17 files changed, 838 insertions, 0 deletions

diff --git a/api/.env.sample b/api/.env.sample
new file mode 100644
index 0000000..6e25893
--- /dev/null
+++ b/api/.env.sample
@@ -0,0 +1,10 @@
+# user for test
+TEST_USER=user1
+# test user password
+TEST_PASS=12345
+# database path
+DB_PATH="path/to/database/file"
+# database driver
+DB_DRIVER="sqlite3"
+# port
+PORT=":8080"
\ No newline at end of file
diff --git a/api/cmd/main.go b/api/cmd/main.go
new file mode 100644
index 0000000..c23eff1
--- /dev/null
+++ b/api/cmd/main.go
@@ -0,0 +1,21 @@
+package main
+
+import (
+        "log"
+        "water/api/internal/config"
+        "water/api/internal/router"
+)
+
+func main() {
+        c, err := config.Load()
+        if err != nil {
+                log.Fatalf("Error while reading config file %s", err)
+        }
+
+        r := router.SetupRouter()
+        // Listen and Server in 0.0.0.0:8080
+        err = r.Run(c.GetString("PORT"))
+        if err != nil {
+                log.Fatal(err)
+        }
+}
diff --git a/api/cmd/main_test.go b/api/cmd/main_test.go
new file mode 100644
index 0000000..a4db57a
--- /dev/null
+++ b/api/cmd/main_test.go
@@ -0,0 +1,62 @@
+package main
+
+import (
+        "encoding/json"
+        "log"
+        "net/http"
+        "net/http/httptest"
+        "testing"
+        "water/api/internal/router"
+
+        "github.com/stretchr/testify/assert"
+        "water/api/internal/config"
+)
+
+func getTestUserCredentials() (string, string) {
+        viper, err := config.Load()
+        if err != nil {
+                log.Fatalf("Error while reading config file %s", err)
+        }
+        
+        testUser := viper.GetString("TEST_USER")
+        testPass := viper.GetString("TEST_PASS")
+        return testUser, testPass
+}
+
+func TestAuthRoute(t *testing.T) {
+        r := router.SetupRouter()
+        
+        username, password := getTestUserCredentials()
+
+        w := httptest.NewRecorder()
+        req, err := http.NewRequest("POST", "/api/v1/auth", nil)
+        if err != nil {
+                t.Fatalf("Failed to create request: %v", err)
+        }
+        req.SetBasicAuth(username, password)
+        r.ServeHTTP(w, req)
+
+        assert.Equal(t, http.StatusOK, w.Code, "response should return a 200 code")
+
+        var response map[string]interface{}
+        err = json.Unmarshal(w.Body.Bytes(), &response)
+        if err != nil {
+                t.Fatalf("Failed to unmarshal response: %v", err)
+        }
+        _, exists := response["token"]
+        assert.True(t, exists, "response should return a token")
+        if !exists {
+                t.Fatalf("response did not contain token")
+        }
+}
+
+func TestAuthRouteFailure(t *testing.T) {
+        r := router.SetupRouter()
+
+        w := httptest.NewRecorder()
+        req, _ := http.NewRequest("POST", "/api/v1/auth", nil)
+        req.SetBasicAuth("asdf", "asdf")
+        r.ServeHTTP(w, req)
+
+        assert.Equal(t, http.StatusUnauthorized, w.Code, "should return a 401 code")
+}
diff --git a/api/go.mod b/api/go.mod
new file mode 100644
index 0000000..6c414bc
--- /dev/null
+++ b/api/go.mod
@@ -0,0 +1,56 @@
+module water/api
+
+go 1.18
+
+require (
+        github.com/gin-gonic/gin v1.9.1
+        github.com/google/uuid v1.6.0
+        github.com/mattn/go-sqlite3 v1.14.22
+        github.com/spf13/viper v1.18.2
+        github.com/stretchr/testify v1.8.4
+        golang.org/x/crypto v0.19.0
+)
+
+require (
+        github.com/bytedance/sonic v1.11.0 // indirect
+        github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d // indirect
+        github.com/chenzhuoyu/iasm v0.9.1 // indirect
+        github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
+        github.com/fsnotify/fsnotify v1.7.0 // indirect
+        github.com/gabriel-vasile/mimetype v1.4.3 // indirect
+        github.com/gin-contrib/sse v0.1.0 // indirect
+        github.com/go-playground/locales v0.14.1 // indirect
+        github.com/go-playground/universal-translator v0.18.1 // indirect
+        github.com/go-playground/validator/v10 v10.18.0 // indirect
+        github.com/goccy/go-json v0.10.2 // indirect
+        github.com/hashicorp/hcl v1.0.0 // indirect
+        github.com/json-iterator/go v1.1.12 // indirect
+        github.com/klauspost/cpuid/v2 v2.2.6 // indirect
+        github.com/leodido/go-urn v1.4.0 // indirect
+        github.com/magiconair/properties v1.8.7 // indirect
+        github.com/mattn/go-isatty v0.0.20 // indirect
+        github.com/mitchellh/mapstructure v1.5.0 // indirect
+        github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+        github.com/modern-go/reflect2 v1.0.2 // indirect
+        github.com/pelletier/go-toml/v2 v2.1.1 // indirect
+        github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
+        github.com/sagikazarmark/locafero v0.4.0 // indirect
+        github.com/sagikazarmark/slog-shim v0.1.0 // indirect
+        github.com/sourcegraph/conc v0.3.0 // indirect
+        github.com/spf13/afero v1.11.0 // indirect
+        github.com/spf13/cast v1.6.0 // indirect
+        github.com/spf13/pflag v1.0.5 // indirect
+        github.com/subosito/gotenv v1.6.0 // indirect
+        github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
+        github.com/ugorji/go/codec v1.2.12 // indirect
+        go.uber.org/atomic v1.9.0 // indirect
+        go.uber.org/multierr v1.9.0 // indirect
+        golang.org/x/arch v0.7.0 // indirect
+        golang.org/x/exp v0.0.0-20230905200255-921286631fa9 // indirect
+        golang.org/x/net v0.21.0 // indirect
+        golang.org/x/sys v0.17.0 // indirect
+        golang.org/x/text v0.14.0 // indirect
+        google.golang.org/protobuf v1.32.0 // indirect
+        gopkg.in/ini.v1 v1.67.0 // indirect
+        gopkg.in/yaml.v3 v3.0.1 // indirect
+)
diff --git a/api/go.sum b/api/go.sum
new file mode 100644
index 0000000..20771f7
--- /dev/null
+++ b/api/go.sum
@@ -0,0 +1,128 @@
+github.com/bytedance/sonic v1.5.0/go.mod h1:ED5hyg4y6t3/9Ku1R6dU/4KyJ48DZ4jPhfY1O2AihPM=
+github.com/bytedance/sonic v1.10.0-rc/go.mod h1:ElCzW+ufi8qKqNW0FY314xriJhyJhuoJ3gFZdAHF7NM=
+github.com/bytedance/sonic v1.11.0 h1:FwNNv6Vu4z2Onf1++LNzxB/QhitD8wuTdpZzMTGITWo=
+github.com/bytedance/sonic v1.11.0/go.mod h1:iZcSUejdk5aukTND/Eu/ivjQuEL0Cu9/rf50Hi0u/g4=
+github.com/chenzhuoyu/base64x v0.0.0-20211019084208-fb5309c8db06/go.mod h1:DH46F32mSOjUmXrMHnKwZdA8wcEefY7UVqBKYGjpdQY=
+github.com/chenzhuoyu/base64x v0.0.0-20221115062448-fe3a3abad311/go.mod h1:b583jCggY9gE99b6G5LEC39OIiVsWj+R97kbl5odCEk=
+github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d h1:77cEq6EriyTZ0g/qfRdp61a3Uu/AWrgIq2s0ClJV1g0=
+github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d/go.mod h1:8EPpVsBuRksnlj1mLy4AWzRNQYxauNi62uWcE3to6eA=
+github.com/chenzhuoyu/iasm v0.9.0/go.mod h1:Xjy2NpN3h7aUqeqM+woSuuvxmIe6+DDsiNLIrkAmYog=
+github.com/chenzhuoyu/iasm v0.9.1 h1:tUHQJXo3NhBqw6s33wkGn9SP3bvrWLdlVIJ3hQBL7P0=
+github.com/chenzhuoyu/iasm v0.9.1/go.mod h1:Xjy2NpN3h7aUqeqM+woSuuvxmIe6+DDsiNLIrkAmYog=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
+github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=
+github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
+github.com/gabriel-vasile/mimetype v1.4.3 h1:in2uUcidCuFcDKtdcBxlR0rJ1+fsokWf+uqxgUFjbI0=
+github.com/gabriel-vasile/mimetype v1.4.3/go.mod h1:d8uq/6HKRL6CGdk+aubisF/M5GcPfT7nKyLpA0lbSSk=
+github.com/gin-contrib/sse v0.1.0 h1:Y/yl/+YNO8GZSjAhjMsSuLt29uWRFHdHYUb5lYOV9qE=
+github.com/gin-contrib/sse v0.1.0/go.mod h1:RHrZQHXnP2xjPF+u1gW/2HnVO7nvIa9PG3Gm+fLHvGI=
+github.com/gin-gonic/gin v1.9.1 h1:4idEAncQnU5cB7BeOkPtxjfCSye0AAm1R0RVIqJ+Jmg=
+github.com/gin-gonic/gin v1.9.1/go.mod h1:hPrL7YrpYKXt5YId3A/Tnip5kqbEAP+KLuI3SUcPTeU=
+github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s=
+github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA=
+github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY=
+github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY=
+github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
+github.com/go-playground/validator/v10 v10.18.0 h1:BvolUXjp4zuvkZ5YN5t7ebzbhlUtPsPm2S9NAZ5nl9U=
+github.com/go-playground/validator/v10 v10.18.0/go.mod h1:dbuPbCMFw/DrkbEynArYaCwl3amGuJotoKCe95atGMM=
+github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
+github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
+github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/hashicorp/hcl v1.0.0 h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=
+github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
+github.com/klauspost/cpuid/v2 v2.0.9/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
+github.com/klauspost/cpuid/v2 v2.2.6 h1:ndNyv040zDGIDh8thGkXYjnFtiN02M1PVVF+JE/48xc=
+github.com/klauspost/cpuid/v2 v2.2.6/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
+github.com/knz/go-libedit v1.10.1/go.mod h1:MZTVkCWyz0oBc7JOWP3wNAzd002ZbM/5hgShxwh4x8M=
+github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=
+github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI=
+github.com/magiconair/properties v1.8.7 h1:IeQXZAiQcpL9mgcAe1Nu6cX9LLw6ExEHKjN0VQdvPDY=
+github.com/magiconair/properties v1.8.7/go.mod h1:Dhd985XPs7jluiymwWYZ0G4Z61jb3vdS329zhj2hYo0=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mattn/go-sqlite3 v1.14.22 h1:2gZY6PC6kBnID23Tichd1K+Z0oS6nE/XwU+Vz/5o4kU=
+github.com/mattn/go-sqlite3 v1.14.22/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=
+github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=
+github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
+github.com/pelletier/go-toml/v2 v2.1.1 h1:LWAJwfNvjQZCFIDKWYQaM62NcYeYViCmWIwmOStowAI=
+github.com/pelletier/go-toml/v2 v2.1.1/go.mod h1:tJU2Z3ZkXwnxa4DPO899bsyIoywizdUvyaeZurnPPDc=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/rogpeppe/go-internal v1.9.0 h1:73kH8U+JUqXU8lRuOHeVHaa/SZPifC7BkcraZVejAe8=
+github.com/sagikazarmark/locafero v0.4.0 h1:HApY1R9zGo4DBgr7dqsTH/JJxLTTsOt7u6keLGt6kNQ=
+github.com/sagikazarmark/locafero v0.4.0/go.mod h1:Pe1W6UlPYUk/+wc/6KFhbORCfqzgYEpgQ3O5fPuL3H4=
+github.com/sagikazarmark/slog-shim v0.1.0 h1:diDBnUNK9N/354PgrxMywXnAwEr1QZcOr6gto+ugjYE=
+github.com/sagikazarmark/slog-shim v0.1.0/go.mod h1:SrcSrq8aKtyuqEI1uvTDTK1arOWRIczQRv+GVI1AkeQ=
+github.com/sourcegraph/conc v0.3.0 h1:OQTbbt6P72L20UqAkXXuLOj79LfEanQ+YQFNpLA9ySo=
+github.com/sourcegraph/conc v0.3.0/go.mod h1:Sdozi7LEKbFPqYX2/J+iBAM6HpqSLTASQIKqDmF7Mt0=
+github.com/spf13/afero v1.11.0 h1:WJQKhtpdm3v2IzqG8VMqrr6Rf3UYpEF239Jy9wNepM8=
+github.com/spf13/afero v1.11.0/go.mod h1:GH9Y3pIexgf1MTIWtNGyogA5MwRIDXGUr+hbWNoBjkY=
+github.com/spf13/cast v1.6.0 h1:GEiTHELF+vaR5dhz3VqZfFSzZjYbgeKDpBxQVS4GYJ0=
+github.com/spf13/cast v1.6.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo=
+github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
+github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/spf13/viper v1.18.2 h1:LUXCnvUvSM6FXAsj6nnfc8Q2tp1dIgUfY9Kc8GsSOiQ=
+github.com/spf13/viper v1.18.2/go.mod h1:EKmWIqdnk5lOcmR72yw6hS+8OPYcwD0jteitLMVB+yk=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
+github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
+github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=
+github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
+github.com/twitchyliquid64/golang-asm v0.15.1 h1:SU5vSMR7hnwNxj24w34ZyCi/FmDZTkS4MhqMhdFk5YI=
+github.com/twitchyliquid64/golang-asm v0.15.1/go.mod h1:a1lVb/DtPvCB8fslRZhAngC2+aY1QWCk3Cedj/Gdt08=
+github.com/ugorji/go/codec v1.2.12 h1:9LC83zGrHhuUA9l16C9AHXAqEV/2wBQ4nkvumAE65EE=
+github.com/ugorji/go/codec v1.2.12/go.mod h1:UNopzCgEMSXjBc6AOMqYvWC1ktqTAfzJZUZgYf6w6lg=
+go.uber.org/atomic v1.9.0 h1:ECmE8Bn/WFTYwEW/bpKD3M8VtR/zQVbavAoalC1PYyE=
+go.uber.org/atomic v1.9.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
+go.uber.org/multierr v1.9.0 h1:7fIwc/ZtS0q++VgcfqFDxSBZVv/Xo49/SYnDFupUwlI=
+go.uber.org/multierr v1.9.0/go.mod h1:X2jQV1h+kxSjClGpnseKVIxpmcjrj7MNnI0bnlfKTVQ=
+golang.org/x/arch v0.0.0-20210923205945-b76863e36670/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
+golang.org/x/arch v0.7.0 h1:pskyeJh/3AmoQ8CPE95vxHLqp1G1GfGNXTmcl9NEKTc=
+golang.org/x/arch v0.7.0/go.mod h1:FEVrYAQjsQXMVJ1nsMoVVXPZg6p2JE2mx8psSWTDQys=
+golang.org/x/crypto v0.19.0 h1:ENy+Az/9Y1vSrlrvBSyna3PITt4tiZLf7sgCjZBX7Wo=
+golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
+golang.org/x/exp v0.0.0-20230905200255-921286631fa9 h1:GoHiUyI/Tp2nVkLI2mCxVkOjsbSXD66ic0XW0js0R9g=
+golang.org/x/exp v0.0.0-20230905200255-921286631fa9/go.mod h1:S2oDrQGGwySpoQPVqRShND87VCbxmc6bL1Yd2oYrm6k=
+golang.org/x/net v0.21.0 h1:AQyQV4dYCvJ7vGmJyKki9+PBdyvhkSd8EIx/qb0AYv4=
+golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.17.0 h1:25cE3gD+tdBA7lp7QfhuV+rJiE9YXTcS3VG1SqssI/Y=
+golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
+golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
+google.golang.org/protobuf v1.32.0 h1:pPC6BG5ex8PDFnkbrGU3EixyhKcQ2aDuBS36lqK/C7I=
+google.golang.org/protobuf v1.32.0/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=
+gopkg.in/ini.v1 v1.67.0 h1:Dgnx+6+nfE+IfzjUEISNeydPJh9AXNNsWbGP9KzCsOA=
+gopkg.in/ini.v1 v1.67.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+nullprogram.com/x/optparse v1.0.0/go.mod h1:KdyPE+Igbe0jQUrVfMqDMeJQIJZEuyV7pjYmp6pbG50=
+rsc.io/pdf v0.1.1/go.mod h1:n8OzWcQ6Sp37PL01nO98y4iUCRdTGarVfzxY20ICaU4=
diff --git a/api/internal/config/config.go b/api/internal/config/config.go
new file mode 100644
index 0000000..d54e40e
--- /dev/null
+++ b/api/internal/config/config.go
@@ -0,0 +1,17 @@
+package config
+
+import (
+        "fmt"
+        "github.com/spf13/viper"
+)
+
+func Load() (*viper.Viper, error) {
+        v := viper.New()
+        v.SetConfigFile(".env")
+        v.AddConfigPath(".")
+        err := v.ReadInConfig()
+        if err != nil {
+                return nil, fmt.Errorf("error reading .env file: %s", err)
+        }
+        return v, nil
+}
diff --git a/api/internal/controllers/auth.go b/api/internal/controllers/auth.go
new file mode 100644
index 0000000..ab2fbbb
--- /dev/null
+++ b/api/internal/controllers/auth.go
@@ -0,0 +1,79 @@
+package controllers
+
+import (
+        "crypto/rand"
+        "database/sql"
+        "encoding/base64"
+        "errors"
+        "github.com/gin-gonic/gin"
+        "net/http"
+        "water/api/internal/models"
+
+        _ "github.com/mattn/go-sqlite3"
+        "golang.org/x/crypto/bcrypt"
+        "water/api/internal/database"
+)
+
+
+
+// AuthHandler is a function that handles users' authentication. It checks if the request
+// has valid credentials, authenticates the user and sets the user's session.
+// If the authentication is successful, it will allow the user to access protected routes.
+func AuthHandler (c *gin.Context) {
+        username, password, ok := c.Request.BasicAuth()
+        if !ok {
+                c.Header("WWW-Authenticate", `Basic realm="Please enter your username and password."`)
+                c.AbortWithStatus(http.StatusUnauthorized)
+                return
+        }
+
+        db := database.EstablishDBConnection()
+        defer func(db *sql.DB) {
+                err := db.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(db)
+
+        var user models.User
+        var preference models.Preference
+
+        row := db.QueryRow("SELECT id as 'id', name, uuid, password FROM Users WHERE name = ?", username)
+        if err := row.Scan(&user.ID, &user.Name, &user.UUID, &user.Password); err != nil {
+                if errors.Is(err, sql.ErrNoRows) {
+                        c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+                        return
+                }
+        }
+
+        row = db.QueryRow("SELECT id, color, size_id, user_id FROM Preferences where user_id = ?", user.ID)
+        if err := row.Scan(&preference.ID, &preference.Color, &preference.SizeID, &preference.UserID); err != nil {
+                if errors.Is(err, sql.ErrNoRows) {
+                        c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+                }
+        }
+
+        if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(password)); err != nil {
+                c.JSON(http.StatusUnauthorized, gin.H{"error": err.Error()})
+                return
+        }
+
+        // Generate a simple API token
+        apiToken := generateToken()
+        c.JSON(http.StatusOK, gin.H{"token": apiToken, "user": user, "preferences": preference})
+}
+
+
+// generateToken is a helper function used in the AuthHandler. It generates a random token for API authentication.
+// This function creates an empty byte slice of length 32 and fills it with cryptographic random data using the rand.Read function.
+// If an error occurs during the generation, it will return an empty string.
+// The generated cryptographic random data is then encoded into a base64 string and returned.
+func generateToken() string {
+        token := make([]byte, 32)
+        _, err := rand.Read(token)
+        if err != nil {
+                return ""
+        }
+        return base64.StdEncoding.EncodeToString(token)
+}
\ No newline at end of file
diff --git a/api/internal/controllers/preferences.go b/api/internal/controllers/preferences.go
new file mode 100644
index 0000000..a1bcf4f
--- /dev/null
+++ b/api/internal/controllers/preferences.go
@@ -0,0 +1,45 @@
+package controllers
+
+import (
+        "github.com/gin-gonic/gin"
+        "net/http"
+        "database/sql"
+        "water/api/internal/database"
+        "water/api/internal/models"
+)
+
+func GetSizes(c *gin.Context) {
+                db := database.EstablishDBConnection()
+        defer func(db *sql.DB) {
+                err := db.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                }
+        }(db)
+        
+        rows, err := db.Query("SELECT id, size, unit  FROM Sizes")
+        if err != nil {
+                c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                return
+        }
+        defer func(rows *sql.Rows) {
+                err := rows.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(rows)
+
+        var data []models.Size
+
+        for rows.Next() {
+                var size models.Size
+                if err := rows.Scan(&size.ID, &size.Size, &size.Unit); err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+                data = append(data, size)
+        }
+
+        c.JSON(http.StatusOK, data)
+}
diff --git a/api/internal/controllers/stats.go b/api/internal/controllers/stats.go
new file mode 100644
index 0000000..2234787
--- /dev/null
+++ b/api/internal/controllers/stats.go
@@ -0,0 +1,168 @@
+package controllers
+
+import (
+        "database/sql"
+        "github.com/gin-gonic/gin"
+        "net/http"
+        "water/api/internal/database"
+        "water/api/internal/models"
+)
+
+// TODO: add comments to all exported members of package.
+
+// GetAllStatistics connects to the database and queries for all statistics in the database.
+// If none have been found it will return an error, otherwise a 200 code is sent along with the list of statistics.
+func GetAllStatistics(c *gin.Context) {
+        db := database.EstablishDBConnection()
+        defer func(db *sql.DB) {
+                err := db.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(db)
+
+        rows, err := db.Query("SELECT s.date, s.quantity, u.uuid, u.name FROM Statistics s INNER JOIN Users u ON u.id = s.user_id")
+        if err != nil {
+                c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                return
+        }
+        defer func(rows *sql.Rows) {
+                err := rows.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(rows)
+
+        var data []models.Statistic
+
+        for rows.Next() {
+                var stat models.Statistic
+                var user models.User
+                if err := rows.Scan(&stat.Date, &stat.Quantity, &user.UUID, &user.Name); err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+                stat.User = user
+                data = append(data, stat)
+        }
+
+        c.JSON(http.StatusOK, data)
+}
+
+func PostNewStatistic(c *gin.Context) {
+        var stat models.StatisticPost
+
+        if err := c.BindJSON(&stat); err != nil {
+                c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+                return
+        }
+
+        db := database.EstablishDBConnection()
+        defer func(db *sql.DB) {
+                err := db.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(db)
+
+        result, err := db.Exec("INSERT INTO statistics (date, user_id, quantity) values (?, ?, ?)", stat.Date, stat.UserID, stat.Quantity)
+
+        if err != nil {
+                c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+        }
+
+        id, err := result.LastInsertId()
+        if err != nil {
+                c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+        }
+
+        c.JSON(http.StatusCreated, gin.H{"status": "created", "id": id})
+}
+
+func GetWeeklyStatistics(c *gin.Context) {
+        db := database.EstablishDBConnection()
+        defer func(db *sql.DB) {
+                err := db.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(db)
+
+        rows, err := db.Query("SELECT date, total FROM `WeeklyStatisticsView`")
+        if err != nil {
+                c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                return
+        }
+        defer func(rows *sql.Rows) {
+                err := rows.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(rows)
+
+        var data []models.WeeklyStatistic
+        for rows.Next() {
+                var weeklyStat models.WeeklyStatistic
+                if err := rows.Scan(&weeklyStat.Date, &weeklyStat.Total); err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                }
+                data = append(data, weeklyStat)
+        }
+
+        c.JSON(http.StatusOK, data)
+}
+
+func GetDailyUserStatistics(c *gin.Context) {
+        db := database.EstablishDBConnection()
+        defer func(db *sql.DB) {
+                err := db.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(db)
+
+        rows, err := db.Query("SELECT name, total FROM DailyUserStatistics")
+
+        if err != nil {
+                c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                return
+        }
+        defer func(rows *sql.Rows) {
+                err := rows.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(rows)
+
+        var data []models.DailyUserTotals
+        for rows.Next() {
+                var stat models.DailyUserTotals
+                if err := rows.Scan(&stat.Name, &stat.Total); err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+                data = append(data, stat)
+        }
+
+        c.JSON(http.StatusOK, data)
+
+}
+
+func GetUserStatistics(c *gin.Context) {
+        c.JSON(http.StatusOK, gin.H{"status": "ok", "uuid": c.Param("uuid")})
+}
+
+func UpdateUserStatistic(c *gin.Context) {
+        c.JSON(http.StatusNoContent, gin.H{"status": "No Content"})
+}
+
+func DeleteUserStatistic(c *gin.Context) {
+        c.JSON(http.StatusNoContent, gin.H{"status": "No Content"})
+}
diff --git a/api/internal/controllers/user.go b/api/internal/controllers/user.go
new file mode 100644
index 0000000..dbb09cf
--- /dev/null
+++ b/api/internal/controllers/user.go
@@ -0,0 +1,68 @@
+package controllers
+
+import (
+        "database/sql"
+        "errors"
+        "log"
+        "net/http"
+        "water/api/internal/database"
+        "water/api/internal/models"
+
+        "github.com/gin-gonic/gin"
+)
+
+func GetUser(c *gin.Context) {
+        c.JSON(http.StatusOK, gin.H{"message": "User found"})
+}
+func GetUserPreferences(c *gin.Context) {
+        db := database.EstablishDBConnection()
+        defer func(db *sql.DB) {
+                err := db.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(db)
+
+        var preference models.Preference
+
+        row := db.QueryRow("SELECT id, user_id, color, size_id FROM Preferences WHERE user_id = ?", c.Param("id"))
+        if err := row.Scan(&preference.ID, &preference.UserID, &preference.Color, &preference.SizeID); err != nil {
+                if errors.Is(err, sql.ErrNoRows) {
+                        c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+                        return
+                } else {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }
+
+        c.JSON(http.StatusOK, preference)
+}
+
+func UpdateUserPreferences(c *gin.Context) {
+        db := database.EstablishDBConnection()
+        defer func(db *sql.DB) {
+                err := db.Close()
+                if err != nil {
+                        c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                        return
+                }
+        }(db)
+
+        var newPreferences models.Preference
+        if err := c.BindJSON(&newPreferences); err != nil {
+                c.JSON(http.StatusUnprocessableEntity, gin.H{"error": err.Error()})
+                return
+        }
+
+        log.Printf("newPreferences: %v", newPreferences)
+
+        _, err := db.Exec("UPDATE Preferences SET color = ?, size_id = ? WHERE id = ?", newPreferences.Color, newPreferences.SizeID, newPreferences.ID)
+        if err != nil {
+                c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+                return
+        }
+
+        c.Status(http.StatusNoContent)
+}
diff --git a/api/internal/database/database.go b/api/internal/database/database.go
new file mode 100644
index 0000000..1866655
--- /dev/null
+++ b/api/internal/database/database.go
@@ -0,0 +1,24 @@
+package database
+
+import (
+        "database/sql"
+        _ "github.com/mattn/go-sqlite3"
+        "log"
+        "path/filepath"
+        "water/api/internal/config"
+)
+
+func EstablishDBConnection() *sql.DB {
+        c, err := config.Load()
+
+        driver := c.GetString("DB_DRIVER")
+        path, err := filepath.Abs(c.GetString("DB_PATH"))
+        if err != nil {
+                log.Fatal("There was and error getting the absolute path of the database.")
+        }
+        db, err := sql.Open(driver, path)
+        if err != nil {
+                panic(err)
+        }
+        return db
+}
\ No newline at end of file
diff --git a/api/internal/middleware/middleware.go b/api/internal/middleware/middleware.go
new file mode 100644
index 0000000..aa27fb8
--- /dev/null
+++ b/api/internal/middleware/middleware.go
@@ -0,0 +1,56 @@
+package middleware
+
+import (
+        "errors"
+        "log"
+        "net/http"
+        "strings"
+
+        "github.com/gin-gonic/gin"
+)
+
+func TokenRequired() gin.HandlerFunc {
+        return func(c *gin.Context) {
+                _, err := checkForTokenInContext(c)
+
+                if err != nil {
+                        c.JSON(http.StatusUnauthorized, gin.H{"error": "Unauthorized"})
+                        c.Abort()
+                        return
+                }
+
+                c.Next()
+        }
+}
+
+func CORSMiddleware() gin.HandlerFunc {
+        return func(c *gin.Context) {
+                c.Writer.Header().Set("Access-Control-Allow-Origin", "*")
+                c.Writer.Header().Set("Access-Control-Allow-Credentials", "true")
+                c.Writer.Header().Set("Access-Control-Allow-Headers", "Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With")
+                c.Writer.Header().Set("Access-Control-Allow-Methods", "POST, OPTIONS, GET, PUT, PATCH")
+
+                if c.Request.Method == "OPTIONS" {
+                        log.Println(c.Request.Header)
+                        c.AbortWithStatus(http.StatusNoContent)
+                        return
+                }
+
+                c.Next()
+        }
+}
+
+func checkForTokenInContext(c *gin.Context) (string, error) {
+        authorizationHeader := c.GetHeader("Authorization")
+        if authorizationHeader == "" {
+                return "", errors.New("authorization header is missing")
+        }
+
+        parts := strings.Split(authorizationHeader, " ")
+
+        if len(parts) != 2 || parts[0] != "Bearer" {
+                return "", errors.New("invalid Authorization header format")
+        }
+
+        return parts[1], nil
+}
diff --git a/api/internal/models/auth.go b/api/internal/models/auth.go
new file mode 100644
index 0000000..fa7dbe4
--- /dev/null
+++ b/api/internal/models/auth.go
@@ -0,0 +1,11 @@
+package models
+
+import "time"
+
+type Token struct {
+        ID        int64     `json:"id"`
+        UserID    int64     `json:"user_id"`
+        Token     string    `json:"token"`
+        CreatedAt time.Time `json:"created_at"`
+        ExpiredAt time.Time `json:"expired_at"`
+}
diff --git a/api/internal/models/preferences.go b/api/internal/models/preferences.go
new file mode 100644
index 0000000..8022099
--- /dev/null
+++ b/api/internal/models/preferences.go
@@ -0,0 +1,14 @@
+package models
+
+type Preference struct {
+        ID     int64  `json:"id"`
+        Color  string `json:"color"`
+        UserID int64  `json:"user_id"`
+        SizeID   int64   `json:"size_id"`
+}
+
+type Size struct {
+        ID   int64  `json:"id"`
+        Size int64  `json:"size"`
+        Unit string `json:"unit"`
+}
diff --git a/api/internal/models/statistics.go b/api/internal/models/statistics.go
new file mode 100644
index 0000000..7dceb3a
--- /dev/null
+++ b/api/internal/models/statistics.go
@@ -0,0 +1,26 @@
+package models
+
+import "time"
+
+type Statistic struct {
+        ID       int64     `json:"id"`
+        Date     time.Time `json:"date"`
+        User     User      `json:"user"`
+        Quantity int       `json:"quantity"`
+}
+
+type StatisticPost struct {
+        Date     time.Time `json:"date"`
+        Quantity int64     `json:"quantity"`
+        UserID   int64     `json:"user_id"`
+}
+
+type WeeklyStatistic struct {
+        Date  string `json:"date"`
+        Total int64  `json:"total"`
+}
+
+type DailyUserTotals struct {
+        Name  string `json:"name"`
+        Total int64  `json:"total"`
+}
diff --git a/api/internal/models/user.go b/api/internal/models/user.go
new file mode 100644
index 0000000..ca5daa4
--- /dev/null
+++ b/api/internal/models/user.go
@@ -0,0 +1,10 @@
+package models
+
+import "github.com/google/uuid"
+
+type User struct {
+        ID       int64     `json:"id"`
+        Name     string    `json:"name"`
+        UUID     uuid.UUID `json:"uuid"`
+        Password string    `json:"-"`
+}
diff --git a/api/internal/router/router.go b/api/internal/router/router.go
new file mode 100644
index 0000000..a71c3e6
--- /dev/null
+++ b/api/internal/router/router.go
@@ -0,0 +1,43 @@
+package router
+
+import (
+        "github.com/gin-gonic/gin"
+        "water/api/internal/controllers"
+        "water/api/internal/middleware"
+)
+
+func SetupRouter() *gin.Engine {
+        // Disable Console Color
+        //      gin.DisableConsoleColor()
+        r := gin.Default()
+        r.Use(middleware.CORSMiddleware())
+        r.Use(gin.Logger())
+        r.Use(gin.Recovery())
+
+        api := r.Group("api/v1")
+
+        api.POST("/auth", controllers.AuthHandler)
+        api.GET("/sizes", middleware.TokenRequired(), controllers.GetSizes)
+        api.PATCH("/user/preferences", controllers.UpdateUserPreferences)
+
+        user := api.Group("/user/:id")
+        user.Use(middleware.TokenRequired())
+        {
+                user.GET("", controllers.GetUser)
+                user.GET("preferences", controllers.GetUserPreferences)
+        }
+
+        stats := api.Group("/stats")
+        stats.Use(middleware.TokenRequired())
+        {
+                stats.GET("", controllers.GetAllStatistics)
+                stats.POST("", controllers.PostNewStatistic)
+                stats.GET("weekly", controllers.GetWeeklyStatistics)
+                stats.GET("daily", controllers.GetDailyUserStatistics)
+                stats.GET("user/:uuid", controllers.GetUserStatistics)
+                stats.PATCH("user/:uuid", controllers.UpdateUserStatistic)
+                stats.DELETE("user/:uuid", controllers.DeleteUserStatistic)
+        }
+
+        return r
+}
\ No newline at end of file