CHANGE: Minor improvements + updated api docs

CHANGE: added api_key to get params
CHANGE: added api endpoint for time path
2025-02-28 13:13:37 +01:00 · 2025-02-28 13:10:22 +01:00 · 2025-02-28 13:09:15 +01:00 · 2025-02-26 15:06:35 +01:00 · 2025-02-26 15:05:50 +01:00 · 2025-02-26 11:12:23 +01:00
43 changed files with 4643 additions and 381 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -24,3 +24,15 @@ go.work.sum
 #Debug files

 **__debug*
+
+*_templ.txt
+DB/pg_data
+
+.env.*
+.env
+!.env.example
+
+.idea
+.vscode
+
+node_modules
--- a/.vscode/launch.json
+++ b/.vscode/launch.json
@@ -1,21 +0,0 @@
-{
-    // Use IntelliSense to learn about possible attributes.
-    // Hover to view descriptions of existing attributes.
-    // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
-    "version": "0.2.0",
-    "configurations": [
-
-
-        {
-            "name": "Launch Package",
-            "type": "go",
-            "request": "launch",
-            "mode": "auto",
-            "program": "${workspaceFolder}/Backend",
-            "dlvFlags": ["--check-go-version=false"],
-            "env": {
-                "DEBUG": "true"
-            }
-        },
-    ]
-}
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -1,14 +0,0 @@
-{
-    "sqltools.connections": [
-        {
-            "previewLimit": 50,
-            "server": "localhost",
-            "port": 5432,
-            "askForPassword": true,
-            "driver": "PostgreSQL",
-            "name": "arbeitszeiten",
-            "database": "arbeitszeitmessung",
-            "username": "arbeit_zeit"
-        }
-    ]
-}
--- a/Backend/.dockerignore
+++ b/Backend/.dockerignore
@@ -0,0 +1,2 @@
+db
+Dockerfile
--- a/Backend/Dockerfile
+++ b/Backend/Dockerfile
@@ -1,12 +1,21 @@
-FROM golang:alpine
+# syntax=docker/dockerfile:1
+FROM --platform=$BUILDPLATFORM golang:alpine AS build
+ARG TARGETOS
+ARG TARGETARCH
+ENV CGO_ENABLED=0 \
+    GOOS=$TARGETOS \
+    GOARCH=$TARGETARCH

 WORKDIR /app
-
 COPY go.mod go.sum /app/
-
 RUN go mod download && go mod verify

 COPY . .
-RUN go build -o /usr/local/bin/app
+RUN go build -o server .

-CMD ["app"]
+FROM alpine
+WORKDIR /app
+COPY --from=build /app/server /app/server
+
+COPY /static /app/static
+ENTRYPOINT ["./server"]
--- a/Backend/database.go
+++ b/Backend/database.go
@@ -1,23 +1,24 @@
 package main

 import (
+	"arbeitszeitmessung/helper"
 	"arbeitszeitmessung/models"
 	"database/sql"
 	"fmt"
 )

 func OpenDatabase() (*sql.DB, error) {
-	dbHost := getEnv("POSTGRES_HOST", "localhost")
-	dbName := getEnv("POSTGRES_DB", "arbeitszeitmessung")
-	dbUser := getEnv("POSTGRES_USER", "arbeit_zeit")
-	dbPassword := getEnv("POSTGRES_PASS", "password")
+	dbHost := helper.GetEnv("POSTGRES_HOST", "localhost")
+	dbName := helper.GetEnv("POSTGRES_DB", "arbeitszeitmessung")
+	dbUser := helper.GetEnv("POSTGRES_API_USER", "arbeit_zeit")
+	dbPassword := helper.GetEnv("POSTGRES_API_PASS", "password")

-	connStr := fmt.Sprintf("postgres://%s:%s@%s:5432/%s?sslmode=disable", dbUser, dbPassword, dbHost, dbName)
+	connStr := fmt.Sprintf("postgres://%s:%s@%s:5432/%s?sslmode=disable&TimeZone=Europe/Berlin", dbUser, dbPassword, dbHost, dbName)
 	return sql.Open("postgres", connStr)
 }

 func GetBookingsByCardID(db *sql.DB, card_id string) ([]models.Booking, error) {
-	qStr, err := db.Prepare((`SELECT * FROM zeiten WHERE card_id = $1`))
+	qStr, err := db.Prepare((`SELECT * FROM anwesenheit WHERE card_id = $1`))
 	if err != nil {
 		return nil, err
 	}
@@ -32,7 +33,7 @@ func GetBookingsByCardID(db *sql.DB, card_id string) ([]models.Booking, error) {
 	defer rows.Close()
 	for rows.Next() {
 		var booking models.Booking
-		if err := rows.Scan(&booking.Id, &booking.LoggedTime, &booking.CardID, &booking.ReaderID, &booking.BookingType); err != nil {
+		if err := rows.Scan(&booking.CounterId, &booking.Timestamp, &booking.CardUID, &booking.GeraetID, &booking.CheckInOut); err != nil {
 			return bookings, err
 		}
 		bookings = append(bookings, booking)
--- a/Backend/endpoints/auto_logout.go
+++ b/Backend/endpoints/auto_logout.go
@@ -0,0 +1,41 @@
+package endpoints
+
+import (
+	"arbeitszeitmessung/helper"
+	"arbeitszeitmessung/models"
+	"encoding/json"
+	"fmt"
+	"net/http"
+)
+
+func LogoutHandler(w http.ResponseWriter, r *http.Request) {
+	helper.SetCors(w)
+	switch r.Method {
+	case "GET":
+		autoLogout(w)
+	default:
+		http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
+	}
+}
+
+func autoLogout(w http.ResponseWriter) {
+	users, err := (*models.User).GetAll(nil)
+	var logged_out_users []models.User
+	if err != nil {
+		fmt.Printf("Error getting user list %v\n", err)
+	}
+	for _, user := range users {
+		if user.CheckAnwesenheit() {
+			err = user.Logout()
+			if err != nil {
+				fmt.Printf("Error logging out user %v\n", err)
+			}
+			logged_out_users = append(logged_out_users, user)
+		}
+
+	}
+	w.Header().Set("Content-Type", "application/json")
+	w.WriteHeader(http.StatusOK)
+	json.NewEncoder(w).Encode(logged_out_users)
+
+}
--- a/Backend/endpoints/team.go
+++ b/Backend/endpoints/team.go
@@ -0,0 +1,117 @@
+package endpoints
+
+import (
+	"arbeitszeitmessung/helper"
+	"arbeitszeitmessung/models"
+	"arbeitszeitmessung/templates"
+	"context"
+	"errors"
+	"log"
+	"net/http"
+	"strconv"
+	"time"
+)
+
+func TeamHandler(w http.ResponseWriter, r *http.Request) {
+	helper.RequiresLogin(Session, w, r)
+	switch r.Method {
+	case http.MethodPost:
+		submitReport(w, r)
+		break
+	case http.MethodGet:
+		showWeeks(w, r)
+		break
+	default:
+		http.Error(w, "Method not allowed!", http.StatusMethodNotAllowed)
+		break
+	}
+	// user, err := (*models.User).GetUserFromSession(nil, Session, r.Context())
+	// if err != nil {
+	// 	log.Println("No user found with the given personal number!")
+	// 	http.Redirect(w, r, "/user/login", http.StatusSeeOther)
+	// 	return
+	// }
+	// var userWorkDays []models.WorkDay
+	// userWorkDays = (*models.WorkDay).GetWorkDays(nil, user.CardUID, time.Date(2025, time.February, 24, 0, 0, 0, 0, time.Local), time.Date(2025, time.February, 24+7, 0, 0, 0, 0, time.Local))
+	// log.Println("User:", user)
+	// teamMembers, err := user.GetTeamMembers()
+	// getWeeksTillNow(time.Now().AddDate(0, 0, -14))
+	// templates.TeamPage(teamMembers, userWorkDays).Render(r.Context(), w)
+}
+
+func submitReport(w http.ResponseWriter, r *http.Request) {
+	err := r.ParseForm()
+	if err != nil {
+		log.Println("Error parsing form", err)
+		return
+	}
+	userPN, _ := strconv.Atoi(r.FormValue("user"))
+	_weekTs := r.FormValue("week")
+	weekTs, err := time.Parse(time.DateOnly, _weekTs)
+	user, err := (*models.User).GetByPersonalNummer(nil, userPN)
+	workWeek := (*models.WorkWeek).GetWeek(nil, user, weekTs, false)
+
+	if err != nil {
+		log.Println("Could not get user!")
+		return
+	}
+
+	switch r.FormValue("method") {
+	case "send":
+		err = workWeek.Send()
+		break
+	case "accept":
+		err = workWeek.Accept()
+		break
+	default:
+		break
+	}
+	if errors.Is(err, models.ErrRunningWeek) {
+		showWeeks(w, r.WithContext(context.WithValue(r.Context(), "error", true)))
+	}
+	showWeeks(w, r)
+}
+
+func showWeeks(w http.ResponseWriter, r *http.Request) {
+	user, err := (*models.User).GetUserFromSession(nil, Session, r.Context())
+	if err != nil {
+		log.Println("No user found with the given personal number!")
+		http.Redirect(w, r, "/user/login", http.StatusSeeOther)
+		return
+	}
+	var workWeeks []models.WorkWeek
+	teamMembers, err := user.GetTeamMembers()
+	for _, member := range teamMembers {
+		weeks := (*models.WorkWeek).GetSendWeeks(nil, member)
+		workWeeks = append(workWeeks, weeks...)
+	}
+	lastSub := user.GetLastSubmission()
+	log.Println(lastSub)
+	userWeek := (*models.WorkWeek).GetWeek(nil, user, lastSub, true)
+	// isRunningWeek := time.Since(lastSub) < 24*5*time.Hour //the last submission is this week and cannot be send yet
+	templates.TeamPage(workWeeks, userWeek).Render(r.Context(), w)
+}
+
+func getWeeksTillNow(lastWeek time.Time) []time.Time {
+	var weeks []time.Time
+	if lastWeek.After(time.Now()) {
+		log.Println("Timestamp is after today, no weeks till now!")
+		return weeks
+	}
+	if lastWeek.Weekday() != time.Monday {
+		if lastWeek.Weekday() == time.Sunday {
+			lastWeek = lastWeek.AddDate(0, 0, -6)
+		} else {
+			lastWeek = lastWeek.AddDate(0, 0, -int(lastWeek.Weekday()-1))
+		}
+	}
+	if time.Since(lastWeek) < 24*5*time.Hour {
+		log.Println("Timestamp in running week, cannot split!")
+	}
+
+	for t := lastWeek; t.Before(time.Now()); t = t.Add(7 * 24 * time.Hour) {
+		weeks = append(weeks, t)
+	}
+	log.Println(weeks)
+	return weeks
+}
--- a/Backend/endpoints/time.go
+++ b/Backend/endpoints/time.go
@@ -0,0 +1,191 @@
+package endpoints
+
+import (
+	"arbeitszeitmessung/helper"
+	"arbeitszeitmessung/models"
+	"arbeitszeitmessung/templates"
+	"context"
+	"encoding/json"
+	"log"
+	"net/http"
+	"strconv"
+	"time"
+)
+
+// Frontend relevant backend functionality -> not used by the arduino devices
+func TimeHandler(w http.ResponseWriter, r *http.Request) {
+	helper.RequiresLogin(Session, w, r)
+	helper.SetCors(w)
+	switch r.Method {
+	case http.MethodGet:
+		getBookings(w, r)
+		break
+	case http.MethodPost:
+		updateBooking(w, r)
+		break
+	case http.MethodOptions:
+		// just support options header for non GET Requests from SWAGGER
+		w.WriteHeader(http.StatusOK)
+		break
+	default:
+		http.Error(w, "Method not allowed!", http.StatusMethodNotAllowed)
+		break
+	}
+}
+
+func parseTimestamp(r *http.Request, get_key string, fallback string) (time.Time, error) {
+	_timestamp_get := r.URL.Query().Get(get_key)
+	if _timestamp_get == "" {
+		_timestamp_get = fallback
+	}
+	timestamp_get, err := time.Parse("2006-01-02", _timestamp_get)
+	if err != nil {
+		return time.Now(), err
+	}
+	return timestamp_get, nil
+}
+
+// Returns bookings from DB with similar card uid -> checks for card uid in http query params
+func getBookings(w http.ResponseWriter, r *http.Request) {
+	user, err := (*models.User).GetUserFromSession(nil, Session, r.Context())
+	if err != nil {
+		log.Println("No user found with the given personal number!")
+		http.Redirect(w, r, "/user/login", http.StatusSeeOther)
+		return
+	}
+
+	// TODO add config for timeoffset
+	tsFrom, err := parseTimestamp(r, "time_from", time.Now().AddDate(0, -1, 0).Format("2006-01-02"))
+	if err != nil {
+		log.Println("Error parsing 'from' time", err)
+		http.Error(w, "Timestamp 'from' cannot be parsed!", http.StatusBadRequest)
+		return
+	}
+	tsTo, err := parseTimestamp(r, "time_to", time.Now().Format("2006-01-02"))
+	if err != nil {
+		log.Println("Error parsing 'to' time", err)
+		http.Error(w, "Timestamp 'to' cannot be parsed!", http.StatusBadRequest)
+		return
+	}
+	tsTo = tsTo.AddDate(0, 0, 1) // so that today is inside
+
+	bookings, err := (*models.Booking).GetBookingsGrouped(nil, user.CardUID, tsFrom, tsTo)
+	if err != nil {
+		log.Println("Error getting bookings: ", err)
+		http.Error(w, "Internal Server Error", http.StatusInternalServerError)
+		return
+	}
+	if r.Header.Get("Accept") == "application/json" {
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		json.NewEncoder(w).Encode(bookings)
+		return
+	}
+	ctx := context.WithValue(r.Context(), "user", user)
+	templates.TimePage(bookings).Render(ctx, w)
+}
+
+func updateBooking(w http.ResponseWriter, r *http.Request) {
+	r.ParseForm()
+	for index, possibleBooking := range r.PostForm {
+		if index[:7] == "booking" {
+			booking_id, err := strconv.Atoi(index[8:])
+			if err != nil {
+				log.Println("Error parsing bookingId", err)
+				continue
+			}
+			booking, err := (*models.Booking).GetBookingById(nil, booking_id)
+			if err != nil {
+				log.Println("Error getting booking!", err)
+				continue
+			}
+			parsedTime, err := time.ParseInLocation("15:04", possibleBooking[0], time.Local)
+			if err != nil {
+				log.Println("Error parsing time!", err)
+				continue
+			}
+			log.Println("Parsing time", parsedTime)
+			booking.UpdateTime(parsedTime)
+		}
+	}
+	getBookings(w, r)
+}
+
+func getBookingsAPI(w http.ResponseWriter, r *http.Request) {
+	_user_pn := r.URL.Query().Get("personal_nummer")
+	user_pn, err := strconv.Atoi(_user_pn)
+	if err != nil {
+		log.Println("No personal numver found!")
+		http.Error(w, "No personal number found", http.StatusBadRequest)
+		return
+	}
+
+	user, err := (*models.User).GetByPersonalNummer(nil, user_pn)
+	if err != nil {
+		log.Println("No user found with the given personal number!")
+		http.Error(w, "No user found", http.StatusNotFound)
+		return
+	}
+
+	// TODO add config for timeoffset
+	tsFrom, err := parseTimestamp(r, "time_from", time.Now().AddDate(0, -1, 0).Format("2006-01-02"))
+	if err != nil {
+		log.Println("Error parsing 'from' time", err)
+		http.Error(w, "Timestamp 'from' cannot be parsed!", http.StatusBadRequest)
+		return
+	}
+	tsTo, err := parseTimestamp(r, "time_to", time.Now().Format("2006-01-02"))
+	if err != nil {
+		log.Println("Error parsing 'to' time", err)
+		http.Error(w, "Timestamp 'to' cannot be parsed!", http.StatusBadRequest)
+		return
+	}
+	tsTo = tsTo.AddDate(0, 0, 1) // so that today is inside
+
+	bookings, err := (*models.Booking).GetBookingsGrouped(nil, user.CardUID, tsFrom, tsTo)
+	if err != nil {
+		log.Println("Error getting bookings: ", err)
+		http.Error(w, "Internal Server Error", http.StatusInternalServerError)
+		return
+	}
+	w.Header().Set("Content-Type", "application/json")
+	json.NewEncoder(w).Encode(bookings)
+}
+
+// Updates a booking form the given json body
+func updateBookingAPI(w http.ResponseWriter, r *http.Request) {
+	_booking_id := r.URL.Query().Get("counter_id")
+	if _booking_id == "" {
+		http.Error(w, "Missing bookingID query parameter", http.StatusBadRequest)
+		return
+	}
+	booking_id, err := strconv.Atoi(_booking_id)
+	if err != nil {
+		http.Error(w, "Invalid bookingID query parameter", http.StatusBadRequest)
+		return
+	}
+	bookingDB, err := (*models.Booking).GetBookingById(nil, booking_id)
+	if err != nil {
+		log.Println("Error getting booking: ", err)
+		http.Error(w, "Internal Server Error", http.StatusInternalServerError)
+		return
+	}
+	var booking models.Booking
+	dec := json.NewDecoder(r.Body)
+	dec.DisallowUnknownFields()
+	err = dec.Decode(&booking)
+	if err != nil {
+		log.Println("Error parsing booking: ", err)
+		http.Error(w, "Internal Server Error", http.StatusInternalServerError)
+		return
+	}
+	if booking.CounterId != 0 && booking.CounterId != bookingDB.CounterId {
+		log.Println("Booking Ids do not match")
+		http.Error(w, "Booking Ids do not match", http.StatusBadRequest)
+		return
+	}
+	bookingDB.Update(booking)
+	bookingDB.Save()
+	w.Header().Set("Content-Type", "application/json")
+	json.NewEncoder(w).Encode(bookingDB)
+}
--- a/Backend/endpoints/time_create.go
+++ b/Backend/endpoints/time_create.go
@@ -0,0 +1,74 @@
+package endpoints
+
+import (
+	"arbeitszeitmessung/helper"
+	"arbeitszeitmessung/models"
+	"encoding/json"
+	"errors"
+	"log"
+	"net/http"
+)
+
+// Relevant for arduino inputs -> creates new Booking from get and put method
+// GET only for demo purpose
+func TimeCreateHandler(w http.ResponseWriter, r *http.Request) {
+	helper.SetCors(w)
+	switch r.Method {
+	case http.MethodPut:
+		createBooking(w, r)
+		break
+	case http.MethodGet:
+		createBooking(w, r)
+		break
+	case http.MethodOptions:
+		// just support options header for non GET Requests from SWAGGER
+		w.WriteHeader(http.StatusOK)
+		break
+	default:
+		http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
+		break
+	}
+}
+
+// Creates a booking from the http query params -> no body needed
+// after that entry wi'll be written to database and the booking is returned as json
+func createBooking(w http.ResponseWriter, r *http.Request) {
+	if !checkPassword(r) {
+		log.Println("Wrong or no API key provided!")
+		http.Error(w, "Wrong or no API key provided", http.StatusUnauthorized)
+		return
+	}
+
+	booking := (*models.Booking).FromUrlParams(nil, r.URL.Query())
+	if booking.Verify() {
+		err := booking.Insert()
+		if errors.Is(models.SameBookingError{}, err) {
+			http.Error(w, "Booking already exists", http.StatusConflict)
+			return
+		}
+		if err != nil {
+			log.Println("Error inserting booking: ", err)
+			http.Error(w, "Internal Server Error", http.StatusInternalServerError)
+			return
+		}
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusAccepted)
+		json.NewEncoder(w).Encode(booking)
+	}
+	w.WriteHeader(http.StatusBadRequest)
+}
+
+func checkPassword(r *http.Request) bool {
+	authToken := helper.GetEnv("API_TOKEN", "dont_access")
+	authHeaders := r.Header.Get("Authorization")
+	_authStart := len("Bearer ")
+	if len(authHeaders) <= _authStart {
+		authHeaders = r.URL.Query().Get("api_key")
+		_authStart = 0
+		if len(authHeaders) <= _authStart {
+			return false
+		}
+	}
+	log.Println(authHeaders)
+	return authToken == authHeaders[_authStart:]
+}
--- a/Backend/endpoints/user.go
+++ b/Backend/endpoints/user.go
@@ -0,0 +1,128 @@
+package endpoints
+
+import (
+	"arbeitszeitmessung/helper"
+	"arbeitszeitmessung/models"
+	"arbeitszeitmessung/templates"
+	"log"
+	"net/http"
+	"strconv"
+	"time"
+
+	"github.com/alexedwards/scs/v2"
+)
+
+var Session *scs.SessionManager
+
+func CreateSessionManager(lifetime time.Duration) *scs.SessionManager {
+	Session = scs.New()
+	Session.Lifetime = lifetime
+	return Session
+}
+
+func LoginHandler(w http.ResponseWriter, r *http.Request) {
+	switch r.Method {
+	case http.MethodGet:
+		showLoginPage(w, r, false)
+		break
+	case http.MethodPost:
+		loginUser(w, r)
+		break
+	default:
+		http.Error(w, "Method not allowed!", http.StatusMethodNotAllowed)
+		break
+	}
+}
+
+func UserHandler(w http.ResponseWriter, r *http.Request) {
+	helper.RequiresLogin(Session, w, r)
+	switch r.Method {
+	case http.MethodGet:
+		showUserPage(w, r, 0)
+		break
+	case http.MethodPost:
+		changePassword(w, r)
+		break
+	default:
+		http.Error(w, "Method not allowed!", http.StatusMethodNotAllowed)
+		break
+	}
+}
+
+func showLoginPage(w http.ResponseWriter, r *http.Request, failed bool) {
+	templates.LoginPage(failed).Render(r.Context(), w)
+}
+
+func loginUser(w http.ResponseWriter, r *http.Request) {
+	err := r.ParseForm()
+	if err != nil {
+		log.Println("Error parsing form!", err)
+		http.Error(w, "Internal error", http.StatusBadRequest)
+		return
+	}
+	_personal_nummer := r.FormValue("personal_nummer")
+	if _personal_nummer == "" {
+		log.Println("No personal_nummer provided!")
+		http.Error(w, "No personal_nummer provided", http.StatusBadRequest)
+		return
+	}
+	personal_nummer, err := strconv.Atoi(_personal_nummer)
+	if err != nil {
+		log.Println("Cannot parse personal nubmer!")
+		http.Error(w, "Cannot parse number", http.StatusBadRequest)
+		return
+	}
+
+	user, err := (*models.User).GetByPersonalNummer(nil, personal_nummer)
+	if err != nil {
+		log.Println("No user found under this personal number!")
+		http.Error(w, "No user found!", http.StatusNotFound)
+	}
+
+	password := r.FormValue("password")
+	if user.Login(password) {
+		log.Printf("New succesfull user login from %s %s!\n", user.Vorname, user.Name)
+		Session.Put(r.Context(), "user", user.PersonalNummer)
+		http.Redirect(w, r, "/time", http.StatusSeeOther) //with this browser always uses GET
+	} else {
+		showLoginPage(w, r, true)
+		return
+	}
+	showLoginPage(w, r, false)
+	return
+}
+
+// change user password and store salted hash in db
+func changePassword(w http.ResponseWriter, r *http.Request) {
+	err := r.ParseForm()
+	if err != nil {
+		log.Println("Error parsing form!", err)
+		http.Error(w, "Error parsing form error", http.StatusBadRequest)
+		return
+	}
+	password := r.FormValue("password")
+	newPassword := r.FormValue("new_password")
+	if password == "" || newPassword == "" || newPassword != r.FormValue("new_password_repeat") {
+		showUserPage(w, r, http.StatusBadRequest)
+		return
+	}
+	user, err := (*models.User).GetByPersonalNummer(nil, Session.GetInt(r.Context(), "user"))
+	if err != nil {
+		log.Println("Error getting user!", err)
+		showUserPage(w, r, http.StatusBadRequest)
+	}
+	auth, err := user.ChangePass(password, newPassword)
+	if err != nil {
+		log.Println("Error when changing password!", err)
+	}
+	if auth {
+		showUserPage(w, r, http.StatusOK)
+		return
+	}
+	showUserPage(w, r, http.StatusUnauthorized)
+}
+
+func showUserPage(w http.ResponseWriter, r *http.Request, status int) {
+	templates.UserPage(status).Render(r.Context(), w)
+	return
+}
--- a/Backend/go.mod
+++ b/Backend/go.mod
@@ -1,5 +1,13 @@
 module arbeitszeitmessung

-go 1.21.7
+go 1.23
+
+toolchain go1.23.6

 require github.com/lib/pq v1.10.9
+
+require github.com/a-h/templ v0.3.833
+
+require github.com/alexedwards/scs/v2 v2.8.0
+
+require github.com/joho/godotenv v1.5.1
--- a/Backend/go.sum
+++ b/Backend/go.sum
@@ -1,2 +1,10 @@
+github.com/a-h/templ v0.3.833 h1:L/KOk/0VvVTBegtE0fp2RJQiBm7/52Zxv5fqlEHiQUU=
+github.com/a-h/templ v0.3.833/go.mod h1:cAu4AiZhtJfBjMY0HASlyzvkrtjnHWPeEsyGK2YYmfk=
+github.com/alexedwards/scs/v2 v2.8.0 h1:h31yUYoycPuL0zt14c0gd+oqxfRwIj6SOjHdKRZxhEw=
+github.com/alexedwards/scs/v2 v2.8.0/go.mod h1:ToaROZxyKukJKT/xLcVQAChi5k6+Pn1Gvmdl7h3RRj8=
+github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
+github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/joho/godotenv v1.5.1 h1:7eLL/+HRGLY0ldzfGMeQkb7vMd0as4CfYvUVzLqw0N0=
+github.com/joho/godotenv v1.5.1/go.mod h1:f4LDr5Voq0i2e/R5DDNOoa2zzDfwtkZa6DnEwAbqwq4=
 github.com/lib/pq v1.10.9 h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw=
 github.com/lib/pq v1.10.9/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
--- a/Backend/helper/system.go
+++ b/Backend/helper/system.go
@@ -0,0 +1,17 @@
+package helper
+
+import (
+	"os"
+)
+
+// Returns env with default fallback value.
+//
+// Params:
+//	key - enviroment var name
+//	fallback - default value
+func GetEnv(key, fallback string) string {
+	if value, ok := os.LookupEnv(key); ok {
+		return value
+	}
+	return fallback
+}
--- a/Backend/helper/types.go
+++ b/Backend/helper/types.go
@@ -0,0 +1,9 @@
+package helper
+
+import "time"
+
+type TimeFormValue struct {
+	TsFrom time.Time
+	TsTo time.Time
+	CardUID string
+}
--- a/Backend/helper/web.go
+++ b/Backend/helper/web.go
@@ -0,0 +1,30 @@
+package helper
+
+import (
+	"net/http"
+	"os"
+
+	"github.com/alexedwards/scs/v2"
+)
+
+// setting cors, important for later frontend use
+//
+// in DEBUG == "true" everything is set to "*" so that no cors errors will be happen
+func SetCors(w http.ResponseWriter) {
+	if os.Getenv("NO_CORS") == "true" {
+		w.Header().Set("Access-Control-Allow-Origin", "*")
+		w.Header().Set("Access-Control-Allow-Methods", "*")
+		w.Header().Set("Access-Control-Allow-Headers", "*")
+		// log.Println("Setting cors to *")
+	}
+}
+
+func RequiresLogin(session *scs.SessionManager, w http.ResponseWriter, r *http.Request) {
+	if GetEnv("GO_ENV", "production") == "debug" {
+		return
+	}
+	if session.Exists(r.Context(), "user") {
+		return
+	}
+	http.Redirect(w, r, "/user/login", http.StatusSeeOther)
+}
--- a/Backend/main.go
+++ b/Backend/main.go
@@ -1,146 +1,61 @@
 package main

 import (
+	"arbeitszeitmessung/endpoints"
+	"arbeitszeitmessung/helper"
 	"arbeitszeitmessung/models"
-	"encoding/json"
-	"errors"
+	"arbeitszeitmessung/templates"
+	"context"
 	"fmt"
 	"log"
 	"net/http"
-	"os"
-	"strconv"
+	"time"

+	"github.com/a-h/templ"
+	"github.com/joho/godotenv"
 	_ "github.com/lib/pq"
 )

 func main() {
 	var err error
+
+	err = godotenv.Load(".env")
+	if err != nil {
+		log.Println("No .env file found in directory!")
+	}
+
 	models.DB, err = OpenDatabase()
 	if err != nil {
 		log.Fatal(err)
 	}
 	defer models.DB.Close()

-	http.HandleFunc("/time/new", timeCreateHandler)
-	http.HandleFunc("/time", timeHandler)
+	fs := http.FileServer(http.Dir("./static"))
+	endpoints.CreateSessionManager(24 * time.Hour)

-	fmt.Printf("Server is running at http://localhost:8080 exposed to port %s\n", getEnv("EXPOSED_PORT", "8000"))
-	log.Fatal(http.ListenAndServe(":8000", nil))
+	server := http.NewServeMux()
+
+	// handles the different http routes
+	server.HandleFunc("/time/new", endpoints.TimeCreateHandler)
+	server.Handle("/time", ParamsMiddleware(endpoints.TimeHandler))
+	server.HandleFunc("/logout", endpoints.LogoutHandler)
+	server.HandleFunc("/user/login", endpoints.LoginHandler)
+	server.HandleFunc("/user", endpoints.UserHandler)
+	server.HandleFunc("/team", endpoints.TeamHandler)
+	server.Handle("/", templ.Handler(templates.NavPage()))
+	server.Handle("/static/", http.StripPrefix("/static/", fs))
+
+	serverSessionMiddleware := endpoints.Session.LoadAndSave(server)
+
+	// starting the http server
+	fmt.Printf("Server is running at http://localhost:8000 exposed to port %s\n", helper.GetEnv("EXPOSED_PORT", "8000"))
+	log.Fatal(http.ListenAndServe(":8080", serverSessionMiddleware))
 }

-func timeCreateHandler(w http.ResponseWriter, r *http.Request) {
-	setCors(w)
-	switch r.Method {
-	case "PUT":
-		createBooking(w, r)
-	case "OPTIONS":
-		w.WriteHeader(http.StatusOK)
-	default:
-		http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
-	}
-}
-
-func timeHandler(w http.ResponseWriter, r *http.Request) {
-	setCors(w)
-	switch r.Method {
-	case "GET":
-		getBookings(w, r)
-	case "PUT":
-		updateBooking(w, r)
-	case "OPTIONS":
-		w.WriteHeader(http.StatusOK)
-	default:
-		http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
-	}
-
-}
-
-func createBooking(w http.ResponseWriter, r *http.Request) {
-	booking := (*models.Booking).FromUrlParams(nil, r.URL.Query())
-	if booking.Verify() {
-		err := booking.Insert()
-		if errors.Is(models.SameBookingError{}, err) {
-			http.Error(w, "Booking already exists", http.StatusConflict)
-			return
-		}
-		if err != nil {
-			log.Println("Error inserting booking: ", err)
-			http.Error(w, "Internal Server Error", http.StatusInternalServerError)
-			return
-		}
-		w.Header().Set("Content-Type", "application/json")
-		w.WriteHeader(http.StatusAccepted)
-		json.NewEncoder(w).Encode(booking)
-	}
-	w.WriteHeader(http.StatusBadRequest)
-}
-
-func getBookings(w http.ResponseWriter, r *http.Request) {
-	card_id := r.URL.Query().Get("cardID")
-	if card_id == "" {
-		http.Error(w, "Missing cardID query parameter", http.StatusBadRequest)
-		return
-	}
-	bookings, err := (*models.Booking).GetBookingsByCardID(nil, card_id)
-	if err != nil {
-		log.Println("Error getting bookings: ", err)
-		http.Error(w, "Internal Server Error", http.StatusInternalServerError)
-		return
-	}
-	w.Header().Set("Content-Type", "application/json")
-	json.NewEncoder(w).Encode(bookings)
-}
-
-func updateBooking(w http.ResponseWriter, r *http.Request) {
-	_booking_id := r.URL.Query().Get("bookingID")
-	if _booking_id == "" {
-		http.Error(w, "Missing bookingID query parameter", http.StatusBadRequest)
-		return
-	}
-	booking_id, err := strconv.Atoi(_booking_id)
-	if err != nil {
-		http.Error(w, "Invalid bookingID query parameter", http.StatusBadRequest)
-		return
-	}
-	_booking, err := (*models.Booking).GetBookingById(nil, booking_id)
-	if err != nil {
-		log.Println("Error getting booking: ", err)
-		http.Error(w, "Internal Server Error", http.StatusInternalServerError)
-		return
-	}
-	var booking models.Booking
-	dec := json.NewDecoder(r.Body)
-	dec.DisallowUnknownFields()
-	err = dec.Decode(&booking)
-	if err != nil {
-		log.Println("Error parsing booking: ", err)
-		http.Error(w, "Internal Server Error", http.StatusInternalServerError)
-		return
-	}
-	if booking.Id != 0 && booking.Id != _booking.Id {
-		log.Println("Booking Ids do not match")
-		http.Error(w, "Booking Ids do not match", http.StatusBadRequest)
-		return
-	}
-	_booking.Update(booking)
-	_booking.Save()
-	w.Header().Set("Content-Type", "application/json")
-	json.NewEncoder(w).Encode(_booking)
-}
-
-// func getBooking(w http.ResponseWriter, r *http.Request)
-
-func getEnv(key, fallback string) string {
-	if value, ok := os.LookupEnv(key); ok {
-		return value
-	}
-	return fallback
-}
-
-func setCors(w http.ResponseWriter) {
-	if os.Getenv("DEBUG") == "true" {
-		w.Header().Set("Access-Control-Allow-Origin", "*")
-		w.Header().Set("Access-Control-Allow-Methods", "*")
-		w.Header().Set("Access-Control-Allow-Headers", "*")
-	}
+func ParamsMiddleware(next http.HandlerFunc) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		queryParams := r.URL.Query()
+		ctx := context.WithValue(r.Context(), "urlParams", queryParams)
+		next.ServeHTTP(w, r.WithContext(ctx))
+	})
 }
--- a/Backend/models/booking.go
+++ b/Backend/models/booking.go
@@ -5,6 +5,7 @@ import (
 	"fmt"
 	"log"
 	"net/url"
+	"sort"
 	"strconv"
 	"time"
 )
@@ -16,36 +17,37 @@ func (e SameBookingError) Error() string {
 }

 type Booking struct {
-	CardID      string    `json:"cardID"`
-	ReaderID    string    `json:"readerID"`
-	BookingType int       `json:"bookingType"`
-	LoggedTime  time.Time `json:"loggedTime"`
-	Id          int       `json:"id"`
+	CardUID    string    `json:"card_uid"`
+	GeraetID   int16     `json:"geraet_id"`
+	CheckInOut int16     `json:"check_in_out"`
+	Timestamp  time.Time `json:"timestamp"`
+	CounterId  int       `json:"counter_id"`
 }

 var DB *sql.DB

-func (b Booking) New(card_id string, reader_id string, booking_type int) Booking {
+func (b *Booking) New(card_uid string, geraet_id int16, check_in_out int16) Booking {
 	return Booking{
-		CardID:      card_id,
-		ReaderID:    reader_id,
-		BookingType: booking_type,
+		CardUID:    card_uid,
+		GeraetID:   geraet_id,
+		CheckInOut: check_in_out,
 	}
 }

 func (b *Booking) FromUrlParams(params url.Values) Booking {
-	bookingType, err := strconv.Atoi(params.Get("bookingType"))
-	if err != nil {
-		log.Println("Error parsing bookingType: ", err)
-		return b.New("", "", 0)
+	var booking Booking
+	if _check_in_out, err := strconv.Atoi(params.Get("check_in_out")); err == nil {
+		booking.CheckInOut = int16(_check_in_out)
 	}
-	cardID := params.Get("cardID")
-	readerID := params.Get("readerID")
-	return Booking{BookingType: bookingType, CardID: cardID, ReaderID: readerID}
+	if _geraet_id, err := strconv.Atoi(params.Get("geraet_id")); err == nil {
+		booking.GeraetID = int16(_geraet_id)
+	}
+	booking.CardUID = params.Get("card_uid")
+	return booking
 }

 func (b Booking) Verify() bool {
-	if b.CardID == "" || b.ReaderID == "" || b.BookingType == 0 {
+	if b.CardUID == "" || b.GeraetID == 0 || b.CheckInOut == 0 {
 		return false
 	}
 	return true
@@ -55,11 +57,11 @@ func (b *Booking) Insert() error {
 	if !checkLastBooking(*b) {
 		return SameBookingError{}
 	}
-	stmt, err := DB.Prepare((`INSERT INTO zeiten (card_id, reader_id, booking_type) VALUES ($1, $2, $3) RETURNING id, logged_time`))
+	stmt, err := DB.Prepare((`INSERT INTO anwesenheit (card_uid, geraet_id, check_in_out) VALUES ($1, $2, $3) RETURNING counter_id, timestamp`))
 	if err != nil {
 		return err
 	}
-	err = stmt.QueryRow(b.CardID, b.ReaderID, b.BookingType).Scan(&b.Id, &b.LoggedTime)
+	err = stmt.QueryRow(b.CardUID, b.GeraetID, b.CheckInOut).Scan(&b.CounterId, &b.Timestamp)
 	if err != nil {
 		return err
 	}
@@ -68,11 +70,11 @@ func (b *Booking) Insert() error {

 func (b *Booking) GetBookingById(booking_id int) (Booking, error) {
 	var booking Booking
-	qStr, err := DB.Prepare((`SELECT id, logged_time, card_id, reader_id, booking_type FROM zeiten WHERE id = $1`))
+	qStr, err := DB.Prepare((`SELECT counter_id, timestamp, card_uid, geraet_id, check_in_out FROM anwesenheit WHERE counter_id = $1`))
 	if err != nil {
 		return booking, err
 	}
-	err = qStr.QueryRow(booking_id).Scan(&booking.Id, &booking.LoggedTime, &booking.CardID, &booking.ReaderID, &booking.BookingType)
+	err = qStr.QueryRow(booking_id).Scan(&booking.CounterId, &booking.Timestamp, &booking.CardUID, &booking.GeraetID, &booking.CheckInOut)
 	if err != nil {
 		return booking, err
 	}
@@ -83,13 +85,17 @@ func (b *Booking) GetBookingById(booking_id int) (Booking, error) {
 	return booking, nil
 }

-func (b *Booking) GetBookingsByCardID(card_id string) ([]Booking, error) {
-	qStr, err := DB.Prepare((`SELECT id, logged_time, card_id, reader_id, booking_type FROM zeiten WHERE card_id = $1`))
+// Gets all booking based on a card uid
+//
+// optional filter parameter
+func (b *Booking) GetBookingsByCardID(card_uid string, tsFrom time.Time, tsTo time.Time) ([]Booking, error) {
+	qStr, err := DB.Prepare((`SELECT counter_id, timestamp, card_uid, geraet_id, check_in_out FROM anwesenheit WHERE card_uid = $1 AND timestamp BETWEEN $2 AND $3 ORDER BY timestamp`))
 	if err != nil {
 		return nil, err
 	}
+	defer qStr.Close()
 	var bookings []Booking
-	rows, err := qStr.Query(card_id)
+	rows, err := qStr.Query(card_uid, tsFrom, tsTo)
 	if err == sql.ErrNoRows {
 		return bookings, err
 	}
@@ -99,7 +105,7 @@ func (b *Booking) GetBookingsByCardID(card_id string) ([]Booking, error) {
 	defer rows.Close()
 	for rows.Next() {
 		var booking Booking
-		if err := rows.Scan(&booking.Id, &booking.LoggedTime, &booking.CardID, &booking.ReaderID, &booking.BookingType); err != nil {
+		if err := rows.Scan(&booking.CounterId, &booking.Timestamp, &booking.CardUID, &booking.GeraetID, &booking.CheckInOut); err != nil {
 			return bookings, err
 		}
 		bookings = append(bookings, booking)
@@ -110,39 +116,86 @@ func (b *Booking) GetBookingsByCardID(card_id string) ([]Booking, error) {
 	return bookings, nil
 }

+func (b *Booking) GetBookingsGrouped(card_uid string, tsFrom time.Time, tsTo time.Time) ([]WorkDay, error) {
+	var grouped = make(map[string][]Booking)
+	bookings, err := b.GetBookingsByCardID(card_uid, tsFrom, tsTo)
+	if err != nil {
+		log.Println("Failed to get bookings", err)
+		return []WorkDay{}, nil
+	}
+	for _, booking := range bookings {
+		day := booking.Timestamp.Truncate(24 * time.Hour)
+		key := day.Format("2006-01-02")
+		grouped[key] = append(grouped[key], booking)
+	}
+
+	var result []WorkDay
+	for key, bookings := range grouped {
+		day, _ := time.Parse("2006-01-02", key)
+		sort.Slice(bookings, func(i, j int) bool {
+			return bookings[i].Timestamp.Before(bookings[j].Timestamp)
+		})
+		workDay := WorkDay{Day: day, Bookings: bookings}
+		workDay.GetWorkTime()
+		result = append(result, workDay)
+	}
+
+	sort.Slice(result, func(i, j int) bool {
+		return result[i].Day.After(result[j].Day)
+	})
+
+	return result, nil
+}
+
 func (b Booking) Save() {
-	qStr, err := DB.Prepare((`UPDATE "zeiten" SET "id" = $1, "card_id" = $2, "reader_id" = $3, "booking_type" = $4 WHERE "id" = $1;`))
+	qStr, err := DB.Prepare((`UPDATE "anwesenheit" SET "card_uid" = $2, "geraet_id" = $3, "check_in_out" = $4, "timestamp" = $5 WHERE "counter_id" = $1;`))
 	if err != nil {
 		log.Fatalf("Error preparing query: %v", err)
 		return
 	}
-	_, err = qStr.Query(b.Id, b.CardID, b.ReaderID, b.BookingType)
+	_, err = qStr.Query(b.CounterId, b.CardUID, b.GeraetID, b.CheckInOut, b.Timestamp)
 	if err != nil {
 		log.Fatalf("Error executing query: %v", err)
 		return
 	}
 }

+func (b *Booking) GetBookingType() string {
+	switch b.CheckInOut {
+	case 1, 3: //manuelle Änderung
+		return "kommen"
+	case 2, 4: //manuelle Änderung
+		return "gehen"
+	case 255:
+		return "abgemeldet"
+	default:
+		return "Buchungs Typ unbekannt"
+	}
+}
+
 func (b *Booking) Update(nb Booking) {
-	if b.BookingType != nb.BookingType && nb.BookingType != 0 {
-		b.BookingType = nb.BookingType
+	if b.CheckInOut != nb.CheckInOut && nb.CheckInOut != 0 {
+		b.CheckInOut = nb.CheckInOut
 	}
-	if b.CardID != nb.CardID && nb.CardID != "" {
-		b.CardID = nb.CardID
+	if b.CardUID != nb.CardUID && nb.CardUID != "" {
+		b.CardUID = nb.CardUID
 	}
-	if b.ReaderID != nb.ReaderID && nb.ReaderID != "" {
-		b.ReaderID = nb.ReaderID
+	if b.GeraetID != nb.GeraetID && nb.GeraetID != 0 {
+		b.GeraetID = nb.GeraetID
+	}
+	if b.Timestamp != nb.Timestamp {
+		b.Timestamp = nb.Timestamp
 	}
 }

 func checkLastBooking(b Booking) bool {
-	var booking_type int
-	stmt, err := DB.Prepare((`SELECT booking_type FROM "zeiten" WHERE "card_id" = $1 ORDER BY "logged_time" DESC LIMIT 1;`))
+	var check_in_out int
+	stmt, err := DB.Prepare((`SELECT check_in_out FROM "anwesenheit" WHERE "card_uid" = $1 ORDER BY "timestamp" DESC LIMIT 1;`))
 	if err != nil {
 		log.Fatalf("Error preparing query: %v", err)
 		return false
 	}
-	err = stmt.QueryRow(b.CardID).Scan(&booking_type)
+	err = stmt.QueryRow(b.CardUID).Scan(&check_in_out)
 	if err == sql.ErrNoRows {
 		return true
 	}
@@ -150,8 +203,27 @@ func checkLastBooking(b Booking) bool {
 		log.Println("Error checking last booking: ", err)
 		return false
 	}
-	if booking_type == b.BookingType {
+	if int16(check_in_out)%2 == b.CheckInOut%2 {
 		return false
 	}
 	return true
 }
+
+func (b *Booking) UpdateTime(newTime time.Time) {
+	hour, minute, _ := newTime.Clock()
+	if hour == b.Timestamp.Hour() && minute == b.Timestamp.Minute() {
+		return
+	}
+	// TODO: add check for time overlap
+
+	var newBooking Booking
+	newBooking.Timestamp = time.Date(b.Timestamp.Year(), b.Timestamp.Month(), b.Timestamp.Day(), hour, minute, 0, 0, time.Local)
+	if b.CheckInOut < 3 {
+		newBooking.CheckInOut = b.CheckInOut + 2
+	}
+	if b.CheckInOut == 255 {
+		newBooking.CheckInOut = 4
+	}
+	b.Update(newBooking)
+	b.Save()
+}
--- a/Backend/models/user.go
+++ b/Backend/models/user.go
@@ -0,0 +1,231 @@
+package models
+
+import (
+	"arbeitszeitmessung/helper"
+	"context"
+	"database/sql"
+	"errors"
+	"fmt"
+	"log"
+	"time"
+
+	"github.com/alexedwards/scs/v2"
+)
+
+type User struct {
+	CardUID        string  `json:"card_uid"`
+	Name           string  `json:"name"`
+	Vorname        string  `json:"vorname"`
+	PersonalNummer int     `json:"personal_nummer"`
+	Arbeitszeit    float32 `json:"arbeitszeit"`
+}
+
+func (u *User) GetUserFromSession(Session *scs.SessionManager, ctx context.Context) (User, error) {
+	var user User
+	var err error
+	if helper.GetEnv("GO_ENV", "production") == "debug" {
+		user, err = (*User).GetByPersonalNummer(nil, 123)
+	} else {
+		if !Session.Exists(ctx, "user") {
+			log.Println("No user in session storage!")
+			return user, errors.New("No user in session storage!")
+		}
+		user, err = (*User).GetByPersonalNummer(nil, Session.GetInt(ctx, "user"))
+	}
+	if err != nil {
+		log.Println("Cannot get user from session!")
+		return user, err
+	}
+	return user, nil
+}
+
+func (u *User) GetAll() ([]User, error) {
+	qStr, err := DB.Prepare((`SELECT card_uid, vorname, nachname FROM personal_daten;`))
+	var users []User
+	if err != nil {
+		fmt.Printf("Error preparing query statement %v\n", err)
+		return users, err
+	}
+	defer qStr.Close()
+	rows, err := qStr.Query()
+	if err != nil {
+		return users, err
+	}
+	defer rows.Close()
+	for rows.Next() {
+		var user User
+		if err := rows.Scan(&user.CardUID, &user.Vorname, &user.Name); err != nil {
+			return users, nil
+		}
+		users = append(users, user)
+	}
+	if err = rows.Err(); err != nil {
+		return users, nil
+	}
+	return users, nil
+}
+
+// Returns true if there is a booking 1 for today -> meaning the user is at work
+// Returns false if there is no booking today or the user is already booked out of the system
+func (u *User) CheckAnwesenheit() bool {
+	qStr, err := DB.Prepare((`SELECT check_in_out FROM anwesenheit WHERE card_uid = $1 AND "timestamp" >= now()::date + interval '1h' ORDER BY "timestamp" DESC`))
+	if err != nil {
+		fmt.Printf("Error preparing query statement %v\n", err)
+		return false
+	}
+	defer qStr.Close()
+	var check_in_out int
+	err = qStr.QueryRow(u.CardUID).Scan(&check_in_out)
+	if err != nil {
+		return false
+	}
+	return check_in_out == 1
+}
+
+// Creates a new booking for the user -> check_in_out will be 255 for automatic check out
+func (u *User) Logout() error {
+	booking := (*Booking).New(nil, u.CardUID, 0, 255)
+	err := booking.Insert()
+	if err != nil {
+		fmt.Printf("Error inserting booking %v\n", err)
+		return err
+	}
+	return nil
+}
+
+func (u *User) GetByPersonalNummer(personalNummer int) (User, error) {
+	var user User
+
+	qStr, err := DB.Prepare((`SELECT personal_nummer, card_uid, vorname, nachname, arbeitszeit_per_tag FROM personal_daten WHERE personal_nummer = $1;`))
+	if err != nil {
+		return user, err
+	}
+	err = qStr.QueryRow(personalNummer).Scan(&user.PersonalNummer, &user.CardUID, &user.Vorname, &user.Name, &user.Arbeitszeit)
+
+	if err != nil {
+		return user, err
+	}
+	return user, nil
+}
+
+func (u *User) Login(password string) bool {
+	var loginSuccess bool
+	qStr, err := DB.Prepare((`SELECT (pass_hash = crypt($2, pass_hash)) AS pass_hash FROM user_password WHERE personal_nummer = $1;`))
+	if err != nil {
+		log.Println("Error preparing db statement", err)
+		return false
+	}
+	defer qStr.Close()
+	err = qStr.QueryRow(u.PersonalNummer, password).Scan(&loginSuccess)
+	if err != nil {
+		log.Println("Error queriing db", err)
+		return false
+	}
+	return loginSuccess
+}
+
+// checks if old password matches and changes to new password
+//
+// returns auth(bool), error
+func (u *User) ChangePass(password, newPassword string) (bool, error) {
+	if !u.Login(password) {
+		return false, nil
+	}
+	qStr, err := DB.Prepare((`UPDATE user_password SET pass_hash = crypt($2, gen_salt('bf')) WHERE personal_nummer = $1;`))
+	if err != nil {
+		return false, err
+	}
+	_, err = qStr.Exec(u.PersonalNummer, newPassword)
+	if err != nil {
+		return false, err
+	}
+	return true, nil
+}
+
+func (u *User) GetTeamMembers() ([]User, error) {
+	var teamMembers []User
+	qStr, err := DB.Prepare(`SELECT personal_nummer, card_uid, vorname, nachname, arbeitszeit_per_tag FROM personal_daten WHERE vorgesetzter_pers_nr = $1`)
+	if err != nil {
+		return teamMembers, err
+	}
+	defer qStr.Close()
+	rows, err := qStr.Query(u.PersonalNummer)
+	if err != nil {
+		log.Println("Error getting rows!")
+		return teamMembers, err
+	}
+	defer rows.Close()
+	for rows.Next() {
+		user, err := parseUser(rows)
+		if err != nil {
+			log.Println("Error parsing user!")
+			return teamMembers, err
+		}
+		teamMembers = append(teamMembers, user)
+	}
+
+	return teamMembers, nil
+}
+
+func (u *User) GetWeek(tsFrom time.Time) WorkWeek {
+	var bookings []WorkDay
+	weekStart := tsFrom.AddDate(0, 0, -1*int(tsFrom.Local().Weekday())-1)
+	bookings, err := (*Booking).GetBookingsGrouped(nil, u.CardUID, weekStart, time.Now())
+	if err != nil {
+		log.Println("Error fetching bookings!")
+		return WorkWeek{WorkDays: bookings}
+	}
+	return WorkWeek{WorkDays: bookings}
+}
+
+// gets the first week, that needs to be submitted
+func (u *User) GetNextWeek() WorkWeek {
+	var week WorkWeek
+	return week
+
+}
+
+func parseUser(rows *sql.Rows) (User, error) {
+	var user User
+	if err := rows.Scan(&user.PersonalNummer, &user.CardUID, &user.Vorname, &user.Name, &user.Arbeitszeit); err != nil {
+		log.Println("Error scanning row!", err)
+		return user, err
+	}
+	return user, nil
+}
+
+// returns the start of the week, the last submission was made, submission == first booking or last send booking_report to team leader
+func (u *User) GetLastSubmission() time.Time {
+	var lastSub time.Time
+	qStr, err := DB.Prepare(`
+	SELECT COALESCE(
+	    (SELECT woche_start + INTERVAL '1 week' FROM wochen_report WHERE personal_nummer = $1 ORDER BY woche_start DESC LIMIT 1),
+	    (SELECT timestamp FROM anwesenheit WHERE card_uid = $2 ORDER BY timestamp LIMIT 1)
+    ) AS letzte_buchung;
+`)
+	if err != nil {
+		log.Println("Error preparing statement!", err)
+		return lastSub
+	}
+	err = qStr.QueryRow(u.PersonalNummer, u.CardUID).Scan(&lastSub)
+	if err != nil {
+		log.Println("Error executing query!", err)
+		return lastSub
+	}
+	log.Println("From DB: ", lastSub)
+	lastSub = getMonday(lastSub)
+	lastSub = lastSub.Round(24 * time.Hour)
+	log.Println("After truncate: ", lastSub)
+	return lastSub
+}
+
+func getMonday(ts time.Time) time.Time {
+	if ts.Weekday() != time.Monday {
+		if ts.Weekday() == time.Sunday {
+			ts = ts.AddDate(0, 0, -6)
+		} else {
+			ts = ts.AddDate(0, 0, -int(ts.Weekday()-1))
+		}
+	}
+	return ts
+}
--- a/Backend/models/workDay.go
+++ b/Backend/models/workDay.go
@@ -0,0 +1,166 @@
+package models
+
+import (
+	"fmt"
+	"log"
+	"time"
+)
+
+type WorkDay struct {
+	Day       time.Time `json:"day"`
+	Bookings  []Booking `json:"bookings"`
+	workTime  time.Duration
+	pauseTime time.Duration
+}
+
+func (d *WorkDay) GetWorkDays(card_uid string, tsFrom, tsTo time.Time) []WorkDay {
+	var workDays []WorkDay
+	var workSec, pauseSec float64
+	qStr, err := DB.Prepare(`
+	WITH ordered_bookings AS (
+    SELECT
+        timestamp::DATE AS work_date,  -- Extract date for grouping
+        timestamp,
+        check_in_out,
+        LAG(timestamp) OVER (
+            PARTITION BY card_uid, timestamp::DATE  -- Reset for each day
+            ORDER BY timestamp
+        ) AS prev_timestamp,
+        LAG(check_in_out) OVER (
+            PARTITION BY card_uid, timestamp::DATE
+            ORDER BY timestamp
+        ) AS prev_check
+    FROM anwesenheit
+    WHERE card_uid = $1  -- Replace with actual card_uid
+    AND timestamp::DATE >= $2  -- Set date range
+    AND timestamp::DATE <= $3
+	)
+	SELECT
+	    work_date,
+
+	    -- Total work time per day
+	    COALESCE(
+	        EXTRACT(EPOCH FROM SUM(
+	            CASE
+	                WHEN prev_check IN (1, 3) AND check_in_out IN (2, 4, 254)
+	                THEN timestamp - prev_timestamp
+	                ELSE INTERVAL '0'
+	            END
+	        )), 0
+	    ) AS total_work,
+
+	    -- Extract total pause time in seconds
+	    COALESCE(
+	        EXTRACT(EPOCH FROM SUM(
+	            CASE
+	                WHEN prev_check IN (2, 4, 254) AND check_in_out IN (1, 3)
+	                THEN timestamp - prev_timestamp
+	                ELSE INTERVAL '0'
+	            END
+	        )), 0
+	    ) AS total_pause
+
+	FROM ordered_bookings
+	GROUP BY work_date
+	ORDER BY work_date;`)
+
+	if err != nil {
+		log.Println("Error preparing SQL statement", err)
+		return workDays
+	}
+
+	defer qStr.Close()
+	rows, err := qStr.Query(card_uid, tsFrom, tsTo)
+	if err != nil {
+		log.Println("Error getting rows!")
+		return workDays
+	}
+	defer rows.Close()
+	for rows.Next() {
+		var workDay WorkDay
+		if err := rows.Scan(&workDay.Day, &workSec, &pauseSec); err != nil {
+			log.Println("Error scanning row!", err)
+			return workDays
+		}
+		workDay.workTime = time.Duration(workSec * float64(time.Second))
+		workDay.pauseTime = time.Duration(pauseSec * float64(time.Second))
+		workDay.calcPauseTime()
+		workDays = append(workDays, workDay)
+	}
+	if err = rows.Err(); err != nil {
+		return workDays
+	}
+	return workDays
+}
+
+func (d *WorkDay) calcPauseTime() {
+	if d.workTime > 6*time.Hour && d.pauseTime < 45*time.Minute {
+		if d.workTime < 9*time.Hour && d.pauseTime < 30*time.Minute {
+			diff := 30*time.Minute - d.pauseTime
+			d.workTime -= diff
+			d.pauseTime += diff
+		} else if d.pauseTime < 45*time.Minute {
+			diff := 45*time.Minute - d.pauseTime
+			d.workTime -= diff
+			d.pauseTime += diff
+		}
+	}
+}
+
+// Gets the duration someone worked that day
+func (d *WorkDay) GetWorkTime() {
+	var workTime, pauseTime time.Duration
+	var lastBooking Booking
+	for _, booking := range d.Bookings {
+		if booking.CheckInOut%2 == 1 {
+			if !lastBooking.Timestamp.IsZero() {
+				pauseTime += booking.Timestamp.Sub(lastBooking.Timestamp)
+			}
+		} else {
+			workTime += booking.Timestamp.Sub(lastBooking.Timestamp)
+		}
+		lastBooking = booking
+	}
+	// checks if booking is today and has no gehen yet, so the time since last kommen booking is added to workTime
+	if d.Day.Day() == time.Now().Day() && len(d.Bookings)%2 == 1 {
+		workTime += time.Since(lastBooking.Timestamp.Local())
+	}
+	d.workTime = workTime
+	d.pauseTime = pauseTime
+
+	d.calcPauseTime()
+}
+
+func formatDuration(d time.Duration) string {
+	hours := int(d.Abs().Hours())
+	minutes := int(d.Abs().Minutes()) % 60
+	switch {
+	case hours > 0:
+		return fmt.Sprintf("%dh %dmin", hours, minutes)
+	case minutes > 0:
+		return fmt.Sprintf("%dmin", minutes)
+	default:
+		return ""
+	}
+}
+
+// Converts duration to string and replaces 0s with in
+//
+// -> output xhxmin
+func (d *WorkDay) GetWorkTimeString() (string, string) {
+	workString := formatDuration(d.workTime)
+	pauseString := formatDuration(d.pauseTime)
+	return workString, pauseString
+}
+
+// returns bool wheter the workday was ended with an automatic logout
+func (d *WorkDay) RequiresAction() bool {
+	return d.Bookings[len(d.Bookings)-1].CheckInOut == 255
+}
+
+// returns a integer percentage of how much day has been worked of
+func (d *WorkDay) GetWorkDayProgress(user User) uint8 {
+	defaultWorkTime := time.Duration(user.Arbeitszeit * float32(time.Hour))
+	progress := (d.workTime.Seconds() / defaultWorkTime.Seconds()) * 100
+	return uint8(progress)
+}
--- a/Backend/models/workWeek.go
+++ b/Backend/models/workWeek.go
@@ -0,0 +1,107 @@
+package models
+
+import (
+	"errors"
+	"log"
+	"time"
+)
+
+type WorkWeek struct {
+	Id        int
+	WorkDays  []WorkDay
+	User      User
+	WeekStart time.Time
+	WorkHours time.Duration
+}
+
+func (w *WorkWeek) GetWeek(user User, tsMonday time.Time, populateDays bool) WorkWeek {
+	var week WorkWeek
+	if populateDays {
+		week.WorkDays = (*WorkDay).GetWorkDays(nil, user.CardUID, tsMonday, tsMonday.Add(7*24*time.Hour))
+		week.WorkHours = aggregateWorkTime(week.WorkDays)
+	}
+	week.User = user
+	week.WeekStart = tsMonday
+	return week
+}
+
+func (w *WorkWeek) GetWorkHourString() string {
+	return formatDuration(w.WorkHours)
+}
+
+func aggregateWorkTime(days []WorkDay) time.Duration {
+	var workTime time.Duration
+	for _, day := range days {
+		workTime += day.workTime
+	}
+	return workTime
+}
+
+func (w *WorkWeek) GetSendWeeks(user User) []WorkWeek {
+	var weeks []WorkWeek
+	qStr, err := DB.Prepare(`SELECT id, woche_start::DATE FROM wochen_report WHERE bestaetigt = FALSE AND personal_nummer = $1;`)
+	if err != nil {
+		log.Println("Error preparing SQL statement", err)
+		return weeks
+	}
+	defer qStr.Close()
+
+	rows, err := qStr.Query(user.PersonalNummer)
+	if err != nil {
+		log.Println("Error querining db!", err)
+		return weeks
+	}
+	defer rows.Close()
+	for rows.Next() {
+		var week WorkWeek
+		week.User = user
+		if err := rows.Scan(&week.Id, &week.WeekStart); err != nil {
+			log.Println("Error scanning row!", err)
+			return weeks
+		}
+		week.WorkDays = (*WorkDay).GetWorkDays(nil, user.CardUID, week.WeekStart, week.WeekStart.Add(7*24*time.Hour))
+		week.WorkHours = aggregateWorkTime(week.WorkDays)
+		weeks = append(weeks, week)
+	}
+	if err = rows.Err(); err != nil {
+		return weeks
+	}
+
+	return weeks
+}
+
+var ErrRunningWeek = errors.New("Week is in running week")
+
+// creates a new entry in the woche_report table with the given workweek
+func (w *WorkWeek) Send() error {
+	if time.Since(w.WeekStart) < 5*24*time.Hour {
+		log.Println("Cannot send week, because it's the running week!")
+		return ErrRunningWeek
+	}
+	qStr, err := DB.Prepare(`INSERT INTO wochen_report (personal_nummer, woche_start) VALUES ($1, $2);`)
+	if err != nil {
+		log.Println("Error preparing SQL statement", err)
+		return err
+	}
+	_, err = qStr.Exec(w.User.PersonalNummer, w.WeekStart)
+	if err != nil {
+		log.Println("Error executing query!", err)
+		return err
+	}
+	return nil
+
+}
+
+func (w *WorkWeek) Accept() error {
+	qStr, err := DB.Prepare(`UPDATE "wochen_report" SET bestaetigt = TRUE WHERE personal_nummer = $1 AND woche_start = $2;`)
+	if err != nil {
+		log.Println("Error preparing SQL statement", err)
+		return err
+	}
+	_, err = qStr.Exec(w.User.PersonalNummer, w.WeekStart)
+	if err != nil {
+		log.Println("Error executing query!", err)
+		return err
+	}
+	return nil
+}
--- a/Backend/src/main.css
+++ b/Backend/src/main.css
@@ -0,0 +1,63 @@
+@import "tailwindcss";
+@source "../templates/*.templ";
+
+@theme {
+    --color-accent-50: #e7fdea;
+    --color-accent-100: #cbfbd1;
+    --color-accent-200: #9cf7a8;
+    --color-accent-300: #68f37a;
+    --color-accent-400: #33ef4d;
+    --color-accent-500: #11db2d;
+    --color-accent-600: #0eaf23;
+    --color-accent-700: #0a851b;
+    --color-accent-800: #075a12;
+    --color-accent-900: #032b09;
+    --color-accent-950: #021805;
+    --color-accent: #0eaf23;
+    --color-text-50: #f7f8f7;
+    --color-text-100: #f2f3f2;
+    --color-text-200: #e2e4e2;
+    --color-text-300: #d2d6d2;
+    --color-text-400: #c2c7c2;
+    --color-text-500: #afb6af;
+    --color-text-600: #97a097;
+    --color-text-700: #7d877d;
+    --color-text-800: #5a625a;
+    --color-text-900: #161816;
+    --color-text-950: #000000;
+}
+
+@layer components {
+    .grid-main {
+        display: grid;
+        grid-template-columns: repeat(6, 1fr);
+        align-items: stretch;
+    }
+
+    .grid-sub {
+        display: grid;
+        grid-template-columns: subgrid;
+        grid-column: 1 / -1;
+        border-color: var(--color-neutral-400);
+        transition: background-color 0.2s ease-in-out;
+    }
+
+    .grid-sub:hover {
+        background-color: var(--color-neutral-200);
+    }
+
+    .grid-cell {
+        padding: calc(var(--spacing) * 2);
+        border-color: var(--color-neutral-400);
+    }
+
+    @media (width >=48rem) {
+        .grid-main {
+            grid-template-columns: repeat(5, 1fr);
+            margin: 0 10%;
+        }
+
+        .grid-sub {
+        }
+    }
+}
--- a/Backend/static/css/styles.css
+++ b/Backend/static/css/styles.css
--- a/Backend/static/script.js
+++ b/Backend/static/script.js
@@ -0,0 +1,12 @@
+function editDay(element, event, formId) {
+  var form = element
+    .closest(".grid-sub")
+    .querySelector(".time-component > form");
+  form.classList.toggle("edit");
+  element.classList.toggle("edit");
+  if (element.classList.contains("edit")) {
+    event.preventDefault();
+  } else {
+    form.submit();
+  }
+}
--- a/Backend/templates/headerComponent.templ
+++ b/Backend/templates/headerComponent.templ
@@ -0,0 +1,9 @@
+package templates
+
+templ headerComponent() {
+	<div class="flex flex-row justify-between md:mx-[10%] py-2">
+		<a href="/time">Zeitverwaltung</a>
+		<a href="/team">Mitarbeiter</a>
+		<a href="/user">Nutzer</a>
+	</div>
+}
--- a/Backend/templates/headerComponent_templ.go
+++ b/Backend/templates/headerComponent_templ.go
@@ -0,0 +1,40 @@
+// Code generated by templ - DO NOT EDIT.
+
+// templ: version: v0.3.833
+package templates
+
+//lint:file-ignore SA4006 This context is only used if a nested component is present.
+
+import "github.com/a-h/templ"
+import templruntime "github.com/a-h/templ/runtime"
+
+func headerComponent() templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var1 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var1 == nil {
+			templ_7745c5c3_Var1 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 1, "<div class=\"flex flex-row justify-between md:mx-[10%] py-2\"><a href=\"/time\">Zeitverwaltung</a> <a href=\"/team\">Mitarbeiter</a> <a href=\"/user\">Nutzer</a></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+var _ = templruntime.GeneratedTemplate
--- a/Backend/templates/pages.templ
+++ b/Backend/templates/pages.templ
@@ -0,0 +1,117 @@
+package templates
+
+import (
+	"arbeitszeitmessung/models"
+	"fmt"
+	"strconv"
+	"time"
+)
+
+templ Base() {
+	<!DOCTYPE html>
+	<head>
+		<title>Arbeitszeit</title>
+		<link rel="stylesheet" href="/static/css/styles.css"/>
+		<meta name="viewport" content="width=device-width, initial-scale=1"/>
+		<script src="/static/script.js" defer></script>
+	</head>
+}
+
+templ TimePage(workDays []models.WorkDay) {
+	@Base()
+	@headerComponent()
+	<div class="grid-main divide-y-1">
+		@inputForm()
+		for _, bookingGroup := range workDays {
+			@dayComponent(bookingGroup)
+		}
+	</div>
+	@LegendComponent()
+}
+
+templ LoginPage(failed bool) {
+	@Base()
+	<div class="w-full h-[100vh] flex flex-col justify-center items-center">
+		<form method="POST" class="w-9/10 md:w-1/2 flex flex-col gap-4 p-2 mb-2">
+			<h1 class="font-bold uppercase text-xl text-center mb-2">Benutzer Anmelden</h1>
+			<input name="personal_nummer" placeholder="Personalnummer" type="text" class="w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500"/>
+			<input name="password" placeholder="Passwort" type="password" class="w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500"/>
+			if failed {
+				<p class="text-red-600 text-sm">Login fehlgeschlagen, bitte erneut versuchen!</p>
+			}
+			<button type="submit" class="cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors  border-neutral-300 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50">Login</button>
+		</form>
+	</div>
+}
+
+templ UserPage(status int) {
+	@Base()
+	@headerComponent()
+	<div class="grid-main divide-y-1">
+		<div class="grid-sub"></div>
+		<form method="POST" class="grid-sub divide-x-1">
+			<h1 class="grid-cell font-bold uppercase text-xl text-center">Passwort ändern</h1>
+			<div class="grid-cell col-span-3 flex flex-col gap-2">
+				<input name="password" placeholder="Aktuelles Passwort" type="password" class="w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500"/>
+				<input name="new_password" placeholder="Neues Passwort" type="password" class="w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500"/>
+				<input name="new_password_repeat" placeholder="Neues Passwort wiederholen" type="password" class="w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500"/>
+				switch  {
+					case status == 401:
+						<p class="text-red-600 text-sm">Aktuelles Passwort nicht korrekt!</p>
+					case status >= 400:
+						<p class="text-red-600 text-sm">Passwortwechsel fehlgeschlagen, bitte erneut versuchen!</p>
+					case status == 200:
+						<p class="text-accent text-sm">Passwortänderung erfolgreich</p>
+				}
+			</div>
+			<div class="grid-cell">
+				<button type="submit" class="w-full cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors  border-neutral-300 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50">Ändern</button>
+			</div>
+		</form>
+	</div>
+}
+
+templ TeamPage(weeks []models.WorkWeek, userWeek models.WorkWeek) {
+	{{
+		year, kw := userWeek.WeekStart.ISOWeek()
+	}}
+	@Base()
+	@headerComponent()
+	<div class="grid-main divide-y-1">
+		<div class="grid-sub divide-x-1 bg-neutral-300">
+			<div class="grid-cell font-bold uppercase">{ fmt.Sprintf("%s %s", userWeek.User.Vorname, userWeek.User.Name) }</div>
+			<div class="grid-cell col-span-3 flex flex-col gap-2">
+				for _, day := range userWeek.WorkDays {
+					@weekDayComponent(userWeek.User, day)
+				}
+			</div>
+			<form class="grid-cell flex flex-col gap-2" method="post">
+				<div>
+					<p class="text-sm"><span class="">Woche:</span> { fmt.Sprintf("%02d-%d", kw, year) }</p>
+					<p class="text-sm">an Vorgesetzten senden</p>
+				</div>
+				<input type="hidden" name="method" value="send"/>
+				<input type="hidden" name="user" value={ strconv.Itoa(userWeek.User.PersonalNummer) }/>
+				<input type="hidden" name="week" value={ userWeek.WeekStart.Format(time.DateOnly) }/>
+				// if failed {
+				// 	<p>Fehlgeschlagen</p>
+				// }
+				<button type="submit" class="w-full cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors  border-neutral-800 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50">Senden</button>
+			</form>
+		</div>
+		for _, week := range weeks {
+			@employeComponent(week)
+		}
+	</div>
+}
+
+templ NavPage() {
+	@Base()
+	<div class="w-full h-[100vh] flex flex-col justify-center items-center">
+		<div class="flex flex-col justify-between w-full md:w-1/2 py-2">
+			<a class="text-xl hover:text-accent transition-colors1" href="/time">Zeitverwaltung</a>
+			<a class="text-xl hover:text-accent transition-colors1" href="/team">Mitarbeiter</a>
+			<a class="text-xl hover:text-accent transition-colors1" href="/user">Nutzer</a>
+		</div>
+	</div>
+}
--- a/Backend/templates/pages_templ.go
+++ b/Backend/templates/pages_templ.go
@@ -0,0 +1,347 @@
+// Code generated by templ - DO NOT EDIT.
+
+// templ: version: v0.3.833
+package templates
+
+//lint:file-ignore SA4006 This context is only used if a nested component is present.
+
+import "github.com/a-h/templ"
+import templruntime "github.com/a-h/templ/runtime"
+
+import (
+	"arbeitszeitmessung/models"
+	"fmt"
+	"strconv"
+	"time"
+)
+
+func Base() templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var1 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var1 == nil {
+			templ_7745c5c3_Var1 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 1, "<!doctype html><head><title>Arbeitszeit</title><link rel=\"stylesheet\" href=\"/static/css/styles.css\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><script src=\"/static/script.js\" defer></script></head>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func TimePage(workDays []models.WorkDay) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var2 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var2 == nil {
+			templ_7745c5c3_Var2 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = Base().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = headerComponent().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 2, "<div class=\"grid-main divide-y-1\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = inputForm().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		for _, bookingGroup := range workDays {
+			templ_7745c5c3_Err = dayComponent(bookingGroup).Render(ctx, templ_7745c5c3_Buffer)
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 3, "</div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = LegendComponent().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func LoginPage(failed bool) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var3 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var3 == nil {
+			templ_7745c5c3_Var3 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = Base().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 4, "<div class=\"w-full h-[100vh] flex flex-col justify-center items-center\"><form method=\"POST\" class=\"w-9/10 md:w-1/2 flex flex-col gap-4 p-2 mb-2\"><h1 class=\"font-bold uppercase text-xl text-center mb-2\">Benutzer Anmelden</h1><input name=\"personal_nummer\" placeholder=\"Personalnummer\" type=\"text\" class=\"w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500\"> <input name=\"password\" placeholder=\"Passwort\" type=\"password\" class=\"w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500\"> ")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		if failed {
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 5, "<p class=\"text-red-600 text-sm\">Login fehlgeschlagen, bitte erneut versuchen!</p>")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 6, "<button type=\"submit\" class=\"cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors  border-neutral-300 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50\">Login</button></form></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func UserPage(status int) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var4 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var4 == nil {
+			templ_7745c5c3_Var4 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = Base().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = headerComponent().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 7, "<div class=\"grid-main divide-y-1\"><div class=\"grid-sub\"></div><form method=\"POST\" class=\"grid-sub divide-x-1\"><h1 class=\"grid-cell font-bold uppercase text-xl text-center\">Passwort ändern</h1><div class=\"grid-cell col-span-3 flex flex-col gap-2\"><input name=\"password\" placeholder=\"Aktuelles Passwort\" type=\"password\" class=\"w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500\"> <input name=\"new_password\" placeholder=\"Neues Passwort\" type=\"password\" class=\"w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500\"> <input name=\"new_password_repeat\" placeholder=\"Neues Passwort wiederholen\" type=\"password\" class=\"w-full placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-300  rounded-md px-3 py-2 transition duration-300 ease focus:outline-none hover:border-neutral-500\"> ")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		switch {
+		case status == 401:
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 8, "<p class=\"text-red-600 text-sm\">Aktuelles Passwort nicht korrekt!</p>")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		case status >= 400:
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 9, "<p class=\"text-red-600 text-sm\">Passwortwechsel fehlgeschlagen, bitte erneut versuchen!</p>")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		case status == 200:
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 10, "<p class=\"text-accent text-sm\">Passwortänderung erfolgreich</p>")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 11, "</div><div class=\"grid-cell\"><button type=\"submit\" class=\"w-full cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors  border-neutral-300 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50\">Ändern</button></div></form></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func TeamPage(weeks []models.WorkWeek, userWeek models.WorkWeek) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var5 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var5 == nil {
+			templ_7745c5c3_Var5 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+
+		year, kw := userWeek.WeekStart.ISOWeek()
+		templ_7745c5c3_Err = Base().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = headerComponent().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 12, "<div class=\"grid-main divide-y-1\"><div class=\"grid-sub divide-x-1 bg-neutral-300\"><div class=\"grid-cell font-bold uppercase\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var6 string
+		templ_7745c5c3_Var6, templ_7745c5c3_Err = templ.JoinStringErrs(fmt.Sprintf("%s %s", userWeek.User.Vorname, userWeek.User.Name))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/pages.templ`, Line: 82, Col: 111}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var6))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 13, "</div><div class=\"grid-cell col-span-3 flex flex-col gap-2\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		for _, day := range userWeek.WorkDays {
+			templ_7745c5c3_Err = weekDayComponent(userWeek.User, day).Render(ctx, templ_7745c5c3_Buffer)
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 14, "</div><form class=\"grid-cell flex flex-col gap-2\" method=\"post\"><div><p class=\"text-sm\"><span class=\"\">Woche:</span> ")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var7 string
+		templ_7745c5c3_Var7, templ_7745c5c3_Err = templ.JoinStringErrs(fmt.Sprintf("%02d-%d", kw, year))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/pages.templ`, Line: 90, Col: 87}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var7))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 15, "</p><p class=\"text-sm\">an Vorgesetzten senden</p></div><input type=\"hidden\" name=\"method\" value=\"send\"> <input type=\"hidden\" name=\"user\" value=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var8 string
+		templ_7745c5c3_Var8, templ_7745c5c3_Err = templ.JoinStringErrs(strconv.Itoa(userWeek.User.PersonalNummer))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/pages.templ`, Line: 94, Col: 87}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var8))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 16, "\"> <input type=\"hidden\" name=\"week\" value=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var9 string
+		templ_7745c5c3_Var9, templ_7745c5c3_Err = templ.JoinStringErrs(userWeek.WeekStart.Format(time.DateOnly))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/pages.templ`, Line: 95, Col: 85}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var9))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 17, "\"><button type=\"submit\" class=\"w-full cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors  border-neutral-800 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50\">Senden</button></form></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		for _, week := range weeks {
+			templ_7745c5c3_Err = employeComponent(week).Render(ctx, templ_7745c5c3_Buffer)
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 18, "</div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func NavPage() templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var10 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var10 == nil {
+			templ_7745c5c3_Var10 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = Base().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 19, "<div class=\"w-full h-[100vh] flex flex-col justify-center items-center\"><div class=\"flex flex-col justify-between w-full md:w-1/2 py-2\"><a class=\"text-xl hover:text-accent transition-colors1\" href=\"/time\">Zeitverwaltung</a> <a class=\"text-xl hover:text-accent transition-colors1\" href=\"/team\">Mitarbeiter</a> <a class=\"text-xl hover:text-accent transition-colors1\" href=\"/user\">Nutzer</a></div></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+var _ = templruntime.GeneratedTemplate
--- a/Backend/templates/teamComponents.templ
+++ b/Backend/templates/teamComponents.templ
@@ -0,0 +1,49 @@
+package templates
+
+import (
+	"arbeitszeitmessung/models"
+	"fmt"
+	"strconv"
+	"time"
+)
+
+templ weekDayComponent(user models.User, day models.WorkDay) {
+	{{ work, pause := day.GetWorkTimeString() }}
+	<div class="flex flex-row gap-2">
+		@timeGaugeComponent(day.GetWorkDayProgress(user), false, false)
+		<div class="flex flex-col">
+			<p class=""><span class="font-bold uppercase hidden md:inline">{ day.Day.Format("Mon") }:</span> { day.Day.Format("02.01.2006") }</p>
+			<div class="flex flex-row gap-2">
+				<span class="text-accent">{ work }</span>
+				<span class="text-neutral-500">{ pause }</span>
+			</div>
+		</div>
+	</div>
+}
+
+templ employeComponent(week models.WorkWeek) {
+	{{
+		year, kw := week.WeekStart.ISOWeek()
+	}}
+	<div class="grid-sub divide-x-1">
+		<div class="grid-cell">
+			<p class="font-bold uppercase">{ week.User.Vorname } { week.User.Name }</p>
+			<p class="text-sm">Arbeitszeit</p>
+			<p class="text-accent">{ week.GetWorkHourString() }</p>
+		</div>
+		<div class="grid-cell col-span-3 flex flex-col gap-2">
+			for _, day := range week.WorkDays {
+				@weekDayComponent(week.User, day)
+			}
+		</div>
+		<form class="grid-cell flex flex-col justify-between gap-2" method="post">
+			<p class="text-sm"><span class="">Woche:</span> { fmt.Sprintf("%02d-%d", kw, year) }</p>
+			<input type="hidden" name="method" value="accept"/>
+			<input type="hidden" name="user" value={ strconv.Itoa(week.User.PersonalNummer) }/>
+			<input type="hidden" name="week" value={ week.WeekStart.Format(time.DateOnly) }/>
+			<button type="submit" class="w-full bg-neutral-100 cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors border-neutral-900 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50">
+				<p class="">Bestätigen</p>
+			</button>
+		</form>
+	</div>
+}
--- a/Backend/templates/teamComponents_templ.go
+++ b/Backend/templates/teamComponents_templ.go
@@ -0,0 +1,227 @@
+// Code generated by templ - DO NOT EDIT.
+
+// templ: version: v0.3.833
+package templates
+
+//lint:file-ignore SA4006 This context is only used if a nested component is present.
+
+import "github.com/a-h/templ"
+import templruntime "github.com/a-h/templ/runtime"
+
+import (
+	"arbeitszeitmessung/models"
+	"fmt"
+	"strconv"
+	"time"
+)
+
+func weekDayComponent(user models.User, day models.WorkDay) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var1 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var1 == nil {
+			templ_7745c5c3_Var1 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		work, pause := day.GetWorkTimeString()
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 1, "<div class=\"flex flex-row gap-2\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = timeGaugeComponent(day.GetWorkDayProgress(user), false, false).Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 2, "<div class=\"flex flex-col\"><p class=\"\"><span class=\"font-bold uppercase hidden md:inline\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var2 string
+		templ_7745c5c3_Var2, templ_7745c5c3_Err = templ.JoinStringErrs(day.Day.Format("Mon"))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 15, Col: 89}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var2))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 3, ":</span> ")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var3 string
+		templ_7745c5c3_Var3, templ_7745c5c3_Err = templ.JoinStringErrs(day.Day.Format("02.01.2006"))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 15, Col: 130}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var3))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 4, "</p><div class=\"flex flex-row gap-2\"><span class=\"text-accent\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var4 string
+		templ_7745c5c3_Var4, templ_7745c5c3_Err = templ.JoinStringErrs(work)
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 17, Col: 36}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var4))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 5, "</span> <span class=\"text-neutral-500\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var5 string
+		templ_7745c5c3_Var5, templ_7745c5c3_Err = templ.JoinStringErrs(pause)
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 18, Col: 42}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var5))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 6, "</span></div></div></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func employeComponent(week models.WorkWeek) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var6 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var6 == nil {
+			templ_7745c5c3_Var6 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+
+		year, kw := week.WeekStart.ISOWeek()
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 7, "<div class=\"grid-sub divide-x-1\"><div class=\"grid-cell\"><p class=\"font-bold uppercase\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var7 string
+		templ_7745c5c3_Var7, templ_7745c5c3_Err = templ.JoinStringErrs(week.User.Vorname)
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 30, Col: 53}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var7))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 8, " ")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var8 string
+		templ_7745c5c3_Var8, templ_7745c5c3_Err = templ.JoinStringErrs(week.User.Name)
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 30, Col: 72}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var8))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 9, "</p><p class=\"text-sm\">Arbeitszeit</p><p class=\"text-accent\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var9 string
+		templ_7745c5c3_Var9, templ_7745c5c3_Err = templ.JoinStringErrs(week.GetWorkHourString())
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 32, Col: 52}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var9))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 10, "</p></div><div class=\"grid-cell col-span-3 flex flex-col gap-2\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		for _, day := range week.WorkDays {
+			templ_7745c5c3_Err = weekDayComponent(week.User, day).Render(ctx, templ_7745c5c3_Buffer)
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 11, "</div><form class=\"grid-cell flex flex-col justify-between gap-2\" method=\"post\"><p class=\"text-sm\"><span class=\"\">Woche:</span> ")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var10 string
+		templ_7745c5c3_Var10, templ_7745c5c3_Err = templ.JoinStringErrs(fmt.Sprintf("%02d-%d", kw, year))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 40, Col: 85}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var10))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 12, "</p><input type=\"hidden\" name=\"method\" value=\"accept\"> <input type=\"hidden\" name=\"user\" value=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var11 string
+		templ_7745c5c3_Var11, templ_7745c5c3_Err = templ.JoinStringErrs(strconv.Itoa(week.User.PersonalNummer))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 42, Col: 82}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var11))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 13, "\"> <input type=\"hidden\" name=\"week\" value=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var12 string
+		templ_7745c5c3_Var12, templ_7745c5c3_Err = templ.JoinStringErrs(week.WeekStart.Format(time.DateOnly))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/teamComponents.templ`, Line: 43, Col: 80}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var12))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 14, "\"> <button type=\"submit\" class=\"w-full bg-neutral-100 cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors border-neutral-900 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50\"><p class=\"\">Bestätigen</p></button></form></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+var _ = templruntime.GeneratedTemplate
--- a/Backend/templates/timeComponents.templ
+++ b/Backend/templates/timeComponents.templ
@@ -0,0 +1,141 @@
+package templates
+
+import (
+	"arbeitszeitmessung/models"
+	"fmt"
+	"net/url"
+	"strconv"
+	"time"
+)
+
+templ inputForm() {
+	{{
+		urlParams := ctx.Value("urlParams").(url.Values)
+		user := ctx.Value("user").(models.User)
+	}}
+	<div class="grid-sub divide-x-1 bg-neutral-300 max-md:flex max-md:flex-col">
+		<div class="grid-cell col-span-2 md:col-span-1 max-md:grid grid-cols-2">
+			<p class="font-bold uppercase">{ user.Vorname + " " + user.Name }</p>
+			<div class="justify-self-end">
+				<p class="text-sm">Überstunden</p>
+				<p class="text-accent">4h 32min</p>
+			</div>
+		</div>
+		<form id="timeRangeForm" method="GET" class="grid-cell flex flex-row col-span-3 md:col-span-3 gap-2 ">
+			@lineComponent()
+			<div class="flex flex-col gap-2 justify-between grow-1">
+				<input type="date" value={ urlParams.Get("time_from") } name="time_from" class="w-full bg-neutral-100 placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-0 rounded-md px-3 py-2 transition duration-300 ease focus:outline-none focus:border-neutral-400 hover:border-neutral-300" placeholder="Zeitraum von..."/>
+				<input type="date" value={ urlParams.Get("time_to") } name="time_to" class="w-full bg-neutral-100 placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-0 rounded-md px-3 py-2 transition duration-300 ease focus:outline-none focus:border-neutral-400 hover:border-neutral-300" placeholder="Zeitraum bis..."/>
+			</div>
+		</form>
+		<div class="grid-cell content-end">
+			<button type="submit" form="timeRangeForm" class="w-full bg-neutral-100 cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors border-neutral-900 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50">
+				<p class="">Anzeigen</p>
+			</button>
+		</div>
+	</div>
+}
+
+templ dayComponent(workDay models.WorkDay) {
+	{{
+		work, pause := workDay.GetWorkTimeString()
+	}}
+	<div class="grid-sub divide-x-1 hover:bg-neutral-200 transition-colors">
+		<div class="grid-cell col-span-2 md:col-span-1 flex flex-row gap-2">
+			@timeGaugeComponent(workDay.GetWorkDayProgress(ctx.Value("user").(models.User)), workDay.Day.Equal(time.Now().Truncate(24*time.Hour)), workDay.RequiresAction())
+			<div>
+				<p class=""><span class="font-bold uppercase hidden md:inline">{ workDay.Day.Format("Mon") }:</span> { workDay.Day.Format("02.01.2006") }</p>
+				<p class=" text-sm mt-1">Arbeitszeit:</p>
+				if (workDay.RequiresAction()) {
+					<p class="text-red-600">Bitte anpassen</p>
+				} else {
+					<p class=" text-accent">{ work }</p>
+				}
+				<p class="text-neutral-500">{ pause }</p>
+			</div>
+		</div>
+		<div class="time-component flex flex-row col-span-3 md:col-span-3 gap-2 w-full grid-cell">
+			@lineComponent()
+			<form id={ "time-" + workDay.Day.Format("2006-01-02") } class="flex flex-col gap-2 justify-between group w-full" method="post">
+				for _, booking := range workDay.Bookings {
+					@bookingComponent(booking)
+				}
+			</form>
+		</div>
+		<div class="grid-cell">
+			@changeButtonComponent("time-" + workDay.Day.Format("2006-01-02"))
+		</div>
+	</div>
+}
+
+templ changeButtonComponent(id string) {
+	<button type="button" class="cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors border-neutral-900 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50 group" type="button" onclick={ templ.JSFuncCall("editDay", templ.JSExpression("this"), templ.JSExpression("event"), id) }>
+		<p class="hidden md:block group-[.edit]:hidden">Ändern</p>
+		<p class="hidden group-[.edit]:md:block">Submit</p>
+		<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor" class="w-4 h-4 md:hidden">
+			<path d="m11.645 20.91-.007-.003-.022-.012a15.247 15.247 0 0 1-.383-.218 25.18 25.18 0 0 1-4.244-3.17C4.688 15.36 2.25 12.174 2.25 8.25 2.25 5.322 4.714 3 7.688 3A5.5 5.5 0 0 1 12 5.052 5.5 5.5 0 0 1 16.313 3c2.973 0 5.437 2.322 5.437 5.25 0 3.925-2.438 7.111-4.739 9.256a25.175 25.175 0 0 1-4.244 3.17 15.247 15.247 0 0 1-.383.219l-.022.012-.007.004-.003.001a.752.752 0 0 1-.704 0l-.003-.001Z"></path>
+		</svg>
+	</button>
+}
+
+templ timeGaugeComponent(progress uint8, today bool, warning bool) {
+	{{
+		var bgColor string
+		switch {
+		case (warning):
+			bgColor = "bg-red-600"
+			break
+		case (progress > 0 && progress < 90):
+			bgColor = "bg-orange-500"
+			break
+		case (90 <= progress && progress <= 110):
+			bgColor = "bg-accent"
+			break
+		case (progress > 110):
+			bgColor = "bg-purple-600"
+			break
+		default:
+			bgColor = "bg-neutral-400"
+			break
+		}
+	}}
+	if today {
+		<div class="flex-start flex w-2 h-full overflow-hidden rounded-full bg-neutral-300 print:hidden">
+			<div class={ "flex w-full items-center justify-center overflow-hidden  rounded-full", bgColor } style={ fmt.Sprintf("height: %d%%", int(progress)) }></div>
+		</div>
+	} else {
+		<div class={ "w-2 h-full bg-accent rounded-md", bgColor }></div>
+	}
+}
+
+templ lineComponent() {
+	<div class="flex flex-col w-2 py-2 items-center text-accent print:hidden">
+		<svg class="size-2" viewBox="0 0 24 24" fill="currentColor">
+			<polygon points="12,2 22,12 12,22 2,12"></polygon>
+		</svg>
+		<div class="w-[2px] bg-accent flex-grow -my-1"></div>
+		<svg class="size-2" viewBox="0 0 24 24" fill="currentColor">
+			<polygon points="12,2 22,12 12,22 2,12"></polygon>
+		</svg>
+	</div>
+}
+
+templ bookingComponent(booking models.Booking) {
+	<div>
+		<p class="text-neutral-500">
+			<span class="text-neutral-700 group-[.edit]:hidden inline">{ booking.Timestamp.Format("15:04") }</span>
+			<input name={ "booking_" + strconv.Itoa(booking.CounterId) } type="time" value={ booking.Timestamp.Format("15:04") } class="text-neutral-700 group-[.edit]:inline hidden bg-neutral-100 text-sm border border-neutral-200 rounded-md px-3 py-2 transition duration-300 ease focus:outline-none focus:border-neutral-400 hover:border-neutral-300"/>
+			{ booking.GetBookingType() }
+		</p>
+	</div>
+}
+
+templ LegendComponent() {
+	<div class="flex flex-row gap-4 md:mx-[10%] print:hidden">
+		<div class="flex flex-row items-center gap-2"><div class="rounded-full size-4 bg-red-600"></div><span>Fehler</span></div>
+		<div class="flex flex-row items-center gap-2"><div class="rounded-full size-4 bg-orange-500"></div><span>Arbeitszeit unter regulär</span></div>
+		<div class="flex flex-row items-center gap-2"><div class="rounded-full size-4 bg-accent"></div><span>Arbeitszeit vollständig</span></div>
+		<div class="flex flex-row items-center gap-2"><div class="rounded-full size-4 bg-purple-600"></div><span>Überstunden</span></div>
+		<div class="flex flex-row items-center gap-2"><div class="rounded-full size-4 bg-neutral-400"></div><span>Keine Buchungen</span></div>
+	</div>
+}
--- a/Backend/templates/timeComponents_templ.go
+++ b/Backend/templates/timeComponents_templ.go
@@ -0,0 +1,532 @@
+// Code generated by templ - DO NOT EDIT.
+
+// templ: version: v0.3.833
+package templates
+
+//lint:file-ignore SA4006 This context is only used if a nested component is present.
+
+import "github.com/a-h/templ"
+import templruntime "github.com/a-h/templ/runtime"
+
+import (
+	"arbeitszeitmessung/models"
+	"fmt"
+	"net/url"
+	"strconv"
+	"time"
+)
+
+func inputForm() templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var1 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var1 == nil {
+			templ_7745c5c3_Var1 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+
+		urlParams := ctx.Value("urlParams").(url.Values)
+		user := ctx.Value("user").(models.User)
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 1, "<div class=\"grid-sub divide-x-1 bg-neutral-300 max-md:flex max-md:flex-col\"><div class=\"grid-cell col-span-2 md:col-span-1 max-md:grid grid-cols-2\"><p class=\"font-bold uppercase\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var2 string
+		templ_7745c5c3_Var2, templ_7745c5c3_Err = templ.JoinStringErrs(user.Vorname + " " + user.Name)
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 18, Col: 66}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var2))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 2, "</p><div class=\"justify-self-end\"><p class=\"text-sm\">Überstunden</p><p class=\"text-accent\">4h 32min</p></div></div><form id=\"timeRangeForm\" method=\"GET\" class=\"grid-cell flex flex-row col-span-3 md:col-span-3 gap-2 \">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = lineComponent().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 3, "<div class=\"flex flex-col gap-2 justify-between grow-1\"><input type=\"date\" value=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var3 string
+		templ_7745c5c3_Var3, templ_7745c5c3_Err = templ.JoinStringErrs(urlParams.Get("time_from"))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 27, Col: 57}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var3))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 4, "\" name=\"time_from\" class=\"w-full bg-neutral-100 placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-0 rounded-md px-3 py-2 transition duration-300 ease focus:outline-none focus:border-neutral-400 hover:border-neutral-300\" placeholder=\"Zeitraum von...\"> <input type=\"date\" value=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var4 string
+		templ_7745c5c3_Var4, templ_7745c5c3_Err = templ.JoinStringErrs(urlParams.Get("time_to"))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 28, Col: 55}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var4))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 5, "\" name=\"time_to\" class=\"w-full bg-neutral-100 placeholder:text-neutral-400 text-neutral-700 text-sm border border-neutral-0 rounded-md px-3 py-2 transition duration-300 ease focus:outline-none focus:border-neutral-400 hover:border-neutral-300\" placeholder=\"Zeitraum bis...\"></div></form><div class=\"grid-cell content-end\"><button type=\"submit\" form=\"timeRangeForm\" class=\"w-full bg-neutral-100 cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors border-neutral-900 focus:bg-neutral-700 active:bg-neutral-700 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50\"><p class=\"\">Anzeigen</p></button></div></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func dayComponent(workDay models.WorkDay) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var5 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var5 == nil {
+			templ_7745c5c3_Var5 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+
+		work, pause := workDay.GetWorkTimeString()
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 6, "<div class=\"grid-sub divide-x-1 hover:bg-neutral-200 transition-colors\"><div class=\"grid-cell col-span-2 md:col-span-1 flex flex-row gap-2\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = timeGaugeComponent(workDay.GetWorkDayProgress(ctx.Value("user").(models.User)), workDay.Day.Equal(time.Now().Truncate(24*time.Hour)), workDay.RequiresAction()).Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 7, "<div><p class=\"\"><span class=\"font-bold uppercase hidden md:inline\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var6 string
+		templ_7745c5c3_Var6, templ_7745c5c3_Err = templ.JoinStringErrs(workDay.Day.Format("Mon"))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 47, Col: 94}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var6))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 8, ":</span> ")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var7 string
+		templ_7745c5c3_Var7, templ_7745c5c3_Err = templ.JoinStringErrs(workDay.Day.Format("02.01.2006"))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 47, Col: 139}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var7))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 9, "</p><p class=\" text-sm mt-1\">Arbeitszeit:</p>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		if workDay.RequiresAction() {
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 10, "<p class=\"text-red-600\">Bitte anpassen</p>")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		} else {
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 11, "<p class=\" text-accent\">")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			var templ_7745c5c3_Var8 string
+			templ_7745c5c3_Var8, templ_7745c5c3_Err = templ.JoinStringErrs(work)
+			if templ_7745c5c3_Err != nil {
+				return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 52, Col: 35}
+			}
+			_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var8))
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 12, "</p>")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 13, "<p class=\"text-neutral-500\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var9 string
+		templ_7745c5c3_Var9, templ_7745c5c3_Err = templ.JoinStringErrs(pause)
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 54, Col: 39}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var9))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 14, "</p></div></div><div class=\"time-component flex flex-row col-span-3 md:col-span-3 gap-2 w-full grid-cell\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = lineComponent().Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 15, "<form id=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var10 string
+		templ_7745c5c3_Var10, templ_7745c5c3_Err = templ.JoinStringErrs("time-" + workDay.Day.Format("2006-01-02"))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 59, Col: 56}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var10))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 16, "\" class=\"flex flex-col gap-2 justify-between group w-full\" method=\"post\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		for _, booking := range workDay.Bookings {
+			templ_7745c5c3_Err = bookingComponent(booking).Render(ctx, templ_7745c5c3_Buffer)
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 17, "</form></div><div class=\"grid-cell\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = changeButtonComponent("time-"+workDay.Day.Format("2006-01-02")).Render(ctx, templ_7745c5c3_Buffer)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 18, "</div></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func changeButtonComponent(id string) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var11 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var11 == nil {
+			templ_7745c5c3_Var11 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = templ.RenderScriptItems(ctx, templ_7745c5c3_Buffer, templ.JSFuncCall("editDay", templ.JSExpression("this"), templ.JSExpression("event"), id))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 19, "<button type=\"button\" class=\"cursor-pointer rounded-md text-neutral-800 p-2 md:px-4 border text-center text-sm hover:text-white transition-colors border-neutral-900 hover:bg-neutral-700 disabled:pointer-events-none disabled:opacity-50 group\" type=\"button\" onclick=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var12 templ.ComponentScript = templ.JSFuncCall("editDay", templ.JSExpression("this"), templ.JSExpression("event"), id)
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ_7745c5c3_Var12.Call)
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 20, "\"><p class=\"hidden md:block group-[.edit]:hidden\">Ändern</p><p class=\"hidden group-[.edit]:md:block\">Submit</p><svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"currentColor\" class=\"w-4 h-4 md:hidden\"><path d=\"m11.645 20.91-.007-.003-.022-.012a15.247 15.247 0 0 1-.383-.218 25.18 25.18 0 0 1-4.244-3.17C4.688 15.36 2.25 12.174 2.25 8.25 2.25 5.322 4.714 3 7.688 3A5.5 5.5 0 0 1 12 5.052 5.5 5.5 0 0 1 16.313 3c2.973 0 5.437 2.322 5.437 5.25 0 3.925-2.438 7.111-4.739 9.256a25.175 25.175 0 0 1-4.244 3.17 15.247 15.247 0 0 1-.383.219l-.022.012-.007.004-.003.001a.752.752 0 0 1-.704 0l-.003-.001Z\"></path></svg></button>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func timeGaugeComponent(progress uint8, today bool, warning bool) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var13 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var13 == nil {
+			templ_7745c5c3_Var13 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+
+		var bgColor string
+		switch {
+		case (warning):
+			bgColor = "bg-red-600"
+			break
+		case (progress > 0 && progress < 90):
+			bgColor = "bg-orange-500"
+			break
+		case (90 <= progress && progress <= 110):
+			bgColor = "bg-accent"
+			break
+		case (progress > 110):
+			bgColor = "bg-purple-600"
+			break
+		default:
+			bgColor = "bg-neutral-400"
+			break
+		}
+		if today {
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 21, "<div class=\"flex-start flex w-2 h-full overflow-hidden rounded-full bg-neutral-300 print:hidden\">")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			var templ_7745c5c3_Var14 = []any{"flex w-full items-center justify-center overflow-hidden  rounded-full", bgColor}
+			templ_7745c5c3_Err = templ.RenderCSSItems(ctx, templ_7745c5c3_Buffer, templ_7745c5c3_Var14...)
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 22, "<div class=\"")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			var templ_7745c5c3_Var15 string
+			templ_7745c5c3_Var15, templ_7745c5c3_Err = templ.JoinStringErrs(templ.CSSClasses(templ_7745c5c3_Var14).String())
+			if templ_7745c5c3_Err != nil {
+				return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 1, Col: 0}
+			}
+			_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var15))
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 23, "\" style=\"")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			var templ_7745c5c3_Var16 string
+			templ_7745c5c3_Var16, templ_7745c5c3_Err = templruntime.SanitizeStyleAttributeValues(fmt.Sprintf("height: %d%%", int(progress)))
+			if templ_7745c5c3_Err != nil {
+				return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 104, Col: 149}
+			}
+			_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var16))
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 24, "\"></div></div>")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		} else {
+			var templ_7745c5c3_Var17 = []any{"w-2 h-full bg-accent rounded-md", bgColor}
+			templ_7745c5c3_Err = templ.RenderCSSItems(ctx, templ_7745c5c3_Buffer, templ_7745c5c3_Var17...)
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 25, "<div class=\"")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			var templ_7745c5c3_Var18 string
+			templ_7745c5c3_Var18, templ_7745c5c3_Err = templ.JoinStringErrs(templ.CSSClasses(templ_7745c5c3_Var17).String())
+			if templ_7745c5c3_Err != nil {
+				return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 1, Col: 0}
+			}
+			_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var18))
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+			templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 26, "\"></div>")
+			if templ_7745c5c3_Err != nil {
+				return templ_7745c5c3_Err
+			}
+		}
+		return nil
+	})
+}
+
+func lineComponent() templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var19 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var19 == nil {
+			templ_7745c5c3_Var19 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 27, "<div class=\"flex flex-col w-2 py-2 items-center text-accent print:hidden\"><svg class=\"size-2\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><polygon points=\"12,2 22,12 12,22 2,12\"></polygon></svg><div class=\"w-[2px] bg-accent flex-grow -my-1\"></div><svg class=\"size-2\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><polygon points=\"12,2 22,12 12,22 2,12\"></polygon></svg></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func bookingComponent(booking models.Booking) templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var20 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var20 == nil {
+			templ_7745c5c3_Var20 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 28, "<div><p class=\"text-neutral-500\"><span class=\"text-neutral-700 group-[.edit]:hidden inline\">")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var21 string
+		templ_7745c5c3_Var21, templ_7745c5c3_Err = templ.JoinStringErrs(booking.Timestamp.Format("15:04"))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 126, Col: 97}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var21))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 29, "</span> <input name=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var22 string
+		templ_7745c5c3_Var22, templ_7745c5c3_Err = templ.JoinStringErrs("booking_" + strconv.Itoa(booking.CounterId))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 127, Col: 61}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var22))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 30, "\" type=\"time\" value=\"")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var23 string
+		templ_7745c5c3_Var23, templ_7745c5c3_Err = templ.JoinStringErrs(booking.Timestamp.Format("15:04"))
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 127, Col: 117}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var23))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 31, "\" class=\"text-neutral-700 group-[.edit]:inline hidden bg-neutral-100 text-sm border border-neutral-200 rounded-md px-3 py-2 transition duration-300 ease focus:outline-none focus:border-neutral-400 hover:border-neutral-300\"> ")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		var templ_7745c5c3_Var24 string
+		templ_7745c5c3_Var24, templ_7745c5c3_Err = templ.JoinStringErrs(booking.GetBookingType())
+		if templ_7745c5c3_Err != nil {
+			return templ.Error{Err: templ_7745c5c3_Err, FileName: `templates/timeComponents.templ`, Line: 128, Col: 29}
+		}
+		_, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var24))
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 32, "</p></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+func LegendComponent() templ.Component {
+	return templruntime.GeneratedTemplate(func(templ_7745c5c3_Input templruntime.GeneratedComponentInput) (templ_7745c5c3_Err error) {
+		templ_7745c5c3_W, ctx := templ_7745c5c3_Input.Writer, templ_7745c5c3_Input.Context
+		if templ_7745c5c3_CtxErr := ctx.Err(); templ_7745c5c3_CtxErr != nil {
+			return templ_7745c5c3_CtxErr
+		}
+		templ_7745c5c3_Buffer, templ_7745c5c3_IsBuffer := templruntime.GetBuffer(templ_7745c5c3_W)
+		if !templ_7745c5c3_IsBuffer {
+			defer func() {
+				templ_7745c5c3_BufErr := templruntime.ReleaseBuffer(templ_7745c5c3_Buffer)
+				if templ_7745c5c3_Err == nil {
+					templ_7745c5c3_Err = templ_7745c5c3_BufErr
+				}
+			}()
+		}
+		ctx = templ.InitializeContext(ctx)
+		templ_7745c5c3_Var25 := templ.GetChildren(ctx)
+		if templ_7745c5c3_Var25 == nil {
+			templ_7745c5c3_Var25 = templ.NopComponent
+		}
+		ctx = templ.ClearChildren(ctx)
+		templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 33, "<div class=\"flex flex-row gap-4 md:mx-[10%] print:hidden\"><div class=\"flex flex-row items-center gap-2\"><div class=\"rounded-full size-4 bg-red-600\"></div><span>Fehler</span></div><div class=\"flex flex-row items-center gap-2\"><div class=\"rounded-full size-4 bg-orange-500\"></div><span>Arbeitszeit unter regulär</span></div><div class=\"flex flex-row items-center gap-2\"><div class=\"rounded-full size-4 bg-accent\"></div><span>Arbeitszeit vollständig</span></div><div class=\"flex flex-row items-center gap-2\"><div class=\"rounded-full size-4 bg-purple-600\"></div><span>Überstunden</span></div><div class=\"flex flex-row items-center gap-2\"><div class=\"rounded-full size-4 bg-neutral-400\"></div><span>Keine Buchungen</span></div></div>")
+		if templ_7745c5c3_Err != nil {
+			return templ_7745c5c3_Err
+		}
+		return nil
+	})
+}
+
+var _ = templruntime.GeneratedTemplate
--- a/DB/initdb/01_create_tables.sql
+++ b/DB/initdb/01_create_tables.sql
@@ -0,0 +1,84 @@
+-- ----------------------------
+-- Table structure for anwesenheit
+-- ----------------------------
+DROP TABLE IF EXISTS "anwesenheit";
+CREATE TABLE "anwesenheit" (
+    "counter_id" bigserial PRIMARY KEY,
+    "timestamp" timestamptz(6) DEFAULT CURRENT_TIMESTAMP,
+    "card_uid" varchar(255),
+    "check_in_out" int2,
+    "geraet_id" int2
+);
+COMMENT ON COLUMN "anwesenheit"."check_in_out" IS '1=Check In 2=Check Out , 3=Check in Manuell, 4=Check out manuell255=Automatic Check Out';
+COMMENT ON COLUMN "anwesenheit"."geraet_id" IS 'ID des Lesegerätes';
+
+-- ----------------------------
+-- Table structure for personal_daten
+-- ----------------------------
+DROP TABLE IF EXISTS "personal_daten";
+CREATE TABLE "personal_daten" (
+    "personal_nummer" int4 NOT NULL PRIMARY KEY,
+    "aktiv_beschaeftigt" bool,
+    "vorname" varchar(255),
+    "nachname" varchar(255),
+    "geburtsdatum" date,
+    "plz" varchar(255),
+    "adresse" varchar(255),
+    "geschlecht" int2,
+    "card_uid" varchar(255),
+    "hauptbeschaeftigungs_ort" int2,
+    "arbeitszeit_per_tag" float4,
+    "arbeitszeit_min_start" time(6),
+    "arbeitszeit_max_ende" time(6),
+    "vorgesetzter_pers_nr" int4
+);
+COMMENT ON COLUMN "personal_daten"."geschlecht" IS '1==weiblich, 2==maennlich, 3==divers';
+
+DROP TABLE IF EXISTS "user_password";
+CREATE TABLE "user_password" (
+    "personal_nummer" int4 NOT NULL PRIMARY KEY,
+    "pass_hash" TEXT,
+    "zuletzt_geandert" timestamp(6) DEFAULT CURRENT_TIMESTAMP
+);
+
+-- update Funktion für pass_hash
+
+CREATE OR REPLACE FUNCTION update_zuletzt_geandert()
+RETURNS TRIGGER AS $$
+BEGIN
+    -- Nur wenn hash geändert wurde
+    IF NEW.pass_hash IS DISTINCT FROM OLD.pass_hash THEN
+        NEW.zuletzt_geandert = now();
+    END IF;
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER pass_hash_update
+BEFORE UPDATE ON user_password
+FOR EACH ROW
+EXECUTE FUNCTION update_zuletzt_geandert();
+
+-- audittabelle für arbeitsstunden bestätigung
+
+DROP TABLE IF EXISTS "wochen_report";
+CREATE TABLE "wochen_report" (
+    "id" serial PRIMARY KEY,
+    "personal_nummer" int4,
+    "woche_start" date,
+    "bestaetigt" bool DEFAULT FALSE,
+    UNIQUE ("personal_nummer", "woche_start")
+);
+
+-- Adds crypto extension
+
+CREATE EXTENSION IF NOT EXISTS pgcrypto;
+
+
+-- Insert into personal_daten
+
+INSERT INTO "personal_daten" ("personal_nummer", "aktiv_beschaeftigt", "vorname", "nachname", "geburtsdatum", "plz", "adresse", "geschlecht", "card_uid", "hauptbeschaeftigungs_ort", "arbeitszeit_per_tag", "arbeitszeit_min_start", "arbeitszeit_max_ende", "vorgesetzter_pers_nr") VALUES
+(123,	't',	'Max',	'Mustermann',	'2003-02-01',	'08963',	'Altenburger Str. 44A',	1,	'acde-edca',	1,	7.5,	'07:00:00',	'20:00:00',	0);
+
+INSERT INTO "user_password" ("personal_nummer", "pass_hash") VALUES
+(123, crypt('max_pass', gen_salt('bf')));
--- a/DB/initdb/02_create_user.sh
+++ b/DB/initdb/02_create_user.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+set -e  # Exit on error
+
+echo "Creating PostgreSQL user and setting permissions... $POSTGRES_USER for API user $POSTGRES_API_USER"
+
+psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
+    CREATE USER $POSTGRES_API_USER WITH ENCRYPTED PASSWORD '$POSTGRES_API_PASSWORD';
+    GRANT CONNECT ON DATABASE $POSTGRES_DB TO $POSTGRES_API_USER;
+    GRANT USAGE ON SCHEMA public TO $POSTGRES_API_USER;
+    GRANT SELECT, INSERT, UPDATE ON anwesenheit, personal_daten, user_password, wochen_report TO $POSTGRES_API_USER;
+    GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO $POSTGRES_API_USER;
+EOSQL
+
+echo "User creation and permissions setup complete!"
+
+# psql -v ON_ERROR_STOP=1 --username root --dbname arbeitszeitmessung
--- a/Docker/.env
+++ b/Docker/.env
@@ -1,5 +0,0 @@
-POSTGRES_USER=arbeit_zeit
-POSTGRES_PASSWORD=password
-POSTGRES_PATH=./database
-POSTGRES_DB=arbeitszeitmessung
-EXPOSED_PORT=8000
--- a/Docker/.env.example
+++ b/Docker/.env.example
@@ -0,0 +1,10 @@
+POSTGRES_USER=root
+POSTGRES_PASSWORD=very_secure
+POSTGRES_API_USER=api_nuter
+POSTGRES_API_PASSWORD=password
+POSTGRES_PATH=../DB
+POSTGRES_DB=arbeitszeitmessung
+EXPOSED_PORT=8000
+TZ=Europe/Berlin
+PGTZ=Europe/Berlin
+API_TOKEN=dont_access
--- a/Docker/arbeitszeitmessung.json
+++ b/Docker/arbeitszeitmessung.json
@@ -11,7 +11,12 @@
  },
  "servers": [
    {
-      "url": "http://localhost:8000"
+      "url": "http://localhost:8000",
+      "description": "Docker Server"
+    },
+    {
+      "url": "http://localhost:8080",
+      "description": "Local Development"
    }
  ],
  "tags": [
@@ -22,72 +27,44 @@
  ],
  "paths": {
    "/time": {
-      "put": {
-        "tags": [
-          "booking"
-        ],
-        "summary": "Update a existing booking",
-        "description": "Update an existing booking by Id",
-        "operationId": "updateBooking",
-        "parameters": [
-          {
-            "name": "bookingID",
-            "in": "query",
-            "description": "Booking ID to update",
-            "required": true,
-            "schema": {
-              "type": "string"
-            }
-          }
-        ],
-        "requestBody": {
-          "description": "Update an existent booking in the db. Not all values have to be updated",
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/Booking"
-              }
-            }
-          },
-          "required": true
-        },
-        "responses": {
-          "200": {
-            "description": "Booking Updated",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/Booking"
-                }
-              }
-            }
-          },
-          "400": {
-            "description": "Invalid ID supplied"
-          },
-          "500": {
-            "description": "Server Error"
-          }
-        }
-      },
      "get": {
        "tags": [
          "booking"
        ],
-        "summary": "Gets all the bookings limited",
+        "summary": "Gets all the bookings from one card_uid",
        "description": "Returns all the bookings optionally filtered with cardID",
+        "operationId": "getBooking",
        "parameters": [
          {
-            "name": "cardID",
+            "name": "card_uid",
            "in": "query",
            "description": "CardID to filter for",
-            "required": false,
+            "required": true,
            "schema": {
              "type": "string"
            }
+          },
+          {
+            "name": "time_from",
+            "in": "query",
+            "description": "Timestamp since when all bookings are shown (default=1 month ago)",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "example": "2025-02-28"
+            }
+          },
+          {
+            "name": "time_to",
+            "in": "query",
+            "description": "Timestamp till when all bookings are shown (default=today)",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "example": "2025-02-28"
+            }
          }
        ],
-        "operationId": "addPet",
        "responses": {
          "200": {
            "description": "Successful operation",
@@ -96,7 +73,51 @@
                "schema": {
                  "type": "array",
                  "items": {
-                    "$ref": "#/components/schemas/Booking"
+                    "type": "object",
+                    "properties": {
+                      "day": {
+                        "type": "string",
+                        "format": "date"
+                      },
+                      "bookings": {
+                        "type": "array",
+                        "items": {
+                          "type": "object",
+                          "properties": {
+                            "counter_id": {
+                              "type": "integer",
+                              "format": "int64",
+                              "example": 100
+                            },
+                            "card_uid": {
+                              "type": "string",
+                              "example": "test_card"
+                            },
+                            "geraet_id": {
+                              "type": "string",
+                              "example": "test_reader"
+                            },
+                            "check_in_out": {
+                              "type": "integer",
+                              "example": 1,
+                              "enum": [
+                                1,
+                                2,
+                                255
+                              ]
+                            },
+                            "timestamp": {
+                              "type": "string",
+                              "format": "date-time",
+                              "example": "2024-09-05T08:51:12.670Z"
+                            }
+                          },
+                          "xml": {
+                            "name": "booking"
+                          }
+                        }
+                      }
+                    }
                  }
                }
              }
@@ -115,10 +136,18 @@
        ],
        "summary": "Create new Booking",
        "description": "Creates a new booking with the supplied parameters",
-        "operationId": "createBooking",
+        "operationId": "pcreateBooking",
        "parameters": [
          {
-            "name": "cardID",
+            "in": "header",
+            "name": "Authorization",
+            "description": "Predefined API Key to authorize access",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "card_uid",
            "in": "query",
            "description": "id of the RFID card scanned",
            "required": true,
@@ -127,7 +156,7 @@
            }
          },
          {
-            "name": "readerID",
+            "name": "geraet_id",
            "in": "query",
            "description": "id of the RFID reader scanning the card",
            "required": true,
@@ -136,7 +165,7 @@
            }
          },
          {
-            "name": "bookingType",
+            "name": "check_in_out",
            "in": "query",
            "description": "booking Type",
            "required": true,
@@ -156,7 +185,39 @@
            "content": {
              "application/json": {
                "schema": {
-                  "$ref": "#/components/schemas/Booking"
+                  "type": "object",
+                  "properties": {
+                    "counter_id": {
+                      "type": "integer",
+                      "format": "int64",
+                      "example": 100
+                    },
+                    "card_uid": {
+                      "type": "string",
+                      "example": "test_card"
+                    },
+                    "geraet_id": {
+                      "type": "string",
+                      "example": "test_reader"
+                    },
+                    "check_in_out": {
+                      "type": "integer",
+                      "example": 1,
+                      "enum": [
+                        1,
+                        2,
+                        255
+                      ]
+                    },
+                    "timestamp": {
+                      "type": "string",
+                      "format": "date-time",
+                      "example": "2024-09-05T08:51:12.670Z"
+                    }
+                  },
+                  "xml": {
+                    "name": "booking"
+                  }
                }
              }
            }
@@ -165,28 +226,228 @@
            "description": "Same booking type as last booking"
          }
        }
+      },
+      "get": {
+        "tags": [
+          "booking"
+        ],
+        "summary": "Create new Booking",
+        "description": "Creates a new booking with the supplied parameters",
+        "operationId": "gcreateBooking",
+        "parameters": [
+          {
+            "in": "header",
+            "name": "Authorization",
+            "description": "Predefined API Key to authorize access",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "api_key",
+            "description": "Predefined API Key to authorize access",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "card_uid",
+            "in": "query",
+            "description": "id of the RFID card scanned",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "geraet_id",
+            "in": "query",
+            "description": "id of the RFID reader scanning the card",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "check_in_out",
+            "in": "query",
+            "description": "booking Type",
+            "required": true,
+            "schema": {
+              "type": "integer",
+              "enum": [
+                1,
+                2,
+                255
+              ]
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "successfully created booking",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "counter_id": {
+                      "type": "integer",
+                      "format": "int64",
+                      "example": 100
+                    },
+                    "card_uid": {
+                      "type": "string",
+                      "example": "test_card"
+                    },
+                    "geraet_id": {
+                      "type": "string",
+                      "example": "test_reader"
+                    },
+                    "check_in_out": {
+                      "type": "integer",
+                      "example": 1,
+                      "enum": [
+                        1,
+                        2,
+                        255
+                      ]
+                    },
+                    "timestamp": {
+                      "type": "string",
+                      "format": "date-time",
+                      "example": "2024-09-05T08:51:12.670Z"
+                    }
+                  },
+                  "xml": {
+                    "name": "booking"
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "none or wrong api key provided!"
+          },
+          "409": {
+            "description": "Same booking type as last booking"
+          }
+        }
+      }
+    },
+    "/logout": {
+      "get": {
+        "tags": [
+          "booking"
+        ],
+        "summary": "Logs out all logged in users",
+        "description": "With this call all actively logged in users (last booking today has check_in_out=1) will be logged out automaticly (check_in_out=255)",
+        "operationId": "autoLogout",
+        "responses": {
+          "200": {
+            "description": "Succesful",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "card_uid": {
+                        "type": "string",
+                        "example": "test_card"
+                      },
+                      "name": {
+                        "type": "string",
+                        "example": "Mustermann"
+                      },
+                      "vorname": {
+                        "type": "string",
+                        "example": "Max"
+                      },
+                      "hauptbeschäftigungsort": {
+                        "type": "integer",
+                        "format": "int8",
+                        "example": 1
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
      }
    }
  },
  "components": {
    "schemas": {
+      "BookingGrouped": {
+        "type": "object",
+        "properties": {
+          "day": {
+            "type": "string",
+            "format": "date"
+          },
+          "bookings": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "counter_id": {
+                  "type": "integer",
+                  "format": "int64",
+                  "example": 100
+                },
+                "card_uid": {
+                  "type": "string",
+                  "example": "test_card"
+                },
+                "geraet_id": {
+                  "type": "string",
+                  "example": "test_reader"
+                },
+                "check_in_out": {
+                  "type": "integer",
+                  "example": 1,
+                  "enum": [
+                    1,
+                    2,
+                    255
+                  ]
+                },
+                "timestamp": {
+                  "type": "string",
+                  "format": "date-time",
+                  "example": "2024-09-05T08:51:12.670Z"
+                }
+              },
+              "xml": {
+                "name": "booking"
+              }
+            }
+          }
+        }
+      },
      "Booking": {
        "type": "object",
        "properties": {
-          "id": {
+          "counter_id": {
            "type": "integer",
            "format": "int64",
            "example": 100
          },
-          "cardID": {
+          "card_uid": {
            "type": "string",
            "example": "test_card"
          },
-          "readerID": {
+          "geraet_id": {
            "type": "string",
            "example": "test_reader"
          },
-          "bookingType": {
+          "check_in_out": {
            "type": "integer",
            "example": 1,
            "enum": [
@@ -195,7 +456,7 @@
              255
            ]
          },
-          "loggedTime": {
+          "timestamp": {
            "type": "string",
            "format": "date-time",
            "example": "2024-09-05T08:51:12.670Z"
@@ -204,7 +465,29 @@
        "xml": {
          "name": "booking"
        }
+      },
+      "User": {
+        "type": "object",
+        "properties": {
+          "card_uid": {
+            "type": "string",
+            "example": "test_card"
+          },
+          "name": {
+            "type": "string",
+            "example": "Mustermann"
+          },
+          "vorname": {
+            "type": "string",
+            "example": "Max"
+          },
+          "hauptbeschäftigungsort": {
+            "type": "integer",
+            "format": "int8",
+            "example": 1
+          }
+        }
      }
    }
  }
-}
+}
--- a/Docker/arbeitszeitmessung.yaml
+++ b/Docker/arbeitszeitmessung.yaml
@@ -1,73 +1,58 @@
 openapi: 3.0.3
 info:
  title: Arbeitszeitmessung - OpenAPI 3.0
-  description: |-
-    This demos the API for the Arbeitszeitmessung Project 
+  description: "This demos the API for the Arbeitszeitmessung Project "
  version: 0.1.0
 externalDocs:
  description: Git-Repository
  url: https://git.letsstein.de/tom/arbeitszeitmessung
 servers:
  - url: http://localhost:8000
+    description: Docker Server
+  - url: http://localhost:8080
+    description: Local Development
 tags:
  - name: booking
    description: all Bookings
 paths:
  /time:
-    put:
-      tags:
-        - booking
-      summary: Update a existing booking
-      description: Update an existing booking by Id
-      operationId: updateBooking
-      parameters:
-        - name: bookingID
-          in: query
-          description: Booking ID to update
-          required: true
-          schema:
-            type: string
-      requestBody:
-        description: Update an existent booking in the db. Not all values have to be updated
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/Booking'
-        required: true
-      responses:
-        '200':
-          description: Booking Updated
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/Booking'          
-        '400':
-          description: Invalid ID supplied
-        '500':
-          description: Server Error
    get:
      tags:
        - booking
-      summary: Gets all the bookings limited
+      summary: Gets all the bookings from one card_uid
      description: Returns all the bookings optionally filtered with cardID
+      operationId: getBooking
      parameters:
-        - name: cardID
+        - name: card_uid
          in: query
          description: CardID to filter for
+          required: true
+          schema:
+            type: string
+        - name: time_from
+          in: query
+          description: Timestamp since when all bookings are shown (default=1 month ago)
          required: false
          schema:
            type: string
-      operationId: addPet
+            example: "2025-02-28"
+        - name: time_to
+          in: query
+          description: Timestamp till when all bookings are shown (default=today)
+          required: false
+          schema:
+            type: string
+            example: "2025-02-28"
      responses:
-        '200':
+        "200":
          description: Successful operation
          content:
            application/json:
              schema:
                type: array
                items:
-                    $ref: '#/components/schemas/Booking'          
-        '400':
+                  $ref: "#/components/schemas/BookingGrouped"
+        "400":
          description: Invalid cardID
  /time/new:
    put:
@@ -75,21 +60,26 @@ paths:
        - booking
      summary: Create new Booking
      description: Creates a new booking with the supplied parameters
-      operationId: createBooking
+      operationId: pcreateBooking
      parameters:
-        - name: cardID
+        - in: header
+          name: Authorization
+          description: Predefined API Key to authorize access
+          schema:
+            type: string
+        - name: card_uid
          in: query
          description: id of the RFID card scanned
          required: true
          schema:
            type: string
-        - name: readerID
+        - name: geraet_id
          in: query
          description: id of the RFID reader scanning the card
          required: true
          schema:
            type: string
-        - name: bookingType
+        - name: check_in_out
          in: query
          description: booking Type
          required: true
@@ -100,39 +90,132 @@ paths:
              - 2
              - 255
      responses:
-        '200':
+        "200":
          description: successfully created booking
          content:
            application/json:
              schema:
-                $ref: '#/components/schemas/Booking'          
-        '409':
+                $ref: "#/components/schemas/Booking"
+        "409":
          description: Same booking type as last booking
+    get:
+      tags:
+        - booking
+      summary: Create new Booking
+      description: Creates a new booking with the supplied parameters
+      operationId: gcreateBooking
+      parameters:
+        - in: header
+          name: Authorization
+          description: Predefined API Key to authorize access
+          schema:
+            type: string
+        - in: query
+          name: api_key
+          description: Predefined API Key to authorize access
+          required: false
+          schema:
+            type: string
+        - name: card_uid
+          in: query
+          description: id of the RFID card scanned
+          required: true
+          schema:
+            type: string
+        - name: geraet_id
+          in: query
+          description: id of the RFID reader scanning the card
+          required: true
+          schema:
+            type: string
+        - name: check_in_out
+          in: query
+          description: booking Type
+          required: true
+          schema:
+            type: integer
+            enum:
+              - 1
+              - 2
+              - 255
+      responses:
+        "200":
+          description: successfully created booking
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/Booking"
+        "401":
+          description: none or wrong api key provided!
+        "409":
+          description: Same booking type as last booking
+  /logout:
+    get:
+      tags:
+        - booking
+      summary: Logs out all logged in users
+      description: With this call all actively logged in users (last booking today has check_in_out=1) will be logged out automaticly (check_in_out=255)
+      operationId: autoLogout
+      responses:
+        "200":
+          description: Succesful
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: "#/components/schemas/User"
 components:
  schemas:
+    BookingGrouped:
+      type: object
+      properties:
+        day:
+          type: string
+          format: date
+        bookings:
+          type: array
+          items:
+            $ref: "#/components/schemas/Booking"
    Booking:
      type: object
      properties:
-        id:
+        counter_id:
          type: integer
          format: int64
          example: 100
-        cardID:
+        card_uid:
          type: string
          example: test_card
-        readerID:
+        geraet_id:
          type: string
          example: test_reader
-        bookingType:
+        check_in_out:
          type: integer
          example: 1
          enum:
            - 1
            - 2
            - 255
-        loggedTime:
+        timestamp:
          type: string
          format: date-time
-          example: 2024-09-05T08:51:12.670827Z
+          example: "2024-09-05T08:51:12.670Z"
      xml:
-        name: booking
+        name: booking
+    User:
+      type: object
+      properties:
+        card_uid:
+          type: string
+          example: test_card
+        name:
+          type: string
+          example: Mustermann
+        vorname:
+          type: string
+          example: Max
+        hauptbeschäftigungsort:
+          type: integer
+          format: int8
+          example: 1
--- a/Docker/docker-compose.dev.yml
+++ b/Docker/docker-compose.dev.yml
@@ -6,12 +6,10 @@ services:
    env_file:
      - .env
    environment:
-      POSTGRES_USER: ${POSTGRES_USER}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
-      POSTGRES_DB: ${POSTGRES_DB}
      PGDATA: /var/lib/postgresql/data/pg_data
    volumes:
      - ${POSTGRES_PATH}:/var/lib/postgresql/data
+      - ${POSTGRES_PATH}/initdb:/docker-entrypoint-initdb.d
    ports:
      - 5432:5432

@@ -22,18 +20,16 @@ services:
      - 8001:8080
  backend:
    build: ../Backend
-    image: git.letsstein.de/tom/arbeitszeit-backend
+    image: git.letsstein.de/tom/arbeitszeit-backend:0.1.1
    env_file:
      - .env
    environment:
      POSTGRES_HOST: db
      POSTGRES_DB: ${POSTGRES_DB}
-      POSTGRES_USER: ${POSTGRES_USER}
-      POSTGRES_PASS: ${POSTGRES_PASSWORD}
      EXPOSED_PORT: ${EXPOSED_PORT}
-      DEBUG: true
+      NO_CORS: true
    ports:
-      - 8000:8080
+      - ${EXPOSED_PORT}:8080
    depends_on:
      - db
  swagger:
--- a/Docker/docker-compose.yml
+++ b/Docker/docker-compose.yml
@@ -12,12 +12,9 @@ services:
      PGDATA: /var/lib/postgresql/data/pg_data
    volumes:
      - ${POSTGRES_PATH}:/var/lib/postgresql/data
-
-  adminer:
-    image: adminer
-    restart: unless-stopped
+      - ${POSTGRES_PATH}/initdb:/docker-entrypoint-initdb.d
    ports:
-      - 8000:8080
+      - 5432:5432

  backend:
    image: git.letsstein.de/tom/arbeitszeit-backend
@@ -26,10 +23,9 @@ services:
    environment:
      POSTGRES_HOST: db
      POSTGRES_DB: ${POSTGRES_DB}
-      POSTGRES_USER: ${POSTGRES_USER}
-      POSTGRES_PASS: ${POSTGRES_PASSWORD}
      EXPOSED_PORT: ${EXPOSED_PORT}
    ports:
      - ${EXPOSED_PORT}:8080
    depends_on:
      - db
+    restart: unless-stopped
--- a/15
+++ b/15
@@ -16,22 +16,9 @@ pipeline {
                }
            }
            steps {
-                sh 'make build_backend'
+                sh 'make backend'
            }

        }
-        stage('Deploying image arbeitszeit-backend') {
-            when {
-                anyOf{
-                    changeset 'Jenkinsfile'
-                    changeset 'Makefile'
-                    changeset 'Backend/**'
-                }
-            }
-            steps {
-                sh 'make push_backend'
-            }
-        }
-
    }
 }
--- a/9
+++ b/9
@@ -36,3 +36,12 @@ push_%:
 full_%:
 	make build_$*
 	make push_$*
+
+generateFrontend:
+	cd Backend && templ generate
+	cd Backend && npx @tailwindcss/cli -i ./src/main.css -o ./static/css/styles.css
+
+
+backend: generateFrontend login_registry
+	docker buildx build --platform linux/amd64,linux/arm64 -t git.letsstein.de/tom/arbeitszeit-backend:latest Backend --push
+	docker buildx build --platform linux/amd64,linux/arm64 -t git.letsstein.de/tom/arbeitszeit-backend:${GIT_COMMIT} Backend --push
--- a/db.sql
+++ b/db.sql
@@ -1,24 +1,148 @@
-- @block create table
-CREATE TABLE zeiten (
-    id SERIAL PRIMARY KEY,
-    logged_time TIMESTAMP DEFAULT NOW(),
-    card_id VARCHAR,
-    reader_id VARCHAR,
-    booking_type INTEGER
+-- @block create table anwesenheit
+CREATE TABLE "public"."anwesenheit" (
+    "counter_id" SERIAL PRIMARY KEY,
+    "timestamp" timestamp(6) DEFAULT CURRENT_TIMESTAMP,
+    "card_uid" varchar(255) COLLATE "pg_catalog"."default",
+    "check_in_out" int2,
+    "geraet_id" int2
 );
-- @block insert data
-INSERT INTO zeiten (card_id, reader_id, booking_type)
-VALUES ('test_card', 'test_reader', '2')
-RETURNING id, logged_time;
+COMMENT ON COLUMN "public"."anwesenheit"."check_in_out" IS '1=Check In 2=Check Out 255=Automatic Check Out';
+COMMENT ON COLUMN "public"."anwesenheit"."geraet_id" IS 'ID des Lesegerätes';
+
+-- @block create table personaldaten
+CREATE TABLE "public"."personal_daten" (
+    "personal_nummer" SERIAL PRIMARY KEY,
+    "akiv_beschaeftig" bool,
+    "vorname" varchar COLLATE "pg_catalog"."default",
+    "nachname" varchar COLLATE "pg_catalog"."default",
+    "geburtsdatum" date,
+    "plz" varchar COLLATE "pg_catalog"."default",
+    "adresse" varchar COLLATE "pg_catalog"."default",
+    "geschlecht" numeric,
+    "card_uid" varchar(255) COLLATE "pg_catalog"."default",
+    "hauptbeschaeftigung_ort" int2
+);
+COMMENT ON COLUMN "public"."personal_daten"."akiv_beschaeftig" IS 'derzeit aktiv beschaeftigt : 1';
+COMMENT ON COLUMN "public"."personal_daten"."geschlecht" IS 'w:1 m:2 div:3 kA:null ';
+COMMENT ON COLUMN "public"."personal_daten"."card_uid" IS 'RFID-Karten-UID';
+COMMENT ON COLUMN "public"."personal_daten"."hauptbeschaeftigung_ort" IS 'Chemnitz:1 Sayda:2';
+
+
+-- @block drop tables
+DROP TABLE IF EXISTS "public"."anwesenheit";
+DROP TABLE IF EXISTS "public"."personal_daten";
+
+
+-- @block insert into personal_daten
+INSERT INTO personal_daten (
+        personal_nummer,
+        akiv_beschaeftig,
+        vorname,
+        nachname,
+        geburtsdatum,
+        plz,
+        adresse,
+        geschlecht,
+        card_uid,
+        hauptbeschaeftigung_ort
+    )
+VALUES (
+        123,
+        true,
+        'Max',
+        'Mustermann',
+        now(),
+        '00815',
+        'Musterstrasse',
+        1,
+        'test_card',
+        '1'
+    );
+
 -- @block select
 SELECT *
-FROM zeiten;
-- @block select last entry from card id
-SELECT *
-FROM "zeiten"
-WHERE "card_id" = 'test_card'
-    AND "logged_time" >= now()::date + interval '1h'
-ORDER BY "logged_time" DESC
-LIMIT 1;
-- @block delete table
-DROP TABLE IF EXISTS zeiten;
+FROM personal_daten;
+
+-- @block work and pause time
+WITH ordered_bookings AS (
+    SELECT
+        timestamp,
+        check_in_out,
+        LAG(timestamp) OVER (PARTITION BY card_uid ORDER BY timestamp) AS prev_timestamp,
+        LAG(check_in_out) OVER (PARTITION BY card_uid ORDER BY timestamp) AS prev_check
+    FROM anwesenheit
+    WHERE card_uid = 'acde-edca'  -- Replace with actual card_uid
+    AND timestamp::DATE = '2025-02-23'  -- Replace with actual date
+)
+SELECT
+    -- Total work time: Duration between check-in (1,3) and check-out (2,4,254)
+    COALESCE(
+        SUM(
+            CASE
+                WHEN prev_check IN (1, 3) AND check_in_out IN (2, 4, 254)
+                THEN timestamp - prev_timestamp
+                ELSE INTERVAL '0'
+            END
+        ), INTERVAL '0'
+    ) AS total_work,
+
+    -- Total pause time: Duration between check-out (2,4,254) and next check-in (1,3)
+    COALESCE(
+        SUM(
+            CASE
+                WHEN prev_check IN (2, 4, 254) AND check_in_out IN (1, 3)
+                THEN timestamp - prev_timestamp
+                ELSE INTERVAL '0'
+            END
+        ), INTERVAL '0'
+    ) AS total_pause
+
+FROM ordered_bookings;
+
+-- @block work and pause time multi day
+WITH ordered_bookings AS (
+    SELECT
+        timestamp::DATE AS work_date,  -- Extract date for grouping
+        timestamp,
+        check_in_out,
+        LAG(timestamp) OVER (
+            PARTITION BY card_uid, timestamp::DATE  -- Reset for each day
+            ORDER BY timestamp
+        ) AS prev_timestamp,
+        LAG(check_in_out) OVER (
+            PARTITION BY card_uid, timestamp::DATE
+            ORDER BY timestamp
+        ) AS prev_check
+    FROM anwesenheit
+    WHERE card_uid = $1  -- Replace with actual card_uid
+    AND timestamp::DATE >= $2  -- Set date range
+    AND timestamp::DATE < $3
+)
+SELECT
+    work_date,
+
+    -- Total work time per day
+    COALESCE(
+        EXTRACT(EPOCH FROM SUM(
+            CASE
+                WHEN prev_check IN (1, 3) AND check_in_out IN (2, 4, 254)
+                THEN timestamp - prev_timestamp
+                ELSE INTERVAL '0'
+            END
+        )), 0
+    ) AS total_work,
+
+    -- Extract total pause time in seconds
+    COALESCE(
+        EXTRACT(EPOCH FROM SUM(
+            CASE
+                WHEN prev_check IN (2, 4, 254) AND check_in_out IN (1, 3)
+                THEN timestamp - prev_timestamp
+                ELSE INTERVAL '0'
+            END
+        )), 0
+    ) AS total_pause
+
+FROM ordered_bookings
+GROUP BY work_date
+ORDER BY work_date;
Author	SHA1	Message	Date
tom	dafcd95428	CHANGE: Minor improvements + updated api docs	2025-02-28 13:13:37 +01:00
tom	23cb312644	CHANGE: added api_key to get params	2025-02-28 13:10:22 +01:00
tom	4dbd1ced0d	CHANGE: added api endpoint for time path	2025-02-28 13:09:15 +01:00
tom	27bac5ff84	CHANGE: css	2025-02-26 15:06:35 +01:00
tom	54104d5a0e	CHANGE: added report section	2025-02-26 15:05:50 +01:00
tom	0ddca8b9ce	CHANGE : backend restart	2025-02-26 11:12:23 +01:00
tom	d68a19790e	CHANGE: added team view, with submitted bookings for team members and send form for own bookings	2025-02-25 15:08:34 +01:00
tom	478fd53d4f	CHANGE: unified user session getter	2025-02-25 15:07:21 +01:00
Tom Tröger	db98eecd87	CHANGE: updated compose file	2025-02-24 23:20:19 +01:00
tom	0bb12318cc	CHANGE: added team page + working on function	2025-02-24 22:11:28 +01:00
tom	5de50b6304	CHANGE: updated makefile to run generate at end	2025-02-24 10:46:56 +01:00
tom	a4e0bf82c9	CHANGE: sorted .templ files + added css classes + added nav header	2025-02-24 10:42:09 +01:00
tom	fdd6416ad9	CHANGE: refractor + refined user routes, added change pw form and function	2025-02-23 15:46:34 +01:00
tom	64468271d1	CHANGE: added pause time in frontend	2025-02-23 10:08:41 +01:00
tom	f73cf0884c	CHANGE: added work and pause time	2025-02-23 09:44:18 +01:00
tom	6a264a20c0	CHANGE: added protection to create booking route	2025-02-22 18:35:04 +01:00
tom	5274a165a3	CHANGE: added default 1 Month Limit for bookings	2025-02-22 13:37:42 +01:00
tom	9987cc226d	CHANGE: added encrypted password auth, TODO: add change and add passwd functions	2025-02-22 13:37:20 +01:00
tom	04f9eb33d4	CHANGE: finalized timezone setup	2025-02-22 13:36:33 +01:00
tom	4a0d3a850a	CHANGE: added timezone to db connection	2025-02-22 01:02:10 +01:00
tom	5f886a46c5	CHANGE: cleanup	2025-02-21 22:12:51 +01:00
tom	01a24506ad	CHANGE: login ui	2025-02-21 22:03:19 +01:00
tom	3be2a47c56	CHANGE: user login style	2025-02-21 20:44:35 +01:00
tom	f6e77bda66	CHANGE: postgres init db	2025-02-21 20:44:20 +01:00
tom	5fb6254c04	CHANGE: Multiarch deployment	2025-02-21 20:43:54 +01:00
tom	f2a5e9874d	CHANGE: updated to use personal number as login	2025-02-21 15:58:34 +01:00
tom	32a4f5277a	CHANGE: added db initialization script	2025-02-21 14:19:44 +01:00
tom	db507259c7	CHANGE: seperated postgres users	2025-02-20 17:18:14 +01:00
tom	831c5d71f0	CHANGE: added env file, checking docker postgres initdb	2025-02-20 14:35:45 +01:00
tom	e2a100122c	CHANGE: removed temp files	2025-02-20 01:57:28 +01:00
tom	8baf2f378a	CHANGE: finalized user auth + added booking edit view	2025-02-20 01:56:21 +01:00
tom	35778e58b3	CHANGE: added Frontend + auth	2025-02-19 21:16:58 +01:00
tom	f2e9eaf092	CHANGE: moved endpoint	2025-02-19 21:16:22 +01:00
tom	63677b90b9	change: refractored and seperated all code into different parts	2025-02-12 14:56:01 +01:00
tom	acf6638cad	CHANGE: rename and removed adminer from production compose file	2024-09-28 22:37:06 +02:00
tom	ea364c8898	CHANGE: added autoLogout to Doc + json in struct	2024-09-25 13:18:54 +02:00
tom	3f5f82a304	CHANGE: added personaldaten db and auto logout function	2024-09-21 14:38:04 +02:00
tom	45a19a2728	CHANGE: opID	2024-09-19 17:09:32 +02:00
tom	8b2e042f62	CHANGE: added get for create booking	2024-09-19 16:26:35 +02:00
tom	0c0034644e	FIX: docker build with database and swagger api	2024-09-10 22:39:53 +02:00
tom	0fac697cda	CHANGE: updated to correct sql database	2024-09-10 22:29:26 +02:00