Use a proper search input parser

Remove modules prefix

.env.dist

@@ -1,10 +1,6 @@
-## can be generated with `openssl rand -base64 32`
-JWT_SECRET=
-#
-## can be generated with `openssl rand -base64 32`
+# mariadb
 MYSQL_ROOT_PASSWORD=
-#
-## can be generated with `openssl rand -base64 32`
 MYSQL_PASSWORD=
-# password should be the same as mysql_password
-PASSWORD=
+# simplenotes
+DB_PASSWORD=
+JWT_SECRET=

.gitignore

@@ -1,24 +1,6 @@
-# Java
-.mtj.tmp/
-*.class
-*.jar
-*.war
-*.ear
-*.nar
-hs_err_pid*
-
-# Maven
-target/
-pom.xml.tag
-pom.xml.releaseBackup
-pom.xml.versionsBackup
-pom.xml.next
-pom.xml.bak
-release.properties
-dependency-reduced-pom.xml
-buildNumber.properties
-.mvn/timing.properties
-.mvn/wrapper/maven-wrapper.jar
+# Gradle
+build/
+.gradle
 
 # IntelliJ
 out/
@@ -28,11 +10,8 @@ out/
 *.ipr
 *.iws
 
-# Vue
-node_modules
-/dist
-
 # Local env files
+.env
 .env.local
 .env.*.local
 
@@ -49,85 +28,13 @@ pids
 *.seed
 *.pid.lock
 
-# Directory for instrumented libs generated by jscoverage/JSCover
-lib-cov
-
-# Coverage directory used by tools like istanbul
-coverage
-
-# nyc test coverage
-.nyc_output
-
-# Grunt intermediate storage (http://gruntjs.com/creating-plugins#storing-task-files)
-.grunt
-
-# Bower dependency directory (https://bower.io/)
-bower_components
-
-# node-waf configuration
-.lock-wscript
-
-# Compiled binary addons (https://nodejs.org/api/addons.html)
-build/Release
-
 # Dependency directories
 node_modules/
 jspm_packages/
 
-# TypeScript v1 declaration files
-typings/
-
-# Optional npm cache directory
-.npm
-
-# Optional eslint cache
-.eslintcache
-
-# Optional REPL history
-.node_repl_history
-
-# Output of 'npm pack'
-*.tgz
-
 # Yarn Integrity file
 .yarn-integrity
 
-# dotenv environment variables file
-.env
-
-# parcel-bundler cache (https://parceljs.org/)
-.cache
-
-# next.js build output
-.next
-
-# nuxt.js build output
-.nuxt
-
-# Nuxt generate
-dist
-
-# vuepress build output
-.vuepress/dist
-
-# Serverless directories
-.serverless
-
-# IDE / Editor
-.idea
-
-# Service worker
-sw.*
-*.private.env.json
-
-# Certificates
-data/
-letsencrypt/
-
-# generated resources
-simplenotes-app/src/main/resources/css-manifest.json
-simplenotes-app/src/main/resources/static/styles*
-
 # h2 db
 *.db
 
@@ -136,3 +43,4 @@ simplenotes-app/src/main/resources/static/styles*
 
 # python
 __pycache__
+

.sdkmanrc

@@ -0,0 +1,5 @@
+# Enable auto-env through the sdkman_auto_env config
+# Add key=value pairs of SDKs to use below
+java=15-open
+gradle=6.8-rc-1
+kotlin=1.4.20

Dockerfile

@@ -1,30 +1,4 @@
-FROM maven:3.6.3-jdk-14 as builder
-
-WORKDIR /tmp
-
-# Cache dependencies
-COPY pom.xml .
-COPY simplenotes-test-resources/pom.xml simplenotes-test-resources/pom.xml
-COPY simplenotes-types/pom.xml simplenotes-types/pom.xml
-COPY simplenotes-config/pom.xml simplenotes-config/pom.xml
-COPY simplenotes-persistance/pom.xml simplenotes-persistance/pom.xml
-COPY simplenotes-search/pom.xml simplenotes-search/pom.xml
-COPY simplenotes-domain/pom.xml simplenotes-domain/pom.xml
-COPY simplenotes-app/pom.xml simplenotes-app/pom.xml
-
-RUN mvn verify clean --fail-never
-
-COPY simplenotes-test-resources/src simplenotes-test-resources/src
-COPY simplenotes-types/src simplenotes-types/src
-COPY simplenotes-config/src simplenotes-config/src
-COPY simplenotes-persistance/src simplenotes-persistance/src
-COPY simplenotes-search/src simplenotes-search/src
-COPY simplenotes-domain/src simplenotes-domain/src
-COPY simplenotes-app/src simplenotes-app/src
-
-RUN mvn -Dstyle.color=always package
-
-FROM openjdk:14-alpine as jdkbuilder
+FROM openjdk:15-alpine as jdkbuilder
 
 RUN apk add --no-cache binutils
 
@@ -46,8 +20,23 @@ RUN chown -R $APPLICATION_USER /app
 
 USER $APPLICATION_USER
 
-COPY --from=builder /tmp/simplenotes-app/target/simplenotes-app-*.jar /app/simplenotes.jar
 COPY --from=jdkbuilder /myjdk /myjdk
+COPY app/build/libs/app-with-dependencies*.jar /app/simplenotes.jar
 WORKDIR /app
 
-CMD ["/myjdk/bin/java", "-server", "-XX:+UnlockExperimentalVMOptions", "-Xms64m", "-Xmx256m", "-XX:+UseG1GC", "-XX:MaxGCPauseMillis=100", "-XX:+UseStringDeduplication", "-jar", "simplenotes.jar"]
+ENV SERVER_HOST 0.0.0.0
+
+CMD [ \
+    "/myjdk/bin/java", \
+    "--add-opens", \
+    "java.base/java.nio=ALL-UNNAMED", \
+    "-server", \
+    "-XX:+UnlockExperimentalVMOptions", \
+    "-Xms64m", \
+    "-Xmx256m", \
+    "-XX:+UseG1GC", \
+    "-XX:MaxGCPauseMillis=100", \
+    "-XX:+UseStringDeduplication", \
+    "-jar", \
+    "simplenotes.jar" \
+]

README.md

@@ -15,5 +15,4 @@
 ## Configuration
 
 The app is configured with environments variables.
-If no match is found within the env, a default value is read from a properties file in /app/src/main/resources/application.properties.
-Don't use the default values for secrets ! Every value inside *.env.dist* should be changed.
+If no match is found within the env, a default value is read from a yaml file in simplenotes-app/src/main/resources/application.yaml.

app/build.gradle.kts

@@ -0,0 +1,36 @@
+import be.simplenotes.Libs
+import be.simplenotes.micronaut
+
+plugins {
+    id("be.simplenotes.base")
+    id("be.simplenotes.kotlinx-serialization")
+    id("be.simplenotes.app-shadow")
+    id("be.simplenotes.docker")
+    id("be.simplenotes.micronaut")
+}
+
+dependencies {
+    implementation(project(":domain"))
+    implementation(project(":views"))
+    implementation(project(":css"))
+
+    implementation(Libs.Http4k.core)
+    implementation(Libs.Jetty.server)
+    implementation(Libs.Jetty.servlet)
+    implementation(Libs.javaxServlet)
+    implementation(Libs.Kotlinx.Serialization.json)
+
+    implementation(Libs.Slf4J.api)
+    runtimeOnly(Libs.Slf4J.logback)
+
+    micronaut()
+
+    testImplementation(Libs.Test.junit)
+    testImplementation(Libs.Test.assertJ)
+    testImplementation(Libs.Http4k.testingHamkrest)
+}
+
+docker {
+    image = "hubv/simplenotes"
+    tag = "latest"
+}

app/resources/logback.xml

@@ -1,6 +1,5 @@
 <configuration>
     <appender name="STDOUT" class="ch.qos.logback.core.ConsoleAppender">
-        <withJansi>true</withJansi>
         <encoder>
             <pattern>%cyan(%d{YYYY-MM-dd HH:mm:ss.SSS}) [%thread] %highlight(%-5level) %green(%logger{36}) - %msg%n
             </pattern>
@@ -13,4 +12,6 @@
     <logger name="me.liuwj.ktorm.database" level="INFO"/>
     <logger name="com.zaxxer.hikari" level="INFO"/>
     <logger name="org.flywaydb.core" level="INFO"/>
+    <logger name="io.micronaut" level="INFO"/>
+    <logger name="io.micronaut.context.lifecycle" level="INFO"/>
 </configuration>

app/src/Server.kt

@@ -2,20 +2,26 @@ package be.simplenotes.app
 
 import org.http4k.server.Http4kServer
 import org.slf4j.LoggerFactory
+import javax.annotation.PostConstruct
+import javax.annotation.PreDestroy
+import javax.inject.Singleton
 import be.simplenotes.config.ServerConfig as SimpleNotesServerConfig
 
+@Singleton
 class Server(
     private val config: SimpleNotesServerConfig,
     private val http4kServer: Http4kServer,
 ) {
     private val logger = LoggerFactory.getLogger(javaClass)
 
+    @PostConstruct
     fun start(): Server {
         http4kServer.start()
-        logger.info("Listening on http://${config.host}:${config.port}")
+        logger.info("Listening on http://${config.host}:${http4kServer.port()}")
         return this
     }
 
+    @PreDestroy
     fun stop() {
         logger.info("Stopping server")
         http4kServer.close()

app/src/SimpleNotes.kt

@@ -0,0 +1,10 @@
+package be.simplenotes.app
+
+import io.micronaut.context.ApplicationContext
+import java.lang.Runtime.getRuntime
+
+fun main() {
+    val ctx = ApplicationContext.run()
+    ctx.createBean(Server::class.java)
+    getRuntime().addShutdownHook(Thread { ctx.stop() })
+}

app/src/api/ApiNoteController.kt

@@ -1,11 +1,10 @@
 package be.simplenotes.app.api
 
 import be.simplenotes.app.extensions.auto
-import be.simplenotes.app.utils.parseSearchTerms
+import be.simplenotes.domain.usecases.NoteService
+import be.simplenotes.types.LoggedInUser
 import be.simplenotes.types.PersistedNote
 import be.simplenotes.types.PersistedNoteMetadata
-import be.simplenotes.domain.security.JwtPayload
-import be.simplenotes.domain.usecases.NoteService
 import kotlinx.serialization.Contextual
 import kotlinx.serialization.Serializable
 import kotlinx.serialization.json.Json
@@ -17,41 +16,48 @@ import org.http4k.core.Status.Companion.OK
 import org.http4k.lens.Path
 import org.http4k.lens.uuid
 import java.util.*
+import javax.inject.Singleton
 
-class ApiNoteController(private val noteService: NoteService, private val json: Json) {
+@Singleton
+class ApiNoteController(
+    json: Json,
+    private val noteService: NoteService,
+) {
 
-    fun createNote(request: Request, jwtPayload: JwtPayload): Response {
+    fun createNote(request: Request, loggedInUser: LoggedInUser): Response {
         val content = noteContentLens(request)
-        return noteService.create(jwtPayload.userId, content).fold(
+        return noteService.create(loggedInUser, content).fold(
             { Response(BAD_REQUEST) },
             { uuidContentLens(UuidContent(it.uuid), Response(OK)) }
         )
     }
 
-    fun notes(request: Request, jwtPayload: JwtPayload): Response {
-        val notes = noteService.paginatedNotes(jwtPayload.userId, page = 1).notes
+    fun notes(@Suppress("UNUSED_PARAMETER") request: Request, loggedInUser: LoggedInUser): Response {
+        val notes = noteService.paginatedNotes(loggedInUser.userId, page = 1).notes
         return persistedNotesMetadataLens(notes, Response(OK))
     }
 
-    fun note(request: Request, jwtPayload: JwtPayload): Response =
-        noteService.find(jwtPayload.userId, uuidLens(request))
+    fun note(request: Request, loggedInUser: LoggedInUser): Response =
+        noteService.find(loggedInUser.userId, uuidLens(request))
             ?.let { persistedNoteLens(it, Response(OK)) }
             ?: Response(NOT_FOUND)
 
-    fun update(request: Request, jwtPayload: JwtPayload): Response {
+    fun update(request: Request, loggedInUser: LoggedInUser): Response {
         val content = noteContentLens(request)
-        return noteService.update(jwtPayload.userId, uuidLens(request), content).fold({
-            Response(BAD_REQUEST)
-        }, {
-            if (it == null) Response(NOT_FOUND)
-            else Response(OK)
-        })
+        return noteService.update(loggedInUser, uuidLens(request), content).fold(
+            {
+                Response(BAD_REQUEST)
+            },
+            {
+                if (it == null) Response(NOT_FOUND)
+                else Response(OK)
+            }
+        )
     }
 
-    fun search(request: Request, jwtPayload: JwtPayload): Response {
+    fun search(request: Request, loggedInUser: LoggedInUser): Response {
         val query = searchContentLens(request)
-        val terms = parseSearchTerms(query)
-        val notes = noteService.search(jwtPayload.userId, terms)
+        val notes = noteService.search(loggedInUser.userId, query)
         return persistedNotesMetadataLens(notes, Response(OK))
     }
 
@@ -61,7 +67,6 @@ class ApiNoteController(private val noteService: NoteService, private val json:
     private val persistedNotesMetadataLens = json.auto<List<PersistedNoteMetadata>>().toLens()
     private val persistedNoteLens = json.auto<PersistedNote>().toLens()
     private val uuidLens = Path.uuid().of("uuid")
-
 }
 
 @Serializable

app/src/api/ApiUserController.kt

@@ -9,8 +9,13 @@ import org.http4k.core.Request
 import org.http4k.core.Response
 import org.http4k.core.Status.Companion.BAD_REQUEST
 import org.http4k.core.Status.Companion.OK
+import javax.inject.Singleton
 
-class ApiUserController(private val userService: UserService, private val json: Json) {
+@Singleton
+class ApiUserController(
+    json: Json,
+    private val userService: UserService,
+) {
     private val tokenLens = json.auto<Token>().toLens()
     private val loginFormLens = json.auto<LoginForm>().toLens()
 

app/src/controllers/BaseController.kt

@@ -0,0 +1,15 @@
+package be.simplenotes.app.controllers
+
+import be.simplenotes.app.extensions.html
+import be.simplenotes.types.LoggedInUser
+import be.simplenotes.views.BaseView
+import org.http4k.core.Request
+import org.http4k.core.Response
+import org.http4k.core.Status.Companion.OK
+import javax.inject.Singleton
+
+@Singleton
+class BaseController(private val view: BaseView) {
+    fun index(@Suppress("UNUSED_PARAMETER") request: Request, loggedInUser: LoggedInUser?) =
+        Response(OK).html(view.renderHome(loggedInUser))
+}

app/src/controllers/HealthCheckController.kt

@@ -0,0 +1,14 @@
+package be.simplenotes.app.controllers
+
+import be.simplenotes.domain.usecases.HealthCheckService
+import org.http4k.core.Request
+import org.http4k.core.Response
+import org.http4k.core.Status.Companion.OK
+import org.http4k.core.Status.Companion.SERVICE_UNAVAILABLE
+import javax.inject.Singleton
+
+@Singleton
+class HealthCheckController(private val healthCheckService: HealthCheckService) {
+    fun healthCheck(@Suppress("UNUSED_PARAMETER") request: Request) =
+        if (healthCheckService.isOk()) Response(OK) else Response(SERVICE_UNAVAILABLE)
+}

app/src/controllers/NoteController.kt

@@ -2,13 +2,12 @@ package be.simplenotes.app.controllers
 
 import be.simplenotes.app.extensions.html
 import be.simplenotes.app.extensions.redirect
-import be.simplenotes.app.utils.parseSearchTerms
-import be.simplenotes.app.views.NoteView
-import be.simplenotes.domain.security.JwtPayload
 import be.simplenotes.domain.usecases.NoteService
 import be.simplenotes.domain.usecases.markdown.InvalidMeta
 import be.simplenotes.domain.usecases.markdown.MissingMeta
 import be.simplenotes.domain.usecases.markdown.ValidationError
+import be.simplenotes.types.LoggedInUser
+import be.simplenotes.views.NoteView
 import org.http4k.core.Method
 import org.http4k.core.Request
 import org.http4k.core.Response
@@ -18,25 +17,35 @@ import org.http4k.core.Status.Companion.OK
 import org.http4k.core.body.form
 import org.http4k.routing.path
 import java.util.*
+import javax.inject.Singleton
 import kotlin.math.abs
 
+@Singleton
 class NoteController(
     private val view: NoteView,
     private val noteService: NoteService,
 ) {
 
-    fun new(request: Request, jwtPayload: JwtPayload): Response {
-        if (request.method == Method.GET) return Response(OK).html(view.noteEditor(jwtPayload))
+    fun new(request: Request, loggedInUser: LoggedInUser): Response {
+        if (request.method == Method.GET) return Response(OK).html(view.noteEditor(loggedInUser))
 
         val markdownForm = request.form("markdown") ?: ""
 
-        return noteService.create(jwtPayload.userId, markdownForm).fold(
+        return noteService.create(loggedInUser, markdownForm).fold(
             {
                 val html = when (it) {
-                    MissingMeta -> view.noteEditor(jwtPayload, error = "Missing note metadata", textarea = markdownForm)
-                    InvalidMeta -> view.noteEditor(jwtPayload, error = "Invalid note metadata", textarea = markdownForm)
+                    MissingMeta -> view.noteEditor(
+                        loggedInUser,
+                        error = "Missing note metadata",
+                        textarea = markdownForm
+                    )
+                    InvalidMeta -> view.noteEditor(
+                        loggedInUser,
+                        error = "Invalid note metadata",
+                        textarea = markdownForm
+                    )
                     is ValidationError -> view.noteEditor(
-                        jwtPayload,
+                        loggedInUser,
                         validationErrors = it.validationErrors,
                         textarea = markdownForm
                     )
@@ -49,66 +58,73 @@ class NoteController(
         )
     }
 
-    fun list(request: Request, jwtPayload: JwtPayload): Response {
+    fun list(request: Request, loggedInUser: LoggedInUser): Response {
         val currentPage = request.query("page")?.toIntOrNull()?.let(::abs) ?: 1
         val tag = request.query("tag")
-        val (pages, notes) = noteService.paginatedNotes(jwtPayload.userId, currentPage, tag = tag)
-        val deletedCount = noteService.countDeleted(jwtPayload.userId)
-        return Response(OK).html(view.notes(jwtPayload, notes, currentPage, pages, deletedCount, tag = tag))
+        val (pages, notes) = noteService.paginatedNotes(loggedInUser.userId, currentPage, tag = tag)
+        val deletedCount = noteService.countDeleted(loggedInUser.userId)
+        return Response(OK).html(view.notes(loggedInUser, notes, currentPage, pages, deletedCount, tag = tag))
     }
 
-    fun search(request: Request, jwtPayload: JwtPayload): Response {
+    fun search(request: Request, loggedInUser: LoggedInUser): Response {
         val query = request.form("search") ?: ""
-        val terms = parseSearchTerms(query)
-        val notes = noteService.search(jwtPayload.userId, terms)
-        val deletedCount = noteService.countDeleted(jwtPayload.userId)
-        return Response(OK).html(view.search(jwtPayload, notes, query, deletedCount))
+        val notes = noteService.search(loggedInUser.userId, query)
+        val deletedCount = noteService.countDeleted(loggedInUser.userId)
+        return Response(OK).html(view.search(loggedInUser, notes, query, deletedCount))
     }
 
-    fun note(request: Request, jwtPayload: JwtPayload): Response {
+    fun note(request: Request, loggedInUser: LoggedInUser): Response {
         val noteUuid = request.uuidPath() ?: return Response(NOT_FOUND)
 
         if (request.method == Method.POST) {
             if (request.form("delete") != null) {
-                return if (noteService.trash(jwtPayload.userId, noteUuid))
+                return if (noteService.trash(loggedInUser.userId, noteUuid))
                     Response.redirect("/notes") // TODO: flash cookie to show success ?
                 else
                     Response(NOT_FOUND) // TODO: show an error
             }
             if (request.form("public") != null) {
-                if (!noteService.makePublic(jwtPayload.userId, noteUuid)) return Response(NOT_FOUND)
+                if (!noteService.makePublic(loggedInUser.userId, noteUuid)) return Response(NOT_FOUND)
             } else if (request.form("private") != null) {
-                if (!noteService.makePrivate(jwtPayload.userId, noteUuid)) return Response(NOT_FOUND)
+                if (!noteService.makePrivate(loggedInUser.userId, noteUuid)) return Response(NOT_FOUND)
             }
         }
 
-        val note = noteService.find(jwtPayload.userId, noteUuid) ?: return Response(NOT_FOUND)
-        return Response(OK).html(view.renderedNote(jwtPayload, note, shared = false))
+        val note = noteService.find(loggedInUser.userId, noteUuid) ?: return Response(NOT_FOUND)
+        return Response(OK).html(view.renderedNote(loggedInUser, note, shared = false))
     }
 
-    fun public(request: Request, jwtPayload: JwtPayload?): Response {
+    fun public(request: Request, loggedInUser: LoggedInUser?): Response {
         val noteUuid = request.uuidPath() ?: return Response(NOT_FOUND)
         val note = noteService.findPublic(noteUuid) ?: return Response(NOT_FOUND)
-        return Response(OK).html(view.renderedNote(jwtPayload, note, shared = true))
+        return Response(OK).html(view.renderedNote(loggedInUser, note, shared = true))
     }
 
-    fun edit(request: Request, jwtPayload: JwtPayload): Response {
+    fun edit(request: Request, loggedInUser: LoggedInUser): Response {
         val noteUuid = request.uuidPath() ?: return Response(NOT_FOUND)
-        val note = noteService.find(jwtPayload.userId, noteUuid) ?: return Response(NOT_FOUND)
+        val note = noteService.find(loggedInUser.userId, noteUuid) ?: return Response(NOT_FOUND)
 
         if (request.method == Method.GET) {
-            return Response(OK).html(view.noteEditor(jwtPayload, textarea = note.markdown))
+            return Response(OK).html(view.noteEditor(loggedInUser, textarea = note.markdown))
         }
 
         val markdownForm = request.form("markdown") ?: ""
 
-        return noteService.update(jwtPayload.userId, note.uuid, markdownForm).fold(
+        return noteService.update(loggedInUser, note.uuid, markdownForm).fold(
             {
                 val html = when (it) {
-                    MissingMeta -> view.noteEditor(jwtPayload, error = "Missing note metadata", textarea = markdownForm)
-                    InvalidMeta -> view.noteEditor(jwtPayload, error = "Invalid note metadata", textarea = markdownForm)
+                    MissingMeta -> view.noteEditor(
+                        loggedInUser,
+                        error = "Missing note metadata",
+                        textarea = markdownForm
+                    )
+                    InvalidMeta -> view.noteEditor(
+                        loggedInUser,
+                        error = "Invalid note metadata",
+                        textarea = markdownForm
+                    )
                     is ValidationError -> view.noteEditor(
-                        jwtPayload,
+                        loggedInUser,
                         validationErrors = it.validationErrors,
                         textarea = markdownForm
                     )
@@ -121,21 +137,21 @@ class NoteController(
         )
     }
 
-    fun trash(request: Request, jwtPayload: JwtPayload): Response {
+    fun trash(request: Request, loggedInUser: LoggedInUser): Response {
         val currentPage = request.query("page")?.toIntOrNull()?.let(::abs) ?: 1
         val tag = request.query("tag")
-        val (pages, notes) = noteService.paginatedNotes(jwtPayload.userId, currentPage, tag = tag, deleted = true)
-        return Response(OK).html(view.trash(jwtPayload, notes, currentPage, pages))
+        val (pages, notes) = noteService.paginatedNotes(loggedInUser.userId, currentPage, tag = tag, deleted = true)
+        return Response(OK).html(view.trash(loggedInUser, notes, currentPage, pages))
     }
 
-    fun deleted(request: Request, jwtPayload: JwtPayload): Response {
+    fun deleted(request: Request, loggedInUser: LoggedInUser): Response {
         val uuid = request.uuidPath() ?: return Response(NOT_FOUND)
         return if (request.form("delete") != null)
-            if (noteService.delete(jwtPayload.userId, uuid))
+            if (noteService.delete(loggedInUser.userId, uuid))
                 Response.redirect("/notes/trash")
             else
                 Response(NOT_FOUND)
-        else if (noteService.restore(jwtPayload.userId, uuid))
+        else if (noteService.restore(loggedInUser.userId, uuid))
             Response.redirect("/notes/$uuid")
         else
             Response(NOT_FOUND)

app/src/controllers/SettingsController.kt

@@ -2,24 +2,26 @@ package be.simplenotes.app.controllers
 
 import be.simplenotes.app.extensions.html
 import be.simplenotes.app.extensions.redirect
-import be.simplenotes.app.views.SettingView
-import be.simplenotes.domain.security.JwtPayload
 import be.simplenotes.domain.usecases.UserService
 import be.simplenotes.domain.usecases.users.delete.DeleteError
 import be.simplenotes.domain.usecases.users.delete.DeleteForm
+import be.simplenotes.types.LoggedInUser
+import be.simplenotes.views.SettingView
 import org.http4k.core.*
 import org.http4k.core.body.form
 import org.http4k.core.cookie.invalidateCookie
+import javax.inject.Singleton
 
+@Singleton
 class SettingsController(
     private val userService: UserService,
     private val settingView: SettingView,
 ) {
-    fun settings(request: Request, jwtPayload: JwtPayload): Response {
+    fun settings(request: Request, loggedInUser: LoggedInUser): Response {
         if (request.method == Method.GET)
-            return Response(Status.OK).html(settingView.settings(jwtPayload))
+            return Response(Status.OK).html(settingView.settings(loggedInUser))
 
-        val deleteForm = request.deleteForm(jwtPayload)
+        val deleteForm = request.deleteForm(loggedInUser)
         val result = userService.delete(deleteForm)
 
         return result.fold(
@@ -28,13 +30,13 @@ class SettingsController(
                     DeleteError.Unregistered -> Response.redirect("/").invalidateCookie("Bearer")
                     DeleteError.WrongPassword -> Response(Status.OK).html(
                         settingView.settings(
-                            jwtPayload,
+                            loggedInUser,
                             error = "Wrong password"
                         )
                     )
                     is DeleteError.InvalidForm -> Response(Status.OK).html(
                         settingView.settings(
-                            jwtPayload,
+                            loggedInUser,
                             validationErrors = it.validationErrors
                         )
                     )
@@ -53,23 +55,26 @@ class SettingsController(
             .header("Content-Type", contentType)
     }
 
-    fun export(request: Request, jwtPayload: JwtPayload): Response {
+    fun export(request: Request, loggedInUser: LoggedInUser): Response {
         val isDownload = request.form("download") != null
 
         return if (isDownload) {
-            val filename = "simplenotes-export-${jwtPayload.username}"
+            val filename = "simplenotes-export-${loggedInUser.username}"
             if (request.form("format") == "zip") {
-                val zip = userService.exportAsZip(jwtPayload.userId)
+                val zip = userService.exportAsZip(loggedInUser.userId)
                 Response(Status.OK)
                     .with(attachment("$filename.zip", "application/zip"))
                     .body(zip)
             } else
                 Response(Status.OK)
                     .with(attachment("$filename.json", "application/json"))
-                    .body(userService.exportAsJson(jwtPayload.userId))
-        } else Response(Status.OK).body(userService.exportAsJson(jwtPayload.userId)).header("Content-Type", "application/json")
+                    .body(userService.exportAsJson(loggedInUser.userId))
+        } else Response(Status.OK).body(userService.exportAsJson(loggedInUser.userId)).header(
+            "Content-Type",
+            "application/json"
+        )
     }
 
-    private fun Request.deleteForm(jwtPayload: JwtPayload) =
-        DeleteForm(jwtPayload.username, form("password"), form("checked") != null)
+    private fun Request.deleteForm(loggedInUser: LoggedInUser) =
+        DeleteForm(loggedInUser.username, form("password"), form("checked") != null)
 }

app/src/controllers/UserController.kt

@@ -3,14 +3,14 @@ package be.simplenotes.app.controllers
 import be.simplenotes.app.extensions.html
 import be.simplenotes.app.extensions.isSecure
 import be.simplenotes.app.extensions.redirect
-import be.simplenotes.app.views.UserView
-import be.simplenotes.domain.security.JwtPayload
+import be.simplenotes.config.JwtConfig
 import be.simplenotes.domain.usecases.UserService
 import be.simplenotes.domain.usecases.users.login.*
 import be.simplenotes.domain.usecases.users.register.InvalidRegisterForm
 import be.simplenotes.domain.usecases.users.register.RegisterForm
 import be.simplenotes.domain.usecases.users.register.UserExists
-import be.simplenotes.config.JwtConfig
+import be.simplenotes.types.LoggedInUser
+import be.simplenotes.views.UserView
 import org.http4k.core.Method.GET
 import org.http4k.core.Request
 import org.http4k.core.Response
@@ -21,15 +21,17 @@ import org.http4k.core.cookie.SameSite
 import org.http4k.core.cookie.cookie
 import org.http4k.core.cookie.invalidateCookie
 import java.util.concurrent.TimeUnit
+import javax.inject.Singleton
 
+@Singleton
 class UserController(
     private val userService: UserService,
     private val userView: UserView,
     private val jwtConfig: JwtConfig,
 ) {
-    fun register(request: Request, jwtPayload: JwtPayload?): Response {
+    fun register(request: Request, loggedInUser: LoggedInUser?): Response {
         if (request.method == GET) return Response(OK).html(
-            userView.register(jwtPayload)
+            userView.register(loggedInUser)
         )
 
         val result = userService.register(request.registerForm())
@@ -38,12 +40,12 @@ class UserController(
             {
                 val html = when (it) {
                     UserExists -> userView.register(
-                        jwtPayload,
+                        loggedInUser,
                         error = "User already exists"
                     )
                     is InvalidRegisterForm ->
                         userView.register(
-                            jwtPayload,
+                            loggedInUser,
                             validationErrors = it.validationErrors
                         )
                 }
@@ -58,9 +60,9 @@ class UserController(
     private fun Request.registerForm() = RegisterForm(form("username"), form("password"))
     private fun Request.loginForm(): LoginForm = registerForm()
 
-    fun login(request: Request, jwtPayload: JwtPayload?): Response {
+    fun login(request: Request, loggedInUser: LoggedInUser?): Response {
         if (request.method == GET) return Response(OK).html(
-            userView.login(jwtPayload)
+            userView.login(loggedInUser)
         )
 
         val result = userService.login(request.loginForm())
@@ -70,17 +72,17 @@ class UserController(
                 val html = when (it) {
                     Unregistered ->
                         userView.login(
-                            jwtPayload,
+                            loggedInUser,
                             error = "User does not exist"
                         )
                     WrongPassword ->
                         userView.login(
-                            jwtPayload,
+                            loggedInUser,
                             error = "Wrong password"
                         )
                     is InvalidLoginForm ->
                         userView.login(
-                            jwtPayload,
+                            loggedInUser,
                             validationErrors = it.validationErrors
                         )
                 }

app/src/extensions/Http4kExtensions.kt

@@ -23,7 +23,8 @@ fun Request.isSecure() = header("X-Forwarded-Proto")?.contains("https") ?: false
 
 val bodyLens = httpBodyRoot(
     listOf(Meta(true, "body", ParamMeta.ObjectParam, "body")),
-    ContentType.APPLICATION_JSON.withNoDirectives(), ContentNegotiation.StrictNoDirective
+    ContentType.APPLICATION_JSON.withNoDirectives(),
+    ContentNegotiation.StrictNoDirective
 ).map(
     { it.payload.asString() },
     { Body(it) }

app/src/filters/ErrorFilter.kt

@@ -1,8 +1,8 @@
 package be.simplenotes.app.filters
 
 import be.simplenotes.app.extensions.html
-import be.simplenotes.app.views.ErrorView
-import be.simplenotes.app.views.ErrorView.Type.*
+import be.simplenotes.views.ErrorView
+import be.simplenotes.views.ErrorView.Type.*
 import org.http4k.core.*
 import org.http4k.core.Status.Companion.INTERNAL_SERVER_ERROR
 import org.http4k.core.Status.Companion.NOT_FOUND
@@ -10,7 +10,9 @@ import org.http4k.core.Status.Companion.NOT_IMPLEMENTED
 import org.http4k.core.Status.Companion.SERVICE_UNAVAILABLE
 import org.slf4j.LoggerFactory
 import java.sql.SQLTransientException
+import javax.inject.Singleton
 
+@Singleton
 class ErrorFilter(private val errorView: ErrorView) : Filter {
 
     private val logger = LoggerFactory.getLogger(javaClass)

app/src/filters/ImmutableFilter.kt

@@ -3,9 +3,13 @@ package be.simplenotes.app.filters
 import org.http4k.core.Filter
 import org.http4k.core.HttpHandler
 import org.http4k.core.Request
+import org.http4k.core.Status.Companion.OK
 
 object ImmutableFilter : Filter {
     override fun invoke(next: HttpHandler) = { request: Request ->
-        next(request).header("Cache-Control", "public, max-age=31536000, immutable")
+        val res = next(request)
+        if (res.status == OK)
+            res.header("Cache-Control", "public, max-age=31536000, immutable")
+        else res
     }
 }

app/src/filters/auth/AuthFilter.kt

@@ -0,0 +1,24 @@
+package be.simplenotes.app.filters.auth
+
+import be.simplenotes.types.LoggedInUser
+import org.http4k.core.Request
+import org.http4k.core.cookie.cookie
+import org.http4k.lens.BiDiLens
+
+typealias OptionalAuthLens = BiDiLens<@JvmSuppressWildcards Request, @JvmSuppressWildcards LoggedInUser?>
+typealias RequiredAuthLens = BiDiLens<@JvmSuppressWildcards Request, @JvmSuppressWildcards LoggedInUser>
+
+enum class JwtSource {
+    Header, Cookie
+}
+
+fun Request.bearerTokenCookie(): String? = cookie("Bearer")
+    ?.value
+    ?.trim()
+
+fun Request.bearerTokenHeader(): String? =
+    header("Authorization")
+        ?.trim()
+        ?.takeIf { it.startsWith("Bearer") }
+        ?.substringAfter("Bearer")
+        ?.trim()

app/src/filters/auth/OptionalAuthFilter.kt

@@ -0,0 +1,23 @@
+package be.simplenotes.app.filters.auth
+
+import be.simplenotes.app.filters.auth.JwtSource.Cookie
+import be.simplenotes.domain.security.SimpleJwt
+import be.simplenotes.types.LoggedInUser
+import org.http4k.core.Filter
+import org.http4k.core.HttpHandler
+import org.http4k.core.with
+
+class OptionalAuthFilter(
+    private val simpleJwt: SimpleJwt<LoggedInUser>,
+    private val lens: OptionalAuthLens,
+    private val source: JwtSource = Cookie,
+) : Filter {
+    override fun invoke(next: HttpHandler): HttpHandler = {
+        val token = when (source) {
+            JwtSource.Header -> it.bearerTokenHeader()
+            Cookie -> it.bearerTokenCookie()
+        }
+
+        next(it.with(lens of token?.let { simpleJwt.extract(it) }))
+    }
+}

app/src/filters/auth/RequiredAuthFilter.kt

@@ -0,0 +1,31 @@
+package be.simplenotes.app.filters.auth
+
+import be.simplenotes.app.extensions.redirect
+import be.simplenotes.domain.security.SimpleJwt
+import be.simplenotes.types.LoggedInUser
+import org.http4k.core.Filter
+import org.http4k.core.HttpHandler
+import org.http4k.core.Response
+import org.http4k.core.Status.Companion.UNAUTHORIZED
+import org.http4k.core.with
+
+class RequiredAuthFilter(
+    private val simpleJwt: SimpleJwt<LoggedInUser>,
+    private val lens: RequiredAuthLens,
+    private val source: JwtSource = JwtSource.Cookie,
+    private val redirect: Boolean = true,
+) : Filter {
+    override fun invoke(next: HttpHandler): HttpHandler = {
+        val token = when (source) {
+            JwtSource.Header -> it.bearerTokenHeader()
+            JwtSource.Cookie -> it.bearerTokenCookie()
+        }
+        val jwtPayload = token?.let { simpleJwt.extract(token) }
+
+        if (jwtPayload != null) next(it.with(lens of jwtPayload))
+        else {
+            if (redirect) Response.redirect("/login")
+            else Response(UNAUTHORIZED)
+        }
+    }
+}

app/src/jetty/Jetty.kt

@@ -11,13 +11,15 @@ import org.http4k.server.ServerConfig
 import org.http4k.servlet.asServlet
 
 class Jetty(private val port: Int, private val server: Server) : ServerConfig {
-    constructor(port: Int = 8000) : this(port, http(port))
-    constructor(port: Int, vararg inConnectors: ConnectorBuilder) : this(port, Server().apply {
-        inConnectors.forEach { addConnector(it(this)) }
-    })
+    constructor(port: Int, vararg inConnectors: ConnectorBuilder) : this(
+        port,
+        Server().apply {
+            inConnectors.forEach { addConnector(it(this)) }
+        }
+    )
 
-    override fun toServer(httpHandler: HttpHandler): Http4kServer {
-        server.insertHandler(httpHandler.toJettyHandler())
+    override fun toServer(http: HttpHandler): Http4kServer {
+        server.insertHandler(http.toJettyHandler())
 
         return object : Http4kServer {
             override fun start(): Http4kServer = apply {
@@ -36,5 +38,3 @@ fun HttpHandler.toJettyHandler() = ServletContextHandler(SESSIONS).apply {
 }
 
 typealias ConnectorBuilder = (Server) -> ServerConnector
-
-fun http(httpPort: Int): ConnectorBuilder = { server: Server -> ServerConnector(server).apply { port = httpPort } }

app/src/modules/AuthModule.kt

@@ -0,0 +1,47 @@
+package be.simplenotes.app.modules
+
+import be.simplenotes.app.filters.auth.*
+import be.simplenotes.domain.security.SimpleJwt
+import be.simplenotes.types.LoggedInUser
+import io.micronaut.context.annotation.Factory
+import io.micronaut.context.annotation.Primary
+import org.http4k.core.RequestContexts
+import org.http4k.lens.RequestContextKey
+import javax.inject.Named
+import javax.inject.Singleton
+
+@Factory
+class AuthModule {
+
+    @Singleton
+    @Named("optional")
+    fun optionalAuthLens(ctx: RequestContexts): OptionalAuthLens = RequestContextKey.optional(ctx)
+
+    @Singleton
+    @Named("required")
+    fun requiredAuthLens(ctx: RequestContexts): RequiredAuthLens = RequestContextKey.required(ctx)
+
+    @Singleton
+    fun optionalAuth(simpleJwt: SimpleJwt<LoggedInUser>, @Named("optional") lens: OptionalAuthLens) =
+        OptionalAuthFilter(simpleJwt, lens)
+
+    @Primary
+    @Singleton
+    fun requiredAuth(simpleJwt: SimpleJwt<LoggedInUser>, @Named("required") lens: RequiredAuthLens) =
+        RequiredAuthFilter(simpleJwt, lens)
+
+    @Singleton
+    @Named("api")
+    internal fun apiAuthFilter(
+        simpleJwt: SimpleJwt<LoggedInUser>,
+        @Named("required") lens: RequiredAuthLens,
+    ) = RequiredAuthFilter(
+        simpleJwt = simpleJwt,
+        lens = lens,
+        source = JwtSource.Header,
+        redirect = false
+    )
+
+    @Singleton
+    fun requestContexts() = RequestContexts()
+}

app/src/modules/JsonModule.kt

@@ -2,21 +2,20 @@ package be.simplenotes.app.modules
 
 import be.simplenotes.app.serialization.LocalDateTimeSerializer
 import be.simplenotes.app.serialization.UuidSerializer
+import io.micronaut.context.annotation.Factory
 import kotlinx.serialization.json.Json
 import kotlinx.serialization.modules.SerializersModule
-import org.koin.dsl.module
 import java.time.LocalDateTime
 import java.util.*
+import javax.inject.Singleton
 
-val jsonModule = module {
-    single {
-        Json {
-            prettyPrint = true
-            serializersModule = get()
-        }
-    }
-    single {
-        SerializersModule {
+@Factory
+class JsonModule {
+
+    @Singleton
+    fun json() = Json {
+        prettyPrint = true
+        serializersModule = SerializersModule {
             contextual(LocalDateTime::class, LocalDateTimeSerializer())
             contextual(UUID::class, UuidSerializer())
         }

app/src/modules/ServerModule.kt

@@ -0,0 +1,38 @@
+package be.simplenotes.app.modules
+
+import be.simplenotes.app.jetty.ConnectorBuilder
+import be.simplenotes.app.jetty.Jetty
+import be.simplenotes.app.routes.Router
+import be.simplenotes.app.utils.StaticFileResolver
+import be.simplenotes.config.ServerConfig
+import io.micronaut.context.annotation.Factory
+import org.eclipse.jetty.server.ServerConnector
+import org.http4k.server.Http4kServer
+import org.http4k.server.asServer
+import javax.inject.Named
+import javax.inject.Singleton
+import org.eclipse.jetty.server.Server as JettyServer
+import org.http4k.server.ServerConfig as Http4kServerConfig
+
+@Factory
+class ServerModule {
+
+    @Singleton
+    @Named("styles")
+    fun styles(resolver: StaticFileResolver) = resolver.resolve("styles.css")!!
+
+    @Singleton
+    fun http4kServer(router: Router, serverConfig: Http4kServerConfig): Http4kServer =
+        router().asServer(serverConfig)
+
+    @Singleton
+    fun http4kServerConfig(config: ServerConfig): Http4kServerConfig {
+        val builder: ConnectorBuilder = { server: JettyServer ->
+            ServerConnector(server).apply {
+                port = config.port
+                host = config.host
+            }
+        }
+        return Jetty(config.port, builder)
+    }
+}

app/src/routes/ApiRoutes.kt

@@ -0,0 +1,47 @@
+package be.simplenotes.app.routes
+
+import be.simplenotes.app.api.ApiNoteController
+import be.simplenotes.app.api.ApiUserController
+import be.simplenotes.app.filters.auth.RequiredAuthFilter
+import be.simplenotes.app.filters.auth.RequiredAuthLens
+import org.http4k.core.Method.*
+import org.http4k.core.Request
+import org.http4k.core.then
+import org.http4k.routing.PathMethod
+import org.http4k.routing.RoutingHttpHandler
+import org.http4k.routing.bind
+import org.http4k.routing.routes
+import java.util.function.Supplier
+import javax.inject.Named
+import javax.inject.Singleton
+
+@Singleton
+class ApiRoutes(
+    private val apiUserController: ApiUserController,
+    private val apiNoteController: ApiNoteController,
+    @Named("api") private val auth: RequiredAuthFilter,
+    @Named("required") private val authLens: RequiredAuthLens,
+) : Supplier<RoutingHttpHandler> {
+    override fun get(): RoutingHttpHandler {
+
+        infix fun PathMethod.to(action: ProtectedHandler) =
+            this to { req: Request -> action(req, authLens(req)) }
+
+        return routes(
+            "/login" bind POST to apiUserController::login,
+
+            with(apiNoteController) {
+                auth.then(
+                    routes(
+                        "/" bind GET to ::notes,
+                        "/" bind POST to ::createNote,
+                        "/search" bind POST to ::search,
+                        "/{uuid}" bind GET to ::note,
+                        "/{uuid}" bind PUT to ::update,
+                    )
+                ).withBasePath("/notes")
+            }
+
+        ).withBasePath("/api")
+    }
+}

app/src/routes/BasicRoutes.kt

@@ -0,0 +1,60 @@
+package be.simplenotes.app.routes
+
+import be.simplenotes.app.controllers.BaseController
+import be.simplenotes.app.controllers.HealthCheckController
+import be.simplenotes.app.controllers.NoteController
+import be.simplenotes.app.controllers.UserController
+import be.simplenotes.app.filters.ImmutableFilter
+import be.simplenotes.app.filters.auth.OptionalAuthFilter
+import be.simplenotes.app.filters.auth.OptionalAuthLens
+import org.http4k.core.ContentType
+import org.http4k.core.Method.GET
+import org.http4k.core.Method.POST
+import org.http4k.core.Request
+import org.http4k.core.then
+import org.http4k.routing.*
+import java.util.function.Supplier
+import javax.inject.Named
+import javax.inject.Singleton
+
+@Singleton
+class BasicRoutes(
+    private val healthCheckController: HealthCheckController,
+    private val baseCtrl: BaseController,
+    private val userCtrl: UserController,
+    private val noteCtrl: NoteController,
+    @Named("optional") private val authLens: OptionalAuthLens,
+    private val auth: OptionalAuthFilter,
+) : Supplier<RoutingHttpHandler> {
+
+    override fun get(): RoutingHttpHandler {
+
+        infix fun PathMethod.to(action: PublicHandler) =
+            this to { req: Request -> action(req, authLens(req)) }
+
+        val staticHandler = ImmutableFilter.then(
+            static(
+                ResourceLoader.Classpath("/static"),
+                "woff2" to ContentType("font/woff2"),
+                "webmanifest" to ContentType("application/manifest+json")
+            )
+        )
+
+        return routes(
+            auth.then(
+                routes(
+                    "/" bind GET to baseCtrl::index,
+                    "/register" bind GET to userCtrl::register,
+                    "/register" bind POST to userCtrl::register,
+                    "/login" bind GET to userCtrl::login,
+                    "/login" bind POST to userCtrl::login,
+                    "/logout" bind POST to userCtrl::logout,
+                    "/notes/public/{uuid}" bind GET to noteCtrl::public,
+                )
+            ),
+
+            "/health" bind GET to healthCheckController::healthCheck,
+            staticHandler
+        )
+    }
+}

app/src/routes/NoteRoutes.kt

@@ -0,0 +1,46 @@
+package be.simplenotes.app.routes
+
+import be.simplenotes.app.controllers.NoteController
+import be.simplenotes.app.filters.auth.RequiredAuthFilter
+import be.simplenotes.app.filters.auth.RequiredAuthLens
+import org.http4k.core.Method.GET
+import org.http4k.core.Method.POST
+import org.http4k.core.Request
+import org.http4k.core.then
+import org.http4k.routing.PathMethod
+import org.http4k.routing.RoutingHttpHandler
+import org.http4k.routing.bind
+import org.http4k.routing.routes
+import java.util.function.Supplier
+import javax.inject.Named
+import javax.inject.Singleton
+
+@Singleton
+class NoteRoutes(
+    private val noteCtrl: NoteController,
+    private val auth: RequiredAuthFilter,
+    @Named("required") private val authLens: RequiredAuthLens,
+) : Supplier<RoutingHttpHandler> {
+    override fun get(): RoutingHttpHandler {
+
+        infix fun PathMethod.to(action: ProtectedHandler) =
+            this to { req: Request -> action(req, authLens(req)) }
+
+        return auth.then(
+            with(noteCtrl) {
+                routes(
+                    "/" bind GET to ::list,
+                    "/" bind POST to ::search,
+                    "/new" bind GET to ::new,
+                    "/new" bind POST to ::new,
+                    "/trash" bind GET to ::trash,
+                    "/{uuid}" bind GET to ::note,
+                    "/{uuid}" bind POST to ::note,
+                    "/{uuid}/edit" bind GET to ::edit,
+                    "/{uuid}/edit" bind POST to ::edit,
+                    "/deleted/{uuid}" bind POST to ::deleted,
+                ).withBasePath("/notes")
+            }
+        )
+    }
+}

app/src/routes/RouteUtils.kt

@@ -0,0 +1,8 @@
+package be.simplenotes.app.routes
+
+import be.simplenotes.types.LoggedInUser
+import org.http4k.core.Request
+import org.http4k.core.Response
+
+internal typealias PublicHandler = (Request, LoggedInUser?) -> Response
+internal typealias ProtectedHandler = (Request, LoggedInUser) -> Response

app/src/routes/Router.kt

@@ -0,0 +1,32 @@
+package be.simplenotes.app.routes
+
+import be.simplenotes.app.filters.ErrorFilter
+import be.simplenotes.app.filters.SecurityFilter
+import org.http4k.core.RequestContexts
+import org.http4k.core.then
+import org.http4k.filter.ResponseFilters.GZip
+import org.http4k.filter.ServerFilters.InitialiseRequestContext
+import org.http4k.routing.RoutingHttpHandler
+import org.http4k.routing.routes
+import java.util.function.Supplier
+import javax.inject.Singleton
+
+@Singleton
+class Router(
+    private val errorFilter: ErrorFilter,
+    private val contexts: RequestContexts,
+    private val subRouters: List<Supplier<RoutingHttpHandler>>,
+) {
+    operator fun invoke(): RoutingHttpHandler {
+
+        val routes = routes(
+            *subRouters.map { it.get() }.toTypedArray()
+        )
+
+        return errorFilter
+            .then(InitialiseRequestContext(contexts))
+            .then(SecurityFilter)
+            .then(GZip())
+            .then(routes)
+    }
+}

app/src/routes/SettingsRoutes.kt

@@ -0,0 +1,37 @@
+package be.simplenotes.app.routes
+
+import be.simplenotes.app.controllers.SettingsController
+import be.simplenotes.app.filters.auth.RequiredAuthFilter
+import be.simplenotes.app.filters.auth.RequiredAuthLens
+import org.http4k.core.Method.GET
+import org.http4k.core.Method.POST
+import org.http4k.core.Request
+import org.http4k.core.then
+import org.http4k.routing.PathMethod
+import org.http4k.routing.RoutingHttpHandler
+import org.http4k.routing.bind
+import org.http4k.routing.routes
+import java.util.function.Supplier
+import javax.inject.Named
+import javax.inject.Singleton
+
+@Singleton
+class SettingsRoutes(
+    private val settingsController: SettingsController,
+    private val auth: RequiredAuthFilter,
+    @Named("required") private val authLens: RequiredAuthLens,
+) : Supplier<RoutingHttpHandler> {
+    override fun get(): RoutingHttpHandler {
+
+        infix fun PathMethod.to(action: ProtectedHandler) =
+            this to { req: Request -> action(req, authLens(req)) }
+
+        return auth.then(
+            routes(
+                "/settings" bind GET to settingsController::settings,
+                "/settings" bind POST to settingsController::settings,
+                "/export" bind POST to settingsController::export,
+            )
+        )
+    }
+}

app/src/serialization/UuidSerializer.kt

@@ -10,7 +10,7 @@ import java.util.*
 
 internal class UuidSerializer : KSerializer<UUID> {
     override val descriptor: SerialDescriptor
-        get() = PrimitiveSerialDescriptor("LocalDateTime", PrimitiveKind.STRING)
+        get() = PrimitiveSerialDescriptor("UUID", PrimitiveKind.STRING)
 
     override fun serialize(encoder: Encoder, value: UUID) {
         encoder.encodeString(value.toString())

app/src/utils/StaticFilesResolver.kt

@@ -3,11 +3,13 @@ package be.simplenotes.app.utils
 import kotlinx.serialization.json.Json
 import kotlinx.serialization.json.jsonObject
 import kotlinx.serialization.json.jsonPrimitive
+import javax.inject.Singleton
 
 interface StaticFileResolver {
     fun resolve(name: String): String?
 }
 
+@Singleton
 class StaticFileResolverImpl(json: Json) : StaticFileResolver {
     private val mappings: Map<String, String>
 

app/test/Index.kt

@@ -0,0 +1 @@
+package be.simplenotes.app

app/test/filters/RequiredAuthFilterTest.kt

@@ -1,15 +1,24 @@
 package be.simplenotes.app.filters
 
-import be.simplenotes.domain.security.JwtPayload
-import be.simplenotes.domain.security.JwtPayloadExtractor
-import be.simplenotes.domain.security.SimpleJwt
+import be.simplenotes.app.filters.auth.OptionalAuthFilter
+import be.simplenotes.app.filters.auth.OptionalAuthLens
+import be.simplenotes.app.filters.auth.RequiredAuthFilter
+import be.simplenotes.app.filters.auth.RequiredAuthLens
 import be.simplenotes.config.JwtConfig
+import be.simplenotes.domain.security.SimpleJwt
+import be.simplenotes.domain.security.UserJwtMapper
+import be.simplenotes.types.LoggedInUser
 import com.natpryce.hamkrest.assertion.assertThat
-import org.http4k.core.*
+import io.micronaut.context.BeanContext
+import io.micronaut.inject.qualifiers.Qualifiers
 import org.http4k.core.Method.GET
+import org.http4k.core.Request
+import org.http4k.core.RequestContexts
+import org.http4k.core.Response
 import org.http4k.core.Status.Companion.FOUND
 import org.http4k.core.Status.Companion.OK
 import org.http4k.core.cookie.cookie
+import org.http4k.core.then
 import org.http4k.filter.ServerFilters
 import org.http4k.hamkrest.hasBody
 import org.http4k.hamkrest.hasHeader
@@ -20,22 +29,36 @@ import org.junit.jupiter.api.Nested
 import org.junit.jupiter.api.Test
 import java.util.concurrent.TimeUnit
 
-internal class AuthFilterTest {
+internal class RequiredAuthFilterTest {
 
     // region setup
     private val jwtConfig = JwtConfig("secret", 1, TimeUnit.HOURS)
-    private val simpleJwt = SimpleJwt(jwtConfig)
-    private val extractor = JwtPayloadExtractor(simpleJwt)
-    private val ctx = RequestContexts()
-    private val requiredAuth = AuthFilter(extractor, AuthType.Required, ctx)
-    private val optionalAuth = AuthFilter(extractor, AuthType.Optional, ctx)
+    private val simpleJwt = SimpleJwt(jwtConfig, UserJwtMapper())
 
-    private val echoJwtPayloadHandler = { request: Request -> Response(OK).body(request.jwtPayload(ctx).toString()) }
+    private val beanCtx = BeanContext.build()
+        .registerSingleton(jwtConfig)
+        .start()
+
+    private inline fun <reified T> BeanContext.getBean(): T = getBean(T::class.java)
+    private inline fun <reified T> BeanContext.getBean(name: String): T =
+        getBean(T::class.java, Qualifiers.byName(name))
+
+    private val requiredAuth = beanCtx.getBean<RequiredAuthFilter>()
+    private val requiredLens = beanCtx.getBean<RequiredAuthLens>("required")
+
+    private val optionalAuth = beanCtx.getBean<OptionalAuthFilter>()
+    private val optionalLens = beanCtx.getBean<OptionalAuthLens>("optional")
+
+    private val ctx = beanCtx.getBean<RequestContexts>()
 
     private val app = ServerFilters.InitialiseRequestContext(ctx).then(
         routes(
-            "/optional" bind GET to optionalAuth.then(echoJwtPayloadHandler),
-            "/protected" bind GET to requiredAuth.then(echoJwtPayloadHandler)
+            "/optional" bind GET to optionalAuth.then { request: Request ->
+                Response(OK).body(optionalLens(request).toString())
+            },
+            "/protected" bind GET to requiredAuth.then { request: Request ->
+                Response(OK).body(requiredLens(request).toString())
+            }
         )
     )
     // endregion
@@ -58,7 +81,7 @@ internal class AuthFilterTest {
 
         @Test
         fun `it should allow a valid token`() {
-            val jwtPayload = JwtPayload(1, "user")
+            val jwtPayload = LoggedInUser(1, "user")
             val token = simpleJwt.sign(jwtPayload)
             val response = app(Request(GET, "/optional").cookie("Bearer", token))
             assertThat(response, hasStatus(OK))
@@ -83,8 +106,8 @@ internal class AuthFilterTest {
         }
 
         @Test
-        fun `it should allow a valid token"`() {
-            val jwtPayload = JwtPayload(1, "user")
+        fun `it should allow a valid token`() {
+            val jwtPayload = LoggedInUser(1, "user")
             val token = simpleJwt.sign(jwtPayload)
             val response = app(Request(GET, "/protected").cookie("Bearer", token))
             assertThat(response, hasStatus(OK))

build.gradle.kts

@@ -0,0 +1,3 @@
+plugins {
+    id("be.simplenotes.versions")
+}

buildSrc/build.gradle.kts

@@ -0,0 +1,19 @@
+plugins {
+    `kotlin-dsl`
+}
+
+kotlinDslPluginOptions {
+    experimentalWarning.set(false)
+}
+
+repositories {
+    gradlePluginPortal()
+}
+
+dependencies {
+    implementation("org.jetbrains.kotlin:kotlin-gradle-plugin:1.4.31")
+    implementation("org.jetbrains.kotlin:kotlin-serialization:1.4.31")
+    implementation("com.github.jengelman.gradle.plugins:shadow:6.1.0")
+    implementation("org.jlleitschuh.gradle:ktlint-gradle:10.0.0")
+    implementation("com.github.ben-manes:gradle-versions-plugin:0.28.0")
+}

buildSrc/src/main/kotlin/be/simplenotes/DockerPlugin.kt

@@ -0,0 +1,44 @@
+package be.simplenotes
+
+import org.gradle.api.Plugin
+import org.gradle.api.Project
+import org.gradle.kotlin.dsl.create
+
+open class DockerPluginExtension {
+    var image: String? = null
+    var tag = "latest"
+}
+
+class DockerPlugin : Plugin<Project> {
+    override fun apply(project: Project) {
+        val extension = project.extensions.create<DockerPluginExtension>("docker")
+
+        project.task("dockerBuild") {
+            dependsOn("package")
+
+            group = "docker"
+            description = "Build a docker image"
+
+            doLast {
+                project.exec {
+                    commandLine("docker", "build", "-t", "${extension.image}:${extension.tag}", ".")
+                    workingDir(project.rootProject.projectDir)
+                }
+            }
+        }
+
+        project.task("dockerPush") {
+            dependsOn("dockerBuild")
+
+            group = "docker"
+            description = "Push a docker image"
+
+            doLast {
+                project.exec {
+                    commandLine("docker", "push", "${extension.image}:${extension.tag}")
+                    workingDir(project.rootProject.projectDir)
+                }
+            }
+        }
+    }
+}

buildSrc/src/main/kotlin/be/simplenotes/Libs.kt

@@ -0,0 +1,92 @@
+@file:Suppress("SpellCheckingInspection")
+
+package be.simplenotes
+
+object Libs {
+
+    object Flexmark {
+        private const val version = "0.62.2"
+        const val core = "com.vladsch.flexmark:flexmark:$version"
+        const val tasklist = "com.vladsch.flexmark:flexmark-ext-gfm-tasklist:$version"
+    }
+
+    object Database {
+        const val flyway = "org.flywaydb:flyway-core:7.5.4"
+        const val hikariCP = "com.zaxxer:HikariCP:4.0.2"
+
+        object Drivers {
+            const val h2 = "com.h2database:h2:1.4.200"
+            const val mariadb = "org.mariadb.jdbc:mariadb-java-client:2.7.2"
+        }
+
+        object Ktorm {
+            private const val version = "3.0.0"
+            const val core = "me.liuwj.ktorm:ktorm-core:$version"
+            const val mysql = "me.liuwj.ktorm:ktorm-support-mysql:$version"
+        }
+    }
+
+    object Lucene {
+        private const val version = "8.8.1"
+        const val core = "org.apache.lucene:lucene-core:$version"
+        const val analyzersCommon = "org.apache.lucene:lucene-analyzers-common:$version"
+        const val queryParser = "org.apache.lucene:lucene-queryparser:$version"
+    }
+
+    object Http4k {
+        private const val version = "4.3.5.4"
+        const val core = "org.http4k:http4k-core:$version"
+        const val testingHamkrest = "org.http4k:http4k-testing-hamkrest:$version"
+    }
+
+    object Jetty {
+        private const val version = "10.0.1"
+        const val server = "org.eclipse.jetty:jetty-server:$version"
+        const val servlet = "org.eclipse.jetty:jetty-servlet:$version"
+    }
+
+    object Kotlinx {
+        const val html = "org.jetbrains.kotlinx:kotlinx-html-jvm:0.7.2"
+
+        object Serialization {
+            const val json = "org.jetbrains.kotlinx:kotlinx-serialization-json-jvm:1.1.0"
+        }
+    }
+
+    object Slf4J {
+        const val api = "org.slf4j:slf4j-api:2.0.0-alpha1"
+        const val logback = "ch.qos.logback:logback-classic:1.3.0-alpha5"
+    }
+
+    object Mapstruct {
+        private const val version = "1.4.2.Final"
+        const val core = "org.mapstruct:mapstruct:$version"
+        const val processor = "org.mapstruct:mapstruct-processor:$version"
+    }
+
+    object Micronaut {
+        private const val version = "2.3.3"
+        const val inject = "io.micronaut:micronaut-inject:$version"
+        const val processor = "io.micronaut:micronaut-inject-java:$version"
+    }
+
+    const val arrowCoreData = "io.arrow-kt:arrow-core-data:0.11.0"
+    const val commonsCompress = "org.apache.commons:commons-compress:1.20"
+    const val javaJwt = "com.auth0:java-jwt:3.13.0"
+    const val javaxServlet = "javax.servlet:javax.servlet-api:4.0.1"
+    const val jbcrypt = "org.mindrot:jbcrypt:0.4"
+    const val konform = "io.konform:konform-jvm:0.2.0"
+    const val owaspHtmlSanitizer = "com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer:20200713.1"
+    const val prettytime = "org.ocpsoft.prettytime:prettytime:5.0.0.Final"
+    const val snakeyaml = "org.yaml:snakeyaml:1.28"
+
+    object Test {
+        const val assertJ = "org.assertj:assertj-core:3.19.0"
+        const val hamkrest = "com.natpryce:hamkrest:1.8.0.1"
+        const val junit = "org.junit.jupiter:junit-jupiter:5.7.1"
+        const val mockk = "io.mockk:mockk:1.10.6"
+        const val faker = "com.github.javafaker:javafaker:1.0.2"
+        const val mariaTestContainer = "org.testcontainers:mariadb:1.15.2"
+    }
+
+}

buildSrc/src/main/kotlin/be/simplenotes/MicronautPlugin.kt

@@ -0,0 +1,33 @@
+package be.simplenotes
+
+import org.gradle.api.Plugin
+import org.gradle.api.Project
+import org.gradle.api.artifacts.dsl.DependencyHandler
+import org.jetbrains.kotlin.gradle.plugin.KaptExtension
+
+class MicronautPlugin : Plugin<Project> {
+    override fun apply(target: Project) {
+        target.plugins.apply("org.jetbrains.kotlin.kapt")
+        target.extensions.configure<KaptExtension>("kapt") {
+            arguments {
+                arg("micronaut.processing.incremental", true)
+            }
+        }
+    }
+}
+
+fun DependencyHandler.micronaut() {
+    add("kapt", Libs.Micronaut.processor)
+    add("implementation", Libs.Micronaut.inject)
+}
+
+fun DependencyHandler.micronautTest() {
+    add("kaptTest", Libs.Micronaut.processor)
+    add("testImplementation", Libs.Micronaut.inject)
+}
+
+fun DependencyHandler.micronautFixtures() {
+    add("kaptTestFixtures", Libs.Micronaut.inject)
+    add("testFixturesImplementation", Libs.Micronaut.processor)
+}
+

buildSrc/src/main/kotlin/be/simplenotes/PostcssPlugin.kt

@@ -0,0 +1,24 @@
+package be.simplenotes
+
+import org.gradle.api.Plugin
+import org.gradle.api.Project
+import org.gradle.api.plugins.JavaPluginConvention
+import org.gradle.kotlin.dsl.get
+import org.gradle.kotlin.dsl.register
+import java.io.File
+
+class PostcssPlugin : Plugin<Project> {
+    override fun apply(project: Project) {
+        with(project.tasks) {
+            register<PostcssTask>("postcss") {
+                group = "postcss"
+                description = "generate postcss resources"
+            }
+            getByName("processResources").dependsOn("postcss")
+        }
+
+        val sourceSets = project.convention.getPlugin(JavaPluginConvention::class.java).sourceSets
+        val root = File("${project.buildDir}/generated-resources/css")
+        sourceSets["main"].resources.srcDir(root)
+    }
+}

buildSrc/src/main/kotlin/be/simplenotes/PostcssTask.kt

@@ -0,0 +1,75 @@
+package be.simplenotes
+
+import org.gradle.api.DefaultTask
+import org.gradle.api.GradleException
+import org.gradle.api.tasks.*
+import org.gradle.kotlin.dsl.getByType
+import java.io.File
+import java.lang.ProcessBuilder.Redirect.PIPE
+import java.util.concurrent.TimeUnit
+import kotlin.concurrent.thread
+
+open class PostcssTask : DefaultTask() {
+
+    private val viewsProject = project
+        .parent
+        ?.project(":views")
+        ?: error("Missing :views")
+
+    @get:InputDirectory
+    val templatesDir = viewsProject.extensions
+        .getByType<SourceSetContainer>()
+        .asMap.getOrElse("main") { error("main sources not found") }
+        .allSource.srcDirs
+        .find { it.endsWith("src") }
+        ?: error("kotlin sources not found")
+
+    private val yarnRoot = File(project.rootDir, "css")
+
+    @get:InputDirectory
+    val postCssDir = File(project.rootDir, "css/src")
+
+    @get:InputFiles
+    val postCssConfig = listOf(
+        "tailwind.config.js",
+        "postcss.config.js",
+        "package.json"
+    ).map { File(yarnRoot, it) }
+
+    @get:OutputDirectory
+    val outputRootDir = File(project.buildDir, "generated-resources/css")
+
+    private val cssIndex = File(postCssDir, "styles.pcss")
+
+    private val cssOutput = File(outputRootDir, "static/styles.css")
+    private val manifestOutput = File(outputRootDir, "css-manifest.json")
+
+    private val purgeGlob = "$templatesDir/**/*.kt"
+
+    @TaskAction
+    fun generateCss() {
+        // TODO: auto yarn install ?
+
+        outputRootDir.deleteRecursively()
+
+        ProcessBuilder("yarn", "run", "postcss", "$cssIndex", "--output", "$cssOutput")
+            .apply {
+                environment().let {
+                    it["MANIFEST"] = "$manifestOutput"
+                    it["NODE_ENV"] = "production"
+                    it["PURGE"] = purgeGlob
+                }
+            }
+            .redirectOutput(PIPE)
+            .redirectError(PIPE)
+            .directory(yarnRoot)
+            .start()
+            .apply {
+                thread { inputStream.use { it.copyTo(System.out) } }
+                thread { errorStream.use { it.copyTo(System.out) } }
+                waitFor(30, TimeUnit.SECONDS)
+                if (exitValue() != 0) throw GradleException(":/")
+            }
+    }
+
+}

buildSrc/src/main/kotlin/be/simplenotes/app-shadow.gradle.kts

@@ -0,0 +1,37 @@
+package be.simplenotes
+
+import com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar
+
+plugins {
+    id("com.github.johnrengelman.shadow")
+}
+
+tasks.withType<ShadowJar> {
+
+    archiveAppendix.set("with-dependencies")
+    manifest.attributes["Main-Class"] = "be.simplenotes.app.SimpleNotesKt"
+
+    mergeServiceFiles()
+
+    File(rootProject.projectDir, "buildSrc/src/main/resources/exclusions")
+        .listFiles()!!
+        .flatMap {
+            it.readLines()
+                .asSequence()
+                .map { it.trim() }
+                .filterNot { it.isBlank() }
+                .filterNot { it.startsWith("#") }
+                .asIterable()
+        }.forEach { exclude(it) }
+
+}
+
+tasks.create("package") {
+    tasks.getByName("build").dependsOn("package")
+
+    dependsOn("shadowJar")
+
+    doLast {
+        println("SimpleNotes Packaged !")
+    }
+}

buildSrc/src/main/kotlin/be/simplenotes/base.gradle.kts

@@ -0,0 +1,8 @@
+package be.simplenotes
+
+plugins {
+    id("be.simplenotes.java-convention")
+    id("be.simplenotes.kotlin-convention")
+    id("be.simplenotes.junit-convention")
+    id("org.jlleitschuh.gradle.ktlint")
+}

buildSrc/src/main/kotlin/be/simplenotes/java-convention.gradle.kts

@@ -0,0 +1,29 @@
+package be.simplenotes
+
+plugins {
+    `java-library`
+}
+
+repositories {
+    mavenCentral()
+    maven {
+        url = uri("https://kotlin.bintray.com/kotlinx")
+        // https://github.com/Kotlin/kotlinx.html/issues/173
+        content { includeModule("org.jetbrains.kotlinx", "kotlinx-html-jvm") }
+    }
+}
+
+group = "be.simplenotes"
+version = "1.0-SNAPSHOT"
+
+java {
+    sourceCompatibility = JavaVersion.VERSION_15
+    targetCompatibility = JavaVersion.VERSION_15
+}
+
+tasks.withType<JavaCompile> {
+    options.encoding = "UTF-8"
+}
+
+sourceSets["main"].resources.srcDirs("resources")
+sourceSets["test"].resources.srcDirs("testresources")

buildSrc/src/main/kotlin/be/simplenotes/junit-convention.gradle.kts

@@ -0,0 +1,15 @@
+package be.simplenotes
+
+plugins {
+    java apply false
+}
+
+tasks.withType<Test> {
+    useJUnitPlatform {
+        excludeTags("slow")
+    }
+}
+
+dependencies {
+    testRuntimeOnly(project(":junit-config"))
+}

buildSrc/src/main/kotlin/be/simplenotes/kotlin-convention.gradle.kts

@@ -0,0 +1,29 @@
+package be.simplenotes
+
+import org.jetbrains.kotlin.gradle.tasks.KotlinCompile
+
+plugins {
+    kotlin("jvm")
+}
+
+dependencies {
+    implementation(kotlin("stdlib-jdk8"))
+    implementation(platform(kotlin("bom")))
+    testImplementation(platform(kotlin("bom")))
+}
+
+tasks.withType<KotlinCompile> {
+    kotlinOptions {
+        jvmTarget = "15"
+        javaParameters = true
+        freeCompilerArgs = listOf(
+            "-Xinline-classes",
+            "-Xno-param-assertions",
+            "-Xno-call-assertions",
+            "-Xno-receiver-assertions"
+        )
+    }
+}
+
+kotlin.sourceSets["main"].kotlin.srcDirs("src")
+kotlin.sourceSets["test"].kotlin.srcDirs("test")

buildSrc/src/main/kotlin/be/simplenotes/kotlinx-serialization.gradle.kts

@@ -0,0 +1,5 @@
+package be.simplenotes
+
+plugins {
+    kotlin("plugin.serialization")
+}

buildSrc/src/main/kotlin/be/simplenotes/versions.gradle.kts

@@ -0,0 +1,22 @@
+package be.simplenotes
+
+import com.github.benmanes.gradle.versions.updates.DependencyUpdatesTask
+
+plugins {
+    id("com.github.ben-manes.versions")
+}
+
+tasks.named<DependencyUpdatesTask>("dependencyUpdates").configure {
+    resolutionStrategy {
+        componentSelection {
+            all {
+                if ("RC" in candidate.version) reject("Release candidate")
+
+                when {
+                    candidate.group == "org.eclipse.jetty" && candidate.version.startsWith("11.") -> reject("javax -> jakarta")
+                    candidate.group == "me.liuwj.ktorm" && candidate.version != "3.0.0" -> reject("SQL Case sensitivity changed")
+                }
+            }
+        }
+    }
+}

buildSrc/src/main/resources/META-INF/gradle-plugins/be.simplenotes.docker.properties

@@ -0,0 +1 @@
+implementation-class=be.simplenotes.DockerPlugin

buildSrc/src/main/resources/META-INF/gradle-plugins/be.simplenotes.micronaut.properties

@@ -0,0 +1 @@
+implementation-class=be.simplenotes.MicronautPlugin

buildSrc/src/main/resources/META-INF/gradle-plugins/be.simplenotes.postcss.properties

@@ -0,0 +1 @@
+implementation-class=be.simplenotes.PostcssPlugin

buildSrc/src/main/resources/exclusions/excluded-resources.txt

@@ -0,0 +1,14 @@
+META-INF/maven/**
+META-INF/proguard/**
+META-INF/*.kotlin_module
+META-INF/DEPENDENCIES*
+META-INF/NOTICE*
+META-INF/LICENSE*
+LICENSE*
+META-INF/README*
+META-INF/native-image/**
+
+# Jetty
+about.html
+jetty-dir.css
+server-ssl-cert.pem

buildSrc/src/main/resources/exclusions/guava.txt

@@ -0,0 +1,261 @@
+com/google/common/util/**
+com/google/common/eventbus/**
+com/google/common/reflect/**
+com/google/common/escape/**
+com/google/common/graph/**
+com/google/common/html/**
+com/google/common/hash/**
+com/google/common/xml/**
+com/google/common/io/**
+com/google/common/cache/**
+com/google/common/net/**
+
+# Collections
+com/google/common/collect/AbstractBiMap$1.class
+com/google/common/collect/AbstractBiMap$BiMapEntry.class
+com/google/common/collect/AbstractBiMap$EntrySet.class
+com/google/common/collect/AbstractBiMap$Inverse.class
+com/google/common/collect/AbstractBiMap$KeySet.class
+com/google/common/collect/AbstractBiMap$ValueSet.class
+com/google/common/collect/AbstractBiMap.class
+com/google/common/collect/AbstractSortedKeySortedSetMultimap.class
+com/google/common/collect/AbstractSortedMultiset$1DescendingMultisetImpl.class
+com/google/common/collect/AbstractSortedMultiset.class
+com/google/common/collect/AbstractTable$1.class
+com/google/common/collect/AbstractTable$CellSet.class
+com/google/common/collect/AbstractTable$Values.class
+com/google/common/collect/AbstractTable.class
+com/google/common/collect/ArrayListMultimap.class
+com/google/common/collect/ArrayListMultimapGwtSerializationDependencies.class
+com/google/common/collect/ArrayTable$1.class
+com/google/common/collect/ArrayTable$2.class
+com/google/common/collect/ArrayTable$3.class
+com/google/common/collect/ArrayTable$ArrayMap$1.class
+com/google/common/collect/ArrayTable$ArrayMap$2.class
+com/google/common/collect/ArrayTable$ArrayMap.class
+com/google/common/collect/ArrayTable$Column.class
+com/google/common/collect/ArrayTable$ColumnMap.class
+com/google/common/collect/ArrayTable$Row.class
+com/google/common/collect/ArrayTable$RowMap.class
+com/google/common/collect/ArrayTable.class
+com/google/common/collect/ClassToInstanceMap.class
+com/google/common/collect/CompactHashMap$1.class
+com/google/common/collect/CompactHashMap$2.class
+com/google/common/collect/CompactHashMap$3.class
+com/google/common/collect/CompactHashMap$EntrySetView.class
+com/google/common/collect/CompactHashMap$Itr.class
+com/google/common/collect/CompactHashMap$KeySetView.class
+com/google/common/collect/CompactHashMap$MapEntry.class
+com/google/common/collect/CompactHashMap$ValuesView.class
+com/google/common/collect/CompactHashMap.class
+com/google/common/collect/CompactHashSet$1.class
+com/google/common/collect/CompactHashSet.class
+com/google/common/collect/CompactLinkedHashMap$1EntrySetImpl.class
+com/google/common/collect/CompactLinkedHashMap$1KeySetImpl.class
+com/google/common/collect/CompactLinkedHashMap$1ValuesImpl.class
+com/google/common/collect/CompactLinkedHashMap.class
+com/google/common/collect/CompactLinkedHashSet.class
+com/google/common/collect/Comparators.class
+com/google/common/collect/ComputationException.class
+com/google/common/collect/ConcurrentHashMultiset$1.class
+com/google/common/collect/ConcurrentHashMultiset$2.class
+com/google/common/collect/ConcurrentHashMultiset$3.class
+com/google/common/collect/ConcurrentHashMultiset$EntrySet.class
+com/google/common/collect/ConcurrentHashMultiset$FieldSettersHolder.class
+com/google/common/collect/ConcurrentHashMultiset.class
+com/google/common/collect/DenseImmutableTable$1.class
+com/google/common/collect/DenseImmutableTable$Column.class
+com/google/common/collect/DenseImmutableTable$ColumnMap.class
+com/google/common/collect/DenseImmutableTable$ImmutableArrayMap$1.class
+com/google/common/collect/DenseImmutableTable$ImmutableArrayMap.class
+com/google/common/collect/DenseImmutableTable$Row.class
+com/google/common/collect/DenseImmutableTable$RowMap.class
+com/google/common/collect/DenseImmutableTable.class
+com/google/common/collect/DescendingImmutableSortedMultiset.class
+com/google/common/collect/DescendingMultiset$1EntrySetImpl.class
+com/google/common/collect/DescendingMultiset.class
+com/google/common/collect/EnumBiMap.class
+com/google/common/collect/EnumHashBiMap.class
+com/google/common/collect/EnumMultiset$1.class
+com/google/common/collect/EnumMultiset$2$1.class
+com/google/common/collect/EnumMultiset$2.class
+com/google/common/collect/EnumMultiset$Itr.class
+com/google/common/collect/EnumMultiset.class
+com/google/common/collect/EvictingQueue.class
+com/google/common/collect/ForwardingBlockingDeque.class
+com/google/common/collect/ForwardingDeque.class
+com/google/common/collect/ForwardingImmutableCollection.class
+com/google/common/collect/ForwardingImmutableList.class
+com/google/common/collect/ForwardingImmutableMap.class
+com/google/common/collect/ForwardingImmutableSet.class
+com/google/common/collect/ForwardingIterator.class
+com/google/common/collect/ForwardingListIterator.class
+com/google/common/collect/ForwardingListMultimap.class
+com/google/common/collect/ForwardingNavigableMap$StandardDescendingMap$1.class
+com/google/common/collect/ForwardingNavigableMap$StandardDescendingMap.class
+com/google/common/collect/ForwardingNavigableMap$StandardNavigableKeySet.class
+com/google/common/collect/ForwardingNavigableMap.class
+com/google/common/collect/ForwardingQueue.class
+com/google/common/collect/ForwardingSetMultimap.class
+com/google/common/collect/ForwardingSortedMultiset$StandardDescendingMultiset.class
+com/google/common/collect/ForwardingSortedMultiset$StandardElementSet.class
+com/google/common/collect/ForwardingSortedMultiset.class
+com/google/common/collect/ForwardingSortedSetMultimap.class
+com/google/common/collect/ForwardingTable.class
+com/google/common/collect/GeneralRange.class
+com/google/common/collect/GwtTransient.class
+com/google/common/collect/HashBasedTable$Factory.class
+com/google/common/collect/HashBasedTable.class
+com/google/common/collect/HashBiMap$1$MapEntry.class
+com/google/common/collect/HashBiMap$1.class
+com/google/common/collect/HashBiMap$BiEntry.class
+com/google/common/collect/HashBiMap$Inverse$1$InverseEntry.class
+com/google/common/collect/HashBiMap$Inverse$1.class
+com/google/common/collect/HashBiMap$Inverse$InverseKeySet$1.class
+com/google/common/collect/HashBiMap$Inverse$InverseKeySet.class
+com/google/common/collect/HashBiMap$Inverse.class
+com/google/common/collect/HashBiMap$InverseSerializedForm.class
+com/google/common/collect/HashBiMap$Itr.class
+com/google/common/collect/HashBiMap$KeySet$1.class
+com/google/common/collect/HashBiMap$KeySet.class
+com/google/common/collect/HashBiMap.class
+com/google/common/collect/HashMultimap.class
+com/google/common/collect/HashMultimapGwtSerializationDependencies.class
+com/google/common/collect/ImmutableClassToInstanceMap$1.class
+com/google/common/collect/ImmutableClassToInstanceMap$Builder.class
+com/google/common/collect/ImmutableClassToInstanceMap.class
+com/google/common/collect/ImmutableSortedMultiset$Builder.class
+com/google/common/collect/ImmutableSortedMultiset$SerializedForm.class
+com/google/common/collect/ImmutableSortedMultiset.class
+com/google/common/collect/ImmutableSortedMultisetFauxverideShim.class
+com/google/common/collect/ImmutableTable$1.class
+com/google/common/collect/ImmutableTable$Builder.class
+com/google/common/collect/ImmutableTable$CollectorState.class
+com/google/common/collect/ImmutableTable$MutableCell.class
+com/google/common/collect/ImmutableTable$SerializedForm.class
+com/google/common/collect/ImmutableTable.class
+com/google/common/collect/Interner.class
+com/google/common/collect/Interners$1.class
+com/google/common/collect/Interners$InternerBuilder.class
+com/google/common/collect/Interners$InternerFunction.class
+com/google/common/collect/Interners$InternerImpl.class
+com/google/common/collect/Interners.class
+com/google/common/collect/LinkedHashMultimap$1.class
+com/google/common/collect/LinkedHashMultimap$ValueEntry.class
+com/google/common/collect/LinkedHashMultimap$ValueSet$1.class
+com/google/common/collect/LinkedHashMultimap$ValueSet.class
+com/google/common/collect/LinkedHashMultimap$ValueSetLink.class
+com/google/common/collect/LinkedHashMultimap.class
+com/google/common/collect/LinkedHashMultimapGwtSerializationDependencies.class
+com/google/common/collect/LinkedListMultimap$1.class
+com/google/common/collect/LinkedListMultimap$1EntriesImpl.class
+com/google/common/collect/LinkedListMultimap$1KeySetImpl.class
+com/google/common/collect/LinkedListMultimap$1ValuesImpl$1.class
+com/google/common/collect/LinkedListMultimap$1ValuesImpl.class
+com/google/common/collect/LinkedListMultimap$DistinctKeyIterator.class
+com/google/common/collect/LinkedListMultimap$KeyList.class
+com/google/common/collect/LinkedListMultimap$Node.class
+com/google/common/collect/LinkedListMultimap$NodeIterator.class
+com/google/common/collect/LinkedListMultimap$ValueForKeyIterator.class
+com/google/common/collect/LinkedListMultimap.class
+com/google/common/collect/MinMaxPriorityQueue$1.class
+com/google/common/collect/MinMaxPriorityQueue$Builder.class
+com/google/common/collect/MinMaxPriorityQueue$Heap.class
+com/google/common/collect/MinMaxPriorityQueue$MoveDesc.class
+com/google/common/collect/MinMaxPriorityQueue$QueueIterator.class
+com/google/common/collect/MinMaxPriorityQueue.class
+com/google/common/collect/MoreCollectors$ToOptionalState.class
+com/google/common/collect/MoreCollectors.class
+com/google/common/collect/MutableClassToInstanceMap$1.class
+com/google/common/collect/MutableClassToInstanceMap$2$1.class
+com/google/common/collect/MutableClassToInstanceMap$2.class
+com/google/common/collect/MutableClassToInstanceMap$SerializedForm.class
+com/google/common/collect/MutableClassToInstanceMap.class
+com/google/common/collect/Queues.class
+com/google/common/collect/RegularImmutableSortedMultiset.class
+com/google/common/collect/RegularImmutableTable$1.class
+com/google/common/collect/RegularImmutableTable$CellSet.class
+com/google/common/collect/RegularImmutableTable$Values.class
+com/google/common/collect/RegularImmutableTable.class
+com/google/common/collect/RowSortedTable.class
+com/google/common/collect/SingletonImmutableTable.class
+com/google/common/collect/SortedMultisets$ElementSet.class
+com/google/common/collect/SortedMultisets$NavigableElementSet.class
+com/google/common/collect/SortedMultisets.class
+com/google/common/collect/SparseImmutableTable.class
+com/google/common/collect/StandardRowSortedTable$1.class
+com/google/common/collect/StandardRowSortedTable$RowSortedMap.class
+com/google/common/collect/StandardRowSortedTable.class
+com/google/common/collect/StandardTable$1.class
+com/google/common/collect/StandardTable$CellIterator.class
+com/google/common/collect/StandardTable$Column$EntrySet.class
+com/google/common/collect/StandardTable$Column$EntrySetIterator$1EntryImpl.class
+com/google/common/collect/StandardTable$Column$EntrySetIterator.class
+com/google/common/collect/StandardTable$Column$KeySet.class
+com/google/common/collect/StandardTable$Column$Values.class
+com/google/common/collect/StandardTable$Column.class
+com/google/common/collect/StandardTable$ColumnKeyIterator.class
+com/google/common/collect/StandardTable$ColumnKeySet.class
+com/google/common/collect/StandardTable$ColumnMap$ColumnMapEntrySet$1.class
+com/google/common/collect/StandardTable$ColumnMap$ColumnMapEntrySet.class
+com/google/common/collect/StandardTable$ColumnMap$ColumnMapValues.class
+com/google/common/collect/StandardTable$ColumnMap.class
+com/google/common/collect/StandardTable$Row$1.class
+com/google/common/collect/StandardTable$Row$2.class
+com/google/common/collect/StandardTable$Row.class
+com/google/common/collect/StandardTable$RowMap$EntrySet$1.class
+com/google/common/collect/StandardTable$RowMap$EntrySet.class
+com/google/common/collect/StandardTable$RowMap.class
+com/google/common/collect/StandardTable$TableSet.class
+com/google/common/collect/StandardTable.class
+com/google/common/collect/Tables$1.class
+com/google/common/collect/Tables$AbstractCell.class
+com/google/common/collect/Tables$ImmutableCell.class
+com/google/common/collect/Tables$TransformedTable$1.class
+com/google/common/collect/Tables$TransformedTable$2.class
+com/google/common/collect/Tables$TransformedTable$3.class
+com/google/common/collect/Tables$TransformedTable.class
+com/google/common/collect/Tables$TransposeTable$1.class
+com/google/common/collect/Tables$TransposeTable.class
+com/google/common/collect/Tables$UnmodifiableRowSortedMap.class
+com/google/common/collect/Tables$UnmodifiableTable.class
+com/google/common/collect/Tables.class
+com/google/common/collect/TreeBasedTable$1.class
+com/google/common/collect/TreeBasedTable$2.class
+com/google/common/collect/TreeBasedTable$Factory.class
+com/google/common/collect/TreeBasedTable$TreeRow.class
+com/google/common/collect/TreeBasedTable.class
+com/google/common/collect/TreeMultimap.class
+com/google/common/collect/TreeMultiset$1.class
+com/google/common/collect/TreeMultiset$2.class
+com/google/common/collect/TreeMultiset$3.class
+com/google/common/collect/TreeMultiset$4.class
+com/google/common/collect/TreeMultiset$Aggregate$1.class
+com/google/common/collect/TreeMultiset$Aggregate$2.class
+com/google/common/collect/TreeMultiset$Aggregate.class
+com/google/common/collect/TreeMultiset$AvlNode.class
+com/google/common/collect/TreeMultiset$Reference.class
+com/google/common/collect/TreeMultiset.class
+com/google/common/collect/TreeRangeMap$1.class
+com/google/common/collect/TreeRangeMap$AsMapOfRanges.class
+com/google/common/collect/TreeRangeMap$RangeMapEntry.class
+com/google/common/collect/TreeRangeMap$SubRangeMap$1$1.class
+com/google/common/collect/TreeRangeMap$SubRangeMap$1.class
+com/google/common/collect/TreeRangeMap$SubRangeMap$SubRangeMapAsMap$1.class
+com/google/common/collect/TreeRangeMap$SubRangeMap$SubRangeMapAsMap$2.class
+com/google/common/collect/TreeRangeMap$SubRangeMap$SubRangeMapAsMap$3.class
+com/google/common/collect/TreeRangeMap$SubRangeMap$SubRangeMapAsMap$4.class
+com/google/common/collect/TreeRangeMap$SubRangeMap$SubRangeMapAsMap.class
+com/google/common/collect/TreeRangeMap$SubRangeMap.class
+com/google/common/collect/TreeRangeMap.class
+com/google/common/collect/TreeTraverser$1.class
+com/google/common/collect/TreeTraverser$2$1.class
+com/google/common/collect/TreeTraverser$2.class
+com/google/common/collect/TreeTraverser$3$1.class
+com/google/common/collect/TreeTraverser$3.class
+com/google/common/collect/TreeTraverser$4.class
+com/google/common/collect/TreeTraverser$BreadthFirstIterator.class
+com/google/common/collect/TreeTraverser$PostOrderIterator.class
+com/google/common/collect/TreeTraverser$PostOrderNode.class
+com/google/common/collect/TreeTraverser$PreOrderIterator.class
+com/google/common/collect/TreeTraverser.class

buildSrc/src/main/resources/exclusions/logback.txt

@@ -0,0 +1,2 @@
+ch/qos/logback/core/db/**
+ch/qos/logback/classic/db/**

buildSrc/src/main/resources/exclusions/others.txt

@@ -0,0 +1,5 @@
+org/checkerframework/**
+org/intellij/**
+com/google/errorprone/**
+com/google/thirdparty/**
+com/google/j2objc/**

config/build.gradle.kts

@@ -0,0 +1,15 @@
+import be.simplenotes.Libs
+import be.simplenotes.micronaut
+
+plugins {
+    id("be.simplenotes.base")
+    id("be.simplenotes.micronaut")
+}
+
+dependencies {
+    micronaut()
+
+    testImplementation(Libs.Test.junit)
+    testImplementation(Libs.Test.assertJ)
+    testRuntimeOnly(Libs.Slf4J.logback)
+}

config/resources/application.yaml

@@ -0,0 +1,15 @@
+db:
+    jdbc-url: jdbc:h2:./notes-db;
+    username: h2
+    password: ''
+    connection-timeout: 3000
+    maximum-pool-size: 10
+
+jwt:
+    secret: 'PliLvfk7l4WF+cZJk66LR5Mpnh+ocbvJ2wfUCK2UCms='
+    validity: 24
+    time-unit: hours
+
+server:
+    host: localhost
+    port: 8080

config/src/Config.kt

@@ -0,0 +1,32 @@
+package be.simplenotes.config
+
+import io.micronaut.context.annotation.ConfigurationInject
+import io.micronaut.context.annotation.ConfigurationProperties
+import java.util.concurrent.TimeUnit
+
+@ConfigurationProperties("db")
+data class DataSourceConfig @ConfigurationInject constructor(
+    val jdbcUrl: String,
+    val username: String,
+    val password: String,
+    val maximumPoolSize: Int,
+    val connectionTimeout: Long,
+) {
+    override fun toString() = "DataSourceConfig(jdbcUrl='$jdbcUrl', username='$username', password='***', " +
+        "maximumPoolSize=$maximumPoolSize, connectionTimeout=$connectionTimeout)"
+}
+
+@ConfigurationProperties("jwt")
+data class JwtConfig @ConfigurationInject constructor(
+    val secret: String,
+    val validity: Long,
+    val timeUnit: TimeUnit,
+) {
+    override fun toString() = "JwtConfig(secret='***', validity=$validity, timeUnit=$timeUnit)"
+}
+
+@ConfigurationProperties("server")
+data class ServerConfig @ConfigurationInject constructor(
+    val host: String,
+    val port: Int,
+)

config/test/ConfigTest.kt

@@ -0,0 +1,29 @@
+package be.simplenotes.config
+
+import io.micronaut.context.ApplicationContext
+import org.assertj.core.api.Assertions.assertThat
+import org.junit.jupiter.api.Test
+
+class ConfigTest {
+    private val ctx = ApplicationContext.run()
+
+    @Test
+    fun `check application yaml is on the classpath`() {
+        val yaml = javaClass.getResource("/application.yaml")
+        assertThat(yaml).`as`("The application.yaml resource").isNotNull
+        assertThat(yaml.readText()).`as`("The config content").isNotBlank
+    }
+
+    @Test
+    fun `check config properties`() {
+        assertThat(ctx.getProperty("jwt.validity", Int::class.java))
+            .`as`("Jwt.validity")
+            .isPresent
+    }
+
+    @Test
+    fun `load jwt config`() {
+        val jwtConfig = ctx.getBean(JwtConfig::class.java)
+        assertThat(jwtConfig).isNotNull
+    }
+}

config/testresources/logback.xml

@@ -0,0 +1,13 @@
+<configuration>
+    <appender name="STDOUT" class="ch.qos.logback.core.ConsoleAppender">
+        <encoder>
+            <pattern>%cyan(%d{YYYY-MM-dd HH:mm:ss.SSS}) [%thread] %highlight(%-5level) %green(%logger{36}) - %msg%n
+            </pattern>
+        </encoder>
+    </appender>
+    <root level="DEBUG">
+        <appender-ref ref="STDOUT"/>
+    </root>
+    <logger name="io.micronaut" level="TRACE"/>
+    <logger name="io.micronaut.context.lifecycle" level="TRACE"/>
+</configuration>

css/build.gradle.kts

@@ -0,0 +1,4 @@
+plugins {
+    id("be.simplenotes.java-convention")
+    id("be.simplenotes.postcss")
+}

css/package.json

@@ -2,8 +2,7 @@
     "name": "css",
     "version": "1.0.0",
     "scripts": {
-        "css": "NODE_ENV=dev MANIFEST=../simplenotes-app/src/main/resources/css-manifest.json postcss build src/styles.pcss --output ../simplenotes-app/src/main/resources/static/styles.css",
-        "css-purge": "NODE_ENV=production  MANIFEST=../simplenotes-app/src/main/resources/css-manifest.json postcss build src/styles.pcss --output ../simplenotes-app/src/main/resources/static/styles.css"
+        "//": "`gradle css`"
     },
     "dependencies": {
         "autoprefixer": "^9.8.6",

css/tailwind.config.js

@@ -1,7 +1,7 @@
 module.exports = {
     purge: {
         content: [
-            '../simplenotes-app/src/main/kotlin/be/simplenotes/app/views/**/*.kt'
+            process.env.PURGE
         ]
     },
     theme: {

deploy-docker-hub.sh

@@ -1,8 +0,0 @@
-#!/bin/sh
-
-rm simplenotes-app/src/main/resources/css-manifest.json
-rm simplenotes-app/src/main/resources/static/styles*
-
-yarn --cwd css run css-purge \
-    && docker build -t hubv/simplenotes:latest . \
-    && docker push hubv/simplenotes:latest

docker-compose.yml

@@ -32,13 +32,11 @@ services:
             - .env
         environment:
             - TZ=Europe/Brussels
-            - HOST=0.0.0.0
-            - JDBCURL=jdbc:mariadb://db:3306/simplenotes
-            - DRIVERCLASSNAME=org.mariadb.jdbc.Driver
-            - USERNAME=simplenotes
+            - DB_JDBC_URL=jdbc:mariadb://db:3306/simplenotes
+            - DB_USERNAME=simplenotes
             # .env:
             # - JWT_SECRET
-            # - PASSWORD
+            # - DB_PASSWORD
         ports:
             - 127.0.0.1:8080:8080
         healthcheck:

domain/build.gradle.kts

@@ -0,0 +1,33 @@
+import be.simplenotes.Libs
+import be.simplenotes.micronaut
+
+plugins {
+    id("be.simplenotes.base")
+    id("be.simplenotes.kotlinx-serialization")
+    id("be.simplenotes.micronaut")
+}
+
+dependencies {
+    api(project(":config"))
+    api(project(":types"))
+    implementation(project(":persistence"))
+    implementation(project(":search"))
+
+    api(Libs.arrowCoreData)
+    api(Libs.konform)
+
+    micronaut()
+
+    implementation(Libs.Kotlinx.Serialization.json)
+    implementation(Libs.jbcrypt)
+    implementation(Libs.javaJwt)
+    implementation(Libs.Flexmark.core)
+    implementation(Libs.Flexmark.tasklist)
+    implementation(Libs.snakeyaml)
+    implementation(Libs.owaspHtmlSanitizer)
+    implementation(Libs.commonsCompress)
+
+    testImplementation(Libs.Test.hamkrest)
+    testImplementation(Libs.Test.junit)
+    testImplementation(Libs.Test.mockk)
+}

domain/src/Index.kt

@@ -0,0 +1 @@
+package be.simplenotes.domain

domain/src/security/HtmlSanitizer.kt

@@ -0,0 +1,38 @@
+package be.simplenotes.domain.security
+
+import be.simplenotes.types.LoggedInUser
+import org.owasp.html.HtmlChangeListener
+import org.owasp.html.HtmlPolicyBuilder
+import org.slf4j.LoggerFactory
+import javax.inject.Singleton
+
+@Singleton
+class HtmlSanitizer {
+    private val htmlPolicy = HtmlPolicyBuilder()
+        .allowElements("a")
+        .allowCommonBlockElements()
+        .allowCommonInlineFormattingElements()
+        .allowElements("pre")
+        .allowAttributes("class").onElements("code")
+        .allowUrlProtocols("http", "https")
+        .allowAttributes("href").onElements("a")
+        .allowElements("input")
+        .allowAttributes("type", "checked", "disabled", "readonly").onElements("input")
+        .requireRelNofollowOnLinks()
+        .toFactory()!!
+
+    private val logger = LoggerFactory.getLogger(javaClass)
+
+    private val htmlChangeListener = object : HtmlChangeListener<LoggedInUser> {
+        override fun discardedTag(context: LoggedInUser?, elementName: String) {
+            logger.warn("Discarded tag $elementName for user $context")
+        }
+
+        override fun discardedAttributes(context: LoggedInUser?, tagName: String, vararg attributeNames: String) {
+            logger.warn("Discarded attributes ${attributeNames.contentToString()} on tag $tagName for user $context")
+        }
+    }
+
+    fun sanitize(userId: LoggedInUser, unsafeHtml: String) =
+        htmlPolicy.sanitize(unsafeHtml, htmlChangeListener, userId)!!
+}

domain/src/security/JwtMapper.kt

@@ -0,0 +1,30 @@
+package be.simplenotes.domain.security
+
+import be.simplenotes.types.LoggedInUser
+import com.auth0.jwt.JWTCreator
+import com.auth0.jwt.interfaces.DecodedJWT
+import javax.inject.Singleton
+
+interface JwtMapper<T> {
+    fun extract(decodedJWT: DecodedJWT): T?
+    fun build(builder: JWTCreator.Builder, value: T)
+}
+
+@Singleton
+class UserJwtMapper : JwtMapper<LoggedInUser> {
+    private val userIdField = "i"
+    private val usernameField = "u"
+
+    override fun extract(decodedJWT: DecodedJWT): LoggedInUser? {
+        val id = decodedJWT.getClaim(userIdField).asInt() ?: null
+        val username = decodedJWT.getClaim(usernameField).asString() ?: null
+        return if (id != null && username != null)
+            LoggedInUser(id, username)
+        else null
+    }
+
+    override fun build(builder: JWTCreator.Builder, value: LoggedInUser) {
+        builder.withClaim(userIdField, value.userId)
+            .withClaim(usernameField, value.username)
+    }
+}

domain/src/security/PasswordHash.kt

@@ -1,13 +1,19 @@
 package be.simplenotes.domain.security
 
 import org.mindrot.jbcrypt.BCrypt
+import javax.inject.Inject
+import javax.inject.Singleton
 
 internal interface PasswordHash {
     fun crypt(password: String): String
     fun verify(password: String, hashedPassword: String): Boolean
 }
 
-internal class BcryptPasswordHash(test: Boolean = false) : PasswordHash {
+@Singleton
+internal class BcryptPasswordHash constructor(test: Boolean) : PasswordHash {
+    @Inject
+    constructor() : this(false)
+
     private val rounds = if (test) 4 else 10
     override fun crypt(password: String) = BCrypt.hashpw(password, BCrypt.gensalt(rounds))!!
     override fun verify(password: String, hashedPassword: String) = BCrypt.checkpw(password, hashedPassword)

domain/src/security/SimpleJwt.kt

@@ -0,0 +1,33 @@
+package be.simplenotes.domain.security
+
+import be.simplenotes.config.JwtConfig
+import com.auth0.jwt.JWT
+import com.auth0.jwt.JWTVerifier
+import com.auth0.jwt.algorithms.Algorithm
+import com.auth0.jwt.exceptions.JWTVerificationException
+import java.util.*
+import java.util.concurrent.TimeUnit
+import javax.inject.Singleton
+
+@Singleton
+class SimpleJwt<T>(jwtConfig: JwtConfig, private val mapper: JwtMapper<T>) {
+    private val validityInMs = TimeUnit.MILLISECONDS.convert(jwtConfig.validity, jwtConfig.timeUnit)
+    private val algorithm = Algorithm.HMAC256(jwtConfig.secret)
+    private val verifier: JWTVerifier = JWT.require(algorithm).build()
+
+    fun sign(value: T): String = JWT.create()
+        .apply { mapper.build(this, value) }
+        .withExpiresAt(getExpiration())
+        .sign(algorithm)
+
+    fun extract(token: String): T? = try {
+        val decodedJWT = verifier.verify(token)
+        mapper.extract(decodedJWT)
+    } catch (e: JWTVerificationException) {
+        null
+    } catch (e: IllegalArgumentException) {
+        null
+    }
+
+    private fun getExpiration() = Date(System.currentTimeMillis() + validityInMs)
+}

domain/src/usecases/HealthCheckService.kt

@@ -0,0 +1,13 @@
+package be.simplenotes.domain.usecases
+
+import be.simplenotes.persistence.DbHealthCheck
+import javax.inject.Singleton
+
+interface HealthCheckService {
+    fun isOk(): Boolean
+}
+
+@Singleton
+class HealthCheckServiceImpl(private val dbHealthCheck: DbHealthCheck) : HealthCheckService {
+    override fun isOk() = dbHealthCheck.isOk()
+}

domain/src/usecases/NoteService.kt

@@ -0,0 +1,115 @@
+package be.simplenotes.domain.usecases
+
+import arrow.core.computations.either
+import be.simplenotes.domain.security.HtmlSanitizer
+import be.simplenotes.domain.usecases.markdown.MarkdownConverter
+import be.simplenotes.domain.usecases.markdown.MarkdownParsingError
+import be.simplenotes.domain.usecases.search.parseSearchTerms
+import be.simplenotes.persistence.repositories.NoteRepository
+import be.simplenotes.persistence.repositories.UserRepository
+import be.simplenotes.persistence.transactions.TransactionService
+import be.simplenotes.search.NoteSearcher
+import be.simplenotes.types.LoggedInUser
+import be.simplenotes.types.Note
+import be.simplenotes.types.PersistedNote
+import be.simplenotes.types.PersistedNoteMetadata
+import java.util.*
+import javax.annotation.PostConstruct
+import javax.annotation.PreDestroy
+import javax.inject.Singleton
+
+@Singleton
+class NoteService(
+    private val markdownConverter: MarkdownConverter,
+    private val noteRepository: NoteRepository,
+    private val userRepository: UserRepository,
+    private val searcher: NoteSearcher,
+    private val htmlSanitizer: HtmlSanitizer,
+    private val transaction: TransactionService,
+) {
+
+    fun create(user: LoggedInUser, markdownText: String) = transaction.use {
+        either.eager<MarkdownParsingError, PersistedNote> {
+            val persistedNote = !markdownConverter.renderDocument(markdownText)
+                .map { it.copy(html = htmlSanitizer.sanitize(user, it.html)) }
+                .map { Note(it.metadata, markdown = markdownText, html = it.html) }
+                .map { noteRepository.create(user.userId, it) }
+
+            searcher.indexNote(user.userId, persistedNote)
+            persistedNote
+        }
+    }
+
+    fun update(
+        user: LoggedInUser,
+        uuid: UUID,
+        markdownText: String,
+    ) = transaction.use {
+        either.eager<MarkdownParsingError, PersistedNote?> {
+            val persistedNote = !markdownConverter.renderDocument(markdownText)
+                .map { it.copy(html = htmlSanitizer.sanitize(user, it.html)) }
+                .map { Note(it.metadata, markdown = markdownText, html = it.html) }
+                .map { noteRepository.update(user.userId, uuid, it) }
+
+            persistedNote?.let { searcher.updateIndex(user.userId, it) }
+            persistedNote
+        }
+    }
+
+    fun paginatedNotes(
+        userId: Int,
+        page: Int,
+        itemsPerPage: Int = 20,
+        tag: String? = null,
+        deleted: Boolean = false,
+    ): PaginatedNotes {
+        val count = noteRepository.count(userId, tag, deleted)
+        val offset = (page - 1) * itemsPerPage
+        val numberOfPages = (count / itemsPerPage) + 1
+        val notes = if (count == 0) emptyList() else noteRepository.findAll(userId, itemsPerPage, offset, tag, deleted)
+        return PaginatedNotes(numberOfPages, notes)
+    }
+
+    fun find(userId: Int, uuid: UUID) = noteRepository.find(userId, uuid)
+
+    fun trash(userId: Int, uuid: UUID): Boolean = transaction.use {
+        val res = noteRepository.delete(userId, uuid, permanent = false)
+        if (res) searcher.deleteIndex(userId, uuid)
+        res
+    }
+
+    fun restore(userId: Int, uuid: UUID): Boolean = transaction.use {
+        val res = noteRepository.restore(userId, uuid)
+        if (res) find(userId, uuid)?.let { note -> searcher.indexNote(userId, note) }
+        res
+    }
+
+    fun delete(userId: Int, uuid: UUID): Boolean = transaction.use {
+        val res = noteRepository.delete(userId, uuid, permanent = true)
+        if (res) searcher.deleteIndex(userId, uuid)
+        res
+    }
+
+    fun countDeleted(userId: Int) = noteRepository.count(userId, deleted = true)
+
+    @PostConstruct
+    fun indexAll() {
+        dropAllIndexes()
+        val userIds = userRepository.findAll()
+        userIds.forEach { id ->
+            val notes = noteRepository.findAllDetails(id)
+            searcher.indexNotes(id, notes)
+        }
+    }
+
+    fun search(userId: Int, searchInput: String) = searcher.search(userId, parseSearchTerms(searchInput))
+
+    @PreDestroy
+    fun dropAllIndexes() = searcher.dropAll()
+
+    fun makePublic(userId: Int, uuid: UUID) = transaction.use { noteRepository.makePublic(userId, uuid) }
+    fun makePrivate(userId: Int, uuid: UUID) = transaction.use { noteRepository.makePrivate(userId, uuid) }
+    fun findPublic(uuid: UUID) = noteRepository.findPublic(uuid)
+}
+
+data class PaginatedNotes(val pages: Int, val notes: List<PersistedNoteMetadata>)

domain/src/usecases/UserService.kt

@@ -4,7 +4,9 @@ import be.simplenotes.domain.usecases.export.ExportUseCase
 import be.simplenotes.domain.usecases.users.delete.DeleteUseCase
 import be.simplenotes.domain.usecases.users.login.LoginUseCase
 import be.simplenotes.domain.usecases.users.register.RegisterUseCase
+import javax.inject.Singleton
 
+@Singleton
 class UserService(
     loginUseCase: LoginUseCase,
     registerUseCase: RegisterUseCase,

domain/src/usecases/export/ExportUseCaseImpl.kt

@@ -1,7 +1,8 @@
 package be.simplenotes.domain.usecases.export
 
+import be.simplenotes.persistence.repositories.NoteRepository
 import be.simplenotes.types.ExportedNote
-import be.simplenotes.persistance.repositories.NoteRepository
+import io.micronaut.context.annotation.Primary
 import kotlinx.serialization.builtins.ListSerializer
 import kotlinx.serialization.json.Json
 import org.apache.commons.compress.archivers.zip.ZipArchiveEntry
@@ -9,8 +10,14 @@ import org.apache.commons.compress.archivers.zip.ZipArchiveOutputStream
 import java.io.ByteArrayInputStream
 import java.io.ByteArrayOutputStream
 import java.io.InputStream
+import javax.inject.Singleton
 
-internal class ExportUseCaseImpl(private val noteRepository: NoteRepository, private val json: Json) : ExportUseCase {
+@Primary
+@Singleton
+internal class ExportUseCaseImpl(
+    private val noteRepository: NoteRepository,
+    private val json: Json,
+) : ExportUseCase {
     override fun exportAsJson(userId: Int): String {
         val notes = noteRepository.export(userId)
         return json.encodeToString(ListSerializer(ExportedNote.serializer()), notes)
@@ -31,7 +38,6 @@ internal class ExportUseCaseImpl(private val noteRepository: NoteRepository, pri
     }
 }
 
-
 class ZipOutput : AutoCloseable {
     val outputStream = ByteArrayOutputStream()
     private val zipOutputStream = ZipArchiveOutputStream(outputStream)

domain/src/usecases/markdown/FlexmarkFactory.kt

@@ -0,0 +1,34 @@
+package be.simplenotes.domain.usecases.markdown
+
+import com.vladsch.flexmark.ext.gfm.tasklist.TaskListExtension
+import com.vladsch.flexmark.html.HtmlRenderer
+import com.vladsch.flexmark.parser.Parser
+import com.vladsch.flexmark.util.data.MutableDataSet
+import io.micronaut.context.annotation.Factory
+import javax.inject.Singleton
+
+@Factory
+class FlexmarkFactory {
+
+    @Singleton
+    fun parser(options: MutableDataSet) = Parser.builder(options).build()
+
+    @Singleton
+    fun htmlRenderer(options: MutableDataSet) = HtmlRenderer.builder(options).build()
+
+    @Singleton
+    fun options() = MutableDataSet().apply {
+        set(Parser.EXTENSIONS, listOf(TaskListExtension.create()))
+        set(TaskListExtension.TIGHT_ITEM_CLASS, "")
+        set(TaskListExtension.LOOSE_ITEM_CLASS, "")
+        set(
+            TaskListExtension.ITEM_DONE_MARKER,
+            """<input type="checkbox" checked="checked" disabled="disabled" readonly="readonly" />&nbsp;"""
+        )
+        set(
+            TaskListExtension.ITEM_NOT_DONE_MARKER,
+            """<input type="checkbox" disabled="disabled" readonly="readonly" />&nbsp;"""
+        )
+        set(HtmlRenderer.SOFT_BREAK, "<br>")
+    }
+}

domain/src/usecases/markdown/MarkdownConverter.kt

@@ -0,0 +1,16 @@
+package be.simplenotes.domain.usecases.markdown
+
+import arrow.core.Either
+import be.simplenotes.types.NoteMetadata
+import io.konform.validation.ValidationErrors
+
+sealed class MarkdownParsingError
+object MissingMeta : MarkdownParsingError()
+object InvalidMeta : MarkdownParsingError()
+class ValidationError(val validationErrors: ValidationErrors) : MarkdownParsingError()
+
+data class Document(val metadata: NoteMetadata, val html: String)
+
+interface MarkdownConverter {
+    fun renderDocument(input: String): Either<MarkdownParsingError, Document>
+}