From 35d8fbaea0a202a1ab921f1ebc93f00fc0047b11 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 13:42:04 +0200
Subject: [PATCH 01/13] feat: implement authentication with JWT and user
 management

---
 backend/build.gradle.kts                      |   3 +
 .../blackjack/BlackJackGameController.java    |  24 +-
 .../java/de/szut/casino/config/WebConfig.java |  30 ++
 .../casino/deposit/DepositController.java     |   2 +-
 .../exceptions/UserNotFoundException.java     |   4 +-
 .../casino/lootboxes/LootBoxController.java   |   4 +-
 .../szut/casino/security/AuthController.java  |  31 ++
 .../de/szut/casino/security/CorsFilter.java   |  42 +++
 .../szut/casino/security/SecurityConfig.java  |  55 +++-
 .../casino/security/dto/AuthResponseDto.java  |  19 ++
 .../casino/security/dto/LoginRequestDto.java  |  19 ++
 .../security/jwt/JwtAuthenticationFilter.java |  64 +++++
 .../de/szut/casino/security/jwt/JwtUtils.java |  83 ++++++
 .../casino/security/service/AuthService.java  |  50 ++++
 .../service/UserDetailsServiceImpl.java       |  48 ++++
 .../de/szut/casino/slots/SlotController.java  |   4 +-
 .../de/szut/casino/user/UserController.java   |  44 ++-
 .../java/de/szut/casino/user/UserEntity.java  |  14 +-
 .../szut/casino/user/UserMappingService.java  |   9 +-
 .../de/szut/casino/user/UserRepository.java   |  12 +-
 .../java/de/szut/casino/user/UserService.java | 111 ++++----
 .../szut/casino/user/dto/CreateUserDto.java   |  14 +-
 .../de/szut/casino/user/dto/GetUserDto.java   |   3 +-
 .../transaction/GetTransactionService.java    |   2 +-
 .../src/main/resources/application.properties |  28 +-
 frontend/src/app/app.routes.ts                |   9 +-
 .../app/feature/auth/login/login.component.ts | 113 ++++++++
 .../auth/register/register.component.ts       | 144 ++++++++++
 .../game/blackjack/blackjack.component.ts     |  16 +-
 .../feature/landing/landing.component.html    |  11 +-
 .../app/feature/landing/landing.component.ts  |   3 +-
 frontend/src/app/model/User.ts                |   3 +-
 frontend/src/app/model/auth/AuthResponse.ts   |   4 +
 frontend/src/app/model/auth/LoginRequest.ts   |   4 +
 .../src/app/model/auth/RegisterRequest.ts     |   5 +
 frontend/src/app/service/auth.service.ts      | 268 +++++-------------
 frontend/src/app/service/user.service.ts      |  35 +--
 .../components/navbar/navbar.component.html   |   6 +-
 .../components/navbar/navbar.component.ts     |  14 +-
 .../shared/interceptor/http.interceptor.ts    |  24 +-
 frontend/src/environments/environment.ts      |   4 +-
 frontend/src/proxy.conf.json                  |   4 +-
 42 files changed, 989 insertions(+), 397 deletions(-)
 create mode 100644 backend/src/main/java/de/szut/casino/config/WebConfig.java
 create mode 100644 backend/src/main/java/de/szut/casino/security/AuthController.java
 create mode 100644 backend/src/main/java/de/szut/casino/security/CorsFilter.java
 create mode 100644 backend/src/main/java/de/szut/casino/security/dto/AuthResponseDto.java
 create mode 100644 backend/src/main/java/de/szut/casino/security/dto/LoginRequestDto.java
 create mode 100644 backend/src/main/java/de/szut/casino/security/jwt/JwtAuthenticationFilter.java
 create mode 100644 backend/src/main/java/de/szut/casino/security/jwt/JwtUtils.java
 create mode 100644 backend/src/main/java/de/szut/casino/security/service/AuthService.java
 create mode 100644 backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java
 create mode 100644 frontend/src/app/feature/auth/login/login.component.ts
 create mode 100644 frontend/src/app/feature/auth/register/register.component.ts
 create mode 100644 frontend/src/app/model/auth/AuthResponse.ts
 create mode 100644 frontend/src/app/model/auth/LoginRequest.ts
 create mode 100644 frontend/src/app/model/auth/RegisterRequest.ts

diff --git a/backend/build.gradle.kts b/backend/build.gradle.kts
index 51e3cd6..a0b6899 100644
--- a/backend/build.gradle.kts
+++ b/backend/build.gradle.kts
@@ -51,6 +51,9 @@ dependencies {
     implementation("org.springframework.boot:spring-boot-starter-oauth2-client:3.4.5")
     runtimeOnly("org.postgresql:postgresql")
     implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui:2.8.8")
+    implementation("io.jsonwebtoken:jjwt-api:0.11.5")
+    runtimeOnly("io.jsonwebtoken:jjwt-impl:0.11.5")
+    runtimeOnly("io.jsonwebtoken:jjwt-jackson:0.11.5")
 }
 
 tasks.withType<Test> {
diff --git a/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java b/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java
index 6813236..0e77237 100644
--- a/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java
+++ b/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java
@@ -30,10 +30,10 @@ public class BlackJackGameController {
 
     @GetMapping("/blackjack/{id}")
     public ResponseEntity<Object> getGame(@PathVariable Long id, @RequestHeader("Authorization") String token) {
-        Optional<UserEntity> optionalUser = userService.getCurrentUser(token);
+        Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException();
+            throw new UserNotFoundException("User not found");
         }
 
         UserEntity user = optionalUser.get();
@@ -47,10 +47,10 @@ public class BlackJackGameController {
 
     @PostMapping("/blackjack/{id}/hit")
     public ResponseEntity<Object> hit(@PathVariable Long id, @RequestHeader("Authorization") String token) {
-        Optional<UserEntity> optionalUser = userService.getCurrentUser(token);
+        Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException();
+            throw new UserNotFoundException("User not found");
         }
 
         UserEntity user = optionalUser.get();
@@ -64,10 +64,10 @@ public class BlackJackGameController {
 
     @PostMapping("/blackjack/{id}/stand")
     public ResponseEntity<Object> stand(@PathVariable Long id, @RequestHeader("Authorization") String token) {
-        Optional<UserEntity> optionalUser = userService.getCurrentUser(token);
+        Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException();
+            throw new UserNotFoundException("User not found");
         }
 
         UserEntity user = optionalUser.get();
@@ -81,10 +81,10 @@ public class BlackJackGameController {
 
     @PostMapping("/blackjack/{id}/doubleDown")
     public ResponseEntity<Object> doubleDown(@PathVariable Long id, @RequestHeader("Authorization") String token) {
-        Optional<UserEntity> optionalUser = userService.getCurrentUser(token);
+        Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException();
+            throw new UserNotFoundException("User not found");
         }
 
         UserEntity user = optionalUser.get();
@@ -98,10 +98,10 @@ public class BlackJackGameController {
 
     @PostMapping("/blackjack/{id}/split")
     public ResponseEntity<Object> split(@PathVariable Long id, @RequestHeader("Authorization") String token) {
-        Optional<UserEntity> optionalUser = userService.getCurrentUser(token);
+        Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException();
+            throw new UserNotFoundException("User not found");
         }
 
         UserEntity user = optionalUser.get();
@@ -115,10 +115,10 @@ public class BlackJackGameController {
 
     @PostMapping("/blackjack/start")
     public ResponseEntity<Object> createBlackJackGame(@RequestBody @Valid BetDto betDto, @RequestHeader("Authorization") String token) {
-        Optional<UserEntity> optionalUser = userService.getCurrentUser(token);
+        Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException();
+            throw new UserNotFoundException("User not found");
         }
 
         UserEntity user = optionalUser.get();
diff --git a/backend/src/main/java/de/szut/casino/config/WebConfig.java b/backend/src/main/java/de/szut/casino/config/WebConfig.java
new file mode 100644
index 0000000..9258349
--- /dev/null
+++ b/backend/src/main/java/de/szut/casino/config/WebConfig.java
@@ -0,0 +1,30 @@
+package de.szut.casino.config;
+
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.config.annotation.CorsRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+@Configuration
+public class WebConfig {
+
+    @Value("${app.frontend-host}")
+    private String frontendHost;
+
+    @Bean
+    public WebMvcConfigurer corsConfigurer() {
+        return new WebMvcConfigurer() {
+            @Override
+            public void addCorsMappings(CorsRegistry registry) {
+                registry.addMapping("/**")
+                    .allowedOrigins(frontendHost)
+                    .allowedMethods("GET", "POST", "PUT", "DELETE", "OPTIONS")
+                    .allowedHeaders("*")
+                    .exposedHeaders("*")
+                    .allowCredentials(true)
+                    .maxAge(3600);
+            }
+        };
+    }
+}
\ No newline at end of file
diff --git a/backend/src/main/java/de/szut/casino/deposit/DepositController.java b/backend/src/main/java/de/szut/casino/deposit/DepositController.java
index dbfe449..a81d486 100644
--- a/backend/src/main/java/de/szut/casino/deposit/DepositController.java
+++ b/backend/src/main/java/de/szut/casino/deposit/DepositController.java
@@ -50,7 +50,7 @@ public class DepositController {
         Stripe.apiKey = stripeKey;
 
         KeycloakUserDto userData = getAuthentikUserInfo(token);
-        Optional<UserEntity> optionalUserEntity = this.userRepository.findOneByAuthentikId(userData.getSub());
+        Optional<UserEntity> optionalUserEntity = this.userRepository.findByEmail(userData.getSub());
 
         SessionCreateParams params = SessionCreateParams.builder()
                 .addLineItem(SessionCreateParams.LineItem.builder()
diff --git a/backend/src/main/java/de/szut/casino/exceptionHandling/exceptions/UserNotFoundException.java b/backend/src/main/java/de/szut/casino/exceptionHandling/exceptions/UserNotFoundException.java
index 6916a66..6e281db 100644
--- a/backend/src/main/java/de/szut/casino/exceptionHandling/exceptions/UserNotFoundException.java
+++ b/backend/src/main/java/de/szut/casino/exceptionHandling/exceptions/UserNotFoundException.java
@@ -5,7 +5,7 @@ import org.springframework.web.bind.annotation.ResponseStatus;
 
 @ResponseStatus(value = HttpStatus.NOT_FOUND)
 public class UserNotFoundException extends RuntimeException {
-    public UserNotFoundException() {
-        super("user not found");
+    public UserNotFoundException(String message) {
+        super(message);
     }
 }
diff --git a/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java b/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
index 4ef8247..1b58056 100644
--- a/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
+++ b/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
@@ -37,9 +37,9 @@ public class LootBoxController {
 
         LootBoxEntity lootBox = optionalLootBox.get();
 
-        Optional<UserEntity> optionalUser = userService.getCurrentUser(token);
+        Optional<UserEntity> optionalUser = userService.getCurrentUser();
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException();
+            throw new UserNotFoundException("User not found");
         }
 
         UserEntity user = optionalUser.get();
diff --git a/backend/src/main/java/de/szut/casino/security/AuthController.java b/backend/src/main/java/de/szut/casino/security/AuthController.java
new file mode 100644
index 0000000..d78fbca
--- /dev/null
+++ b/backend/src/main/java/de/szut/casino/security/AuthController.java
@@ -0,0 +1,31 @@
+package de.szut.casino.security;
+
+import de.szut.casino.security.dto.AuthResponseDto;
+import de.szut.casino.security.dto.LoginRequestDto;
+import de.szut.casino.security.service.AuthService;
+import de.szut.casino.user.dto.CreateUserDto;
+import de.szut.casino.user.dto.GetUserDto;
+import jakarta.validation.Valid;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/auth")
+public class AuthController {
+
+    @Autowired
+    private AuthService authService;
+
+    @PostMapping("/login")
+    public ResponseEntity<AuthResponseDto> authenticateUser(@Valid @RequestBody LoginRequestDto loginRequest) {
+        AuthResponseDto response = authService.login(loginRequest);
+        return ResponseEntity.ok(response);
+    }
+
+    @PostMapping("/register")
+    public ResponseEntity<GetUserDto> registerUser(@Valid @RequestBody CreateUserDto signUpRequest) {
+        GetUserDto response = authService.register(signUpRequest);
+        return ResponseEntity.ok(response);
+    }
+}
\ No newline at end of file
diff --git a/backend/src/main/java/de/szut/casino/security/CorsFilter.java b/backend/src/main/java/de/szut/casino/security/CorsFilter.java
new file mode 100644
index 0000000..cf0a368
--- /dev/null
+++ b/backend/src/main/java/de/szut/casino/security/CorsFilter.java
@@ -0,0 +1,42 @@
+package de.szut.casino.security;
+
+import jakarta.servlet.*;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.core.Ordered;
+import org.springframework.core.annotation.Order;
+import org.springframework.stereotype.Component;
+
+import java.io.IOException;
+
+@Component
+@Order(Ordered.HIGHEST_PRECEDENCE)
+public class CorsFilter implements Filter {
+
+    @Value("${app.frontend-host}")
+    private String frontendHost;
+
+    @Override
+    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) 
+        throws IOException, ServletException {
+        
+        HttpServletResponse response = (HttpServletResponse) res;
+        HttpServletRequest request = (HttpServletRequest) req;
+        
+        // Allow requests from the frontend
+        response.setHeader("Access-Control-Allow-Origin", frontendHost);
+        response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, OPTIONS");
+        response.setHeader("Access-Control-Allow-Headers", "*");
+        response.setHeader("Access-Control-Expose-Headers", "*");
+        response.setHeader("Access-Control-Allow-Credentials", "true");
+        response.setHeader("Access-Control-Max-Age", "3600");
+        
+        if ("OPTIONS".equalsIgnoreCase(request.getMethod())) {
+            response.setStatus(HttpServletResponse.SC_OK);
+            return;
+        }
+        
+        chain.doFilter(req, res);
+    }
+}
\ No newline at end of file
diff --git a/backend/src/main/java/de/szut/casino/security/SecurityConfig.java b/backend/src/main/java/de/szut/casino/security/SecurityConfig.java
index 65d5b2c..725563d 100644
--- a/backend/src/main/java/de/szut/casino/security/SecurityConfig.java
+++ b/backend/src/main/java/de/szut/casino/security/SecurityConfig.java
@@ -1,12 +1,22 @@
 package de.szut.casino.security;
 
+import de.szut.casino.security.jwt.JwtAuthenticationFilter;
+import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
-import org.springframework.security.config.Customizer;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
+import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
+import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 import org.springframework.web.cors.CorsConfiguration;
 import org.springframework.web.cors.CorsConfigurationSource;
 import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
@@ -16,23 +26,51 @@ import java.util.List;
 
 @Configuration
 @EnableWebSecurity
+@EnableMethodSecurity
 public class SecurityConfig {
 
     @Value("${app.frontend-host}")
     private String frontendHost;
 
+    @Autowired
+    private UserDetailsService userDetailsService;
+
+    @Autowired
+    private JwtAuthenticationFilter jwtAuthenticationFilter;
+
+    @Bean
+    public DaoAuthenticationProvider authenticationProvider() {
+        DaoAuthenticationProvider authProvider = new DaoAuthenticationProvider();
+        
+        authProvider.setUserDetailsService(userDetailsService);
+        authProvider.setPasswordEncoder(passwordEncoder());
+        
+        return authProvider;
+    }
+
+    @Bean
+    public AuthenticationManager authenticationManager(AuthenticationConfiguration authConfig) throws Exception {
+        return authConfig.getAuthenticationManager();
+    }
+
+    @Bean
+    public PasswordEncoder passwordEncoder() {
+        return new BCryptPasswordEncoder();
+    }
+
     @Bean
     public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
         http
-            .cors(Customizer.withDefaults())
+            .cors(cors -> cors.configurationSource(corsConfigurationSource()))
             .csrf(csrf -> csrf.disable())
+            .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
             .authorizeHttpRequests(auth -> {
-                auth.requestMatchers("/webhook", "/swagger/**", "/swagger-ui/**", "/health").permitAll()
+                auth.requestMatchers("/api/auth/**", "/webhook", "/swagger/**", "/swagger-ui/**", "/health", "/error").permitAll()
+                    .requestMatchers(org.springframework.http.HttpMethod.OPTIONS, "/**").permitAll()
                     .anyRequest().authenticated();
                 })
-                .oauth2ResourceServer(oauth2 -> oauth2.jwt(jwt ->
-                    jwt.jwtAuthenticationConverter(new CustomJwtAuthenticationConverter())
-                ));
+            .authenticationProvider(authenticationProvider())
+            .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
 
         return http.build();
     }
@@ -42,9 +80,10 @@ public class SecurityConfig {
         CorsConfiguration configuration = new CorsConfiguration();
         configuration.setAllowedOrigins(List.of(this.frontendHost));
         configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"));
-        configuration.setAllowedHeaders(Arrays.asList("authorization", "content-type", "x-auth-token", "Access-Control-Allow-Origin"));
-        configuration.setExposedHeaders(List.of("x-auth-token"));
+        configuration.setAllowedHeaders(Arrays.asList("Authorization", "Content-Type", "Accept", "Origin", "X-Requested-With", "Access-Control-Request-Method", "Access-Control-Request-Headers", "x-auth-token"));
+        configuration.setExposedHeaders(Arrays.asList("Authorization", "Content-Type", "x-auth-token", "Access-Control-Allow-Origin", "Access-Control-Allow-Methods", "Access-Control-Allow-Headers"));
         configuration.setAllowCredentials(true);
+        configuration.setMaxAge(3600L);
         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
         source.registerCorsConfiguration("/**", configuration);
         return source;
diff --git a/backend/src/main/java/de/szut/casino/security/dto/AuthResponseDto.java b/backend/src/main/java/de/szut/casino/security/dto/AuthResponseDto.java
new file mode 100644
index 0000000..bf2c51c
--- /dev/null
+++ b/backend/src/main/java/de/szut/casino/security/dto/AuthResponseDto.java
@@ -0,0 +1,19 @@
+package de.szut.casino.security.dto;
+
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+
+@Getter
+@Setter
+@NoArgsConstructor
+@AllArgsConstructor
+public class AuthResponseDto {
+    private String token;
+    private String tokenType = "Bearer";
+    
+    public AuthResponseDto(String token) {
+        this.token = token;
+    }
+}
\ No newline at end of file
diff --git a/backend/src/main/java/de/szut/casino/security/dto/LoginRequestDto.java b/backend/src/main/java/de/szut/casino/security/dto/LoginRequestDto.java
new file mode 100644
index 0000000..f07396c
--- /dev/null
+++ b/backend/src/main/java/de/szut/casino/security/dto/LoginRequestDto.java
@@ -0,0 +1,19 @@
+package de.szut.casino.security.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+
+@Getter
+@Setter
+@NoArgsConstructor
+@AllArgsConstructor
+public class LoginRequestDto {
+    @NotBlank(message = "Username or email is required")
+    private String usernameOrEmail;
+    
+    @NotBlank(message = "Password is required")
+    private String password;
+}
\ No newline at end of file
diff --git a/backend/src/main/java/de/szut/casino/security/jwt/JwtAuthenticationFilter.java b/backend/src/main/java/de/szut/casino/security/jwt/JwtAuthenticationFilter.java
new file mode 100644
index 0000000..a729b36
--- /dev/null
+++ b/backend/src/main/java/de/szut/casino/security/jwt/JwtAuthenticationFilter.java
@@ -0,0 +1,64 @@
+package de.szut.casino.security.jwt;
+
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;
+import org.springframework.stereotype.Component;
+import org.springframework.util.StringUtils;
+import org.springframework.web.filter.OncePerRequestFilter;
+
+import java.io.IOException;
+
+@Component
+public class JwtAuthenticationFilter extends OncePerRequestFilter {
+
+    @Autowired
+    private JwtUtils jwtUtils;
+
+    @Autowired
+    private UserDetailsService userDetailsService;
+
+    @Override
+    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
+            throws ServletException, IOException {
+        try {
+            String jwt = parseJwt(request);
+            if (jwt != null) {
+                String username = jwtUtils.extractUsername(jwt);
+
+                if (username != null && SecurityContextHolder.getContext().getAuthentication() == null) {
+                    UserDetails userDetails = userDetailsService.loadUserByUsername(username);
+                    
+                    if (jwtUtils.validateToken(jwt, userDetails)) {
+                        UsernamePasswordAuthenticationToken authToken = new UsernamePasswordAuthenticationToken(
+                                userDetails, null, userDetails.getAuthorities());
+                        
+                        authToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));
+                        SecurityContextHolder.getContext().setAuthentication(authToken);
+                    }
+                }
+            }
+        } catch (Exception e) {
+            logger.error("Cannot set user authentication: {}", e);
+        }
+
+        filterChain.doFilter(request, response);
+    }
+
+    private String parseJwt(HttpServletRequest request) {
+        String headerAuth = request.getHeader("Authorization");
+
+        if (StringUtils.hasText(headerAuth) && headerAuth.startsWith("Bearer ")) {
+            return headerAuth.substring(7);
+        }
+
+        return null;
+    }
+}
\ No newline at end of file
diff --git a/backend/src/main/java/de/szut/casino/security/jwt/JwtUtils.java b/backend/src/main/java/de/szut/casino/security/jwt/JwtUtils.java
new file mode 100644
index 0000000..fac25a1
--- /dev/null
+++ b/backend/src/main/java/de/szut/casino/security/jwt/JwtUtils.java
@@ -0,0 +1,83 @@
+package de.szut.casino.security.jwt;
+
+import io.jsonwebtoken.Claims;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.SignatureAlgorithm;
+import io.jsonwebtoken.security.Keys;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.stereotype.Component;
+
+import java.security.Key;
+import java.util.Date;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.function.Function;
+
+@Component
+public class JwtUtils {
+
+    @Value("${jwt.secret}")
+    private String jwtSecret;
+
+    @Value("${jwt.expiration.ms}")
+    private int jwtExpirationMs;
+
+    private Key getSigningKey() {
+        return Keys.hmacShaKeyFor(jwtSecret.getBytes());
+    }
+
+    public String generateToken(Authentication authentication) {
+        UserDetails userDetails = (UserDetails) authentication.getPrincipal();
+        return generateToken(userDetails.getUsername());
+    }
+
+    public String generateToken(String username) {
+        Map<String, Object> claims = new HashMap<>();
+        return createToken(claims, username);
+    }
+
+    private String createToken(Map<String, Object> claims, String subject) {
+        Date now = new Date();
+        Date expiryDate = new Date(now.getTime() + jwtExpirationMs);
+
+        return Jwts.builder()
+                .setClaims(claims)
+                .setSubject(subject)
+                .setIssuedAt(now)
+                .setExpiration(expiryDate)
+                .signWith(getSigningKey(), SignatureAlgorithm.HS256)
+                .compact();
+    }
+
+    public String extractUsername(String token) {
+        return extractClaim(token, Claims::getSubject);
+    }
+
+    public Date extractExpiration(String token) {
+        return extractClaim(token, Claims::getExpiration);
+    }
+
+    public <T> T extractClaim(String token, Function<Claims, T> claimsResolver) {
+        final Claims claims = extractAllClaims(token);
+        return claimsResolver.apply(claims);
+    }
+
+    private Claims extractAllClaims(String token) {
+        return Jwts.parserBuilder()
+                .setSigningKey(getSigningKey())
+                .build()
+                .parseClaimsJws(token)
+                .getBody();
+    }
+
+    private Boolean isTokenExpired(String token) {
+        return extractExpiration(token).before(new Date());
+    }
+
+    public Boolean validateToken(String token, UserDetails userDetails) {
+        final String username = extractUsername(token);
+        return (username.equals(userDetails.getUsername()) && !isTokenExpired(token));
+    }
+}
\ No newline at end of file
diff --git a/backend/src/main/java/de/szut/casino/security/service/AuthService.java b/backend/src/main/java/de/szut/casino/security/service/AuthService.java
new file mode 100644
index 0000000..d25c953
--- /dev/null
+++ b/backend/src/main/java/de/szut/casino/security/service/AuthService.java
@@ -0,0 +1,50 @@
+package de.szut.casino.security.service;
+
+import de.szut.casino.security.dto.AuthResponseDto;
+import de.szut.casino.security.dto.LoginRequestDto;
+import de.szut.casino.security.jwt.JwtUtils;
+import de.szut.casino.user.UserEntity;
+import de.szut.casino.user.UserService;
+import de.szut.casino.user.dto.CreateUserDto;
+import de.szut.casino.user.dto.GetUserDto;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Service;
+
+@Service
+public class AuthService {
+
+    @Autowired
+    private AuthenticationManager authenticationManager;
+
+    @Autowired
+    private JwtUtils jwtUtils;
+
+    @Autowired
+    private UserService userService;
+
+    public AuthResponseDto login(LoginRequestDto loginRequest) {
+        Authentication authentication = authenticationManager.authenticate(
+                new UsernamePasswordAuthenticationToken(
+                        loginRequest.getUsernameOrEmail(),
+                        loginRequest.getPassword()));
+
+        SecurityContextHolder.getContext().setAuthentication(authentication);
+        String jwt = jwtUtils.generateToken(authentication);
+        
+        return new AuthResponseDto(jwt);
+    }
+
+    public GetUserDto register(CreateUserDto signUpRequest) {
+        UserEntity user = userService.createUser(signUpRequest);
+        return new GetUserDto(
+                user.getId(),
+                user.getEmail(),
+                user.getUsername(),
+                user.getBalance()
+        );
+    }
+}
\ No newline at end of file
diff --git a/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java b/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java
new file mode 100644
index 0000000..bae4adf
--- /dev/null
+++ b/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java
@@ -0,0 +1,48 @@
+package de.szut.casino.security.service;
+
+import de.szut.casino.exceptionHandling.exceptions.UserNotFoundException;
+import de.szut.casino.user.UserEntity;
+import de.szut.casino.user.UserRepository;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.stereotype.Service;
+
+import java.util.ArrayList;
+import java.util.Optional;
+
+@Service
+public class UserDetailsServiceImpl implements UserDetailsService {
+
+    @Autowired
+    private UserRepository userRepository;
+
+    @Override
+    public UserDetails loadUserByUsername(String usernameOrEmail) throws UsernameNotFoundException {
+        Optional<UserEntity> user = userRepository.findByUsername(usernameOrEmail);
+        
+        if (user.isEmpty()) {
+            user = userRepository.findByEmail(usernameOrEmail);
+        }
+        
+        UserEntity userEntity = user.orElseThrow(() -> 
+                new UsernameNotFoundException("User not found with username or email: " + usernameOrEmail));
+        
+        return new org.springframework.security.core.userdetails.User(
+                userEntity.getUsername(), 
+                userEntity.getPassword(), 
+                new ArrayList<>());
+    }
+    
+    public UserEntity getUserByUsernameOrEmail(String usernameOrEmail) {
+        Optional<UserEntity> user = userRepository.findByUsername(usernameOrEmail);
+        
+        if (user.isEmpty()) {
+            user = userRepository.findByEmail(usernameOrEmail);
+        }
+        
+        return user.orElseThrow(() -> 
+                new UserNotFoundException("User not found with username or email: " + usernameOrEmail));
+    }
+}
\ No newline at end of file
diff --git a/backend/src/main/java/de/szut/casino/slots/SlotController.java b/backend/src/main/java/de/szut/casino/slots/SlotController.java
index 5e27b52..030e9d8 100644
--- a/backend/src/main/java/de/szut/casino/slots/SlotController.java
+++ b/backend/src/main/java/de/szut/casino/slots/SlotController.java
@@ -30,10 +30,10 @@ public class SlotController {
 
     @PostMapping("/slots/spin")
     public ResponseEntity<Object> spinSlots(@RequestBody @Valid BetDto betDto, @RequestHeader("Authorization") String token) {
-        Optional<UserEntity> optionalUser = userService.getCurrentUser(token);
+        Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException();
+            throw new UserNotFoundException("User not found");
         }
 
         UserEntity user = optionalUser.get();
diff --git a/backend/src/main/java/de/szut/casino/user/UserController.java b/backend/src/main/java/de/szut/casino/user/UserController.java
index a5cae8c..7dae2d6 100644
--- a/backend/src/main/java/de/szut/casino/user/UserController.java
+++ b/backend/src/main/java/de/szut/casino/user/UserController.java
@@ -1,43 +1,41 @@
 package de.szut.casino.user;
 
 import de.szut.casino.exceptionHandling.exceptions.UserNotFoundException;
-import de.szut.casino.user.dto.CreateUserDto;
 import de.szut.casino.user.dto.GetUserDto;
-import jakarta.validation.Valid;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.http.HttpHeaders;
-import org.springframework.http.HttpStatus;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.*;
 
 @Slf4j
 @RestController
+@CrossOrigin
+@RequestMapping("/api/users")
 public class UserController {
 
     @Autowired
     private UserService userService;
 
-    @PostMapping("/user")
-    public ResponseEntity<?> createUser(@RequestBody @Valid CreateUserDto userData) {
-        if (userService.exists(userData.getAuthentikId())) {
-            HttpHeaders headers = new HttpHeaders();
-            headers.add("Location", "/user");
+    @Autowired
+    private UserMappingService userMappingService;
 
-            return new ResponseEntity<>(headers, HttpStatus.FOUND);
-        }
-
-        return ResponseEntity.ok(userService.createUser(userData));
+    @GetMapping("/me")
+    public ResponseEntity<GetUserDto> getCurrentUser() {
+        return ResponseEntity.ok(userMappingService.mapToGetUserDto(userService.getCurrentUser().orElseThrow()));
     }
-
-    @GetMapping("/user")
-    public ResponseEntity<GetUserDto> getCurrentUser(@RequestHeader("Authorization") String token) {
-        GetUserDto userData = userService.getCurrentUserAsDto(token);
-
-        if (userData == null) {
-            throw new UserNotFoundException();
-        }
-
-        return ResponseEntity.ok(userData);
+    
+    @GetMapping("/current")
+    public ResponseEntity<GetUserDto> getCurrentUserAlternative() {
+        return ResponseEntity.ok(userMappingService.mapToGetUserDto(userService.getCurrentUser().orElseThrow()));
+    }
+    
+    @GetMapping("/{id}")
+    public ResponseEntity<GetUserDto> getUserById(@PathVariable Long id) {
+        return ResponseEntity.ok(userService.getUserById(id));
+    }
+    
+    @GetMapping("/username/{username}")
+    public ResponseEntity<GetUserDto> getUserByUsername(@PathVariable String username) {
+        return ResponseEntity.ok(userService.getUserByUsername(username));
     }
 }
diff --git a/backend/src/main/java/de/szut/casino/user/UserEntity.java b/backend/src/main/java/de/szut/casino/user/UserEntity.java
index 03f4a34..913e69d 100644
--- a/backend/src/main/java/de/szut/casino/user/UserEntity.java
+++ b/backend/src/main/java/de/szut/casino/user/UserEntity.java
@@ -18,16 +18,22 @@ public class UserEntity {
     @Id
     @GeneratedValue
     private Long id;
+    
+    @Column(unique = true)
+    private String email;
+    
     @Column(unique = true)
-    private String authentikId;
     private String username;
-
+    
+    private String password;
+    
     @Column(precision = 19, scale = 2)
     private BigDecimal balance;
 
-    public UserEntity(String authentikId, String username, BigDecimal balance) {
-        this.authentikId = authentikId;
+    public UserEntity(String email, String username, String password, BigDecimal balance) {
+        this.email = email;
         this.username = username;
+        this.password = password;
         this.balance = balance;
     }
 
diff --git a/backend/src/main/java/de/szut/casino/user/UserMappingService.java b/backend/src/main/java/de/szut/casino/user/UserMappingService.java
index 86a1331..1e3e093 100644
--- a/backend/src/main/java/de/szut/casino/user/UserMappingService.java
+++ b/backend/src/main/java/de/szut/casino/user/UserMappingService.java
@@ -2,18 +2,17 @@ package de.szut.casino.user;
 
 import de.szut.casino.user.dto.CreateUserDto;
 import de.szut.casino.user.dto.GetUserDto;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.stereotype.Service;
 
 import java.math.BigDecimal;
 
 @Service
 public class UserMappingService {
+    
     public GetUserDto mapToGetUserDto(UserEntity user) {
-        return new GetUserDto(user.getAuthentikId(), user.getUsername(), user.getBalance());
-    }
-
-    public UserEntity mapToUserEntity(CreateUserDto createUserDto) {
-        return new UserEntity(createUserDto.getAuthentikId(), createUserDto.getUsername(), BigDecimal.ZERO);
+        return new GetUserDto(user.getId(), user.getEmail(), user.getUsername(), user.getBalance());
     }
 }
 
diff --git a/backend/src/main/java/de/szut/casino/user/UserRepository.java b/backend/src/main/java/de/szut/casino/user/UserRepository.java
index 1f8d64e..863e744 100644
--- a/backend/src/main/java/de/szut/casino/user/UserRepository.java
+++ b/backend/src/main/java/de/szut/casino/user/UserRepository.java
@@ -1,15 +1,17 @@
 package de.szut.casino.user;
 
 import org.springframework.data.jpa.repository.JpaRepository;
-import org.springframework.data.jpa.repository.Query;
 import org.springframework.stereotype.Service;
 
 import java.util.Optional;
 
 @Service
 public interface UserRepository extends JpaRepository<UserEntity, Long> {
-    @Query("SELECT u FROM UserEntity u WHERE u.authentikId = ?1")
-    Optional<UserEntity> findOneByAuthentikId(String authentikId);
-
-    boolean existsByAuthentikId(String authentikId);
+    Optional<UserEntity> findByUsername(String username);
+    
+    Optional<UserEntity> findByEmail(String email);
+    
+    boolean existsByUsername(String username);
+    
+    boolean existsByEmail(String email);
 }
diff --git a/backend/src/main/java/de/szut/casino/user/UserService.java b/backend/src/main/java/de/szut/casino/user/UserService.java
index d5ce222..cfbd7dd 100644
--- a/backend/src/main/java/de/szut/casino/user/UserService.java
+++ b/backend/src/main/java/de/szut/casino/user/UserService.java
@@ -1,16 +1,14 @@
 package de.szut.casino.user;
 
+import de.szut.casino.exceptionHandling.exceptions.UserNotFoundException;
 import de.szut.casino.user.dto.CreateUserDto;
 import de.szut.casino.user.dto.GetUserDto;
-import de.szut.casino.user.dto.KeycloakUserDto;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.http.HttpEntity;
-import org.springframework.http.HttpHeaders;
-import org.springframework.http.HttpMethod;
-import org.springframework.http.ResponseEntity;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.stereotype.Service;
-import org.springframework.web.client.RestTemplate;
 
+import java.math.BigDecimal;
 import java.util.Optional;
 
 @Service
@@ -18,64 +16,69 @@ public class UserService {
     @Autowired
     private UserRepository userRepository;
 
-    @Autowired
-    private RestTemplate http;
-
     @Autowired
     private UserMappingService mappingService;
+    
+    @Autowired
+    private PasswordEncoder passwordEncoder;
 
     public UserEntity createUser(CreateUserDto createUserDto) {
-        UserEntity user = mappingService.mapToUserEntity(createUserDto);
-        userRepository.save(user);
-
-        return user;
-    }
-
-    public GetUserDto getUser(String authentikId) {
-        Optional<UserEntity> user = this.userRepository.findOneByAuthentikId(authentikId);
-
-        return user.map(userEntity -> mappingService.mapToGetUserDto(userEntity)).orElse(null);
-    }
-
-    public GetUserDto getCurrentUserAsDto(String token) {
-        KeycloakUserDto userData = getAuthentikUserInfo(token);
-
-        if (userData == null) {
-            return null;
+        if (userRepository.existsByUsername(createUserDto.getUsername())) {
+            throw new IllegalArgumentException("Username is already taken");
         }
-        Optional<UserEntity> user = this.userRepository.findOneByAuthentikId(userData.getSub());
 
-        return user.map(userEntity -> mappingService.mapToGetUserDto(userEntity)).orElse(null);
-    }
-
-    public Optional<UserEntity> getCurrentUser(String token) {
-        KeycloakUserDto userData = getAuthentikUserInfo(token);
-
-        if (userData == null) {
-            return Optional.empty();
+        if (userRepository.existsByEmail(createUserDto.getEmail())) {
+            throw new IllegalArgumentException("Email is already in use");
         }
-        return this.userRepository.findOneByAuthentikId(userData.getSub());
+        
+        UserEntity user = new UserEntity(
+            createUserDto.getEmail(),
+            createUserDto.getUsername(),
+            passwordEncoder.encode(createUserDto.getPassword()),
+            BigDecimal.valueOf(1000)  // Starting balance
+        );
+        
+        return userRepository.save(user);
     }
 
-    private KeycloakUserDto getAuthentikUserInfo(String token) {
-        try {
-            HttpHeaders headers = new HttpHeaders();
-            headers.set("Authorization", token);
-            ResponseEntity<KeycloakUserDto> response = this.http.exchange(
-                "https://oauth.simonis.lol/application/o/userinfo/", 
-                HttpMethod.GET, 
-                new HttpEntity<>(headers), 
-                KeycloakUserDto.class
-            );
-            
-            return response.getBody();
-        } catch (Exception e) {
-            System.err.println("Error fetching user info from Authentik: " + e.getMessage());
-            return null;
-        }
+    public GetUserDto getUserById(Long id) {
+        UserEntity user = userRepository.findById(id)
+            .orElseThrow(() -> new UserNotFoundException("User not found with id: " + id));
+        
+        return mappingService.mapToGetUserDto(user);
+    }
+    
+    public GetUserDto getUserByUsername(String username) {
+        UserEntity user = userRepository.findByUsername(username)
+            .orElseThrow(() -> new UserNotFoundException("User not found with username: " + username));
+        
+        return mappingService.mapToGetUserDto(user);
+    }
+    
+    public GetUserDto getUserByEmail(String email) {
+        UserEntity user = userRepository.findByEmail(email)
+            .orElseThrow(() -> new UserNotFoundException("User not found with email: " + email));
+        
+        return mappingService.mapToGetUserDto(user);
     }
 
-    public boolean exists(String authentikId) {
-        return userRepository.existsByAuthentikId(authentikId);
+    public Optional<UserEntity> getCurrentUser() {
+        String username = SecurityContextHolder.getContext().getAuthentication().getName();
+
+        return userRepository.findByUsername(username);
+    }
+    
+    public UserEntity getCurrentUserEntity() {
+        String username = SecurityContextHolder.getContext().getAuthentication().getName();
+        return userRepository.findByUsername(username)
+            .orElseThrow(() -> new UserNotFoundException("User not found with username: " + username));
+    }
+    
+    public boolean existsByUsername(String username) {
+        return userRepository.existsByUsername(username);
+    }
+    
+    public boolean existsByEmail(String email) {
+        return userRepository.existsByEmail(email);
     }
 }
diff --git a/backend/src/main/java/de/szut/casino/user/dto/CreateUserDto.java b/backend/src/main/java/de/szut/casino/user/dto/CreateUserDto.java
index f983b2d..f9969cc 100644
--- a/backend/src/main/java/de/szut/casino/user/dto/CreateUserDto.java
+++ b/backend/src/main/java/de/szut/casino/user/dto/CreateUserDto.java
@@ -1,5 +1,8 @@
 package de.szut.casino.user.dto;
 
+import jakarta.validation.constraints.Email;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Size;
 import lombok.AllArgsConstructor;
 import lombok.Getter;
 import lombok.NoArgsConstructor;
@@ -10,6 +13,15 @@ import lombok.Setter;
 @AllArgsConstructor
 @NoArgsConstructor
 public class CreateUserDto {
-    private String authentikId;
+    @NotBlank(message = "Email is required")
+    @Email(message = "Email should be valid")
+    private String email;
+    
+    @NotBlank(message = "Username is required")
+    @Size(min = 3, max = 20, message = "Username must be between 3 and 20 characters")
     private String username;
+    
+    @NotBlank(message = "Password is required")
+    @Size(min = 6, message = "Password must be at least 6 characters")
+    private String password;
 }
diff --git a/backend/src/main/java/de/szut/casino/user/dto/GetUserDto.java b/backend/src/main/java/de/szut/casino/user/dto/GetUserDto.java
index 7a7d561..2c41f0d 100644
--- a/backend/src/main/java/de/szut/casino/user/dto/GetUserDto.java
+++ b/backend/src/main/java/de/szut/casino/user/dto/GetUserDto.java
@@ -12,7 +12,8 @@ import java.math.BigDecimal;
 @AllArgsConstructor
 @NoArgsConstructor
 public class GetUserDto {
-    private String authentikId;
+    private Long id;
+    private String email;
     private String username;
     private BigDecimal balance;
 }
diff --git a/backend/src/main/java/de/szut/casino/user/transaction/GetTransactionService.java b/backend/src/main/java/de/szut/casino/user/transaction/GetTransactionService.java
index 831c438..2a8350f 100644
--- a/backend/src/main/java/de/szut/casino/user/transaction/GetTransactionService.java
+++ b/backend/src/main/java/de/szut/casino/user/transaction/GetTransactionService.java
@@ -22,7 +22,7 @@ public class GetTransactionService {
     private TransactionRepository transactionRepository;
 
     public UserTransactionsDto getUserTransactionsDto(String authToken, Integer limit, Integer offset) {
-        Optional<UserEntity> user = this.userService.getCurrentUser(authToken);
+        Optional<UserEntity> user = this.userService.getCurrentUser();
         if (user.isPresent()) {
             List<TransactionEntity> transactionEntities = this.transactionRepository.findByUserIdWithLimit(user.get(), limit, offset);
             Boolean hasMore = this.transactionRepository.hasMore(user.get(), limit, offset);
diff --git a/backend/src/main/resources/application.properties b/backend/src/main/resources/application.properties
index bb8a4be..0d18cfd 100644
--- a/backend/src/main/resources/application.properties
+++ b/backend/src/main/resources/application.properties
@@ -8,33 +8,15 @@ stripe.webhook.secret=${STRIPE_WEBHOOK_SECRET:whsec_746b6a488665f6057118bdb4a2b3
 app.frontend-host=${FE_URL:http://localhost:4200}
 
 spring.application.name=casino
-#client registration configuration
 
-spring.security.oauth2.client.registration.authentik.client-id=${AUTH_CLIENT_ID:MDqjm1kcWKuZfqHJXjxwAV20i44aT7m4VhhTL3Nm}
-spring.security.oauth2.client.registration.authentik.client-secret=${AUTH_CLIENT_SECRET:GY2F8te6iAVYt1TNAUVLzWZEXb6JoMNp6chbjqaXNq4gS5xTDL54HqBiAlV1jFKarN28LQ7FUsYX4SbwjfEhZhgeoKuBnZKjR9eiu7RawnGgxIK9ffvUfMkjRxnmiGI5}
-spring.security.oauth2.client.registration.authentik.provider=authentik
-spring.security.oauth2.client.registration.authentik.client-name=Authentik
-spring.security.oauth2.client.registration.authentik.scope=openid,email,profile
-spring.security.oauth2.client.registration.authentik.client-authentication-method=client_secret_basic
-spring.security.oauth2.client.registration.authentik.authorization-grant-type=authorization_code
-spring.security.oauth2.client.registration.authentik.redirect-uri={baseUrl}/login/oauth2/code/{registrationId}
+# JWT Configuration
+jwt.secret=${JWT_SECRET:5367566B59703373367639792F423F4528482B4D6251655468576D5A71347437}
+jwt.expiration.ms=${JWT_EXPIRATION_MS:86400000}
 
-# Provider settings
-spring.security.oauth2.client.provider.authentik.issuer-uri=${AUTH_PROVIDER_ISSUER:https://oauth.simonis.lol/application/o/casino-dev/}
-spring.security.oauth2.client.provider.authentik.authorization-uri=${AUTH_PROVIDER_AUTHORIZE_URI:https://oauth.simonis.lol/application/o/authorize/}
-spring.security.oauth2.client.provider.authentik.token-uri=${AUTH_PROVIDER_TOKEN_URI:https://oauth.simonis.lol/application/o/token/}
-spring.security.oauth2.client.provider.authentik.user-info-uri=${AUTH_PROVIDER_USERINFO_URI:https://oauth.simonis.lol/application/o/userinfo/}
-spring.security.oauth2.client.provider.authentik.jwk-set-uri=${AUTH_PROVIDER_JWKS_URI:https://oauth.simonis.lol/application/o/casino-dev/jwks/}
-spring.security.oauth2.client.provider.authentik.user-name-attribute=${AUTH_PROVIDER_NAME_ATTR:preferred_username}
-
-# Resource server config
-spring.security.oauth2.resourceserver.jwt.issuer-uri=${AUTH_JWT_ISSUER_URI:https://oauth.simonis.lol/application/o/casino-dev}/
-spring.security.oauth2.resourceserver.jwt.jwk-set-uri=${AUTH_JWT_JWT_SET_URI:https://oauth.simonis.lol/application/o/casino-dev/jwks/}
-
-#OIDC provider configuration:
+# Logging
 logging.level.org.springframework.security=DEBUG
-#validating JWT token against our Authentik server
 
+# Swagger 
 springdoc.swagger-ui.path=swagger
 springdoc.swagger-ui.try-it-out-enabled=true
 
diff --git a/frontend/src/app/app.routes.ts b/frontend/src/app/app.routes.ts
index a207b91..8874f98 100644
--- a/frontend/src/app/app.routes.ts
+++ b/frontend/src/app/app.routes.ts
@@ -8,8 +8,12 @@ export const routes: Routes = [
     component: LandingComponent,
   },
   {
-    path: 'auth/callback',
-    loadComponent: () => import('./feature/login-success/login-success.component'),
+    path: 'login',
+    loadComponent: () => import('./feature/auth/login/login.component').then(m => m.LoginComponent),
+  },
+  {
+    path: 'register',
+    loadComponent: () => import('./feature/auth/register/register.component').then(m => m.RegisterComponent),
   },
   {
     path: 'home',
@@ -24,7 +28,6 @@ export const routes: Routes = [
   {
     path: 'game/slots',
     loadComponent: () => import('./feature/game/slots/slots.component'),
-    canActivate: [authGuard],
   },
   {
     path: 'game/lootboxes',
diff --git a/frontend/src/app/feature/auth/login/login.component.ts b/frontend/src/app/feature/auth/login/login.component.ts
new file mode 100644
index 0000000..694d91d
--- /dev/null
+++ b/frontend/src/app/feature/auth/login/login.component.ts
@@ -0,0 +1,113 @@
+import { Component } from '@angular/core';
+import { FormBuilder, FormGroup, ReactiveFormsModule, Validators } from '@angular/forms';
+import { Router, RouterLink } from '@angular/router';
+import { LoginRequest } from '../../../model/auth/LoginRequest';
+import { AuthService } from '../../../service/auth.service';
+import { CommonModule } from '@angular/common';
+
+@Component({
+  selector: 'app-login',
+  standalone: true,
+  imports: [CommonModule, ReactiveFormsModule, RouterLink],
+  template: `
+    <div class="min-h-screen bg-gray-900 flex items-center justify-center">
+      <div class="max-w-md w-full bg-gray-800 rounded-lg shadow-lg p-8">
+        <h2 class="text-2xl font-bold text-white mb-6 text-center">Login to Casino</h2>
+
+        <div *ngIf="errorMessage" class="bg-red-600 text-white p-4 rounded mb-4">
+          {{ errorMessage }}
+        </div>
+
+        <form [formGroup]="loginForm" (ngSubmit)="onSubmit()" class="space-y-6">
+          <div>
+            <label for="usernameOrEmail" class="block text-sm font-medium text-gray-300">Username or Email</label>
+            <input
+              id="usernameOrEmail"
+              type="text"
+              formControlName="usernameOrEmail"
+              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+              placeholder="Enter your username or email">
+
+            <div *ngIf="form['usernameOrEmail'].touched && form['usernameOrEmail'].errors" class="text-red-500 mt-1 text-sm">
+              <span *ngIf="form['usernameOrEmail'].errors?.['required']">Username or email is required</span>
+            </div>
+          </div>
+
+          <div>
+            <label for="password" class="block text-sm font-medium text-gray-300">Password</label>
+            <input
+              id="password"
+              type="password"
+              formControlName="password"
+              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+              placeholder="Enter your password">
+
+            <div *ngIf="form['password'].touched && form['password'].errors" class="text-red-500 mt-1 text-sm">
+              <span *ngIf="form['password'].errors?.['required']">Password is required</span>
+            </div>
+          </div>
+
+          <div>
+            <button
+              type="submit"
+              [disabled]="loginForm.invalid || isLoading"
+              class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
+              {{ isLoading ? 'Logging in...' : 'Login' }}
+            </button>
+          </div>
+        </form>
+
+        <div class="mt-6 text-center">
+          <p class="text-sm text-gray-400">
+            Don't have an account?
+            <a routerLink="/register" class="font-medium text-indigo-400 hover:text-indigo-300">Register</a>
+          </p>
+        </div>
+      </div>
+    </div>
+  `
+})
+export class LoginComponent {
+  loginForm: FormGroup;
+  errorMessage = '';
+  isLoading = false;
+
+  constructor(
+    private fb: FormBuilder,
+    private authService: AuthService,
+    private router: Router
+  ) {
+    this.loginForm = this.fb.group({
+      usernameOrEmail: ['', [Validators.required]],
+      password: ['', [Validators.required]]
+    });
+  }
+
+  get form() {
+    return this.loginForm.controls;
+  }
+
+  onSubmit(): void {
+    if (this.loginForm.invalid) {
+      return;
+    }
+
+    this.isLoading = true;
+    this.errorMessage = '';
+
+    const loginRequest: LoginRequest = {
+      usernameOrEmail: this.form['usernameOrEmail'].value,
+      password: this.form['password'].value
+    };
+
+    this.authService.login(loginRequest).subscribe({
+      next: () => {
+        this.router.navigate(['/home']);
+      },
+      error: err => {
+        this.isLoading = false;
+        this.errorMessage = err.error?.message || 'Failed to login. Please check your credentials.';
+      }
+    });
+  }
+}
diff --git a/frontend/src/app/feature/auth/register/register.component.ts b/frontend/src/app/feature/auth/register/register.component.ts
new file mode 100644
index 0000000..b997f04
--- /dev/null
+++ b/frontend/src/app/feature/auth/register/register.component.ts
@@ -0,0 +1,144 @@
+import { Component } from '@angular/core';
+import { FormBuilder, FormGroup, ReactiveFormsModule, Validators } from '@angular/forms';
+import { Router, RouterLink } from '@angular/router';
+import { RegisterRequest } from '../../../model/auth/RegisterRequest';
+import { AuthService } from '../../../service/auth.service';
+import { CommonModule } from '@angular/common';
+
+@Component({
+  selector: 'app-register',
+  standalone: true,
+  imports: [CommonModule, ReactiveFormsModule, RouterLink],
+  template: `
+    <div class="min-h-screen bg-gray-900 flex items-center justify-center">
+      <div class="max-w-md w-full bg-gray-800 rounded-lg shadow-lg p-8">
+        <h2 class="text-2xl font-bold text-white mb-6 text-center">Create Account</h2>
+
+        <div *ngIf="errorMessage" class="bg-red-600 text-white p-4 rounded mb-4">
+          {{ errorMessage }}
+        </div>
+
+        <form [formGroup]="registerForm" (ngSubmit)="onSubmit()" class="space-y-6">
+          <div>
+            <label for="email" class="block text-sm font-medium text-gray-300">Email</label>
+            <input
+              id="email"
+              type="email"
+              formControlName="email"
+              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+              placeholder="Enter your email">
+
+            <div *ngIf="form['email'].touched && form['email'].errors" class="text-red-500 mt-1 text-sm">
+              <span *ngIf="form['email'].errors?.['required']">Email is required</span>
+              <span *ngIf="form['email'].errors?.['email']">Please enter a valid email address</span>
+            </div>
+          </div>
+
+          <div>
+            <label for="username" class="block text-sm font-medium text-gray-300">Username</label>
+            <input
+              id="username"
+              type="text"
+              formControlName="username"
+              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+              placeholder="Choose a username">
+
+            <div *ngIf="form['username'].touched && form['username'].errors" class="text-red-500 mt-1 text-sm">
+              <span *ngIf="form['username'].errors?.['required']">Username is required</span>
+              <span *ngIf="form['username'].errors?.['minlength']">Username must be at least 3 characters</span>
+            </div>
+          </div>
+
+          <div>
+            <label for="password" class="block text-sm font-medium text-gray-300">Password</label>
+            <input
+              id="password"
+              type="password"
+              formControlName="password"
+              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+              placeholder="Create a password">
+
+            <div *ngIf="form['password'].touched && form['password'].errors" class="text-red-500 mt-1 text-sm">
+              <span *ngIf="form['password'].errors?.['required']">Password is required</span>
+              <span *ngIf="form['password'].errors?.['minlength']">Password must be at least 6 characters</span>
+            </div>
+          </div>
+
+          <div>
+            <button
+              type="submit"
+              [disabled]="registerForm.invalid || isLoading"
+              class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
+              {{ isLoading ? 'Creating account...' : 'Register' }}
+            </button>
+          </div>
+        </form>
+
+        <div class="mt-6 text-center">
+          <p class="text-sm text-gray-400">
+            Already have an account?
+            <a routerLink="/login" class="font-medium text-indigo-400 hover:text-indigo-300">Login</a>
+          </p>
+        </div>
+      </div>
+    </div>
+  `
+})
+export class RegisterComponent {
+  registerForm: FormGroup;
+  errorMessage = '';
+  isLoading = false;
+
+  constructor(
+    private fb: FormBuilder,
+    private authService: AuthService,
+    private router: Router
+  ) {
+    this.registerForm = this.fb.group({
+      email: ['', [Validators.required, Validators.email]],
+      username: ['', [Validators.required, Validators.minLength(3)]],
+      password: ['', [Validators.required, Validators.minLength(6)]]
+    });
+  }
+
+  get form() {
+    return this.registerForm.controls;
+  }
+
+  onSubmit(): void {
+    if (this.registerForm.invalid) {
+      return;
+    }
+
+    this.isLoading = true;
+    this.errorMessage = '';
+
+    const registerRequest: RegisterRequest = {
+      email: this.form['email'].value,
+      username: this.form['username'].value,
+      password: this.form['password'].value
+    };
+
+    this.authService.register(registerRequest).subscribe({
+      next: () => {
+        // After registration, log in the user
+        this.authService.login({
+          usernameOrEmail: registerRequest.email,
+          password: registerRequest.password
+        }).subscribe({
+          next: () => {
+            this.router.navigate(['/home']);
+          },
+          error: err => {
+            this.isLoading = false;
+            this.errorMessage = 'Registration successful but failed to login automatically. Please log in manually.';
+          }
+        });
+      },
+      error: err => {
+        this.isLoading = false;
+        this.errorMessage = err.error?.message || 'Failed to register. Please try again.';
+      }
+    });
+  }
+}
diff --git a/frontend/src/app/feature/game/blackjack/blackjack.component.ts b/frontend/src/app/feature/game/blackjack/blackjack.component.ts
index a2e760b..e261260 100644
--- a/frontend/src/app/feature/game/blackjack/blackjack.component.ts
+++ b/frontend/src/app/feature/game/blackjack/blackjack.component.ts
@@ -51,7 +51,7 @@ export default class BlackjackComponent implements OnInit {
   debtAmount = signal(0);
 
   ngOnInit(): void {
-    this.userService.currentUser$.subscribe((user) => {
+    this.userService.getCurrentUser().subscribe((user) => {
       if (user) {
         this.balance.set(user.balance);
       }
@@ -83,7 +83,7 @@ export default class BlackjackComponent implements OnInit {
 
     if (isGameOver) {
       console.log('Game is over, state:', game.state);
-      this.userService.refreshCurrentUser();
+      // this.userService.refreshCurrentUser();
       timer(1500).subscribe(() => {
         this.showGameResult.set(true);
         console.log('Game result dialog shown after delay');
@@ -97,7 +97,7 @@ export default class BlackjackComponent implements OnInit {
     this.blackjackService.startGame(bet).subscribe({
       next: (game) => {
         this.updateGameState(game);
-        this.userService.refreshCurrentUser();
+        // this.userService.refreshCurrentUser();
         this.isActionInProgress.set(false);
       },
       error: (error) => {
@@ -116,7 +116,7 @@ export default class BlackjackComponent implements OnInit {
       next: (game) => {
         this.updateGameState(game);
         if (game.state !== 'IN_PROGRESS') {
-          this.userService.refreshCurrentUser();
+          // this.userService.refreshCurrentUser();
         }
         this.isActionInProgress.set(false);
       },
@@ -141,7 +141,7 @@ export default class BlackjackComponent implements OnInit {
     this.blackjackService.stand(this.currentGameId()!).subscribe({
       next: (game) => {
         this.updateGameState(game);
-        this.userService.refreshCurrentUser();
+        // this.userService.refreshCurrentUser();
         this.isActionInProgress.set(false);
       },
       error: (error) => {
@@ -184,7 +184,7 @@ export default class BlackjackComponent implements OnInit {
   onCloseGameResult(): void {
     console.log('Closing game result dialog');
     this.showGameResult.set(false);
-    this.userService.refreshCurrentUser();
+    // this.userService.refreshCurrentUser();
   }
 
   onCloseDebtDialog(): void {
@@ -195,11 +195,11 @@ export default class BlackjackComponent implements OnInit {
     if (error instanceof HttpErrorResponse) {
       if (error.status === 400 && error.error?.error === 'Invalid state') {
         this.gameInProgress.set(false);
-        this.userService.refreshCurrentUser();
+        // this.userService.refreshCurrentUser();
       } else if (error.status === 500) {
         console.log('Server error occurred. The game may have been updated in another session.');
         this.gameInProgress.set(false);
-        this.userService.refreshCurrentUser();
+        // this.userService.refreshCurrentUser();
         if (this.currentGameId()) {
           this.refreshGameState(this.currentGameId()!);
         }
diff --git a/frontend/src/app/feature/landing/landing.component.html b/frontend/src/app/feature/landing/landing.component.html
index bffa9ad..379fa31 100644
--- a/frontend/src/app/feature/landing/landing.component.html
+++ b/frontend/src/app/feature/landing/landing.component.html
@@ -10,9 +10,14 @@
         <div class="welcome-bonus">200% bis zu 500€</div>
         <p class="bonus-description">+ 200 Freispiele</p>
 
-        <button class="w-full sm:w-auto button-primary px-6 sm:px-8 py-3 shadow-lg">
-          Bonus Sichern
-        </button>
+        <div class="flex justify-center space-x-4 mt-6">
+          <a routerLink="/register" class="w-full sm:w-auto button-primary px-6 sm:px-8 py-3 shadow-lg">
+            Konto erstellen
+          </a>
+          <a routerLink="/login" class="w-full sm:w-auto bg-slate-700 text-white hover:bg-slate-600 px-6 sm:px-8 py-3 shadow-lg rounded">
+            Anmelden
+          </a>
+        </div>
       </div>
 
       <div class="relative mb-16">
diff --git a/frontend/src/app/feature/landing/landing.component.ts b/frontend/src/app/feature/landing/landing.component.ts
index 915547f..d1437d3 100644
--- a/frontend/src/app/feature/landing/landing.component.ts
+++ b/frontend/src/app/feature/landing/landing.component.ts
@@ -1,11 +1,12 @@
 import { ChangeDetectionStrategy, Component, OnDestroy, OnInit } from '@angular/core';
 import { NgFor } from '@angular/common';
 import { NavbarComponent } from '@shared/components/navbar/navbar.component';
+import { RouterLink } from '@angular/router';
 
 @Component({
   selector: 'app-landing-page',
   standalone: true,
-  imports: [NavbarComponent, NgFor],
+  imports: [NavbarComponent, NgFor, RouterLink],
   templateUrl: './landing.component.html',
   changeDetection: ChangeDetectionStrategy.OnPush,
 })
diff --git a/frontend/src/app/model/User.ts b/frontend/src/app/model/User.ts
index 03480a9..3c983b8 100644
--- a/frontend/src/app/model/User.ts
+++ b/frontend/src/app/model/User.ts
@@ -1,5 +1,6 @@
 export interface User {
-  authentikId: string;
+  id: number;
+  email: string;
   username: string;
   balance: number;
 }
diff --git a/frontend/src/app/model/auth/AuthResponse.ts b/frontend/src/app/model/auth/AuthResponse.ts
new file mode 100644
index 0000000..bd8c3f5
--- /dev/null
+++ b/frontend/src/app/model/auth/AuthResponse.ts
@@ -0,0 +1,4 @@
+export interface AuthResponse {
+  token: string;
+  tokenType: string;
+}
\ No newline at end of file
diff --git a/frontend/src/app/model/auth/LoginRequest.ts b/frontend/src/app/model/auth/LoginRequest.ts
new file mode 100644
index 0000000..c940095
--- /dev/null
+++ b/frontend/src/app/model/auth/LoginRequest.ts
@@ -0,0 +1,4 @@
+export interface LoginRequest {
+  usernameOrEmail: string;
+  password: string;
+}
\ No newline at end of file
diff --git a/frontend/src/app/model/auth/RegisterRequest.ts b/frontend/src/app/model/auth/RegisterRequest.ts
new file mode 100644
index 0000000..c3cd340
--- /dev/null
+++ b/frontend/src/app/model/auth/RegisterRequest.ts
@@ -0,0 +1,5 @@
+export interface RegisterRequest {
+  email: string;
+  username: string;
+  password: string;
+}
\ No newline at end of file
diff --git a/frontend/src/app/service/auth.service.ts b/frontend/src/app/service/auth.service.ts
index 7300a25..fa74844 100644
--- a/frontend/src/app/service/auth.service.ts
+++ b/frontend/src/app/service/auth.service.ts
@@ -1,208 +1,96 @@
-import { inject, Injectable } from '@angular/core';
-import { AuthConfig, OAuthEvent, OAuthService } from 'angular-oauth2-oidc';
-import { UserService } from './user.service';
-import { User } from '../model/User';
+import { Injectable } from '@angular/core';
+import { HttpClient } from '@angular/common/http';
+import { BehaviorSubject, Observable, tap } from 'rxjs';
 import { Router } from '@angular/router';
+import { LoginRequest } from '../model/auth/LoginRequest';
+import { RegisterRequest } from '../model/auth/RegisterRequest';
+import { AuthResponse } from '../model/auth/AuthResponse';
+import { User } from '../model/User';
 import { environment } from '../../environments/environment';
-import { catchError, from, of } from 'rxjs';
+
+const TOKEN_KEY = 'auth-token';
+const USER_KEY = 'auth-user';
 
 @Injectable({
   providedIn: 'root',
 })
 export class AuthService {
-  private readonly authConfig: AuthConfig = {
-    issuer: 'https://oauth.simonis.lol/application/o/casino-dev/',
-    clientId: environment.OAUTH_CLIENT_ID,
-    dummyClientSecret: environment.OAUTH_CLIENT_SECRET,
-    scope: `openid email profile ${environment.OAUTH_CLIENT_ID}`,
-    responseType: 'code',
-    redirectUri: window.location.origin + '/auth/callback',
-    postLogoutRedirectUri: '',
-    redirectUriAsPostLogoutRedirectUriFallback: false,
-    oidc: true,
-    requestAccessToken: true,
-    tokenEndpoint: 'https://oauth.simonis.lol/application/o/token/',
-    userinfoEndpoint: 'https://oauth.simonis.lol/application/o/userinfo/',
-    strictDiscoveryDocumentValidation: false,
-    skipIssuerCheck: true,
-    disableAtHashCheck: true,
-    requireHttps: false,
-    showDebugInformation: false,
-    sessionChecksEnabled: false,
-  };
-
-  private userService: UserService = inject(UserService);
-  private oauthService: OAuthService = inject(OAuthService);
-  private router: Router = inject(Router);
-
-  private user: User | null = null;
-
-  constructor() {
-    this.oauthService.configure(this.authConfig);
-    this.setupEventHandling();
-
-    const hasAuthParams =
-      window.location.search.includes('code=') ||
-      window.location.search.includes('token=') ||
-      window.location.search.includes('id_token=');
-
-    if (hasAuthParams) {
-      this.processCodeFlow();
-    } else {
-      this.checkExistingSession();
+  private authUrl = `${environment.apiUrl}/api/auth`;
+  private userUrl = `${environment.apiUrl}/api/users`;
+  
+  private currentUserSubject: BehaviorSubject<User | null>;
+  public currentUser: Observable<User | null>;
+  
+  constructor(private http: HttpClient, private router: Router) {
+    this.currentUserSubject = new BehaviorSubject<User | null>(this.getUserFromStorage());
+    this.currentUser = this.currentUserSubject.asObservable();
+    
+    // Check if token exists and load user data
+    if (this.getToken()) {
+      this.loadCurrentUser();
     }
   }
-
-  private processCodeFlow() {
-    this.oauthService
-      .tryLogin({
-        onTokenReceived: () => {
-          this.handleSuccessfulLogin();
-        },
-      })
-      .catch((err) => {
-        console.error('Error processing code flow:', err);
-      });
+  
+  public get currentUserValue(): User | null {
+    return this.currentUserSubject.value;
   }
-
-  private checkExistingSession() {
-    this.oauthService
-      .loadDiscoveryDocumentAndTryLogin()
-      .then((isLoggedIn) => {
-        if (isLoggedIn && !this.user) {
-          this.handleSuccessfulLogin();
-        }
-      })
-      .catch((err) => {
-        console.error('Error during initial login attempt:', err);
-      });
-  }
-
-  private setupEventHandling() {
-    this.oauthService.events.subscribe((event: OAuthEvent) => {
-      if (event.type === 'token_received') {
-        this.handleSuccessfulLogin();
-      }
-    });
-  }
-
-  private handleSuccessfulLogin() {
-    const claims = this.oauthService.getIdentityClaims();
-
-    if (claims && (claims['sub'] || claims['email'])) {
-      this.processUserProfile(claims);
-      return;
-    }
-
-    try {
-      from(this.oauthService.loadUserProfile())
-        .pipe(
-          catchError((error) => {
-            console.error('Error loading user profile:', error);
-            if (this.oauthService.hasValidAccessToken()) {
-              this.oauthService.getAccessToken();
-              const minimalProfile = {
-                sub: 'user-' + Math.random().toString(36).substring(2, 10),
-                preferred_username: 'user' + Date.now(),
-              };
-              return of({ info: minimalProfile });
-            }
-            return of(null);
-          })
-        )
-        .subscribe((profile) => {
-          if (profile) {
-            this.processUserProfile(profile);
-          } else {
-            this.router.navigate(['/']);
-          }
-        });
-    } catch (err) {
-      console.error('Exception in handleSuccessfulLogin:', err);
-      if (this.oauthService.hasValidAccessToken()) {
-        this.router.navigate(['/home']);
-      } else {
-        this.router.navigate(['/']);
-      }
-    }
-  }
-
-  private processUserProfile(profile: unknown) {
-    this.fromUserProfile(profile as Record<string, unknown>).subscribe({
-      next: (user) => {
-        this.user = user;
-        this.router.navigate(['home']);
-      },
-      error: (err) => {
-        console.error('Error creating/retrieving user:', err);
-        if (this.oauthService.hasValidAccessToken()) {
-          this.router.navigate(['/home']);
-        } else {
-          this.router.navigate(['/']);
-        }
-      },
-    });
-  }
-
-  login() {
-    try {
-      this.oauthService
-        .loadDiscoveryDocument()
-        .then(() => {
-          this.oauthService.initLoginFlow();
+  
+  login(loginRequest: LoginRequest): Observable<AuthResponse> {
+    return this.http.post<AuthResponse>(`${this.authUrl}/login`, loginRequest)
+      .pipe(
+        tap(response => {
+          this.setToken(response.token);
+          this.loadCurrentUser();
         })
-        .catch((err) => {
-          console.error('Error loading discovery document:', err);
-          this.oauthService.initLoginFlow();
-        });
-    } catch (err) {
-      console.error('Exception in login:', err);
-      const redirectUri = this.authConfig.redirectUri || window.location.origin + '/auth/callback';
-      const scope = this.authConfig.scope || 'openid email profile';
-      const authUrl = `${this.authConfig.issuer}authorize?client_id=${this.authConfig.clientId}&redirect_uri=${encodeURIComponent(redirectUri)}&response_type=code&scope=${encodeURIComponent(scope)}`;
-      window.location.href = authUrl;
-    }
+      );
   }
-
-  logout() {
-    try {
-      this.user = null;
-
-      this.oauthService.logOut(true);
-
-      if (window.location.href.includes('id_token') || window.location.href.includes('logout')) {
-        window.location.href = window.location.origin;
-      }
-
-      localStorage.removeItem('access_token');
-      localStorage.removeItem('id_token');
-      localStorage.removeItem('refresh_token');
-      sessionStorage.removeItem('access_token');
-      sessionStorage.removeItem('id_token');
-      sessionStorage.removeItem('refresh_token');
-
-      this.router.navigate(['/']);
-    } catch (err) {
-      console.error('Exception in logout:', err);
-      localStorage.clear();
-      sessionStorage.clear();
-      this.router.navigate(['/']);
-    }
+  
+  register(registerRequest: RegisterRequest): Observable<User> {
+    return this.http.post<User>(`${this.authUrl}/register`, registerRequest);
   }
-
-  isLoggedIn() {
-    return this.oauthService.hasValidAccessToken();
+  
+  logout(): void {
+    localStorage.removeItem(TOKEN_KEY);
+    localStorage.removeItem(USER_KEY);
+    this.currentUserSubject.next(null);
+    this.router.navigate(['/']);
   }
-
-  private fromUserProfile(profile: Record<string, unknown>) {
-    return this.userService.getOrCreateUser(profile);
+  
+  isLoggedIn(): boolean {
+    return !!this.getToken();
   }
-
-  getAccessToken() {
-    return this.oauthService.getAccessToken();
+  
+  getToken(): string | null {
+    return localStorage.getItem(TOKEN_KEY);
   }
-
-  getUser() {
-    return this.user;
+  
+  private setToken(token: string): void {
+    localStorage.setItem(TOKEN_KEY, token);
+  }
+  
+  private setUser(user: User): void {
+    localStorage.setItem(USER_KEY, JSON.stringify(user));
+    this.currentUserSubject.next(user);
+  }
+  
+  private getUserFromStorage(): User | null {
+    const user = localStorage.getItem(USER_KEY);
+    return user ? JSON.parse(user) : null;
+  }
+  
+  private loadCurrentUser(): void {
+    this.http.get<User>(`${this.userUrl}/me`)
+      .subscribe({
+        next: (user) => {
+          this.setUser(user);
+        },
+        error: () => {
+          this.logout();
+        }
+      });
+  }
+  
+  getUser(): User | null {
+    return this.currentUserValue;
   }
 }
diff --git a/frontend/src/app/service/user.service.ts b/frontend/src/app/service/user.service.ts
index a76e7b4..b58861f 100644
--- a/frontend/src/app/service/user.service.ts
+++ b/frontend/src/app/service/user.service.ts
@@ -1,25 +1,24 @@
-import { inject, Injectable } from '@angular/core';
+import { Injectable } from '@angular/core';
 import { HttpClient } from '@angular/common/http';
 import { BehaviorSubject, catchError, EMPTY, Observable, tap } from 'rxjs';
 import { User } from '../model/User';
+import { environment } from '@environments/environment';
 
 @Injectable({
   providedIn: 'root',
 })
 export class UserService {
-  private http: HttpClient = inject(HttpClient);
+  private apiUrl = `${environment.apiUrl}/api/users`;
   private currentUserSubject = new BehaviorSubject<User | null>(null);
-  public currentUser$ = this.currentUserSubject.asObservable();
 
-  constructor() {
-    this.getCurrentUser().subscribe();
+  constructor(private http: HttpClient) {}
+
+  public getUserById(id: number): Observable<User> {
+    return this.http.get<User>(`${this.apiUrl}/${id}`);
   }
 
-  public getUser(id: string): Observable<User | null> {
-    return this.http.get<User | null>(`/backend/user/${id}`).pipe(
-      catchError(() => EMPTY),
-      tap((user) => this.currentUserSubject.next(user))
-    );
+  public getUserByUsername(username: string): Observable<User> {
+    return this.http.get<User>(`${this.apiUrl}/username/${username}`);
   }
 
   public getCurrentUser(): Observable<User | null> {
@@ -52,20 +51,4 @@ export class UserService {
       })
       .pipe(tap((user) => this.currentUserSubject.next(user)));
   }
-
-  public getOrCreateUser(profile: Record<string, unknown>): Observable<User> {
-    const info = profile['info'] as Record<string, unknown> | undefined;
-    const id = (info?.['sub'] as string) || (profile['sub'] as string);
-    const username =
-      (info?.['preferred_username'] as string) ||
-      (profile['preferred_username'] as string) ||
-      (profile['email'] as string) ||
-      (profile['name'] as string);
-
-    if (!id || !username) {
-      throw new Error('Invalid user profile data');
-    }
-
-    return this.createUser(id, username);
-  }
 }
diff --git a/frontend/src/app/shared/components/navbar/navbar.component.html b/frontend/src/app/shared/components/navbar/navbar.component.html
index e9f8e91..110063c 100644
--- a/frontend/src/app/shared/components/navbar/navbar.component.html
+++ b/frontend/src/app/shared/components/navbar/navbar.component.html
@@ -12,7 +12,8 @@
 
       <div class="hidden md:flex items-center space-x-4">
         @if (!isLoggedIn) {
-          <button (click)="login()" class="button-primary px-4 py-1.5">Anmelden</button>
+          <a routerLink="/login" class="button-primary px-4 py-1.5">Anmelden</a>
+          <a routerLink="/register" class="bg-emerald-700 text-white hover:bg-emerald-600 px-4 py-1.5 rounded">Registrieren</a>
         }
         @if (isLoggedIn) {
           <div
@@ -66,7 +67,8 @@
         <a routerLink="/games" class="nav-mobile-link">Spiele</a>
         <div class="pt-2 space-y-2">
           @if (!isLoggedIn) {
-            <button (click)="login()" class="button-primary w-full py-1.5">Anmelden</button>
+            <a routerLink="/login" class="button-primary w-full py-1.5 block text-center">Anmelden</a>
+            <a routerLink="/register" class="bg-emerald-700 text-white hover:bg-emerald-600 w-full py-1.5 rounded block text-center">Registrieren</a>
           }
           @if (isLoggedIn) {
             <button (click)="logout()" class="button-primary w-full py-1.5">Abmelden</button>
diff --git a/frontend/src/app/shared/components/navbar/navbar.component.ts b/frontend/src/app/shared/components/navbar/navbar.component.ts
index c8dfe40..4dbd899 100644
--- a/frontend/src/app/shared/components/navbar/navbar.component.ts
+++ b/frontend/src/app/shared/components/navbar/navbar.component.ts
@@ -26,10 +26,13 @@ export class NavbarComponent implements OnInit, OnDestroy {
 
   private userService = inject(UserService);
   private userSubscription: Subscription | undefined;
+  private authSubscription: Subscription | undefined;
   public balance = signal(0);
 
   ngOnInit() {
-    this.userSubscription = this.userService.currentUser$.subscribe((user) => {
+    // Subscribe to auth changes
+    this.authSubscription = this.authService.currentUser.subscribe(user => {
+      this.isLoggedIn = !!user;
       this.balance.set(user?.balance ?? 0);
       console.log('Updated navbar balance:', user?.balance);
     });
@@ -41,13 +44,8 @@ export class NavbarComponent implements OnInit, OnDestroy {
     if (this.userSubscription) {
       this.userSubscription.unsubscribe();
     }
-  }
-
-  login() {
-    try {
-      this.authService.login();
-    } catch (error) {
-      console.error('Login failed:', error);
+    if (this.authSubscription) {
+      this.authSubscription.unsubscribe();
     }
   }
 
diff --git a/frontend/src/app/shared/interceptor/http.interceptor.ts b/frontend/src/app/shared/interceptor/http.interceptor.ts
index f2737e8..3383b85 100644
--- a/frontend/src/app/shared/interceptor/http.interceptor.ts
+++ b/frontend/src/app/shared/interceptor/http.interceptor.ts
@@ -1,21 +1,33 @@
 import { HttpInterceptorFn } from '@angular/common/http';
 import { inject } from '@angular/core';
-import { OAuthStorage } from 'angular-oauth2-oidc';
+import { AuthService } from '../../service/auth.service';
 
 export const httpInterceptor: HttpInterceptorFn = (req, next) => {
-  const oauthStorage = inject(OAuthStorage);
+  const authService = inject(AuthService);
+  const token = authService.getToken();
 
-  if (oauthStorage.getItem('access_token')) {
+  // Always add CORS headers
+  if (token) {
     return next(
       req.clone({
         setHeaders: {
-          Authorization: 'Bearer ' + oauthStorage.getItem('access_token'),
-          'Access-Control-Allow-Origin': '*',
+          Authorization: `Bearer ${token}`,
           'Referrer-Policy': 'no-referrer',
+          'Access-Control-Allow-Origin': '*',
+          'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
+          'Access-Control-Allow-Headers': '*'
         },
       })
     );
   } else {
-    return next(req);
+    return next(
+      req.clone({
+        setHeaders: {
+          'Access-Control-Allow-Origin': '*',
+          'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
+          'Access-Control-Allow-Headers': '*'
+        },
+      })
+    );
   }
 };
diff --git a/frontend/src/environments/environment.ts b/frontend/src/environments/environment.ts
index f691e8e..45776f6 100644
--- a/frontend/src/environments/environment.ts
+++ b/frontend/src/environments/environment.ts
@@ -1,7 +1,5 @@
 export const environment = {
   STRIPE_KEY:
     'pk_test_51QrePYIvCfqz7ANgMizBorPpVjJ8S6gcaL4yvcMQnVaKyReqcQ6jqaQEF7aDZbDu8rNVsTZrw8ABek4ToxQX7KZe00jpGh8naG',
-  OAUTH_CLIENT_ID: 'MDqjm1kcWKuZfqHJXjxwAV20i44aT7m4VhhTL3Nm',
-  OAUTH_CLIENT_SECRET:
-    'GY2F8te6iAVYt1TNAUVLzWZEXb6JoMNp6chbjqaXNq4gS5xTDL54HqBiAlV1jFKarN28LQ7FUsYX4SbwjfEhZhgeoKuBnZKjR9eiu7RawnGgxIK9ffvUfMkjRxnmiGI5',
+  apiUrl: 'http://localhost:8080',
 };
diff --git a/frontend/src/proxy.conf.json b/frontend/src/proxy.conf.json
index c9839a6..ded42d9 100644
--- a/frontend/src/proxy.conf.json
+++ b/frontend/src/proxy.conf.json
@@ -1,10 +1,10 @@
 {
-  "/backend": {
+  "/api": {
     "target": "http://localhost:8080/",
     "secure": false,
     "logLevel": "debug",
     "pathRewrite": {
-      "^/backend": ""
+      "^/api": ""
     },
     "changeOrigin": true
   }

From 51540c930b4ef90840185682bdbec9d2fd3d5046 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 13:42:41 +0200
Subject: [PATCH 02/13] style: format code and improve readability

---
 frontend/src/app/app.routes.ts                |  6 +-
 .../app/feature/auth/login/login.component.ts | 41 +++++++---
 .../auth/register/register.component.ts       | 80 ++++++++++++-------
 .../feature/landing/landing.component.html    | 10 ++-
 frontend/src/app/model/auth/AuthResponse.ts   |  2 +-
 frontend/src/app/model/auth/LoginRequest.ts   |  2 +-
 .../src/app/model/auth/RegisterRequest.ts     |  2 +-
 frontend/src/app/service/auth.service.ts      | 63 ++++++++-------
 frontend/src/app/service/user.service.ts      |  9 ---
 .../components/navbar/navbar.component.html   | 16 +++-
 .../components/navbar/navbar.component.ts     |  2 +-
 .../shared/interceptor/http.interceptor.ts    |  4 +-
 12 files changed, 143 insertions(+), 94 deletions(-)

diff --git a/frontend/src/app/app.routes.ts b/frontend/src/app/app.routes.ts
index 8874f98..7958ffb 100644
--- a/frontend/src/app/app.routes.ts
+++ b/frontend/src/app/app.routes.ts
@@ -9,11 +9,13 @@ export const routes: Routes = [
   },
   {
     path: 'login',
-    loadComponent: () => import('./feature/auth/login/login.component').then(m => m.LoginComponent),
+    loadComponent: () =>
+      import('./feature/auth/login/login.component').then((m) => m.LoginComponent),
   },
   {
     path: 'register',
-    loadComponent: () => import('./feature/auth/register/register.component').then(m => m.RegisterComponent),
+    loadComponent: () =>
+      import('./feature/auth/register/register.component').then((m) => m.RegisterComponent),
   },
   {
     path: 'home',
diff --git a/frontend/src/app/feature/auth/login/login.component.ts b/frontend/src/app/feature/auth/login/login.component.ts
index 694d91d..1e63b7f 100644
--- a/frontend/src/app/feature/auth/login/login.component.ts
+++ b/frontend/src/app/feature/auth/login/login.component.ts
@@ -20,16 +20,24 @@ import { CommonModule } from '@angular/common';
 
         <form [formGroup]="loginForm" (ngSubmit)="onSubmit()" class="space-y-6">
           <div>
-            <label for="usernameOrEmail" class="block text-sm font-medium text-gray-300">Username or Email</label>
+            <label for="usernameOrEmail" class="block text-sm font-medium text-gray-300"
+              >Username or Email</label
+            >
             <input
               id="usernameOrEmail"
               type="text"
               formControlName="usernameOrEmail"
               class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Enter your username or email">
+              placeholder="Enter your username or email"
+            />
 
-            <div *ngIf="form['usernameOrEmail'].touched && form['usernameOrEmail'].errors" class="text-red-500 mt-1 text-sm">
-              <span *ngIf="form['usernameOrEmail'].errors?.['required']">Username or email is required</span>
+            <div
+              *ngIf="form['usernameOrEmail'].touched && form['usernameOrEmail'].errors"
+              class="text-red-500 mt-1 text-sm"
+            >
+              <span *ngIf="form['usernameOrEmail'].errors?.['required']"
+                >Username or email is required</span
+              >
             </div>
           </div>
 
@@ -40,9 +48,13 @@ import { CommonModule } from '@angular/common';
               type="password"
               formControlName="password"
               class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Enter your password">
+              placeholder="Enter your password"
+            />
 
-            <div *ngIf="form['password'].touched && form['password'].errors" class="text-red-500 mt-1 text-sm">
+            <div
+              *ngIf="form['password'].touched && form['password'].errors"
+              class="text-red-500 mt-1 text-sm"
+            >
               <span *ngIf="form['password'].errors?.['required']">Password is required</span>
             </div>
           </div>
@@ -51,7 +63,8 @@ import { CommonModule } from '@angular/common';
             <button
               type="submit"
               [disabled]="loginForm.invalid || isLoading"
-              class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
+              class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
+            >
               {{ isLoading ? 'Logging in...' : 'Login' }}
             </button>
           </div>
@@ -60,12 +73,14 @@ import { CommonModule } from '@angular/common';
         <div class="mt-6 text-center">
           <p class="text-sm text-gray-400">
             Don't have an account?
-            <a routerLink="/register" class="font-medium text-indigo-400 hover:text-indigo-300">Register</a>
+            <a routerLink="/register" class="font-medium text-indigo-400 hover:text-indigo-300"
+              >Register</a
+            >
           </p>
         </div>
       </div>
     </div>
-  `
+  `,
 })
 export class LoginComponent {
   loginForm: FormGroup;
@@ -79,7 +94,7 @@ export class LoginComponent {
   ) {
     this.loginForm = this.fb.group({
       usernameOrEmail: ['', [Validators.required]],
-      password: ['', [Validators.required]]
+      password: ['', [Validators.required]],
     });
   }
 
@@ -97,17 +112,17 @@ export class LoginComponent {
 
     const loginRequest: LoginRequest = {
       usernameOrEmail: this.form['usernameOrEmail'].value,
-      password: this.form['password'].value
+      password: this.form['password'].value,
     };
 
     this.authService.login(loginRequest).subscribe({
       next: () => {
         this.router.navigate(['/home']);
       },
-      error: err => {
+      error: (err) => {
         this.isLoading = false;
         this.errorMessage = err.error?.message || 'Failed to login. Please check your credentials.';
-      }
+      },
     });
   }
 }
diff --git a/frontend/src/app/feature/auth/register/register.component.ts b/frontend/src/app/feature/auth/register/register.component.ts
index b997f04..5b3f4d1 100644
--- a/frontend/src/app/feature/auth/register/register.component.ts
+++ b/frontend/src/app/feature/auth/register/register.component.ts
@@ -26,11 +26,17 @@ import { CommonModule } from '@angular/common';
               type="email"
               formControlName="email"
               class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Enter your email">
+              placeholder="Enter your email"
+            />
 
-            <div *ngIf="form['email'].touched && form['email'].errors" class="text-red-500 mt-1 text-sm">
+            <div
+              *ngIf="form['email'].touched && form['email'].errors"
+              class="text-red-500 mt-1 text-sm"
+            >
               <span *ngIf="form['email'].errors?.['required']">Email is required</span>
-              <span *ngIf="form['email'].errors?.['email']">Please enter a valid email address</span>
+              <span *ngIf="form['email'].errors?.['email']"
+                >Please enter a valid email address</span
+              >
             </div>
           </div>
 
@@ -41,11 +47,17 @@ import { CommonModule } from '@angular/common';
               type="text"
               formControlName="username"
               class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Choose a username">
+              placeholder="Choose a username"
+            />
 
-            <div *ngIf="form['username'].touched && form['username'].errors" class="text-red-500 mt-1 text-sm">
+            <div
+              *ngIf="form['username'].touched && form['username'].errors"
+              class="text-red-500 mt-1 text-sm"
+            >
               <span *ngIf="form['username'].errors?.['required']">Username is required</span>
-              <span *ngIf="form['username'].errors?.['minlength']">Username must be at least 3 characters</span>
+              <span *ngIf="form['username'].errors?.['minlength']"
+                >Username must be at least 3 characters</span
+              >
             </div>
           </div>
 
@@ -56,11 +68,17 @@ import { CommonModule } from '@angular/common';
               type="password"
               formControlName="password"
               class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Create a password">
+              placeholder="Create a password"
+            />
 
-            <div *ngIf="form['password'].touched && form['password'].errors" class="text-red-500 mt-1 text-sm">
+            <div
+              *ngIf="form['password'].touched && form['password'].errors"
+              class="text-red-500 mt-1 text-sm"
+            >
               <span *ngIf="form['password'].errors?.['required']">Password is required</span>
-              <span *ngIf="form['password'].errors?.['minlength']">Password must be at least 6 characters</span>
+              <span *ngIf="form['password'].errors?.['minlength']"
+                >Password must be at least 6 characters</span
+              >
             </div>
           </div>
 
@@ -68,7 +86,8 @@ import { CommonModule } from '@angular/common';
             <button
               type="submit"
               [disabled]="registerForm.invalid || isLoading"
-              class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
+              class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
+            >
               {{ isLoading ? 'Creating account...' : 'Register' }}
             </button>
           </div>
@@ -77,12 +96,14 @@ import { CommonModule } from '@angular/common';
         <div class="mt-6 text-center">
           <p class="text-sm text-gray-400">
             Already have an account?
-            <a routerLink="/login" class="font-medium text-indigo-400 hover:text-indigo-300">Login</a>
+            <a routerLink="/login" class="font-medium text-indigo-400 hover:text-indigo-300"
+              >Login</a
+            >
           </p>
         </div>
       </div>
     </div>
-  `
+  `,
 })
 export class RegisterComponent {
   registerForm: FormGroup;
@@ -97,7 +118,7 @@ export class RegisterComponent {
     this.registerForm = this.fb.group({
       email: ['', [Validators.required, Validators.email]],
       username: ['', [Validators.required, Validators.minLength(3)]],
-      password: ['', [Validators.required, Validators.minLength(6)]]
+      password: ['', [Validators.required, Validators.minLength(6)]],
     });
   }
 
@@ -116,29 +137,32 @@ export class RegisterComponent {
     const registerRequest: RegisterRequest = {
       email: this.form['email'].value,
       username: this.form['username'].value,
-      password: this.form['password'].value
+      password: this.form['password'].value,
     };
 
     this.authService.register(registerRequest).subscribe({
       next: () => {
         // After registration, log in the user
-        this.authService.login({
-          usernameOrEmail: registerRequest.email,
-          password: registerRequest.password
-        }).subscribe({
-          next: () => {
-            this.router.navigate(['/home']);
-          },
-          error: err => {
-            this.isLoading = false;
-            this.errorMessage = 'Registration successful but failed to login automatically. Please log in manually.';
-          }
-        });
+        this.authService
+          .login({
+            usernameOrEmail: registerRequest.email,
+            password: registerRequest.password,
+          })
+          .subscribe({
+            next: () => {
+              this.router.navigate(['/home']);
+            },
+            error: (err) => {
+              this.isLoading = false;
+              this.errorMessage =
+                'Registration successful but failed to login automatically. Please log in manually.';
+            },
+          });
       },
-      error: err => {
+      error: (err) => {
         this.isLoading = false;
         this.errorMessage = err.error?.message || 'Failed to register. Please try again.';
-      }
+      },
     });
   }
 }
diff --git a/frontend/src/app/feature/landing/landing.component.html b/frontend/src/app/feature/landing/landing.component.html
index 379fa31..b0c1ccf 100644
--- a/frontend/src/app/feature/landing/landing.component.html
+++ b/frontend/src/app/feature/landing/landing.component.html
@@ -11,10 +11,16 @@
         <p class="bonus-description">+ 200 Freispiele</p>
 
         <div class="flex justify-center space-x-4 mt-6">
-          <a routerLink="/register" class="w-full sm:w-auto button-primary px-6 sm:px-8 py-3 shadow-lg">
+          <a
+            routerLink="/register"
+            class="w-full sm:w-auto button-primary px-6 sm:px-8 py-3 shadow-lg"
+          >
             Konto erstellen
           </a>
-          <a routerLink="/login" class="w-full sm:w-auto bg-slate-700 text-white hover:bg-slate-600 px-6 sm:px-8 py-3 shadow-lg rounded">
+          <a
+            routerLink="/login"
+            class="w-full sm:w-auto bg-slate-700 text-white hover:bg-slate-600 px-6 sm:px-8 py-3 shadow-lg rounded"
+          >
             Anmelden
           </a>
         </div>
diff --git a/frontend/src/app/model/auth/AuthResponse.ts b/frontend/src/app/model/auth/AuthResponse.ts
index bd8c3f5..495d0cd 100644
--- a/frontend/src/app/model/auth/AuthResponse.ts
+++ b/frontend/src/app/model/auth/AuthResponse.ts
@@ -1,4 +1,4 @@
 export interface AuthResponse {
   token: string;
   tokenType: string;
-}
\ No newline at end of file
+}
diff --git a/frontend/src/app/model/auth/LoginRequest.ts b/frontend/src/app/model/auth/LoginRequest.ts
index c940095..98c1b0e 100644
--- a/frontend/src/app/model/auth/LoginRequest.ts
+++ b/frontend/src/app/model/auth/LoginRequest.ts
@@ -1,4 +1,4 @@
 export interface LoginRequest {
   usernameOrEmail: string;
   password: string;
-}
\ No newline at end of file
+}
diff --git a/frontend/src/app/model/auth/RegisterRequest.ts b/frontend/src/app/model/auth/RegisterRequest.ts
index c3cd340..2b07d41 100644
--- a/frontend/src/app/model/auth/RegisterRequest.ts
+++ b/frontend/src/app/model/auth/RegisterRequest.ts
@@ -2,4 +2,4 @@ export interface RegisterRequest {
   email: string;
   username: string;
   password: string;
-}
\ No newline at end of file
+}
diff --git a/frontend/src/app/service/auth.service.ts b/frontend/src/app/service/auth.service.ts
index fa74844..6cd41a7 100644
--- a/frontend/src/app/service/auth.service.ts
+++ b/frontend/src/app/service/auth.service.ts
@@ -17,79 +17,80 @@ const USER_KEY = 'auth-user';
 export class AuthService {
   private authUrl = `${environment.apiUrl}/api/auth`;
   private userUrl = `${environment.apiUrl}/api/users`;
-  
+
   private currentUserSubject: BehaviorSubject<User | null>;
   public currentUser: Observable<User | null>;
-  
-  constructor(private http: HttpClient, private router: Router) {
+
+  constructor(
+    private http: HttpClient,
+    private router: Router
+  ) {
     this.currentUserSubject = new BehaviorSubject<User | null>(this.getUserFromStorage());
     this.currentUser = this.currentUserSubject.asObservable();
-    
+
     // Check if token exists and load user data
     if (this.getToken()) {
       this.loadCurrentUser();
     }
   }
-  
+
   public get currentUserValue(): User | null {
     return this.currentUserSubject.value;
   }
-  
+
   login(loginRequest: LoginRequest): Observable<AuthResponse> {
-    return this.http.post<AuthResponse>(`${this.authUrl}/login`, loginRequest)
-      .pipe(
-        tap(response => {
-          this.setToken(response.token);
-          this.loadCurrentUser();
-        })
-      );
+    return this.http.post<AuthResponse>(`${this.authUrl}/login`, loginRequest).pipe(
+      tap((response) => {
+        this.setToken(response.token);
+        this.loadCurrentUser();
+      })
+    );
   }
-  
+
   register(registerRequest: RegisterRequest): Observable<User> {
     return this.http.post<User>(`${this.authUrl}/register`, registerRequest);
   }
-  
+
   logout(): void {
     localStorage.removeItem(TOKEN_KEY);
     localStorage.removeItem(USER_KEY);
     this.currentUserSubject.next(null);
     this.router.navigate(['/']);
   }
-  
+
   isLoggedIn(): boolean {
     return !!this.getToken();
   }
-  
+
   getToken(): string | null {
     return localStorage.getItem(TOKEN_KEY);
   }
-  
+
   private setToken(token: string): void {
     localStorage.setItem(TOKEN_KEY, token);
   }
-  
+
   private setUser(user: User): void {
     localStorage.setItem(USER_KEY, JSON.stringify(user));
     this.currentUserSubject.next(user);
   }
-  
+
   private getUserFromStorage(): User | null {
     const user = localStorage.getItem(USER_KEY);
     return user ? JSON.parse(user) : null;
   }
-  
+
   private loadCurrentUser(): void {
-    this.http.get<User>(`${this.userUrl}/me`)
-      .subscribe({
-        next: (user) => {
-          this.setUser(user);
-        },
-        error: () => {
-          this.logout();
-        }
-      });
+    this.http.get<User>(`${this.userUrl}/me`).subscribe({
+      next: (user) => {
+        this.setUser(user);
+      },
+      error: () => {
+        this.logout();
+      },
+    });
   }
-  
+
   getUser(): User | null {
     return this.currentUserValue;
   }
diff --git a/frontend/src/app/service/user.service.ts b/frontend/src/app/service/user.service.ts
index b58861f..78fbb75 100644
--- a/frontend/src/app/service/user.service.ts
+++ b/frontend/src/app/service/user.service.ts
@@ -42,13 +42,4 @@ export class UserService {
       this.currentUserSubject.next(updatedUser);
     }
   }
-
-  public createUser(id: string, username: string): Observable<User> {
-    return this.http
-      .post<User>('/backend/user', {
-        authentikId: id,
-        username: username,
-      })
-      .pipe(tap((user) => this.currentUserSubject.next(user)));
-  }
 }
diff --git a/frontend/src/app/shared/components/navbar/navbar.component.html b/frontend/src/app/shared/components/navbar/navbar.component.html
index 110063c..90b63eb 100644
--- a/frontend/src/app/shared/components/navbar/navbar.component.html
+++ b/frontend/src/app/shared/components/navbar/navbar.component.html
@@ -13,7 +13,11 @@
       <div class="hidden md:flex items-center space-x-4">
         @if (!isLoggedIn) {
           <a routerLink="/login" class="button-primary px-4 py-1.5">Anmelden</a>
-          <a routerLink="/register" class="bg-emerald-700 text-white hover:bg-emerald-600 px-4 py-1.5 rounded">Registrieren</a>
+          <a
+            routerLink="/register"
+            class="bg-emerald-700 text-white hover:bg-emerald-600 px-4 py-1.5 rounded"
+            >Registrieren</a
+          >
         }
         @if (isLoggedIn) {
           <div
@@ -67,8 +71,14 @@
         <a routerLink="/games" class="nav-mobile-link">Spiele</a>
         <div class="pt-2 space-y-2">
           @if (!isLoggedIn) {
-            <a routerLink="/login" class="button-primary w-full py-1.5 block text-center">Anmelden</a>
-            <a routerLink="/register" class="bg-emerald-700 text-white hover:bg-emerald-600 w-full py-1.5 rounded block text-center">Registrieren</a>
+            <a routerLink="/login" class="button-primary w-full py-1.5 block text-center"
+              >Anmelden</a
+            >
+            <a
+              routerLink="/register"
+              class="bg-emerald-700 text-white hover:bg-emerald-600 w-full py-1.5 rounded block text-center"
+              >Registrieren</a
+            >
           }
           @if (isLoggedIn) {
             <button (click)="logout()" class="button-primary w-full py-1.5">Abmelden</button>
diff --git a/frontend/src/app/shared/components/navbar/navbar.component.ts b/frontend/src/app/shared/components/navbar/navbar.component.ts
index 4dbd899..16274c4 100644
--- a/frontend/src/app/shared/components/navbar/navbar.component.ts
+++ b/frontend/src/app/shared/components/navbar/navbar.component.ts
@@ -31,7 +31,7 @@ export class NavbarComponent implements OnInit, OnDestroy {
 
   ngOnInit() {
     // Subscribe to auth changes
-    this.authSubscription = this.authService.currentUser.subscribe(user => {
+    this.authSubscription = this.authService.currentUser.subscribe((user) => {
       this.isLoggedIn = !!user;
       this.balance.set(user?.balance ?? 0);
       console.log('Updated navbar balance:', user?.balance);
diff --git a/frontend/src/app/shared/interceptor/http.interceptor.ts b/frontend/src/app/shared/interceptor/http.interceptor.ts
index 3383b85..2cce8d0 100644
--- a/frontend/src/app/shared/interceptor/http.interceptor.ts
+++ b/frontend/src/app/shared/interceptor/http.interceptor.ts
@@ -15,7 +15,7 @@ export const httpInterceptor: HttpInterceptorFn = (req, next) => {
           'Referrer-Policy': 'no-referrer',
           'Access-Control-Allow-Origin': '*',
           'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
-          'Access-Control-Allow-Headers': '*'
+          'Access-Control-Allow-Headers': '*',
         },
       })
     );
@@ -25,7 +25,7 @@ export const httpInterceptor: HttpInterceptorFn = (req, next) => {
         setHeaders: {
           'Access-Control-Allow-Origin': '*',
           'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
-          'Access-Control-Allow-Headers': '*'
+          'Access-Control-Allow-Headers': '*',
         },
       })
     );

From 3b95725d884b5fed18a327c982f6c29e5c63a0a1 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 14:39:10 +0200
Subject: [PATCH 03/13] refactor: simplify user service and update routes

---
 .../casino/deposit/DepositController.java     | 22 +++-------
 .../szut/casino/security/AuthController.java  |  2 +-
 .../szut/casino/security/SecurityConfig.java  |  2 +-
 .../de/szut/casino/user/UserController.java   | 18 +--------
 .../java/de/szut/casino/user/UserService.java | 40 +------------------
 frontend/bun.lock                             |  9 -----
 frontend/package.json                         |  3 --
 frontend/src/app/service/auth.service.ts      |  9 +++--
 frontend/src/app/service/user.service.ts      | 15 ++-----
 .../components/navbar/navbar.component.ts     | 13 +-----
 frontend/src/environments/environment.ts      |  2 +-
 frontend/src/proxy.conf.json                  |  4 +-
 12 files changed, 24 insertions(+), 115 deletions(-)

diff --git a/backend/src/main/java/de/szut/casino/deposit/DepositController.java b/backend/src/main/java/de/szut/casino/deposit/DepositController.java
index a81d486..00f2618 100644
--- a/backend/src/main/java/de/szut/casino/deposit/DepositController.java
+++ b/backend/src/main/java/de/szut/casino/deposit/DepositController.java
@@ -8,6 +8,7 @@ import de.szut.casino.deposit.dto.AmountDto;
 import de.szut.casino.deposit.dto.SessionIdDto;
 import de.szut.casino.user.UserEntity;
 import de.szut.casino.user.UserRepository;
+import de.szut.casino.user.UserService;
 import de.szut.casino.user.dto.KeycloakUserDto;
 import jakarta.validation.Valid;
 import org.springframework.beans.factory.annotation.Value;
@@ -34,23 +35,18 @@ public class DepositController {
 
     private final TransactionService transactionService;
 
-    private final RestTemplate restTemplate;
+    private UserService userService;
 
-    private final UserRepository userRepository;
-
-
-    public DepositController(TransactionService transactionService, RestTemplate restTemplate, UserRepository userRepository) {
+    public DepositController(TransactionService transactionService, UserService userService) {
         this.transactionService = transactionService;
-        this.restTemplate = restTemplate;
-        this.userRepository = userRepository;
+        this.userService = userService;
     }
 
     @PostMapping("/deposit/checkout")
     public ResponseEntity<SessionIdDto> checkout(@RequestBody @Valid AmountDto amountDto, @RequestHeader("Authorization") String token) throws StripeException {
         Stripe.apiKey = stripeKey;
 
-        KeycloakUserDto userData = getAuthentikUserInfo(token);
-        Optional<UserEntity> optionalUserEntity = this.userRepository.findByEmail(userData.getSub());
+        Optional<UserEntity> optionalUserEntity = this.userService.getCurrentUser();
 
         SessionCreateParams params = SessionCreateParams.builder()
                 .addLineItem(SessionCreateParams.LineItem.builder()
@@ -78,13 +74,5 @@ public class DepositController {
 
         return ResponseEntity.ok(new SessionIdDto(session.getId()));
     }
-
-    private KeycloakUserDto getAuthentikUserInfo(String token) {
-        HttpHeaders headers = new HttpHeaders();
-        headers.set("Authorization", token);
-        ResponseEntity<KeycloakUserDto> response = this.restTemplate.exchange("https://oauth.simonis.lol/application/o/userinfo/", HttpMethod.GET, new HttpEntity<>(headers), KeycloakUserDto.class);
-
-        return response.getBody();
-    }
 }
 
diff --git a/backend/src/main/java/de/szut/casino/security/AuthController.java b/backend/src/main/java/de/szut/casino/security/AuthController.java
index d78fbca..f299ef4 100644
--- a/backend/src/main/java/de/szut/casino/security/AuthController.java
+++ b/backend/src/main/java/de/szut/casino/security/AuthController.java
@@ -11,7 +11,7 @@ import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.*;
 
 @RestController
-@RequestMapping("/api/auth")
+@RequestMapping("/auth")
 public class AuthController {
 
     @Autowired
diff --git a/backend/src/main/java/de/szut/casino/security/SecurityConfig.java b/backend/src/main/java/de/szut/casino/security/SecurityConfig.java
index 725563d..155de8d 100644
--- a/backend/src/main/java/de/szut/casino/security/SecurityConfig.java
+++ b/backend/src/main/java/de/szut/casino/security/SecurityConfig.java
@@ -65,7 +65,7 @@ public class SecurityConfig {
             .csrf(csrf -> csrf.disable())
             .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
             .authorizeHttpRequests(auth -> {
-                auth.requestMatchers("/api/auth/**", "/webhook", "/swagger/**", "/swagger-ui/**", "/health", "/error").permitAll()
+                auth.requestMatchers("/auth/**", "/webhook", "/swagger/**", "/swagger-ui/**", "/health", "/error").permitAll()
                     .requestMatchers(org.springframework.http.HttpMethod.OPTIONS, "/**").permitAll()
                     .anyRequest().authenticated();
                 })
diff --git a/backend/src/main/java/de/szut/casino/user/UserController.java b/backend/src/main/java/de/szut/casino/user/UserController.java
index 7dae2d6..34ff258 100644
--- a/backend/src/main/java/de/szut/casino/user/UserController.java
+++ b/backend/src/main/java/de/szut/casino/user/UserController.java
@@ -1,6 +1,5 @@
 package de.szut.casino.user;
 
-import de.szut.casino.exceptionHandling.exceptions.UserNotFoundException;
 import de.szut.casino.user.dto.GetUserDto;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Autowired;
@@ -10,7 +9,7 @@ import org.springframework.web.bind.annotation.*;
 @Slf4j
 @RestController
 @CrossOrigin
-@RequestMapping("/api/users")
+@RequestMapping("/users")
 public class UserController {
 
     @Autowired
@@ -23,19 +22,4 @@ public class UserController {
     public ResponseEntity<GetUserDto> getCurrentUser() {
         return ResponseEntity.ok(userMappingService.mapToGetUserDto(userService.getCurrentUser().orElseThrow()));
     }
-    
-    @GetMapping("/current")
-    public ResponseEntity<GetUserDto> getCurrentUserAlternative() {
-        return ResponseEntity.ok(userMappingService.mapToGetUserDto(userService.getCurrentUser().orElseThrow()));
-    }
-    
-    @GetMapping("/{id}")
-    public ResponseEntity<GetUserDto> getUserById(@PathVariable Long id) {
-        return ResponseEntity.ok(userService.getUserById(id));
-    }
-    
-    @GetMapping("/username/{username}")
-    public ResponseEntity<GetUserDto> getUserByUsername(@PathVariable String username) {
-        return ResponseEntity.ok(userService.getUserByUsername(username));
-    }
 }
diff --git a/backend/src/main/java/de/szut/casino/user/UserService.java b/backend/src/main/java/de/szut/casino/user/UserService.java
index cfbd7dd..b2ea2da 100644
--- a/backend/src/main/java/de/szut/casino/user/UserService.java
+++ b/backend/src/main/java/de/szut/casino/user/UserService.java
@@ -16,9 +16,6 @@ public class UserService {
     @Autowired
     private UserRepository userRepository;
 
-    @Autowired
-    private UserMappingService mappingService;
-    
     @Autowired
     private PasswordEncoder passwordEncoder;
 
@@ -35,50 +32,15 @@ public class UserService {
             createUserDto.getEmail(),
             createUserDto.getUsername(),
             passwordEncoder.encode(createUserDto.getPassword()),
-            BigDecimal.valueOf(1000)  // Starting balance
+            BigDecimal.valueOf(10)  // Starting balance
         );
         
         return userRepository.save(user);
     }
 
-    public GetUserDto getUserById(Long id) {
-        UserEntity user = userRepository.findById(id)
-            .orElseThrow(() -> new UserNotFoundException("User not found with id: " + id));
-        
-        return mappingService.mapToGetUserDto(user);
-    }
-    
-    public GetUserDto getUserByUsername(String username) {
-        UserEntity user = userRepository.findByUsername(username)
-            .orElseThrow(() -> new UserNotFoundException("User not found with username: " + username));
-        
-        return mappingService.mapToGetUserDto(user);
-    }
-    
-    public GetUserDto getUserByEmail(String email) {
-        UserEntity user = userRepository.findByEmail(email)
-            .orElseThrow(() -> new UserNotFoundException("User not found with email: " + email));
-        
-        return mappingService.mapToGetUserDto(user);
-    }
-
     public Optional<UserEntity> getCurrentUser() {
         String username = SecurityContextHolder.getContext().getAuthentication().getName();
 
         return userRepository.findByUsername(username);
     }
-    
-    public UserEntity getCurrentUserEntity() {
-        String username = SecurityContextHolder.getContext().getAuthentication().getName();
-        return userRepository.findByUsername(username)
-            .orElseThrow(() -> new UserNotFoundException("User not found with username: " + username));
-    }
-    
-    public boolean existsByUsername(String username) {
-        return userRepository.existsByUsername(username);
-    }
-    
-    public boolean existsByEmail(String email) {
-        return userRepository.existsByEmail(email);
-    }
 }
diff --git a/frontend/bun.lock b/frontend/bun.lock
index aaaffeb..70cba54 100644
--- a/frontend/bun.lock
+++ b/frontend/bun.lock
@@ -21,11 +21,8 @@
         "@tailwindcss/postcss": "^4.0.3",
         "ajv": "8.17.1",
         "ajv-formats": "3.0.1",
-        "angular-oauth2-oidc": "^19.0.0",
         "countup.js": "^2.8.0",
         "gsap": "^3.12.7",
-        "keycloak-angular": "^19.0.0",
-        "keycloak-js": "^26.0.0",
         "postcss": "^8.5.1",
         "rxjs": "~7.8.2",
         "tailwindcss": "^4.0.3",
@@ -757,8 +754,6 @@
 
     "angular-eslint": ["angular-eslint@19.3.0", "", { "dependencies": { "@angular-devkit/core": ">= 19.0.0 < 20.0.0", "@angular-devkit/schematics": ">= 19.0.0 < 20.0.0", "@angular-eslint/builder": "19.3.0", "@angular-eslint/eslint-plugin": "19.3.0", "@angular-eslint/eslint-plugin-template": "19.3.0", "@angular-eslint/schematics": "19.3.0", "@angular-eslint/template-parser": "19.3.0", "@typescript-eslint/types": "^8.0.0", "@typescript-eslint/utils": "^8.0.0" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0", "typescript": "*", "typescript-eslint": "^8.0.0" } }, "sha512-19hkkH3z/2wGhKk3LfttEBkl6CtQP/tFK6/mJoO/MbIkXV0SSJWtbPbOpEaxICLlfCw0oR6W9OoQqByWkwXjkQ=="],
 
-    "angular-oauth2-oidc": ["angular-oauth2-oidc@19.0.0", "", { "dependencies": { "tslib": "^2.5.2" }, "peerDependencies": { "@angular/common": ">=19.0.0", "@angular/core": ">=19.0.0" } }, "sha512-EogHyF7MpCJSjSKIyVmdB8pJu7dU5Ilj9VNVSnFbLng4F77PIlaE4egwKUlUvk0i4ZvmO9rLXNQCm05R7Tyhcw=="],
-
     "ansi-colors": ["ansi-colors@4.1.3", "", {}, "sha512-/6w/C21Pm1A7aZitlI5Ni/2J6FFQN8i1Cvz3kHABAAbw93v/NlvKdVOqz7CCWz/3iv/JplRSEEZ83XION15ovw=="],
 
     "ansi-escapes": ["ansi-escapes@4.3.2", "", { "dependencies": { "type-fest": "^0.21.3" } }, "sha512-gKXj5ALrKWQLsYG9jlTRmR/xKluxHV+Z9QEwNIgCfM1/uwPMCuzVVnh5mwTd+OuBZcwSIMbqssNWRm1lE51QaQ=="],
@@ -1275,10 +1270,6 @@
 
     "karma-source-map-support": ["karma-source-map-support@1.4.0", "", { "dependencies": { "source-map-support": "^0.5.5" } }, "sha512-RsBECncGO17KAoJCYXjv+ckIz+Ii9NCi+9enk+rq6XC81ezYkb4/RHE6CTXdA7IOJqoF3wcaLfVG0CPmE5ca6A=="],
 
-    "keycloak-angular": ["keycloak-angular@19.0.2", "", { "dependencies": { "tslib": "^2.3.1" }, "peerDependencies": { "@angular/common": "^19", "@angular/core": "^19", "@angular/router": "^19", "keycloak-js": "^18 || ^19 || ^20 || ^21 || ^22 || ^23 || ^24 || ^25 || ^26" } }, "sha512-GzQKC/jFJLZRmUxWOEXkla+6shDAZFAOe6Z3qsw916Ckb/UhZnO704HMZrd8xyVB3RH6xOcNCp45oHmIiqJ7dA=="],
-
-    "keycloak-js": ["keycloak-js@26.1.4", "", {}, "sha512-4h2RicCzIAtsjKIG8DIO+8NKlpWX2fiNkbS0jlbtjZFbIGGjbQBzjS/5NkyWlzxamXVow9prHTIgIiwfo3GAmQ=="],
-
     "keyv": ["keyv@4.5.4", "", { "dependencies": { "json-buffer": "3.0.1" } }, "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw=="],
 
     "kind-of": ["kind-of@6.0.3", "", {}, "sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw=="],
diff --git a/frontend/package.json b/frontend/package.json
index 16ced84..ab8328e 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -33,9 +33,6 @@
     "ajv-formats": "3.0.1",
     "countup.js": "^2.8.0",
     "gsap": "^3.12.7",
-    "angular-oauth2-oidc": "^19.0.0",
-    "keycloak-angular": "^19.0.0",
-    "keycloak-js": "^26.0.0",
     "postcss": "^8.5.1",
     "rxjs": "~7.8.2",
     "tailwindcss": "^4.0.3",
diff --git a/frontend/src/app/service/auth.service.ts b/frontend/src/app/service/auth.service.ts
index 6cd41a7..4445af8 100644
--- a/frontend/src/app/service/auth.service.ts
+++ b/frontend/src/app/service/auth.service.ts
@@ -6,7 +6,7 @@ import { LoginRequest } from '../model/auth/LoginRequest';
 import { RegisterRequest } from '../model/auth/RegisterRequest';
 import { AuthResponse } from '../model/auth/AuthResponse';
 import { User } from '../model/User';
-import { environment } from '../../environments/environment';
+import { environment } from '@environments/environment';
 
 const TOKEN_KEY = 'auth-token';
 const USER_KEY = 'auth-user';
@@ -15,8 +15,8 @@ const USER_KEY = 'auth-user';
   providedIn: 'root',
 })
 export class AuthService {
-  private authUrl = `${environment.apiUrl}/api/auth`;
-  private userUrl = `${environment.apiUrl}/api/users`;
+  private authUrl = `${environment.apiUrl}/auth`;
+  private userUrl = `${environment.apiUrl}/users`;
 
   private currentUserSubject: BehaviorSubject<User | null>;
   public currentUser: Observable<User | null>;
@@ -30,7 +30,10 @@ export class AuthService {
 
     // Check if token exists and load user data
     if (this.getToken()) {
+      console.log('Token found, loading user data...');
       this.loadCurrentUser();
+    } else {
+      console.log('No token found, user not logged in.');
     }
   }
 
diff --git a/frontend/src/app/service/user.service.ts b/frontend/src/app/service/user.service.ts
index 78fbb75..5391945 100644
--- a/frontend/src/app/service/user.service.ts
+++ b/frontend/src/app/service/user.service.ts
@@ -1,4 +1,4 @@
-import { Injectable } from '@angular/core';
+import { inject, Injectable } from '@angular/core';
 import { HttpClient } from '@angular/common/http';
 import { BehaviorSubject, catchError, EMPTY, Observable, tap } from 'rxjs';
 import { User } from '../model/User';
@@ -8,18 +8,11 @@ import { environment } from '@environments/environment';
   providedIn: 'root',
 })
 export class UserService {
-  private apiUrl = `${environment.apiUrl}/api/users`;
+  private apiUrl = `${environment.apiUrl}/users`;
+
   private currentUserSubject = new BehaviorSubject<User | null>(null);
+  private http: HttpClient = inject(HttpClient);
 
-  constructor(private http: HttpClient) {}
-
-  public getUserById(id: number): Observable<User> {
-    return this.http.get<User>(`${this.apiUrl}/${id}`);
-  }
-
-  public getUserByUsername(username: string): Observable<User> {
-    return this.http.get<User>(`${this.apiUrl}/username/${username}`);
-  }
 
   public getCurrentUser(): Observable<User | null> {
     return this.http.get<User | null>('/backend/user').pipe(
diff --git a/frontend/src/app/shared/components/navbar/navbar.component.ts b/frontend/src/app/shared/components/navbar/navbar.component.ts
index 16274c4..bdc941c 100644
--- a/frontend/src/app/shared/components/navbar/navbar.component.ts
+++ b/frontend/src/app/shared/components/navbar/navbar.component.ts
@@ -1,14 +1,6 @@
-import {
-  ChangeDetectionStrategy,
-  Component,
-  inject,
-  OnDestroy,
-  OnInit,
-  signal,
-} from '@angular/core';
+import { ChangeDetectionStrategy, Component, inject, OnDestroy, OnInit, signal } from '@angular/core';
 import { RouterModule } from '@angular/router';
-import { AuthService } from '../../../service/auth.service';
-import { UserService } from '@service/user.service';
+import { AuthService } from '@service/auth.service';
 import { Subscription } from 'rxjs';
 import { AnimatedNumberComponent } from '@blackjack/components/animated-number/animated-number.component';
 
@@ -24,7 +16,6 @@ export class NavbarComponent implements OnInit, OnDestroy {
   private authService: AuthService = inject(AuthService);
   isLoggedIn = this.authService.isLoggedIn();
 
-  private userService = inject(UserService);
   private userSubscription: Subscription | undefined;
   private authSubscription: Subscription | undefined;
   public balance = signal(0);
diff --git a/frontend/src/environments/environment.ts b/frontend/src/environments/environment.ts
index 45776f6..40a2f24 100644
--- a/frontend/src/environments/environment.ts
+++ b/frontend/src/environments/environment.ts
@@ -1,5 +1,5 @@
 export const environment = {
   STRIPE_KEY:
     'pk_test_51QrePYIvCfqz7ANgMizBorPpVjJ8S6gcaL4yvcMQnVaKyReqcQ6jqaQEF7aDZbDu8rNVsTZrw8ABek4ToxQX7KZe00jpGh8naG',
-  apiUrl: 'http://localhost:8080',
+  apiUrl: 'http://localhost:4200/backend',
 };
diff --git a/frontend/src/proxy.conf.json b/frontend/src/proxy.conf.json
index ded42d9..c9839a6 100644
--- a/frontend/src/proxy.conf.json
+++ b/frontend/src/proxy.conf.json
@@ -1,10 +1,10 @@
 {
-  "/api": {
+  "/backend": {
     "target": "http://localhost:8080/",
     "secure": false,
     "logLevel": "debug",
     "pathRewrite": {
-      "^/api": ""
+      "^/backend": ""
     },
     "changeOrigin": true
   }

From 29a53ea7814d5923cb323262203464bfb9d4b906 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 14:51:02 +0200
Subject: [PATCH 04/13] fix: fix stupid ahh bug where u get logged out when
 doing fucking anything stupid fucking http interceptor

---
 frontend/src/app/app.component.ts                      | 10 ++++++++--
 frontend/src/app/app.config.ts                         |  6 ------
 frontend/src/app/service/auth.service.ts               |  7 ++++---
 .../src/app/shared/interceptor/http.interceptor.ts     |  7 +++----
 4 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/frontend/src/app/app.component.ts b/frontend/src/app/app.component.ts
index 0d82bed..d32e722 100644
--- a/frontend/src/app/app.component.ts
+++ b/frontend/src/app/app.component.ts
@@ -1,4 +1,4 @@
-import { ChangeDetectionStrategy, Component } from '@angular/core';
+import { ChangeDetectionStrategy, Component, OnInit } from '@angular/core';
 import { CommonModule } from '@angular/common';
 import { RouterOutlet } from '@angular/router';
 import { FooterComponent } from './shared/components/footer/footer.component';
@@ -12,4 +12,10 @@ import { FooterComponent } from './shared/components/footer/footer.component';
   styleUrl: './app.component.css',
   changeDetection: ChangeDetectionStrategy.OnPush,
 })
-export class AppComponent {}
+export class AppComponent implements OnInit {
+  ngOnInit() {
+    const count = +(localStorage.getItem('reloadCount') ?? 0);
+    localStorage.setItem('reloadCount', (count + 1).toString());
+    console.log('Reload count from localStorage:', count + 1);
+  }
+}
diff --git a/frontend/src/app/app.config.ts b/frontend/src/app/app.config.ts
index d6ac35a..679c5e4 100644
--- a/frontend/src/app/app.config.ts
+++ b/frontend/src/app/app.config.ts
@@ -5,7 +5,6 @@ import { FontAwesomeModule } from '@fortawesome/angular-fontawesome';
 import { routes } from './app.routes';
 import { provideHttpClient, withInterceptors } from '@angular/common/http';
 import { provideAnimationsAsync } from '@angular/platform-browser/animations/async';
-import { OAuthStorage, provideOAuthClient } from 'angular-oauth2-oidc';
 import { httpInterceptor } from '@shared/interceptor/http.interceptor';
 
 export const appConfig: ApplicationConfig = {
@@ -15,10 +14,5 @@ export const appConfig: ApplicationConfig = {
     provideHttpClient(withInterceptors([httpInterceptor])),
     provideExperimentalZonelessChangeDetection(),
     provideAnimationsAsync(),
-    provideOAuthClient(),
-    {
-      provide: OAuthStorage,
-      useFactory: () => localStorage,
-    },
   ],
 };
diff --git a/frontend/src/app/service/auth.service.ts b/frontend/src/app/service/auth.service.ts
index 4445af8..7880000 100644
--- a/frontend/src/app/service/auth.service.ts
+++ b/frontend/src/app/service/auth.service.ts
@@ -8,8 +8,8 @@ import { AuthResponse } from '../model/auth/AuthResponse';
 import { User } from '../model/User';
 import { environment } from '@environments/environment';
 
-const TOKEN_KEY = 'auth-token';
-const USER_KEY = 'auth-user';
+const TOKEN_KEY = 'token';
+const USER_KEY = 'user';
 
 @Injectable({
   providedIn: 'root',
@@ -88,7 +88,8 @@ export class AuthService {
       next: (user) => {
         this.setUser(user);
       },
-      error: () => {
+      error: (e) => {
+        console.log(e);
         this.logout();
       },
     });
diff --git a/frontend/src/app/shared/interceptor/http.interceptor.ts b/frontend/src/app/shared/interceptor/http.interceptor.ts
index 2cce8d0..2ff7788 100644
--- a/frontend/src/app/shared/interceptor/http.interceptor.ts
+++ b/frontend/src/app/shared/interceptor/http.interceptor.ts
@@ -1,10 +1,9 @@
 import { HttpInterceptorFn } from '@angular/common/http';
-import { inject } from '@angular/core';
-import { AuthService } from '../../service/auth.service';
+
+const TOKEN_KEY = 'token';
 
 export const httpInterceptor: HttpInterceptorFn = (req, next) => {
-  const authService = inject(AuthService);
-  const token = authService.getToken();
+  const token = localStorage.getItem(TOKEN_KEY);
 
   // Always add CORS headers
   if (token) {

From b1e173f44b006f29f29347afb9a123c7bf76de71 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 15:02:48 +0200
Subject: [PATCH 05/13] refactor: remove redundant user not found message
 handling

---
 .../blackjack/BlackJackGameController.java    | 24 +++++++++----------
 .../java/de/szut/casino/config/WebConfig.java |  2 +-
 .../exceptions/UserNotFoundException.java     |  4 ++--
 .../casino/lootboxes/LootBoxController.java   |  4 ++--
 .../szut/casino/security/AuthController.java  |  2 +-
 .../de/szut/casino/security/CorsFilter.java   |  2 +-
 .../casino/security/dto/AuthResponseDto.java  |  2 +-
 .../casino/security/dto/LoginRequestDto.java  |  2 +-
 .../security/jwt/JwtAuthenticationFilter.java |  2 +-
 .../de/szut/casino/security/jwt/JwtUtils.java |  2 +-
 .../casino/security/service/AuthService.java  |  2 +-
 .../service/UserDetailsServiceImpl.java       | 13 +---------
 .../de/szut/casino/slots/SlotController.java  |  2 +-
 13 files changed, 26 insertions(+), 37 deletions(-)

diff --git a/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java b/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java
index 0e77237..ec9449c 100644
--- a/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java
+++ b/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java
@@ -29,11 +29,11 @@ public class BlackJackGameController {
     }
 
     @GetMapping("/blackjack/{id}")
-    public ResponseEntity<Object> getGame(@PathVariable Long id, @RequestHeader("Authorization") String token) {
+    public ResponseEntity<Object> getGame(@PathVariable Long id) {
         Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException("User not found");
+            throw new UserNotFoundException();
         }
 
         UserEntity user = optionalUser.get();
@@ -46,11 +46,11 @@ public class BlackJackGameController {
     }
 
     @PostMapping("/blackjack/{id}/hit")
-    public ResponseEntity<Object> hit(@PathVariable Long id, @RequestHeader("Authorization") String token) {
+    public ResponseEntity<Object> hit(@PathVariable Long id) {
         Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException("User not found");
+            throw new UserNotFoundException();
         }
 
         UserEntity user = optionalUser.get();
@@ -63,11 +63,11 @@ public class BlackJackGameController {
     }
 
     @PostMapping("/blackjack/{id}/stand")
-    public ResponseEntity<Object> stand(@PathVariable Long id, @RequestHeader("Authorization") String token) {
+    public ResponseEntity<Object> stand(@PathVariable Long id) {
         Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException("User not found");
+            throw new UserNotFoundException();
         }
 
         UserEntity user = optionalUser.get();
@@ -80,11 +80,11 @@ public class BlackJackGameController {
     }
 
     @PostMapping("/blackjack/{id}/doubleDown")
-    public ResponseEntity<Object> doubleDown(@PathVariable Long id, @RequestHeader("Authorization") String token) {
+    public ResponseEntity<Object> doubleDown(@PathVariable Long id) {
         Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException("User not found");
+            throw new UserNotFoundException();
         }
 
         UserEntity user = optionalUser.get();
@@ -97,11 +97,11 @@ public class BlackJackGameController {
     }
 
     @PostMapping("/blackjack/{id}/split")
-    public ResponseEntity<Object> split(@PathVariable Long id, @RequestHeader("Authorization") String token) {
+    public ResponseEntity<Object> split(@PathVariable Long id) {
         Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException("User not found");
+            throw new UserNotFoundException();
         }
 
         UserEntity user = optionalUser.get();
@@ -114,11 +114,11 @@ public class BlackJackGameController {
     }
 
     @PostMapping("/blackjack/start")
-    public ResponseEntity<Object> createBlackJackGame(@RequestBody @Valid BetDto betDto, @RequestHeader("Authorization") String token) {
+    public ResponseEntity<Object> createBlackJackGame(@RequestBody @Valid BetDto betDto) {
         Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException("User not found");
+            throw new UserNotFoundException();
         }
 
         UserEntity user = optionalUser.get();
diff --git a/backend/src/main/java/de/szut/casino/config/WebConfig.java b/backend/src/main/java/de/szut/casino/config/WebConfig.java
index 9258349..bb11293 100644
--- a/backend/src/main/java/de/szut/casino/config/WebConfig.java
+++ b/backend/src/main/java/de/szut/casino/config/WebConfig.java
@@ -27,4 +27,4 @@ public class WebConfig {
             }
         };
     }
-}
\ No newline at end of file
+}
diff --git a/backend/src/main/java/de/szut/casino/exceptionHandling/exceptions/UserNotFoundException.java b/backend/src/main/java/de/szut/casino/exceptionHandling/exceptions/UserNotFoundException.java
index 6e281db..d843af7 100644
--- a/backend/src/main/java/de/szut/casino/exceptionHandling/exceptions/UserNotFoundException.java
+++ b/backend/src/main/java/de/szut/casino/exceptionHandling/exceptions/UserNotFoundException.java
@@ -5,7 +5,7 @@ import org.springframework.web.bind.annotation.ResponseStatus;
 
 @ResponseStatus(value = HttpStatus.NOT_FOUND)
 public class UserNotFoundException extends RuntimeException {
-    public UserNotFoundException(String message) {
-        super(message);
+    public UserNotFoundException() {
+        super("User not found");
     }
 }
diff --git a/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java b/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
index 1b58056..cd9e9f0 100644
--- a/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
+++ b/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
@@ -17,7 +17,7 @@ public class LootBoxController {
     private final UserService userService;
     private final LootBoxService lootBoxService;
 
-    public LootBoxController(LootBoxRepository lootBoxRepository, UserRepository userRepository, UserService userService, LootBoxService lootBoxService) {
+    public LootBoxController(LootBoxRepository lootBoxRepository, UserService userService, LootBoxService lootBoxService) {
         this.lootBoxRepository = lootBoxRepository;
         this.userService = userService;
         this.lootBoxService = lootBoxService;
@@ -39,7 +39,7 @@ public class LootBoxController {
 
         Optional<UserEntity> optionalUser = userService.getCurrentUser();
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException("User not found");
+            throw new UserNotFoundException();
         }
 
         UserEntity user = optionalUser.get();
diff --git a/backend/src/main/java/de/szut/casino/security/AuthController.java b/backend/src/main/java/de/szut/casino/security/AuthController.java
index f299ef4..57f7abe 100644
--- a/backend/src/main/java/de/szut/casino/security/AuthController.java
+++ b/backend/src/main/java/de/szut/casino/security/AuthController.java
@@ -28,4 +28,4 @@ public class AuthController {
         GetUserDto response = authService.register(signUpRequest);
         return ResponseEntity.ok(response);
     }
-}
\ No newline at end of file
+}
diff --git a/backend/src/main/java/de/szut/casino/security/CorsFilter.java b/backend/src/main/java/de/szut/casino/security/CorsFilter.java
index cf0a368..616cafe 100644
--- a/backend/src/main/java/de/szut/casino/security/CorsFilter.java
+++ b/backend/src/main/java/de/szut/casino/security/CorsFilter.java
@@ -39,4 +39,4 @@ public class CorsFilter implements Filter {
         
         chain.doFilter(req, res);
     }
-}
\ No newline at end of file
+}
diff --git a/backend/src/main/java/de/szut/casino/security/dto/AuthResponseDto.java b/backend/src/main/java/de/szut/casino/security/dto/AuthResponseDto.java
index bf2c51c..0dd03dd 100644
--- a/backend/src/main/java/de/szut/casino/security/dto/AuthResponseDto.java
+++ b/backend/src/main/java/de/szut/casino/security/dto/AuthResponseDto.java
@@ -16,4 +16,4 @@ public class AuthResponseDto {
     public AuthResponseDto(String token) {
         this.token = token;
     }
-}
\ No newline at end of file
+}
diff --git a/backend/src/main/java/de/szut/casino/security/dto/LoginRequestDto.java b/backend/src/main/java/de/szut/casino/security/dto/LoginRequestDto.java
index f07396c..ace3508 100644
--- a/backend/src/main/java/de/szut/casino/security/dto/LoginRequestDto.java
+++ b/backend/src/main/java/de/szut/casino/security/dto/LoginRequestDto.java
@@ -16,4 +16,4 @@ public class LoginRequestDto {
     
     @NotBlank(message = "Password is required")
     private String password;
-}
\ No newline at end of file
+}
diff --git a/backend/src/main/java/de/szut/casino/security/jwt/JwtAuthenticationFilter.java b/backend/src/main/java/de/szut/casino/security/jwt/JwtAuthenticationFilter.java
index a729b36..502ba0a 100644
--- a/backend/src/main/java/de/szut/casino/security/jwt/JwtAuthenticationFilter.java
+++ b/backend/src/main/java/de/szut/casino/security/jwt/JwtAuthenticationFilter.java
@@ -61,4 +61,4 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
 
         return null;
     }
-}
\ No newline at end of file
+}
diff --git a/backend/src/main/java/de/szut/casino/security/jwt/JwtUtils.java b/backend/src/main/java/de/szut/casino/security/jwt/JwtUtils.java
index fac25a1..3c5ef86 100644
--- a/backend/src/main/java/de/szut/casino/security/jwt/JwtUtils.java
+++ b/backend/src/main/java/de/szut/casino/security/jwt/JwtUtils.java
@@ -80,4 +80,4 @@ public class JwtUtils {
         final String username = extractUsername(token);
         return (username.equals(userDetails.getUsername()) && !isTokenExpired(token));
     }
-}
\ No newline at end of file
+}
diff --git a/backend/src/main/java/de/szut/casino/security/service/AuthService.java b/backend/src/main/java/de/szut/casino/security/service/AuthService.java
index d25c953..88687ba 100644
--- a/backend/src/main/java/de/szut/casino/security/service/AuthService.java
+++ b/backend/src/main/java/de/szut/casino/security/service/AuthService.java
@@ -47,4 +47,4 @@ public class AuthService {
                 user.getBalance()
         );
     }
-}
\ No newline at end of file
+}
diff --git a/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java b/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java
index bae4adf..8653fee 100644
--- a/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java
+++ b/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java
@@ -34,15 +34,4 @@ public class UserDetailsServiceImpl implements UserDetailsService {
                 userEntity.getPassword(), 
                 new ArrayList<>());
     }
-    
-    public UserEntity getUserByUsernameOrEmail(String usernameOrEmail) {
-        Optional<UserEntity> user = userRepository.findByUsername(usernameOrEmail);
-        
-        if (user.isEmpty()) {
-            user = userRepository.findByEmail(usernameOrEmail);
-        }
-        
-        return user.orElseThrow(() -> 
-                new UserNotFoundException("User not found with username or email: " + usernameOrEmail));
-    }
-}
\ No newline at end of file
+}
diff --git a/backend/src/main/java/de/szut/casino/slots/SlotController.java b/backend/src/main/java/de/szut/casino/slots/SlotController.java
index 030e9d8..f22bf65 100644
--- a/backend/src/main/java/de/szut/casino/slots/SlotController.java
+++ b/backend/src/main/java/de/szut/casino/slots/SlotController.java
@@ -33,7 +33,7 @@ public class SlotController {
         Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
-            throw new UserNotFoundException("User not found");
+            throw new UserNotFoundException();
         }
 
         UserEntity user = optionalUser.get();

From 8ba6d4e4d987f0ad073d8b68272b0b94fc71ffc7 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 15:10:21 +0200
Subject: [PATCH 06/13] feat(auth): put login and register templates in files

---
 frontend/src/app/app.component.ts             |  11 +-
 .../feature/auth/login/login.component.html   |  71 +++++++++++++
 .../app/feature/auth/login/login.component.ts |  73 +------------
 .../auth/register/register.component.html     |  93 ++++++++++++++++
 .../auth/register/register.component.ts       | 100 +-----------------
 frontend/src/app/service/auth.service.ts      |   6 +-
 6 files changed, 172 insertions(+), 182 deletions(-)
 create mode 100644 frontend/src/app/feature/auth/login/login.component.html
 create mode 100644 frontend/src/app/feature/auth/register/register.component.html

diff --git a/frontend/src/app/app.component.ts b/frontend/src/app/app.component.ts
index d32e722..aa232ac 100644
--- a/frontend/src/app/app.component.ts
+++ b/frontend/src/app/app.component.ts
@@ -1,7 +1,7 @@
-import { ChangeDetectionStrategy, Component, OnInit } from '@angular/core';
+import { ChangeDetectionStrategy, Component } from '@angular/core';
 import { CommonModule } from '@angular/common';
 import { RouterOutlet } from '@angular/router';
-import { FooterComponent } from './shared/components/footer/footer.component';
+import { FooterComponent } from '@shared/components/footer/footer.component';
 
 @Component({
   selector: 'app-root',
@@ -12,10 +12,5 @@ import { FooterComponent } from './shared/components/footer/footer.component';
   styleUrl: './app.component.css',
   changeDetection: ChangeDetectionStrategy.OnPush,
 })
-export class AppComponent implements OnInit {
-  ngOnInit() {
-    const count = +(localStorage.getItem('reloadCount') ?? 0);
-    localStorage.setItem('reloadCount', (count + 1).toString());
-    console.log('Reload count from localStorage:', count + 1);
-  }
+export class AppComponent {
 }
diff --git a/frontend/src/app/feature/auth/login/login.component.html b/frontend/src/app/feature/auth/login/login.component.html
new file mode 100644
index 0000000..184cc6d
--- /dev/null
+++ b/frontend/src/app/feature/auth/login/login.component.html
@@ -0,0 +1,71 @@
+
+<div class="min-h-screen bg-gray-900 flex items-center justify-center">
+  <div class="max-w-md w-full bg-gray-800 rounded-lg shadow-lg p-8">
+    <h2 class="text-2xl font-bold text-white mb-6 text-center">Login to Casino</h2>
+
+    <div *ngIf="errorMessage" class="bg-red-600 text-white p-4 rounded mb-4">
+      {{ errorMessage }}
+    </div>
+
+    <form [formGroup]="loginForm" (ngSubmit)="onSubmit()" class="space-y-6">
+      <div>
+        <label for="usernameOrEmail" class="block text-sm font-medium text-gray-300"
+        >Username or Email</label
+        >
+        <input
+          id="usernameOrEmail"
+          type="text"
+          formControlName="usernameOrEmail"
+          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+          placeholder="Enter your username or email"
+        />
+
+        <div
+          *ngIf="form['usernameOrEmail'].touched && form['usernameOrEmail'].errors"
+          class="text-red-500 mt-1 text-sm"
+        >
+              <span *ngIf="form['usernameOrEmail'].errors?.['required']"
+              >Username or email is required</span
+              >
+        </div>
+      </div>
+
+      <div>
+        <label for="password" class="block text-sm font-medium text-gray-300">Password</label>
+        <input
+          id="password"
+          type="password"
+          formControlName="password"
+          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+          placeholder="Enter your password"
+        />
+
+        <div
+          *ngIf="form['password'].touched && form['password'].errors"
+          class="text-red-500 mt-1 text-sm"
+        >
+          <span *ngIf="form['password'].errors?.['required']">Password is required</span>
+        </div>
+      </div>
+
+      <div>
+        <button
+          type="submit"
+          [disabled]="loginForm.invalid || isLoading"
+          class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
+        >
+          {{ isLoading ? 'Logging in...' : 'Login' }}
+        </button>
+      </div>
+    </form>
+
+    <div class="mt-6 text-center">
+      <p class="text-sm text-gray-400">
+        Don't have an account?
+        <a routerLink="/register" class="font-medium text-indigo-400 hover:text-indigo-300"
+        >Register</a
+        >
+      </p>
+    </div>
+  </div>
+</div>
diff --git a/frontend/src/app/feature/auth/login/login.component.ts b/frontend/src/app/feature/auth/login/login.component.ts
index 1e63b7f..1ed3537 100644
--- a/frontend/src/app/feature/auth/login/login.component.ts
+++ b/frontend/src/app/feature/auth/login/login.component.ts
@@ -9,78 +9,7 @@ import { CommonModule } from '@angular/common';
   selector: 'app-login',
   standalone: true,
   imports: [CommonModule, ReactiveFormsModule, RouterLink],
-  template: `
-    <div class="min-h-screen bg-gray-900 flex items-center justify-center">
-      <div class="max-w-md w-full bg-gray-800 rounded-lg shadow-lg p-8">
-        <h2 class="text-2xl font-bold text-white mb-6 text-center">Login to Casino</h2>
-
-        <div *ngIf="errorMessage" class="bg-red-600 text-white p-4 rounded mb-4">
-          {{ errorMessage }}
-        </div>
-
-        <form [formGroup]="loginForm" (ngSubmit)="onSubmit()" class="space-y-6">
-          <div>
-            <label for="usernameOrEmail" class="block text-sm font-medium text-gray-300"
-              >Username or Email</label
-            >
-            <input
-              id="usernameOrEmail"
-              type="text"
-              formControlName="usernameOrEmail"
-              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Enter your username or email"
-            />
-
-            <div
-              *ngIf="form['usernameOrEmail'].touched && form['usernameOrEmail'].errors"
-              class="text-red-500 mt-1 text-sm"
-            >
-              <span *ngIf="form['usernameOrEmail'].errors?.['required']"
-                >Username or email is required</span
-              >
-            </div>
-          </div>
-
-          <div>
-            <label for="password" class="block text-sm font-medium text-gray-300">Password</label>
-            <input
-              id="password"
-              type="password"
-              formControlName="password"
-              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Enter your password"
-            />
-
-            <div
-              *ngIf="form['password'].touched && form['password'].errors"
-              class="text-red-500 mt-1 text-sm"
-            >
-              <span *ngIf="form['password'].errors?.['required']">Password is required</span>
-            </div>
-          </div>
-
-          <div>
-            <button
-              type="submit"
-              [disabled]="loginForm.invalid || isLoading"
-              class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
-            >
-              {{ isLoading ? 'Logging in...' : 'Login' }}
-            </button>
-          </div>
-        </form>
-
-        <div class="mt-6 text-center">
-          <p class="text-sm text-gray-400">
-            Don't have an account?
-            <a routerLink="/register" class="font-medium text-indigo-400 hover:text-indigo-300"
-              >Register</a
-            >
-          </p>
-        </div>
-      </div>
-    </div>
-  `,
+  templateUrl: './login.component.html',
 })
 export class LoginComponent {
   loginForm: FormGroup;
diff --git a/frontend/src/app/feature/auth/register/register.component.html b/frontend/src/app/feature/auth/register/register.component.html
new file mode 100644
index 0000000..ed02f07
--- /dev/null
+++ b/frontend/src/app/feature/auth/register/register.component.html
@@ -0,0 +1,93 @@
+<div class="min-h-screen bg-gray-900 flex items-center justify-center">
+  <div class="max-w-md w-full bg-gray-800 rounded-lg shadow-lg p-8">
+    <h2 class="text-2xl font-bold text-white mb-6 text-center">Create Account</h2>
+
+    <div *ngIf="errorMessage" class="bg-red-600 text-white p-4 rounded mb-4">
+      {{ errorMessage }}
+    </div>
+
+    <form [formGroup]="registerForm" (ngSubmit)="onSubmit()" class="space-y-6">
+      <div>
+        <label for="email" class="block text-sm font-medium text-gray-300">Email</label>
+        <input
+          id="email"
+          type="email"
+          formControlName="email"
+          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+          placeholder="Enter your email"
+        />
+
+        <div
+          *ngIf="form['email'].touched && form['email'].errors"
+          class="text-red-500 mt-1 text-sm"
+        >
+          <span *ngIf="form['email'].errors?.['required']">Email is required</span>
+          <span *ngIf="form['email'].errors?.['email']"
+          >Please enter a valid email address</span
+          >
+        </div>
+      </div>
+
+      <div>
+        <label for="username" class="block text-sm font-medium text-gray-300">Username</label>
+        <input
+          id="username"
+          type="text"
+          formControlName="username"
+          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+          placeholder="Choose a username"
+        />
+
+        <div
+          *ngIf="form['username'].touched && form['username'].errors"
+          class="text-red-500 mt-1 text-sm"
+        >
+          <span *ngIf="form['username'].errors?.['required']">Username is required</span>
+          <span *ngIf="form['username'].errors?.['minlength']"
+          >Username must be at least 3 characters</span
+          >
+        </div>
+      </div>
+
+      <div>
+        <label for="password" class="block text-sm font-medium text-gray-300">Password</label>
+        <input
+          id="password"
+          type="password"
+          formControlName="password"
+          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
+          placeholder="Create a password"
+        />
+
+        <div
+          *ngIf="form['password'].touched && form['password'].errors"
+          class="text-red-500 mt-1 text-sm"
+        >
+          <span *ngIf="form['password'].errors?.['required']">Password is required</span>
+          <span *ngIf="form['password'].errors?.['minlength']"
+          >Password must be at least 6 characters</span
+          >
+        </div>
+      </div>
+
+      <div>
+        <button
+          type="submit"
+          [disabled]="registerForm.invalid || isLoading"
+          class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
+        >
+          {{ isLoading ? 'Creating account...' : 'Register' }}
+        </button>
+      </div>
+    </form>
+
+    <div class="mt-6 text-center">
+      <p class="text-sm text-gray-400">
+        Already have an account?
+        <a routerLink="/login" class="font-medium text-indigo-400 hover:text-indigo-300"
+        >Login</a
+        >
+      </p>
+    </div>
+  </div>
+</div>
diff --git a/frontend/src/app/feature/auth/register/register.component.ts b/frontend/src/app/feature/auth/register/register.component.ts
index 5b3f4d1..22a032f 100644
--- a/frontend/src/app/feature/auth/register/register.component.ts
+++ b/frontend/src/app/feature/auth/register/register.component.ts
@@ -2,108 +2,14 @@ import { Component } from '@angular/core';
 import { FormBuilder, FormGroup, ReactiveFormsModule, Validators } from '@angular/forms';
 import { Router, RouterLink } from '@angular/router';
 import { RegisterRequest } from '../../../model/auth/RegisterRequest';
-import { AuthService } from '../../../service/auth.service';
+import { AuthService } from '@service/auth.service';
 import { CommonModule } from '@angular/common';
 
 @Component({
   selector: 'app-register',
   standalone: true,
   imports: [CommonModule, ReactiveFormsModule, RouterLink],
-  template: `
-    <div class="min-h-screen bg-gray-900 flex items-center justify-center">
-      <div class="max-w-md w-full bg-gray-800 rounded-lg shadow-lg p-8">
-        <h2 class="text-2xl font-bold text-white mb-6 text-center">Create Account</h2>
-
-        <div *ngIf="errorMessage" class="bg-red-600 text-white p-4 rounded mb-4">
-          {{ errorMessage }}
-        </div>
-
-        <form [formGroup]="registerForm" (ngSubmit)="onSubmit()" class="space-y-6">
-          <div>
-            <label for="email" class="block text-sm font-medium text-gray-300">Email</label>
-            <input
-              id="email"
-              type="email"
-              formControlName="email"
-              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Enter your email"
-            />
-
-            <div
-              *ngIf="form['email'].touched && form['email'].errors"
-              class="text-red-500 mt-1 text-sm"
-            >
-              <span *ngIf="form['email'].errors?.['required']">Email is required</span>
-              <span *ngIf="form['email'].errors?.['email']"
-                >Please enter a valid email address</span
-              >
-            </div>
-          </div>
-
-          <div>
-            <label for="username" class="block text-sm font-medium text-gray-300">Username</label>
-            <input
-              id="username"
-              type="text"
-              formControlName="username"
-              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Choose a username"
-            />
-
-            <div
-              *ngIf="form['username'].touched && form['username'].errors"
-              class="text-red-500 mt-1 text-sm"
-            >
-              <span *ngIf="form['username'].errors?.['required']">Username is required</span>
-              <span *ngIf="form['username'].errors?.['minlength']"
-                >Username must be at least 3 characters</span
-              >
-            </div>
-          </div>
-
-          <div>
-            <label for="password" class="block text-sm font-medium text-gray-300">Password</label>
-            <input
-              id="password"
-              type="password"
-              formControlName="password"
-              class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-              placeholder="Create a password"
-            />
-
-            <div
-              *ngIf="form['password'].touched && form['password'].errors"
-              class="text-red-500 mt-1 text-sm"
-            >
-              <span *ngIf="form['password'].errors?.['required']">Password is required</span>
-              <span *ngIf="form['password'].errors?.['minlength']"
-                >Password must be at least 6 characters</span
-              >
-            </div>
-          </div>
-
-          <div>
-            <button
-              type="submit"
-              [disabled]="registerForm.invalid || isLoading"
-              class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
-            >
-              {{ isLoading ? 'Creating account...' : 'Register' }}
-            </button>
-          </div>
-        </form>
-
-        <div class="mt-6 text-center">
-          <p class="text-sm text-gray-400">
-            Already have an account?
-            <a routerLink="/login" class="font-medium text-indigo-400 hover:text-indigo-300"
-              >Login</a
-            >
-          </p>
-        </div>
-      </div>
-    </div>
-  `,
+  templateUrl: './register.component.html',
 })
 export class RegisterComponent {
   registerForm: FormGroup;
@@ -152,7 +58,7 @@ export class RegisterComponent {
             next: () => {
               this.router.navigate(['/home']);
             },
-            error: (err) => {
+            error: () => {
               this.isLoading = false;
               this.errorMessage =
                 'Registration successful but failed to login automatically. Please log in manually.';
diff --git a/frontend/src/app/service/auth.service.ts b/frontend/src/app/service/auth.service.ts
index 7880000..1a118cd 100644
--- a/frontend/src/app/service/auth.service.ts
+++ b/frontend/src/app/service/auth.service.ts
@@ -30,10 +30,7 @@ export class AuthService {
 
     // Check if token exists and load user data
     if (this.getToken()) {
-      console.log('Token found, loading user data...');
       this.loadCurrentUser();
-    } else {
-      console.log('No token found, user not logged in.');
     }
   }
 
@@ -88,8 +85,7 @@ export class AuthService {
       next: (user) => {
         this.setUser(user);
       },
-      error: (e) => {
-        console.log(e);
+      error: () => {
         this.logout();
       },
     });

From 0cf2ea3438abae1e954f1aa8c085aa52fade51b9 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 15:12:46 +0200
Subject: [PATCH 07/13] refactor: clean up unused imports across controllers

---
 .../java/de/szut/casino/CasinoApplication.java    |  1 -
 .../casino/blackjack/BlackJackGameController.java |  4 ++--
 .../de/szut/casino/deposit/DepositController.java |  6 ------
 .../szut/casino/lootboxes/LootBoxController.java  |  6 ++++--
 .../de/szut/casino/security/AuthController.java   |  5 ++++-
 .../security/service/UserDetailsServiceImpl.java  |  1 -
 .../java/de/szut/casino/slots/SlotController.java |  1 -
 .../java/de/szut/casino/user/UserController.java  |  5 ++++-
 .../de/szut/casino/user/UserMappingService.java   |  5 -----
 .../java/de/szut/casino/user/UserService.java     |  2 --
 .../de/szut/casino/user/dto/KeycloakUserDto.java  | 15 ---------------
 11 files changed, 14 insertions(+), 37 deletions(-)
 delete mode 100644 backend/src/main/java/de/szut/casino/user/dto/KeycloakUserDto.java

diff --git a/backend/src/main/java/de/szut/casino/CasinoApplication.java b/backend/src/main/java/de/szut/casino/CasinoApplication.java
index 1d7e861..2818f23 100644
--- a/backend/src/main/java/de/szut/casino/CasinoApplication.java
+++ b/backend/src/main/java/de/szut/casino/CasinoApplication.java
@@ -13,7 +13,6 @@ import org.springframework.web.client.RestTemplate;
 import java.math.BigDecimal;
 import java.util.ArrayList;
 import java.util.Arrays;
-import java.util.List;
 
 @SpringBootApplication
 public class CasinoApplication {
diff --git a/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java b/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java
index ec9449c..d4c0e6e 100644
--- a/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java
+++ b/backend/src/main/java/de/szut/casino/blackjack/BlackJackGameController.java
@@ -11,8 +11,8 @@ import lombok.extern.slf4j.Slf4j;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.*;
 
-import java.math.BigDecimal;
-import java.util.*;
+import java.util.Objects;
+import java.util.Optional;
 
 @Slf4j
 @RestController
diff --git a/backend/src/main/java/de/szut/casino/deposit/DepositController.java b/backend/src/main/java/de/szut/casino/deposit/DepositController.java
index 00f2618..522e47d 100644
--- a/backend/src/main/java/de/szut/casino/deposit/DepositController.java
+++ b/backend/src/main/java/de/szut/casino/deposit/DepositController.java
@@ -7,20 +7,14 @@ import com.stripe.param.checkout.SessionCreateParams;
 import de.szut.casino.deposit.dto.AmountDto;
 import de.szut.casino.deposit.dto.SessionIdDto;
 import de.szut.casino.user.UserEntity;
-import de.szut.casino.user.UserRepository;
 import de.szut.casino.user.UserService;
-import de.szut.casino.user.dto.KeycloakUserDto;
 import jakarta.validation.Valid;
 import org.springframework.beans.factory.annotation.Value;
-import org.springframework.http.HttpEntity;
-import org.springframework.http.HttpHeaders;
-import org.springframework.http.HttpMethod;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestHeader;
 import org.springframework.web.bind.annotation.RestController;
-import org.springframework.web.client.RestTemplate;
 
 import java.util.Optional;
 
diff --git a/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java b/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
index cd9e9f0..cc966b6 100644
--- a/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
+++ b/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
@@ -3,13 +3,15 @@ package de.szut.casino.lootboxes;
 import de.szut.casino.exceptionHandling.exceptions.InsufficientFundsException;
 import de.szut.casino.exceptionHandling.exceptions.UserNotFoundException;
 import de.szut.casino.user.UserEntity;
-import de.szut.casino.user.UserRepository;
 import de.szut.casino.user.UserService;
 import jakarta.validation.Valid;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.*;
 
-import java.util.*;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+import java.util.Optional;
 
 @RestController
 public class LootBoxController {
diff --git a/backend/src/main/java/de/szut/casino/security/AuthController.java b/backend/src/main/java/de/szut/casino/security/AuthController.java
index 57f7abe..b5c0639 100644
--- a/backend/src/main/java/de/szut/casino/security/AuthController.java
+++ b/backend/src/main/java/de/szut/casino/security/AuthController.java
@@ -8,7 +8,10 @@ import de.szut.casino.user.dto.GetUserDto;
 import jakarta.validation.Valid;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.http.ResponseEntity;
-import org.springframework.web.bind.annotation.*;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
 
 @RestController
 @RequestMapping("/auth")
diff --git a/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java b/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java
index 8653fee..b473a35 100644
--- a/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java
+++ b/backend/src/main/java/de/szut/casino/security/service/UserDetailsServiceImpl.java
@@ -1,6 +1,5 @@
 package de.szut.casino.security.service;
 
-import de.szut.casino.exceptionHandling.exceptions.UserNotFoundException;
 import de.szut.casino.user.UserEntity;
 import de.szut.casino.user.UserRepository;
 import org.springframework.beans.factory.annotation.Autowired;
diff --git a/backend/src/main/java/de/szut/casino/slots/SlotController.java b/backend/src/main/java/de/szut/casino/slots/SlotController.java
index f22bf65..30f3973 100644
--- a/backend/src/main/java/de/szut/casino/slots/SlotController.java
+++ b/backend/src/main/java/de/szut/casino/slots/SlotController.java
@@ -11,7 +11,6 @@ import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.*;
 
 import java.math.BigDecimal;
-import java.util.Collections;
 import java.util.HashMap;
 import java.util.Map;
 import java.util.Optional;
diff --git a/backend/src/main/java/de/szut/casino/user/UserController.java b/backend/src/main/java/de/szut/casino/user/UserController.java
index 34ff258..6255a03 100644
--- a/backend/src/main/java/de/szut/casino/user/UserController.java
+++ b/backend/src/main/java/de/szut/casino/user/UserController.java
@@ -4,7 +4,10 @@ import de.szut.casino.user.dto.GetUserDto;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.http.ResponseEntity;
-import org.springframework.web.bind.annotation.*;
+import org.springframework.web.bind.annotation.CrossOrigin;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
 
 @Slf4j
 @RestController
diff --git a/backend/src/main/java/de/szut/casino/user/UserMappingService.java b/backend/src/main/java/de/szut/casino/user/UserMappingService.java
index 1e3e093..e244646 100644
--- a/backend/src/main/java/de/szut/casino/user/UserMappingService.java
+++ b/backend/src/main/java/de/szut/casino/user/UserMappingService.java
@@ -1,13 +1,8 @@
 package de.szut.casino.user;
 
-import de.szut.casino.user.dto.CreateUserDto;
 import de.szut.casino.user.dto.GetUserDto;
-import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.stereotype.Service;
 
-import java.math.BigDecimal;
-
 @Service
 public class UserMappingService {
     
diff --git a/backend/src/main/java/de/szut/casino/user/UserService.java b/backend/src/main/java/de/szut/casino/user/UserService.java
index b2ea2da..66f2d52 100644
--- a/backend/src/main/java/de/szut/casino/user/UserService.java
+++ b/backend/src/main/java/de/szut/casino/user/UserService.java
@@ -1,8 +1,6 @@
 package de.szut.casino.user;
 
-import de.szut.casino.exceptionHandling.exceptions.UserNotFoundException;
 import de.szut.casino.user.dto.CreateUserDto;
-import de.szut.casino.user.dto.GetUserDto;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.security.core.context.SecurityContextHolder;
 import org.springframework.security.crypto.password.PasswordEncoder;
diff --git a/backend/src/main/java/de/szut/casino/user/dto/KeycloakUserDto.java b/backend/src/main/java/de/szut/casino/user/dto/KeycloakUserDto.java
deleted file mode 100644
index 4238e13..0000000
--- a/backend/src/main/java/de/szut/casino/user/dto/KeycloakUserDto.java
+++ /dev/null
@@ -1,15 +0,0 @@
-package de.szut.casino.user.dto;
-
-import lombok.AllArgsConstructor;
-import lombok.Getter;
-import lombok.NoArgsConstructor;
-import lombok.Setter;
-
-@Getter
-@Setter
-@AllArgsConstructor
-@NoArgsConstructor
-public class KeycloakUserDto {
-    private String sub;
-    private String preferred_username;
-}

From a1783863559d1d7f28540dae7db7f13c8d3cbf6e Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 15:14:23 +0200
Subject: [PATCH 08/13] style: clean up import statements for consistency

---
 frontend/src/app/feature/game/slots/slots.component.ts   | 4 ++--
 .../lootbox-opening/lootbox-opening.component.ts         | 2 +-
 .../lootbox-selection/lootbox-selection.component.ts     | 2 +-
 .../app/feature/lootboxes/services/lootbox.service.ts    | 4 ++--
 .../transaction-history/transaction-history.component.ts | 9 +--------
 5 files changed, 7 insertions(+), 14 deletions(-)

diff --git a/frontend/src/app/feature/game/slots/slots.component.ts b/frontend/src/app/feature/game/slots/slots.component.ts
index 19ffb57..ad73a03 100644
--- a/frontend/src/app/feature/game/slots/slots.component.ts
+++ b/frontend/src/app/feature/game/slots/slots.component.ts
@@ -1,7 +1,7 @@
 import { ChangeDetectionStrategy, Component, inject, OnInit, signal } from '@angular/core';
 import { NavbarComponent } from '@shared/components/navbar/navbar.component';
 import { HttpClient } from '@angular/common/http';
-import { KeyValuePipe, NgClass, UpperCasePipe } from '@angular/common';
+import { KeyValuePipe, UpperCasePipe } from '@angular/common';
 import { FormsModule } from '@angular/forms';
 
 interface SlotResult {
@@ -13,7 +13,7 @@ interface SlotResult {
 @Component({
   selector: 'app-slots',
   standalone: true,
-  imports: [NavbarComponent, KeyValuePipe, UpperCasePipe, NgClass, FormsModule],
+  imports: [NavbarComponent, KeyValuePipe, UpperCasePipe, FormsModule],
   templateUrl: './slots.component.html',
   changeDetection: ChangeDetectionStrategy.OnPush,
 })
diff --git a/frontend/src/app/feature/lootboxes/lootbox-opening/lootbox-opening.component.ts b/frontend/src/app/feature/lootboxes/lootbox-opening/lootbox-opening.component.ts
index c1255ef..3d84d9d 100644
--- a/frontend/src/app/feature/lootboxes/lootbox-opening/lootbox-opening.component.ts
+++ b/frontend/src/app/feature/lootboxes/lootbox-opening/lootbox-opening.component.ts
@@ -1,4 +1,4 @@
-import { Component, ChangeDetectorRef } from '@angular/core';
+import { ChangeDetectorRef, Component } from '@angular/core';
 import { CommonModule } from '@angular/common';
 import { ActivatedRoute, Router } from '@angular/router';
 import { LootboxService } from '../services/lootbox.service';
diff --git a/frontend/src/app/feature/lootboxes/lootbox-selection/lootbox-selection.component.ts b/frontend/src/app/feature/lootboxes/lootbox-selection/lootbox-selection.component.ts
index bc3023c..747e29e 100644
--- a/frontend/src/app/feature/lootboxes/lootbox-selection/lootbox-selection.component.ts
+++ b/frontend/src/app/feature/lootboxes/lootbox-selection/lootbox-selection.component.ts
@@ -1,4 +1,4 @@
-import { Component, OnInit, ChangeDetectorRef } from '@angular/core';
+import { ChangeDetectorRef, Component, OnInit } from '@angular/core';
 import { CommonModule } from '@angular/common';
 import { NavbarComponent } from '@shared/components/navbar/navbar.component';
 import { LootboxService } from '../services/lootbox.service';
diff --git a/frontend/src/app/feature/lootboxes/services/lootbox.service.ts b/frontend/src/app/feature/lootboxes/services/lootbox.service.ts
index b0fb58d..1d1661a 100644
--- a/frontend/src/app/feature/lootboxes/services/lootbox.service.ts
+++ b/frontend/src/app/feature/lootboxes/services/lootbox.service.ts
@@ -1,6 +1,6 @@
-import { Injectable, inject } from '@angular/core';
+import { inject, Injectable } from '@angular/core';
 import { HttpClient } from '@angular/common/http';
-import { Observable, catchError } from 'rxjs';
+import { catchError, Observable } from 'rxjs';
 import { LootBox, Reward } from 'app/model/LootBox';
 
 @Injectable({
diff --git a/frontend/src/app/feature/transaction-history/transaction-history.component.ts b/frontend/src/app/feature/transaction-history/transaction-history.component.ts
index 338ef4e..dabc255 100644
--- a/frontend/src/app/feature/transaction-history/transaction-history.component.ts
+++ b/frontend/src/app/feature/transaction-history/transaction-history.component.ts
@@ -1,11 +1,4 @@
-import {
-  ChangeDetectionStrategy,
-  Component,
-  EventEmitter,
-  inject,
-  Input,
-  Output,
-} from '@angular/core';
+import { ChangeDetectionStrategy, Component, EventEmitter, inject, Input, Output } from '@angular/core';
 import { TransactionService } from '@service/transaction.service';
 import { Observable } from 'rxjs';
 import { AsyncPipe, CurrencyPipe, DatePipe, NgIf } from '@angular/common';

From 1111c914070926493031e832f3759abda77a5f9d Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 15:20:18 +0200
Subject: [PATCH 09/13] feat(auth): update login and register components design

---
 .../feature/auth/login/login.component.html   | 57 +++++++-------
 .../app/feature/auth/login/login.component.ts |  3 +-
 .../auth/register/register.component.html     | 76 ++++++++++---------
 .../auth/register/register.component.ts       |  3 +-
 4 files changed, 73 insertions(+), 66 deletions(-)

diff --git a/frontend/src/app/feature/auth/login/login.component.html b/frontend/src/app/feature/auth/login/login.component.html
index 184cc6d..fc4d591 100644
--- a/frontend/src/app/feature/auth/login/login.component.html
+++ b/frontend/src/app/feature/auth/login/login.component.html
@@ -1,70 +1,73 @@
+<app-navbar />
 
-<div class="min-h-screen bg-gray-900 flex items-center justify-center">
-  <div class="max-w-md w-full bg-gray-800 rounded-lg shadow-lg p-8">
-    <h2 class="text-2xl font-bold text-white mb-6 text-center">Login to Casino</h2>
+<div class="min-h-screen bg-deep-blue flex items-center justify-center">
+  <div class="modal-card max-w-md w-full">
+    <h2 class="modal-heading text-center">Anmelden</h2>
 
-    <div *ngIf="errorMessage" class="bg-red-600 text-white p-4 rounded mb-4">
+    <div *ngIf="errorMessage" class="bg-accent-red text-white p-4 rounded mb-4">
       {{ errorMessage }}
     </div>
 
-    <form [formGroup]="loginForm" (ngSubmit)="onSubmit()" class="space-y-6">
+    <form [formGroup]="loginForm" (ngSubmit)="onSubmit()" class="space-y-4">
       <div>
-        <label for="usernameOrEmail" class="block text-sm font-medium text-gray-300"
-        >Username or Email</label
-        >
+        <label for="usernameOrEmail" class="text-text-secondary text-sm font-medium mb-1 block">
+          Benutzername oder E-Mail
+        </label>
         <input
           id="usernameOrEmail"
           type="text"
           formControlName="usernameOrEmail"
-          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-          placeholder="Enter your username or email"
+          class="w-full px-4 py-2.5 bg-deep-blue-light/50 text-white rounded-lg my-1 border border-deep-blue-light/30 focus:border-emerald/50 focus:ring-1 focus:ring-emerald/50 outline-none transition-all duration-200"
+          placeholder="Gib deinen Benutzernamen oder E-Mail ein"
         />
 
         <div
           *ngIf="form['usernameOrEmail'].touched && form['usernameOrEmail'].errors"
-          class="text-red-500 mt-1 text-sm"
+          class="text-accent-red mt-1 text-sm"
         >
-              <span *ngIf="form['usernameOrEmail'].errors?.['required']"
-              >Username or email is required</span
-              >
+          <span *ngIf="form['usernameOrEmail'].errors?.['required']">
+            Benutzername oder E-Mail ist erforderlich
+          </span>
         </div>
       </div>
 
       <div>
-        <label for="password" class="block text-sm font-medium text-gray-300">Password</label>
+        <label for="password" class="text-text-secondary text-sm font-medium mb-1 block">
+          Passwort
+        </label>
         <input
           id="password"
           type="password"
           formControlName="password"
-          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-          placeholder="Enter your password"
+          class="w-full px-4 py-2.5 bg-deep-blue-light/50 text-white rounded-lg my-1 border border-deep-blue-light/30 focus:border-emerald/50 focus:ring-1 focus:ring-emerald/50 outline-none transition-all duration-200"
+          placeholder="Gib dein Passwort ein"
         />
 
         <div
           *ngIf="form['password'].touched && form['password'].errors"
-          class="text-red-500 mt-1 text-sm"
+          class="text-accent-red mt-1 text-sm"
         >
-          <span *ngIf="form['password'].errors?.['required']">Password is required</span>
+          <span *ngIf="form['password'].errors?.['required']">Passwort ist erforderlich</span>
         </div>
       </div>
 
-      <div>
+      <div class="pt-2">
         <button
           type="submit"
           [disabled]="loginForm.invalid || isLoading"
-          class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
+          class="button-primary w-full py-2.5 rounded"
         >
-          {{ isLoading ? 'Logging in...' : 'Login' }}
+          {{ isLoading ? 'Anmeldung läuft...' : 'Anmelden' }}
         </button>
       </div>
     </form>
 
     <div class="mt-6 text-center">
-      <p class="text-sm text-gray-400">
-        Don't have an account?
-        <a routerLink="/register" class="font-medium text-indigo-400 hover:text-indigo-300"
-        >Register</a
-        >
+      <p class="text-sm text-text-secondary">
+        Noch kein Konto?
+        <a routerLink="/register" class="font-medium text-emerald hover:text-emerald-light transition-all duration-200">
+          Registrieren
+        </a>
       </p>
     </div>
   </div>
diff --git a/frontend/src/app/feature/auth/login/login.component.ts b/frontend/src/app/feature/auth/login/login.component.ts
index 1ed3537..c4cfc4c 100644
--- a/frontend/src/app/feature/auth/login/login.component.ts
+++ b/frontend/src/app/feature/auth/login/login.component.ts
@@ -4,11 +4,12 @@ import { Router, RouterLink } from '@angular/router';
 import { LoginRequest } from '../../../model/auth/LoginRequest';
 import { AuthService } from '../../../service/auth.service';
 import { CommonModule } from '@angular/common';
+import { NavbarComponent } from '@shared/components/navbar/navbar.component';
 
 @Component({
   selector: 'app-login',
   standalone: true,
-  imports: [CommonModule, ReactiveFormsModule, RouterLink],
+  imports: [CommonModule, ReactiveFormsModule, RouterLink, NavbarComponent],
   templateUrl: './login.component.html',
 })
 export class LoginComponent {
diff --git a/frontend/src/app/feature/auth/register/register.component.html b/frontend/src/app/feature/auth/register/register.component.html
index ed02f07..a435829 100644
--- a/frontend/src/app/feature/auth/register/register.component.html
+++ b/frontend/src/app/feature/auth/register/register.component.html
@@ -1,92 +1,94 @@
-<div class="min-h-screen bg-gray-900 flex items-center justify-center">
-  <div class="max-w-md w-full bg-gray-800 rounded-lg shadow-lg p-8">
-    <h2 class="text-2xl font-bold text-white mb-6 text-center">Create Account</h2>
+<app-navbar />
 
-    <div *ngIf="errorMessage" class="bg-red-600 text-white p-4 rounded mb-4">
+<div class="min-h-screen bg-deep-blue flex items-center justify-center">
+  <div class="modal-card max-w-md w-full">
+    <h2 class="modal-heading text-center">Konto erstellen</h2>
+
+    <div *ngIf="errorMessage" class="bg-accent-red text-white p-4 rounded mb-4">
       {{ errorMessage }}
     </div>
 
-    <form [formGroup]="registerForm" (ngSubmit)="onSubmit()" class="space-y-6">
+    <form [formGroup]="registerForm" (ngSubmit)="onSubmit()" class="space-y-4">
       <div>
-        <label for="email" class="block text-sm font-medium text-gray-300">Email</label>
+        <label for="email" class="text-text-secondary text-sm font-medium mb-1 block">E-Mail</label>
         <input
           id="email"
           type="email"
           formControlName="email"
-          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-          placeholder="Enter your email"
+          class="w-full px-4 py-2.5 bg-deep-blue-light/50 text-white rounded-lg my-1 border border-deep-blue-light/30 focus:border-emerald/50 focus:ring-1 focus:ring-emerald/50 outline-none transition-all duration-200"
+          placeholder="Gib deine E-Mail-Adresse ein"
         />
 
         <div
           *ngIf="form['email'].touched && form['email'].errors"
-          class="text-red-500 mt-1 text-sm"
+          class="text-accent-red mt-1 text-sm"
         >
-          <span *ngIf="form['email'].errors?.['required']">Email is required</span>
-          <span *ngIf="form['email'].errors?.['email']"
-          >Please enter a valid email address</span
-          >
+          <span *ngIf="form['email'].errors?.['required']">E-Mail ist erforderlich</span>
+          <span *ngIf="form['email'].errors?.['email']">
+            Bitte gib eine gültige E-Mail-Adresse ein
+          </span>
         </div>
       </div>
 
       <div>
-        <label for="username" class="block text-sm font-medium text-gray-300">Username</label>
+        <label for="username" class="text-text-secondary text-sm font-medium mb-1 block">Benutzername</label>
         <input
           id="username"
           type="text"
           formControlName="username"
-          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-          placeholder="Choose a username"
+          class="w-full px-4 py-2.5 bg-deep-blue-light/50 text-white rounded-lg my-1 border border-deep-blue-light/30 focus:border-emerald/50 focus:ring-1 focus:ring-emerald/50 outline-none transition-all duration-200"
+          placeholder="Wähle einen Benutzernamen"
         />
 
         <div
           *ngIf="form['username'].touched && form['username'].errors"
-          class="text-red-500 mt-1 text-sm"
+          class="text-accent-red mt-1 text-sm"
         >
-          <span *ngIf="form['username'].errors?.['required']">Username is required</span>
-          <span *ngIf="form['username'].errors?.['minlength']"
-          >Username must be at least 3 characters</span
-          >
+          <span *ngIf="form['username'].errors?.['required']">Benutzername ist erforderlich</span>
+          <span *ngIf="form['username'].errors?.['minlength']">
+            Benutzername muss mindestens 3 Zeichen haben
+          </span>
         </div>
       </div>
 
       <div>
-        <label for="password" class="block text-sm font-medium text-gray-300">Password</label>
+        <label for="password" class="text-text-secondary text-sm font-medium mb-1 block">Passwort</label>
         <input
           id="password"
           type="password"
           formControlName="password"
-          class="mt-1 block w-full bg-gray-700 border-gray-600 text-white rounded-md shadow-sm py-2 px-3"
-          placeholder="Create a password"
+          class="w-full px-4 py-2.5 bg-deep-blue-light/50 text-white rounded-lg my-1 border border-deep-blue-light/30 focus:border-emerald/50 focus:ring-1 focus:ring-emerald/50 outline-none transition-all duration-200"
+          placeholder="Erstelle ein Passwort"
         />
 
         <div
           *ngIf="form['password'].touched && form['password'].errors"
-          class="text-red-500 mt-1 text-sm"
+          class="text-accent-red mt-1 text-sm"
         >
-          <span *ngIf="form['password'].errors?.['required']">Password is required</span>
-          <span *ngIf="form['password'].errors?.['minlength']"
-          >Password must be at least 6 characters</span
-          >
+          <span *ngIf="form['password'].errors?.['required']">Passwort ist erforderlich</span>
+          <span *ngIf="form['password'].errors?.['minlength']">
+            Passwort muss mindestens 6 Zeichen haben
+          </span>
         </div>
       </div>
 
-      <div>
+      <div class="pt-2">
         <button
           type="submit"
           [disabled]="registerForm.invalid || isLoading"
-          class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
+          class="button-primary w-full py-2.5 rounded"
         >
-          {{ isLoading ? 'Creating account...' : 'Register' }}
+          {{ isLoading ? 'Konto wird erstellt...' : 'Registrieren' }}
         </button>
       </div>
     </form>
 
     <div class="mt-6 text-center">
-      <p class="text-sm text-gray-400">
-        Already have an account?
-        <a routerLink="/login" class="font-medium text-indigo-400 hover:text-indigo-300"
-        >Login</a
-        >
+      <p class="text-sm text-text-secondary">
+        Bereits ein Konto?
+        <a routerLink="/login" class="font-medium text-emerald hover:text-emerald-light transition-all duration-200">
+          Anmelden
+        </a>
       </p>
     </div>
   </div>
diff --git a/frontend/src/app/feature/auth/register/register.component.ts b/frontend/src/app/feature/auth/register/register.component.ts
index 22a032f..4c60c4f 100644
--- a/frontend/src/app/feature/auth/register/register.component.ts
+++ b/frontend/src/app/feature/auth/register/register.component.ts
@@ -4,11 +4,12 @@ import { Router, RouterLink } from '@angular/router';
 import { RegisterRequest } from '../../../model/auth/RegisterRequest';
 import { AuthService } from '@service/auth.service';
 import { CommonModule } from '@angular/common';
+import { NavbarComponent } from '@shared/components/navbar/navbar.component';
 
 @Component({
   selector: 'app-register',
   standalone: true,
-  imports: [CommonModule, ReactiveFormsModule, RouterLink],
+  imports: [CommonModule, ReactiveFormsModule, RouterLink, NavbarComponent],
   templateUrl: './register.component.html',
 })
 export class RegisterComponent {

From 851cfe1bc8a9a7c7b75a99d2b1f428904cb03e36 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 15:30:57 +0200
Subject: [PATCH 10/13] refactor: remove unused parameters and improve
 formatting

---
 .../casino/lootboxes/LootBoxController.java   |  2 +-
 .../de/szut/casino/security/CorsFilter.java   |  3 +-
 .../de/szut/casino/slots/SlotController.java  |  7 +++--
 .../feature/landing/landing.component.html    | 30 +++++++++++--------
 .../app/feature/landing/landing.component.ts  |  4 ++-
 5 files changed, 28 insertions(+), 18 deletions(-)

diff --git a/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java b/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
index cc966b6..540e4c5 100644
--- a/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
+++ b/backend/src/main/java/de/szut/casino/lootboxes/LootBoxController.java
@@ -31,7 +31,7 @@ public class LootBoxController {
     }
 
     @PostMapping("/lootboxes/{id}")
-    public ResponseEntity<Object> purchaseLootBox(@PathVariable Long id, @RequestHeader("Authorization") String token) {
+    public ResponseEntity<Object> purchaseLootBox(@PathVariable Long id) {
         Optional<LootBoxEntity> optionalLootBox = lootBoxRepository.findById(id);
         if (optionalLootBox.isEmpty()) {
             return ResponseEntity.notFound().build();
diff --git a/backend/src/main/java/de/szut/casino/security/CorsFilter.java b/backend/src/main/java/de/szut/casino/security/CorsFilter.java
index 616cafe..032088f 100644
--- a/backend/src/main/java/de/szut/casino/security/CorsFilter.java
+++ b/backend/src/main/java/de/szut/casino/security/CorsFilter.java
@@ -18,8 +18,7 @@ public class CorsFilter implements Filter {
     private String frontendHost;
 
     @Override
-    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) 
-        throws IOException, ServletException {
+    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
         
         HttpServletResponse response = (HttpServletResponse) res;
         HttpServletRequest request = (HttpServletRequest) req;
diff --git a/backend/src/main/java/de/szut/casino/slots/SlotController.java b/backend/src/main/java/de/szut/casino/slots/SlotController.java
index 30f3973..b55e2b7 100644
--- a/backend/src/main/java/de/szut/casino/slots/SlotController.java
+++ b/backend/src/main/java/de/szut/casino/slots/SlotController.java
@@ -8,7 +8,10 @@ import de.szut.casino.user.UserEntity;
 import de.szut.casino.user.UserService;
 import jakarta.validation.Valid;
 import org.springframework.http.ResponseEntity;
-import org.springframework.web.bind.annotation.*;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RestController;
 
 import java.math.BigDecimal;
 import java.util.HashMap;
@@ -28,7 +31,7 @@ public class SlotController {
     }
 
     @PostMapping("/slots/spin")
-    public ResponseEntity<Object> spinSlots(@RequestBody @Valid BetDto betDto, @RequestHeader("Authorization") String token) {
+    public ResponseEntity<Object> spinSlots(@RequestBody @Valid BetDto betDto) {
         Optional<UserEntity> optionalUser = userService.getCurrentUser();
 
         if (optionalUser.isEmpty()) {
diff --git a/frontend/src/app/feature/landing/landing.component.html b/frontend/src/app/feature/landing/landing.component.html
index b0c1ccf..7e8539e 100644
--- a/frontend/src/app/feature/landing/landing.component.html
+++ b/frontend/src/app/feature/landing/landing.component.html
@@ -11,18 +11,24 @@
         <p class="bonus-description">+ 200 Freispiele</p>
 
         <div class="flex justify-center space-x-4 mt-6">
-          <a
-            routerLink="/register"
-            class="w-full sm:w-auto button-primary px-6 sm:px-8 py-3 shadow-lg"
-          >
-            Konto erstellen
-          </a>
-          <a
-            routerLink="/login"
-            class="w-full sm:w-auto bg-slate-700 text-white hover:bg-slate-600 px-6 sm:px-8 py-3 shadow-lg rounded"
-          >
-            Anmelden
-          </a>
+          @if (authService.isLoggedIn()) {
+            <a routerLink="/home" class="w-full sm:w-auto button-primary px-6 sm:px-8 py-3 shadow-lg">
+              Spiele
+            </a>
+          } @else {
+            <a
+              routerLink="/register"
+              class="w-full sm:w-auto button-primary px-6 sm:px-8 py-3 shadow-lg"
+            >
+              Konto erstellen
+            </a>
+            <a
+              routerLink="/login"
+              class="w-full sm:w-auto bg-slate-700 text-white hover:bg-slate-600 px-6 sm:px-8 py-3 shadow-lg rounded"
+            >
+              Anmelden
+            </a>
+          }
         </div>
       </div>
 
diff --git a/frontend/src/app/feature/landing/landing.component.ts b/frontend/src/app/feature/landing/landing.component.ts
index d1437d3..a3b77e3 100644
--- a/frontend/src/app/feature/landing/landing.component.ts
+++ b/frontend/src/app/feature/landing/landing.component.ts
@@ -1,7 +1,8 @@
-import { ChangeDetectionStrategy, Component, OnDestroy, OnInit } from '@angular/core';
+import { ChangeDetectionStrategy, Component, inject, OnDestroy, OnInit } from '@angular/core';
 import { NgFor } from '@angular/common';
 import { NavbarComponent } from '@shared/components/navbar/navbar.component';
 import { RouterLink } from '@angular/router';
+import { AuthService } from '@service/auth.service';
 
 @Component({
   selector: 'app-landing-page',
@@ -13,6 +14,7 @@ import { RouterLink } from '@angular/router';
 export class LandingComponent implements OnInit, OnDestroy {
   currentSlide = 0;
   private autoplayInterval: ReturnType<typeof setInterval> | undefined;
+  authService: AuthService = inject(AuthService);
 
   ngOnInit() {
     this.startAutoplay();

From 84250969aa8473dae2acb4ab59898458d05ba271 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 15:35:33 +0200
Subject: [PATCH 11/13] feat(auth): add user refresh functionality in services

---
 .../game/blackjack/blackjack.component.ts     | 14 ++++++------
 frontend/src/app/service/auth.service.ts      | 22 +++++++++----------
 frontend/src/app/service/user.service.ts      |  6 +++++
 3 files changed, 24 insertions(+), 18 deletions(-)

diff --git a/frontend/src/app/feature/game/blackjack/blackjack.component.ts b/frontend/src/app/feature/game/blackjack/blackjack.component.ts
index e261260..2763b55 100644
--- a/frontend/src/app/feature/game/blackjack/blackjack.component.ts
+++ b/frontend/src/app/feature/game/blackjack/blackjack.component.ts
@@ -83,7 +83,7 @@ export default class BlackjackComponent implements OnInit {
 
     if (isGameOver) {
       console.log('Game is over, state:', game.state);
-      // this.userService.refreshCurrentUser();
+      this.userService.refreshCurrentUser();
       timer(1500).subscribe(() => {
         this.showGameResult.set(true);
         console.log('Game result dialog shown after delay');
@@ -97,7 +97,7 @@ export default class BlackjackComponent implements OnInit {
     this.blackjackService.startGame(bet).subscribe({
       next: (game) => {
         this.updateGameState(game);
-        // this.userService.refreshCurrentUser();
+        this.userService.refreshCurrentUser();
         this.isActionInProgress.set(false);
       },
       error: (error) => {
@@ -116,7 +116,7 @@ export default class BlackjackComponent implements OnInit {
       next: (game) => {
         this.updateGameState(game);
         if (game.state !== 'IN_PROGRESS') {
-          // this.userService.refreshCurrentUser();
+          this.userService.refreshCurrentUser();
         }
         this.isActionInProgress.set(false);
       },
@@ -141,7 +141,7 @@ export default class BlackjackComponent implements OnInit {
     this.blackjackService.stand(this.currentGameId()!).subscribe({
       next: (game) => {
         this.updateGameState(game);
-        // this.userService.refreshCurrentUser();
+        this.userService.refreshCurrentUser();
         this.isActionInProgress.set(false);
       },
       error: (error) => {
@@ -184,7 +184,7 @@ export default class BlackjackComponent implements OnInit {
   onCloseGameResult(): void {
     console.log('Closing game result dialog');
     this.showGameResult.set(false);
-    // this.userService.refreshCurrentUser();
+    this.userService.refreshCurrentUser();
   }
 
   onCloseDebtDialog(): void {
@@ -195,11 +195,11 @@ export default class BlackjackComponent implements OnInit {
     if (error instanceof HttpErrorResponse) {
       if (error.status === 400 && error.error?.error === 'Invalid state') {
         this.gameInProgress.set(false);
-        // this.userService.refreshCurrentUser();
+        this.userService.refreshCurrentUser();
       } else if (error.status === 500) {
         console.log('Server error occurred. The game may have been updated in another session.');
         this.gameInProgress.set(false);
-        // this.userService.refreshCurrentUser();
+        this.userService.refreshCurrentUser();
         if (this.currentGameId()) {
           this.refreshGameState(this.currentGameId()!);
         }
diff --git a/frontend/src/app/service/auth.service.ts b/frontend/src/app/service/auth.service.ts
index 1a118cd..47e1fd3 100644
--- a/frontend/src/app/service/auth.service.ts
+++ b/frontend/src/app/service/auth.service.ts
@@ -66,6 +66,17 @@ export class AuthService {
     return localStorage.getItem(TOKEN_KEY);
   }
 
+  public loadCurrentUser(): void {
+    this.http.get<User>(`${this.userUrl}/me`).subscribe({
+      next: (user) => {
+        this.setUser(user);
+      },
+      error: () => {
+        this.logout();
+      },
+    });
+  }
+
   private setToken(token: string): void {
     localStorage.setItem(TOKEN_KEY, token);
   }
@@ -80,17 +91,6 @@ export class AuthService {
     return user ? JSON.parse(user) : null;
   }
 
-  private loadCurrentUser(): void {
-    this.http.get<User>(`${this.userUrl}/me`).subscribe({
-      next: (user) => {
-        this.setUser(user);
-      },
-      error: () => {
-        this.logout();
-      },
-    });
-  }
-
   getUser(): User | null {
     return this.currentUserValue;
   }
diff --git a/frontend/src/app/service/user.service.ts b/frontend/src/app/service/user.service.ts
index 5391945..aa2a687 100644
--- a/frontend/src/app/service/user.service.ts
+++ b/frontend/src/app/service/user.service.ts
@@ -3,6 +3,7 @@ import { HttpClient } from '@angular/common/http';
 import { BehaviorSubject, catchError, EMPTY, Observable, tap } from 'rxjs';
 import { User } from '../model/User';
 import { environment } from '@environments/environment';
+import { AuthService } from '@service/auth.service';
 
 @Injectable({
   providedIn: 'root',
@@ -12,6 +13,7 @@ export class UserService {
 
   private currentUserSubject = new BehaviorSubject<User | null>(null);
   private http: HttpClient = inject(HttpClient);
+  private authService: AuthService = inject(AuthService);
 
 
   public getCurrentUser(): Observable<User | null> {
@@ -35,4 +37,8 @@ export class UserService {
       this.currentUserSubject.next(updatedUser);
     }
   }
+
+  public refreshCurrentUser(): void {
+    this.authService.loadCurrentUser();
+  }
 }

From 91e546226d7875f67921575afc6686c5badc9564 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 16:23:06 +0200
Subject: [PATCH 12/13] chore: shitty ahh rebase

---
 frontend/src/app/service/user.service.ts          | 15 +++++----------
 .../shared/components/navbar/navbar.component.ts  |  2 ++
 2 files changed, 7 insertions(+), 10 deletions(-)

diff --git a/frontend/src/app/service/user.service.ts b/frontend/src/app/service/user.service.ts
index aa2a687..7530f79 100644
--- a/frontend/src/app/service/user.service.ts
+++ b/frontend/src/app/service/user.service.ts
@@ -2,22 +2,20 @@ import { inject, Injectable } from '@angular/core';
 import { HttpClient } from '@angular/common/http';
 import { BehaviorSubject, catchError, EMPTY, Observable, tap } from 'rxjs';
 import { User } from '../model/User';
-import { environment } from '@environments/environment';
 import { AuthService } from '@service/auth.service';
 
 @Injectable({
   providedIn: 'root',
 })
 export class UserService {
-  private apiUrl = `${environment.apiUrl}/users`;
-
-  private currentUserSubject = new BehaviorSubject<User | null>(null);
+  public currentUserSubject = new BehaviorSubject<User | null>(null);
+  public currentUser$ = this.currentUserSubject.asObservable();
   private http: HttpClient = inject(HttpClient);
-  private authService: AuthService = inject(AuthService);
+  private authService = inject(AuthService);
 
 
   public getCurrentUser(): Observable<User | null> {
-    return this.http.get<User | null>('/backend/user').pipe(
+    return this.http.get<User | null>('/backend/users/me').pipe(
       catchError(() => EMPTY),
       tap((user) => this.currentUserSubject.next(user))
     );
@@ -25,6 +23,7 @@ export class UserService {
 
   public refreshCurrentUser(): void {
     this.getCurrentUser().subscribe();
+    this.authService.loadCurrentUser();
   }
 
   public updateLocalBalance(amount: number): void {
@@ -37,8 +36,4 @@ export class UserService {
       this.currentUserSubject.next(updatedUser);
     }
   }
-
-  public refreshCurrentUser(): void {
-    this.authService.loadCurrentUser();
-  }
 }
diff --git a/frontend/src/app/shared/components/navbar/navbar.component.ts b/frontend/src/app/shared/components/navbar/navbar.component.ts
index bdc941c..c57a8a5 100644
--- a/frontend/src/app/shared/components/navbar/navbar.component.ts
+++ b/frontend/src/app/shared/components/navbar/navbar.component.ts
@@ -3,6 +3,7 @@ import { RouterModule } from '@angular/router';
 import { AuthService } from '@service/auth.service';
 import { Subscription } from 'rxjs';
 import { AnimatedNumberComponent } from '@blackjack/components/animated-number/animated-number.component';
+import { UserService } from '@service/user.service';
 
 @Component({
   selector: 'app-navbar',
@@ -19,6 +20,7 @@ export class NavbarComponent implements OnInit, OnDestroy {
   private userSubscription: Subscription | undefined;
   private authSubscription: Subscription | undefined;
   public balance = signal(0);
+  private userService = inject(UserService);
 
   ngOnInit() {
     // Subscribe to auth changes

From 5a0d7b2313603fb8baba57fbd1cc7d3f57203ba4 Mon Sep 17 00:00:00 2001
From: Constantin Simonis <constantin@simonis.lol>
Date: Wed, 7 May 2025 16:26:21 +0200
Subject: [PATCH 13/13] chore: prettier

---
 frontend/src/app/app.component.ts                   |  3 +--
 .../src/app/feature/auth/login/login.component.html |  5 ++++-
 .../feature/auth/register/register.component.html   | 13 ++++++++++---
 .../src/app/feature/landing/landing.component.html  |  5 ++++-
 .../transaction-history.component.ts                |  9 ++++++++-
 frontend/src/app/service/user.service.ts            |  1 -
 .../shared/components/navbar/navbar.component.ts    |  9 ++++++++-
 7 files changed, 35 insertions(+), 10 deletions(-)

diff --git a/frontend/src/app/app.component.ts b/frontend/src/app/app.component.ts
index aa232ac..30666e9 100644
--- a/frontend/src/app/app.component.ts
+++ b/frontend/src/app/app.component.ts
@@ -12,5 +12,4 @@ import { FooterComponent } from '@shared/components/footer/footer.component';
   styleUrl: './app.component.css',
   changeDetection: ChangeDetectionStrategy.OnPush,
 })
-export class AppComponent {
-}
+export class AppComponent {}
diff --git a/frontend/src/app/feature/auth/login/login.component.html b/frontend/src/app/feature/auth/login/login.component.html
index fc4d591..c41002d 100644
--- a/frontend/src/app/feature/auth/login/login.component.html
+++ b/frontend/src/app/feature/auth/login/login.component.html
@@ -65,7 +65,10 @@
     <div class="mt-6 text-center">
       <p class="text-sm text-text-secondary">
         Noch kein Konto?
-        <a routerLink="/register" class="font-medium text-emerald hover:text-emerald-light transition-all duration-200">
+        <a
+          routerLink="/register"
+          class="font-medium text-emerald hover:text-emerald-light transition-all duration-200"
+        >
           Registrieren
         </a>
       </p>
diff --git a/frontend/src/app/feature/auth/register/register.component.html b/frontend/src/app/feature/auth/register/register.component.html
index a435829..3dbeeb7 100644
--- a/frontend/src/app/feature/auth/register/register.component.html
+++ b/frontend/src/app/feature/auth/register/register.component.html
@@ -31,7 +31,9 @@
       </div>
 
       <div>
-        <label for="username" class="text-text-secondary text-sm font-medium mb-1 block">Benutzername</label>
+        <label for="username" class="text-text-secondary text-sm font-medium mb-1 block"
+          >Benutzername</label
+        >
         <input
           id="username"
           type="text"
@@ -52,7 +54,9 @@
       </div>
 
       <div>
-        <label for="password" class="text-text-secondary text-sm font-medium mb-1 block">Passwort</label>
+        <label for="password" class="text-text-secondary text-sm font-medium mb-1 block"
+          >Passwort</label
+        >
         <input
           id="password"
           type="password"
@@ -86,7 +90,10 @@
     <div class="mt-6 text-center">
       <p class="text-sm text-text-secondary">
         Bereits ein Konto?
-        <a routerLink="/login" class="font-medium text-emerald hover:text-emerald-light transition-all duration-200">
+        <a
+          routerLink="/login"
+          class="font-medium text-emerald hover:text-emerald-light transition-all duration-200"
+        >
           Anmelden
         </a>
       </p>
diff --git a/frontend/src/app/feature/landing/landing.component.html b/frontend/src/app/feature/landing/landing.component.html
index 7e8539e..1e5627d 100644
--- a/frontend/src/app/feature/landing/landing.component.html
+++ b/frontend/src/app/feature/landing/landing.component.html
@@ -12,7 +12,10 @@
 
         <div class="flex justify-center space-x-4 mt-6">
           @if (authService.isLoggedIn()) {
-            <a routerLink="/home" class="w-full sm:w-auto button-primary px-6 sm:px-8 py-3 shadow-lg">
+            <a
+              routerLink="/home"
+              class="w-full sm:w-auto button-primary px-6 sm:px-8 py-3 shadow-lg"
+            >
               Spiele
             </a>
           } @else {
diff --git a/frontend/src/app/feature/transaction-history/transaction-history.component.ts b/frontend/src/app/feature/transaction-history/transaction-history.component.ts
index dabc255..338ef4e 100644
--- a/frontend/src/app/feature/transaction-history/transaction-history.component.ts
+++ b/frontend/src/app/feature/transaction-history/transaction-history.component.ts
@@ -1,4 +1,11 @@
-import { ChangeDetectionStrategy, Component, EventEmitter, inject, Input, Output } from '@angular/core';
+import {
+  ChangeDetectionStrategy,
+  Component,
+  EventEmitter,
+  inject,
+  Input,
+  Output,
+} from '@angular/core';
 import { TransactionService } from '@service/transaction.service';
 import { Observable } from 'rxjs';
 import { AsyncPipe, CurrencyPipe, DatePipe, NgIf } from '@angular/common';
diff --git a/frontend/src/app/service/user.service.ts b/frontend/src/app/service/user.service.ts
index 7530f79..d7199b3 100644
--- a/frontend/src/app/service/user.service.ts
+++ b/frontend/src/app/service/user.service.ts
@@ -13,7 +13,6 @@ export class UserService {
   private http: HttpClient = inject(HttpClient);
   private authService = inject(AuthService);
 
-
   public getCurrentUser(): Observable<User | null> {
     return this.http.get<User | null>('/backend/users/me').pipe(
       catchError(() => EMPTY),
diff --git a/frontend/src/app/shared/components/navbar/navbar.component.ts b/frontend/src/app/shared/components/navbar/navbar.component.ts
index c57a8a5..494b61f 100644
--- a/frontend/src/app/shared/components/navbar/navbar.component.ts
+++ b/frontend/src/app/shared/components/navbar/navbar.component.ts
@@ -1,4 +1,11 @@
-import { ChangeDetectionStrategy, Component, inject, OnDestroy, OnInit, signal } from '@angular/core';
+import {
+  ChangeDetectionStrategy,
+  Component,
+  inject,
+  OnDestroy,
+  OnInit,
+  signal,
+} from '@angular/core';
 import { RouterModule } from '@angular/router';
 import { AuthService } from '@service/auth.service';
 import { Subscription } from 'rxjs';