From b601bdd79693b7fae04542c772a91db17b254f20 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Wed, 25 Jun 2025 14:08:37 +0200
Subject: [PATCH 01/34] updated tarball

---
 flake.nix  | 10 +++++-----
 stack.yaml |  4 ++++
 2 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/flake.nix b/flake.nix
index 8cec79d..d7222c2 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,7 +10,7 @@
     nixpkgs,
   }: let
     tarball = fetchTarball {
-      url = "https://git.stuce.ch/stuce/sTodo/releases/download/Release1/release1.tar.gz";
+      url = "https://git.stuce.ch/stuce/sTodo/releases/download/Release2/release2.tar.gz";
       sha256 = "10jyldwmcs5zyz1k8lp3jscn7nhlvn56g0709l5jp91qimw7xiqz";
     };
   in {
@@ -68,10 +68,10 @@
         environment.systemPackages = [pkgs.openssl];
         users.groups."sTodo".name = "sTodo";
         users.users."sTodo" = {
-                name = "sTodo";
-                isSystemUser = true;
-                group = "sTodo";
-                                                };
+          name = "sTodo";
+          isSystemUser = true;
+          group = "sTodo";
+        };
         systemd.services.sTodo.preStart = ''
           [ -f ${sessionKey} ] || {
             "${pkgs.openssl}/bin/openssl" rand 256 > ${sessionKey}
diff --git a/stack.yaml b/stack.yaml
index be7a8b4..3092e82 100644
--- a/stack.yaml
+++ b/stack.yaml
@@ -20,6 +20,10 @@
 snapshot:
   url: https://raw.githubusercontent.com/commercialhaskell/stackage-snapshots/master/lts/20/26.yaml
 
+nix:
+  enable: true
+  pure: false
+
 # User packages to be built.
 # Various formats can be used as shown in the example below.
 #

From c84fa67136162cef2d54246e5631842c2ebf8b03 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Wed, 25 Jun 2025 15:47:12 +0200
Subject: [PATCH 02/34] .

---
 flake.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/flake.nix b/flake.nix
index d7222c2..3896e0e 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
   }: let
     tarball = fetchTarball {
       url = "https://git.stuce.ch/stuce/sTodo/releases/download/Release2/release2.tar.gz";
-      sha256 = "10jyldwmcs5zyz1k8lp3jscn7nhlvn56g0709l5jp91qimw7xiqz";
+      sha256 = "10jyldwmcs5zyz1k8lp3jsdn7nhlvn56g0709l5jp91qimw7xiqz";
     };
   in {
     packages.x86_64-linux.sTodo = with nixpkgs.legacyPackages.x86_64-linux;
@@ -19,7 +19,8 @@
         pname = "sTodo";
         version = "1.0.0";
         src = tarball;
-        buildInputs = [zlib gmp libffi openssl];
+        buildInputs = [zlib gmp libffi];
+        nativeBuildInputs = [openssl];
         installPhase = ''
           mkdir -p $out/bin
           cp $src/sTodo $out/bin

From c259f6dc1ae8ac467adb08aaf96aad227340d1d2 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Wed, 25 Jun 2025 16:19:18 +0200
Subject: [PATCH 03/34] fixed link

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 3896e0e..7756549 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,7 +10,7 @@
     nixpkgs,
   }: let
     tarball = fetchTarball {
-      url = "https://git.stuce.ch/stuce/sTodo/releases/download/Release2/release2.tar.gz";
+      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r2/release2.tar.gz";
       sha256 = "10jyldwmcs5zyz1k8lp3jsdn7nhlvn56g0709l5jp91qimw7xiqz";
     };
   in {

From e2c414f1085dd89a2de40f552769b3fd526dbf4c Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Wed, 25 Jun 2025 16:26:04 +0200
Subject: [PATCH 04/34] fixed sha

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 7756549..243cf0c 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
   }: let
     tarball = fetchTarball {
       url = "https://git.stuce.ch/stuce/sTodo/releases/download/r2/release2.tar.gz";
-      sha256 = "10jyldwmcs5zyz1k8lp3jsdn7nhlvn56g0709l5jp91qimw7xiqz";
+      sha256 = "11mmq60w5da42mzlckizbrgnpzzj8a8jz69ap5k86zh6a536v456";
     };
   in {
     packages.x86_64-linux.sTodo = with nixpkgs.legacyPackages.x86_64-linux;

From 596c830febb89494d1a4119f4166e3ce775fa566 Mon Sep 17 00:00:00 2001
From: stuce <lefabricesaucy@outlook.com>
Date: Wed, 25 Jun 2025 17:03:58 +0200
Subject: [PATCH 05/34] Update README.md

tested, it works
---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index aacc35a..4840165 100644
--- a/README.md
+++ b/README.md
@@ -3,7 +3,7 @@ Stuce's simple todo is a web app that let's you self host a simple todolist.
 The goal is to provide a minimalistic and fast todo list that is self hostable.
 ## Next goals
 - Make multi user support
-	- [ ] Get user by trusted header
+	- [x] Get user by trusted header
 	- [ ] Add option to enable single user (usefull for vpn single user easy setup)
 	- [ ] Add menu to add other users to the group
 	- [ ] make the code more readable by renaming/moving the handlers better

From ee6d6de2124b52525da2d1324e266e3001e728dc Mon Sep 17 00:00:00 2001
From: stuce <lefabricesaucy@outlook.com>
Date: Wed, 25 Jun 2025 17:05:46 +0200
Subject: [PATCH 06/34] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 4840165..7579f1c 100644
--- a/README.md
+++ b/README.md
@@ -10,7 +10,7 @@ The goal is to provide a minimalistic and fast todo list that is self hostable.
 	- [ ] write a minimal step by step guide to install with nix,
 	- [ ] add some css to make it look nicer
 	- [ ] add htmx to make more agreable without making js manadatory
-## Version 1.0.0
+## Version 0.0.0
 Simple todo list for **single user only** at the moment.
 Features :
 	- add and delete (and soon share) groups that contain a list of todolists

From 81ca02948bf357f98bede859e45d5e5cd975ec24 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Wed, 25 Jun 2025 17:03:00 +0100
Subject: [PATCH 07/34] qol improvements

---
 config/routes.yesodroutes |  3 ++
 src/Handler/TodoEntry.hs  | 77 +++++++++++++++++++++++++++------------
 2 files changed, 56 insertions(+), 24 deletions(-)

diff --git a/config/routes.yesodroutes b/config/routes.yesodroutes
index 9413671..86f2549 100644
--- a/config/routes.yesodroutes
+++ b/config/routes.yesodroutes
@@ -16,8 +16,11 @@
 
 /check/group/#GroupId/todolist/#TodolistId/#TodolistItemId CheckTodolistItemR POST
 /edit/group/#GroupId/todolist/#TodolistId EditTodolistItemsR GET POST
+/sort/group/#GroupId/todolist/#TodolistId SortTodolistItemsR POST
+/trim/group/#GroupId/todolist/#TodolistId TrimTodolistItemsR POST
 
 /edit/group/#GroupId EditTodolistR GET POST
+/adduser/group/#GroupId AddUserR POST
 /edit EditGroupR GET POST
 
 /delete DeleteGroupR POST
diff --git a/src/Handler/TodoEntry.hs b/src/Handler/TodoEntry.hs
index b49ac60..11f7fb2 100644
--- a/src/Handler/TodoEntry.hs
+++ b/src/Handler/TodoEntry.hs
@@ -12,6 +12,7 @@ module Handler.TodoEntry where
 import Import
 import Text.Read
 import Database.Persist.Sql (rawExecute, fromSqlKey, toSqlKey)
+import GHC.RTS.Flags (TraceFlags(user))
 -- TODO: move this back to another handler
 getHomeR :: Handler Html
 getHomeR = do
@@ -71,12 +72,21 @@ getTodolistR groupId = do
                 $maybe token <- mToken
                     <input type="hidden" name="_token" value="#{token}">
                 <button type="submit">add
+            <form action=@{AddUserR groupId} method="post">
+                <input type="text" name="user" placeholder="new user">
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type="submit">share
             <a href=@{EditTodolistR groupId}>Edit
         |]
 
 getTodolistItemsR :: GroupId -> TodolistId -> Handler Html
 getTodolistItemsR groupId todolistId = do
-    items <- dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [])
+    mSortOption <- lookupSession "sort"
+    items <- case mSortOption of
+        (Just "value") -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Desc TodolistItemValue, Asc TodolistItemId])
+        _ -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Asc TodolistItemId])
+
     mToken <- fmap reqToken getRequest
     defaultLayout $ do
         setTitle "items"
@@ -97,7 +107,15 @@ getTodolistItemsR groupId todolistId = do
                 $maybe token <- mToken
                     <input type="hidden" name="_token" value="#{token}">
                 <button type="submit">add
-            <a href=@{EditTodolistItemsR groupId todolistId}>Edit list
+            <form action=@{TrimTodolistItemsR groupId todolistId} method="post">
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type="submit">trim
+            <form action=@{SortTodolistItemsR groupId todolistId} method="post">
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type="submit">sort
+            <a href=@{EditTodolistItemsR groupId todolistId}>Edit
         |]
 
 
@@ -132,11 +150,14 @@ getEditTodolistItemsR groupId todolistId = do
         |]
 postEditTodolistItemsR :: GroupId -> TodolistId -> Handler Html
 postEditTodolistItemsR groupId todolistId = do
-    text <- runInputPost $ ireq textField "text"
-    let xs = getItems text todolistId
+    mText <- runInputPost $ iopt textField "text"
+    let xs = case mText of 
+            (Just text) -> getItems text todolistId
+            Nothing -> []
     dbIfAuth groupId (do
         deleteWhere [TodolistItemTodolistId ==. todolistId]
         insertMany_ xs)
+        
     redirect $ TodolistItemsR groupId todolistId
 
 getEditTodolistR :: GroupId -> Handler Html
@@ -206,10 +227,15 @@ postDeleteGroupR = do
     text <- lookupPostParams "ids"
     let ints = map (read . unpack) text :: [Int64]
     let ids = map toSqlKey ints :: [GroupId]
-    -- TODO: make sure the user has access to it aswell (this only works now for single user)
+    -- TODO: make sure the user has access to it aswell (this only works now for single user), and handle group owned by many
     runDB $ deleteWhere [GroupId <-. ids]
     redirect EditGroupR
 
+postAddUserR :: GroupId -> Handler Html
+postAddUserR groupId= do
+    -- DB action
+    redirect $ TodolistR groupId
+
 getText :: Entity TodolistItem -> Text
 getText item =
                 if value then "[x] " <> name
@@ -231,29 +257,32 @@ getItems text todolistId = map read (lines text)
                                         "" -> error "empty name"
                                         something -> filter (/= '\r') something
                         TodolistItem todolistId value name
+
+postTrimTodolistItemsR :: GroupId -> TodolistId -> Handler Html
+postTrimTodolistItemsR groupId todolistId = do
+        dbIfAuth groupId  (deleteWhere [TodolistItemTodolistId ==. todolistId, TodolistItemValue ==. True])
+        redirect $ TodolistItemsR groupId todolistId
+postSortTodolistItemsR :: GroupId -> TodolistId -> Handler Html
+postSortTodolistItemsR  groupId todolistId = do
+    mSession <- lookupSession "sort"
+    case mSession of
+        (Just "value") -> setSession "sort" "id"
+        _ -> setSession "sort" "value"
+    redirect $ TodolistItemsR groupId todolistId
+
 -- TODO: complete implementation should short circuit if multi user is on but no user exist
-
-
--- getUserId :: Handler (Key User)
--- getUserId = do
---         mUser <- runDB $ getBy $ UniqueName "Stuce"
---         case mUser of
---             Nothing -> runDB $ insert $ User "Stuce"
---             Just u -> return $ entityKey u
-
--- TODO: use yesodAuth and clean this mess
-getUserId :: Handler (Key User)
+getUserId :: HandlerFor App (Key User)
 getUserId = do
     mName <- lookupHeader "Remote-User"
-    case mName of
-            -- TODO: if this temporary solution stays, we need here a way to use authDummy somehow in developpement
-            Nothing -> permissionDenied "no trusted header found !"
-            Just name -> do
-                mUser <- runDB $ getBy $ UniqueName (decodeUtf8 name)
-                case mUser of
-                    Nothing -> runDB $ insert $ User (decodeUtf8 name)
-                    Just u -> return $ entityKey u
+    mUser <- case mName of
+            -- TODO: make remote user an argument to make it usable not only with authelia, and maybe do a check for good mesure when nothing is found ?
+            Just name -> runDB $ insertBy $ User (decodeUtf8 name)
+            Nothing -> runDB $ insertBy $ User "single-user"
+    case mUser of
+        Left (Entity userId _) -> return userId
+        Right userId -> return userId
 
+dbIfAuth :: GroupId -> ReaderT SqlBackend (HandlerFor App) b -> HandlerFor App b
 dbIfAuth groupId action = do
     -- TODO: decide if we prefer fast (rawSql) or safe (type safe persist query) after in production latency tests
     -- TODO: optimize the persist implementation anyway

From ee514454f7d291194c1764e711648f68bf5fb664 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 09:53:56 +0100
Subject: [PATCH 08/34] added group sharing

---
 config/models.persistentmodels |  1 -
 src/Handler/TodoEntry.hs       | 31 ++++++++++++++++++++-----------
 2 files changed, 20 insertions(+), 12 deletions(-)

diff --git a/config/models.persistentmodels b/config/models.persistentmodels
index b2a31b7..bb9d354 100644
--- a/config/models.persistentmodels
+++ b/config/models.persistentmodels
@@ -16,5 +16,4 @@ Group
     group Text
 GroupUser
     user UserId
-    group Text
     groupId GroupId OnDeleteCascade
\ No newline at end of file
diff --git a/src/Handler/TodoEntry.hs b/src/Handler/TodoEntry.hs
index 11f7fb2..b7a747b 100644
--- a/src/Handler/TodoEntry.hs
+++ b/src/Handler/TodoEntry.hs
@@ -11,14 +11,12 @@ module Handler.TodoEntry where
 
 import Import
 import Text.Read
-import Database.Persist.Sql (rawExecute, fromSqlKey, toSqlKey)
-import GHC.RTS.Flags (TraceFlags(user))
+import Database.Persist.Sql (rawExecute, fromSqlKey, toSqlKey, rawSql)
 -- TODO: move this back to another handler
 getHomeR :: Handler Html
 getHomeR = do
-    user <- getUserId
-    groups <- runDB $ do
-        selectList [GroupUserUser ==. user] [Asc GroupUserGroup]
+    userId <- getUserId
+    groups <- getGroups userId
     mToken <- fmap reqToken getRequest
     defaultLayout $ do
         setTitle "Groups"
@@ -27,7 +25,7 @@ getHomeR = do
             <ul>
                 $forall group <- groups
                     <li>
-                        <a href=@{TodolistR $ (groupUserGroupId . entityVal) group}>#{(groupUserGroup . entityVal) group}
+                        <a href=@{TodolistR $ entityKey group}>#{(groupGroup . entityVal) group}
             <form action=@{AddGroupR} method="post">
                 <input type="text" name="group" placeholder="new group">
                 $maybe token <- mToken
@@ -43,7 +41,7 @@ postAddGroupR = do
     user <- getUserId
     _ <- runDB $ do
         gId <- insert $ Group g
-        success <- insertUnique $ GroupUser user g gId
+        success <- insertUnique $ GroupUser user gId
         when (isNothing success) $ delete gId
     redirect HomeR
 postAddTodolistR :: GroupId -> Handler Html
@@ -193,8 +191,7 @@ postEditTodolistR groupId = error "not done yet"
 getEditGroupR :: Handler Html
 getEditGroupR = do
     userId <- getUserId
-    groups <- runDB $ do
-        selectList [GroupUserUser ==. userId] [Asc GroupUserGroup]
+    groups <- getGroups userId
     mToken <- fmap reqToken getRequest
     defaultLayout $ do
         let a e = pack $ show $ fromSqlKey $ entityKey e ::Text
@@ -205,7 +202,7 @@ getEditGroupR = do
                     $forall group <- groups
                         <li>
                             <input type="checkbox" name="ids" value="#{a group}">
-                            <a href="">#{(groupUserGroup . entityVal) group}
+                            <a href="">#{(groupGroup . entityVal) group}
                 $maybe token <- mToken
                     <input type="hidden" name="_token" value="#{token}">
                 <button type=submit>Delete selected 
@@ -233,7 +230,14 @@ postDeleteGroupR = do
 
 postAddUserR :: GroupId -> Handler Html
 postAddUserR groupId= do
-    -- DB action
+    user <- runInputPost $ ireq textField "user"
+    _ <- dbIfAuth groupId (do
+        mUserId <- getBy $ UniqueName user
+        case mUserId of
+            Nothing -> --handle error
+                redirect $ TodolistR groupId
+            Just userId -> insert $ GroupUser (entityKey userId) groupId
+        )
     redirect $ TodolistR groupId
 
 getText :: Entity TodolistItem -> Text
@@ -270,6 +274,11 @@ postSortTodolistItemsR  groupId todolistId = do
         _ -> setSession "sort" "value"
     redirect $ TodolistItemsR groupId todolistId
 
+getGroups :: Key User -> Handler [Entity Group]
+getGroups userId =
+    let sql = "SELECT ?? FROM \"group\" JOIN group_user gu ON \"group\".id = gu.group_id WHERE gu.user = ?" in
+    runDB $ rawSql sql [toPersistValue userId]
+
 -- TODO: complete implementation should short circuit if multi user is on but no user exist
 getUserId :: HandlerFor App (Key User)
 getUserId = do

From d31a3d6330337b5b65e8ec6c00d5cb49dfba0ee7 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:22:33 +0200
Subject: [PATCH 09/34] updated for r3

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 243cf0c..123ab61 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
   }: let
     tarball = fetchTarball {
       url = "https://git.stuce.ch/stuce/sTodo/releases/download/r2/release2.tar.gz";
-      sha256 = "11mmq60w5da42mzlckizbrgnpzzj8a8jz69ap5k86zh6a536v456";
+      sha256 = "1h72drqsk690d5i53czpzgs4761wydk49cvz6fq0hgc3q3z214ha";
     };
   in {
     packages.x86_64-linux.sTodo = with nixpkgs.legacyPackages.x86_64-linux;

From e51fac7b6a1b3c1d910218a533fb2b22b74d9921 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:23:00 +0200
Subject: [PATCH 10/34] updated for r3

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 123ab61..8cc4ad4 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,7 +10,7 @@
     nixpkgs,
   }: let
     tarball = fetchTarball {
-      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r2/release2.tar.gz";
+      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release2.tar.gz";
       sha256 = "1h72drqsk690d5i53czpzgs4761wydk49cvz6fq0hgc3q3z214ha";
     };
   in {

From 71d1e9bc342753256e27a9977420df89f576281a Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:30:19 +0200
Subject: [PATCH 11/34] fix small mistake

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 8cc4ad4..bed5a5e 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,7 +10,7 @@
     nixpkgs,
   }: let
     tarball = fetchTarball {
-      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release2.tar.gz";
+      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release3.tar.gz";
       sha256 = "1h72drqsk690d5i53czpzgs4761wydk49cvz6fq0hgc3q3z214ha";
     };
   in {

From 90ef6829e9fa52de303f8447d981b59fe1f67467 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:31:28 +0200
Subject: [PATCH 12/34] fix small mistake

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index bed5a5e..4c0079b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
   }: let
     tarball = fetchTarball {
       url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release3.tar.gz";
-      sha256 = "1h72drqsk690d5i53czpzgs4761wydk49cvz6fq0hgc3q3z214ha";
+      sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv7v";
     };
   in {
     packages.x86_64-linux.sTodo = with nixpkgs.legacyPackages.x86_64-linux;

From 62bf6f5933159a6bf1beb50f153bb80444a598e2 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:37:07 +0200
Subject: [PATCH 13/34] update flake

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 4c0079b..d63bdf0 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
   }: let
     tarball = fetchTarball {
       url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release3.tar.gz";
-      sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv7v";
+      sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv7f";
     };
   in {
     packages.x86_64-linux.sTodo = with nixpkgs.legacyPackages.x86_64-linux;

From 8b618bfdbb14fedf035fac26de71a3be7e32909d Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:39:36 +0200
Subject: [PATCH 14/34] .

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index d63bdf0..4c0079b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
   }: let
     tarball = fetchTarball {
       url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release3.tar.gz";
-      sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv7f";
+      sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv7v";
     };
   in {
     packages.x86_64-linux.sTodo = with nixpkgs.legacyPackages.x86_64-linux;

From 3ed15bae8787e6c9e9749c27e46bf22edd99cfc9 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:41:02 +0200
Subject: [PATCH 15/34] .

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 4c0079b..5c21143 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
   }: let
     tarball = fetchTarball {
       url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release3.tar.gz";
-      sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv7v";
+      sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv4v";
     };
   in {
     packages.x86_64-linux.sTodo = with nixpkgs.legacyPackages.x86_64-linux;

From 255103af130917050fcf95585067030aff75926d Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:42:13 +0200
Subject: [PATCH 16/34] .

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 5c21143..313b6d2 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,7 +10,7 @@
     nixpkgs,
   }: let
     tarball = fetchTarball {
-      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release3.tar.gz";
+      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r33/release3.tar.gz";
       sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv4v";
     };
   in {

From 4984a836b4c26c6430771546a36a51813447583b Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:42:50 +0200
Subject: [PATCH 17/34] .

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 313b6d2..5c21143 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,7 +10,7 @@
     nixpkgs,
   }: let
     tarball = fetchTarball {
-      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r33/release3.tar.gz";
+      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release3.tar.gz";
       sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv4v";
     };
   in {

From ddda1e7566d5a83ee66bb6ff60e371643467a3cc Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:48:14 +0200
Subject: [PATCH 18/34] .

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 5c21143..e2f9eca 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
   }: let
     tarball = fetchTarball {
       url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release3.tar.gz";
-      sha256 = "1fr0sr7l6f19g215gh0kgyhnncf4607ydq0cg49psw1yyvx1iv4v";
+      sha256 = "1fr0sr7l6f19g215gh0kgyhndcf4607ydq0cg49psw1yyvx1iv4v";
     };
   in {
     packages.x86_64-linux.sTodo = with nixpkgs.legacyPackages.x86_64-linux;

From 842b6c89368dc7b77d78bfb2553767be99816948 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:49:15 +0200
Subject: [PATCH 19/34] .

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index e2f9eca..93b11d1 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,7 +10,7 @@
     nixpkgs,
   }: let
     tarball = fetchTarball {
-      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/release3.tar.gz";
+      url = "https://git.stuce.ch/stuce/sTodo/releases/download/re3/release3.tar.gz";
       sha256 = "1fr0sr7l6f19g215gh0kgyhndcf4607ydq0cg49psw1yyvx1iv4v";
     };
   in {

From f058168db9dd26054de9132887a1e62a150e39c6 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 12:50:33 +0200
Subject: [PATCH 20/34] .

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 93b11d1..a0db889 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,7 +10,7 @@
     nixpkgs,
   }: let
     tarball = fetchTarball {
-      url = "https://git.stuce.ch/stuce/sTodo/releases/download/re3/release3.tar.gz";
+      url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/r3.tar.gz";
       sha256 = "1fr0sr7l6f19g215gh0kgyhndcf4607ydq0cg49psw1yyvx1iv4v";
     };
   in {

From 2bd43b0df57a62bbb72e427c7c51319bb323b19e Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 13:00:28 +0200
Subject: [PATCH 21/34] .

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index a0db889..1953a62 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,7 +11,7 @@
   }: let
     tarball = fetchTarball {
       url = "https://git.stuce.ch/stuce/sTodo/releases/download/r3/r3.tar.gz";
-      sha256 = "1fr0sr7l6f19g215gh0kgyhndcf4607ydq0cg49psw1yyvx1iv4v";
+      sha256 = "1imgbbgbgx2r8qr90mpxlwfy9hcfpdz0sa4nir05jhqx8q1rl0y1";
     };
   in {
     packages.x86_64-linux.sTodo = with nixpkgs.legacyPackages.x86_64-linux;

From 1c395150e05c4aacb0afda899324a8d08bbfc42c Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 13:07:29 +0200
Subject: [PATCH 22/34] fixed permissions

---
 flake.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/flake.nix b/flake.nix
index 1953a62..5ca0add 100644
--- a/flake.nix
+++ b/flake.nix
@@ -24,6 +24,7 @@
         installPhase = ''
           mkdir -p $out/bin
           cp $src/sTodo $out/bin
+          chmod go+x $out/bin/sTodo
         '';
         mainProgram = "sTodo";
       };

From 1b591f05d8e3393513cf53a7f3a769f5d97eac51 Mon Sep 17 00:00:00 2001
From: stuce-bot <lefabricesaucy@outlook.com>
Date: Thu, 26 Jun 2025 13:11:57 +0200
Subject: [PATCH 23/34] fixed permissions

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 5ca0add..d5dd9c9 100644
--- a/flake.nix
+++ b/flake.nix
@@ -24,7 +24,7 @@
         installPhase = ''
           mkdir -p $out/bin
           cp $src/sTodo $out/bin
-          chmod go+x $out/bin/sTodo
+          chmod ugo+x $out/bin/sTodo
         '';
         mainProgram = "sTodo";
       };

From 3511f257e617795a852e00f3e95bc37e8351646d Mon Sep 17 00:00:00 2001
From: stuce <lefabricesaucy@outlook.com>
Date: Fri, 27 Jun 2025 13:43:56 +0200
Subject: [PATCH 24/34] Update README.md

---
 README.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 7579f1c..540f08f 100644
--- a/README.md
+++ b/README.md
@@ -4,8 +4,7 @@ The goal is to provide a minimalistic and fast todo list that is self hostable.
 ## Next goals
 - Make multi user support
 	- [x] Get user by trusted header
-	- [ ] Add option to enable single user (usefull for vpn single user easy setup)
-	- [ ] Add menu to add other users to the group
+	- [x] Add menu to add other users to the group
 	- [ ] make the code more readable by renaming/moving the handlers better
 	- [ ] write a minimal step by step guide to install with nix,
 	- [ ] add some css to make it look nicer

From 2353d2fdc9cf4162b7a740cd2b0b2dd6552509a9 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Wed, 2 Jul 2025 16:54:52 +0100
Subject: [PATCH 25/34] refactor to make it easier to navigate

---
 config/routes.yesodroutes   |   2 +-
 src/Application.hs          |   4 +-
 src/Foundation.hs           |  22 +++
 src/Handler/Group.hs        |  88 +++++++++++
 src/Handler/TodoEntry.hs    | 301 ------------------------------------
 src/Handler/Todolist.hs     |  89 +++++++++++
 src/Handler/TodolistItem.hs | 127 +++++++++++++++
 7 files changed, 330 insertions(+), 303 deletions(-)
 create mode 100644 src/Handler/Group.hs
 delete mode 100644 src/Handler/TodoEntry.hs
 create mode 100644 src/Handler/Todolist.hs
 create mode 100644 src/Handler/TodolistItem.hs

diff --git a/config/routes.yesodroutes b/config/routes.yesodroutes
index 86f2549..9d7e398 100644
--- a/config/routes.yesodroutes
+++ b/config/routes.yesodroutes
@@ -6,7 +6,7 @@
 /favicon.ico FaviconR GET
 /robots.txt RobotsR GET
 
-/ HomeR GET
+/ GroupR GET
 /group/#GroupId TodolistR GET
 
 /add AddGroupR POST 
diff --git a/src/Application.hs b/src/Application.hs
index 667b72d..fd6e107 100644
--- a/src/Application.hs
+++ b/src/Application.hs
@@ -44,7 +44,9 @@ import System.Log.FastLogger                (defaultBufSize, newStdoutLoggerSet,
 -- Import all relevant handler modules here.
 -- Don't forget to add new modules to your cabal file!
 import Handler.Common
-import Handler.TodoEntry
+import Handler.Group
+import Handler.Todolist
+import Handler.TodolistItem
 
 -- This line actually creates our YesodDispatch instance. It is the second half
 -- of the call to mkYesodData which occurs in Foundation.hs. Please see the
diff --git a/src/Foundation.hs b/src/Foundation.hs
index 2c365fe..ffb4191 100644
--- a/src/Foundation.hs
+++ b/src/Foundation.hs
@@ -191,3 +191,25 @@ unsafeHandler = Unsafe.fakeHandlerGetLogger appLogger
 -- https://github.com/yesodweb/yesod/wiki/Sending-email
 -- https://github.com/yesodweb/yesod/wiki/Serve-static-files-from-a-separate-domain
 -- https://github.com/yesodweb/yesod/wiki/i18n-messages-in-the-scaffolding
+
+
+-- TODO: complete implementation should short circuit if multi user is on but no user exist
+getUserId :: HandlerFor App (Key User)
+getUserId = do
+    mName <- lookupHeader "Remote-User"
+    mUser <- case mName of
+            -- TODO: make remote user an argument to make it usable not only with authelia, and maybe do a check for good mesure when nothing is found ?
+            Just name -> runDB $ insertBy $ User (decodeUtf8 name)
+            Nothing -> runDB $ insertBy $ User "single-user"
+    case mUser of
+        Left (Entity userId _) -> return userId
+        Right userId -> return userId
+
+dbIfAuth :: GroupId -> ReaderT SqlBackend (HandlerFor App) b -> HandlerFor App b
+dbIfAuth groupId action = do
+    -- TODO: decide if we prefer fast (rawSql) or safe (type safe persist query) after in production latency tests
+    -- TODO: optimize the persist implementation anyway
+    user <- getUserId
+    result <- runDB $ selectFirst [GroupUserUser ==. user, GroupUserGroupId ==. groupId] []
+    if isNothing result then permissionDenied "you are not logged in or you dont have access to this group"
+    else runDB action
\ No newline at end of file
diff --git a/src/Handler/Group.hs b/src/Handler/Group.hs
new file mode 100644
index 0000000..c2f4bb5
--- /dev/null
+++ b/src/Handler/Group.hs
@@ -0,0 +1,88 @@
+{-# LANGUAGE NoImplicitPrelude #-}
+{-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE MultiParamTypeClasses #-}
+{-# LANGUAGE TypeFamilies #-}
+{-# LANGUAGE TemplateHaskell #-}
+{-# LANGUAGE QuasiQuotes #-}
+{-# LANGUAGE FlexibleContexts #-}
+{-# OPTIONS_GHC -Wno-unrecognised-pragmas #-}
+{-# HLINT ignore "Replace case with fromMaybe" #-}
+module Handler.Group where
+
+import Import
+import Text.Read
+import Database.Persist.Sql (fromSqlKey, toSqlKey, rawSql)
+getGroupR :: Handler Html
+getGroupR = do
+    userId <- getUserId
+    groups <- getGroups userId
+    mToken <- fmap reqToken getRequest
+    defaultLayout $ do
+        setTitle "Groups"
+        [whamlet|
+            <a href=@{GroupR}>Home
+            <ul>
+                $forall group <- groups
+                    <li>
+                        <a href=@{TodolistR $ entityKey group}>#{(groupGroup . entityVal) group}
+            <form action=@{AddGroupR} method="post">
+                <input type="text" name="group" placeholder="new group">
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type="submit">add
+            <a href=@{EditGroupR}>Edit
+        |]
+
+postAddGroupR :: Handler Html
+postAddGroupR = do
+    g <- runInputPost $ ireq textField "group"
+    -- TODO: in a newer version, put insertUnique_
+    user <- getUserId
+    _ <- runDB $ do
+        gId <- insert $ Group g
+        success <- insertUnique $ GroupUser user gId
+        when (isNothing success) $ delete gId
+    redirect GroupR
+
+getEditGroupR :: Handler Html
+getEditGroupR = do
+    userId <- getUserId
+    groups <- getGroups userId
+    mToken <- fmap reqToken getRequest
+    defaultLayout $ do
+        let a e = pack $ show $ fromSqlKey $ entityKey e ::Text
+        setTitle "Groups"
+        [whamlet|
+            <form action=@{DeleteGroupR} method="POST">
+                <ul>
+                    $forall group <- groups
+                        <li>
+                            <input type="checkbox" name="ids" value="#{a group}">
+                            <a href="">#{(groupGroup . entityVal) group}
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type=submit>Delete selected 
+            <a href=@{GroupR}>Back
+        |]
+postEditGroupR :: Handler Html
+postEditGroupR = do
+    -- TODO: not implemented yet
+    -- title <- runInputPost $ ireq textField "title"
+    -- users <- runInputPost $ ireq textField "users"
+    -- id <- runInputPost $ ireq intField "id"
+    -- let key = toSqlKey id
+    -- runDB $ update key [GroupGroup =. title]
+    redirect EditGroupR
+postDeleteGroupR :: Handler Html
+postDeleteGroupR = do
+    text <- lookupPostParams "ids"
+    let ints = map (read . unpack) text :: [Int64]
+    let ids = map toSqlKey ints :: [GroupId]
+    -- TODO: make sure the user has access to it aswell (this only works now for single user), and handle group owned by many
+    runDB $ deleteWhere [GroupId <-. ids]
+    redirect EditGroupR
+
+getGroups :: Key User -> Handler [Entity Group]
+getGroups userId =
+    let sql = "SELECT ?? FROM \"group\" JOIN group_user gu ON \"group\".id = gu.group_id WHERE gu.user = ?" in
+    runDB $ rawSql sql [toPersistValue userId]
\ No newline at end of file
diff --git a/src/Handler/TodoEntry.hs b/src/Handler/TodoEntry.hs
deleted file mode 100644
index b7a747b..0000000
--- a/src/Handler/TodoEntry.hs
+++ /dev/null
@@ -1,301 +0,0 @@
-{-# LANGUAGE NoImplicitPrelude #-}
-{-# LANGUAGE OverloadedStrings #-}
-{-# LANGUAGE MultiParamTypeClasses #-}
-{-# LANGUAGE TypeFamilies #-}
-{-# LANGUAGE TemplateHaskell #-}
-{-# LANGUAGE QuasiQuotes #-}
-{-# LANGUAGE FlexibleContexts #-}
-{-# OPTIONS_GHC -Wno-unrecognised-pragmas #-}
-{-# HLINT ignore "Replace case with fromMaybe" #-}
-module Handler.TodoEntry where
-
-import Import
-import Text.Read
-import Database.Persist.Sql (rawExecute, fromSqlKey, toSqlKey, rawSql)
--- TODO: move this back to another handler
-getHomeR :: Handler Html
-getHomeR = do
-    userId <- getUserId
-    groups <- getGroups userId
-    mToken <- fmap reqToken getRequest
-    defaultLayout $ do
-        setTitle "Groups"
-        [whamlet|
-            <a href=@{HomeR}>Home
-            <ul>
-                $forall group <- groups
-                    <li>
-                        <a href=@{TodolistR $ entityKey group}>#{(groupGroup . entityVal) group}
-            <form action=@{AddGroupR} method="post">
-                <input type="text" name="group" placeholder="new group">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
-                <button type="submit">add
-            <a href=@{EditGroupR}>Edit
-        |]
-
-postAddGroupR :: Handler Html
-postAddGroupR = do
-    g <- runInputPost $ ireq textField "group"
-    -- TODO: in a newer version, put insertUnique_
-    user <- getUserId
-    _ <- runDB $ do
-        gId <- insert $ Group g
-        success <- insertUnique $ GroupUser user gId
-        when (isNothing success) $ delete gId
-    redirect HomeR
-postAddTodolistR :: GroupId -> Handler Html
-postAddTodolistR groupId = do
-        list <- runInputPost $ ireq textField "list"
-        -- TODO: in a newer version, put insertUnique_
-        _ <- dbIfAuth groupId (insertUnique $ Todolist groupId list)
-        redirect $ TodolistR groupId
-
--- TODO: move this to a new handler file
-getTodolistR :: GroupId -> Handler Html
-getTodolistR groupId = do
-    lists <- dbIfAuth groupId (selectList [TodolistGroupId ==. groupId] [])
-    mToken <- fmap reqToken getRequest
-    defaultLayout $ do
-        let getTitle = todolistTitle . entityVal
-        setTitle "todolist"
-        [whamlet|
-            <a href=@{HomeR}>Home
-            <ul>
-                    $forall list <- lists
-                        <li>
-                            <a href=@{TodolistItemsR groupId (entityKey list)}>#{getTitle list}
-            <form action=@{AddTodolistR groupId} method="post">
-                <input type="text" name="list" placeholder="new list">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
-                <button type="submit">add
-            <form action=@{AddUserR groupId} method="post">
-                <input type="text" name="user" placeholder="new user">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
-                <button type="submit">share
-            <a href=@{EditTodolistR groupId}>Edit
-        |]
-
-getTodolistItemsR :: GroupId -> TodolistId -> Handler Html
-getTodolistItemsR groupId todolistId = do
-    mSortOption <- lookupSession "sort"
-    items <- case mSortOption of
-        (Just "value") -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Desc TodolistItemValue, Asc TodolistItemId])
-        _ -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Asc TodolistItemId])
-
-    mToken <- fmap reqToken getRequest
-    defaultLayout $ do
-        setTitle "items"
-        [whamlet|
-            <a href=@{HomeR}>Home
-            &nbsp;
-            <a href=@{TodolistR groupId}>Lists
-            <ul>
-                $forall item <- items
-                    <li>
-                        <form action=@{CheckTodolistItemR groupId todolistId (entityKey item)} method="POST">
-                             $maybe token <- mToken
-                                 <input type="hidden" name="_token" value="#{token}">
-                             <button type="submit">#{getText item}
-                            <form action=@{AddTodolistItemR groupId todolistId} method="post">
-            <form action=@{AddTodolistItemR groupId todolistId} method="post">
-                <input type="text" name="item" placeholder="new item">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
-                <button type="submit">add
-            <form action=@{TrimTodolistItemsR groupId todolistId} method="post">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
-                <button type="submit">trim
-            <form action=@{SortTodolistItemsR groupId todolistId} method="post">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
-                <button type="submit">sort
-            <a href=@{EditTodolistItemsR groupId todolistId}>Edit
-        |]
-
-
-postCheckTodolistItemR :: GroupId -> TodolistId -> TodolistItemId -> Handler Html
-postCheckTodolistItemR groupId todolistId todolistItemId = do
-    dbIfAuth groupId  (rawExecute "UPDATE todolist_item SET value = NOT value WHERE id = ?" [toPersistValue todolistItemId])
-    redirect $ TodolistItemsR groupId todolistId
-
-
-postAddTodolistItemR :: GroupId -> TodolistId -> Handler Html
-postAddTodolistItemR groupId todolistId = do
-    item <- runInputPost $ ireq textField "item"
-    _ <- dbIfAuth groupId (insert_ $ TodolistItem todolistId False item)
-    redirect $ TodolistItemsR groupId todolistId
-
-getEditTodolistItemsR :: GroupId -> TodolistId -> Handler Html
-getEditTodolistItemsR groupId todolistId = do
-    items <- dbIfAuth groupId (selectList [TodolistItemTodolistId ==. todolistId] [])
-    mToken <- fmap reqToken getRequest
-    let text = unlines $ map getText items
-    defaultLayout $ do
-        setTitle "edit"
-        [whamlet|
-            <form action=@{EditTodolistItemsR groupId todolistId} method=POST>
-                <label for="edit text area">Edit todolist
-                <br>
-                <textarea id="edit text area" name=text rows=30 cols=50 placeholder="[x] wake up1&#10;[x] eat&#10;[ ] sleep&#10;[ ] repeat">#{text}
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
-                <br>
-                <button type="submit">edit
-        |]
-postEditTodolistItemsR :: GroupId -> TodolistId -> Handler Html
-postEditTodolistItemsR groupId todolistId = do
-    mText <- runInputPost $ iopt textField "text"
-    let xs = case mText of 
-            (Just text) -> getItems text todolistId
-            Nothing -> []
-    dbIfAuth groupId (do
-        deleteWhere [TodolistItemTodolistId ==. todolistId]
-        insertMany_ xs)
-        
-    redirect $ TodolistItemsR groupId todolistId
-
-getEditTodolistR :: GroupId -> Handler Html
-getEditTodolistR groupId = do
-    lists <- runDB $
-        selectList [TodolistGroupId ==. groupId] [Asc TodolistTitle]
-    mToken <- fmap reqToken getRequest
-    defaultLayout $ do
-        let keyToText e = pack $ show $ fromSqlKey $ entityKey e ::Text
-        setTitle "Groups"
-        [whamlet|
-            <form action=@{DeleteTodolistR groupId} method="POST">
-                <ul>
-                    $forall list <- lists
-                        <li>
-                            <input type="checkbox" name="ids" value="#{keyToText list}">
-                            <a href="">#{(todolistTitle . entityVal) list}
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
-                <button type=submit>Delete selected
-            <a href=@{TodolistR groupId}>Back
-        |]
-postDeleteTodolistR :: GroupId -> Handler Html
-postDeleteTodolistR groupId = do
-    text <- lookupPostParams "ids"
-    let ints = map (read . unpack) text :: [Int64]
-    let ids = map toSqlKey ints :: [TodolistId]
-    dbIfAuth groupId (deleteWhere [TodolistId <-. ids])
-    redirect $ EditTodolistR groupId
-postEditTodolistR :: GroupId -> Handler Html
-postEditTodolistR groupId = error "not done yet"
-
-getEditGroupR :: Handler Html
-getEditGroupR = do
-    userId <- getUserId
-    groups <- getGroups userId
-    mToken <- fmap reqToken getRequest
-    defaultLayout $ do
-        let a e = pack $ show $ fromSqlKey $ entityKey e ::Text
-        setTitle "Groups"
-        [whamlet|
-            <form action=@{DeleteGroupR} method="POST">
-                <ul>
-                    $forall group <- groups
-                        <li>
-                            <input type="checkbox" name="ids" value="#{a group}">
-                            <a href="">#{(groupGroup . entityVal) group}
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
-                <button type=submit>Delete selected 
-            <a href=@{HomeR}>Back
-        |]
-
-postEditGroupR :: Handler Html
-postEditGroupR = do
-    -- TODO: not implemented yet
-    -- title <- runInputPost $ ireq textField "title"
-    -- users <- runInputPost $ ireq textField "users"
-    -- id <- runInputPost $ ireq intField "id"
-    -- let key = toSqlKey id
-    -- runDB $ update key [GroupGroup =. title]
-    redirect EditGroupR
-
-postDeleteGroupR :: Handler Html
-postDeleteGroupR = do
-    text <- lookupPostParams "ids"
-    let ints = map (read . unpack) text :: [Int64]
-    let ids = map toSqlKey ints :: [GroupId]
-    -- TODO: make sure the user has access to it aswell (this only works now for single user), and handle group owned by many
-    runDB $ deleteWhere [GroupId <-. ids]
-    redirect EditGroupR
-
-postAddUserR :: GroupId -> Handler Html
-postAddUserR groupId= do
-    user <- runInputPost $ ireq textField "user"
-    _ <- dbIfAuth groupId (do
-        mUserId <- getBy $ UniqueName user
-        case mUserId of
-            Nothing -> --handle error
-                redirect $ TodolistR groupId
-            Just userId -> insert $ GroupUser (entityKey userId) groupId
-        )
-    redirect $ TodolistR groupId
-
-getText :: Entity TodolistItem -> Text
-getText item =
-                if value then "[x] " <> name
-                else "[ ] " <> name
-                where
-                    value = (todolistItemValue . entityVal) item
-                    name = (todolistItemName . entityVal) item
-
-getItems :: Text -> TodolistId -> [TodolistItem]
-getItems text todolistId = map read (lines text)
-                where read line = do
-                        let (d, n) = splitAt 4 line
-                        let
-                                value = case d of
-                                        "[x] " -> True
-                                        "[ ] " -> False
-                                        _ -> error "Invalid status"
-                                name = case n of
-                                        "" -> error "empty name"
-                                        something -> filter (/= '\r') something
-                        TodolistItem todolistId value name
-
-postTrimTodolistItemsR :: GroupId -> TodolistId -> Handler Html
-postTrimTodolistItemsR groupId todolistId = do
-        dbIfAuth groupId  (deleteWhere [TodolistItemTodolistId ==. todolistId, TodolistItemValue ==. True])
-        redirect $ TodolistItemsR groupId todolistId
-postSortTodolistItemsR :: GroupId -> TodolistId -> Handler Html
-postSortTodolistItemsR  groupId todolistId = do
-    mSession <- lookupSession "sort"
-    case mSession of
-        (Just "value") -> setSession "sort" "id"
-        _ -> setSession "sort" "value"
-    redirect $ TodolistItemsR groupId todolistId
-
-getGroups :: Key User -> Handler [Entity Group]
-getGroups userId =
-    let sql = "SELECT ?? FROM \"group\" JOIN group_user gu ON \"group\".id = gu.group_id WHERE gu.user = ?" in
-    runDB $ rawSql sql [toPersistValue userId]
-
--- TODO: complete implementation should short circuit if multi user is on but no user exist
-getUserId :: HandlerFor App (Key User)
-getUserId = do
-    mName <- lookupHeader "Remote-User"
-    mUser <- case mName of
-            -- TODO: make remote user an argument to make it usable not only with authelia, and maybe do a check for good mesure when nothing is found ?
-            Just name -> runDB $ insertBy $ User (decodeUtf8 name)
-            Nothing -> runDB $ insertBy $ User "single-user"
-    case mUser of
-        Left (Entity userId _) -> return userId
-        Right userId -> return userId
-
-dbIfAuth :: GroupId -> ReaderT SqlBackend (HandlerFor App) b -> HandlerFor App b
-dbIfAuth groupId action = do
-    -- TODO: decide if we prefer fast (rawSql) or safe (type safe persist query) after in production latency tests
-    -- TODO: optimize the persist implementation anyway
-    user <- getUserId
-    result <- runDB $ selectFirst [GroupUserUser ==. user, GroupUserGroupId ==. groupId] []
-    if isNothing result then permissionDenied "you are not logged in or you dont have access to this group"
-    else runDB action
\ No newline at end of file
diff --git a/src/Handler/Todolist.hs b/src/Handler/Todolist.hs
new file mode 100644
index 0000000..56e5056
--- /dev/null
+++ b/src/Handler/Todolist.hs
@@ -0,0 +1,89 @@
+{-# LANGUAGE NoImplicitPrelude #-}
+{-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE MultiParamTypeClasses #-}
+{-# LANGUAGE TypeFamilies #-}
+{-# LANGUAGE TemplateHaskell #-}
+{-# LANGUAGE QuasiQuotes #-}
+{-# LANGUAGE FlexibleContexts #-}
+{-# OPTIONS_GHC -Wno-unrecognised-pragmas #-}
+{-# HLINT ignore "Replace case with fromMaybe" #-}
+module Handler.Todolist where
+
+import Import
+import Text.Read
+import Database.Persist.Sql (fromSqlKey, toSqlKey)
+postAddTodolistR :: GroupId -> Handler Html
+postAddTodolistR groupId = do
+        list <- runInputPost $ ireq textField "list"
+        -- TODO: in a newer version, put insertUnique_
+        _ <- dbIfAuth groupId (insertUnique $ Todolist groupId list)
+        redirect $ TodolistR groupId
+
+-- TODO: move this to a new handler file
+getTodolistR :: GroupId -> Handler Html
+getTodolistR groupId = do
+    lists <- dbIfAuth groupId (selectList [TodolistGroupId ==. groupId] [])
+    mToken <- fmap reqToken getRequest
+    defaultLayout $ do
+        let getTitle = todolistTitle . entityVal
+        setTitle "todolist"
+        [whamlet|
+            <a href=@{GroupR}>Home
+            <ul>
+                    $forall list <- lists
+                        <li>
+                            <a href=@{TodolistItemsR groupId (entityKey list)}>#{getTitle list}
+            <form action=@{AddTodolistR groupId} method="post">
+                <input type="text" name="list" placeholder="new list">
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type="submit">add
+            <form action=@{AddUserR groupId} method="post">
+                <input type="text" name="user" placeholder="new user">
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type="submit">share
+            <a href=@{EditTodolistR groupId}>Edit
+        |]
+
+getEditTodolistR :: GroupId -> Handler Html
+getEditTodolistR groupId = do
+    lists <- runDB $
+        selectList [TodolistGroupId ==. groupId] [Asc TodolistTitle]
+    mToken <- fmap reqToken getRequest
+    defaultLayout $ do
+        let keyToText e = pack $ show $ fromSqlKey $ entityKey e ::Text
+        setTitle "Groups"
+        [whamlet|
+            <form action=@{DeleteTodolistR groupId} method="POST">
+                <ul>
+                    $forall list <- lists
+                        <li>
+                            <input type="checkbox" name="ids" value="#{keyToText list}">
+                            <a href="">#{(todolistTitle . entityVal) list}
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type=submit>Delete selected
+            <a href=@{TodolistR groupId}>Back
+        |]
+postDeleteTodolistR :: GroupId -> Handler Html
+postDeleteTodolistR groupId = do
+    text <- lookupPostParams "ids"
+    let ints = map (read . unpack) text :: [Int64]
+    let ids = map toSqlKey ints :: [TodolistId]
+    dbIfAuth groupId (deleteWhere [TodolistId <-. ids])
+    redirect $ EditTodolistR groupId
+postEditTodolistR :: GroupId -> Handler Html
+postEditTodolistR groupId = error "not done yet"
+
+postAddUserR :: GroupId -> Handler Html
+postAddUserR groupId= do
+    user <- runInputPost $ ireq textField "user"
+    _ <- dbIfAuth groupId (do
+        mUserId <- getBy $ UniqueName user
+        case mUserId of
+            Nothing -> --handle error
+                redirect $ TodolistR groupId
+            Just userId -> insert $ GroupUser (entityKey userId) groupId
+        )
+    redirect $ TodolistR groupId
\ No newline at end of file
diff --git a/src/Handler/TodolistItem.hs b/src/Handler/TodolistItem.hs
new file mode 100644
index 0000000..3311784
--- /dev/null
+++ b/src/Handler/TodolistItem.hs
@@ -0,0 +1,127 @@
+{-# LANGUAGE NoImplicitPrelude #-}
+{-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE MultiParamTypeClasses #-}
+{-# LANGUAGE TypeFamilies #-}
+{-# LANGUAGE TemplateHaskell #-}
+{-# LANGUAGE QuasiQuotes #-}
+{-# LANGUAGE FlexibleContexts #-}
+{-# OPTIONS_GHC -Wno-unrecognised-pragmas #-}
+{-# HLINT ignore "Replace case with fromMaybe" #-}
+module Handler.TodolistItem where
+
+import Import
+import Database.Persist.Sql (rawExecute)
+
+getTodolistItemsR :: GroupId -> TodolistId -> Handler Html
+getTodolistItemsR groupId todolistId = do
+    mSortOption <- lookupSession "sort"
+    items <- case mSortOption of
+        (Just "value") -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Desc TodolistItemValue, Asc TodolistItemId])
+        _ -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Asc TodolistItemId])
+
+    mToken <- fmap reqToken getRequest
+    defaultLayout $ do
+        setTitle "items"
+        [whamlet|
+            <a href=@{GroupR}>Home
+            &nbsp;
+            <a href=@{TodolistR groupId}>Lists
+            <ul>
+                $forall item <- items
+                    <li>
+                        <form action=@{CheckTodolistItemR groupId todolistId (entityKey item)} method="POST">
+                             $maybe token <- mToken
+                                 <input type="hidden" name="_token" value="#{token}">
+                             <button type="submit">#{getText item}
+                            <form action=@{AddTodolistItemR groupId todolistId} method="post">
+            <form action=@{AddTodolistItemR groupId todolistId} method="post">
+                <input type="text" name="item" placeholder="new item">
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type="submit">add
+            <form action=@{TrimTodolistItemsR groupId todolistId} method="post">
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type="submit">trim
+            <form action=@{SortTodolistItemsR groupId todolistId} method="post">
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <button type="submit">sort
+            <a href=@{EditTodolistItemsR groupId todolistId}>Edit
+        |]
+
+
+postCheckTodolistItemR :: GroupId -> TodolistId -> TodolistItemId -> Handler Html
+postCheckTodolistItemR groupId todolistId todolistItemId = do
+    dbIfAuth groupId  (rawExecute "UPDATE todolist_item SET value = NOT value WHERE id = ?" [toPersistValue todolistItemId])
+    redirect $ TodolistItemsR groupId todolistId
+
+
+postAddTodolistItemR :: GroupId -> TodolistId -> Handler Html
+postAddTodolistItemR groupId todolistId = do
+    item <- runInputPost $ ireq textField "item"
+    _ <- dbIfAuth groupId (insert_ $ TodolistItem todolistId False item)
+    redirect $ TodolistItemsR groupId todolistId
+
+getEditTodolistItemsR :: GroupId -> TodolistId -> Handler Html
+getEditTodolistItemsR groupId todolistId = do
+    items <- dbIfAuth groupId (selectList [TodolistItemTodolistId ==. todolistId] [])
+    mToken <- fmap reqToken getRequest
+    let text = unlines $ map getText items
+    defaultLayout $ do
+        setTitle "edit"
+        [whamlet|
+            <form action=@{EditTodolistItemsR groupId todolistId} method=POST>
+                <label for="edit text area">Edit todolist
+                <br>
+                <textarea id="edit text area" name=text rows=30 cols=50 placeholder="[x] wake up1&#10;[x] eat&#10;[ ] sleep&#10;[ ] repeat">#{text}
+                $maybe token <- mToken
+                    <input type="hidden" name="_token" value="#{token}">
+                <br>
+                <button type="submit">edit
+        |]
+postEditTodolistItemsR :: GroupId -> TodolistId -> Handler Html
+postEditTodolistItemsR groupId todolistId = do
+    mText <- runInputPost $ iopt textField "text"
+    let xs = case mText of 
+            (Just text) -> getItems text todolistId
+            Nothing -> []
+    dbIfAuth groupId (do
+        deleteWhere [TodolistItemTodolistId ==. todolistId]
+        insertMany_ xs)
+        
+    redirect $ TodolistItemsR groupId todolistId
+
+getText :: Entity TodolistItem -> Text
+getText item =
+                if value then "[x] " <> name
+                else "[ ] " <> name
+                where
+                    value = (todolistItemValue . entityVal) item
+                    name = (todolistItemName . entityVal) item
+
+getItems :: Text -> TodolistId -> [TodolistItem]
+getItems text todolistId = map read (lines text)
+                where read line = do
+                        let (d, n) = splitAt 4 line
+                        let
+                                value = case d of
+                                        "[x] " -> True
+                                        "[ ] " -> False
+                                        _ -> error "Invalid status"
+                                name = case n of
+                                        "" -> error "empty name"
+                                        something -> filter (/= '\r') something
+                        TodolistItem todolistId value name
+
+postTrimTodolistItemsR :: GroupId -> TodolistId -> Handler Html
+postTrimTodolistItemsR groupId todolistId = do
+        dbIfAuth groupId  (deleteWhere [TodolistItemTodolistId ==. todolistId, TodolistItemValue ==. True])
+        redirect $ TodolistItemsR groupId todolistId
+postSortTodolistItemsR :: GroupId -> TodolistId -> Handler Html
+postSortTodolistItemsR  groupId todolistId = do
+    mSession <- lookupSession "sort"
+    case mSession of
+        (Just "value") -> setSession "sort" "id"
+        _ -> setSession "sort" "value"
+    redirect $ TodolistItemsR groupId todolistId
\ No newline at end of file

From 6b8781760cfdb92077bd5977665f667683fe3761 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Wed, 2 Jul 2025 16:57:53 +0100
Subject: [PATCH 26/34] update readme

---
 README.md | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 540f08f..ba821ed 100644
--- a/README.md
+++ b/README.md
@@ -3,14 +3,12 @@ Stuce's simple todo is a web app that let's you self host a simple todolist.
 The goal is to provide a minimalistic and fast todo list that is self hostable.
 ## Next goals
 - Make multi user support
-	- [x] Get user by trusted header
-	- [x] Add menu to add other users to the group
-	- [ ] make the code more readable by renaming/moving the handlers better
 	- [ ] write a minimal step by step guide to install with nix,
 	- [ ] add some css to make it look nicer
 	- [ ] add htmx to make more agreable without making js manadatory
-## Version 0.0.0
-Simple todo list for **single user only** at the moment.
+	- [ ] make api to allow usage with native app
+## Version 0.0.3
+Simple todo list webapp.
 Features :
 	- add and delete (and soon share) groups that contain a list of todolists
 	- add and delete todolists inside groups

From c63309b9e86e50c45e99fce09b4dec816d9b74c1 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Wed, 2 Jul 2025 17:13:50 +0100
Subject: [PATCH 27/34] removed middleware

---
 src/Foundation.hs           | 20 ++++++++------------
 src/Handler/Group.hs        |  6 ------
 src/Handler/Todolist.hs     |  8 --------
 src/Handler/TodolistItem.hs | 12 ------------
 4 files changed, 8 insertions(+), 38 deletions(-)

diff --git a/src/Foundation.hs b/src/Foundation.hs
index ffb4191..39678d4 100644
--- a/src/Foundation.hs
+++ b/src/Foundation.hs
@@ -20,8 +20,6 @@ import Control.Monad.Logger (LogSource)
 import Yesod.Default.Util   (addStaticContentExternal)
 import Yesod.Core.Types     (Logger)
 import qualified Yesod.Core.Unsafe as Unsafe
-import qualified Data.CaseInsensitive as CI
-import qualified Data.Text.Encoding as TE
 
 -- | The foundation datatype for your application. This can be a good place to
 -- keep settings and values requiring initialization before your application
@@ -91,8 +89,8 @@ instance Yesod App where
     --   b) Validates that incoming write requests include that token in either a header or POST parameter.
     -- To add it, chain it together with the defaultMiddleware: yesodMiddleware = defaultYesodMiddleware . defaultCsrfMiddleware
     -- For details, see the CSRF documentation in the Yesod.Core.Handler module of the yesod-core package.
-    yesodMiddleware :: ToTypedContent res => Handler res -> Handler res
-    yesodMiddleware = defaultYesodMiddleware . defaultCsrfMiddleware
+    -- yesodMiddleware :: ToTypedContent res => Handler res -> Handler res
+    -- yesodMiddleware = defaultYesodMiddleware . defaultCsrfMiddleware
 
     defaultLayout :: Widget -> Handler Html
     defaultLayout widget = do
@@ -111,13 +109,12 @@ instance Yesod App where
             $(widgetFile "default-layout")
         withUrlRenderer $(hamletFile "templates/default-layout-wrapper.hamlet")
 
-    isAuthorized
-        :: Route App  -- ^ The route the user is visiting.
-        -> Bool       -- ^ Whether or not this is a "write" request.
-        -> Handler AuthResult
-    -- Routes not requiring authentication.
-    -- TODO: check this bullshit if need to change it or not (prolly authelia problem)
-    isAuthorized _ _ = return Authorized
+    -- isAuthorized
+    --     :: Route App  -- ^ The route the user is visiting.
+    --     -> Bool       -- ^ Whether or not this is a "write" request.
+    --     -> Handler AuthResult
+    -- -- Routes not requiring authentication.
+    -- isAuthorized _ _ = return Authorized
 
 
     -- This function creates static content files in the static folder
@@ -208,7 +205,6 @@ getUserId = do
 dbIfAuth :: GroupId -> ReaderT SqlBackend (HandlerFor App) b -> HandlerFor App b
 dbIfAuth groupId action = do
     -- TODO: decide if we prefer fast (rawSql) or safe (type safe persist query) after in production latency tests
-    -- TODO: optimize the persist implementation anyway
     user <- getUserId
     result <- runDB $ selectFirst [GroupUserUser ==. user, GroupUserGroupId ==. groupId] []
     if isNothing result then permissionDenied "you are not logged in or you dont have access to this group"
diff --git a/src/Handler/Group.hs b/src/Handler/Group.hs
index c2f4bb5..287cedd 100644
--- a/src/Handler/Group.hs
+++ b/src/Handler/Group.hs
@@ -16,7 +16,6 @@ getGroupR :: Handler Html
 getGroupR = do
     userId <- getUserId
     groups <- getGroups userId
-    mToken <- fmap reqToken getRequest
     defaultLayout $ do
         setTitle "Groups"
         [whamlet|
@@ -27,8 +26,6 @@ getGroupR = do
                         <a href=@{TodolistR $ entityKey group}>#{(groupGroup . entityVal) group}
             <form action=@{AddGroupR} method="post">
                 <input type="text" name="group" placeholder="new group">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
                 <button type="submit">add
             <a href=@{EditGroupR}>Edit
         |]
@@ -48,7 +45,6 @@ getEditGroupR :: Handler Html
 getEditGroupR = do
     userId <- getUserId
     groups <- getGroups userId
-    mToken <- fmap reqToken getRequest
     defaultLayout $ do
         let a e = pack $ show $ fromSqlKey $ entityKey e ::Text
         setTitle "Groups"
@@ -59,8 +55,6 @@ getEditGroupR = do
                         <li>
                             <input type="checkbox" name="ids" value="#{a group}">
                             <a href="">#{(groupGroup . entityVal) group}
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
                 <button type=submit>Delete selected 
             <a href=@{GroupR}>Back
         |]
diff --git a/src/Handler/Todolist.hs b/src/Handler/Todolist.hs
index 56e5056..3af9235 100644
--- a/src/Handler/Todolist.hs
+++ b/src/Handler/Todolist.hs
@@ -23,7 +23,6 @@ postAddTodolistR groupId = do
 getTodolistR :: GroupId -> Handler Html
 getTodolistR groupId = do
     lists <- dbIfAuth groupId (selectList [TodolistGroupId ==. groupId] [])
-    mToken <- fmap reqToken getRequest
     defaultLayout $ do
         let getTitle = todolistTitle . entityVal
         setTitle "todolist"
@@ -35,13 +34,9 @@ getTodolistR groupId = do
                             <a href=@{TodolistItemsR groupId (entityKey list)}>#{getTitle list}
             <form action=@{AddTodolistR groupId} method="post">
                 <input type="text" name="list" placeholder="new list">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
                 <button type="submit">add
             <form action=@{AddUserR groupId} method="post">
                 <input type="text" name="user" placeholder="new user">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
                 <button type="submit">share
             <a href=@{EditTodolistR groupId}>Edit
         |]
@@ -50,7 +45,6 @@ getEditTodolistR :: GroupId -> Handler Html
 getEditTodolistR groupId = do
     lists <- runDB $
         selectList [TodolistGroupId ==. groupId] [Asc TodolistTitle]
-    mToken <- fmap reqToken getRequest
     defaultLayout $ do
         let keyToText e = pack $ show $ fromSqlKey $ entityKey e ::Text
         setTitle "Groups"
@@ -61,8 +55,6 @@ getEditTodolistR groupId = do
                         <li>
                             <input type="checkbox" name="ids" value="#{keyToText list}">
                             <a href="">#{(todolistTitle . entityVal) list}
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
                 <button type=submit>Delete selected
             <a href=@{TodolistR groupId}>Back
         |]
diff --git a/src/Handler/TodolistItem.hs b/src/Handler/TodolistItem.hs
index 3311784..2866730 100644
--- a/src/Handler/TodolistItem.hs
+++ b/src/Handler/TodolistItem.hs
@@ -19,7 +19,6 @@ getTodolistItemsR groupId todolistId = do
         (Just "value") -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Desc TodolistItemValue, Asc TodolistItemId])
         _ -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Asc TodolistItemId])
 
-    mToken <- fmap reqToken getRequest
     defaultLayout $ do
         setTitle "items"
         [whamlet|
@@ -30,22 +29,14 @@ getTodolistItemsR groupId todolistId = do
                 $forall item <- items
                     <li>
                         <form action=@{CheckTodolistItemR groupId todolistId (entityKey item)} method="POST">
-                             $maybe token <- mToken
-                                 <input type="hidden" name="_token" value="#{token}">
                              <button type="submit">#{getText item}
                             <form action=@{AddTodolistItemR groupId todolistId} method="post">
             <form action=@{AddTodolistItemR groupId todolistId} method="post">
                 <input type="text" name="item" placeholder="new item">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
                 <button type="submit">add
             <form action=@{TrimTodolistItemsR groupId todolistId} method="post">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
                 <button type="submit">trim
             <form action=@{SortTodolistItemsR groupId todolistId} method="post">
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
                 <button type="submit">sort
             <a href=@{EditTodolistItemsR groupId todolistId}>Edit
         |]
@@ -66,7 +57,6 @@ postAddTodolistItemR groupId todolistId = do
 getEditTodolistItemsR :: GroupId -> TodolistId -> Handler Html
 getEditTodolistItemsR groupId todolistId = do
     items <- dbIfAuth groupId (selectList [TodolistItemTodolistId ==. todolistId] [])
-    mToken <- fmap reqToken getRequest
     let text = unlines $ map getText items
     defaultLayout $ do
         setTitle "edit"
@@ -75,8 +65,6 @@ getEditTodolistItemsR groupId todolistId = do
                 <label for="edit text area">Edit todolist
                 <br>
                 <textarea id="edit text area" name=text rows=30 cols=50 placeholder="[x] wake up1&#10;[x] eat&#10;[ ] sleep&#10;[ ] repeat">#{text}
-                $maybe token <- mToken
-                    <input type="hidden" name="_token" value="#{token}">
                 <br>
                 <button type="submit">edit
         |]

From de60936cd2ae62b2d7869f59fffff7b6958d2df0 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Wed, 2 Jul 2025 17:37:55 +0100
Subject: [PATCH 28/34] moved hamlet to widgetfiles

---
 README.md                            |  5 ++++-
 src/Foundation.hs                    | 16 +++++++--------
 src/Handler/Group.hs                 | 24 ++--------------------
 src/Handler/Todolist.hs              | 27 +++----------------------
 src/Handler/TodolistItem.hs          | 30 +++-------------------------
 templates/edit-group.hamlet          |  8 ++++++++
 templates/edit-todolist-items.hamlet |  6 ++++++
 templates/edit-todolist.hamlet       |  8 ++++++++
 templates/group.hamlet               |  9 +++++++++
 templates/todolist-items.hamlet      | 17 ++++++++++++++++
 templates/todolist.hamlet            | 12 +++++++++++
 11 files changed, 80 insertions(+), 82 deletions(-)
 create mode 100644 templates/edit-group.hamlet
 create mode 100644 templates/edit-todolist-items.hamlet
 create mode 100644 templates/edit-todolist.hamlet
 create mode 100644 templates/group.hamlet
 create mode 100644 templates/todolist-items.hamlet
 create mode 100644 templates/todolist.hamlet

diff --git a/README.md b/README.md
index ba821ed..7958ab1 100644
--- a/README.md
+++ b/README.md
@@ -1,12 +1,15 @@
 # sTodo
 Stuce's simple todo is a web app that let's you self host a simple todolist.
 The goal is to provide a minimalistic and fast todo list that is self hostable.
+## Usage
+- can be used as is for a single user behind a vpn (for ex, wireguard)
+- can be setup for multi user with a reverse proxy and an authentification provider that supports trusted sso  (for ex, nginx + authelia)
 ## Next goals
 - Make multi user support
 	- [ ] write a minimal step by step guide to install with nix,
 	- [ ] add some css to make it look nicer
 	- [ ] add htmx to make more agreable without making js manadatory
-	- [ ] make api to allow usage with native app
+	- [ ] make api to allow usage with native app (a way to get every list that has been modified since date $date belonging from the user in a json or similar format)
 ## Version 0.0.3
 Simple todo list webapp.
 Features :
diff --git a/src/Foundation.hs b/src/Foundation.hs
index 39678d4..d031441 100644
--- a/src/Foundation.hs
+++ b/src/Foundation.hs
@@ -75,12 +75,12 @@ instance Yesod App where
             Nothing -> getApprootText guessApproot app req
             Just root -> root
 
-    -- Store session data on the client in encrypted cookies,
-    -- default session idle timeout is 120 minutes
-    makeSessionBackend :: App -> IO (Maybe SessionBackend)
-    makeSessionBackend app = Just <$> defaultClientSessionBackend
-        120    -- timeout in minutes
-        (appSessionKey $ appSettings app)
+    -- -- Store session data on the client in encrypted cookies,
+    -- -- default session idle timeout is 120 minutes
+    -- makeSessionBackend :: App -> IO (Maybe SessionBackend)
+    -- makeSessionBackend app = Just <$> defaultClientSessionBackend
+    --     120    -- timeout in minutes
+    --     (appSessionKey $ appSettings app)
 
     -- Yesod Middleware allows you to run code before and after each handler function.
     -- The defaultYesodMiddleware adds the response header "Vary: Accept, Accept-Language" and performs authorization checks.
@@ -97,7 +97,7 @@ instance Yesod App where
         master <- getYesod
         mmsg <- getMessage
 
-        mcurrentRoute <- getCurrentRoute
+        -- mcurrentRoute <- getCurrentRoute
 
         -- We break up the default layout into two components:
         -- default-layout is the contents of the body tag, and
@@ -190,7 +190,7 @@ unsafeHandler = Unsafe.fakeHandlerGetLogger appLogger
 -- https://github.com/yesodweb/yesod/wiki/i18n-messages-in-the-scaffolding
 
 
--- TODO: complete implementation should short circuit if multi user is on but no user exist
+-- TODO: complete implementation should short circuit if multi user is on but no user exist, to enforce policy safely
 getUserId :: HandlerFor App (Key User)
 getUserId = do
     mName <- lookupHeader "Remote-User"
diff --git a/src/Handler/Group.hs b/src/Handler/Group.hs
index 287cedd..16fc7c1 100644
--- a/src/Handler/Group.hs
+++ b/src/Handler/Group.hs
@@ -18,18 +18,7 @@ getGroupR = do
     groups <- getGroups userId
     defaultLayout $ do
         setTitle "Groups"
-        [whamlet|
-            <a href=@{GroupR}>Home
-            <ul>
-                $forall group <- groups
-                    <li>
-                        <a href=@{TodolistR $ entityKey group}>#{(groupGroup . entityVal) group}
-            <form action=@{AddGroupR} method="post">
-                <input type="text" name="group" placeholder="new group">
-                <button type="submit">add
-            <a href=@{EditGroupR}>Edit
-        |]
-
+        $(widgetFile "group")
 postAddGroupR :: Handler Html
 postAddGroupR = do
     g <- runInputPost $ ireq textField "group"
@@ -48,16 +37,7 @@ getEditGroupR = do
     defaultLayout $ do
         let a e = pack $ show $ fromSqlKey $ entityKey e ::Text
         setTitle "Groups"
-        [whamlet|
-            <form action=@{DeleteGroupR} method="POST">
-                <ul>
-                    $forall group <- groups
-                        <li>
-                            <input type="checkbox" name="ids" value="#{a group}">
-                            <a href="">#{(groupGroup . entityVal) group}
-                <button type=submit>Delete selected 
-            <a href=@{GroupR}>Back
-        |]
+        $(widgetFile "edit-group")
 postEditGroupR :: Handler Html
 postEditGroupR = do
     -- TODO: not implemented yet
diff --git a/src/Handler/Todolist.hs b/src/Handler/Todolist.hs
index 3af9235..7dcfbeb 100644
--- a/src/Handler/Todolist.hs
+++ b/src/Handler/Todolist.hs
@@ -26,20 +26,7 @@ getTodolistR groupId = do
     defaultLayout $ do
         let getTitle = todolistTitle . entityVal
         setTitle "todolist"
-        [whamlet|
-            <a href=@{GroupR}>Home
-            <ul>
-                    $forall list <- lists
-                        <li>
-                            <a href=@{TodolistItemsR groupId (entityKey list)}>#{getTitle list}
-            <form action=@{AddTodolistR groupId} method="post">
-                <input type="text" name="list" placeholder="new list">
-                <button type="submit">add
-            <form action=@{AddUserR groupId} method="post">
-                <input type="text" name="user" placeholder="new user">
-                <button type="submit">share
-            <a href=@{EditTodolistR groupId}>Edit
-        |]
+        $(widgetFile "todolist")
 
 getEditTodolistR :: GroupId -> Handler Html
 getEditTodolistR groupId = do
@@ -48,16 +35,8 @@ getEditTodolistR groupId = do
     defaultLayout $ do
         let keyToText e = pack $ show $ fromSqlKey $ entityKey e ::Text
         setTitle "Groups"
-        [whamlet|
-            <form action=@{DeleteTodolistR groupId} method="POST">
-                <ul>
-                    $forall list <- lists
-                        <li>
-                            <input type="checkbox" name="ids" value="#{keyToText list}">
-                            <a href="">#{(todolistTitle . entityVal) list}
-                <button type=submit>Delete selected
-            <a href=@{TodolistR groupId}>Back
-        |]
+        $(widgetFile "edit-todolist")
+
 postDeleteTodolistR :: GroupId -> Handler Html
 postDeleteTodolistR groupId = do
     text <- lookupPostParams "ids"
diff --git a/src/Handler/TodolistItem.hs b/src/Handler/TodolistItem.hs
index 2866730..9340ff9 100644
--- a/src/Handler/TodolistItem.hs
+++ b/src/Handler/TodolistItem.hs
@@ -21,25 +21,7 @@ getTodolistItemsR groupId todolistId = do
 
     defaultLayout $ do
         setTitle "items"
-        [whamlet|
-            <a href=@{GroupR}>Home
-            &nbsp;
-            <a href=@{TodolistR groupId}>Lists
-            <ul>
-                $forall item <- items
-                    <li>
-                        <form action=@{CheckTodolistItemR groupId todolistId (entityKey item)} method="POST">
-                             <button type="submit">#{getText item}
-                            <form action=@{AddTodolistItemR groupId todolistId} method="post">
-            <form action=@{AddTodolistItemR groupId todolistId} method="post">
-                <input type="text" name="item" placeholder="new item">
-                <button type="submit">add
-            <form action=@{TrimTodolistItemsR groupId todolistId} method="post">
-                <button type="submit">trim
-            <form action=@{SortTodolistItemsR groupId todolistId} method="post">
-                <button type="submit">sort
-            <a href=@{EditTodolistItemsR groupId todolistId}>Edit
-        |]
+        $(widgetFile "todolist-items")
 
 
 postCheckTodolistItemR :: GroupId -> TodolistId -> TodolistItemId -> Handler Html
@@ -60,14 +42,8 @@ getEditTodolistItemsR groupId todolistId = do
     let text = unlines $ map getText items
     defaultLayout $ do
         setTitle "edit"
-        [whamlet|
-            <form action=@{EditTodolistItemsR groupId todolistId} method=POST>
-                <label for="edit text area">Edit todolist
-                <br>
-                <textarea id="edit text area" name=text rows=30 cols=50 placeholder="[x] wake up1&#10;[x] eat&#10;[ ] sleep&#10;[ ] repeat">#{text}
-                <br>
-                <button type="submit">edit
-        |]
+        $(widgetFile "edit-todolist-items")
+        
 postEditTodolistItemsR :: GroupId -> TodolistId -> Handler Html
 postEditTodolistItemsR groupId todolistId = do
     mText <- runInputPost $ iopt textField "text"
diff --git a/templates/edit-group.hamlet b/templates/edit-group.hamlet
new file mode 100644
index 0000000..f8f4f2f
--- /dev/null
+++ b/templates/edit-group.hamlet
@@ -0,0 +1,8 @@
+<form action=@{DeleteGroupR} method="POST">
+                <ul>
+                    $forall group <- groups
+                        <li>
+                            <input type="checkbox" name="ids" value="#{a group}">
+                            <a href="">#{(groupGroup . entityVal) group}
+                <button type=submit>Delete selected 
+            <a href=@{GroupR}>Back
\ No newline at end of file
diff --git a/templates/edit-todolist-items.hamlet b/templates/edit-todolist-items.hamlet
new file mode 100644
index 0000000..4d1e9c8
--- /dev/null
+++ b/templates/edit-todolist-items.hamlet
@@ -0,0 +1,6 @@
+<form action=@{EditTodolistItemsR groupId todolistId} method=POST>
+                <label for="edit text area">Edit todolist
+                <br>
+                <textarea id="edit text area" name=text rows=30 cols=50 placeholder="[x] wake up1&#10;[x] eat&#10;[ ] sleep&#10;[ ] repeat">#{text}
+                <br>
+                <button type="submit">edit
\ No newline at end of file
diff --git a/templates/edit-todolist.hamlet b/templates/edit-todolist.hamlet
new file mode 100644
index 0000000..084ac60
--- /dev/null
+++ b/templates/edit-todolist.hamlet
@@ -0,0 +1,8 @@
+<form action=@{DeleteTodolistR groupId} method="POST">
+                <ul>
+                    $forall list <- lists
+                        <li>
+                            <input type="checkbox" name="ids" value="#{keyToText list}">
+                            <a href="">#{(todolistTitle . entityVal) list}
+                <button type=submit>Delete selected
+            <a href=@{TodolistR groupId}>Back
\ No newline at end of file
diff --git a/templates/group.hamlet b/templates/group.hamlet
new file mode 100644
index 0000000..f6487c9
--- /dev/null
+++ b/templates/group.hamlet
@@ -0,0 +1,9 @@
+<a href=@{GroupR}>Home
+            <ul>
+                $forall group <- groups
+                    <li>
+                        <a href=@{TodolistR $ entityKey group}>#{(groupGroup . entityVal) group}
+            <form action=@{AddGroupR} method="post">
+                <input type="text" name="group" placeholder="new group">
+                <button type="submit">add
+            <a href=@{EditGroupR}>Edit
\ No newline at end of file
diff --git a/templates/todolist-items.hamlet b/templates/todolist-items.hamlet
new file mode 100644
index 0000000..be86652
--- /dev/null
+++ b/templates/todolist-items.hamlet
@@ -0,0 +1,17 @@
+<a href=@{GroupR}>Home
+            &nbsp;
+            <a href=@{TodolistR groupId}>Lists
+            <ul>
+                $forall item <- items
+                    <li>
+                        <form action=@{CheckTodolistItemR groupId todolistId (entityKey item)} method="POST">
+                             <button type="submit">#{getText item}
+                            <form action=@{AddTodolistItemR groupId todolistId} method="post">
+            <form action=@{AddTodolistItemR groupId todolistId} method="post">
+                <input type="text" name="item" placeholder="new item">
+                <button type="submit">add
+            <form action=@{TrimTodolistItemsR groupId todolistId} method="post">
+                <button type="submit">trim
+            <form action=@{SortTodolistItemsR groupId todolistId} method="post">
+                <button type="submit">sort
+            <a href=@{EditTodolistItemsR groupId todolistId}>Edit
\ No newline at end of file
diff --git a/templates/todolist.hamlet b/templates/todolist.hamlet
new file mode 100644
index 0000000..281b311
--- /dev/null
+++ b/templates/todolist.hamlet
@@ -0,0 +1,12 @@
+<a href=@{GroupR}>Home
+            <ul>
+                    $forall list <- lists
+                        <li>
+                            <a href=@{TodolistItemsR groupId (entityKey list)}>#{getTitle list}
+            <form action=@{AddTodolistR groupId} method="post">
+                <input type="text" name="list" placeholder="new list">
+                <button type="submit">add
+            <form action=@{AddUserR groupId} method="post">
+                <input type="text" name="user" placeholder="new user">
+                <button type="submit">share
+            <a href=@{EditTodolistR groupId}>Edit
\ No newline at end of file

From 1e661031fbde0d9aabe51a528c0797dcbeb42e52 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Thu, 3 Jul 2025 09:42:31 +0100
Subject: [PATCH 29/34] Created a route to fetch recent modifications as a csv
 to allow creating clients

---
 client_session_key.aes         |  1 +
 config/models.persistentmodels |  3 ++
 config/routes.yesodroutes      |  1 +
 src/Application.hs             |  1 +
 src/Foundation.hs              |  9 ++++--
 src/Handler/Api.hs             | 52 ++++++++++++++++++++++++++++++++++
 src/Handler/Group.hs           | 12 +++-----
 src/Handler/Todolist.hs        |  3 +-
 8 files changed, 71 insertions(+), 11 deletions(-)
 create mode 100644 client_session_key.aes
 create mode 100644 src/Handler/Api.hs

diff --git a/client_session_key.aes b/client_session_key.aes
new file mode 100644
index 0000000..70e3c9c
--- /dev/null
+++ b/client_session_key.aes
@@ -0,0 +1 @@
+:M^¦ÄO2«I†čš‘ł‰4,pe�żÔě8Ä·,CI†(q¸¦7/ ÷gG�uâÍץL'ż(Éśˇwq1I#ÔpµĚYW»)2L{2—;vĺÇ_ižËŔ[ŰČĘł�űŐY
\ No newline at end of file
diff --git a/config/models.persistentmodels b/config/models.persistentmodels
index bb9d354..d9a31b5 100644
--- a/config/models.persistentmodels
+++ b/config/models.persistentmodels
@@ -8,12 +8,15 @@ TodolistItem
 Todolist
     groupId GroupId OnDeleteCascade
     title Text
+    lastModified UTCTime
     UniqueListPair groupId title
+    deriving Show
 User
     name Text
     UniqueName name
 Group
     group Text
+    lastModified UTCTime
 GroupUser
     user UserId
     groupId GroupId OnDeleteCascade
\ No newline at end of file
diff --git a/config/routes.yesodroutes b/config/routes.yesodroutes
index 9d7e398..b310a04 100644
--- a/config/routes.yesodroutes
+++ b/config/routes.yesodroutes
@@ -26,3 +26,4 @@
 /delete DeleteGroupR POST
 /delete/group/#GroupId DeleteTodolistR POST
 
+/api/#Int ApiR GET
diff --git a/src/Application.hs b/src/Application.hs
index fd6e107..7be018c 100644
--- a/src/Application.hs
+++ b/src/Application.hs
@@ -47,6 +47,7 @@ import Handler.Common
 import Handler.Group
 import Handler.Todolist
 import Handler.TodolistItem
+import Handler.Api
 
 -- This line actually creates our YesodDispatch instance. It is the second half
 -- of the call to mkYesodData which occurs in Foundation.hs. Please see the
diff --git a/src/Foundation.hs b/src/Foundation.hs
index d031441..bdd1015 100644
--- a/src/Foundation.hs
+++ b/src/Foundation.hs
@@ -12,7 +12,7 @@ module Foundation where
 
 import Import.NoFoundation
 import Data.Kind            (Type)
-import Database.Persist.Sql (ConnectionPool, runSqlPool)
+import Database.Persist.Sql (ConnectionPool, runSqlPool, rawSql)
 import Text.Hamlet          (hamletFile)
 import Text.Jasmine         (minifym)
 import Control.Monad.Logger (LogSource)
@@ -208,4 +208,9 @@ dbIfAuth groupId action = do
     user <- getUserId
     result <- runDB $ selectFirst [GroupUserUser ==. user, GroupUserGroupId ==. groupId] []
     if isNothing result then permissionDenied "you are not logged in or you dont have access to this group"
-    else runDB action
\ No newline at end of file
+    else runDB action
+
+getGroups :: Key User -> Handler [Entity Group]
+getGroups userId =
+    let sql = "SELECT ?? FROM \"group\" JOIN group_user gu ON \"group\".id = gu.group_id WHERE gu.user = ?" in
+    runDB $ rawSql sql [toPersistValue userId]
\ No newline at end of file
diff --git a/src/Handler/Api.hs b/src/Handler/Api.hs
new file mode 100644
index 0000000..f429a0e
--- /dev/null
+++ b/src/Handler/Api.hs
@@ -0,0 +1,52 @@
+{-# LANGUAGE NoImplicitPrelude #-}
+{-# LANGUAGE OverloadedStrings #-}
+
+module Handler.Api where
+
+import Import
+import Database.Persist.Sql (rawSql)
+import Data.Time.Clock.POSIX (posixSecondsToUTCTime, utcTimeToPOSIXSeconds)
+import qualified Data.Text as Text
+getApiR :: Int -> Handler TypedContent
+getApiR time = do
+    -- TODO: use only one runDB
+    userId <- getUserId
+    -- We get all groups no matter what, since else we can't know which groups have been deleted
+    groups <- getGroups userId
+    let utcTime = posixSecondsToUTCTime (fromIntegral time)
+    let sqlLists = "select ?? from todolist join group_user on todolist.group_id = group_user.group_id and group_user.user = ? join \"group\" on todolist.group_id = \"group\".id and \"group\".last_modified > ?;"
+    lists <- runDB $ rawSql sqlLists [toPersistValue userId, toPersistValue utcTime]
+    let a = lists :: [Entity Todolist]
+    let sqlItems = "select ?? from todolist join group_user on todolist.group_id = group_user.group_id and group_user.user = ? join \"group\" on todolist.group_id = \"group\".id and \"group\".last_modified > ? join todolist_item on todolist_item.todolist_id = todolist.id;"
+    items <- runDB $ rawSql sqlItems [toPersistValue userId, toPersistValue utcTime]
+    let t = unlines $ map groupToCSV groups <> map todolistToCSV lists <> map todolistItemToCSV items
+    return $ TypedContent typePlain $ toContent t
+
+todolistItemToCSV :: Entity TodolistItem -> Text
+todolistItemToCSV item = "i," <> fieldToText item
+todolistToCSV :: Entity Todolist -> Text
+todolistToCSV list = "l," <> fieldToText list
+groupToCSV :: Entity Group -> Text
+groupToCSV group = "g," <> fieldToText group
+
+-- TODO: error management ? (maybe use Either Text Text and then propagate left to handler and send error ?)
+fieldToText :: PersistEntity record => Entity record -> Text
+fieldToText field = Text.intercalate "," (map persistValueToText $ entityValues field)
+
+persistValueToText :: PersistValue -> Text
+persistValueToText (PersistText s) = s
+persistValueToText (PersistInt64 i) = Text.pack $ show i
+persistValueToText (PersistUTCTime d) = Text.pack $ show $ floor (utcTimeToPOSIXSeconds d)
+persistValueToText (PersistBool b) = if b then "T" else "F"
+persistValueToText _ = error  "Wrong input type"
+
+getText :: Text
+getText = do
+    -- GET EVERY GROUP THAT HAS BEEN MODIFIED SINCE TIMESTAMP FROM USER
+
+    -- GET EVERY TODOLIST THAT HAS BEEN MODIFIED SINCE TIMESTAMP
+    -- GET EVERY ITEM FROM THESE TODOLISTS
+    -- ENCODE ALL OF THEM IN THE TEXTFILE
+    -- SEND IT !
+    -- DONE :)
+    error "not done yet"
\ No newline at end of file
diff --git a/src/Handler/Group.hs b/src/Handler/Group.hs
index 16fc7c1..eb15bea 100644
--- a/src/Handler/Group.hs
+++ b/src/Handler/Group.hs
@@ -11,7 +11,7 @@ module Handler.Group where
 
 import Import
 import Text.Read
-import Database.Persist.Sql (fromSqlKey, toSqlKey, rawSql)
+import Database.Persist.Sql (fromSqlKey, toSqlKey)
 getGroupR :: Handler Html
 getGroupR = do
     userId <- getUserId
@@ -25,7 +25,8 @@ postAddGroupR = do
     -- TODO: in a newer version, put insertUnique_
     user <- getUserId
     _ <- runDB $ do
-        gId <- insert $ Group g
+        currentTime <- liftIO getCurrentTime
+        gId <- insert $ Group g currentTime
         success <- insertUnique $ GroupUser user gId
         when (isNothing success) $ delete gId
     redirect GroupR
@@ -54,9 +55,4 @@ postDeleteGroupR = do
     let ids = map toSqlKey ints :: [GroupId]
     -- TODO: make sure the user has access to it aswell (this only works now for single user), and handle group owned by many
     runDB $ deleteWhere [GroupId <-. ids]
-    redirect EditGroupR
-
-getGroups :: Key User -> Handler [Entity Group]
-getGroups userId =
-    let sql = "SELECT ?? FROM \"group\" JOIN group_user gu ON \"group\".id = gu.group_id WHERE gu.user = ?" in
-    runDB $ rawSql sql [toPersistValue userId]
\ No newline at end of file
+    redirect EditGroupR
\ No newline at end of file
diff --git a/src/Handler/Todolist.hs b/src/Handler/Todolist.hs
index 7dcfbeb..1520130 100644
--- a/src/Handler/Todolist.hs
+++ b/src/Handler/Todolist.hs
@@ -16,7 +16,8 @@ postAddTodolistR :: GroupId -> Handler Html
 postAddTodolistR groupId = do
         list <- runInputPost $ ireq textField "list"
         -- TODO: in a newer version, put insertUnique_
-        _ <- dbIfAuth groupId (insertUnique $ Todolist groupId list)
+        currentTime <- liftIO getCurrentTime
+        _ <- dbIfAuth groupId (insertUnique $ Todolist groupId list currentTime)
         redirect $ TodolistR groupId
 
 -- TODO: move this to a new handler file

From 67d88bd31b2860bd995b461b1974e6939a0da591 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Thu, 3 Jul 2025 09:44:55 +0100
Subject: [PATCH 30/34] updated readmi

---
 README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 7958ab1..8f8616b 100644
--- a/README.md
+++ b/README.md
@@ -9,7 +9,8 @@ The goal is to provide a minimalistic and fast todo list that is self hostable.
 	- [ ] write a minimal step by step guide to install with nix,
 	- [ ] add some css to make it look nicer
 	- [ ] add htmx to make more agreable without making js manadatory
-	- [ ] make api to allow usage with native app (a way to get every list that has been modified since date $date belonging from the user in a json or similar format)
+	- [x] make api to allow usage with native app (a way to get every list that has been modified since date $date belonging from the user in a json or similar format)
+	- [ ] document api to help create clients
 ## Version 0.0.3
 Simple todo list webapp.
 Features :

From c9b7bdd84b0043dee88812fdbcef8fa77de67301 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Sun, 13 Jul 2025 12:55:05 +0200
Subject: [PATCH 31/34] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 8f8616b..98b93f1 100644
--- a/README.md
+++ b/README.md
@@ -20,7 +20,7 @@ Features :
 	- possibility to deploy easily via nix module with a flake
 	- that's it, the goal is to keep it minimal !!!
 
-## Haskell Setup (I sadly don't use nix develop at the moment)
+## Haskell Setup
 
 1. If you haven't already, [install Stack](https://haskell-lang.org/get-started)
 	* On POSIX systems, this is usually `curl -sSL https://get.haskellstack.org/ | sh`

From c4b57d7a2902375e7ddcdb1fc558e890ffa26766 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Mon, 14 Jul 2025 16:06:17 +0200
Subject: [PATCH 32/34] api ready

---
 README.md                            |   6 +-
 config/models.persistentmodels       |   4 +-
 src/Foundation.hs                    | 277 ++++++++++++++-------------
 src/Handler/Api.hs                   |  61 +++---
 src/Handler/Group.hs                 |  92 +++++----
 src/Handler/Todolist.hs              |  89 +++++----
 src/Handler/TodolistItem.hs          | 154 ++++++++-------
 stack.yaml                           |   6 +-
 stack.yaml.lock                      |   2 +-
 templates/default-layout.hamlet      |  11 +-
 templates/edit-group.hamlet          |  14 +-
 templates/edit-todolist-items.hamlet |  10 +-
 templates/edit-todolist.hamlet       |  14 +-
 templates/group.hamlet               |  16 +-
 templates/homepage.hamlet            | 141 --------------
 templates/homepage.julius            |  34 ----
 templates/homepage.lucius            |  13 --
 templates/profile.hamlet             |  10 -
 templates/todolist-items.hamlet      |  32 ++--
 templates/todolist.hamlet            |  22 +--
 20 files changed, 440 insertions(+), 568 deletions(-)
 delete mode 100644 templates/homepage.hamlet
 delete mode 100644 templates/homepage.julius
 delete mode 100644 templates/homepage.lucius
 delete mode 100644 templates/profile.hamlet

diff --git a/README.md b/README.md
index 8f8616b..f959a93 100644
--- a/README.md
+++ b/README.md
@@ -10,16 +10,18 @@ The goal is to provide a minimalistic and fast todo list that is self hostable.
 	- [ ] add some css to make it look nicer
 	- [ ] add htmx to make more agreable without making js manadatory
 	- [x] make api to allow usage with native app (a way to get every list that has been modified since date $date belonging from the user in a json or similar format)
+  - [ ] use getRep and provideRep to make text/javascript response as alternatives to html
 	- [ ] document api to help create clients
 ## Version 0.0.3
 Simple todo list webapp.
 Features :
-	- add and delete (and soon share) groups that contain a list of todolists
+	- add and delete groups that contain a list of todolists
 	- add and delete todolists inside groups
 	- add todolist items or edit complete list via text for easy manipulation
+  - api to allow creating native clients with offline capability
 	- possibility to deploy easily via nix module with a flake
 	- that's it, the goal is to keep it minimal !!!
-
+# Development
 ## Haskell Setup (I sadly don't use nix develop at the moment)
 
 1. If you haven't already, [install Stack](https://haskell-lang.org/get-started)
diff --git a/config/models.persistentmodels b/config/models.persistentmodels
index d9a31b5..07df491 100644
--- a/config/models.persistentmodels
+++ b/config/models.persistentmodels
@@ -10,13 +10,13 @@ Todolist
     title Text
     lastModified UTCTime
     UniqueListPair groupId title
-    deriving Show
 User
     name Text
+    lastModified UTCTime
     UniqueName name
 Group
     group Text
     lastModified UTCTime
 GroupUser
     user UserId
-    groupId GroupId OnDeleteCascade
\ No newline at end of file
+    groupId GroupId OnDeleteCascade
diff --git a/src/Foundation.hs b/src/Foundation.hs
index bdd1015..98ad0e6 100644
--- a/src/Foundation.hs
+++ b/src/Foundation.hs
@@ -1,47 +1,51 @@
-{-# LANGUAGE NoImplicitPrelude #-}
-{-# LANGUAGE OverloadedStrings #-}
-{-# LANGUAGE TemplateHaskell #-}
+{-# LANGUAGE ExplicitForAll #-}
+{-# LANGUAGE ImportQualifiedPost #-}
+{-# LANGUAGE InstanceSigs #-}
 {-# LANGUAGE MultiParamTypeClasses #-}
+{-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE RankNTypes #-}
+{-# LANGUAGE TemplateHaskell #-}
 {-# LANGUAGE TypeFamilies #-}
 {-# LANGUAGE ViewPatterns #-}
-{-# LANGUAGE ExplicitForAll #-}
-{-# LANGUAGE RankNTypes #-}
-{-# LANGUAGE InstanceSigs #-}
+{-# LANGUAGE NoImplicitPrelude #-}
 
 module Foundation where
 
-import Import.NoFoundation
-import Data.Kind            (Type)
-import Database.Persist.Sql (ConnectionPool, runSqlPool, rawSql)
-import Text.Hamlet          (hamletFile)
-import Text.Jasmine         (minifym)
 import Control.Monad.Logger (LogSource)
+import Data.Kind (Type)
+import Database.Persist.Sql (ConnectionPool, rawSql, runSqlPool)
+import Import.NoFoundation
+import Text.Hamlet (hamletFile)
+import Text.Jasmine (minifym)
 
-import Yesod.Default.Util   (addStaticContentExternal)
-import Yesod.Core.Types     (Logger)
-import qualified Yesod.Core.Unsafe as Unsafe
+import Yesod.Core.Types (Logger)
+import Yesod.Core.Unsafe qualified as Unsafe
+import Yesod.Default.Util (addStaticContentExternal)
 
--- | The foundation datatype for your application. This can be a good place to
--- keep settings and values requiring initialization before your application
--- starts running, such as database connections. Every handler will have
--- access to the data present here.
+{- | The foundation datatype for your application. This can be a good place to
+keep settings and values requiring initialization before your application
+starts running, such as database connections. Every handler will have
+access to the data present here.
+-}
 data App = App
-    { appSettings    :: AppSettings
-    , appStatic      :: Static -- ^ Settings for static file serving.
-    , appConnPool    :: ConnectionPool -- ^ Database connection pool.
-    , appHttpManager :: Manager
-    , appLogger      :: Logger
-    }
+  { appSettings :: AppSettings
+  , appStatic :: Static
+  -- ^ Settings for static file serving.
+  , appConnPool :: ConnectionPool
+  -- ^ Database connection pool.
+  , appHttpManager :: Manager
+  , appLogger :: Logger
+  }
 
 data MenuItem = MenuItem
-    { menuItemLabel :: Text
-    , menuItemRoute :: Route App
-    , menuItemAccessCallback :: Bool
-    }
+  { menuItemLabel :: Text
+  , menuItemRoute :: Route App
+  , menuItemAccessCallback :: Bool
+  }
 
 data MenuTypes
-    = NavbarLeft MenuItem
-    | NavbarRight MenuItem
+  = NavbarLeft MenuItem
+  | NavbarRight MenuItem
 
 -- This is where we define all of the routes in our application. For a full
 -- explanation of the syntax, please see:
@@ -61,122 +65,128 @@ mkYesodData "App" $(parseRoutesFile "config/routes.yesodroutes")
 type Form x = Html -> MForm (HandlerFor App) (FormResult x, Widget)
 
 -- | A convenient synonym for database access functions.
-type DB a = forall (m :: Type -> Type).
-    (MonadUnliftIO m) => ReaderT SqlBackend m a
+type DB a =
+  forall (m :: Type -> Type).
+  (MonadUnliftIO m) =>
+  ReaderT SqlBackend m a
 
 -- Please see the documentation for the Yesod typeclass. There are a number
 -- of settings which can be configured by overriding methods here.
 instance Yesod App where
-    -- Controls the base of generated URLs. For more information on modifying,
-    -- see: https://github.com/yesodweb/yesod/wiki/Overriding-approot
-    approot :: Approot App
-    approot = ApprootRequest $ \app req ->
-        case appRoot $ appSettings app of
-            Nothing -> getApprootText guessApproot app req
-            Just root -> root
+  -- Controls the base of generated URLs. For more information on modifying,
+  -- see: https://github.com/yesodweb/yesod/wiki/Overriding-approot
+  approot :: Approot App
+  approot = ApprootRequest $ \app req ->
+    case appRoot $ appSettings app of
+      Nothing -> getApprootText guessApproot app req
+      Just root -> root
 
-    -- -- Store session data on the client in encrypted cookies,
-    -- -- default session idle timeout is 120 minutes
-    -- makeSessionBackend :: App -> IO (Maybe SessionBackend)
-    -- makeSessionBackend app = Just <$> defaultClientSessionBackend
-    --     120    -- timeout in minutes
-    --     (appSessionKey $ appSettings app)
+  -- -- Store session data on the client in encrypted cookies,
+  -- -- default session idle timeout is 120 minutes
+  -- makeSessionBackend :: App -> IO (Maybe SessionBackend)
+  -- makeSessionBackend app = Just <$> defaultClientSessionBackend
+  --     120    -- timeout in minutes
+  --     (appSessionKey $ appSettings app)
 
-    -- Yesod Middleware allows you to run code before and after each handler function.
-    -- The defaultYesodMiddleware adds the response header "Vary: Accept, Accept-Language" and performs authorization checks.
-    -- Some users may also want to add the defaultCsrfMiddleware, which:
-    --   a) Sets a cookie with a CSRF token in it.
-    --   b) Validates that incoming write requests include that token in either a header or POST parameter.
-    -- To add it, chain it together with the defaultMiddleware: yesodMiddleware = defaultYesodMiddleware . defaultCsrfMiddleware
-    -- For details, see the CSRF documentation in the Yesod.Core.Handler module of the yesod-core package.
-    -- yesodMiddleware :: ToTypedContent res => Handler res -> Handler res
-    -- yesodMiddleware = defaultYesodMiddleware . defaultCsrfMiddleware
+  -- Yesod Middleware allows you to run code before and after each handler function.
+  -- The defaultYesodMiddleware adds the response header "Vary: Accept, Accept-Language" and performs authorization checks.
+  -- Some users may also want to add the defaultCsrfMiddleware, which:
+  --   a) Sets a cookie with a CSRF token in it.
+  --   b) Validates that incoming write requests include that token in either a header or POST parameter.
+  -- To add it, chain it together with the defaultMiddleware: yesodMiddleware = defaultYesodMiddleware . defaultCsrfMiddleware
+  -- For details, see the CSRF documentation in the Yesod.Core.Handler module of the yesod-core package.
+  -- yesodMiddleware :: ToTypedContent res => Handler res -> Handler res
+  -- yesodMiddleware = defaultYesodMiddleware . defaultCsrfMiddleware
 
-    defaultLayout :: Widget -> Handler Html
-    defaultLayout widget = do
-        master <- getYesod
-        mmsg <- getMessage
+  defaultLayout :: Widget -> Handler Html
+  defaultLayout widget = do
+    master <- getYesod
+    mmsg <- getMessage
 
-        -- mcurrentRoute <- getCurrentRoute
+    -- mcurrentRoute <- getCurrentRoute
 
-        -- We break up the default layout into two components:
-        -- default-layout is the contents of the body tag, and
-        -- default-layout-wrapper is the entire page. Since the final
-        -- value passed to hamletToRepHtml cannot be a widget, this allows
-        -- you to use normal widget features in default-layout.
+    -- We break up the default layout into two components:
+    -- default-layout is the contents of the body tag, and
+    -- default-layout-wrapper is the entire page. Since the final
+    -- value passed to hamletToRepHtml cannot be a widget, this allows
+    -- you to use normal widget features in default-layout.
 
-        pc <- widgetToPageContent $ do
-            $(widgetFile "default-layout")
-        withUrlRenderer $(hamletFile "templates/default-layout-wrapper.hamlet")
+    pc <- widgetToPageContent $ do
+      $(widgetFile "default-layout")
+    withUrlRenderer $(hamletFile "templates/default-layout-wrapper.hamlet")
 
-    -- isAuthorized
-    --     :: Route App  -- ^ The route the user is visiting.
-    --     -> Bool       -- ^ Whether or not this is a "write" request.
-    --     -> Handler AuthResult
-    -- -- Routes not requiring authentication.
-    -- isAuthorized _ _ = return Authorized
+  -- isAuthorized
+  --     :: Route App  -- ^ The route the user is visiting.
+  --     -> Bool       -- ^ Whether or not this is a "write" request.
+  --     -> Handler AuthResult
+  -- -- Routes not requiring authentication.
+  -- isAuthorized _ _ = return Authorized
 
+  -- This function creates static content files in the static folder
+  -- and names them based on a hash of their content. This allows
+  -- expiration dates to be set far in the future without worry of
+  -- users receiving stale content.
+  addStaticContent ::
+    Text ->
+    -- \^ The file extension
+    Text ->
+    -- \^ The MIME content type
+    LByteString ->
+    -- \^ The contents of the file
+    Handler (Maybe (Either Text (Route App, [(Text, Text)])))
+  addStaticContent ext mime content = do
+    master <- getYesod
+    let staticDir = appStaticDir $ appSettings master
+    addStaticContentExternal
+      minifym
+      genFileName
+      staticDir
+      (StaticR . flip StaticRoute [])
+      ext
+      mime
+      content
+   where
+    -- Generate a unique filename based on the content itself
+    genFileName lbs = "autogen-" ++ base64md5 lbs
 
-    -- This function creates static content files in the static folder
-    -- and names them based on a hash of their content. This allows
-    -- expiration dates to be set far in the future without worry of
-    -- users receiving stale content.
-    addStaticContent
-        :: Text  -- ^ The file extension
-        -> Text -- ^ The MIME content type
-        -> LByteString -- ^ The contents of the file
-        -> Handler (Maybe (Either Text (Route App, [(Text, Text)])))
-    addStaticContent ext mime content = do
-        master <- getYesod
-        let staticDir = appStaticDir $ appSettings master
-        addStaticContentExternal
-            minifym
-            genFileName
-            staticDir
-            (StaticR . flip StaticRoute [])
-            ext
-            mime
-            content
-      where
-        -- Generate a unique filename based on the content itself
-        genFileName lbs = "autogen-" ++ base64md5 lbs
+  -- What messages should be logged. The following includes all messages when
+  -- in development, and warnings and errors in production.
+  shouldLogIO :: App -> LogSource -> LogLevel -> IO Bool
+  shouldLogIO app _source level =
+    return
+      $ appShouldLogAll (appSettings app)
+      || level
+      == LevelWarn
+      || level
+      == LevelError
 
-    -- What messages should be logged. The following includes all messages when
-    -- in development, and warnings and errors in production.
-    shouldLogIO :: App -> LogSource -> LogLevel -> IO Bool
-    shouldLogIO app _source level =
-        return $
-        appShouldLogAll (appSettings app)
-            || level == LevelWarn
-            || level == LevelError
-
-    makeLogger :: App -> IO Logger
-    makeLogger = return . appLogger
+  makeLogger :: App -> IO Logger
+  makeLogger = return . appLogger
 
 -- How to run database actions.
 instance YesodPersist App where
-    type YesodPersistBackend App = SqlBackend
-    runDB :: SqlPersistT Handler a -> Handler a
-    runDB action = do
-        master <- getYesod
-        runSqlPool action $ appConnPool master
+  type YesodPersistBackend App = SqlBackend
+  runDB :: SqlPersistT Handler a -> Handler a
+  runDB action = do
+    master <- getYesod
+    runSqlPool action $ appConnPool master
 
 instance YesodPersistRunner App where
-    getDBRunner :: Handler (DBRunner App, Handler ())
-    getDBRunner = defaultGetDBRunner appConnPool
+  getDBRunner :: Handler (DBRunner App, Handler ())
+  getDBRunner = defaultGetDBRunner appConnPool
 
 -- This instance is required to use forms. You can modify renderMessage to
 -- achieve customized and internationalized form validation messages.
 instance RenderMessage App FormMessage where
-    renderMessage :: App -> [Lang] -> FormMessage -> Text
-    renderMessage _ _ = defaultFormMessage
+  renderMessage :: App -> [Lang] -> FormMessage -> Text
+  renderMessage _ _ = defaultFormMessage
 
 -- Useful when writing code that is re-usable outside of the Handler context.
 -- An example is background jobs that send email.
 -- This can also be useful for writing code that works across multiple Yesod applications.
 instance HasHttpManager App where
-    getHttpManager :: App -> Manager
-    getHttpManager = appHttpManager
+  getHttpManager :: App -> Manager
+  getHttpManager = appHttpManager
 
 unsafeHandler :: App -> Handler a -> IO a
 unsafeHandler = Unsafe.fakeHandlerGetLogger appLogger
@@ -189,28 +199,29 @@ unsafeHandler = Unsafe.fakeHandlerGetLogger appLogger
 -- https://github.com/yesodweb/yesod/wiki/Serve-static-files-from-a-separate-domain
 -- https://github.com/yesodweb/yesod/wiki/i18n-messages-in-the-scaffolding
 
-
 -- TODO: complete implementation should short circuit if multi user is on but no user exist, to enforce policy safely
 getUserId :: HandlerFor App (Key User)
 getUserId = do
-    mName <- lookupHeader "Remote-User"
-    mUser <- case mName of
-            -- TODO: make remote user an argument to make it usable not only with authelia, and maybe do a check for good mesure when nothing is found ?
-            Just name -> runDB $ insertBy $ User (decodeUtf8 name)
-            Nothing -> runDB $ insertBy $ User "single-user"
-    case mUser of
-        Left (Entity userId _) -> return userId
-        Right userId -> return userId
+  mName <- lookupHeader "Remote-User"
+  currentTime <- liftIO getCurrentTime
+  mUser <- case mName of
+    -- TODO: make remote user an argument to make it usable not only with authelia, and maybe do a check for good mesure when nothing is found ?
+    Just name -> runDB $ insertBy $ User (decodeUtf8 name) currentTime
+    Nothing -> runDB $ insertBy $ User "single-user" currentTime
+  case mUser of
+    Left (Entity userId _) -> return userId
+    Right userId -> return userId
 
 dbIfAuth :: GroupId -> ReaderT SqlBackend (HandlerFor App) b -> HandlerFor App b
 dbIfAuth groupId action = do
-    -- TODO: decide if we prefer fast (rawSql) or safe (type safe persist query) after in production latency tests
-    user <- getUserId
-    result <- runDB $ selectFirst [GroupUserUser ==. user, GroupUserGroupId ==. groupId] []
-    if isNothing result then permissionDenied "you are not logged in or you dont have access to this group"
+  -- TODO: decide if we prefer fast (rawSql) or safe (type safe persist query) after in production latency tests
+  user <- getUserId
+  result <- runDB $ selectFirst [GroupUserUser ==. user, GroupUserGroupId ==. groupId] []
+  if isNothing result
+    then permissionDenied "you are not logged in or you dont have access to this group"
     else runDB action
 
 getGroups :: Key User -> Handler [Entity Group]
 getGroups userId =
-    let sql = "SELECT ?? FROM \"group\" JOIN group_user gu ON \"group\".id = gu.group_id WHERE gu.user = ?" in
-    runDB $ rawSql sql [toPersistValue userId]
\ No newline at end of file
+  let sql = "SELECT ?? FROM \"group\" JOIN group_user gu ON \"group\".id = gu.group_id WHERE gu.user = ?"
+   in runDB $ rawSql sql [toPersistValue userId]
diff --git a/src/Handler/Api.hs b/src/Handler/Api.hs
index f429a0e..c1be3d8 100644
--- a/src/Handler/Api.hs
+++ b/src/Handler/Api.hs
@@ -1,25 +1,36 @@
-{-# LANGUAGE NoImplicitPrelude #-}
+{-# LANGUAGE ImportQualifiedPost #-}
 {-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE NoImplicitPrelude #-}
 
 module Handler.Api where
 
-import Import
-import Database.Persist.Sql (rawSql)
+import Data.Text qualified as Text
 import Data.Time.Clock.POSIX (posixSecondsToUTCTime, utcTimeToPOSIXSeconds)
-import qualified Data.Text as Text
+import Database.Persist.Sql (rawSql)
+import Import
+
 getApiR :: Int -> Handler TypedContent
 getApiR time = do
-    -- TODO: use only one runDB
-    userId <- getUserId
-    -- We get all groups no matter what, since else we can't know which groups have been deleted
-    groups <- getGroups userId
-    let utcTime = posixSecondsToUTCTime (fromIntegral time)
-    let sqlLists = "select ?? from todolist join group_user on todolist.group_id = group_user.group_id and group_user.user = ? join \"group\" on todolist.group_id = \"group\".id and \"group\".last_modified > ?;"
-    lists <- runDB $ rawSql sqlLists [toPersistValue userId, toPersistValue utcTime]
-    let a = lists :: [Entity Todolist]
-    let sqlItems = "select ?? from todolist join group_user on todolist.group_id = group_user.group_id and group_user.user = ? join \"group\" on todolist.group_id = \"group\".id and \"group\".last_modified > ? join todolist_item on todolist_item.todolist_id = todolist.id;"
-    items <- runDB $ rawSql sqlItems [toPersistValue userId, toPersistValue utcTime]
-    let t = unlines $ map groupToCSV groups <> map todolistToCSV lists <> map todolistItemToCSV items
+  -- TODO: use only one runDB (or use joins ?)
+  userId <- getUserId
+  let utcTime = posixSecondsToUTCTime (fromIntegral time)
+  -- condition : parent user or group changed
+  let sqlUpdatedGroups = "select ?? from \"group\" join group_user gu on \"group\".id = gu.group_id where gu.user = ? where \"group\".last_modified > ? or user.last_modified > ?;"
+  -- condition : parent group or list changed
+  let sqlUpdatedLists = "select ?? from todolist join group_user on todolist.group_id = group_user.group_id and group_user.user = ? join \"group\" as g on g.id = todolist.id where list.last_modified > ? or g.last_modified > ?;"
+  -- condition : parent list changed
+  let sqlUpdatedItems = "select ?? from todolist where todolist.last_modified > ? join group_user on todolist.group_id = group_user.group_id and group_user.user = ? join todolist_item on todolist_item.todolist_id = todolist.id;"
+  runDB $ do
+    user <- selectList [UserId ==. userId, UserLastModified >. utcTime] []
+    groups <- rawSql sqlUpdatedGroups [toPersistValue userId, toPersistValue utcTime, toPersistValue utcTime]
+    lists <- rawSql sqlUpdatedLists [toPersistValue userId, toPersistValue utcTime, toPersistValue utcTime]
+    items <- rawSql sqlUpdatedItems [toPersistValue utcTime, toPersistValue userId]
+    let t =
+          unlines
+            $ map userToCSV user
+            <> map groupToCSV groups
+            <> map todolistToCSV lists
+            <> map todolistItemToCSV items
     return $ TypedContent typePlain $ toContent t
 
 todolistItemToCSV :: Entity TodolistItem -> Text
@@ -28,9 +39,11 @@ todolistToCSV :: Entity Todolist -> Text
 todolistToCSV list = "l," <> fieldToText list
 groupToCSV :: Entity Group -> Text
 groupToCSV group = "g," <> fieldToText group
+userToCSV :: Entity User -> Text
+userToCSV user = "u," <> fieldToText user
 
 -- TODO: error management ? (maybe use Either Text Text and then propagate left to handler and send error ?)
-fieldToText :: PersistEntity record => Entity record -> Text
+fieldToText :: (PersistEntity record) => Entity record -> Text
 fieldToText field = Text.intercalate "," (map persistValueToText $ entityValues field)
 
 persistValueToText :: PersistValue -> Text
@@ -38,15 +51,15 @@ persistValueToText (PersistText s) = s
 persistValueToText (PersistInt64 i) = Text.pack $ show i
 persistValueToText (PersistUTCTime d) = Text.pack $ show $ floor (utcTimeToPOSIXSeconds d)
 persistValueToText (PersistBool b) = if b then "T" else "F"
-persistValueToText _ = error  "Wrong input type"
+persistValueToText _ = error "Wrong input type"
 
 getText :: Text
 getText = do
-    -- GET EVERY GROUP THAT HAS BEEN MODIFIED SINCE TIMESTAMP FROM USER
+  -- GET EVERY GROUP THAT HAS BEEN MODIFIED SINCE TIMESTAMP FROM USER
 
-    -- GET EVERY TODOLIST THAT HAS BEEN MODIFIED SINCE TIMESTAMP
-    -- GET EVERY ITEM FROM THESE TODOLISTS
-    -- ENCODE ALL OF THEM IN THE TEXTFILE
-    -- SEND IT !
-    -- DONE :)
-    error "not done yet"
\ No newline at end of file
+  -- GET EVERY TODOLIST THAT HAS BEEN MODIFIED SINCE TIMESTAMP
+  -- GET EVERY ITEM FROM THESE TODOLISTS
+  -- ENCODE ALL OF THEM IN THE TEXTFILE
+  -- SEND IT !
+  -- DONE :)
+  error "not done yet"
diff --git a/src/Handler/Group.hs b/src/Handler/Group.hs
index eb15bea..6c76734 100644
--- a/src/Handler/Group.hs
+++ b/src/Handler/Group.hs
@@ -1,58 +1,68 @@
-{-# LANGUAGE NoImplicitPrelude #-}
-{-# LANGUAGE OverloadedStrings #-}
-{-# LANGUAGE MultiParamTypeClasses #-}
-{-# LANGUAGE TypeFamilies #-}
-{-# LANGUAGE TemplateHaskell #-}
-{-# LANGUAGE QuasiQuotes #-}
 {-# LANGUAGE FlexibleContexts #-}
+{-# LANGUAGE MultiParamTypeClasses #-}
+{-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE QuasiQuotes #-}
+{-# LANGUAGE TemplateHaskell #-}
+{-# LANGUAGE TypeFamilies #-}
+{-# LANGUAGE NoImplicitPrelude #-}
 {-# OPTIONS_GHC -Wno-unrecognised-pragmas #-}
-{-# HLINT ignore "Replace case with fromMaybe" #-}
+
 module Handler.Group where
 
+import Database.Persist.Sql (fromSqlKey, toSqlKey)
 import Import
 import Text.Read
-import Database.Persist.Sql (fromSqlKey, toSqlKey)
+
 getGroupR :: Handler Html
 getGroupR = do
-    userId <- getUserId
-    groups <- getGroups userId
-    defaultLayout $ do
-        setTitle "Groups"
-        $(widgetFile "group")
+  userId <- getUserId
+  groups <- getGroups userId
+  defaultLayout $ do
+    setTitle "Groups"
+    $(widgetFile "group")
 postAddGroupR :: Handler Html
 postAddGroupR = do
-    g <- runInputPost $ ireq textField "group"
-    -- TODO: in a newer version, put insertUnique_
-    user <- getUserId
-    _ <- runDB $ do
-        currentTime <- liftIO getCurrentTime
-        gId <- insert $ Group g currentTime
-        success <- insertUnique $ GroupUser user gId
-        when (isNothing success) $ delete gId
-    redirect GroupR
+  g <- runInputPost $ ireq textField "group"
+  -- TODO: in a newer version, put insertUnique_
+  user <- getUserId
+  _ <- runDB $ do
+    currentTime <- liftIO getCurrentTime
+    gId <- insert $ Group g currentTime
+    success <- insertUnique $ GroupUser user gId
+    when (isNothing success) $ delete gId
+  redirect GroupR
 
 getEditGroupR :: Handler Html
 getEditGroupR = do
-    userId <- getUserId
-    groups <- getGroups userId
-    defaultLayout $ do
-        let a e = pack $ show $ fromSqlKey $ entityKey e ::Text
-        setTitle "Groups"
-        $(widgetFile "edit-group")
+  userId <- getUserId
+  groups <- getGroups userId
+  defaultLayout $ do
+    let a e = pack $ show $ fromSqlKey $ entityKey e :: Text
+    setTitle "Groups"
+    $(widgetFile "edit-group")
 postEditGroupR :: Handler Html
 postEditGroupR = do
-    -- TODO: not implemented yet
-    -- title <- runInputPost $ ireq textField "title"
-    -- users <- runInputPost $ ireq textField "users"
-    -- id <- runInputPost $ ireq intField "id"
-    -- let key = toSqlKey id
-    -- runDB $ update key [GroupGroup =. title]
-    redirect EditGroupR
+  -- TODO: not implemented yet
+  -- title <- runInputPost $ ireq textField "title"
+  -- users <- runInputPost $ ireq textField "users"
+  -- id <- runInputPost $ ireq intField "id"
+  -- let key = toSqlKey id
+  -- runDB $ update key [GroupGroup =. title]
+  redirect EditGroupR
 postDeleteGroupR :: Handler Html
 postDeleteGroupR = do
-    text <- lookupPostParams "ids"
-    let ints = map (read . unpack) text :: [Int64]
-    let ids = map toSqlKey ints :: [GroupId]
-    -- TODO: make sure the user has access to it aswell (this only works now for single user), and handle group owned by many
-    runDB $ deleteWhere [GroupId <-. ids]
-    redirect EditGroupR
\ No newline at end of file
+  text <- lookupPostParams "ids"
+  let ints = map (read . unpack) text :: [Int64]
+  let ids = map toSqlKey ints :: [GroupId]
+  userId <- getUserId
+  currentTime <- liftIO getCurrentTime
+  -- TODO: test this and maybe change it to sql to be more efficient ?
+  when (ids /= [])
+    $ runDB
+    $ do
+      update userId [UserLastModified =. currentTime]
+      deleteWhere [GroupUserGroupId <-. ids, GroupUserUser ==. userId]
+      nonOrphans <- selectList [GroupUserGroupId <-. ids] []
+      let nonOrphansIds = map (groupUserGroupId . entityVal) nonOrphans
+      deleteWhere [GroupId <-. ids, GroupId /<-. nonOrphansIds]
+  redirect EditGroupR
diff --git a/src/Handler/Todolist.hs b/src/Handler/Todolist.hs
index 1520130..c145309 100644
--- a/src/Handler/Todolist.hs
+++ b/src/Handler/Todolist.hs
@@ -1,61 +1,74 @@
-{-# LANGUAGE NoImplicitPrelude #-}
-{-# LANGUAGE OverloadedStrings #-}
-{-# LANGUAGE MultiParamTypeClasses #-}
-{-# LANGUAGE TypeFamilies #-}
-{-# LANGUAGE TemplateHaskell #-}
-{-# LANGUAGE QuasiQuotes #-}
 {-# LANGUAGE FlexibleContexts #-}
+{-# LANGUAGE MultiParamTypeClasses #-}
+{-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE QuasiQuotes #-}
+{-# LANGUAGE TemplateHaskell #-}
+{-# LANGUAGE TypeFamilies #-}
+{-# LANGUAGE NoImplicitPrelude #-}
 {-# OPTIONS_GHC -Wno-unrecognised-pragmas #-}
+
 {-# HLINT ignore "Replace case with fromMaybe" #-}
 module Handler.Todolist where
 
+import Database.Persist.Sql (fromSqlKey, toSqlKey)
 import Import
 import Text.Read
-import Database.Persist.Sql (fromSqlKey, toSqlKey)
+
 postAddTodolistR :: GroupId -> Handler Html
 postAddTodolistR groupId = do
-        list <- runInputPost $ ireq textField "list"
-        -- TODO: in a newer version, put insertUnique_
-        currentTime <- liftIO getCurrentTime
-        _ <- dbIfAuth groupId (insertUnique $ Todolist groupId list currentTime)
-        redirect $ TodolistR groupId
+  list <- runInputPost $ ireq textField "list"
+  -- TODO: in a newer version, put insertUnique_
+  currentTime <- liftIO getCurrentTime
+  _ <- dbIfAuth groupId (insertUnique $ Todolist groupId list currentTime)
+  redirect $ TodolistR groupId
 
--- TODO: move this to a new handler file
 getTodolistR :: GroupId -> Handler Html
 getTodolistR groupId = do
-    lists <- dbIfAuth groupId (selectList [TodolistGroupId ==. groupId] [])
-    defaultLayout $ do
-        let getTitle = todolistTitle . entityVal
-        setTitle "todolist"
-        $(widgetFile "todolist")
+  lists <- dbIfAuth groupId (selectList [TodolistGroupId ==. groupId] [])
+  defaultLayout $ do
+    let getTitle = todolistTitle . entityVal
+    setTitle "todolist"
+    $(widgetFile "todolist")
 
 getEditTodolistR :: GroupId -> Handler Html
 getEditTodolistR groupId = do
-    lists <- runDB $
-        selectList [TodolistGroupId ==. groupId] [Asc TodolistTitle]
-    defaultLayout $ do
-        let keyToText e = pack $ show $ fromSqlKey $ entityKey e ::Text
-        setTitle "Groups"
-        $(widgetFile "edit-todolist")
+  lists <-
+    runDB
+      $ selectList [TodolistGroupId ==. groupId] [Asc TodolistTitle]
+  defaultLayout $ do
+    let keyToText e = pack $ show $ fromSqlKey $ entityKey e :: Text
+    setTitle "Groups"
+    $(widgetFile "edit-todolist")
 
 postDeleteTodolistR :: GroupId -> Handler Html
 postDeleteTodolistR groupId = do
-    text <- lookupPostParams "ids"
-    let ints = map (read . unpack) text :: [Int64]
-    let ids = map toSqlKey ints :: [TodolistId]
-    dbIfAuth groupId (deleteWhere [TodolistId <-. ids])
-    redirect $ EditTodolistR groupId
+  text <- lookupPostParams "ids"
+  currentTime <- liftIO getCurrentTime
+  let ints = map (read . unpack) text :: [Int64]
+  let ids = map toSqlKey ints :: [TodolistId]
+  dbIfAuth
+    groupId
+    ( do
+        deleteWhere [TodolistId <-. ids]
+        update groupId [GroupLastModified =. currentTime]
+    )
+
+  redirect $ EditTodolistR groupId
 postEditTodolistR :: GroupId -> Handler Html
 postEditTodolistR groupId = error "not done yet"
 
 postAddUserR :: GroupId -> Handler Html
-postAddUserR groupId= do
-    user <- runInputPost $ ireq textField "user"
-    _ <- dbIfAuth groupId (do
-        mUserId <- getBy $ UniqueName user
-        case mUserId of
-            Nothing -> --handle error
-                redirect $ TodolistR groupId
+postAddUserR groupId = do
+  user <- runInputPost $ ireq textField "user"
+  _ <-
+    dbIfAuth
+      groupId
+      ( do
+          mUserId <- getBy $ UniqueName user
+          case mUserId of
+            Nothing ->
+              -- handle error
+              redirect $ TodolistR groupId
             Just userId -> insert $ GroupUser (entityKey userId) groupId
-        )
-    redirect $ TodolistR groupId
\ No newline at end of file
+      )
+  redirect $ TodolistR groupId
diff --git a/src/Handler/TodolistItem.hs b/src/Handler/TodolistItem.hs
index 9340ff9..4dc8f7a 100644
--- a/src/Handler/TodolistItem.hs
+++ b/src/Handler/TodolistItem.hs
@@ -1,91 +1,117 @@
-{-# LANGUAGE NoImplicitPrelude #-}
-{-# LANGUAGE OverloadedStrings #-}
-{-# LANGUAGE MultiParamTypeClasses #-}
-{-# LANGUAGE TypeFamilies #-}
-{-# LANGUAGE TemplateHaskell #-}
-{-# LANGUAGE QuasiQuotes #-}
 {-# LANGUAGE FlexibleContexts #-}
+{-# LANGUAGE MultiParamTypeClasses #-}
+{-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE QuasiQuotes #-}
+{-# LANGUAGE TemplateHaskell #-}
+{-# LANGUAGE TypeFamilies #-}
+{-# LANGUAGE NoImplicitPrelude #-}
 {-# OPTIONS_GHC -Wno-unrecognised-pragmas #-}
+
 {-# HLINT ignore "Replace case with fromMaybe" #-}
 module Handler.TodolistItem where
 
-import Import
 import Database.Persist.Sql (rawExecute)
+import Import
 
 getTodolistItemsR :: GroupId -> TodolistId -> Handler Html
 getTodolistItemsR groupId todolistId = do
-    mSortOption <- lookupSession "sort"
-    items <- case mSortOption of
-        (Just "value") -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Desc TodolistItemValue, Asc TodolistItemId])
-        _ -> dbIfAuth groupId  (selectList [TodolistItemTodolistId ==. todolistId] [Asc TodolistItemId])
-
-    defaultLayout $ do
-        setTitle "items"
-        $(widgetFile "todolist-items")
+  mSortOption <- lookupSession "sort"
+  items <- case mSortOption of
+    (Just "value") -> dbIfAuth groupId (selectList [TodolistItemTodolistId ==. todolistId] [Desc TodolistItemValue, Asc TodolistItemId])
+    _ -> dbIfAuth groupId (selectList [TodolistItemTodolistId ==. todolistId] [Asc TodolistItemId])
 
+  defaultLayout $ do
+    setTitle "items"
+    $(widgetFile "todolist-items")
 
 postCheckTodolistItemR :: GroupId -> TodolistId -> TodolistItemId -> Handler Html
 postCheckTodolistItemR groupId todolistId todolistItemId = do
-    dbIfAuth groupId  (rawExecute "UPDATE todolist_item SET value = NOT value WHERE id = ?" [toPersistValue todolistItemId])
-    redirect $ TodolistItemsR groupId todolistId
-
+  currentTime <- liftIO getCurrentTime
+  dbIfAuth
+    groupId
+    ( do
+        rawExecute "UPDATE todolist_item SET value = NOT value WHERE id = ?" [toPersistValue todolistItemId]
+        update todolistId [TodolistLastModified =. currentTime]
+    )
+  redirect $ TodolistItemsR groupId todolistId
 
 postAddTodolistItemR :: GroupId -> TodolistId -> Handler Html
 postAddTodolistItemR groupId todolistId = do
-    item <- runInputPost $ ireq textField "item"
-    _ <- dbIfAuth groupId (insert_ $ TodolistItem todolistId False item)
-    redirect $ TodolistItemsR groupId todolistId
+  currentTime <- liftIO getCurrentTime
+  item <- runInputPost $ ireq textField "item"
+  _ <-
+    dbIfAuth
+      groupId
+      ( do
+          insert_ $ TodolistItem todolistId False item
+          update todolistId [TodolistLastModified =. currentTime]
+      )
+  redirect $ TodolistItemsR groupId todolistId
 
 getEditTodolistItemsR :: GroupId -> TodolistId -> Handler Html
 getEditTodolistItemsR groupId todolistId = do
-    items <- dbIfAuth groupId (selectList [TodolistItemTodolistId ==. todolistId] [])
-    let text = unlines $ map getText items
-    defaultLayout $ do
-        setTitle "edit"
-        $(widgetFile "edit-todolist-items")
-        
+  items <- dbIfAuth groupId (selectList [TodolistItemTodolistId ==. todolistId] [])
+  let text = unlines $ map getText items
+  defaultLayout $ do
+    setTitle "edit"
+    $(widgetFile "edit-todolist-items")
+
 postEditTodolistItemsR :: GroupId -> TodolistId -> Handler Html
 postEditTodolistItemsR groupId todolistId = do
-    mText <- runInputPost $ iopt textField "text"
-    let xs = case mText of 
-            (Just text) -> getItems text todolistId
-            Nothing -> []
-    dbIfAuth groupId (do
+  currentTime <- liftIO getCurrentTime
+  mText <- runInputPost $ iopt textField "text"
+  let xs = case mText of
+        (Just text) -> getItems text todolistId
+        Nothing -> [] -- Case statement used to let delete all without error TODO: check if can use flatmap instead ?
+  dbIfAuth
+    groupId
+    ( do
         deleteWhere [TodolistItemTodolistId ==. todolistId]
-        insertMany_ xs)
-        
-    redirect $ TodolistItemsR groupId todolistId
+        insertMany_ xs
+        update todolistId [TodolistLastModified =. currentTime]
+    )
 
-getText :: Entity TodolistItem -> Text
-getText item =
-                if value then "[x] " <> name
-                else "[ ] " <> name
-                where
-                    value = (todolistItemValue . entityVal) item
-                    name = (todolistItemName . entityVal) item
-
-getItems :: Text -> TodolistId -> [TodolistItem]
-getItems text todolistId = map read (lines text)
-                where read line = do
-                        let (d, n) = splitAt 4 line
-                        let
-                                value = case d of
-                                        "[x] " -> True
-                                        "[ ] " -> False
-                                        _ -> error "Invalid status"
-                                name = case n of
-                                        "" -> error "empty name"
-                                        something -> filter (/= '\r') something
-                        TodolistItem todolistId value name
+  redirect $ TodolistItemsR groupId todolistId
 
 postTrimTodolistItemsR :: GroupId -> TodolistId -> Handler Html
 postTrimTodolistItemsR groupId todolistId = do
-        dbIfAuth groupId  (deleteWhere [TodolistItemTodolistId ==. todolistId, TodolistItemValue ==. True])
-        redirect $ TodolistItemsR groupId todolistId
+  currentTime <- liftIO getCurrentTime
+  dbIfAuth
+    groupId
+    ( do
+        deleteWhere [TodolistItemTodolistId ==. todolistId, TodolistItemValue ==. True]
+        update todolistId [TodolistLastModified =. currentTime]
+    )
+  redirect $ TodolistItemsR groupId todolistId
+
 postSortTodolistItemsR :: GroupId -> TodolistId -> Handler Html
-postSortTodolistItemsR  groupId todolistId = do
-    mSession <- lookupSession "sort"
-    case mSession of
-        (Just "value") -> setSession "sort" "id"
-        _ -> setSession "sort" "value"
-    redirect $ TodolistItemsR groupId todolistId
\ No newline at end of file
+postSortTodolistItemsR groupId todolistId = do
+  mSession <- lookupSession "sort"
+  case mSession of
+    (Just "value") -> setSession "sort" "id"
+    _ -> setSession "sort" "value"
+  redirect $ TodolistItemsR groupId todolistId
+
+getText :: Entity TodolistItem -> Text
+getText item =
+  if value
+    then "[x] " <> name
+    else "[ ] " <> name
+ where
+  value = (todolistItemValue . entityVal) item
+  name = (todolistItemName . entityVal) item
+
+getItems :: Text -> TodolistId -> [TodolistItem]
+getItems text todolistId = map read (lines text)
+ where
+  read line = do
+    let (d, n) = splitAt 4 line
+    let
+      value = case d of
+        "[x] " -> True
+        "[ ] " -> False
+        _ -> error "Invalid status"
+      name = case n of
+        "" -> error "empty name"
+        something -> filter (/= '\r') something
+    TodolistItem todolistId value name
diff --git a/stack.yaml b/stack.yaml
index 3092e82..377bf75 100644
--- a/stack.yaml
+++ b/stack.yaml
@@ -20,10 +20,6 @@
 snapshot:
   url: https://raw.githubusercontent.com/commercialhaskell/stackage-snapshots/master/lts/20/26.yaml
 
-nix:
-  enable: true
-  pure: false
-
 # User packages to be built.
 # Various formats can be used as shown in the example below.
 #
@@ -53,7 +49,7 @@ packages:
 # extra-package-dbs: []
 
 # Control whether we use the GHC we find on the path
-# system-ghc: true
+system-ghc: true
 #
 # Require a specific version of Stack, using version ranges
 # require-stack-version: -any # Default
diff --git a/stack.yaml.lock b/stack.yaml.lock
index 7b81abd..eef24df 100644
--- a/stack.yaml.lock
+++ b/stack.yaml.lock
@@ -1,7 +1,7 @@
 # This file was autogenerated by Stack.
 # You should not edit this file by hand.
 # For more information, please see the documentation at:
-#   https://docs.haskellstack.org/en/stable/topics/lock_files
+#   https://docs.haskellstack.org/en/stable/lock_files
 
 packages: []
 snapshots:
diff --git a/templates/default-layout.hamlet b/templates/default-layout.hamlet
index f18fd65..2ef168a 100644
--- a/templates/default-layout.hamlet
+++ b/templates/default-layout.hamlet
@@ -1,11 +1,10 @@
 <!-- Page Contents -->
 <div .container>
-    $maybe msg <- mmsg
-      <div>#{msg}
-
-^{widget}
+  $maybe msg <- mmsg
+    <div>#{msg}
+  ^{widget}
 
 <!-- Footer -->
 <footer>
-        <p>
-            #{appCopyright $ appSettings master}
+  <p>
+    #{appCopyright $ appSettings master}
diff --git a/templates/edit-group.hamlet b/templates/edit-group.hamlet
index f8f4f2f..8e652d8 100644
--- a/templates/edit-group.hamlet
+++ b/templates/edit-group.hamlet
@@ -1,8 +1,8 @@
 <form action=@{DeleteGroupR} method="POST">
-                <ul>
-                    $forall group <- groups
-                        <li>
-                            <input type="checkbox" name="ids" value="#{a group}">
-                            <a href="">#{(groupGroup . entityVal) group}
-                <button type=submit>Delete selected 
-            <a href=@{GroupR}>Back
\ No newline at end of file
+  <ul>
+    $forall group <- groups
+      <li>
+        <input type="checkbox" name="ids" value="#{a group}">
+        <a href="">#{(groupGroup . entityVal) group}
+  <button type=submit>Delete selected 
+<a href=@{GroupR}>Back
diff --git a/templates/edit-todolist-items.hamlet b/templates/edit-todolist-items.hamlet
index 4d1e9c8..4358384 100644
--- a/templates/edit-todolist-items.hamlet
+++ b/templates/edit-todolist-items.hamlet
@@ -1,6 +1,6 @@
 <form action=@{EditTodolistItemsR groupId todolistId} method=POST>
-                <label for="edit text area">Edit todolist
-                <br>
-                <textarea id="edit text area" name=text rows=30 cols=50 placeholder="[x] wake up1&#10;[x] eat&#10;[ ] sleep&#10;[ ] repeat">#{text}
-                <br>
-                <button type="submit">edit
\ No newline at end of file
+  <label for="edit text area">Edit todolist
+  <br>
+  <textarea id="edit text area" name=text rows=30 cols=50 placeholder="[x] wake up1&#10;[x] eat&#10;[ ] sleep&#10;[ ] repeat">#{text}
+  <br>
+  <button type="submit">edit
diff --git a/templates/edit-todolist.hamlet b/templates/edit-todolist.hamlet
index 084ac60..3cd9ce3 100644
--- a/templates/edit-todolist.hamlet
+++ b/templates/edit-todolist.hamlet
@@ -1,8 +1,8 @@
 <form action=@{DeleteTodolistR groupId} method="POST">
-                <ul>
-                    $forall list <- lists
-                        <li>
-                            <input type="checkbox" name="ids" value="#{keyToText list}">
-                            <a href="">#{(todolistTitle . entityVal) list}
-                <button type=submit>Delete selected
-            <a href=@{TodolistR groupId}>Back
\ No newline at end of file
+  <ul>
+    $forall list <- lists
+      <li>
+        <input type="checkbox" name="ids" value="#{keyToText list}">
+        <a href="">#{(todolistTitle . entityVal) list}
+  <button type=submit>Delete selected
+<a href=@{TodolistR groupId}>Back
diff --git a/templates/group.hamlet b/templates/group.hamlet
index f6487c9..6627ee7 100644
--- a/templates/group.hamlet
+++ b/templates/group.hamlet
@@ -1,9 +1,9 @@
 <a href=@{GroupR}>Home
-            <ul>
-                $forall group <- groups
-                    <li>
-                        <a href=@{TodolistR $ entityKey group}>#{(groupGroup . entityVal) group}
-            <form action=@{AddGroupR} method="post">
-                <input type="text" name="group" placeholder="new group">
-                <button type="submit">add
-            <a href=@{EditGroupR}>Edit
\ No newline at end of file
+<ul>
+  $forall group <- groups
+    <li>
+      <a href=@{TodolistR $ entityKey group}>#{(groupGroup . entityVal) group}
+<form action=@{AddGroupR} method="post">
+    <input type="text" name="group" placeholder="new group">
+    <button type="submit">add
+<a href=@{EditGroupR}>Edit
diff --git a/templates/homepage.hamlet b/templates/homepage.hamlet
deleted file mode 100644
index d6f50b0..0000000
--- a/templates/homepage.hamlet
+++ /dev/null
@@ -1,141 +0,0 @@
-<div .masthead>
-    <div .container>
-        <div .row>
-            <h1 .header>
-                Yesod—a modern framework for blazing fast websites
-            <h2>
-                Fast, stable & spiced with great community
-            <a href="http://www.yesodweb.com/book/" .btn.btn-info.btn-lg>
-                Read the Book
-
-<div .container>
-    <!-- Starting
-        ================================================== -->
-    <div .bs-docs-section>
-        <div .row>
-            <div .col-lg-12>
-                <div .page-header>
-                    <h1 #start>Starting
-
-                    <p>
-                        Now that you have a working project you should use the
-                        <a href=http://www.yesodweb.com/book/>Yesod book</a> to learn more.
-                    <p>
-                        You can also use this scaffolded site to explore some concepts, and best practices.
-
-                    <ul .list-group>
-
-                        <li .list-group-item>
-                            This page was generated by the <tt>#{handlerName}</tt> handler in
-                            <tt>Handler/Home.hs</tt>.
-
-                        <li .list-group-item>
-                            The <tt>#{handlerName}</tt> handler is set to generate your
-                            site's home screen in the Routes file
-                            <tt>config/routes.yesodroutes
-
-                        <li .list-group-item>
-                            We can link to other handlers, like the <a href="@{ProfileR}">Profile</a>.
-                            Try it out as an anonymous user and see the access denied.
-                            Then, try to <a href="@{AuthR LoginR}">login</a> with the dummy authentication added
-                            while in development.
-
-                        <li .list-group-item>
-                            The HTML you are seeing now is actually composed by a number of <em>widgets</em>, #
-                            most of them are brought together by the <tt>defaultLayout</tt> function which #
-                            is defined in the <tt>Foundation.hs</tt> module, and used by <tt>#{handlerName}</tt>. #
-                            All the files for templates and widgets are in <tt>templates</tt>.
-
-                        <li .list-group-item>
-                            A Widget's Html, Css and Javascript are separated in three files with the
-                            <tt>.hamlet</tt>, <tt>.lucius</tt> and <tt>.julius</tt> extensions.
-
-                        <li .list-group-item ##{aDomId}>
-                            If you had javascript enabled then you wouldn't be seeing this.
-
-    <hr>
-
-    <!-- Forms
-        ================================================== -->
-    <div .bs-docs-section>
-        <div .row>
-            <div .col-lg-12>
-                <div .page-header>
-                    <h1 #forms>Forms
-
-                    <p>
-                        This is an example of a form. Read the
-                        <a href="http://www.yesodweb.com/book/forms">Forms chapter</a> #
-                        in the yesod book to learn more about them.
-
-        <div .row>
-            <div .col-lg-6>
-                <div .bs-callout bs-callout-info well>
-                    <form .form-horizontal method=post action=@{HomeR}#forms enctype=#{formEnctype}>
-                        ^{formWidget}
-
-                        <button .btn.btn-primary type="submit">
-                            Upload it!
-
-
-            <div .col-lg-4.col-lg-offset-1>
-                <div .bs-callout.bs-callout-info.upload-response>
-
-                    $maybe (FileForm info con) <- submission
-                        Your file type is <em>#{fileContentType info}</em>. You say it has: <em>#{con}</em>
-
-                    $nothing
-                        File upload result will be here...
-
-
-    <hr>
-
-    <!-- JSON
-        ================================================== -->
-    <div .bs-docs-section>
-        <div .row>
-            <div .col-lg-12>
-                <div .page-header>
-                    <h1 #json>JSON
-
-                    <p>
-                        Yesod has JSON support baked-in.
-                        The form below makes an AJAX request with Javascript,
-                        then updates the page with your submission.
-                        (see <tt>Handler/Comment.hs</tt>, <tt>templates/homepage.julius</tt>,
-                        and <tt>Handler/Home.hs</tt> for the implementation).
-
-        <div .row>
-            <div .col-lg-6>
-                <div .bs-callout.bs-callout-info.well>
-                    <form .form-horizontal ##{commentFormId}>
-                        <div .field>
-                            <textarea rows="2" ##{commentTextareaId} placeholder="Your comment here..." required></textarea>
-
-                        <button .btn.btn-primary type=submit>
-                           Create comment
-
-           <div .col-lg-4.col-lg-offset-1>
-               <div .bs-callout.bs-callout-info>
-                   <small>
-                       Your comments will appear here. You can also open the
-                       console log to see the raw response from the server.
-                   <ul ##{commentListId}>
-                       $forall comment <- allComments
-                           <li>#{commentMessage $ entityVal comment}
-
-    <hr>
-
-    <!-- Testing
-       ================================================== -->
-    <div .bs-docs-section>
-       <div .row>
-           <div .col-lg-12>
-               <div .page-header>
-                   <h1 #test>Testing
-
-                   <p>
-                       And last but not least, Testing. In <tt>test/Spec.hs</tt> you will find a #
-                       test suite that performs tests on this page.
-                   <p>
-                       You can run your tests by doing: <code>stack test</code>
diff --git a/templates/homepage.julius b/templates/homepage.julius
deleted file mode 100644
index 865882e..0000000
--- a/templates/homepage.julius
+++ /dev/null
@@ -1,34 +0,0 @@
-document.getElementById(#{toJSON aDomId}).innerHTML = "This text was added by the Javascript part of the homepage widget.";
-
-$(function() {
-  $("##{rawJS commentFormId}").submit(function(event) {
-    event.preventDefault();
-
-    var message = $("##{rawJS commentTextareaId}").val();
-    // (Browsers that enforce the "required" attribute on the textarea won't see this alert)
-    if (!message) {
-      alert("Please fill out the comment form first.");
-      return;
-    }
-
-    // Make an AJAX request to the server to create a new comment
-    $.ajax({
-      url: '@{CommentR}',
-      type: 'POST',
-      contentType: "application/json",
-      data: JSON.stringify({
-        message: message,
-      }),
-      success: function (data) {
-        var newNode = $("<li></li>");
-        newNode.text(data.message);
-        console.log(data);
-        $("##{rawJS commentListId}").append(newNode);
-      },
-      error: function (data) {
-        console.log("Error creating comment: " + data);
-      },
-    });
-
-  });
-});
diff --git a/templates/homepage.lucius b/templates/homepage.lucius
deleted file mode 100644
index 3197fd5..0000000
--- a/templates/homepage.lucius
+++ /dev/null
@@ -1,13 +0,0 @@
-h2##{aDomId} {
-    color: #990
-}
-
-li {
-    line-height: 2em;
-    font-size: 16px
-}
-
-##{commentTextareaId} {
-    width: 400px;
-    height: 100px;
-}
diff --git a/templates/profile.hamlet b/templates/profile.hamlet
deleted file mode 100644
index 2420de6..0000000
--- a/templates/profile.hamlet
+++ /dev/null
@@ -1,10 +0,0 @@
-<div .ui.container>
-
-    <h1>
-      Access granted!
-
-    <p>
-      This page is protected and access is allowed only for authenticated users.
-
-    <p>
-      Your data is protected with us <strong><span class="username">#{userIdent user}</span></strong>!
diff --git a/templates/todolist-items.hamlet b/templates/todolist-items.hamlet
index be86652..ce4d5bf 100644
--- a/templates/todolist-items.hamlet
+++ b/templates/todolist-items.hamlet
@@ -1,17 +1,17 @@
 <a href=@{GroupR}>Home
-            &nbsp;
-            <a href=@{TodolistR groupId}>Lists
-            <ul>
-                $forall item <- items
-                    <li>
-                        <form action=@{CheckTodolistItemR groupId todolistId (entityKey item)} method="POST">
-                             <button type="submit">#{getText item}
-                            <form action=@{AddTodolistItemR groupId todolistId} method="post">
-            <form action=@{AddTodolistItemR groupId todolistId} method="post">
-                <input type="text" name="item" placeholder="new item">
-                <button type="submit">add
-            <form action=@{TrimTodolistItemsR groupId todolistId} method="post">
-                <button type="submit">trim
-            <form action=@{SortTodolistItemsR groupId todolistId} method="post">
-                <button type="submit">sort
-            <a href=@{EditTodolistItemsR groupId todolistId}>Edit
\ No newline at end of file
+&nbsp;
+<a href=@{TodolistR groupId}>Lists
+<ul>
+  $forall item <- items
+    <li>
+      <form action=@{CheckTodolistItemR groupId todolistId (entityKey item)} method="POST">
+        <button type="submit">#{getText item}
+      <form action=@{AddTodolistItemR groupId todolistId} method="post">
+<form action=@{AddTodolistItemR groupId todolistId} method="post">
+    <input type="text" name="item" placeholder="new item">
+    <button type="submit">add
+<form action=@{TrimTodolistItemsR groupId todolistId} method="post">
+    <button type="submit">trim
+<form action=@{SortTodolistItemsR groupId todolistId} method="post">
+    <button type="submit">sort
+<a href=@{EditTodolistItemsR groupId todolistId}>Edit
diff --git a/templates/todolist.hamlet b/templates/todolist.hamlet
index 281b311..fe12c59 100644
--- a/templates/todolist.hamlet
+++ b/templates/todolist.hamlet
@@ -1,12 +1,12 @@
 <a href=@{GroupR}>Home
-            <ul>
-                    $forall list <- lists
-                        <li>
-                            <a href=@{TodolistItemsR groupId (entityKey list)}>#{getTitle list}
-            <form action=@{AddTodolistR groupId} method="post">
-                <input type="text" name="list" placeholder="new list">
-                <button type="submit">add
-            <form action=@{AddUserR groupId} method="post">
-                <input type="text" name="user" placeholder="new user">
-                <button type="submit">share
-            <a href=@{EditTodolistR groupId}>Edit
\ No newline at end of file
+<ul>
+  $forall list <- lists
+    <li>
+      <a href=@{TodolistItemsR groupId (entityKey list)}>#{getTitle list}
+<form action=@{AddTodolistR groupId} method="post">
+  <input type="text" name="list" placeholder="new list">
+  <button type="submit">add
+<form action=@{AddUserR groupId} method="post">
+  <input type="text" name="user" placeholder="new user">
+  <button type="submit">share
+<a href=@{EditTodolistR groupId}>Edit

From 16bcee802d3c6dc2c47432acb56fd214e9c23959 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Mon, 14 Jul 2025 22:07:57 +0200
Subject: [PATCH 33/34] added some text capabilities

---
 src/Foundation.hs           | 22 ++++++++++++++++++++++
 src/Handler/Api.hs          | 34 +---------------------------------
 src/Handler/Group.hs        | 17 +++++++++++------
 src/Handler/Todolist.hs     | 14 +++++++++-----
 src/Handler/TodolistItem.hs | 12 ++++++++----
 5 files changed, 51 insertions(+), 48 deletions(-)

diff --git a/src/Foundation.hs b/src/Foundation.hs
index 98ad0e6..80b5326 100644
--- a/src/Foundation.hs
+++ b/src/Foundation.hs
@@ -13,11 +13,13 @@ module Foundation where
 
 import Control.Monad.Logger (LogSource)
 import Data.Kind (Type)
+import Data.Text qualified as Text (intercalate, pack)
 import Database.Persist.Sql (ConnectionPool, rawSql, runSqlPool)
 import Import.NoFoundation
 import Text.Hamlet (hamletFile)
 import Text.Jasmine (minifym)
 
+import Data.Time.Clock.POSIX (utcTimeToPOSIXSeconds)
 import Yesod.Core.Types (Logger)
 import Yesod.Core.Unsafe qualified as Unsafe
 import Yesod.Default.Util (addStaticContentExternal)
@@ -225,3 +227,23 @@ getGroups :: Key User -> Handler [Entity Group]
 getGroups userId =
   let sql = "SELECT ?? FROM \"group\" JOIN group_user gu ON \"group\".id = gu.group_id WHERE gu.user = ?"
    in runDB $ rawSql sql [toPersistValue userId]
+
+todolistItemToCSV :: Entity TodolistItem -> Text
+todolistItemToCSV item = "i," <> fieldToText item
+todolistToCSV :: Entity Todolist -> Text
+todolistToCSV list = "l," <> fieldToText list
+groupToCSV :: Entity Group -> Text
+groupToCSV group = "g," <> fieldToText group
+userToCSV :: Entity User -> Text
+userToCSV user = "u," <> fieldToText user
+
+-- TODO: error management ? (maybe use Either Text Text and then propagate left to handler and send error ?)
+fieldToText :: (PersistEntity record) => Entity record -> Text
+fieldToText field = Text.intercalate "," (map persistValueToText $ entityValues field)
+
+persistValueToText :: PersistValue -> Text
+persistValueToText (PersistText s) = s
+persistValueToText (PersistInt64 i) = Text.pack $ show i
+persistValueToText (PersistUTCTime d) = Text.pack $ show $ floor (utcTimeToPOSIXSeconds d)
+persistValueToText (PersistBool b) = if b then "T" else "F"
+persistValueToText _ = error "Wrong input type"
diff --git a/src/Handler/Api.hs b/src/Handler/Api.hs
index c1be3d8..912575c 100644
--- a/src/Handler/Api.hs
+++ b/src/Handler/Api.hs
@@ -4,8 +4,7 @@
 
 module Handler.Api where
 
-import Data.Text qualified as Text
-import Data.Time.Clock.POSIX (posixSecondsToUTCTime, utcTimeToPOSIXSeconds)
+import Data.Time.Clock.POSIX (posixSecondsToUTCTime)
 import Database.Persist.Sql (rawSql)
 import Import
 
@@ -32,34 +31,3 @@ getApiR time = do
             <> map todolistToCSV lists
             <> map todolistItemToCSV items
     return $ TypedContent typePlain $ toContent t
-
-todolistItemToCSV :: Entity TodolistItem -> Text
-todolistItemToCSV item = "i," <> fieldToText item
-todolistToCSV :: Entity Todolist -> Text
-todolistToCSV list = "l," <> fieldToText list
-groupToCSV :: Entity Group -> Text
-groupToCSV group = "g," <> fieldToText group
-userToCSV :: Entity User -> Text
-userToCSV user = "u," <> fieldToText user
-
--- TODO: error management ? (maybe use Either Text Text and then propagate left to handler and send error ?)
-fieldToText :: (PersistEntity record) => Entity record -> Text
-fieldToText field = Text.intercalate "," (map persistValueToText $ entityValues field)
-
-persistValueToText :: PersistValue -> Text
-persistValueToText (PersistText s) = s
-persistValueToText (PersistInt64 i) = Text.pack $ show i
-persistValueToText (PersistUTCTime d) = Text.pack $ show $ floor (utcTimeToPOSIXSeconds d)
-persistValueToText (PersistBool b) = if b then "T" else "F"
-persistValueToText _ = error "Wrong input type"
-
-getText :: Text
-getText = do
-  -- GET EVERY GROUP THAT HAS BEEN MODIFIED SINCE TIMESTAMP FROM USER
-
-  -- GET EVERY TODOLIST THAT HAS BEEN MODIFIED SINCE TIMESTAMP
-  -- GET EVERY ITEM FROM THESE TODOLISTS
-  -- ENCODE ALL OF THEM IN THE TEXTFILE
-  -- SEND IT !
-  -- DONE :)
-  error "not done yet"
diff --git a/src/Handler/Group.hs b/src/Handler/Group.hs
index 6c76734..5219c0e 100644
--- a/src/Handler/Group.hs
+++ b/src/Handler/Group.hs
@@ -13,14 +13,19 @@ import Database.Persist.Sql (fromSqlKey, toSqlKey)
 import Import
 import Text.Read
 
-getGroupR :: Handler Html
+getGroupR :: Handler TypedContent
 getGroupR = do
   userId <- getUserId
   groups <- getGroups userId
-  defaultLayout $ do
-    setTitle "Groups"
-    $(widgetFile "group")
-postAddGroupR :: Handler Html
+  selectRep $ do
+    provideRep
+      $ defaultLayout
+      $ do
+        setTitle "Groups"
+        $(widgetFile "group")
+    provideRep $ return $ unlines $ map groupToCSV groups
+
+postAddGroupR :: Handler TypedContent
 postAddGroupR = do
   g <- runInputPost $ ireq textField "group"
   -- TODO: in a newer version, put insertUnique_
@@ -40,7 +45,7 @@ getEditGroupR = do
     let a e = pack $ show $ fromSqlKey $ entityKey e :: Text
     setTitle "Groups"
     $(widgetFile "edit-group")
-postEditGroupR :: Handler Html
+postEditGroupR :: Handler TypedContent
 postEditGroupR = do
   -- TODO: not implemented yet
   -- title <- runInputPost $ ireq textField "title"
diff --git a/src/Handler/Todolist.hs b/src/Handler/Todolist.hs
index c145309..b45376f 100644
--- a/src/Handler/Todolist.hs
+++ b/src/Handler/Todolist.hs
@@ -22,13 +22,17 @@ postAddTodolistR groupId = do
   _ <- dbIfAuth groupId (insertUnique $ Todolist groupId list currentTime)
   redirect $ TodolistR groupId
 
-getTodolistR :: GroupId -> Handler Html
+getTodolistR :: GroupId -> Handler TypedContent
 getTodolistR groupId = do
   lists <- dbIfAuth groupId (selectList [TodolistGroupId ==. groupId] [])
-  defaultLayout $ do
-    let getTitle = todolistTitle . entityVal
-    setTitle "todolist"
-    $(widgetFile "todolist")
+  selectRep $ do
+    provideRep
+      $ defaultLayout
+      $ do
+        let getTitle = todolistTitle . entityVal
+        setTitle "todolist"
+        $(widgetFile "todolist")
+    provideRep $ return $ unlines $ map todolistToCSV lists
 
 getEditTodolistR :: GroupId -> Handler Html
 getEditTodolistR groupId = do
diff --git a/src/Handler/TodolistItem.hs b/src/Handler/TodolistItem.hs
index 4dc8f7a..707822f 100644
--- a/src/Handler/TodolistItem.hs
+++ b/src/Handler/TodolistItem.hs
@@ -13,16 +13,20 @@ module Handler.TodolistItem where
 import Database.Persist.Sql (rawExecute)
 import Import
 
-getTodolistItemsR :: GroupId -> TodolistId -> Handler Html
+getTodolistItemsR :: GroupId -> TodolistId -> Handler TypedContent
 getTodolistItemsR groupId todolistId = do
   mSortOption <- lookupSession "sort"
   items <- case mSortOption of
     (Just "value") -> dbIfAuth groupId (selectList [TodolistItemTodolistId ==. todolistId] [Desc TodolistItemValue, Asc TodolistItemId])
     _ -> dbIfAuth groupId (selectList [TodolistItemTodolistId ==. todolistId] [Asc TodolistItemId])
 
-  defaultLayout $ do
-    setTitle "items"
-    $(widgetFile "todolist-items")
+  selectRep $ do
+    provideRep
+      $ defaultLayout
+      $ do
+        setTitle "items"
+        $(widgetFile "todolist-items")
+    provideRep $ return $ unlines $ map todolistItemToCSV items
 
 postCheckTodolistItemR :: GroupId -> TodolistId -> TodolistItemId -> Handler Html
 postCheckTodolistItemR groupId todolistId todolistItemId = do

From 7b29a58a22a7965733c1b0bc5266056f04d0b7d5 Mon Sep 17 00:00:00 2001
From: Stuce <lefabricesaucy@outlook.com>
Date: Mon, 22 Sep 2025 12:04:49 +0200
Subject: [PATCH 34/34] Update flake.nix

---
 flake.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index d5dd9c9..293bdfa 100644
--- a/flake.nix
+++ b/flake.nix
@@ -19,7 +19,7 @@
         pname = "sTodo";
         version = "1.0.0";
         src = tarball;
-        buildInputs = [zlib gmp libffi];
+        buildInputs = [libz gmp libffi];
         nativeBuildInputs = [openssl];
         installPhase = ''
           mkdir -p $out/bin