_scopes_set.issubset(available_scopes_set):
+                raise ValidationError("Invalid scopes in allowed_scopes")
\ No newline at end of file
diff --git a/humitifier-server/src/api/permissions.py b/humitifier-server/src/api/permissions.py
new file mode 100644
index 0000000..c471570
--- /dev/null
+++ b/humitifier-server/src/api/permissions.py
@@ -0,0 +1,16 @@
+from oauth2_provider.models import AccessToken
+from rest_framework import permissions
+
+
+class TokenHasApplication(permissions.BasePermission):
+    def has_permission(self, request, view):
+        token = request.auth
+        if not token:
+            return False
+
+        try:
+            access_token = AccessToken.objects.get(token=token)
+            request.application = access_token.application
+            return True
+        except AccessToken.DoesNotExist:
+            return False
\ No newline at end of file
diff --git a/humitifier-server/src/api/router.py b/humitifier-server/src/api/router.py
new file mode 100644
index 0000000..e9e4f3a
--- /dev/null
+++ b/humitifier-server/src/api/router.py
@@ -0,0 +1,7 @@
+from rest_framework.routers import DefaultRouter
+
+from api.views import HostsViewSet
+
+router = DefaultRouter()
+router.register(r'hosts', HostsViewSet, basename='hosts')
+urlpatterns = router.urls
\ No newline at end of file
diff --git a/humitifier-server/src/api/scopes.py b/humitifier-server/src/api/scopes.py
new file mode 100644
index 0000000..c186aaf
--- /dev/null
+++ b/humitifier-server/src/api/scopes.py
@@ -0,0 +1,16 @@
+from oauth2_provider.scopes import SettingsScopes
+
+
+class OAuth2Scopes(SettingsScopes):
+    """Custom scopes backend, used to limit the scopes available to an application."""
+
+    def get_available_scopes(self, application=None, request=None, *args, **kwargs):
+        if application is None:
+            return []
+
+        return application.allowed_scopes
+
+    def get_default_scopes(self, application=None, request=None, *args, **kwargs):
+        if application is None:
+            return []
+        return application.allowed_scopes
\ No newline at end of file
diff --git a/humitifier-server/src/api/serializers.py b/humitifier-server/src/api/serializers.py
new file mode 100644
index 0000000..5f36995
--- /dev/null
+++ b/humitifier-server/src/api/serializers.py
@@ -0,0 +1,23 @@
+from rest_framework import serializers
+
+from hosts.models import Host
+
+
+class HostSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Host
+        fields = [
+            'fqdn',
+            'created_at',
+            'archived',
+            'archival_date',
+            'department',
+            'contact',
+            'os',
+            'link',
+        ]
+
+    link = serializers.HyperlinkedIdentityField(
+        view_name='hosts:detail',
+        lookup_field='fqdn'
+    )
\ No newline at end of file
diff --git a/humitifier-server/src/api/tables.py b/humitifier-server/src/api/tables.py
new file mode 100644
index 0000000..2766273
--- /dev/null
+++ b/humitifier-server/src/api/tables.py
@@ -0,0 +1,52 @@
+from django.urls import reverse
+
+from api.models import OAuth2Application
+from main.easy_tables import BaseTable, ButtonColumn, CompoundColumn, \
+    MethodColumn
+
+
+class OAuth2ApplicationsTable(BaseTable):
+    class Meta:
+        model = OAuth2Application
+        columns = [
+            'name',
+            'client_id',
+            'access_profile',
+            'allowed_scopes',
+            'actions',
+        ]
+        column_breakpoint_overrides = {
+            'client_id': 'md',
+            'access_profile': 'md',
+            'allowed_scopes': '2xl',
+        }
+        no_data_message = "No OAuth applications found. Please check your filters."
+        no_data_message_wild_wasteland = ("No apps found... What is an "
+                                          "Application anyway?")
+
+    allowed_scopes = MethodColumn(
+        "Allowed scopes",
+        method_name='get_allowed_scopes'
+    )
+
+    @staticmethod
+    def get_allowed_scopes(obj: OAuth2Application):
+        return ', '.join(obj.allowed_scopes)
+
+    actions = CompoundColumn(
+        "Actions",
+        columns=[
+            ButtonColumn(
+                text='Edit',
+                button_class='btn light:btn-primary dark:btn-outline mr-2',
+                url=lambda obj: reverse('api:edit_oauth_application',
+                                        args=[obj.pk]),
+            ),
+            ButtonColumn(
+                text='Delete',
+                button_class='btn btn-danger',
+                url=lambda obj: reverse('api:delete_oauth_application',
+                                        args=[obj.pk]),
+            ),
+        ],
+    )
\ No newline at end of file
diff --git a/humitifier-server/src/api/templates/api/application_confirm_delete.html b/humitifier-server/src/api/templates/api/application_confirm_delete.html
new file mode 100644
index 0000000..b7488a2
--- /dev/null
+++ b/humitifier-server/src/api/templates/api/application_confirm_delete.html
@@ -0,0 +1,23 @@
+{% extends 'base/base_page_template.html' %}
+
+{% block content %}
+    <div class="h-full--header w-full bg px-7 py-5 ">
+        <h1 class="text-3xl font-bold">Delete access profile</h1>
+        <p class="mt-6">
+            Are you sure you want to delete the OAuth2 application "{{ object }}"?
+            All apps using these credentials will no longer be able to access the API!
+        </p>
+        <form method="post">
+            {% csrf_token %}
+            {{ form }}
+            <div class="flex gap-2 mt-6">
+                <a href="{% url 'api:oauth_applications' %}" class="btn btn-outline">
+                    Cancel
+                </a>
+                <button type="submit" class="btn btn-danger">
+                    Confirm
+                </button>
+            </div>
+        </form>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/api/templates/api/application_form.html b/humitifier-server/src/api/templates/api/application_form.html
new file mode 100644
index 0000000..860703e
--- /dev/null
+++ b/humitifier-server/src/api/templates/api/application_form.html
@@ -0,0 +1,25 @@
+{% extends 'base/base_page_template.html' %}
+
+{% block content %}
+    <div class="h-full--header w-full bg px-7 py-5">
+        {% if object %}
+            <h1 class="text-3xl font-bold">Edit OAuth2 Application</h1>
+        {% else %}
+            <h1 class="text-3xl font-bold">Create OAuth2 Application</h1>
+        {% endif %}
+
+        <form method="post" class="max-w-xl mt-8">
+            {% csrf_token %}
+            {{ form }}
+
+            <div class="flex gap-2 mt-6">
+                <a href="{% url 'api:oauth_applications' %}" class="btn btn-outline">
+                    Cancel
+                </a>
+                <button type="submit" class="btn light:btn-primary dark:btn-outline">
+                    Confirm
+                </button>
+            </div>
+        </form>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/api/templates/api/application_list.html b/humitifier-server/src/api/templates/api/application_list.html
new file mode 100644
index 0000000..c38bda4
--- /dev/null
+++ b/humitifier-server/src/api/templates/api/application_list.html
@@ -0,0 +1,24 @@
+{% extends "base/base_page_template.html" %}
+
+{% load humanize %}
+{% load param_replace %}
+
+{% block page_title %}Hosts | {{ block.super }}{% endblock %}
+
+{% block content %}
+    <div class="h-full--header w-full bg transition ease-in-out duration-150">
+        <div class="px-7 py-5 flex justify-between">
+            <h1 class="text-3xl font-bold">OAuth2 Applications</h1>
+            <div class="flex gap-3 text-sm">
+                <a
+                    href="{% url 'api:create_oauth_application' %}"
+                    class="btn light:btn-primary dark:btn-outline"
+                >
+                    New Application
+                </a>
+            </div>
+        </div>
+
+        {{ table.render }}
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/api/urls.py b/humitifier-server/src/api/urls.py
index 920acac..4908c8d 100644
--- a/humitifier-server/src/api/urls.py
+++ b/humitifier-server/src/api/urls.py
@@ -1,9 +1,39 @@
 from django.urls import path
+from drf_spectacular.views import SpectacularAPIView, SpectacularRedocView
+from oauth2_provider import views as oauth_views
 
-from .views import UploadScans
+from .views import CreateOAuthApplicationView, DeleteOAuthApplicationView, \
+    EditOAuthApplicationView, \
+    InventorySync, UploadScans, \
+    OAuthApplicationsView
+from .router import urlpatterns as router_urlpatterns
 
 app_name = 'api'
 
 urlpatterns = [
+    # API Endpoints
     path("upload_scans/", UploadScans.as_view(), name="upload_scans"),
-]
+    path("inventory_sync/", InventorySync.as_view(), name="inventory_sync"),
+
+    # OAuth2
+    path("oauth/authorize/", oauth_views.AuthorizationView.as_view(),
+         name="authorize"),
+    path("oauth/token/", oauth_views.TokenView.as_view(), name="token"),
+    path("oauth/revoke_token/", oauth_views.RevokeTokenView.as_view(), name="revoke-token"),
+    path("oauth/introspect/", oauth_views.IntrospectTokenView.as_view(), name="introspect"),
+    path("oauth/applications/", OAuthApplicationsView.as_view(),
+        name="oauth_applications"),
+    path("oauth/applications/create/", CreateOAuthApplicationView.as_view(),
+        name="create_oauth_application"),
+    path("oauth/applications/<int:pk>/edit/",
+         EditOAuthApplicationView.as_view(),
+        name="edit_oauth_application"),
+    path("oauth/applications/<int:pk>/delete/",
+         DeleteOAuthApplicationView.as_view(),
+        name="delete_oauth_application"),
+
+    # OpenAPI schema + Redoc
+    path('schema/', SpectacularAPIView.as_view(), name='schema'),
+    path('schema/redoc/', SpectacularRedocView.as_view(url_name='api:schema'),
+         name='redoc'),
+] + router_urlpatterns
\ No newline at end of file
diff --git a/humitifier-server/src/api/views.py b/humitifier-server/src/api/views.py
deleted file mode 100644
index 63db268..0000000
--- a/humitifier-server/src/api/views.py
+++ /dev/null
@@ -1,37 +0,0 @@
-from rest_framework.exceptions import APIException
-from rest_framework.response import Response
-from rest_framework.views import APIView
-
-from hosts.models import Host
-from hosts.utils import historical_clean
-
-
-# Create your views here.
-class UploadScans(APIView):
-    """
-    View to list all users in the system.
-
-    * Requires token authentication.
-    * Only admin users are able to access this view.
-    """
-
-    def post(self, request, format=None):
-        """
-        Return a list of all users.
-        """
-        scans = request.data
-        hosts = []
-
-        if isinstance(scans, list):
-            for scan in scans:
-                if 'host' not in scan or 'data' not in scan:
-                    raise APIException("Invalid scan data")
-
-                host, created = Host.objects.get_or_create(fqdn=scan['host'])
-                host.add_scan(scan['data'])
-
-                hosts.append(host)
-
-        historical_clean()
-
-        return Response("ok")
\ No newline at end of file
diff --git a/humitifier-server/src/api/views/__init__.py b/humitifier-server/src/api/views/__init__.py
new file mode 100644
index 0000000..06df3de
--- /dev/null
+++ b/humitifier-server/src/api/views/__init__.py
@@ -0,0 +1,3 @@
+from .system import *
+from .read import *
+from .applications import *
\ No newline at end of file
diff --git a/humitifier-server/src/api/views/applications.py b/humitifier-server/src/api/views/applications.py
new file mode 100644
index 0000000..383b92d
--- /dev/null
+++ b/humitifier-server/src/api/views/applications.py
@@ -0,0 +1,63 @@
+from braces.views import LoginRequiredMixin
+from django.urls import reverse_lazy
+from django.views.generic import CreateView, DeleteView, UpdateView
+
+from api.filters import OAuth2ApplicationFilters
+from api.forms import OAuth2ApplicationForm
+from api.models import OAuth2Application
+from api.tables import OAuth2ApplicationsTable
+from main.views import FilteredListView, SuperuserRequiredMixin, TableMixin
+
+
+class OAuthApplicationsView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    TableMixin,
+    FilteredListView
+):
+    model = OAuth2Application
+    table_class = OAuth2ApplicationsTable
+    filterset_class = OAuth2ApplicationFilters
+    paginate_by = 50
+    template_name = 'api/application_list.html'
+    ordering_fields = {
+        'name':       'Name',
+        'access_profile':         'Access Profile',
+    }
+
+class CreateOAuthApplicationView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    CreateView
+):
+    model = OAuth2Application
+    form_class = OAuth2ApplicationForm
+    template_name = 'api/application_form.html'
+    success_url = reverse_lazy('api:oauth_applications')
+
+    def form_valid(self, form):
+        # We only allow confidential clients with client credentials grant type
+        form.instance.client_type = OAuth2Application.CLIENT_CONFIDENTIAL
+        form.instance.grant_type = OAuth2Application.GRANT_CLIENT_CREDENTIALS
+        return super().form_valid(form)
+
+
+class EditOAuthApplicationView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    UpdateView
+):
+    model = OAuth2Application
+    form_class = OAuth2ApplicationForm
+    template_name = 'api/application_form.html'
+    success_url = reverse_lazy('api:oauth_applications')
+
+
+class DeleteOAuthApplicationView(
+    LoginRequiredMixin,
+    SuperuserRequiredMixin,
+    DeleteView
+):
+    model = OAuth2Application
+    template_name = 'api/application_confirm_delete.html'
+    success_url = reverse_lazy('api:oauth_applications')
\ No newline at end of file
diff --git a/humitifier-server/src/api/views/read.py b/humitifier-server/src/api/views/read.py
new file mode 100644
index 0000000..e2fb737
--- /dev/null
+++ b/humitifier-server/src/api/views/read.py
@@ -0,0 +1,31 @@
+from django_filters.rest_framework import DjangoFilterBackend
+from oauth2_provider.contrib.rest_framework import TokenHasScope
+from rest_framework import viewsets
+
+from api.permissions import TokenHasApplication
+from api.serializers import HostSerializer
+from hosts.filters import HostFilters
+from hosts.models import Host
+
+
+class HostsViewSet(viewsets.ReadOnlyModelViewSet):
+    """
+    A viewset for viewing and editing user instances.
+    """
+    permission_classes = [
+        TokenHasApplication,
+        TokenHasScope
+    ]
+    required_scopes = ['read']
+    serializer_class = HostSerializer
+    lookup_field = 'fqdn'
+    filter_backends = [DjangoFilterBackend]
+    filterset_class = HostFilters
+
+    def get_queryset(self):
+        # Needed for DRF Spectacular's introspection;
+        # The attribute is set in the TokenHasApplication permission
+        if not hasattr(self.request, 'application'):
+            return Host.objects.none()
+        app = self.request.application
+        return Host.objects.get_for_application(app)
\ No newline at end of file
diff --git a/humitifier-server/src/api/views/system.py b/humitifier-server/src/api/views/system.py
new file mode 100644
index 0000000..5613294
--- /dev/null
+++ b/humitifier-server/src/api/views/system.py
@@ -0,0 +1,78 @@
+from drf_spectacular.utils import extend_schema, OpenApiTypes, inline_serializer
+from oauth2_provider.contrib.rest_framework import TokenHasScope
+from rest_framework import serializers
+from rest_framework.exceptions import APIException
+from rest_framework.response import Response
+from rest_framework.views import APIView
+
+from api.permissions import TokenHasApplication
+from hosts.models import Host
+from hosts.utils import historical_clean
+
+class UploadScans(APIView):
+    permission_classes = [TokenHasApplication, TokenHasScope]
+    required_scopes = ['system']
+
+    @extend_schema(
+        operation_id="upload_scans",
+        request=inline_serializer(
+            "Scan",
+            fields={
+                "host": serializers.CharField(required=True),
+                "data": serializers.JSONField(required=True),
+            },
+            many=True,
+        ),
+        responses={
+            200: OpenApiTypes.INT
+        },
+    )
+    def post(self, request, format=None):
+        """
+        Upload one or more scans for a host
+        """
+        scans = request.data
+        hosts = []
+
+        if not isinstance(scans, list):
+            scans = [scans]
+
+        for scan in scans:
+            if 'host' not in scan or 'data' not in scan:
+                raise APIException("Invalid scan data")
+
+            host, created = Host.objects.get_or_create(fqdn=scan['host'])
+            host.add_scan(scan['data'])
+
+            hosts.append(host)
+
+        historical_clean()
+
+        return Response(len(scans))
+
+class InventorySync(APIView):
+    permission_classes = [TokenHasApplication, TokenHasScope]
+    required_scopes = ['system']
+
+    @extend_schema(
+        operation_id="inventory_sync",
+        request=inline_serializer(
+            "InventorySync",
+            fields={
+                "inventory": serializers.UUIDField(required=True),
+                "hosts": serializers.ListField(
+                    child=serializers.CharField(),
+                    required=True,
+                ),
+            },
+        ),
+        responses={
+            200: OpenApiTypes.INT
+        },
+    )
+    def post(self, request, format=None):
+        """
+        Sync inventory data
+        """
+        # TODO: implement :D
+        raise NotImplementedError("Not implemented")
diff --git a/humitifier-server/src/hosts/filters.py b/humitifier-server/src/hosts/filters.py
index 36283f9..457697d 100644
--- a/humitifier-server/src/hosts/filters.py
+++ b/humitifier-server/src/hosts/filters.py
@@ -1,6 +1,8 @@
 import django_filters
 from django.db.models.expressions import RawSQL
 from django_filters import ChoiceFilter
+from drf_spectacular.types import OpenApiTypes
+from drf_spectacular.utils import extend_schema_field
 
 from hosts.models import Alert, AlertLevel, AlertType, Host
 from main.filters import FiltersForm
@@ -38,7 +40,9 @@ def filter(self, qs, value):
         return qs
 
 class PackageFilter(django_filters.Filter):
-
+    _spectacular_annotation = {
+        'field': OpenApiTypes.STR,
+    }
     def filter(self, qs, value):
         if value:
             qs = qs.annotate(
diff --git a/humitifier-server/src/hosts/models.py b/humitifier-server/src/hosts/models.py
index 0aaa062..3864932 100644
--- a/humitifier-server/src/hosts/models.py
+++ b/humitifier-server/src/hosts/models.py
@@ -2,6 +2,7 @@
 from django.db.models import Case, F, Value, When
 from django.utils.safestring import mark_safe
 
+from api.models import OAuth2Application
 from main.models import User
 from main.templatetags.strip_quotes import strip_quotes
 
@@ -57,6 +58,14 @@ def get_for_user(self, user: User):
         # They lose! Good day sir!
         return self.get_queryset().none()
 
+    def get_for_application(self, application: OAuth2Application):
+        if application.access_profile is None:
+            return self.get_queryset().none()
+
+        return self.get_queryset().filter(
+            department__in=application.access_profile.departments_for_filter
+        )
+
 
 class Host(models.Model):
     class Meta:
diff --git a/humitifier-server/src/humitifier_server/settings.py b/humitifier-server/src/humitifier_server/settings.py
index 532abfe..3e7ac95 100644
--- a/humitifier-server/src/humitifier_server/settings.py
+++ b/humitifier-server/src/humitifier_server/settings.py
@@ -59,6 +59,8 @@
     # Third-party apps
     "rest_framework",
     "simple_menu",
+    "drf_spectacular",
+    "oauth2_provider",
     # Local apps
     "hosts",
     "api",
@@ -192,6 +194,40 @@
     else:
         raise ImproperlyConfigured("OIDC_OP_USER_ENDPOINT is required")
 
+# DRF
+
+REST_FRAMEWORK = {
+    'DEFAULT_SCHEMA_CLASS': 'drf_spectacular.openapi.AutoSchema',
+    'DEFAULT_AUTHENTICATION_CLASSES': (
+        'oauth2_provider.contrib.rest_framework.OAuth2Authentication',
+    ),
+}
+
+SPECTACULAR_SETTINGS = {
+    'TITLE': 'Humitifier API',
+    'DESCRIPTION': 'API for Humitifier, the Hum-IT CMDB',
+    'VERSION': '1.0.0',
+    'SERVE_INCLUDE_SCHEMA': False,
+    # OAuth2
+    'OAUTH2_FLOWS':             ['clientCredentials'],
+    'OAUTH2_AUTHORIZATION_URL': reverse_lazy('api:authorize'),
+    'OAUTH2_TOKEN_URL':         reverse_lazy('api:token'),
+    'OAUTH2_REFRESH_URL':       reverse_lazy('api:token'),
+    'OAUTH2_SCOPES':            None,
+    # OTHER SETTINGS
+}
+
+## OAuth2
+
+OAUTH2_PROVIDER_APPLICATION_MODEL = 'api.OAuth2Application'
+
+OAUTH2_PROVIDER = {
+    "SCOPES": {
+        "read": "Read scope",
+        "system": "System scope",
+    },
+    "SCOPES_BACKEND_CLASS": "api.scopes.OAuth2Scopes",
+}
 
 # Security
 
diff --git a/humitifier-server/src/main/menus.py b/humitifier-server/src/main/menus.py
index 0cf2237..2b91fec 100644
--- a/humitifier-server/src/main/menus.py
+++ b/humitifier-server/src/main/menus.py
@@ -35,17 +35,6 @@
     )
 )
 
-Menu.add_item(
-    "main",
-    MenuItem(
-        "OAuth2 Applications",
-        reverse("main:oauth_applications"),
-        weight=21,
-        check=lambda request: request.user.is_superuser,
-        icon="icons/api.html",
-    )
-)
-
 Menu.add_item(
     "main",
     MenuItem(
diff --git a/humitifier-server/src/main/static/main/css/tailwind.css b/humitifier-server/src/main/static/main/css/tailwind.css
index 139c99f..f19fd60 100644
--- a/humitifier-server/src/main/static/main/css/tailwind.css
+++ b/humitifier-server/src/main/static/main/css/tailwind.css
@@ -928,6 +928,22 @@ video {
   margin-left: 0.5rem;
 }
 
+.mt-10 {
+  margin-top: 2.5rem;
+}
+
+.mt-32 {
+  margin-top: 8rem;
+}
+
+.mb-8 {
+  margin-bottom: 2rem;
+}
+
+.mb-6 {
+  margin-bottom: 1.5rem;
+}
+
 .block {
   display: block;
 }
diff --git a/humitifier-server/src/main/templates/icons/document.html b/humitifier-server/src/main/templates/icons/document.html
new file mode 100644
index 0000000..407ab74
--- /dev/null
+++ b/humitifier-server/src/main/templates/icons/document.html
@@ -0,0 +1,3 @@
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="size-6">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 14.25v-2.625a3.375 3.375 0 0 0-3.375-3.375h-1.5A1.125 1.125 0 0 1 13.5 7.125v-1.5a3.375 3.375 0 0 0-3.375-3.375H8.25m2.25 0H5.625c-.621 0-1.125.504-1.125 1.125v17.25c0 .621.504 1.125 1.125 1.125h12.75c.621 0 1.125-.504 1.125-1.125V11.25a9 9 0 0 0-9-9Z" />
+</svg>
diff --git a/humitifier-server/src/main/urls.py b/humitifier-server/src/main/urls.py
index 3ad3838..9a113a6 100644
--- a/humitifier-server/src/main/urls.py
+++ b/humitifier-server/src/main/urls.py
@@ -7,7 +7,6 @@
     DeActivateUserView, \
     DeleteAccessProfileView, EditAccessProfileView, EditUserView, \
     HomeRedirectView, \
-    OAuthApplicationsView, \
     SetPasswordView, UserProfileView, UsersView
 
 app_name = 'main'
@@ -32,7 +31,6 @@
          name="edit_access_profile"),
     path("access-profiles/<int:pk>/delete/", DeleteAccessProfileView.as_view(),
          name="delete_access_profile"),
-    path("oauth-applications/", OAuthApplicationsView.as_view(), name="oauth_applications"),
 
     path("login", LoginView.as_view(), name="login"),
 ]
diff --git a/humitifier-server/src/main/views.py b/humitifier-server/src/main/views.py
index 2b68053..1d2b4a0 100644
--- a/humitifier-server/src/main/views.py
+++ b/humitifier-server/src/main/views.py
@@ -390,10 +390,3 @@ class DeleteAccessProfileView(
 ):
     model = AccessProfile
     success_url = reverse_lazy('main:access_profiles')
-
-class OAuthApplicationsView(
-    LoginRequiredMixin,
-    SuperuserRequiredMixin,
-    TemplateView
-):
-    template_name = 'main/not_implemented.html'
\ No newline at end of file

From 5a4ee36ab7878fda53b182c8aac4039b803fb84f Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Tue, 12 Nov 2024 14:19:21 +0100
Subject: [PATCH 27/30] fix: set right variable

---
 humitifier-server/src/api/views/applications.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/humitifier-server/src/api/views/applications.py b/humitifier-server/src/api/views/applications.py
index 383b92d..ab86f89 100644
--- a/humitifier-server/src/api/views/applications.py
+++ b/humitifier-server/src/api/views/applications.py
@@ -38,7 +38,7 @@ class CreateOAuthApplicationView(
     def form_valid(self, form):
         # We only allow confidential clients with client credentials grant type
         form.instance.client_type = OAuth2Application.CLIENT_CONFIDENTIAL
-        form.instance.grant_type = OAuth2Application.GRANT_CLIENT_CREDENTIALS
+        form.instance.authorization_grant_type = OAuth2Application.GRANT_CLIENT_CREDENTIALS
         return super().form_valid(form)
 
 

From b345111d1ecab67b1025f676f12230820368f857 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Tue, 12 Nov 2024 14:20:39 +0100
Subject: [PATCH 28/30] feat: taught the agent how to speak oauth

---
 agent/humitifier/config.py |  3 +++
 agent/humitifier/tasks.py  | 49 +++++++++++++++++++++++++++++++++-----
 2 files changed, 46 insertions(+), 6 deletions(-)

diff --git a/agent/humitifier/config.py b/agent/humitifier/config.py
index 0193ad9..383abfe 100644
--- a/agent/humitifier/config.py
+++ b/agent/humitifier/config.py
@@ -15,7 +15,10 @@ class Config:
     inventory: list[str]
     pssh: dict
     tasks: dict[str, str]
+    token_endpoint: str
     upload_endpoint: str
+    client_id: str
+    client_secret: str
 
     @classmethod
     def load(cls) -> "Config":
diff --git a/agent/humitifier/tasks.py b/agent/humitifier/tasks.py
index d2213dd..ffe864c 100644
--- a/agent/humitifier/tasks.py
+++ b/agent/humitifier/tasks.py
@@ -1,3 +1,5 @@
+import base64
+
 import asyncio
 from sys import stdout
 
@@ -106,6 +108,33 @@ async def scan_hosts():
     )
     await conn.close()
 
+async def request_oauth_token():
+    credential = "{0}:{1}".format(CONFIG.client_id, CONFIG.client_secret)
+    encoded_credentials = base64.b64encode(credential.encode("utf-8")).decode("utf-8")
+
+    headers = {
+        "Authorization": f"Basic {encoded_credentials}",
+        "Cache-Control": "no-cache",
+        "Content-Type":  "application/x-www-form-urlencoded"
+    }
+
+    data= {
+        "grant_type": "client_credentials",
+        "scope":      "system"
+    }
+
+    response = await asyncio.to_thread(
+        requests.post,
+        CONFIG.token_endpoint,
+        headers=headers,
+        data=data,
+    )
+    print(response.json())
+    json_data = response.json()
+    if "error" in json_data:
+        return None
+    return json_data["access_token"]
+
 
 @app.task(after_success(scan_hosts))
 async def parse_facts():
@@ -129,12 +158,20 @@ async def parse_facts():
             }
         )
 
-    await asyncio.to_thread(
-        requests.post,
-        CONFIG.upload_endpoint,
-        data=json.dumps(host_data),
-        headers={'Content-Type': 'application/json'}
-    )
+    token = await request_oauth_token()
+
+    if token:
+        await asyncio.to_thread(
+            requests.post,
+            CONFIG.upload_endpoint,
+            data=json.dumps(host_data),
+            headers={
+                'Authorization': f'Bearer {token}',
+                'Content-Type': 'application/json'
+            }
+        )
+    else:
+        logger.error("Failed to get OAuth token")
 
     await conn.executemany(
         """INSERT INTO facts(name, host, scan, data) VALUES($1, $2, $3, $4)""",

From 8a8fd66a6b43afa9923eaccefd822dec81d833db Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Tue, 12 Nov 2024 14:33:39 +0100
Subject: [PATCH 29/30] feat: basic export page

---
 .../src/hosts/templates/hosts/export.html     | 28 +++++++++
 humitifier-server/src/hosts/urls.py           |  6 +-
 humitifier-server/src/hosts/views.py          | 52 ++++++++++++++++-
 .../src/main/static/main/css/tailwind.css     | 58 ++++++++-----------
 4 files changed, 103 insertions(+), 41 deletions(-)
 create mode 100644 humitifier-server/src/hosts/templates/hosts/export.html

diff --git a/humitifier-server/src/hosts/templates/hosts/export.html b/humitifier-server/src/hosts/templates/hosts/export.html
new file mode 100644
index 0000000..1936291
--- /dev/null
+++ b/humitifier-server/src/hosts/templates/hosts/export.html
@@ -0,0 +1,28 @@
+{% extends "base/base_page_template.html" %}
+
+{% load humanize %}
+{% load param_replace %}
+
+{% block page_title %}Hosts | {{ block.super }}{% endblock %}
+
+{% block content %}
+    <div class="h-full--header w-full bg transition ease-in-out duration-150">
+        <div class="px-7 py-5 flex justify-between">
+            <h1 class="text-3xl font-bold">Export host data</h1>
+        </div>
+        <p class="px-7 pt-5">
+            Here you can export the host data in CSV format. You can filter the data before exporting.
+            Note: in the future there might be more fields to export.
+        </p>
+        <div class="px-7 py-5 flex justify-between">
+            <h1 class="text-xl font-bold">Filters</h1>
+        </div>
+        <form method="post" class="px-7 flex flex-col gap-3 max-w-xl">
+            {% csrf_token %}
+            {{ filterset.form }}
+            <button class="btn light:btn-primary dark:btn-outline" type="submit">
+                Export
+            </button>
+        </form>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/humitifier-server/src/hosts/urls.py b/humitifier-server/src/hosts/urls.py
index de0ba54..edddb9a 100644
--- a/humitifier-server/src/hosts/urls.py
+++ b/humitifier-server/src/hosts/urls.py
@@ -1,19 +1,19 @@
 from django.urls import path
 
-from .views import ArchiveHostView, DataSourcesView, ExportView, HostDetailView, \
-    HostsListView, \
+from .views import ArchiveHostView, DataSourcesView, HostDetailView, \
+    HostExportView, HostsListView, \
     HostsRawDownloadView, ScanProfilesView, TasksView
 
 app_name = 'hosts'
 
 urlpatterns = [
     path("", HostsListView.as_view(), name="list"),
+    path("export/", HostExportView.as_view(), name="export"),
     path("host/<fqdn>/", HostDetailView.as_view(), name="detail"),
     path("host/<fqdn>/raw/", HostsRawDownloadView.as_view(),
          name="download_raw"),
     path("host/<fqdn>/archive/", ArchiveHostView.as_view(),
          name="archive"),
-    path("export/", ExportView.as_view(), name="export"),
     path("tasks/", TasksView.as_view(), name="tasks"),
     path("scan-profiles/", ScanProfilesView.as_view(), name="scan_profiles"),
     path("data-sources/", DataSourcesView.as_view(), name="data_sources"),
diff --git a/humitifier-server/src/hosts/views.py b/humitifier-server/src/hosts/views.py
index 6bcd33d..0c0e193 100644
--- a/humitifier-server/src/hosts/views.py
+++ b/humitifier-server/src/hosts/views.py
@@ -1,4 +1,6 @@
+import csv
 import json
+from io import StringIO
 
 from django.contrib.auth.mixins import LoginRequiredMixin
 from django.core.exceptions import ObjectDoesNotExist, ValidationError
@@ -51,6 +53,53 @@ def get_queryset(self):
 
         return filtered_qs.distinct()
 
+
+class HostExportView(LoginRequiredMixin, FilteredListView):
+    model = Host
+    filterset_class = HostFilters
+    template_name = 'hosts/export.html'
+
+    def get_queryset(self):
+        queryset = Host.objects.get_for_user(self.request.user)
+
+        data = self.request.GET.copy()
+        data.update(self.request.POST)
+
+        self.filterset = self.filterset_class(data, queryset=queryset)
+
+        return self.filterset.qs.distinct()
+
+    def post(self, request, *args, **kwargs):
+        buffer = StringIO()
+        csv_file = csv.DictWriter(
+            f=buffer,
+            fieldnames={
+                'fqdn': 'Hostname',
+                'os': 'Operating System',
+                'department': 'Department',
+                'contact': 'Contact',
+                'created_at': 'Created At',
+                'archived': 'Archived',
+                'archival_date': 'Archival Date',
+                'last_scan_date': 'Last Scan Date',
+            }
+        )
+        csv_file.writeheader()
+        for host in self.get_queryset():
+            csv_file.writerow({
+                'fqdn': host.fqdn,
+                'os': host.os,
+                'department': host.department,
+                'contact': host.contact,
+                'created_at': host.created_at,
+                'archived': host.archived,
+                'archival_date': host.archival_date,
+                'last_scan_date': host.last_scan_date,
+            })
+
+        return HttpResponse(buffer.getvalue(), content_type='text/csv')
+
+
 class HostDetailView(LoginRequiredMixin, TemplateView):
     template_name = 'hosts/detail.html'
 
@@ -158,9 +207,6 @@ def form_valid(self, form):
         return HttpResponseRedirect(success_url)
 
 
-class ExportView(LoginRequiredMixin, TemplateView):
-    template_name = 'main/not_implemented.html'
-
 class TasksView(LoginRequiredMixin, SuperuserRequiredMixin, TemplateView):
     template_name = 'main/not_implemented.html'
 
diff --git a/humitifier-server/src/main/static/main/css/tailwind.css b/humitifier-server/src/main/static/main/css/tailwind.css
index f19fd60..2c845af 100644
--- a/humitifier-server/src/main/static/main/css/tailwind.css
+++ b/humitifier-server/src/main/static/main/css/tailwind.css
@@ -880,6 +880,10 @@ video {
   margin-bottom: 1.75rem;
 }
 
+.ml-2 {
+  margin-left: 0.5rem;
+}
+
 .ml-auto {
   margin-left: auto;
 }
@@ -904,44 +908,20 @@ video {
   margin-top: 1rem;
 }
 
-.mt-6 {
-  margin-top: 1.5rem;
-}
-
-.mt-8 {
-  margin-top: 2rem;
-}
-
 .mt-5 {
   margin-top: 1.25rem;
 }
 
-.mt-7 {
-  margin-top: 1.75rem;
-}
-
-.ml-3 {
-  margin-left: 0.75rem;
-}
-
-.ml-2 {
-  margin-left: 0.5rem;
-}
-
-.mt-10 {
-  margin-top: 2.5rem;
-}
-
-.mt-32 {
-  margin-top: 8rem;
+.mt-6 {
+  margin-top: 1.5rem;
 }
 
-.mb-8 {
-  margin-bottom: 2rem;
+.mt-7 {
+  margin-top: 1.75rem;
 }
 
-.mb-6 {
-  margin-bottom: 1.5rem;
+.mt-8 {
+  margin-top: 2rem;
 }
 
 .block {
@@ -1413,16 +1393,16 @@ video {
   padding-bottom: 1.25rem;
 }
 
-.py-8 {
-  padding-top: 2rem;
-  padding-bottom: 2rem;
-}
-
 .py-7 {
   padding-top: 1.75rem;
   padding-bottom: 1.75rem;
 }
 
+.py-8 {
+  padding-top: 2rem;
+  padding-bottom: 2rem;
+}
+
 .pb-0 {
   padding-bottom: 0px;
 }
@@ -1439,6 +1419,10 @@ video {
   padding-right: 1.75rem;
 }
 
+.pt-5 {
+  padding-top: 1.25rem;
+}
+
 .text-left {
   text-align: left;
 }
@@ -1573,6 +1557,10 @@ video {
   box-shadow: var(--tw-ring-offset-shadow, 0 0 #0000), var(--tw-ring-shadow, 0 0 #0000), var(--tw-shadow);
 }
 
+.filter {
+  filter: var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow);
+}
+
 .transition {
   transition-property: color, background-color, border-color, text-decoration-color, fill, stroke, opacity, box-shadow, transform, filter, -webkit-backdrop-filter;
   transition-property: color, background-color, border-color, text-decoration-color, fill, stroke, opacity, box-shadow, transform, filter, backdrop-filter;

From 6ab788e929e81d41da77cf5b48f51ce25b35fcb6 Mon Sep 17 00:00:00 2001
From: "Mees, T.D. (Ty)" <t.d.mees@uu.nl>
Date: Tue, 12 Nov 2024 14:35:08 +0100
Subject: [PATCH 30/30] chore: bump versions to 3.2

---
 agent/pyproject.toml                                | 2 +-
 humitifier-server/pyproject.toml                    | 2 +-
 humitifier-server/src/humitifier_server/settings.py | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/agent/pyproject.toml b/agent/pyproject.toml
index 25ef6ba..0d926e7 100644
--- a/agent/pyproject.toml
+++ b/agent/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "humitifier"
-version = "3.0.0"
+version = "3.2.0"
 description = "Tools and interfaces for displaying server resources"
 authors = ["Donatas Rasiukevicius <d.rasiukevicius@uu.nl>"]
 
diff --git a/humitifier-server/pyproject.toml b/humitifier-server/pyproject.toml
index 2e7cad1..4a59e10 100644
--- a/humitifier-server/pyproject.toml
+++ b/humitifier-server/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "humitifier-server"
-version = "0.1.0"
+version = "3.2.0"
 description = ""
 authors = ["Mees, T.D. (Ty) <t.d.mees@uu.nl>"]
 
diff --git a/humitifier-server/src/humitifier_server/settings.py b/humitifier-server/src/humitifier_server/settings.py
index 3e7ac95..6c80b5c 100644
--- a/humitifier-server/src/humitifier_server/settings.py
+++ b/humitifier-server/src/humitifier_server/settings.py
@@ -206,7 +206,7 @@
 SPECTACULAR_SETTINGS = {
     'TITLE': 'Humitifier API',
     'DESCRIPTION': 'API for Humitifier, the Hum-IT CMDB',
-    'VERSION': '1.0.0',
+    'VERSION': '3.2.0',
     'SERVE_INCLUDE_SCHEMA': False,
     # OAuth2
     'OAUTH2_FLOWS':             ['clientCredentials'],