lint

Ignore TCP errors
Fixes: #594
2026-01-27 12:33:40 +07:00 · 2026-01-26 11:41:04 -08:00
94 changed files with 2030 additions and 5377 deletions
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -28,16 +28,20 @@ jobs:
          npx tailwindcss -i .vitepress/theme/style.css -o .vitepress/theme/theme.css -c .vitepress/tailwind.config.js
          npm run docs:build

-      - name: Push to docs repository
-        run: |
-          git clone https://${{ secrets.STATIC_REPO_TOKEN }}@github.com/${{ secrets.STATIC_REPO }}.git target-repo
-          rm -rf target-repo/srv/opengist
-          mkdir -p target-repo/srv/opengist
-          cp -r docs/.vitepress/dist/* target-repo/srv/opengist/
-          cd target-repo
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add .
-          git commit -m "Deploy docs from ${{ github.repository }}@${{ github.sha }}" || echo "No changes to commit"
-          git pull --rebase
-          git push
+      - name: Deploy to server
+        uses: appleboy/scp-action@master
+        with:
+          host: ${{ secrets.SERVER_HOST }}
+          username: ${{ secrets.SERVER_USERNAME }}
+          key: ${{ secrets.SERVER_SSH_KEY }}
+          source: "docs/.vitepress/dist/*"
+          target: ${{ secrets.SERVER_PATH }}
+
+      - name: Update remote docs
+        uses: appleboy/ssh-action@master
+        with:
+          host: ${{ secrets.SERVER_HOST }}
+          username: ${{ secrets.SERVER_USERNAME }}
+          key: ${{ secrets.SERVER_SSH_KEY }}
+          script: |
+            ${{ secrets.UPDATE_DOCS }}
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -100,7 +100,7 @@ jobs:
    strategy:
      fail-fast: false
      matrix:
-        os: ["ubuntu-latest", "macOS-latest"]
+        os: ["ubuntu-latest", "macOS-latest", "windows-latest"]
        go: ["1.25"]
        database: ["sqlite"]
    runs-on: ${{ matrix.os }}
--- a/.github/workflows/helm.yml
+++ b/.github/workflows/helm.yml
@@ -34,16 +34,20 @@ jobs:
            helm repo index --url https://helm.opengist.io --merge index.yaml .
          fi

-      - name: Push to docs repository
-        run: |
-          git clone https://${{ secrets.STATIC_REPO_TOKEN }}@github.com/${{ secrets.STATIC_REPO }}.git target-repo
-          mkdir -p target-repo/helm
-          cp helm/*.tgz target-repo/srv/helm/
-          cp helm/index.yaml target-repo/srv/helm/
-          cd target-repo
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add .
-          git commit -m "Deploy helm chart from ${{ github.repository }}@${{ github.sha }}" || echo "No changes to commit"
-          git pull --rebase
-          git push
+      - name: Deploy to server
+        uses: appleboy/scp-action@master
+        with:
+          host: ${{ secrets.SERVER_HOST }}
+          username: ${{ secrets.SERVER_USERNAME }}
+          key: ${{ secrets.SERVER_SSH_KEY }}
+          source: "./helm/*.tgz,./helm/index.yaml"
+          target: ${{ secrets.HELM_SERVER_PATH }}
+
+      - name: Update remote helm repository
+        uses: appleboy/ssh-action@master
+        with:
+          host: ${{ secrets.SERVER_HOST }}
+          username: ${{ secrets.SERVER_USERNAME }}
+          key: ${{ secrets.SERVER_SSH_KEY }}
+          script: |
+            ${{ secrets.UPDATE_HELM_REPO }}
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,41 +1,5 @@
 # Changelog

-## [1.12.1](https://github.com/thomiceli/opengist/compare/v1.12.0...v1.12.1) - 2026-02-03
-See here how to [update](https://opengist.io/docs/update) Opengist.
-
-### Added
- More translation strings (#605)
-
-### Fixed
- Allow Access Tokens with Required Login (#611)
- Make text files renderable with mimetypes different than text/plain (#612)
- Improve security on raw files endpoint (#613)
-
-> Admins of Opengist instances may want to run "Synchronize all gists previews" in the admin panel.
-
-## [1.12.0](https://github.com/thomiceli/opengist/compare/v1.11.1...v1.12.0) - 2026-01-27
-See here how to [update](https://opengist.io/docs/update) Opengist.
-
-### Added
- Access tokens (#602)
- Fuzzy search for gist search (#555)
- Allow Unicode letters/numbers in topics (#597)
- Resize editor height (#600)
- More translation strings (#516) (#604)
-
-### Fixed
- Don't panic on Go TCP errors (#601)
-
-### Other
- Reduce footprint of Docker image (#515)
- Update Go + JS deps (#603)
- Configure Dependabot for updates on Go and NPM (#449)
-
-### [Helm Chart](helm/opengist)
- Use existing pvc claim of provided (#547)
- Adds StatefulSet support (#549)
- Move Prom metrics to a dedicated port + support ServiceMonitor (#599)
-
 ## [1.11.1](https://github.com/thomiceli/opengist/compare/v1.11.0...v1.11.1) - 2025-09-30
 See here how to [update](https://opengist.io/docs/update) Opengist.

--- a/10
+++ b/10
@@ -8,11 +8,11 @@ RUN apk update && \
        musl-dev \
        libstdc++

-COPY --from=golang:1.25.6-alpine3.22 /usr/local/go/ /usr/local/go/
+COPY --from=golang:1.25-alpine3.22 /usr/local/go/ /usr/local/go/
 ENV PATH="/usr/local/go/bin:${PATH}"
 ENV CGO_ENABLED=0

-COPY --from=node:24.13.0-alpine3.22 /usr/local/ /usr/local/
+COPY --from=node:24.9.0-alpine3.22 /usr/local/ /usr/local/
 ENV NODE_PATH="/usr/local/lib/node_modules"
 ENV PATH="/usr/local/bin:${PATH}"

@@ -31,7 +31,7 @@ RUN apk add --no-cache \
    gnupg \
    xz

-EXPOSE 6157 6158 2222 16157
+EXPOSE 6157 2222 16157

 RUN git config --global --add safe.directory /opengist
 RUN make install
@@ -46,7 +46,7 @@ FROM base AS build
 RUN make


-FROM alpine:3.22 AS prod
+FROM alpine:3.22 as prod

 RUN apk update && \
    apk add --no-cache \
@@ -64,7 +64,7 @@ COPY --from=build --chown=opengist:opengist /opengist/config.yml /config.yml
 COPY --from=build --chown=opengist:opengist /opengist/opengist .
 COPY --from=build --chown=opengist:opengist /opengist/docker ./docker

-EXPOSE 6157 6158 2222
+EXPOSE 6157 2222
 VOLUME /opengist
 HEALTHCHECK --interval=60s --timeout=30s --start-period=15s --retries=3 CMD curl -f http://localhost:6157/healthcheck || exit 1
 ENTRYPOINT ["./docker/entrypoint.sh"]
--- a/README.md
+++ b/README.md
@@ -38,7 +38,7 @@ It is similar to [GitHub Gist](https://gist.github.com/), but open-source and co
 Docker [images](https://github.com/thomiceli/opengist/pkgs/container/opengist) are available for each release :

 ```shell
-docker pull ghcr.io/thomiceli/opengist:1.12
+docker pull ghcr.io/thomiceli/opengist:1.11
 ```

 It can be used in a `docker-compose.yml` file :
@@ -50,7 +50,7 @@ It can be used in a `docker-compose.yml` file :
 ```yml
 services:
  opengist:
-    image: ghcr.io/thomiceli/opengist:1.12
+    image: ghcr.io/thomiceli/opengist:1.11
    container_name: opengist
    restart: unless-stopped
    ports:
@@ -77,9 +77,9 @@ Download the archive for your system from the release page [here](https://github

 ```shell
 # example for linux amd64
-wget https://github.com/thomiceli/opengist/releases/download/v1.12.1/opengist1.12.1-linux-amd64.tar.gz
+wget https://github.com/thomiceli/opengist/releases/download/v1.11.1/opengist1.11.1-linux-amd64.tar.gz

-tar xzvf opengist1.12.1-linux-amd64.tar.gz
+tar xzvf opengist1.11.1-linux-amd64.tar.gz
 cd opengist
 chmod +x opengist
 ./opengist # with or without `--config config.yml`
--- a/config.yml
+++ b/config.yml
@@ -55,15 +55,9 @@ http.git-enabled: true
 # File permissions for Unix socket (octal format). Default: 0666
 unix-socket-permissions: 0666

-# Enable or disable the Prometheus metrics server (either `true` or `false`). Default: false
+# Enable or disable the metrics endpoint (either `true` or `false`). Default: false
 metrics.enabled: false

-# The host on which the metrics server should bind. Default: 0.0.0.0
-metrics.host: 0.0.0.0
-
-# The port on which the metrics server should listen. Default: 6158
-metrics.port: 6158
-
 # SSH built-in server configuration
 # Note: it is not using the SSH daemon from your machine (yet)

--- a/docs/.vitepress/config.mts
+++ b/docs/.vitepress/config.mts
@@ -55,7 +55,6 @@ export default defineConfig({
                text: 'Usage', base: '/docs/usage', items: [
                    {text: 'Init via Git', link: '/init-via-git'},
                    {text: 'Embed Gist', link: '/embed'},
-                    {text: 'Access Tokens', link: '/access-tokens'},
                    {text: 'Gist as JSON', link: '/gist-json'},
                    {text: 'Import Gists from Github', link: '/import-from-github-gist'},
                    {text: 'Git push options', link: '/git-push-options'},
--- a/docs/.vitepress/theme/Home.vue
+++ b/docs/.vitepress/theme/Home.vue
@@ -19,7 +19,7 @@ export default {
        <div class="mx-auto  lg:text-center">
          <img class="rotating h-36 mx-auto my-8 " src="https://raw.githubusercontent.com/thomiceli/opengist/master/public/img/opengist.svg" alt="" >
          <a target="_blank" href="https://github.com/thomiceli/opengist/releases" class="inline-flex items-center rounded-full bg-indigo-100 hover:bg-indigo-200 px-4 py-1.5 text-lg font-medium text-indigo-700">
-              <span class="pr-1">Released 1.12</span>
+              <span class="pr-1">Released 1.11</span>
                        <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="size-4">
              <path stroke-linecap="round" stroke-linejoin="round" d="m4.5 19.5 15-15m0 0H8.25m11.25 0v11.25" />
            </svg>
--- a/docs/configuration/cheat-sheet.md
+++ b/docs/configuration/cheat-sheet.md
@@ -21,9 +21,7 @@ aside: false
 | http.port               | OG_HTTP_PORT                        | `6157`                | The port on which the HTTP server should listen.                                                                                                                                                                                 |
 | http.git-enabled        | OG_HTTP_GIT_ENABLED                 | `true`                | Enable or disable git operations (clone, pull, push) via HTTP. (`true` or `false`)                                                                                                                                               |
 | unix-socket-permissions | OG_UNIX_SOCKET_PERMISSIONS          | `0666`                | File permissions for Unix socket (octal format).                                                                                                                                                                                 |
-| metrics.enabled         | OG_METRICS_ENABLED                  | `false`               | Enable or disable Prometheus metrics server (`true` or `false`)                                                                                                                                                                  |
-| metrics.host            | OG_METRICS_HOST                     | `0.0.0.0`             | The host on which the metrics server should bind.                                                                                                                                                                                |
-| metrics.port            | OG_METRICS_PORT                     | `6158`                | The port on which the metrics server should listen.                                                                                                                                                                              |
+| metrics.enabled         | OG_METRICS_ENABLED                  | `false`               | Enable or disable Prometheus metrics endpoint at `/metrics` (`true` or `false`)                                                                                                                                                  |
 | ssh.git-enabled         | OG_SSH_GIT_ENABLED                  | `true`                | Enable or disable git operations (clone, pull, push) via SSH. (`true` or `false`)                                                                                                                                                |
 | ssh.host                | OG_SSH_HOST                         | `0.0.0.0`             | The host on which the SSH server should bind.                                                                                                                                                                                    |
 | ssh.port                | OG_SSH_PORT                         | `2222`                | The port on which the SSH server should listen.                                                                                                                                                                                  |
@@ -43,8 +41,6 @@ aside: false
 | oidc.client-key         | OG_OIDC_CLIENT_KEY                  | none                  | The client key for the OpenID application.                                                                                                                                                                                       |
 | oidc.secret             | OG_OIDC_SECRET                      | none                  | The secret for the OpenID application.                                                                                                                                                                                           |
 | oidc.discovery-url      | OG_OIDC_DISCOVERY_URL               | none                  | Discovery endpoint of the OpenID provider.                                                                                                                                                                                       |
-| oidc.group-claim-name   | OG_OIDC_GROUP_CLAIM_NAME            | none                  | Name of the claim containing the groups.                                                                                                                                                                                         |
-| oidc.admin-group        | OG_OIDC_ADMIN_GROUP                 | none                  | Name of the group that should receive admin rights.                                                                                                                                                                              |
 | ldap.url                | OG_LDAP_URL                         | none                  | URL of the LDAP instance; if not set, LDAP authentication is disabled                                                                                                                                                            |
 | ldap.bind-dn            | OG_LDAP_BIND_DN                     | none                  | Bind DN to authenticate against the LDAP. e.g: cn=read-only-admin,dc=example,dc=com                                                                                                                                              |
 | ldap.bind-credentials   | OG_LDAP_BIND_CREDENTIALS            | none                  | The password for the Bind DN.                                                                                                                                                                                                    |
--- a/docs/configuration/metrics.md
+++ b/docs/configuration/metrics.md
@@ -4,10 +4,10 @@ Opengist offers built-in support for Prometheus metrics to help you monitor the

 ## Enabling metrics

-By default, the metrics server is disabled for security and performance reasons. To enable it, update your configuration as stated in the [configuration cheat sheet](cheat-sheet.md):
+By default, the metrics endpoint is disabled for security and performance reasons. To enable it, update your configuration as stated in the [configuration cheat sheet](cheat-sheet.md):

 ```yaml
-metrics.enabled: true
+metrics.enabled = true
 ```

 Alternatively, you can use the environment variable:
@@ -16,25 +16,7 @@ Alternatively, you can use the environment variable:
 OG_METRICS_ENABLED=true
 ```

-Once enabled, metrics are available on a separate server at `http://0.0.0.0:6158/metrics` by default.
-
-## Configuration
-
-The metrics server runs on a separate port from the main application. By default, it binds to `0.0.0.0` (all interfaces) on port `6158`.
-
-| Config Key     | Environment Variable | Default     | Description                                    |
-|----------------|---------------------|-------------|------------------------------------------------|
-| metrics.enabled | OG_METRICS_ENABLED  | `false`     | Enable or disable the metrics server           |
-| metrics.host    | OG_METRICS_HOST     | `0.0.0.0`   | The host on which the metrics server binds     |
-| metrics.port    | OG_METRICS_PORT     | `6158`      | The port on which the metrics server listens   |
-
-Example configuration:
-
-```yaml
-metrics.enabled: true
-metrics.host: 0.0.0.0
-metrics.port: 6158
-```
+Once enabled, metrics are available at the /metrics endpoint.

 ## Available metrics

@@ -54,6 +36,14 @@ These standard metrics follow the Prometheus naming convention and include label

 ## Security Considerations

-The metrics server binds to `0.0.0.0` by default, making it accessible on all network interfaces. This default works well for containerized deployments (Docker, Kubernetes) where network isolation is handled at the infrastructure level.
+The metrics endpoint exposes information about your Opengist instance that might be sensitive in some environments. Consider using a reverse proxy with authentication for the `/metrics` endpoint if your Opengist instance is publicly accessible.

-For bare-metal or VM deployments where the metrics port may be exposed, consider restricting to localhost by setting `metrics.host: 127.0.0.1` to only allow local access.
+Example with Nginx:
+
+```shell
+location /metrics {
+    auth_basic "Metrics";
+    auth_basic_user_file /etc/nginx/.htpasswd;
+    proxy_pass http://localhost:6157/metrics;
+}
+```
--- a/docs/contributing/development.md
+++ b/docs/contributing/development.md
@@ -25,8 +25,8 @@ Opengist is now running on port 6157, you can browse http://localhost:6157

 Requirements:
 * [Git](https://git-scm.com/downloads) (2.28+)
-* [Go](https://go.dev/doc/install) (1.25+)
-* [Node.js](https://nodejs.org/en/download/) (20+)
+* [Go](https://go.dev/doc/install) (1.23+)
+* [Node.js](https://nodejs.org/en/download/) (16+)
 * [Make](https://linux.die.net/man/1/make) (optional, but easier)

 ```shell
--- a/docs/installation/binary.md
+++ b/docs/installation/binary.md
@@ -4,9 +4,9 @@ Download the archive for your system from the release page [here](https://github

 ```shell
 # example for linux amd64
-wget https://github.com/thomiceli/opengist/releases/download/v1.12.1/opengist1.12.1-linux-amd64.tar.gz
+wget https://github.com/thomiceli/opengist/releases/download/v1.11.1/opengist1.11.1-linux-amd64.tar.gz

-tar xzvf opengist1.12.1-linux-amd64.tar.gz
+tar xzvf opengist1.11.1-linux-amd64.tar.gz
 cd opengist
 chmod +x opengist
 ./opengist # with or without `--config config.yml`
--- a/docs/installation/source.md
+++ b/docs/installation/source.md
@@ -2,15 +2,15 @@

 Requirements:
 * [Git](https://git-scm.com/downloads) (2.28+)
-* [Go](https://go.dev/doc/install) (1.25+)
-* [Node.js](https://nodejs.org/en/download/) (20+)
+* [Go](https://go.dev/doc/install) (1.23+)
+* [Node.js](https://nodejs.org/en/download/) (16+)
 * [Make](https://linux.die.net/man/1/make) (optional, but easier)

 ```shell
 git clone https://github.com/thomiceli/opengist
 cd opengist

-git checkout v1.12.1 # optional, to checkout the latest release
+git checkout v1.11.1 # optional, to checkout the latest release

 make
 ./opengist
--- a/docs/update.md
+++ b/docs/update.md
@@ -27,9 +27,9 @@ Stop the running instance; then like your first installation of Opengist, downlo

 ```shell
 # example for linux amd64
-wget https://github.com/thomiceli/opengist/releases/download/v1.12.1/opengist1.12.1-linux-amd64.tar.gz
+wget https://github.com/thomiceli/opengist/releases/download/v1.11.1/opengist1.11.1-linux-amd64.tar.gz

-tar xzvf opengist1.12.1-linux-amd64.tar.gz
+tar xzvf opengist1.11.1-linux-amd64.tar.gz
 cd opengist
 chmod +x opengist
 ./opengist # with or without `--config config.yml`
--- a/docs/usage/access-tokens.md
+++ b/docs/usage/access-tokens.md
@@ -1,26 +0,0 @@
-# Access tokens
-
-Access tokens are used to access your private gists and their raw content. For now, it is the only use while a future API is being developed.
-
-## Creating an access token
-
-To create an access token, follow these steps:
-1. Go to Settings
-2. Select the "Access Tokens" menu
-3. Choose a name for your token, the scope and an expiration date (optional), then click "Create Access Token"
-
-## Using an access token
-
-Once you have created an access token, you can use it to access your private gists with it.
-
-Replace `<token>` with your actual access token in the following examples.
-
-```shell
-# Access raw content of a private gist, latest revision for "file.txt". Note: this URL is obtained from the "Raw" button on the gist page.
-curl -H "Authorization: Token <token>" \
- http://opengist.example.com/user/gist/raw/HEAD/file.txt
-
-# Access the JSON representation of a private gist. See "Gist as JSON" documentation for more details.
-curl -H "Authorization: Token <token>" \
- http://opengist.example.com/user/gist.json
-```
--- a/go.mod
+++ b/go.mod
@@ -1,36 +1,36 @@
 module github.com/thomiceli/opengist

-go 1.25.5
+go 1.25.1

 require (
 	github.com/Kunde21/markdownfmt/v3 v3.1.0
-	github.com/alecthomas/chroma/v2 v2.23.1
+	github.com/alecthomas/chroma/v2 v2.21.1
 	github.com/blevesearch/bleve/v2 v2.5.7
 	github.com/dustin/go-humanize v1.0.1
-	github.com/gabriel-vasile/mimetype v1.4.13
+	github.com/gabriel-vasile/mimetype v1.4.12
 	github.com/glebarez/sqlite v1.11.0
 	github.com/go-ldap/ldap/v3 v3.4.12
 	github.com/go-playground/validator/v10 v10.30.1
-	github.com/go-webauthn/webauthn v0.16.0
+	github.com/go-webauthn/webauthn v0.15.0
 	github.com/google/uuid v1.6.0
 	github.com/gorilla/schema v1.4.1
 	github.com/gorilla/securecookie v1.1.2
 	github.com/gorilla/sessions v1.4.0
 	github.com/labstack/echo-contrib v0.17.4
-	github.com/labstack/echo/v4 v4.15.1
+	github.com/labstack/echo/v4 v4.15.0
 	github.com/markbates/goth v1.82.0
-	github.com/meilisearch/meilisearch-go v0.36.1
+	github.com/meilisearch/meilisearch-go v0.35.1
 	github.com/pquerna/otp v1.5.0
 	github.com/prometheus/client_golang v1.23.2
 	github.com/rs/zerolog v1.34.0
 	github.com/stretchr/testify v1.11.1
 	github.com/urfave/cli/v2 v2.27.7
-	github.com/yuin/goldmark v1.7.16
+	github.com/yuin/goldmark v1.7.15
 	github.com/yuin/goldmark-emoji v1.0.6
 	github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc
 	go.abhg.dev/goldmark/mermaid v0.6.0
-	golang.org/x/crypto v0.48.0
-	golang.org/x/text v0.34.0
+	golang.org/x/crypto v0.46.0
+	golang.org/x/text v0.32.0
 	gopkg.in/yaml.v3 v3.0.1
 	gorm.io/driver/mysql v1.6.0
 	gorm.io/driver/postgres v1.6.0
@@ -39,32 +39,31 @@ require (

 require (
 	filippo.io/edwards25519 v1.1.0 // indirect
-	github.com/Azure/go-ntlmssp v0.1.0 // indirect
-	github.com/RoaringBitmap/roaring/v2 v2.14.4 // indirect
+	github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 // indirect
+	github.com/RoaringBitmap/roaring/v2 v2.10.0 // indirect
 	github.com/andybalholm/brotli v1.2.0 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
-	github.com/bits-and-blooms/bitset v1.24.4 // indirect
-	github.com/blevesearch/bleve_index_api v1.3.1 // indirect
+	github.com/bits-and-blooms/bitset v1.24.0 // indirect
+	github.com/blevesearch/bleve_index_api v1.2.11 // indirect
 	github.com/blevesearch/geo v0.2.4 // indirect
-	github.com/blevesearch/go-faiss v1.0.27 // indirect
+	github.com/blevesearch/go-faiss v1.0.26 // indirect
 	github.com/blevesearch/go-porterstemmer v1.0.3 // indirect
 	github.com/blevesearch/gtreap v0.1.1 // indirect
-	github.com/blevesearch/mmap-go v1.2.0 // indirect
-	github.com/blevesearch/scorch_segment_api/v2 v2.4.1 // indirect
+	github.com/blevesearch/mmap-go v1.0.4 // indirect
+	github.com/blevesearch/scorch_segment_api/v2 v2.3.13 // indirect
 	github.com/blevesearch/segment v0.9.1 // indirect
 	github.com/blevesearch/snowballstem v0.9.0 // indirect
 	github.com/blevesearch/upsidedown_store_api v1.0.2 // indirect
-	github.com/blevesearch/vellum v1.2.0 // indirect
+	github.com/blevesearch/vellum v1.1.0 // indirect
 	github.com/blevesearch/zapx/v11 v11.4.2 // indirect
 	github.com/blevesearch/zapx/v12 v12.4.2 // indirect
 	github.com/blevesearch/zapx/v13 v13.4.2 // indirect
 	github.com/blevesearch/zapx/v14 v14.4.2 // indirect
 	github.com/blevesearch/zapx/v15 v15.4.2 // indirect
-	github.com/blevesearch/zapx/v16 v16.3.0 // indirect
+	github.com/blevesearch/zapx/v16 v16.2.8 // indirect
 	github.com/boombuler/barcode v1.1.0 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
-	github.com/clipperhouse/stringish v0.1.1 // indirect
-	github.com/clipperhouse/uax29/v2 v2.4.0 // indirect
+	github.com/clipperhouse/uax29/v2 v2.2.0 // indirect
 	github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/dlclark/regexp2 v1.11.5 // indirect
@@ -75,15 +74,16 @@ require (
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
 	github.com/go-sql-driver/mysql v1.9.3 // indirect
-	github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
-	github.com/go-webauthn/x v0.2.1 // indirect
-	github.com/golang-jwt/jwt/v5 v5.3.1 // indirect
+	github.com/go-viper/mapstructure/v2 v2.4.0 // indirect
+	github.com/go-webauthn/x v0.1.26 // indirect
+	github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
+	github.com/golang-jwt/jwt/v5 v5.3.0 // indirect
 	github.com/golang/snappy v1.0.0 // indirect
-	github.com/google/go-tpm v0.9.8 // indirect
+	github.com/google/go-tpm v0.9.6 // indirect
 	github.com/gorilla/mux v1.8.1 // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
-	github.com/jackc/pgx/v5 v5.8.0 // indirect
+	github.com/jackc/pgx/v5 v5.7.6 // indirect
 	github.com/jackc/puddle/v2 v2.2.2 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect
@@ -98,11 +98,11 @@ require (
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/mschoch/smat v0.2.0 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
-	github.com/ncruces/go-strftime v1.0.0 // indirect
+	github.com/ncruces/go-strftime v0.1.9 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/common v0.67.5 // indirect
-	github.com/prometheus/procfs v0.19.2 // indirect
+	github.com/prometheus/common v0.66.1 // indirect
+	github.com/prometheus/procfs v0.17.0 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/valyala/bytebufferpool v1.0.0 // indirect
@@ -111,15 +111,15 @@ require (
 	github.com/xrash/smetrics v0.0.0-20250705151800-55b8f293f342 // indirect
 	go.etcd.io/bbolt v1.4.3 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
-	golang.org/x/exp v0.0.0-20260112195511-716be5621a96 // indirect
-	golang.org/x/net v0.49.0 // indirect
-	golang.org/x/oauth2 v0.34.0 // indirect
+	golang.org/x/exp v0.0.0-20251002181428-27f1f14c8bb9 // indirect
+	golang.org/x/net v0.48.0 // indirect
+	golang.org/x/oauth2 v0.31.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.41.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
-	google.golang.org/protobuf v1.36.11 // indirect
-	modernc.org/libc v1.67.7 // indirect
+	google.golang.org/protobuf v1.36.10 // indirect
+	modernc.org/libc v1.66.10 // indirect
 	modernc.org/mathutil v1.7.1 // indirect
 	modernc.org/memory v1.11.0 // indirect
-	modernc.org/sqlite v1.44.3 // indirect
+	modernc.org/sqlite v1.39.0 // indirect
 )
--- a/go.sum
+++ b/go.sum
@@ -1,16 +1,16 @@
 filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
 filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
-github.com/Azure/go-ntlmssp v0.1.0 h1:DjFo6YtWzNqNvQdrwEyr/e4nhU3vRiwenz5QX7sFz+A=
-github.com/Azure/go-ntlmssp v0.1.0/go.mod h1:NYqdhxd/8aAct/s4qSYZEerdPuH1liG2/X9DiVTbhpk=
+github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 h1:mFRzDkZVAjdal+s7s0MwaRv9igoPqLRdzOLzw/8Xvq8=
+github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358/go.mod h1:chxPXzSsl7ZWRAuOIE23GDNzjWuZquvFlgA8xmpunjU=
 github.com/Kunde21/markdownfmt/v3 v3.1.0 h1:KiZu9LKs+wFFBQKhrZJrFZwtLnCCWJahL+S+E/3VnM0=
 github.com/Kunde21/markdownfmt/v3 v3.1.0/go.mod h1:tPXN1RTyOzJwhfHoon9wUr4HGYmWgVxSQN6VBJDkrVc=
-github.com/RoaringBitmap/roaring/v2 v2.14.4 h1:4aKySrrg9G/5oRtJ3TrZLObVqxgQ9f1znCRBwEwjuVw=
-github.com/RoaringBitmap/roaring/v2 v2.14.4/go.mod h1:oMvV6omPWr+2ifRdeZvVJyaz+aoEUopyv5iH0u/+wbY=
+github.com/RoaringBitmap/roaring/v2 v2.10.0 h1:HbJ8Cs71lfCJyvmSptxeMX2PtvOC8yonlU0GQcy2Ak0=
+github.com/RoaringBitmap/roaring/v2 v2.10.0/go.mod h1:FiJcsfkGje/nZBZgCu0ZxCPOKD/hVXDS2dXi7/eUFE0=
 github.com/alecthomas/assert/v2 v2.11.0 h1:2Q9r3ki8+JYXvGsDyBXwH3LcJ+WK5D0gc5E8vS6K3D0=
 github.com/alecthomas/assert/v2 v2.11.0/go.mod h1:Bze95FyfUr7x34QZrjL+XP+0qgp/zg8yS+TtBj1WA3k=
 github.com/alecthomas/chroma/v2 v2.2.0/go.mod h1:vf4zrexSH54oEjJ7EdB65tGNHmH3pGZmVkgTP5RHvAs=
-github.com/alecthomas/chroma/v2 v2.23.1 h1:nv2AVZdTyClGbVQkIzlDm/rnhk1E9bU9nXwmZ/Vk/iY=
-github.com/alecthomas/chroma/v2 v2.23.1/go.mod h1:NqVhfBR0lte5Ouh3DcthuUCTUpDC9cxBOfyMbMQPs3o=
+github.com/alecthomas/chroma/v2 v2.21.1 h1:FaSDrp6N+3pphkNKU6HPCiYLgm8dbe5UXIXcoBhZSWA=
+github.com/alecthomas/chroma/v2 v2.21.1/go.mod h1:NqVhfBR0lte5Ouh3DcthuUCTUpDC9cxBOfyMbMQPs3o=
 github.com/alecthomas/repr v0.0.0-20220113201626-b1b626ac65ae/go.mod h1:2kn6fqh/zIyPLmm3ugklbEi5hg5wS435eygvNfaDQL8=
 github.com/alecthomas/repr v0.5.2 h1:SU73FTI9D1P5UNtvseffFSGmdNci/O6RsqzeXJtP0Qs=
 github.com/alecthomas/repr v0.5.2/go.mod h1:Fr0507jx4eOXV7AlPV6AVZLYrLIuIeSOWtW57eE/O/4=
@@ -20,32 +20,33 @@ github.com/andybalholm/brotli v1.2.0 h1:ukwgCxwYrmACq68yiUqwIWnGY0cTPox/M94sVwTo
 github.com/andybalholm/brotli v1.2.0/go.mod h1:rzTDkvFWvIrjDXZHkuS16NPggd91W3kUSvPlQ1pLaKY=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
-github.com/bits-and-blooms/bitset v1.24.4 h1:95H15Og1clikBrKr/DuzMXkQzECs1M6hhoGXLwLQOZE=
-github.com/bits-and-blooms/bitset v1.24.4/go.mod h1:7hO7Gc7Pp1vODcmWvKMRA9BNmbv6a/7QIWpPxHddWR8=
+github.com/bits-and-blooms/bitset v1.12.0/go.mod h1:7hO7Gc7Pp1vODcmWvKMRA9BNmbv6a/7QIWpPxHddWR8=
+github.com/bits-and-blooms/bitset v1.24.0 h1:H4x4TuulnokZKvHLfzVRTHJfFfnHEeSYJizujEZvmAM=
+github.com/bits-and-blooms/bitset v1.24.0/go.mod h1:7hO7Gc7Pp1vODcmWvKMRA9BNmbv6a/7QIWpPxHddWR8=
 github.com/blevesearch/bleve/v2 v2.5.7 h1:2d9YrL5zrX5EBBW++GOaEKjE+NPWeZGaX77IM26m1Z8=
 github.com/blevesearch/bleve/v2 v2.5.7/go.mod h1:yj0NlS7ocGC4VOSAedqDDMktdh2935v2CSWOCDMHdSA=
-github.com/blevesearch/bleve_index_api v1.3.1 h1:LdH3CQgBbIZ5UI/5Pykz87e0jfeQtVnrdZ2WUBrHHwU=
-github.com/blevesearch/bleve_index_api v1.3.1/go.mod h1:xvd48t5XMeeioWQ5/jZvgLrV98flT2rdvEJ3l/ki4Ko=
+github.com/blevesearch/bleve_index_api v1.2.11 h1:bXQ54kVuwP8hdrXUSOnvTQfgK0KI1+f9A0ITJT8tX1s=
+github.com/blevesearch/bleve_index_api v1.2.11/go.mod h1:rKQDl4u51uwafZxFrPD1R7xFOwKnzZW7s/LSeK4lgo0=
 github.com/blevesearch/geo v0.2.4 h1:ECIGQhw+QALCZaDcogRTNSJYQXRtC8/m8IKiA706cqk=
 github.com/blevesearch/geo v0.2.4/go.mod h1:K56Q33AzXt2YExVHGObtmRSFYZKYGv0JEN5mdacJJR8=
-github.com/blevesearch/go-faiss v1.0.27 h1:7cBImYDDQ82WJd5RUZ1ie6zXztCsC73W94ZzwOjkatk=
-github.com/blevesearch/go-faiss v1.0.27/go.mod h1:OMGQwOaRRYxrmeNdMrXJPvVx8gBnvE5RYrr0BahNnkk=
+github.com/blevesearch/go-faiss v1.0.26 h1:4dRLolFgjPyjkaXwff4NfbZFdE/dfywbzDqporeQvXI=
+github.com/blevesearch/go-faiss v1.0.26/go.mod h1:OMGQwOaRRYxrmeNdMrXJPvVx8gBnvE5RYrr0BahNnkk=
 github.com/blevesearch/go-porterstemmer v1.0.3 h1:GtmsqID0aZdCSNiY8SkuPJ12pD4jI+DdXTAn4YRcHCo=
 github.com/blevesearch/go-porterstemmer v1.0.3/go.mod h1:angGc5Ht+k2xhJdZi511LtmxuEf0OVpvUUNrwmM1P7M=
 github.com/blevesearch/gtreap v0.1.1 h1:2JWigFrzDMR+42WGIN/V2p0cUvn4UP3C4Q5nmaZGW8Y=
 github.com/blevesearch/gtreap v0.1.1/go.mod h1:QaQyDRAT51sotthUWAH4Sj08awFSSWzgYICSZ3w0tYk=
-github.com/blevesearch/mmap-go v1.2.0 h1:l33nNKPFcBjJUMwem6sAYJPUzhUCABoK9FxZDGiFNBI=
-github.com/blevesearch/mmap-go v1.2.0/go.mod h1:Vd6+20GBhEdwJnU1Xohgt88XCD/CTWcqbCNxkZpyBo0=
-github.com/blevesearch/scorch_segment_api/v2 v2.4.1 h1:os52/JeCSLZ0YUkOuLk/Z7pu0SKUMofDPUg+VnbrRD0=
-github.com/blevesearch/scorch_segment_api/v2 v2.4.1/go.mod h1:zvilBm4BNfbnTRLW7KgCTNgk2R31JaWzwRc2BEcD7Is=
+github.com/blevesearch/mmap-go v1.0.4 h1:OVhDhT5B/M1HNPpYPBKIEJaD0F3Si+CrEKULGCDPWmc=
+github.com/blevesearch/mmap-go v1.0.4/go.mod h1:EWmEAOmdAS9z/pi/+Toxu99DnsbhG1TIxUoRmJw/pSs=
+github.com/blevesearch/scorch_segment_api/v2 v2.3.13 h1:ZPjv/4VwWvHJZKeMSgScCapOy8+DdmsmRyLmSB88UoY=
+github.com/blevesearch/scorch_segment_api/v2 v2.3.13/go.mod h1:ENk2LClTehOuMS8XzN3UxBEErYmtwkE7MAArFTXs9Vc=
 github.com/blevesearch/segment v0.9.1 h1:+dThDy+Lvgj5JMxhmOVlgFfkUtZV2kw49xax4+jTfSU=
 github.com/blevesearch/segment v0.9.1/go.mod h1:zN21iLm7+GnBHWTao9I+Au/7MBiL8pPFtJBJTsk6kQw=
 github.com/blevesearch/snowballstem v0.9.0 h1:lMQ189YspGP6sXvZQ4WZ+MLawfV8wOmPoD/iWeNXm8s=
 github.com/blevesearch/snowballstem v0.9.0/go.mod h1:PivSj3JMc8WuaFkTSRDW2SlrulNWPl4ABg1tC/hlgLs=
 github.com/blevesearch/upsidedown_store_api v1.0.2 h1:U53Q6YoWEARVLd1OYNc9kvhBMGZzVrdmaozG2MfoB+A=
 github.com/blevesearch/upsidedown_store_api v1.0.2/go.mod h1:M01mh3Gpfy56Ps/UXHjEO/knbqyQ1Oamg8If49gRwrQ=
-github.com/blevesearch/vellum v1.2.0 h1:xkDiOEsHc2t3Cp0NsNZZ36pvc130sCzcGKOPMzXe+e0=
-github.com/blevesearch/vellum v1.2.0/go.mod h1:uEcfBJz7mAOf0Kvq6qoEKQQkLODBF46SINYNkZNae4k=
+github.com/blevesearch/vellum v1.1.0 h1:CinkGyIsgVlYf8Y2LUQHvdelgXr6PYuvoDIajq6yR9w=
+github.com/blevesearch/vellum v1.1.0/go.mod h1:QgwWryE8ThtNPxtgWJof5ndPfx0/YMBh+W2weHKPw8Y=
 github.com/blevesearch/zapx/v11 v11.4.2 h1:l46SV+b0gFN+Rw3wUI1YdMWdSAVhskYuvxlcgpQFljs=
 github.com/blevesearch/zapx/v11 v11.4.2/go.mod h1:4gdeyy9oGa/lLa6D34R9daXNUvfMPZqUYjPwiLmekwc=
 github.com/blevesearch/zapx/v12 v12.4.2 h1:fzRbhllQmEMUuAQ7zBuMvKRlcPA5ESTgWlDEoB9uQNE=
@@ -56,8 +57,8 @@ github.com/blevesearch/zapx/v14 v14.4.2 h1:2SGHakVKd+TrtEqpfeq8X+So5PShQ5nW6GNxT
 github.com/blevesearch/zapx/v14 v14.4.2/go.mod h1:rz0XNb/OZSMjNorufDGSpFpjoFKhXmppH9Hi7a877D8=
 github.com/blevesearch/zapx/v15 v15.4.2 h1:sWxpDE0QQOTjyxYbAVjt3+0ieu8NCE0fDRaFxEsp31k=
 github.com/blevesearch/zapx/v15 v15.4.2/go.mod h1:1pssev/59FsuWcgSnTa0OeEpOzmhtmr/0/11H0Z8+Nw=
-github.com/blevesearch/zapx/v16 v16.3.0 h1:hF6VlN15E9CB40RMPyqOIhlDw1OOo9RItumhKMQktxw=
-github.com/blevesearch/zapx/v16 v16.3.0/go.mod h1:zCFjv7McXWm1C8rROL+3mUoD5WYe2RKsZP3ufqcYpLY=
+github.com/blevesearch/zapx/v16 v16.2.8 h1:SlnzF0YGtSlrsOE3oE7EgEX6BIepGpeqxs1IjMbHLQI=
+github.com/blevesearch/zapx/v16 v16.2.8/go.mod h1:murSoCJPCk25MqURrcJaBQ1RekuqSCSfMjXH4rHyA14=
 github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8=
 github.com/boombuler/barcode v1.1.0 h1:ChaYjBR63fr4LFyGn8E8nt7dBSt3MiU3zMOZqFvVkHo=
 github.com/boombuler/barcode v1.1.0/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8=
@@ -69,10 +70,8 @@ github.com/chromedp/chromedp v0.14.0 h1:/xE5m6wEBwivhalHwlCOyYfBcAJNwg4nLw96QiCf
 github.com/chromedp/chromedp v0.14.0/go.mod h1:rHzAv60xDE7VNy/MYtTUrYreSc0ujt2O1/C3bzctYBo=
 github.com/chromedp/sysutil v1.1.0 h1:PUFNv5EcprjqXZD9nJb9b/c9ibAbxiYo4exNWZyipwM=
 github.com/chromedp/sysutil v1.1.0/go.mod h1:WiThHUdltqCNKGc4gaU50XgYjwjYIhKWoHGPTUfWTJ8=
-github.com/clipperhouse/stringish v0.1.1 h1:+NSqMOr3GR6k1FdRhhnXrLfztGzuG+VuFDfatpWHKCs=
-github.com/clipperhouse/stringish v0.1.1/go.mod h1:v/WhFtE1q0ovMta2+m+UbpZ+2/HEXNWYXQgCt4hdOzA=
-github.com/clipperhouse/uax29/v2 v2.4.0 h1:RXqE/l5EiAbA4u97giimKNlmpvkmz+GrBVTelsoXy9g=
-github.com/clipperhouse/uax29/v2 v2.4.0/go.mod h1:Wn1g7MK6OoeDT0vL+Q0SQLDz/KpfsVRgg6W7ihQeh4g=
+github.com/clipperhouse/uax29/v2 v2.2.0 h1:ChwIKnQN3kcZteTXMgb1wztSgaU+ZemkgWdohwgs8tY=
+github.com/clipperhouse/uax29/v2 v2.2.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc=
 github.com/cpuguy83/go-md2man/v2 v2.0.7 h1:zbFlGlXEAKlwXpmvle3d8Oe3YnkKIK4xSRTd3sHPnBo=
 github.com/cpuguy83/go-md2man/v2 v2.0.7/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
@@ -88,8 +87,8 @@ github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkp
 github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
 github.com/fxamacker/cbor/v2 v2.9.0 h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM=
 github.com/fxamacker/cbor/v2 v2.9.0/go.mod h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ=
-github.com/gabriel-vasile/mimetype v1.4.13 h1:46nXokslUBsAJE/wMsp5gtO500a4F3Nkz9Ufpk2AcUM=
-github.com/gabriel-vasile/mimetype v1.4.13/go.mod h1:d+9Oxyo1wTzWdyVUPMmXFvp4F9tea18J8ufA774AB3s=
+github.com/gabriel-vasile/mimetype v1.4.12 h1:e9hWvmLYvtp846tLHam2o++qitpguFiYCKbn0w9jyqw=
+github.com/gabriel-vasile/mimetype v1.4.12/go.mod h1:d+9Oxyo1wTzWdyVUPMmXFvp4F9tea18J8ufA774AB3s=
 github.com/glebarez/go-sqlite v1.22.0 h1:uAcMJhaA6r3LHMTFgP0SifzgXg46yJkgxqyuyec+ruQ=
 github.com/glebarez/go-sqlite v1.22.0/go.mod h1:PlBIdHe0+aUEFn+r2/uthrWq4FxbzugL0L8Li6yQJbc=
 github.com/glebarez/sqlite v1.11.0 h1:wSG0irqzP6VurnMEpFGer5Li19RpIRi2qvQz++w0GMw=
@@ -112,12 +111,12 @@ github.com/go-playground/validator/v10 v10.30.1 h1:f3zDSN/zOma+w6+1Wswgd9fLkdwy0
 github.com/go-playground/validator/v10 v10.30.1/go.mod h1:oSuBIQzuJxL//3MelwSLD5hc2Tu889bF0Idm9Dg26cM=
 github.com/go-sql-driver/mysql v1.9.3 h1:U/N249h2WzJ3Ukj8SowVFjdtZKfu9vlLZxjPXV1aweo=
 github.com/go-sql-driver/mysql v1.9.3/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=
-github.com/go-viper/mapstructure/v2 v2.5.0 h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro=
-github.com/go-viper/mapstructure/v2 v2.5.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
-github.com/go-webauthn/webauthn v0.16.0 h1:A9BkfYIwWAMPSQCbM2HoWqo6JO5LFI8aqYAzo6nW7AY=
-github.com/go-webauthn/webauthn v0.16.0/go.mod h1:hm9RS/JNYeUu3KqGbzqlnHClhDGCZzTZlABjathwnN0=
-github.com/go-webauthn/x v0.2.1 h1:/oB8i0FhSANuoN+YJF5XHMtppa7zGEYaQrrf6ytotjc=
-github.com/go-webauthn/x v0.2.1/go.mod h1:Wm0X0zXkzznit4gHj4m82GiBZRMEm+TDUIoJWIQLsE4=
+github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs=
+github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
+github.com/go-webauthn/webauthn v0.15.0 h1:LR1vPv62E0/6+sTenX35QrCmpMCzLeVAcnXeH4MrbJY=
+github.com/go-webauthn/webauthn v0.15.0/go.mod h1:hcAOhVChPRG7oqG7Xj6XKN1mb+8eXTGP/B7zBLzkX5A=
+github.com/go-webauthn/x v0.1.26 h1:eNzreFKnwNLDFoywGh9FA8YOMebBWTUNlNSdolQRebs=
+github.com/go-webauthn/x v0.1.26/go.mod h1:jmf/phPV6oIsF6hmdVre+ovHkxjDOmNH0t6fekWUxvg=
 github.com/gobwas/httphead v0.1.0 h1:exrUm0f4YX0L7EBwZHuCF4GDp8aJfVeBrlLQrs6NqWU=
 github.com/gobwas/httphead v0.1.0/go.mod h1:O/RXo79gxV8G+RqlR/otEwx4Q36zl9rqC5u12GKvMCM=
 github.com/gobwas/pool v0.2.1 h1:xfeeEhW7pwmX8nuLVlqbzVc7udMDrwetjEv+TZIz1og=
@@ -125,16 +124,16 @@ github.com/gobwas/pool v0.2.1/go.mod h1:q8bcK0KcYlCgd9e7WYLm9LpyS+YeLd8JVDW6Wezm
 github.com/gobwas/ws v1.4.0 h1:CTaoG1tojrh4ucGPcoJFiAQUAsEWekEWvLy7GsVNqGs=
 github.com/gobwas/ws v1.4.0/go.mod h1:G3gNqMNtPppf5XUz7O4shetPpcZ1VJ7zt18dlUeakrc=
 github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
-github.com/golang-jwt/jwt/v5 v5.3.1 h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=
-github.com/golang-jwt/jwt/v5 v5.3.1/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
+github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
+github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
+github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
+github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
 github.com/golang/snappy v1.0.0 h1:Oy607GVXHs7RtbggtPBnr2RmDArIsAefDwvrdWvRhGs=
 github.com/golang/snappy v1.0.0/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-github.com/google/go-tpm v0.9.8 h1:slArAR9Ft+1ybZu0lBwpSmpwhRXaa85hWtMinMyRAWo=
-github.com/google/go-tpm v0.9.8/go.mod h1:h9jEsEECg7gtLis0upRBQU+GhYVH6jMjrFxI8u6bVUY=
-github.com/google/go-tpm-tools v0.3.13-0.20230620182252-4639ecce2aba h1:qJEJcuLzH5KDR0gKc0zcktin6KSAwL7+jWKBYceddTc=
-github.com/google/go-tpm-tools v0.3.13-0.20230620182252-4639ecce2aba/go.mod h1:EFYHy8/1y2KfgTAsx7Luu7NGhoxtuVHnNo8jE7FikKc=
+github.com/google/go-tpm v0.9.6 h1:Ku42PT4LmjDu1H5C5ISWLlpI1mj+Zq7sPGKoRw2XROA=
+github.com/google/go-tpm v0.9.6/go.mod h1:h9jEsEECg7gtLis0upRBQU+GhYVH6jMjrFxI8u6bVUY=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
 github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
@@ -152,16 +151,14 @@ github.com/gorilla/sessions v1.4.0 h1:kpIYOp/oi6MG/p5PgxApU8srsSw9tuFbt46Lt7auzq
 github.com/gorilla/sessions v1.4.0/go.mod h1:FLWm50oby91+hl7p/wRxDth9bWSuk0qVL2emc7lT5ik=
 github.com/hashicorp/go-uuid v1.0.3 h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8=
 github.com/hashicorp/go-uuid v1.0.3/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
-github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k=
-github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
 github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM=
 github.com/hexops/gotextdiff v1.0.3/go.mod h1:pSWU5MAI3yDq+fZBTazCSJysOMbxWL1BSow5/V2vxeg=
 github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=
 github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=
 github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo=
 github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM=
-github.com/jackc/pgx/v5 v5.8.0 h1:TYPDoleBBme0xGSAX3/+NujXXtpZn9HBONkQC7IEZSo=
-github.com/jackc/pgx/v5 v5.8.0/go.mod h1:QVeDInX2m9VyzvNeiCJVjCkNFqzsNb43204HshNSZKw=
+github.com/jackc/pgx/v5 v5.7.6 h1:rWQc5FwZSPX58r1OQmkuaNicxdmExaEz5A2DO2hUuTk=
+github.com/jackc/pgx/v5 v5.7.6/go.mod h1:aruU7o91Tc2q2cFp5h4uP3f6ztExVpyVv88Xl/8Vl8M=
 github.com/jackc/puddle/v2 v2.2.2 h1:PR8nw+E/1w0GLuRFSmiioY6UooMp6KJv0/61nB7icHo=
 github.com/jackc/puddle/v2 v2.2.2/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4=
 github.com/jcmturner/aescts/v2 v2.0.0 h1:9YKLH6ey7H4eDBXW8khjYslgyqG2xZikXP0EQFKrle8=
@@ -192,8 +189,8 @@ github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0
 github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
 github.com/labstack/echo-contrib v0.17.4 h1:g5mfsrJfJTKv+F5uNKCyrjLK7js+ZW6HTjg4FnDxxgk=
 github.com/labstack/echo-contrib v0.17.4/go.mod h1:9O7ZPAHUeMGTOAfg80YqQduHzt0CzLak36PZRldYrZ0=
-github.com/labstack/echo/v4 v4.15.1 h1:S9keusg26gZpjMmPqB5hOEvNKnmd1lNmcHrbbH2lnFs=
-github.com/labstack/echo/v4 v4.15.1/go.mod h1:xmw1clThob0BSVRX1CRQkGQ/vjwcpOMjQZSZa9fKA/c=
+github.com/labstack/echo/v4 v4.15.0 h1:hoRTKWcnR5STXZFe9BmYun9AMTNeSbjHi2vtDuADJ24=
+github.com/labstack/echo/v4 v4.15.0/go.mod h1:xmw1clThob0BSVRX1CRQkGQ/vjwcpOMjQZSZa9fKA/c=
 github.com/labstack/gommon v0.4.2 h1:F8qTUNXgG1+6WQmqoUWnz8WiEU60mXVVw0P4ht1WRA0=
 github.com/labstack/gommon v0.4.2/go.mod h1:QlUFxVM+SNXhDL/Z7YhocGIBYOiwB0mXm1+1bAPHPyU=
 github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=
@@ -209,8 +206,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/mattn/go-runewidth v0.0.19 h1:v++JhqYnZuu5jSKrk9RbgF5v4CGUjqRfBm05byFGLdw=
 github.com/mattn/go-runewidth v0.0.19/go.mod h1:XBkDxAl56ILZc9knddidhrOlY5R/pDhgLpndooCuJAs=
-github.com/meilisearch/meilisearch-go v0.36.1 h1:mJTCJE5g7tRvaqKco6DfqOuJEjX+rRltDEnkEC02Y0M=
-github.com/meilisearch/meilisearch-go v0.36.1/go.mod h1:hWcR0MuWLSzHfbz9GGzIr3s9rnXLm1jqkmHkJPbUSvM=
+github.com/meilisearch/meilisearch-go v0.35.1 h1:5H2FeY5eR4HSkaZMJIoefNzOj3XX1+5dd7ZfhAfzeMg=
+github.com/meilisearch/meilisearch-go v0.35.1/go.mod h1:cUVJZ2zMqTvvwIMEEAdsWH+zrHsrLpAw6gm8Lt1MXK0=
 github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
@@ -220,8 +217,8 @@ github.com/mschoch/smat v0.2.0 h1:8imxQsjDm8yFEAVBe7azKmKSgzSkZXDuKkSq9374khM=
 github.com/mschoch/smat v0.2.0/go.mod h1:kc9mz7DoBKqDyiRL7VZN8KvXQMWeTaVnttLRXOlotKw=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
-github.com/ncruces/go-strftime v1.0.0 h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOFAw7w=
-github.com/ncruces/go-strftime v1.0.0/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls=
+github.com/ncruces/go-strftime v0.1.9 h1:bY0MQC28UADQmHmaF5dgpLmImcShSi2kHU9XLdhx/f4=
+github.com/ncruces/go-strftime v0.1.9/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
@@ -231,10 +228,10 @@ github.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h
 github.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg=
 github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=
 github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=
-github.com/prometheus/common v0.67.5 h1:pIgK94WWlQt1WLwAC5j2ynLaBRDiinoAb86HZHTUGI4=
-github.com/prometheus/common v0.67.5/go.mod h1:SjE/0MzDEEAyrdr5Gqc6G+sXI67maCxzaT3A2+HqjUw=
-github.com/prometheus/procfs v0.19.2 h1:zUMhqEW66Ex7OXIiDkll3tl9a1ZdilUOd/F6ZXw4Vws=
-github.com/prometheus/procfs v0.19.2/go.mod h1:M0aotyiemPhBCM0z5w87kL22CxfcH05ZpYlu+b4J7mw=
+github.com/prometheus/common v0.66.1 h1:h5E0h5/Y8niHc5DlaLlWLArTQI7tMrsfQjHV+d9ZoGs=
+github.com/prometheus/common v0.66.1/go.mod h1:gcaUsgf3KfRSwHY4dIMXLPV0K/Wg1oZ8+SbZk/HH/dA=
+github.com/prometheus/procfs v0.17.0 h1:FuLQ+05u4ZI+SS/w9+BWEM2TXiHKsUQ9TADiRH7DuK0=
+github.com/prometheus/procfs v0.17.0/go.mod h1:oPQLaDAMRbA+u8H5Pbfq+dl3VDAvHxMUOVhe0wYB2zw=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
 github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU5NdKM8=
@@ -262,8 +259,8 @@ github.com/xrash/smetrics v0.0.0-20250705151800-55b8f293f342/go.mod h1:Ohn+xnUBi
 github.com/xyproto/randomstring v1.0.5 h1:YtlWPoRdgMu3NZtP45drfy1GKoojuR7hmRcnhZqKjWU=
 github.com/xyproto/randomstring v1.0.5/go.mod h1:rgmS5DeNXLivK7YprL0pY+lTuhNQW3iGxZ18UQApw/E=
 github.com/yuin/goldmark v1.4.15/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
-github.com/yuin/goldmark v1.7.16 h1:n+CJdUxaFMiDUNnWC3dMWCIQJSkxH4uz3ZwQBkAlVNE=
-github.com/yuin/goldmark v1.7.16/go.mod h1:ip/1k0VRfGynBgxOz0yCqHrbZXhcjxyuS66Brc7iBKg=
+github.com/yuin/goldmark v1.7.15 h1:xYJWgq3Qd8qsaZpj5pHKoEI4mosqVZi/qRpq/MdKyyk=
+github.com/yuin/goldmark v1.7.15/go.mod h1:ip/1k0VRfGynBgxOz0yCqHrbZXhcjxyuS66Brc7iBKg=
 github.com/yuin/goldmark-emoji v1.0.6 h1:QWfF2FYaXwL74tfGOW5izeiZepUDroDJfWubQI9HTHs=
 github.com/yuin/goldmark-emoji v1.0.6/go.mod h1:ukxJDKFpdFb5x0a5HqbdlcKtebh086iJpI31LTKmWuA=
 github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc h1:+IAOyRda+RLrxa1WC7umKOZRsGq4QrFFMYApOeHzQwQ=
@@ -278,37 +275,39 @@ go.uber.org/mock v0.6.0 h1:hyF9dfmbgIX5EfOdasqLsWD6xqpNZlXblLB/Dbnwv3Y=
 go.uber.org/mock v0.6.0/go.mod h1:KiVJ4BqZJaMj4svdfmHM0AUx4NJYO8ZNpPnZn1Z+BBU=
 go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
 go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
-golang.org/x/exp v0.0.0-20260112195511-716be5621a96 h1:Z/6YuSHTLOHfNFdb8zVZomZr7cqNgTJvA8+Qz75D8gU=
-golang.org/x/exp v0.0.0-20260112195511-716be5621a96/go.mod h1:nzimsREAkjBCIEFtHiYkrJyT+2uy9YZJB7H1k68CXZU=
-golang.org/x/mod v0.32.0 h1:9F4d3PHLljb6x//jOyokMv3eX+YDeepZSEo3mFJy93c=
-golang.org/x/mod v0.32.0/go.mod h1:SgipZ/3h2Ci89DlEtEXWUk/HteuRin+HHhN+WbNhguU=
-golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
-golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
-golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw=
-golang.org/x/oauth2 v0.34.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
+golang.org/x/exp v0.0.0-20251002181428-27f1f14c8bb9 h1:TQwNpfvNkxAVlItJf6Cr5JTsVZoC/Sj7K3OZv2Pc14A=
+golang.org/x/exp v0.0.0-20251002181428-27f1f14c8bb9/go.mod h1:TwQYMMnGpvZyc+JpB/UAuTNIsVJifOlSkrZkhcvpVUk=
+golang.org/x/mod v0.30.0 h1:fDEXFVZ/fmCKProc/yAXXUijritrDzahmwwefnjoPFk=
+golang.org/x/mod v0.30.0/go.mod h1:lAsf5O2EvJeSFMiBxXDki7sCgAxEUcZHXoXMKT4GJKc=
+golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
+golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
+golang.org/x/oauth2 v0.31.0 h1:8Fq0yVZLh4j4YA47vHKFTa9Ew5XIrCP8LC6UeNZnLxo=
+golang.org/x/oauth2 v0.31.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
 golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
-golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/term v0.40.0 h1:36e4zGLqU4yhjlmxEaagx2KuYbJq3EwY8K943ZsHcvg=
-golang.org/x/term v0.40.0/go.mod h1:w2P8uVp06p2iyKKuvXIm7N/y0UCRt3UfJTfZ7oOpglM=
-golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
-golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
 golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
-golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=
-golang.org/x/tools v0.41.0/go.mod h1:XSY6eDqxVNiYgezAVqqCeihT4j1U2CCsqvH3WhQpnlg=
-google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
-google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
+golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
+golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
+google.golang.org/protobuf v1.36.10 h1:AYd7cD/uASjIL6Q9LiTjz8JLcrh/88q5UObnmY3aOOE=
+google.golang.org/protobuf v1.36.10/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gorm.io/driver/mysql v1.6.0 h1:eNbLmNTpPpTOVZi8MMxCi2aaIm0ZpInbORNXDwyLGvg=
@@ -317,20 +316,18 @@ gorm.io/driver/postgres v1.6.0 h1:2dxzU8xJ+ivvqTRph34QX+WrRaJlmfyPqXmoGVjMBa4=
 gorm.io/driver/postgres v1.6.0/go.mod h1:vUw0mrGgrTK+uPHEhAdV4sfFELrByKVGnaVRkXDhtWo=
 gorm.io/gorm v1.31.1 h1:7CA8FTFz/gRfgqgpeKIBcervUn3xSyPUmr6B2WXJ7kg=
 gorm.io/gorm v1.31.1/go.mod h1:XyQVbO2k6YkOis7C2437jSit3SsDK72s7n7rsSHd+Gs=
-modernc.org/cc/v4 v4.27.1 h1:9W30zRlYrefrDV2JE2O8VDtJ1yPGownxciz5rrbQZis=
-modernc.org/cc/v4 v4.27.1/go.mod h1:uVtb5OGqUKpoLWhqwNQo/8LwvoiEBLvZXIQ/SmO6mL0=
-modernc.org/ccgo/v4 v4.30.1 h1:4r4U1J6Fhj98NKfSjnPUN7Ze2c6MnAdL0hWw6+LrJpc=
-modernc.org/ccgo/v4 v4.30.1/go.mod h1:bIOeI1JL54Utlxn+LwrFyjCx2n2RDiYEaJVSrgdrRfM=
+modernc.org/cc/v4 v4.26.5 h1:xM3bX7Mve6G8K8b+T11ReenJOT+BmVqQj0FY5T4+5Y4=
+modernc.org/cc/v4 v4.26.5/go.mod h1:uVtb5OGqUKpoLWhqwNQo/8LwvoiEBLvZXIQ/SmO6mL0=
+modernc.org/ccgo/v4 v4.28.1 h1:wPKYn5EC/mYTqBO373jKjvX2n+3+aK7+sICCv4Fjy1A=
+modernc.org/ccgo/v4 v4.28.1/go.mod h1:uD+4RnfrVgE6ec9NGguUNdhqzNIeeomeXf6CL0GTE5Q=
 modernc.org/fileutil v1.3.40 h1:ZGMswMNc9JOCrcrakF1HrvmergNLAmxOPjizirpfqBA=
 modernc.org/fileutil v1.3.40/go.mod h1:HxmghZSZVAz/LXcMNwZPA/DRrQZEVP9VX0V4LQGQFOc=
 modernc.org/gc/v2 v2.6.5 h1:nyqdV8q46KvTpZlsw66kWqwXRHdjIlJOhG6kxiV/9xI=
 modernc.org/gc/v2 v2.6.5/go.mod h1:YgIahr1ypgfe7chRuJi2gD7DBQiKSLMPgBQe9oIiito=
-modernc.org/gc/v3 v3.1.1 h1:k8T3gkXWY9sEiytKhcgyiZ2L0DTyCQ/nvX+LoCljoRE=
-modernc.org/gc/v3 v3.1.1/go.mod h1:HFK/6AGESC7Ex+EZJhJ2Gni6cTaYpSMmU/cT9RmlfYY=
 modernc.org/goabi0 v0.2.0 h1:HvEowk7LxcPd0eq6mVOAEMai46V+i7Jrj13t4AzuNks=
 modernc.org/goabi0 v0.2.0/go.mod h1:CEFRnnJhKvWT1c1JTI3Avm+tgOWbkOu5oPA8eH8LnMI=
-modernc.org/libc v1.67.7 h1:H+gYQw2PyidyxwxQsGTwQw6+6H+xUk+plvOKW7+d3TI=
-modernc.org/libc v1.67.7/go.mod h1:UjCSJFl2sYbJbReVQeVpq/MgzlbmDM4cRHIYFelnaDk=
+modernc.org/libc v1.66.10 h1:yZkb3YeLx4oynyR+iUsXsybsX4Ubx7MQlSYEw4yj59A=
+modernc.org/libc v1.66.10/go.mod h1:8vGSEwvoUoltr4dlywvHqjtAqHBaw0j1jI7iFBTAr2I=
 modernc.org/mathutil v1.7.1 h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU=
 modernc.org/mathutil v1.7.1/go.mod h1:4p5IwJITfppl0G4sUEDtCr4DthTaT47/N3aT6MhfgJg=
 modernc.org/memory v1.11.0 h1:o4QC8aMQzmcwCK3t3Ux/ZHmwFPzE6hf2Y5LbkRs+hbI=
@@ -339,8 +336,8 @@ modernc.org/opt v0.1.4 h1:2kNGMRiUjrp4LcaPuLY2PzUfqM/w9N23quVwhKt5Qm8=
 modernc.org/opt v0.1.4/go.mod h1:03fq9lsNfvkYSfxrfUhZCWPk1lm4cq4N+Bh//bEtgns=
 modernc.org/sortutil v1.2.1 h1:+xyoGf15mM3NMlPDnFqrteY07klSFxLElE2PVuWIJ7w=
 modernc.org/sortutil v1.2.1/go.mod h1:7ZI3a3REbai7gzCLcotuw9AC4VZVpYMjDzETGsSMqJE=
-modernc.org/sqlite v1.44.3 h1:+39JvV/HWMcYslAwRxHb8067w+2zowvFOUrOWIy9PjY=
-modernc.org/sqlite v1.44.3/go.mod h1:CzbrU2lSB1DKUusvwGz7rqEKIq+NUd8GWuBBZDs9/nA=
+modernc.org/sqlite v1.39.0 h1:6bwu9Ooim0yVYA7IZn9demiQk/Ejp0BtTjBWFLymSeY=
+modernc.org/sqlite v1.39.0/go.mod h1:cPTJYSlgg3Sfg046yBShXENNtPrWrDX8bsbAQBzgQ5E=
 modernc.org/strutil v1.2.1 h1:UneZBkQA+DX2Rp35KcM69cSsNES9ly8mQWD71HKlOA0=
 modernc.org/strutil v1.2.1/go.mod h1:EHkiggD70koQxjVdSBM3JKM7k6L0FbGE5eymy9i3B9A=
 modernc.org/token v1.1.0 h1:Xl7Ap9dKaEs5kLoOQeQmPWevfnk/DM5qcLcYlA8ys6Y=
--- a/helm/opengist/CHANGELOG.md
+++ b/helm/opengist/CHANGELOG.md
@@ -1,29 +0,0 @@
-# Helm Chart Changelog
-
-## 0.6.0 - 2026-02-03
-
- Bump Opengist image to 1.12.1
-
-## 0.5.0 - 2026-01-27
-
- Bump Opengist image to 1.12.0
- Add StatefulSet support
- Add Prometheus ServiceMonitor support if Opengist metrics are enabled
- New service for metrics endpoint, dissociated from the main service
- Use existing pvc claim of provided
-
-## 0.4.0 - 2025-09-30
-
- Bump Opengist image to 1.11.1
-
-## 0.3.0 - 2025-09-21
-
- Bump Opengist image to 1.11.0
-
-## 0.2.0 - 2025-05-10
-
- Add `deployment.env[]` in values
-
-## 0.1.0 - 2025-04-06
-
- Initial release, with Opengist image 1.10.0
--- a/helm/opengist/Chart.lock
+++ b/helm/opengist/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 16.7.27
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.26.0
-digest: sha256:7182bad3df032b3cb21a793ea6b027eaa96e142ff207b607b62df974bc82de90
-generated: "2026-03-09T03:39:04.820136+07:00"
+  version: 0.17.1
+digest: sha256:ad702e35f258fed1f804d3e48b071767499f5730e099a8c461610950e5182368
+generated: "2025-09-21T04:49:08.679554149+02:00"
--- a/helm/opengist/Chart.yaml
+++ b/helm/opengist/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: opengist
 description: Opengist Helm chart for Kubernetes
 type: application
-version: 0.6.0
-appVersion: 1.12.1
+version: 0.5.0
+appVersion: 1.11.1
 home: https://opengist.io
 icon: https://raw.githubusercontent.com/thomiceli/opengist/master/public/img/opengist.svg
 sources:
@@ -15,5 +15,5 @@ dependencies:
    condition: postgresql.enabled
  - name: meilisearch
    repository: https://meilisearch.github.io/meilisearch-kubernetes
-    version: 0.26.0
+    version: 0.17.1
    condition: meilisearch.enabled
--- a/helm/opengist/README.md
+++ b/helm/opengist/README.md
@@ -1,12 +1,11 @@
 # Opengist Helm Chart

-![Version: 0.6.0](https://img.shields.io/badge/Version-0.6.0-informational?style=flat-square) ![AppVersion: 1.12.1](https://img.shields.io/badge/AppVersion-1.12.1-informational?style=flat-square)
+![Version: 0.5.0](https://img.shields.io/badge/Version-0.5.0-informational?style=flat-square) ![AppVersion: 1.11.1](https://img.shields.io/badge/AppVersion-1.11.1-informational?style=flat-square)

-Opengist Helm chart for Kubernetes. Check [CHANGELOG.md](CHANGELOG.md) for release notes.
+Opengist Helm chart for Kubernetes.

 * [Install](#install)
 * [Configuration](#configuration)
-* [Metrics & Monitoring](#metrics--monitoring)
 * [Dependencies](#dependencies)
  * [Meilisearch Indexer](#meilisearch-indexer)
  * [PostgreSQL Database](#postgresql-database)
@@ -48,76 +47,6 @@ If defined, this existing secret will be used instead of creating a new one.
 configExistingSecret: <name of the secret>
 ```

-## Metrics & Monitoring
-
-Opengist exposes Prometheus metrics on a separate port (default: `6158`). The metrics server runs independently from the main HTTP server for security.
-
-### Enabling Metrics
-
-To enable metrics, set `metrics.enabled: true` in your Opengist config:
-
-```yaml
-config:
-  metrics.enabled: true
-```
-
-This will:
-1. Start a metrics server on port 6158 inside the container
-2. Create a Kubernetes Service exposing the metrics ports
-
-### Available Metrics
-
-| Metric Name | Type | Description |
-|-------------|------|-------------|
-| `opengist_users_total` | Gauge | Total number of registered users |
-| `opengist_gists_total` | Gauge | Total number of gists |
-| `opengist_ssh_keys_total` | Gauge | Total number of SSH keys |
-| `opengist_request_duration_seconds_*` | Histogram | HTTP request duration metrics |
-
-### ServiceMonitor for Prometheus Operator
-
-If you're using [Prometheus Operator](https://github.com/prometheus-operator/prometheus-operator), you can enable automatic service discovery with a ServiceMonitor:
-
-```yaml
-config:
-  metrics.enabled: true
-
-service:
-  metrics:
-    serviceMonitor:
-      enabled: true
-      labels:
-        release: prometheus  # match your Prometheus serviceMonitorSelector
-```
-
-### Manual Prometheus Configuration
-
-If you're not using Prometheus Operator, you can configure Prometheus to scrape the metrics endpoint directly:
-
-```yaml
-scrape_configs:
-  - job_name: 'opengist'
-    static_configs:
-      - targets: ['opengist-metrics:6158']
-    metrics_path: /metrics
-```
-
-Or use Kubernetes service discovery:
-
-```yaml
-scrape_configs:
-  - job_name: 'opengist'
-    kubernetes_sd_configs:
-      - role: service
-    relabel_configs:
-      - source_labels: [__meta_kubernetes_service_label_app_kubernetes_io_component]
-        regex: metrics
-        action: keep
-      - source_labels: [__meta_kubernetes_service_label_app_kubernetes_io_name]
-        regex: opengist
-        action: keep
-```
-
 ## Dependencies

 ### Meilisearch Indexer
--- a/helm/opengist/templates/deployment.yaml
+++ b/helm/opengist/templates/deployment.yaml
@@ -67,11 +67,6 @@ spec:
            - name: http
              containerPort: {{ .Values.service.http.port }}
              protocol: TCP
-          {{- if index .Values.config "metrics.enabled" }}
-            - name: metrics
-              containerPort: {{ .Values.service.metrics.port }}
-              protocol: TCP
-          {{- end }}
          {{- if .Values.livenessProbe.enabled }}
          livenessProbe:
            {{- toYaml (omit .Values.livenessProbe "enabled") | nindent 12 }}
--- a/helm/opengist/templates/servicemonitor.yaml
+++ b/helm/opengist/templates/servicemonitor.yaml
@@ -1,41 +0,0 @@
-{{- if and (index .Values.config "metrics.enabled") .Values.service.metrics.serviceMonitor.enabled }}
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: {{ include "opengist.fullname" . }}
-  namespace: {{ .Values.namespace | default .Release.Namespace }}
-  labels:
-    {{- include "opengist.labels" . | nindent 4 }}
-    {{- with .Values.service.metrics.serviceMonitor.labels }}
-    {{- toYaml . | nindent 4 }}
-    {{- end }}
-  {{- with .Values.service.metrics.serviceMonitor.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  endpoints:
-    - port: metrics
-      {{- with .Values.service.metrics.serviceMonitor.interval }}
-      interval: {{ . }}
-      {{- end }}
-      {{- with .Values.service.metrics.serviceMonitor.scrapeTimeout }}
-      scrapeTimeout: {{ . }}
-      {{- end }}
-      path: /metrics
-      {{- with .Values.service.metrics.serviceMonitor.relabelings }}
-      relabelings:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-      {{- with .Values.service.metrics.serviceMonitor.metricRelabelings }}
-      metricRelabelings:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-  namespaceSelector:
-    matchNames:
-      - {{ .Values.namespace | default .Release.Namespace }}
-  selector:
-    matchLabels:
-      {{- include "opengist.selectorLabels" . | nindent 6 }}
-      app.kubernetes.io/component: metrics
-{{- end }}
--- a/helm/opengist/templates/statefulset.yaml
+++ b/helm/opengist/templates/statefulset.yaml
@@ -140,11 +140,6 @@ spec:
              containerPort: {{ .Values.service.ssh.port }}
              protocol: TCP
          {{- end }}
-          {{- if index .Values.config "metrics.enabled" }}
-            - name: metrics
-              containerPort: {{ .Values.service.metrics.port }}
-              protocol: TCP
-          {{- end }}
          {{- if .Values.livenessProbe.enabled }}
          livenessProbe:
            {{- toYaml (omit .Values.livenessProbe "enabled") | nindent 12 }}
@@ -177,7 +172,7 @@ spec:
            defaultMode: 511
        - name: config-volume
          emptyDir: {}
-        {{- /*
+        {{- /* 
        ========================================
        VOLUME MOUNTING DECISION TREE
        ========================================
@@ -221,7 +216,7 @@ spec:
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
-  {{- /*
+  {{- /* 
  ========================================
  VOLUMECLAIMTEMPLATES DECISION TREE
  ========================================
@@ -229,14 +224,14 @@ spec:
    - persistence.enabled=true
    - persistence.existingClaim is empty
    - persistence.mode=perReplica (default)
-
+  
  This creates one PVC per replica (RWO typically).
-
+  
  NOT used when:
    - existingClaim is set (PVC already exists, referenced in volumes above)
    - mode=shared (standalone PVC created via pvc-shared.yaml)
    - persistence disabled (emptyDir used)
-
+  
  WARNING: perReplica + replicaCount>1 causes data divergence. Use shared mode for multi-replica.
  */}}
  {{- if and .Values.persistence.enabled (ne (default "" .Values.persistence.existingClaim) "") }}
--- a/helm/opengist/templates/svc-metrics.yaml
+++ b/helm/opengist/templates/svc-metrics.yaml
@@ -1,32 +0,0 @@
-{{- if index .Values.config "metrics.enabled" }}
-apiVersion: v1
-kind: Service
-metadata:
-  name: {{ include "opengist.fullname" . }}-metrics
-  namespace: {{ .Values.namespace | default .Release.Namespace }}
-  labels:
-    {{- include "opengist.labels" . | nindent 4 }}
-    app.kubernetes.io/component: metrics
-    {{- with .Values.service.metrics.labels }}
-    {{- toYaml . | nindent 4 }}
-    {{- end }}
-  {{- with .Values.service.metrics.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  type: {{ .Values.service.metrics.type }}
-  {{- if .Values.service.metrics.clusterIP }}
-  clusterIP: {{ .Values.service.metrics.clusterIP }}
-  {{- end }}
-  ports:
-    - port: {{ .Values.service.metrics.port }}
-      targetPort: metrics
-      protocol: TCP
-      name: metrics
-      {{- if and (eq .Values.service.metrics.type "NodePort") .Values.service.metrics.nodePort }}
-      nodePort: {{ .Values.service.metrics.nodePort }}
-      {{- end }}
-  selector:
-    {{- include "opengist.selectorLabels" . | nindent 4 }}
-{{- end }}
--- a/helm/opengist/values.yaml
+++ b/helm/opengist/values.yaml
@@ -8,7 +8,6 @@ namespace: ""
 config:
  log-level: "warn"
  log-output: "stdout"
-  metrics.enabled: false

 ## If defined, the existing secret will be used instead of creating a new one.
 ## The secret must contain a key named `config.yml` with the YAML configuration.
@@ -18,7 +17,7 @@ configExistingSecret: ""
 image:
  repository: ghcr.io/thomiceli/opengist
  pullPolicy: Always
-  tag: "1.12.1"
+  tag: "1.11.1"
  digest: ""
 imagePullSecrets: []
 # - name: "image-pull-secret"
@@ -102,26 +101,6 @@ service:
    loadBalancerSourceRanges: []
    externalTrafficPolicy:

-  # A metrics K8S service on port 6158 is created when the Opengist config metrics.enabled: true
-  metrics:
-    type: ClusterIP
-    clusterIP:
-    port: 6158
-    nodePort:
-    labels: {}
-    annotations: {}
-
-    # A service monitor can be used to work with your Prometheus setup.
-    serviceMonitor:
-      enabled: true
-      labels: {}
-      #  release: kube-prom-stack
-      interval:
-      scrapeTimeout:
-      annotations: {}
-      relabelings: []
-      metricRelabelings: []
-
 ## HTTP Ingress for Opengist
 ## ref: https://kubernetes.io/docs/concepts/services-networking/ingress/
 ingress:
--- a/internal/auth/oauth/gitea.go
+++ b/internal/auth/oauth/gitea.go
@@ -110,10 +110,6 @@ func (p *GiteaCallbackProvider) UpdateUserDB(user *db.User) {
 	user.AvatarURL = field.(string)
 }

-func (p *GiteaCallbackProvider) IsAdmin() bool {
-	return false
-}
-
 func NewGiteaCallbackProvider(user *goth.User) CallbackProvider {
 	return &GiteaCallbackProvider{
 		User: user,
--- a/internal/auth/oauth/github.go
+++ b/internal/auth/oauth/github.go
@@ -77,10 +77,6 @@ func (p *GitHubCallbackProvider) UpdateUserDB(user *db.User) {
 	user.AvatarURL = "https://avatars.githubusercontent.com/u/" + p.User.UserID + "?v=4"
 }

-func (p *GitHubCallbackProvider) IsAdmin() bool {
-	return false
-}
-
 func NewGitHubCallbackProvider(user *goth.User) CallbackProvider {
 	return &GitHubCallbackProvider{
 		User: user,
--- a/internal/auth/oauth/gitlab.go
+++ b/internal/auth/oauth/gitlab.go
@@ -111,10 +111,6 @@ func (p *GitLabCallbackProvider) UpdateUserDB(user *db.User) {
 	user.AvatarURL = field.(string)
 }

-func (p *GitLabCallbackProvider) IsAdmin() bool {
-	return false
-}
-
 func NewGitLabCallbackProvider(user *goth.User) CallbackProvider {
 	return &GitLabCallbackProvider{
 		User: user,
--- a/internal/auth/oauth/openid.go
+++ b/internal/auth/oauth/openid.go
@@ -3,8 +3,6 @@ package oauth
 import (
 	gocontext "context"
 	"errors"
-	"slices"
-
 	"github.com/markbates/goth"
 	"github.com/markbates/goth/gothic"
 	"github.com/markbates/goth/providers/openidConnect"
@@ -81,31 +79,6 @@ func (p *OIDCCallbackProvider) UpdateUserDB(user *db.User) {
 	user.AvatarURL = p.User.AvatarURL
 }

-func (p *OIDCCallbackProvider) IsAdmin() bool {
-	if config.C.OIDCAdminGroup == "" {
-		return false
-	}
-
-	groupClaimName := config.C.OIDCGroupClaimName
-	if groupClaimName == "" {
-		return false
-	}
-
-	groups, ok := p.User.RawData[groupClaimName].([]interface{})
-	if !ok {
-		return false
-	}
-
-	var groupNames []string
-	for _, group := range groups {
-		if groupName, ok := group.(string); ok {
-			groupNames = append(groupNames, groupName)
-		}
-	}
-
-	return slices.Contains(groupNames, config.C.OIDCAdminGroup)
-}
-
 func NewOIDCCallbackProvider(user *goth.User) CallbackProvider {
 	return &OIDCCallbackProvider{
 		User: user,
--- a/internal/auth/oauth/provider.go
+++ b/internal/auth/oauth/provider.go
@@ -2,16 +2,15 @@ package oauth

 import (
 	"fmt"
-	"io"
-	"net/http"
-	"net/url"
-	"strings"
-
 	"github.com/markbates/goth"
 	"github.com/markbates/goth/gothic"
 	"github.com/rs/zerolog/log"
 	"github.com/thomiceli/opengist/internal/db"
 	"github.com/thomiceli/opengist/internal/web/context"
+	"io"
+	"net/http"
+	"net/url"
+	"strings"
 )

 const (
@@ -33,7 +32,6 @@ type CallbackProvider interface {
 	GetProviderUserID(user *db.User) bool
 	GetProviderUserSSHKeys() ([]string, error)
 	UpdateUserDB(user *db.User)
-	IsAdmin() bool
 }

 func DefineProvider(provider string, url string) (Provider, error) {
@@ -71,29 +69,6 @@ func CompleteUserAuth(ctx *context.Context) (CallbackProvider, error) {
 	return nil, fmt.Errorf("unsupported provider %s", user.Provider)
 }

-func NewCallbackProviderFromSession(provider string, userID string, nickname string, email string, avatarURL string) (CallbackProvider, error) {
-	user := &goth.User{
-		Provider:  provider,
-		UserID:    userID,
-		NickName:  nickname,
-		Email:     email,
-		AvatarURL: avatarURL,
-	}
-
-	switch provider {
-	case GitHubProviderString:
-		return NewGitHubCallbackProvider(user), nil
-	case GitLabProviderString:
-		return NewGitLabCallbackProvider(user), nil
-	case GiteaProviderString:
-		return NewGiteaCallbackProvider(user), nil
-	case OpenIDConnectString:
-		return NewOIDCCallbackProvider(user), nil
-	}
-
-	return nil, fmt.Errorf("unsupported provider %s", provider)
-}
-
 func urlJoin(base string, elem ...string) string {
 	joined, err := url.JoinPath(base, elem...)
 	if err != nil {
--- a/internal/cli/main.go
+++ b/internal/cli/main.go
@@ -2,12 +2,6 @@ package cli

 import (
 	"fmt"
-	"os"
-	"os/signal"
-	"path"
-	"path/filepath"
-	"syscall"
-
 	"github.com/rs/zerolog/log"
 	"github.com/thomiceli/opengist/internal/auth/webauthn"
 	"github.com/thomiceli/opengist/internal/config"
@@ -15,9 +9,13 @@ import (
 	"github.com/thomiceli/opengist/internal/git"
 	"github.com/thomiceli/opengist/internal/index"
 	"github.com/thomiceli/opengist/internal/ssh"
-	"github.com/thomiceli/opengist/internal/web/handlers/metrics"
 	"github.com/thomiceli/opengist/internal/web/server"
 	"github.com/urfave/cli/v2"
+	"os"
+	"os/signal"
+	"path"
+	"path/filepath"
+	"syscall"
 )

 var CmdVersion = cli.Command{
@@ -38,18 +36,12 @@ var CmdStart = cli.Command{

 		Initialize(ctx)

-		httpServer := server.NewServer(os.Getenv("OG_DEV") == "1")
-		go httpServer.Start()
+		server := server.NewServer(os.Getenv("OG_DEV") == "1", path.Join(config.GetHomeDir(), "sessions"), false)
+		go server.Start()
 		go ssh.Start()

-		var metricsServer *metrics.Server
-		if config.C.MetricsEnabled {
-			metricsServer = metrics.NewServer()
-			go metricsServer.Start()
-		}
-
 		<-stopCtx.Done()
-		shutdown(httpServer, metricsServer)
+		shutdown(server)
 		return nil
 	},
 }
@@ -139,7 +131,7 @@ func Initialize(ctx *cli.Context) {
 	}
 }

-func shutdown(httpServer *server.Server, metricsServer *metrics.Server) {
+func shutdown(server *server.Server) {
 	log.Info().Msg("Shutting down database...")
 	if err := db.Close(); err != nil {
 		log.Error().Err(err).Msg("Failed to close database")
@@ -150,11 +142,7 @@ func shutdown(httpServer *server.Server, metricsServer *metrics.Server) {
 		index.Close()
 	}

-	httpServer.Stop()
-
-	if metricsServer != nil {
-		metricsServer.Stop()
-	}
+	server.Stop()

 	log.Info().Msg("Shutdown complete")
 }
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -2,6 +2,7 @@ package config

 import (
 	"fmt"
+	"github.com/thomiceli/opengist/internal/session"
 	"io"
 	"net/url"
 	"os"
@@ -12,8 +13,6 @@ import (
 	"strings"
 	"time"

-	"github.com/thomiceli/opengist/internal/session"
-
 	"github.com/rs/zerolog"
 	"github.com/rs/zerolog/log"
 	"gopkg.in/yaml.v3"
@@ -80,9 +79,7 @@ type config struct {
 	OIDCGroupClaimName string `yaml:"oidc.group-claim-name" env:"OG_OIDC_GROUP_CLAIM_NAME"`
 	OIDCAdminGroup     string `yaml:"oidc.admin-group" env:"OG_OIDC_ADMIN_GROUP"`

-	MetricsEnabled bool   `yaml:"metrics.enabled" env:"OG_METRICS_ENABLED"`
-	MetricsHost    string `yaml:"metrics.host" env:"OG_METRICS_HOST"`
-	MetricsPort    string `yaml:"metrics.port" env:"OG_METRICS_PORT"`
+	MetricsEnabled bool `yaml:"metrics.enabled" env:"OG_METRICS_ENABLED"`

 	LDAPUrl             string `yaml:"ldap.url" env:"OG_LDAP_URL"`
 	LDAPBindDn          string `yaml:"ldap.bind-dn" env:"OG_LDAP_BIND_DN"`
@@ -131,8 +128,6 @@ func configWithDefaults() (*config, error) {
 	c.GiteaName = "Gitea"

 	c.MetricsEnabled = false
-	c.MetricsHost = "0.0.0.0"
-	c.MetricsPort = "6158"

 	return c, nil
 }
--- a/internal/db/access_token.go
+++ b/internal/db/access_token.go
@@ -1,125 +0,0 @@
-package db
-
-import (
-	"crypto/rand"
-	"crypto/sha256"
-	"encoding/hex"
-	"time"
-)
-
-const (
-	NoPermission        = 0
-	ReadPermission      = 1
-	ReadWritePermission = 2
-)
-
-type AccessToken struct {
-	ID         uint `gorm:"primaryKey"`
-	Name       string
-	TokenHash  string `gorm:"uniqueIndex,size:64"` // SHA-256 hash of the token
-	CreatedAt  int64
-	ExpiresAt  int64 // 0 means no expiration
-	LastUsedAt int64
-	UserID     uint
-	User       User `validate:"-"`
-
-	ScopeGist uint // 0 = none, 1 = read, 2 = read+write
-}
-
-// GenerateToken creates a new random token and returns the plain text token.
-// The token hash is stored in the AccessToken struct.
-// The plain text token should be shown to the user once and never stored.
-func (t *AccessToken) GenerateToken() (string, error) {
-	bytes := make([]byte, 32)
-	if _, err := rand.Read(bytes); err != nil {
-		return "", err
-	}
-
-	plainToken := "og_" + hex.EncodeToString(bytes)
-
-	hash := sha256.Sum256([]byte(plainToken))
-	t.TokenHash = hex.EncodeToString(hash[:])
-
-	return plainToken, nil
-}
-
-func GetAccessTokenByID(tokenID uint) (*AccessToken, error) {
-	token := new(AccessToken)
-	err := db.
-		Where("id = ?", tokenID).
-		First(&token).Error
-	return token, err
-}
-
-func GetAccessTokenByToken(plainToken string) (*AccessToken, error) {
-	hash := sha256.Sum256([]byte(plainToken))
-	tokenHash := hex.EncodeToString(hash[:])
-
-	token := new(AccessToken)
-	err := db.
-		Preload("User").
-		Where("token_hash = ?", tokenHash).
-		First(&token).Error
-	return token, err
-}
-
-func GetAccessTokensByUserID(userID uint) ([]*AccessToken, error) {
-	var tokens []*AccessToken
-	err := db.
-		Where("user_id = ?", userID).
-		Order("created_at desc").
-		Find(&tokens).Error
-	return tokens, err
-}
-
-func (t *AccessToken) Create() error {
-	t.CreatedAt = time.Now().Unix()
-	return db.Create(t).Error
-}
-
-func (t *AccessToken) Delete() error {
-	return db.Delete(t).Error
-}
-
-func (t *AccessToken) UpdateLastUsed() error {
-	return db.Model(t).Update("last_used_at", time.Now().Unix()).Error
-}
-
-func (t *AccessToken) IsExpired() bool {
-	if t.ExpiresAt == 0 {
-		return false
-	}
-	return time.Now().Unix() > t.ExpiresAt
-}
-
-func (t *AccessToken) HasGistReadPermission() bool {
-	return t.ScopeGist >= ReadPermission
-}
-
-func (t *AccessToken) HasGistWritePermission() bool {
-	return t.ScopeGist >= ReadWritePermission
-}
-
-// -- DTO -- //
-
-type AccessTokenDTO struct {
-	Name      string `form:"name" validate:"required,max=255"`
-	ScopeGist uint   `form:"scope_gist" validate:"min=0,max=2"`
-	ExpiresAt string `form:"expires_at"` // empty means no expiration, otherwise date format (YYYY-MM-DD)
-}
-
-func (dto *AccessTokenDTO) ToAccessToken() *AccessToken {
-	var expiresAt int64
-	if dto.ExpiresAt != "" {
-		// date input format: 2006-01-02, expires at end of day
-		if t, err := time.ParseInLocation("2006-01-02", dto.ExpiresAt, time.Local); err == nil {
-			expiresAt = t.Add(24*time.Hour - time.Second).Unix()
-		}
-	}
-
-	return &AccessToken{
-		Name:      dto.Name,
-		ScopeGist: dto.ScopeGist,
-		ExpiresAt: expiresAt,
-	}
-}
--- a/internal/db/db.go
+++ b/internal/db/db.go
@@ -155,7 +155,7 @@ func Setup(dbUri string) error {
 		return err
 	}

-	if err = db.AutoMigrate(&User{}, &Gist{}, &SSHKey{}, &AdminSetting{}, &Invitation{}, &WebAuthnCredential{}, &TOTP{}, &GistTopic{}, &GistLanguage{}, &GistInitQueue{}, &AccessToken{}); err != nil {
+	if err = db.AutoMigrate(&User{}, &Gist{}, &SSHKey{}, &AdminSetting{}, &Invitation{}, &WebAuthnCredential{}, &TOTP{}, &GistTopic{}, &GistLanguage{}, &GistInitQueue{}); err != nil {
 		return err
 	}

@@ -269,5 +269,5 @@ func DeprecationDBFilename() {
 }

 func TruncateDatabase() error {
-	return db.Migrator().DropTable("likes", &User{}, "gists", &SSHKey{}, &AdminSetting{}, &Invitation{}, &WebAuthnCredential{}, &TOTP{}, &GistTopic{}, &GistLanguage{}, &GistInitQueue{}, &AccessToken{})
+	return db.Migrator().DropTable("likes", &User{}, "gists", &SSHKey{}, &AdminSetting{}, &Invitation{}, &WebAuthnCredential{}, &TOTP{}, &GistTopic{}, &GistLanguage{}, &GistInitQueue{})
 }
--- a/internal/db/gist.go
+++ b/internal/db/gist.go
@@ -71,10 +71,8 @@ type Gist struct {
 	Uuid            string
 	Title           string
 	URL             string
-	URLNormalized   string
 	Preview         string
 	PreviewFilename string
-	PreviewMimeType string
 	Description     string
 	Private         Visibility // 0: public, 1: unlisted, 2: private
 	UserID          uint
@@ -99,11 +97,6 @@ type Like struct {
 	CreatedAt int64
 }

-func (gist *Gist) BeforeSave(_ *gorm.DB) error {
-	gist.URLNormalized = strings.ToLower(gist.URL)
-	return nil
-}
-
 func (gist *Gist) BeforeDelete(tx *gorm.DB) error {
 	// Decrement fork counter if the gist was forked
 	err := tx.Model(&Gist{}).
@@ -116,8 +109,7 @@ func (gist *Gist) BeforeDelete(tx *gorm.DB) error {
 func GetGist(user string, gistUuid string) (*Gist, error) {
 	gist := new(Gist)
 	err := db.Preload("User").Preload("Forked.User").Preload("Topics").
-		Where("(gists.uuid LIKE ? OR gists.url_normalized = ?) AND users.username_normalized = ?",
-			strings.ToLower(gistUuid)+"%", strings.ToLower(gistUuid), strings.ToLower(user)).
+		Where("(gists.uuid like ? OR gists.url = ?) AND users.username like ?", gistUuid+"%", gistUuid, user).
 		Joins("join users on gists.user_id = users.id").
 		First(&gist).Error

@@ -559,7 +551,6 @@ func (gist *Gist) UpdatePreviewAndCount(withTimestampUpdate bool) error {
 	if len(filesStr) == 0 {
 		gist.Preview = ""
 		gist.PreviewFilename = ""
-		gist.PreviewMimeType = ""
 	} else {
 		for _, fileStr := range filesStr {
 			file, err := gist.File("HEAD", fileStr, true)
@@ -571,7 +562,6 @@ func (gist *Gist) UpdatePreviewAndCount(withTimestampUpdate bool) error {
 			}
 			gist.Preview = ""
 			gist.PreviewFilename = file.Filename
-			gist.PreviewMimeType = file.MimeType.ContentType

 			if !file.MimeType.CanBeEdited() {
 				continue
@@ -727,17 +717,13 @@ func (gist *Gist) ToDTO() (*GistDTO, error) {
 // -- DTO -- //

 type GistDTO struct {
-	Title              string    `validate:"max=250" form:"title"`
-	Description        string    `validate:"max=1000" form:"description"`
-	URL                string    `validate:"max=32,alphanumdashorempty" form:"url"`
-	Files              []FileDTO `validate:"min=1,dive"`
-	Name               []string  `form:"name"`
-	Content            []string  `form:"content"`
-	Topics             string    `validate:"gisttopics" form:"topics"`
-	UploadedFilesUUID  []string  `validate:"omitempty,dive,required,uuid" form:"uploadedfile_uuid"`
-	UploadedFilesNames []string  `validate:"omitempty,dive,required" form:"uploadedfile_filename"`
-	BinaryFileOldName  []string  `form:"binary_old_name"`
-	BinaryFileNewName  []string  `form:"binary_new_name"`
+	Title       string    `validate:"max=250" form:"title"`
+	Description string    `validate:"max=1000" form:"description"`
+	URL         string    `validate:"max=32,alphanumdashorempty" form:"url"`
+	Files       []FileDTO `validate:"min=1,dive"`
+	Name        []string  `form:"name"`
+	Content     []string  `form:"content"`
+	Topics      string    `validate:"gisttopics" form:"topics"`
 	VisibilityDTO
 }

--- a/internal/db/migration.go
+++ b/internal/db/migration.go
@@ -2,9 +2,7 @@ package db

 import (
 	"fmt"
-
 	"github.com/rs/zerolog/log"
-	"gorm.io/gorm"
 )

 type MigrationVersion struct {
@@ -14,74 +12,60 @@ type MigrationVersion struct {

 func applyMigrations(dbInfo *databaseInfo) error {
 	switch dbInfo.Type {
-	case SQLite, PostgreSQL, MySQL:
-		return applyAllMigrations(dbInfo.Type)
+	case SQLite:
+		return applySqliteMigrations()
+	case PostgreSQL, MySQL:
+		return nil
 	default:
 		return fmt.Errorf("unknown database type: %s", dbInfo.Type)
 	}
+
 }

-func applyAllMigrations(dbType databaseType) error {
+func applySqliteMigrations() error {
+	// Create migration table if it doesn't exist
 	if err := db.AutoMigrate(&MigrationVersion{}); err != nil {
 		log.Fatal().Err(err).Msg("Error creating migration version table")
 		return err
 	}

+	// Get the current migration version
 	var currentVersion MigrationVersion
 	db.First(&currentVersion)

+	// Define migrations
 	migrations := []struct {
 		Version uint
-		DBTypes []databaseType // nil = all types
 		Func    func() error
 	}{
-		{1, []databaseType{SQLite}, v1_modifyConstraintToSSHKeys},
-		{2, []databaseType{SQLite}, v2_lowercaseEmails},
-		{3, nil, v3_normalizedColumns},
+		{1, v1_modifyConstraintToSSHKeys},
+		{2, v2_lowercaseEmails},
+		// Add more migrations here as needed
 	}

+	// Apply migrations
 	for _, m := range migrations {
-		if m.Version <= currentVersion.Version {
-			continue
-		}
-
-		// Skip migrations not intended for this DB type
-		if len(m.DBTypes) > 0 {
-			applicable := false
-			for _, t := range m.DBTypes {
-				if t == dbType {
-					applicable = true
-					break
-				}
+		if m.Version > currentVersion.Version {
+			tx := db.Begin()
+			if err := tx.Error; err != nil {
+				log.Fatal().Err(err).Msg("Error starting transaction")
+				return err
 			}
-			if !applicable {
-				// Advance version so we don't retry on next startup
+
+			if err := m.Func(); err != nil {
+				log.Fatal().Err(err).Msg(fmt.Sprintf("Error applying migration %d:", m.Version))
+				tx.Rollback()
+				return err
+			} else {
+				if err = tx.Commit().Error; err != nil {
+					log.Fatal().Err(err).Msg(fmt.Sprintf("Error committing migration %d:", m.Version))
+					return err
+				}
 				currentVersion.Version = m.Version
 				db.Save(&currentVersion)
-				continue
+				log.Info().Msg(fmt.Sprintf("Migration %d applied successfully", m.Version))
 			}
 		}
-
-		tx := db.Begin()
-		if err := tx.Error; err != nil {
-			log.Fatal().Err(err).Msg("Error starting transaction")
-			return err
-		}
-
-		if err := m.Func(); err != nil {
-			tx.Rollback()
-			log.Fatal().Err(err).Msg(fmt.Sprintf("Error applying migration %d:", m.Version))
-			return err
-		}
-
-		if err := tx.Commit().Error; err != nil {
-			log.Fatal().Err(err).Msg(fmt.Sprintf("Error committing migration %d:", m.Version))
-			return err
-		}
-
-		currentVersion.Version = m.Version
-		db.Save(&currentVersion)
-		log.Info().Msg(fmt.Sprintf("Migration %d applied successfully", m.Version))
 	}

 	return nil
@@ -128,12 +112,3 @@ func v2_lowercaseEmails() error {
 	copySQL := `UPDATE users SET email = lower(email);`
 	return db.Exec(copySQL).Error
 }
-
-func v3_normalizedColumns() error {
-	if err := db.Model(&User{}).Where("username_normalized = '' OR username_normalized IS NULL").
-		Updates(map[string]interface{}{"username_normalized": gorm.Expr("LOWER(username)")}).Error; err != nil {
-		return err
-	}
-	return db.Model(&Gist{}).Where("url_normalized = '' OR url_normalized IS NULL").
-		Updates(map[string]interface{}{"url_normalized": gorm.Expr("LOWER(url)")}).Error
-}
--- a/internal/db/user.go
+++ b/internal/db/user.go
@@ -2,38 +2,29 @@ package db

 import (
 	"encoding/json"
-	"strings"
-
 	"github.com/thomiceli/opengist/internal/git"
 	"gorm.io/gorm"
 )

 type User struct {
-	ID                 uint   `gorm:"primaryKey"`
-	Username           string `gorm:"uniqueIndex,size:191"`
-	UsernameNormalized string `gorm:"index"`
-	Password           string
-	IsAdmin            bool
-	CreatedAt          int64
-	Email              string
-	MD5Hash            string // for gravatar, if no Email is specified, the value is random
-	AvatarURL          string
-	GithubID           string
-	GitlabID           string
-	GiteaID            string
-	OIDCID             string `gorm:"column:oidc_id"`
-	StylePreferences   string
+	ID               uint   `gorm:"primaryKey"`
+	Username         string `gorm:"uniqueIndex,size:191"`
+	Password         string
+	IsAdmin          bool
+	CreatedAt        int64
+	Email            string
+	MD5Hash          string // for gravatar, if no Email is specified, the value is random
+	AvatarURL        string
+	GithubID         string
+	GitlabID         string
+	GiteaID          string
+	OIDCID           string `gorm:"column:oidc_id"`
+	StylePreferences string

 	Gists               []Gist               `gorm:"constraint:OnUpdate:CASCADE,OnDelete:CASCADE;foreignKey:UserID"`
 	SSHKeys             []SSHKey             `gorm:"constraint:OnUpdate:CASCADE,OnDelete:CASCADE;foreignKey:UserID"`
 	Liked               []Gist               `gorm:"many2many:likes;constraint:OnUpdate:CASCADE,OnDelete:CASCADE"`
 	WebAuthnCredentials []WebAuthnCredential `gorm:"constraint:OnUpdate:CASCADE,OnDelete:CASCADE;foreignKey:UserID"`
-	AccessTokens        []AccessToken        `gorm:"constraint:OnUpdate:CASCADE,OnDelete:CASCADE;foreignKey:UserID"`
-}
-
-func (user *User) BeforeSave(_ *gorm.DB) error {
-	user.UsernameNormalized = strings.ToLower(user.Username)
-	return nil
 }

 func (user *User) BeforeDelete(tx *gorm.DB) error {
@@ -81,11 +72,6 @@ func (user *User) BeforeDelete(tx *gorm.DB) error {
 		return err
 	}

-	err = tx.Where("user_id = ?", user.ID).Delete(&AccessToken{}).Error
-	if err != nil {
-		return err
-	}
-
 	err = tx.Where("user_id = ?", user.ID).Delete(&Gist{}).Error
 	if err != nil {
 		return err
@@ -101,7 +87,7 @@ func (user *User) BeforeDelete(tx *gorm.DB) error {

 func UserExists(username string) (bool, error) {
 	var count int64
-	err := db.Model(&User{}).Where("username_normalized = ?", strings.ToLower(username)).Count(&count).Error
+	err := db.Model(&User{}).Where("username like ?", username).Count(&count).Error
 	return count > 0, err
 }

@@ -119,7 +105,7 @@ func GetAllUsers(offset int) ([]*User, error) {
 func GetUserByUsername(username string) (*User, error) {
 	user := new(User)
 	err := db.
-		Where("username_normalized = ?", strings.ToLower(username)).
+		Where("username like ?", username).
 		First(&user).Error
 	return user, err
 }
@@ -266,11 +252,6 @@ type UserDTO struct {
 	Password string `form:"password" validate:"required"`
 }

-type OAuthRegisterDTO struct {
-	Username string `form:"username" validate:"required,max=24,alphanumdash,notreserved"`
-	Email    string `form:"email" validate:"omitempty,email"`
-}
-
 func (dto *UserDTO) ToUser() *User {
 	return &User{
 		Username: dto.Username,
--- a/internal/git/file.go
+++ b/internal/git/file.go
@@ -1,19 +0,0 @@
-package git
-
-import (
-	"path/filepath"
-	"strings"
-)
-
-func CleanTreePathName(s string) string {
-	name := filepath.Base(s)
-
-	if name == "." || name == ".." {
-		return ""
-	}
-
-	name = strings.ReplaceAll(name, "/", "")
-	name = strings.ReplaceAll(name, "\\", "")
-
-	return name
-}
--- a/internal/git/mime.go
+++ b/internal/git/mime.go
@@ -2,45 +2,43 @@ package git

 import (
 	"fmt"
-	"net/http"
 	"strings"

 	"github.com/gabriel-vasile/mimetype"
 )

 type MimeType struct {
-	ContentType       string
-	extension         string
-	golangContentType string // json, m3u, etc. still renderable as text
+	ContentType string
+	extension   string
 }

 func (mt MimeType) IsText() bool {
-	return strings.HasPrefix(mt.ContentType, "text/") || strings.HasPrefix(mt.golangContentType, "text/")
+	return strings.Contains(mt.ContentType, "text/")
 }

 func (mt MimeType) IsCSV() bool {
-	return strings.HasPrefix(mt.ContentType, "text/csv") &&
+	return strings.Contains(mt.ContentType, "text/csv") &&
 		(strings.HasSuffix(mt.extension, ".csv"))
 }

 func (mt MimeType) IsImage() bool {
-	return strings.HasPrefix(mt.ContentType, "image/")
+	return strings.Contains(mt.ContentType, "image/")
 }

 func (mt MimeType) IsSVG() bool {
-	return strings.HasPrefix(mt.ContentType, "image/svg+xml")
+	return strings.Contains(mt.ContentType, "image/svg+xml")
 }

 func (mt MimeType) IsPDF() bool {
-	return strings.HasPrefix(mt.ContentType, "application/pdf")
+	return strings.Contains(mt.ContentType, "application/pdf")
 }

 func (mt MimeType) IsAudio() bool {
-	return strings.HasPrefix(mt.ContentType, "audio/")
+	return strings.Contains(mt.ContentType, "audio/")
 }

 func (mt MimeType) IsVideo() bool {
-	return strings.HasPrefix(mt.ContentType, "video/")
+	return strings.Contains(mt.ContentType, "video/")
 }

 func (mt MimeType) CanBeHighlighted() bool {
@@ -89,5 +87,5 @@ func (mt MimeType) RenderType() string {
 }

 func DetectMimeType(data []byte, extension string) MimeType {
-	return MimeType{mimetype.Detect(data).String(), extension, http.DetectContentType(data)}
+	return MimeType{mimetype.Detect(data).String(), extension}
 }
--- a/internal/i18n/locales/en-US.yml
+++ b/internal/i18n/locales/en-US.yml
@@ -157,7 +157,6 @@ settings.password-label-title: Password
 settings.header.account: Account
 settings.header.mfa: MFA
 settings.header.ssh: SSH
-settings.header.tokens: Access tokens
 settings.header.style: Style
 settings.style.gist-code: Gist code
 settings.style.no-soft-wrap: No Soft Wrap
@@ -170,26 +169,6 @@ settings.style.theme: Theme
 settings.style.theme-light: Light
 settings.style.theme-dark: Dark
 settings.style.theme-auto: Auto
-settings.create-token: Create access token
-settings.create-token-help: Access tokens can be used to access the API
-settings.token-name: Name
-settings.token-permissions: Permissions
-settings.token-gist-permission: Gists
-settings.token-permission-none: No access
-settings.token-permission-read: Read
-settings.token-permission-read-write: Read & Write
-settings.delete-token: Delete
-settings.delete-token-confirm: Confirm deletion of access token
-settings.token-created-at: Created
-settings.token-never-used: Never used
-settings.token-last-used: Last used
-settings.token-expiration: Expiration
-settings.token-expiration-help: Leave empty for no expiration
-settings.token-expires-at: Expires
-settings.token-no-expiration: No expiration
-settings.token-expired: expired
-settings.token-created: Token created, make sure to copy it now, you won't be able to see it again!
-settings.token-deleted: Access token deleted

 auth.signup-disabled: Administrator has disabled signing up
 auth.login: Login
@@ -200,13 +179,6 @@ auth.password: Password
 auth.register-instead: Register instead
 auth.login-instead: Login instead
 auth.oauth: Continue with %s account
-auth.oauth.no-provider: OAuth provider not found
-auth.oauth.complete-registration: Complete your registration
-auth.oauth.complete-registration-button: Create account
-auth.oauth.signing-in-with: Signing in with %s
-auth.oauth.cancel: Cancel
-auth.oauth.existing-account: Existing account?
-auth.oauth.already-have-account: If you already have an Opengist account, login first and link your %s account from your settings.
 auth.mfa: Multi-factor authentication
 auth.mfa.passkey: Passkey
 auth.mfa.passkeys: Passkeys
@@ -248,7 +220,7 @@ error.signup-disabled: Signing up is disabled
 error.signup-disabled-form: Signing up via registration form is disabled
 error.login-disabled-form: Logging in via login form is disabled
 error.complete-oauth-login: "Cannot complete user auth: %s"
-error.oauth-unsupported: Unsupported OAuth2 provider
+error.oauth-unsupported: Unsupported provider
 error.cannot-bind-data: Cannot bind data
 error.invalid-number: Invalid number
 error.invalid-character-unescaped: Invalid character unescaped
@@ -350,8 +322,6 @@ flash.auth.user-sshkeys-not-created: Could not create ssh key
 flash.auth.must-be-logged-in: You must be logged in to access gists
 flash.auth.passkey-registred: Passkey %s registered
 flash.auth.passkey-deleted: Passkey deleted
-flash.auth.oauth-session-expired: OAuth2 session expired, please try again
-flash.auth.oauth-already-linked: This %s account is already linked to another user

 flash.gist.visibility-changed: Gist visibility has been changed
 flash.gist.deleted: Gist has been deleted
@@ -374,4 +344,4 @@ validation.not-enough: Not enough %s
 validation.invalid: Invalid %s
 validation.invalid-gist-topics: Invalid gist topics, they must start with a letter or number, consist of 50 characters or less, and can include hyphens

-html.title.admin-panel: Admin panel
+html.title.admin-panel: Admin panel
--- a/internal/i18n/locales/ru-RU.yml
+++ b/internal/i18n/locales/ru-RU.yml
@@ -51,7 +51,7 @@ gist.edit.save: Сохранить

 gist.list.joined: Зарегистрирован
 gist.list.all: Все фрагменты
-gist.list.search-results: Результаты поиска
+gist.list.search-results: Результаты  поиска
 gist.list.sort: Сортировка
 gist.list.sort-by-created: по дате создания
 gist.list.sort-by-updated: по дате обновления
@@ -159,19 +159,19 @@ admin.created_at: Создан
 admin.config-link: Эти настройки могут быть %s файлом конфигурации YAML и/или переменными окружения.
 admin.config-link-overriden: перекрыты
 admin.disable-signup: Запретить регистрацию
-admin.disable-signup_help: Запретить создание новых доступов.
+admin.disable-signup_help: Запретить создание новых доступов
 admin.require-login: Требовать авторизацию
 admin.require-login_help: Запретить просмотр фрагментов без авторизации.
 admin.disable-login: Запретить авторизацию по паролю
 admin.disable-login_help: Запретить авторизацию с вводом пароля, форсировать внешнюю авторизацию через Gitea/GitHub.
 admin.disable-gravatar: Запретить Gravatar
 admin.disable-gravatar_help: Запретить использование Gravatar как провайдера изображений профиля.
-admin.allow-gists-without-login: Разрешить доступ к отдельным фрагментам без авторизации
-admin.allow-gists-without-login_help: Разрешает просматривать и скачивать отдельные фрагменты без входа, но требует авторизацию для поиска фрагментов.
+admin.allow-gists-without-login:
+admin.allow-gists-without-login_help:
 admin.users.delete_confirm: Вы уверены что хотите удалить этого пользователя?

 admin.gists.title: Название
-admin.gists.private: Приватный?
+admin.gists.private: Приватный
 admin.gists.nb-files: Файлов
 admin.gists.nb-likes: Понравилось
 admin.gists.delete_confirm: Вы уверены что хотите удалить этот фрагмент?
@@ -183,175 +183,77 @@ gist.list.all-liked-by: 'Все фрагменты, понравившиеся %
 gist.list.all-forked-by: 'Все фрагменты, ответвлённые %s'
 gist.list.all-from: 'Все фрагменты от %s'
 gist.search.found: 'фрагментов найдено'
-gist.search.no-results: 'Фрагменты не найдены'
+gist.search.no-results: 'Не найден ни один фрагмент'
 gist.search.help.user: 'фрагментов создано пользователем'
-gist.search.help.title: 'фрагментов с указанным заголовком'
-gist.search.help.filename: 'фрагменты содержащие файлы с указанным именем'
-gist.search.help.extension: 'фрагменты, содержащие файлы с указанным расширением'
-gist.search.help.language: 'фрагменты, содержащие файлы с указанным языком'
-gist.forks.for: 'Форки фрагмента %s'
-gist.likes.for: 'Лайки фрагмента %s'
-gist.revision-of: 'Ревизия фрагмента %s'
-settings.link-gitlab-account: 'Привязать учётную запись Gitlab'
-settings.unlink-gitlab-account: 'Отвязать учётную запись GitHub'
-settings.change-username: 'Сменить имя пользователя'
-settings.create-password: 'Создать пароль'
-settings.create-password-help: 'Создайте пароль для входа в Opengist по HTTP'
-settings.change-password: 'Сменить пароль'
-settings.change-password-help: 'Смените пароль для входа в Opengist по HTTP'
-settings.password-label-title: 'Пароль'
-error.page-not-found: 'Страница не найдена'
-error.bad-request: 'Неверный запрос'
-error.signup-disabled: 'Регистрация недоступна'
-error.signup-disabled-form: 'Регистрация через форму недоступна'
-error.login-disabled-form: 'Авторизация через форму недоступна'
-error.complete-oauth-login: 'Не удалось завершить авторизацию пользователя: %s'
-error.oauth-unsupported: 'Провайдер OAuth не поддерживается'
-error.cannot-bind-data: 'Не удалось обработать данные'
-error.invalid-number: 'Некорректное числовое значение'
-error.invalid-character-unescaped: 'Обнаружен неверный неэкранированный символ'
-admin.invitations: 'Инвайты'
-admin.invitations.create: 'Создать инвайт'
-admin.actions.sync-previews: 'Обновить предпросмотры всех фрагментов'
-admin.actions.reset-hooks: 'Сбросить хуки Git-сервера для всех репозиториев'
-admin.actions.index-gists: 'Проиндексировать все фрагменты'
-validation.should-not-be-empty: 'Поле %s не должно быть пустым'
-admin.invitations.help: 'Инвайты используются для создания аккаунта, даже когда регистрация запрещена.'
-admin.invitations.max_uses: 'Максимальное количество использований'
-admin.invitations.expires_at: 'Истекает'
-admin.invitations.code: 'Код'
-admin.invitations.copy_link: 'Скопировать ссылку'
-admin.invitations.uses: 'Количество использований'
-admin.invitations.expired: 'Истёк'
-flash.admin.user-deleted: 'Пользователь удалён'
-flash.admin.gist-deleted: 'Фрагмент удалён'
-flash.admin.invitation-created: 'Приглашение создано'
-flash.admin.invitation-deleted: 'Приглашение удалено'
-flash.admin.sync-fs: 'Выполняется синхронизация репозиториев с файловой системой…'
-flash.admin.sync-db: 'Выполняется синхронизация репозиториев с базой данных…'
-flash.admin.git-gc: 'Сборка мусора в репозиториях…'
-flash.admin.sync-previews: 'Обновление предпросмотров фрагментов…'
-flash.admin.reset-hooks: 'Пересоздание Git-хуков для всех репозиториев…'
-flash.admin.index-gists: 'Выполняется индексация фрагментов…'
-flash.auth.username-exists: 'Такое имя пользователя уже занято'
-flash.auth.invalid-credentials: 'Некорректные данные для входа'
-flash.auth.account-linked-oauth: 'Учётная запись связана с %s'
-flash.auth.account-unlinked-oauth: 'Учётная запись отключена от %s'
-flash.auth.user-sshkeys-not-retrievable: 'Не удалось получить SSH-ключи пользователя'
-flash.auth.user-sshkeys-not-created: 'Не удалось создать SSH-ключ'
-flash.auth.must-be-logged-in: 'Для доступа к фрагментам необходимо войти в аккаунт'
-flash.gist.visibility-changed: 'Видимость фрагмента изменена'
-flash.gist.deleted: 'Фрагмент удалён'
-flash.gist.fork-own-gist: 'Нельзя создать форк собственного фрагмента'
-flash.gist.forked: 'Фрагмент создан как форк'
-flash.user.email-updated: 'Адрес электронной почты обновлён'
-flash.user.invalid-ssh-key: 'Неверный SSH-ключ'
-flash.user.ssh-key-added: 'SSH-ключ добавлен'
-flash.user.ssh-key-deleted: 'SSH-ключ удалён'
-flash.user.password-updated: 'Пароль обновлён'
-flash.user.username-updated: 'Имя пользователя обновлено'
-validation.is-too-long: 'Поле %s слишком длинное'
-validation.should-not-include-sub-directory: 'Поле %s не должно содержать подкаталоги'
-validation.should-only-contain-alphanumeric-characters: 'Поле %s должно содержать только буквы и цифры'
-validation.should-only-contain-alphanumeric-characters-and-dashes: 'Поле %s должно содержать только буквы, цифры и дефисы'
-validation.not-enough: 'Недостаточно %s'
-validation.invalid: 'Неверный %s'
-html.title.admin-panel: 'Панель администратора'
-settings.ssh-key-exists: SSH-ключ уже существует
-gist.file-binary-edit: Этот файл является бинарным.
-gist.preview-non-available: Предпросмотр недоступен
-gist.file-raw: Не удалось отобразить файл.
-gist.new.topics: Темы (через пробел)
-gist.list.topic-results-topic: Все фрагменты с темой %s
-gist.search.help.topic: фрагменты с заданной темой
-gist.search.placeholder.title: Заголовок
-gist.search.placeholder.visibility: Видимость
-gist.search.placeholder.public: Публичный
-gist.search.placeholder.unlisted: Скрытый
-gist.search.placeholder.private: Приватный
-gist.search.placeholder.language: Язык
-gist.search.placeholder.all: Все
-gist.search.placeholder.topics: Темы
-gist.search.placeholder.search: Поиск
-gist.new.drop-files: Перетащите файлы сюда или нажмите для загрузки
-gist.new.any-file-type: Поддерживаются файлы любого типа
-gist.delete.confirm: Вы уверены, что хотите удалить этот gist?
-gist.list.topic-results: Все фрагменты с этой темой
-gist.revision.binary-file-changes: Изменения в бинарных файлах не отображаются
-admin.actions.sync-gist-languages: Обновить языки всех фрагментов
-admin.invitations.delete_confirm: Вы хотите удалить это приглашение?
-flash.auth.passkey-deleted: Ключ доступа удалён
-flash.auth.passkey-registred: Ключ доступа %s зарегистрирован
-validation.invalid-gist-topics: 'Некорректные темы фрагмента: они должны начинаться с буквы или цифры, быть не длиннее 50 символов и могут содержать дефисы'
-settings.header.tokens: Токены доступа
-settings.style.removed-lines-color: Цвет удалённых строк
-settings.style.added-lines-color: Цвет добавленных строк
-settings.style.git-lines-color: Цвет git-строк
-settings.style.save-style: Сохранить оформление
-settings.create-token: Создать токен доступа
-settings.create-token-help: Токены доступа используются для доступа к API
-settings.token-name: Название
-settings.delete-token-confirm: Подтвердите удаление токена доступа
-settings.token-permissions: Права доступа
-settings.token-gist-permission: Фрагменты
-settings.token-permission-none: Нет доступа
-settings.token-permission-read: Чтение
-settings.token-permission-read-write: Чтение и запись
-settings.delete-token: Удалить
-settings.token-created-at: Создан
-settings.token-never-used: Не использовался
-settings.token-expiration: Срок действия
-settings.token-expiration-help: Оставьте пустым, чтобы срок действия не ограничивался
-settings.token-expires-at: Истекает
-settings.token-expired: истёк
-settings.token-deleted: Токен доступа удалён
-auth.mfa.delete-passkey-confirm: Подтвердите удаление ключа доступа
-auth.mfa.use-passkey: Использовать ключ доступа
-auth.mfa.bind-passkey: Добавить ключ доступа
-auth.mfa.login-with-passkey: Войти с помощью ключа доступа
-auth.mfa.waiting-for-passkey-input: Ожидание подтверждения в браузере…
-auth.mfa.use-passkey-to-finish: Используйте ключ доступа для завершения аутентификации
-auth.mfa.passkeys-help: Добавьте ключ доступа для входа в аккаунт и использования в качестве MFA.
-auth.mfa.passkey-name: Название
-auth.mfa.delete-passkey: Удалить
-auth.mfa.passkey-added-at: Добавлен
-auth.mfa.passkey-never-used: Никогда не использовался
-auth.mfa.passkey-last-used: Последнее использование
-auth.totp.already-enabled: TOTP уже включён
-auth.totp.invalid-secret: Некорректный секретный ключ TOTP
-auth.totp.invalid-code: Некорректный одноразовый код
-auth.totp.code-used: Код восстановления %s уже был использован и больше недействителен. Вы можете отключить MFA или сгенерировать новые коды.
-auth.totp.disabled: Двухфакторная аутентификация TOTP отключена
-auth.totp.disable: Отключить TOTP
-auth.totp.enter-code: Введите код из приложения Authenticator
-auth.totp.submit: Подтвердить
-auth.totp.proceed: Продолжить
-auth.totp.scan-qr-code: Отсканируйте QR-код ниже в приложении-аутентификаторе для включения двухфакторной аутентификации или введите указанную строку и подтвердите кодом.
-error.not-in-mfa-session: Пользователь не находится в MFA-сессии
-error.no-file-uploaded: Файл не загружен
-error.cannot-open-file: Не удалось открыть загруженный файл
-auth.totp.help: TOTP — это метод двухфакторной аутентификации, использующий общий секрет для генерации одноразового пароля.
-auth.totp.use: Использовать TOTP
-auth.totp.regenerate-recovery-codes: Сгенерировать коды восстановления заново
-auth.totp: Одноразовый пароль по времени (TOTP)
-flash.admin.sync-gist-languages: Обновление языков фрагментов…
-settings.token-created: Токен создан, обязательно сохраните его, повторно он показан не будет!
-settings.token-last-used: Последнее использование
-settings.token-no-expiration: Бессрочно
-auth.totp.save-recovery-codes: Сохраните коды восстановления в безопасном месте. Они понадобятся для восстановления доступа к аккаунту при утере приложения-аутентификатора.
-auth.totp.enter-recovery-key: или код восстановления, если вы потеряли устройство
-settings.style.theme: Тема
-settings.style.theme-light: Светлая тема
-settings.style.theme-dark: Тёмная тема
-settings.style.theme-auto: Авто
-auth.mfa: Регистрация отключена администратором
-auth.mfa.passkey: Вход
-auth.mfa.passkeys: Ключи доступа
-auth.totp.code: Код
-settings.header.account: Аккаунт
-settings.header.mfa: Двухфакторная аутентификация (MFA)
-settings.header.ssh: SSH
-settings.header.style: Тема оформления
-settings.style.gist-code: Код фрагмента
-settings.style.no-soft-wrap: Без переносов строк
-settings.style.soft-wrap: Перенос строк
+gist.search.help.title: ''
+gist.search.help.filename: ''
+gist.search.help.extension: ''
+gist.search.help.language: ''
+gist.forks.for: ''
+gist.likes.for: ''
+gist.revision-of: ''
+settings.link-gitlab-account: ''
+settings.unlink-gitlab-account: ''
+settings.change-username: ''
+settings.create-password: ''
+settings.create-password-help: ''
+settings.change-password: ''
+settings.change-password-help: ''
+settings.password-label-title: ''
+error.page-not-found: ''
+error.bad-request: ''
+error.signup-disabled: ''
+error.signup-disabled-form: ''
+error.login-disabled-form: ''
+error.complete-oauth-login: ''
+error.oauth-unsupported: ''
+error.cannot-bind-data: ''
+error.invalid-number: ''
+error.invalid-character-unescaped: ''
+admin.invitations: ''
+admin.invitations.create: ''
+admin.actions.sync-previews: ''
+admin.actions.reset-hooks: ''
+admin.actions.index-gists: ''
+validation.should-not-be-empty: ''
+admin.invitations.help: ''
+admin.invitations.max_uses: ''
+admin.invitations.expires_at: ''
+admin.invitations.code: ''
+admin.invitations.copy_link: ''
+admin.invitations.uses: ''
+admin.invitations.expired: ''
+flash.admin.user-deleted: ''
+flash.admin.gist-deleted: ''
+flash.admin.invitation-created: ''
+flash.admin.invitation-deleted: ''
+flash.admin.sync-fs: ''
+flash.admin.sync-db: ''
+flash.admin.git-gc: ''
+flash.admin.sync-previews: ''
+flash.admin.reset-hooks: ''
+flash.admin.index-gists: ''
+flash.auth.username-exists: ''
+flash.auth.invalid-credentials: ''
+flash.auth.account-linked-oauth: ''
+flash.auth.account-unlinked-oauth: ''
+flash.auth.user-sshkeys-not-retrievable: ''
+flash.auth.user-sshkeys-not-created: ''
+flash.auth.must-be-logged-in: ''
+flash.gist.visibility-changed: ''
+flash.gist.deleted: ''
+flash.gist.fork-own-gist: ''
+flash.gist.forked: ''
+flash.user.email-updated: ''
+flash.user.invalid-ssh-key: ''
+flash.user.ssh-key-added: ''
+flash.user.ssh-key-deleted: ''
+flash.user.password-updated: ''
+flash.user.username-updated: ''
+validation.is-too-long: ''
+validation.should-not-include-sub-directory: ''
+validation.should-only-contain-alphanumeric-characters: ''
+validation.should-only-contain-alphanumeric-characters-and-dashes: ''
+validation.not-enough: ''
+validation.invalid: ''
+html.title.admin-panel: ''
--- a/internal/render/highlight.go
+++ b/internal/render/highlight.go
@@ -27,9 +27,8 @@ func (r HighlightedFile) InternalType() string {

 type RenderedGist struct {
 	*db.Gist
-	Lines           []string
-	HTML            string
-	PreviewMimeType *git.MimeType
+	Lines []string
+	HTML  string
 }

 func highlightFile(file *git.File) (HighlightedFile, error) {
@@ -77,18 +76,6 @@ func HighlightGistPreview(gist *db.Gist) (RenderedGist, error) {
 		Gist: gist,
 	}

-	if gist.PreviewMimeType != "" {
-		mt := &git.MimeType{ContentType: gist.PreviewMimeType}
-		if mt.CanBeEmbedded() {
-			rendered.PreviewMimeType = mt
-			return rendered, nil
-		}
-	}
-
-	if gist.Preview == "" {
-		return rendered, nil
-	}
-
 	style := newStyle()
 	lexer := newLexer(gist.PreviewFilename)
 	if lexer.Config().Name == "markdown" {
--- a/internal/validator/validator.go
+++ b/internal/validator/validator.go
@@ -59,7 +59,7 @@ func validateReservedKeywords(fl validator.FieldLevel) bool {
 	name := fl.Field().String()

 	restrictedNames := map[string]struct{}{}
-	for _, restrictedName := range []string{"assets", "register", "login", "logout", "settings", "admin-panel", "all", "search", "init", "healthcheck", "preview", "metrics", "mfa", "webauthn", "oauth"} {
+	for _, restrictedName := range []string{"assets", "register", "login", "logout", "settings", "admin-panel", "all", "search", "init", "healthcheck", "preview", "metrics", "mfa", "webauthn"} {
 		restrictedNames[restrictedName] = struct{}{}
 	}

--- a/internal/web/handlers/admin/actions_test.go
+++ b/internal/web/handlers/admin/actions_test.go
@@ -1,46 +0,0 @@
-package admin_test
-
-import (
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestAdminActions(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-	urls := []string{
-		"/admin-panel/sync-fs",
-		"/admin-panel/sync-db",
-		"/admin-panel/gc-repos",
-		"/admin-panel/sync-previews",
-		"/admin-panel/reset-hooks",
-		"/admin-panel/index-gists",
-		"/admin-panel/sync-languages",
-	}
-
-	s.Register(t, "thomas")
-	s.Register(t, "nonadmin")
-
-	t.Run("NoUser", func(t *testing.T) {
-		for _, url := range urls {
-			s.Request(t, "POST", url, nil, 404)
-		}
-	})
-
-	t.Run("AdminUser", func(t *testing.T) {
-		s.Login(t, "thomas")
-		for _, url := range urls {
-			resp := s.Request(t, "POST", url, nil, 302)
-			require.Equal(t, "/admin-panel", resp.Header.Get("Location"))
-		}
-	})
-
-	t.Run("NonAdminUser", func(t *testing.T) {
-		s.Login(t, "nonadmin")
-		for _, url := range urls {
-			s.Request(t, "POST", url, nil, 404)
-		}
-	})
-}
--- a/internal/web/handlers/admin/admin_test.go
+++ b/internal/web/handlers/admin/admin_test.go
@@ -1,269 +0,0 @@
-package admin_test
-
-import (
-	"net/url"
-	"os"
-	"path/filepath"
-	"strconv"
-	"testing"
-	"time"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/config"
-	"github.com/thomiceli/opengist/internal/db"
-	"github.com/thomiceli/opengist/internal/git"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestAdminPages(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	urls := []string{
-		"/admin-panel",
-		"/admin-panel/users",
-		"/admin-panel/gists",
-		"/admin-panel/invitations",
-		"/admin-panel/configuration",
-	}
-
-	s.Register(t, "thomas")
-	s.Register(t, "nonadmin")
-
-	t.Run("NoUser", func(t *testing.T) {
-		for _, url := range urls {
-			s.Request(t, "GET", url, nil, 404)
-		}
-	})
-
-	t.Run("AdminUser", func(t *testing.T) {
-		s.Login(t, "thomas")
-		for _, url := range urls {
-			s.Request(t, "GET", url, nil, 200)
-		}
-	})
-
-	t.Run("NonAdminUser", func(t *testing.T) {
-		s.Login(t, "nonadmin")
-		for _, url := range urls {
-			s.Request(t, "GET", url, nil, 404)
-		}
-	})
-}
-
-func TestAdminSetConfig(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	settings := []string{
-		db.SettingDisableSignup,
-		db.SettingRequireLogin,
-		db.SettingAllowGistsWithoutLogin,
-		db.SettingDisableLoginForm,
-		db.SettingDisableGravatar,
-	}
-
-	s.Register(t, "thomas")
-	s.Register(t, "nonadmin")
-
-	t.Run("NoUser", func(t *testing.T) {
-		s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {db.SettingDisableSignup}, "value": {"1"}}, 404)
-	})
-
-	t.Run("NonAdminUser", func(t *testing.T) {
-		s.Login(t, "nonadmin")
-		s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {db.SettingDisableSignup}, "value": {"1"}}, 404)
-	})
-
-	t.Run("AdminUser", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		for _, setting := range settings {
-			val, err := db.GetSetting(setting)
-			require.NoError(t, err)
-			require.Equal(t, "0", val)
-
-			s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {setting}, "value": {"1"}}, 200)
-
-			val, err = db.GetSetting(setting)
-			require.NoError(t, err)
-			require.Equal(t, "1", val)
-
-			s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {setting}, "value": {"0"}}, 200)
-
-			val, err = db.GetSetting(setting)
-			require.NoError(t, err)
-			require.Equal(t, "0", val)
-		}
-	})
-}
-
-func TestAdminPagination(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	for i := 0; i < 11; i++ {
-		s.Register(t, "user"+strconv.Itoa(i))
-	}
-
-	t.Run("Pagination", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		s.Request(t, "GET", "/admin-panel/users", nil, 200)
-		s.Request(t, "GET", "/admin-panel/users?page=2", nil, 200)
-		s.Request(t, "GET", "/admin-panel/users?page=3", nil, 404)
-		s.Request(t, "GET", "/admin-panel/users?page=0", nil, 200)
-		s.Request(t, "GET", "/admin-panel/users?page=-1", nil, 200)
-		s.Request(t, "GET", "/admin-panel/users?page=a", nil, 200)
-	})
-}
-
-func TestAdminUserOperations(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "nonadmin")
-
-	t.Run("DeleteUser", func(t *testing.T) {
-		s.Login(t, "nonadmin")
-
-		gist1 := db.GistDTO{
-			Title: "gist",
-			VisibilityDTO: db.VisibilityDTO{
-				Private: 0,
-			},
-			Name:    []string{"gist1.txt"},
-			Content: []string{"yeah"},
-			Topics:  "",
-		}
-		s.Request(t, "POST", "/", gist1, 302)
-
-		_, err := os.Stat(filepath.Join(config.GetHomeDir(), git.ReposDirectory, "nonadmin"))
-		require.NoError(t, err)
-
-		count, err := db.CountAll(db.User{})
-		require.NoError(t, err)
-		require.Equal(t, int64(2), count)
-
-		s.Request(t, "POST", "/admin-panel/users/2/delete", nil, 404)
-
-		s.Login(t, "thomas")
-
-		s.Request(t, "POST", "/admin-panel/users/2/delete", nil, 302)
-
-		count, err = db.CountAll(db.User{})
-		require.NoError(t, err)
-		require.Equal(t, int64(1), count)
-
-		_, err = os.Stat(filepath.Join(config.GetHomeDir(), git.ReposDirectory, "nonadmin"))
-		require.Error(t, err)
-	})
-}
-
-func TestAdminGistOperations(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "nonadmin")
-
-	t.Run("DeleteGist", func(t *testing.T) {
-		s.Login(t, "nonadmin")
-		gist1 := db.GistDTO{
-			Title: "gist",
-			VisibilityDTO: db.VisibilityDTO{
-				Private: 0,
-			},
-			Name:    []string{"gist1.txt"},
-			Content: []string{"yeah"},
-			Topics:  "",
-		}
-		s.Request(t, "POST", "/", gist1, 302)
-
-		count, err := db.CountAll(db.Gist{})
-		require.NoError(t, err)
-		require.Equal(t, int64(1), count)
-
-		gist1Db, err := db.GetGistByID("1")
-		require.NoError(t, err)
-
-		_, err = os.Stat(filepath.Join(config.GetHomeDir(), git.ReposDirectory, "nonadmin", gist1Db.Identifier()))
-		require.NoError(t, err)
-
-		s.Request(t, "POST", "/admin-panel/gists/1/delete", nil, 404)
-
-		s.Login(t, "thomas")
-
-		s.Request(t, "POST", "/admin-panel/gists/1/delete", nil, 302)
-
-		count, err = db.CountAll(db.Gist{})
-		require.NoError(t, err)
-		require.Equal(t, int64(0), count)
-
-		_, err = os.Stat(filepath.Join(config.GetHomeDir(), git.ReposDirectory, "nonadmin", gist1Db.Identifier()))
-		require.Error(t, err)
-	})
-}
-
-func TestAdminInvitationOperations(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "nonadmin")
-
-	t.Run("Invitation", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		s.Request(t, "POST", "/admin-panel/invitations", url.Values{
-			"nbMax":         {""},
-			"expiredAtUnix": {""},
-		}, 302)
-		invitation1, err := db.GetInvitationByID(1)
-		require.NoError(t, err)
-		require.Equal(t, uint(1), invitation1.ID)
-		require.Equal(t, uint(0), invitation1.NbUsed)
-		require.Equal(t, uint(10), invitation1.NbMax)
-		require.InDelta(t, time.Now().Unix()+604800, invitation1.ExpiresAt, 10)
-
-		s.Request(t, "POST", "/admin-panel/invitations", url.Values{
-			"nbMax":         {"aa"},
-			"expiredAtUnix": {"1735722000"},
-		}, 302)
-		invitation2, err := db.GetInvitationByID(2)
-		require.NoError(t, err)
-		require.Equal(t, invitation2, &db.Invitation{
-			ID:        2,
-			Code:      invitation2.Code,
-			ExpiresAt: time.Unix(1735722000, 0).Unix(),
-			NbUsed:    0,
-			NbMax:     10,
-		})
-
-		s.Request(t, "POST", "/admin-panel/invitations", url.Values{
-			"nbMax":         {"20"},
-			"expiredAtUnix": {"1735722000"},
-		}, 302)
-		invitation3, err := db.GetInvitationByID(3)
-		require.NoError(t, err)
-		require.Equal(t, invitation3, &db.Invitation{
-			ID:        3,
-			Code:      invitation3.Code,
-			ExpiresAt: time.Unix(1735722000, 0).Unix(),
-			NbUsed:    0,
-			NbMax:     20,
-		})
-
-		count, err := db.CountAll(db.Invitation{})
-		require.NoError(t, err)
-		require.Equal(t, int64(3), count)
-
-		s.Request(t, "POST", "/admin-panel/invitations/1/delete", nil, 302)
-
-		count, err = db.CountAll(db.Invitation{})
-		require.NoError(t, err)
-		require.Equal(t, int64(2), count)
-	})
-}
--- a/internal/web/handlers/auth/auth_test.go
+++ b/internal/web/handlers/auth/auth_test.go
@@ -1 +0,0 @@
-package auth_test
--- a/internal/web/handlers/auth/oauth.go
+++ b/internal/web/handlers/auth/oauth.go
@@ -4,15 +4,16 @@ import (
 	"crypto/md5"
 	"errors"
 	"fmt"
+	"slices"
 	"strings"

 	"github.com/rs/zerolog/log"
 	"github.com/thomiceli/opengist/internal/auth/oauth"
 	"github.com/thomiceli/opengist/internal/config"
 	"github.com/thomiceli/opengist/internal/db"
-	"github.com/thomiceli/opengist/internal/i18n"
-	"github.com/thomiceli/opengist/internal/validator"
 	"github.com/thomiceli/opengist/internal/web/context"
+	"golang.org/x/text/cases"
+	"golang.org/x/text/language"
 	"gorm.io/gorm"
 )

@@ -47,8 +48,7 @@ func Oauth(ctx *context.Context) error {

 	provider, err := oauth.DefineProvider(providerStr, opengistUrl)
 	if err != nil {
-		ctx.AddFlash(ctx.Tr("error.oauth-unsupported"), "error")
-		return ctx.Redirect(302, "/login")
+		return ctx.ErrorRes(400, ctx.Tr("error.oauth-unsupported"), nil)
 	}

 	if err = provider.RegisterProvider(); err != nil {
@@ -62,37 +62,28 @@ func Oauth(ctx *context.Context) error {
 func OauthCallback(ctx *context.Context) error {
 	provider, err := oauth.CompleteUserAuth(ctx)
 	if err != nil {
-		ctx.AddFlash(ctx.Tr("auth.oauth.no-provider"), "error")
-		return ctx.Redirect(302, "/login")
+		return ctx.ErrorRes(400, ctx.Tr("error.complete-oauth-login", err.Error()), err)
 	}

 	currUser := ctx.User
-	user := provider.GetProviderUser()
-
 	// if user is logged in, link account to user and update its avatar URL
 	if currUser != nil {
-		// check if this OAuth account is already linked to another user
-		if existingUser, err := db.GetUserByProvider(user.UserID, provider.GetProvider()); err == nil && existingUser != nil {
-			ctx.AddFlash(ctx.Tr("flash.auth.oauth-already-linked", config.C.OIDCProviderName), "error")
-			return ctx.RedirectTo("/settings")
-		}
-
 		provider.UpdateUserDB(currUser)

 		if err = currUser.Update(); err != nil {
-			return ctx.ErrorRes(500, "Cannot update user "+config.C.OIDCProviderName+" id", err)
+			return ctx.ErrorRes(500, "Cannot update user "+cases.Title(language.English).String(provider.GetProvider())+" id", err)
 		}

-		ctx.AddFlash(ctx.Tr("flash.auth.account-linked-oauth", config.C.OIDCProviderName), "success")
+		ctx.AddFlash(ctx.Tr("flash.auth.account-linked-oauth", cases.Title(language.English).String(provider.GetProvider())), "success")
 		return ctx.RedirectTo("/settings")
 	}

+	user := provider.GetProviderUser()
 	userDB, err := db.GetUserByProvider(user.UserID, provider.GetProvider())
-	// if user is not in database, redirect to OAuth registration page
+	// if user is not in database, create it
 	if err != nil {
 		if ctx.GetData("DisableSignup") == true {
-			ctx.AddFlash(ctx.Tr("error.signup-disabled"), "error")
-			return ctx.Redirect(302, "/login")
+			return ctx.ErrorRes(403, ctx.Tr("error.signup-disabled"), nil)
 		}

 		if !errors.Is(err, gorm.ErrRecordNotFound) {
@@ -103,174 +94,79 @@ func OauthCallback(ctx *context.Context) error {
 			user.NickName = strings.Split(user.Email, "@")[0]
 		}

-		sess := ctx.GetSession()
-		sess.Values["oauthProvider"] = provider.GetProvider()
-		sess.Values["oauthUserID"] = user.UserID
-		sess.Values["oauthNickname"] = user.NickName
-		sess.Values["oauthEmail"] = user.Email
-		sess.Values["oauthAvatarURL"] = user.AvatarURL
-		sess.Values["oauthIsAdmin"] = provider.IsAdmin()
-
-		sess.Options.MaxAge = 10 * 60 // 10 minutes
-		ctx.SaveSession(sess)
-
-		return ctx.RedirectTo("/oauth/register")
-	}
-
-	// promote user to admin from oidc group
-	if !userDB.IsAdmin && provider.IsAdmin() {
-		userDB.IsAdmin = true
-		if err = userDB.Update(); err != nil {
-			return ctx.ErrorRes(500, "Cannot set user admin", err)
+		userDB = &db.User{
+			Username: user.NickName,
+			Email:    user.Email,
+			MD5Hash:  fmt.Sprintf("%x", md5.Sum([]byte(strings.ToLower(strings.TrimSpace(user.Email))))),
 		}
-	}

-	sess := ctx.GetSession()
-	sess.Values["user"] = userDB.ID
-	ctx.SaveSession(sess)
-	ctx.DeleteCsrfCookie()
+		// set provider id and avatar URL
+		provider.UpdateUserDB(userDB)

-	return ctx.RedirectTo("/")
-}
+		if err = userDB.Create(); err != nil {
+			if db.IsUniqueConstraintViolation(err) {
+				ctx.AddFlash(ctx.Tr("flash.auth.username-exists"), "error")
+				return ctx.RedirectTo("/login")
+			}

-func OauthRegister(ctx *context.Context) error {
-	if ctx.GetData("DisableSignup") == true {
-		ctx.AddFlash(ctx.Tr("error.signup-disabled"), "error")
-		return ctx.Redirect(302, "/login")
-	}
+			return ctx.ErrorRes(500, "Cannot create user", err)
+		}

-	sess := ctx.GetSession()
+		// if oidc admin group is not configured set first user as admin
+		if config.C.OIDCAdminGroup == "" && userDB.ID == 1 {
+			if err = userDB.SetAdmin(); err != nil {
+				return ctx.ErrorRes(500, "Cannot set user admin", err)
+			}
+		}

-	ctx.SetData("title", ctx.TrH("auth.oauth.complete-registration"))
-	ctx.SetData("htmlTitle", ctx.TrH("auth.oauth.complete-registration"))
-	ctx.SetData("oauthProvider", config.C.OIDCProviderName)
-	ctx.SetData("oauthNickname", sess.Values["oauthNickname"])
-	ctx.SetData("oauthEmail", sess.Values["oauthEmail"])
-	ctx.SetData("oauthAvatarURL", sess.Values["oauthAvatarURL"])
-
-	return ctx.Html("oauth_register.html")
-}
-
-func ProcessOauthRegister(ctx *context.Context) error {
-	if ctx.GetData("DisableSignup") == true {
-		ctx.AddFlash(ctx.Tr("error.signup-disabled"), "error")
-		return ctx.Redirect(302, "/login")
-	}
-
-	sess := ctx.GetSession()
-
-	providerStr := sess.Values["oauthProvider"].(string)
-	oauthUserID := sess.Values["oauthUserID"].(string)
-
-	setOauthRegisterData := func(dto *db.OAuthRegisterDTO) {
-		ctx.SetData("title", ctx.TrH("auth.oauth.complete-registration"))
-		ctx.SetData("htmlTitle", ctx.TrH("auth.oauth.complete-registration"))
-		ctx.SetData("oauthProvider", config.C.OIDCProviderName)
-		if dto != nil {
-			ctx.SetData("oauthNickname", dto.Username)
-			ctx.SetData("oauthEmail", dto.Email)
+		keys, err := provider.GetProviderUserSSHKeys()
+		if err != nil {
+			ctx.AddFlash(ctx.Tr("flash.auth.user-sshkeys-not-retrievable"), "error")
+			log.Error().Err(err).Msg("Could not get user keys")
 		} else {
-			ctx.SetData("oauthNickname", sess.Values["oauthNickname"])
-			ctx.SetData("oauthEmail", sess.Values["oauthEmail"])
-		}
-		ctx.SetData("oauthAvatarURL", sess.Values["oauthAvatarURL"])
-	}
+			for _, key := range keys {
+				sshKey := db.SSHKey{
+					Title:   "Added from " + user.Provider,
+					Content: key,
+					User:    *userDB,
+				}

-	// Bind and validate form data
-	dto := new(db.OAuthRegisterDTO)
-	if err := ctx.Bind(dto); err != nil {
-		return ctx.ErrorRes(400, ctx.Tr("error.cannot-bind-data"), err)
-	}
-
-	if err := ctx.Validate(dto); err != nil {
-		ctx.AddFlash(validator.ValidationMessages(&err, ctx.GetData("locale").(*i18n.Locale)), "error")
-		setOauthRegisterData(dto)
-		return ctx.Html("oauth_register.html")
-	}
-
-	if exists, err := db.UserExists(dto.Username); err != nil || exists {
-		ctx.AddFlash(ctx.Tr("flash.auth.username-exists"), "error")
-		setOauthRegisterData(dto)
-		return ctx.Html("oauth_register.html")
-	}
-
-	// Check if OAuth account is already linked to another user (race condition protection)
-	if existingUser, err := db.GetUserByProvider(oauthUserID, providerStr); err == nil && existingUser != nil {
-		ctx.AddFlash(ctx.Tr("flash.auth.oauth-already-linked", config.C.OIDCProviderName), "error")
-		setOauthRegisterData(dto)
-		return ctx.Html("oauth_register.html")
-	}
-
-	userDB := &db.User{
-		Username: dto.Username,
-		Email:    dto.Email,
-	}
-	if dto.Email != "" {
-		userDB.MD5Hash = fmt.Sprintf("%x", md5.Sum([]byte(strings.ToLower(strings.TrimSpace(dto.Email)))))
-	}
-
-	nickname := ""
-	if n, ok := sess.Values["oauthNickname"].(string); ok {
-		nickname = n
-	}
-	avatarURL := ""
-	if av, ok := sess.Values["oauthAvatarURL"].(string); ok {
-		avatarURL = av
-	}
-
-	callbackProvider, err := oauth.NewCallbackProviderFromSession(providerStr, oauthUserID, nickname, dto.Email, avatarURL)
-	if err != nil {
-		return ctx.ErrorRes(500, "Cannot create provider", err)
-	}
-	callbackProvider.UpdateUserDB(userDB)
-
-	if err := userDB.Create(); err != nil {
-		if db.IsUniqueConstraintViolation(err) {
-			ctx.AddFlash(ctx.Tr("flash.auth.username-exists"), "error")
-			setOauthRegisterData(dto)
-			return ctx.Html("oauth_register.html")
-		}
-		return ctx.ErrorRes(500, "Cannot create user", err)
-	}
-
-	if config.C.OIDCAdminGroup == "" && userDB.ID == 1 {
-		if err := userDB.SetAdmin(); err != nil {
-			return ctx.ErrorRes(500, "Cannot set user admin", err)
-		}
-	}
-
-	if isAdmin, ok := sess.Values["oauthIsAdmin"].(bool); ok && isAdmin {
-		userDB.IsAdmin = true
-		_ = userDB.Update()
-	}
-
-	keys, err := callbackProvider.GetProviderUserSSHKeys()
-	if err != nil {
-		ctx.AddFlash(ctx.Tr("flash.auth.user-sshkeys-not-retrievable"), "error")
-		log.Error().Err(err).Msg("Could not get user keys")
-	} else {
-		for _, key := range keys {
-			sshKey := db.SSHKey{
-				Title:   "Added from " + providerStr,
-				Content: key,
-				User:    *userDB,
-			}
-			if err = sshKey.Create(); err != nil {
-				ctx.AddFlash(ctx.Tr("flash.auth.user-sshkeys-not-created"), "error")
-				log.Error().Err(err).Msg("Could not create ssh key")
+				if err = sshKey.Create(); err != nil {
+					ctx.AddFlash(ctx.Tr("flash.auth.user-sshkeys-not-created"), "error")
+					log.Error().Err(err).Msg("Could not create ssh key")
+				}
 			}
 		}
 	}

-	delete(sess.Values, "oauthProvider")
-	delete(sess.Values, "oauthUserID")
-	delete(sess.Values, "oauthNickname")
-	delete(sess.Values, "oauthEmail")
-	delete(sess.Values, "oauthAvatarURL")
-	delete(sess.Values, "oauthIsAdmin")
+	// update is admin status from oidc group
+	if config.C.OIDCAdminGroup != "" {
+		groupClaimName := config.C.OIDCGroupClaimName
+		if groupClaimName == "" {
+			log.Error().Msg("No OIDC group claim name configured")
+		} else if groups, ok := user.RawData[groupClaimName].([]interface{}); ok {
+			var groupNames []string
+			for _, group := range groups {
+				if groupName, ok := group.(string); ok {
+					groupNames = append(groupNames, groupName)
+				}
+			}
+			isOIDCAdmin := slices.Contains(groupNames, config.C.OIDCAdminGroup)
+			log.Debug().Bool("isOIDCAdmin", isOIDCAdmin).Str("user", user.Name).Msg("User is in admin group")

+			if userDB.IsAdmin != isOIDCAdmin {
+				userDB.IsAdmin = isOIDCAdmin
+				if err = userDB.Update(); err != nil {
+					return ctx.ErrorRes(500, "Cannot set user admin", err)
+				}
+			}
+		} else {
+			log.Error().Msg("No groups found in user data")
+		}
+	}
+
+	sess := ctx.GetSession()
 	sess.Values["user"] = userDB.ID
-	sess.Options.MaxAge = 60 * 60 * 24 * 365 // 1 year
 	ctx.SaveSession(sess)
 	ctx.DeleteCsrfCookie()

@@ -288,10 +184,10 @@ func OauthUnlink(ctx *context.Context) error {

 	if provider.UserHasProvider(currUser) {
 		if err := currUser.DeleteProviderID(providerStr); err != nil {
-			return ctx.ErrorRes(500, "Cannot unlink account from "+config.C.OIDCProviderName, err)
+			return ctx.ErrorRes(500, "Cannot unlink account from "+cases.Title(language.English).String(providerStr), err)
 		}

-		ctx.AddFlash(ctx.Tr("flash.auth.account-unlinked-oauth", config.C.OIDCProviderName), "success")
+		ctx.AddFlash(ctx.Tr("flash.auth.account-unlinked-oauth", cases.Title(language.English).String(providerStr)), "success")
 		return ctx.RedirectTo("/settings")
 	}

--- a/internal/web/handlers/auth/password_test.go
+++ b/internal/web/handlers/auth/password_test.go
@@ -1,221 +0,0 @@
-package auth_test
-
-import (
-	"net/url"
-	"testing"
-
-	"github.com/labstack/echo/v4"
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/db"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestRegisterPage(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-	s.Register(t, "thomas")
-
-	t.Run("Form", func(t *testing.T) {
-		s.Request(t, "GET", "/register", nil, 200)
-		s.TestCtxData(t, echo.Map{
-			"isLoginPage":   false,
-			"disableForm":   false,
-			"disableSignup": false,
-		})
-	})
-
-	t.Run("FormDisabled", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {"disable-signup"}, "value": {"1"}}, 200)
-		s.Logout()
-
-		s.Request(t, "GET", "/register", nil, 200)
-		s.TestCtxData(t, echo.Map{
-			"disableSignup": true,
-		})
-	})
-
-	t.Run("FormDisabledWithInviteCode", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {"disable-signup"}, "value": {"1"}}, 200)
-
-		s.Request(t, "POST", "/admin-panel/invitations", url.Values{
-			"nbMax":         {"10"},
-			"expiredAtUnix": {""},
-		}, 302)
-
-		invitation, err := db.GetInvitationByID(1)
-		require.NoError(t, err)
-
-		s.Logout()
-
-		s.Request(t, "GET", "/register", nil, 200)
-		s.TestCtxData(t, echo.Map{
-			"disableSignup": true,
-		})
-		s.Request(t, "GET", "/register?code="+invitation.Code, nil, 200)
-		s.TestCtxData(t, echo.Map{
-			"disableSignup": false,
-		})
-	})
-}
-
-func TestProcessRegister(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	t.Run("Register", func(t *testing.T) {
-		user, err := db.GetUserByUsername("thomas")
-		require.NoError(t, err)
-		require.True(t, user.IsAdmin)
-		s.Logout()
-
-		s.Request(t, "POST", "/register", db.UserDTO{Username: "seconduser", Password: "password123"}, 302)
-		user, err = db.GetUserByUsername("seconduser")
-		require.NoError(t, err)
-		require.False(t, user.IsAdmin)
-		s.Logout()
-	})
-
-	t.Run("DuplicateUsername", func(t *testing.T) {
-		s.Request(t, "POST", "/register", db.UserDTO{Username: "useraaa", Password: "password123"}, 302)
-		s.Logout()
-		s.Request(t, "POST", "/register", db.UserDTO{Username: "useraaa", Password: "password456"}, 200)
-		s.Logout()
-	})
-
-	t.Run("InvalidUsername", func(t *testing.T) {
-		s.Request(t, "POST", "/register", db.UserDTO{Username: "", Password: "password123"}, 200)
-		s.Request(t, "POST", "/register", db.UserDTO{Username: "aze@", Password: "password123"}, 200)
-	})
-
-	t.Run("EmptyPassword", func(t *testing.T) {
-		s.Request(t, "POST", "/register", db.UserDTO{Username: "newuser", Password: ""}, 200)
-	})
-
-	t.Run("RegisterDisabled", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {"disable-signup"}, "value": {"1"}}, 200)
-		s.Logout()
-
-		s.Request(t, "POST", "/register", db.UserDTO{Username: "blocked", Password: "password123"}, 403)
-
-		exists, err := db.UserExists("blocked")
-		require.NoError(t, err)
-		require.False(t, exists)
-	})
-
-	t.Run("RegisterWithInvitationCode", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {"disable-signup"}, "value": {"1"}}, 200)
-		s.Request(t, "POST", "/admin-panel/invitations", url.Values{
-			"nbMax":         {"10"},
-			"expiredAtUnix": {""},
-		}, 302)
-		s.Logout()
-
-		invitations, err := db.GetAllInvitations()
-		require.NoError(t, err)
-		require.NotEmpty(t, invitations)
-		invitation := invitations[len(invitations)-1]
-
-		s.Logout()
-
-		s.Request(t, "POST", "/register?code="+invitation.Code, db.UserDTO{Username: "inviteduser", Password: "password123"}, 302)
-
-		user, err := db.GetUserByUsername("inviteduser")
-		require.NoError(t, err)
-		require.Equal(t, "inviteduser", user.Username)
-
-		updatedInvitation, err := db.GetInvitationByID(invitation.ID)
-		require.NoError(t, err)
-		require.Equal(t, uint(1), updatedInvitation.NbUsed)
-	})
-}
-
-func TestLoginPage(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-	s.Register(t, "thomas")
-
-	t.Run("Form", func(t *testing.T) {
-		s.Request(t, "GET", "/login", nil, 200)
-		s.TestCtxData(t, echo.Map{
-			"isLoginPage": true,
-			"disableForm": false,
-		})
-	})
-
-	t.Run("FormDisabled", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {"disable-login-form"}, "value": {"1"}}, 200)
-		s.Logout()
-
-		s.Request(t, "GET", "/login", nil, 200)
-		s.TestCtxData(t, echo.Map{
-			"disableForm": true,
-		})
-	})
-}
-
-func TestProcessLogin(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-
-	t.Run("ValidCredentials", func(t *testing.T) {
-		resp := s.Request(t, "POST", "/login", db.UserDTO{Username: "thomas", Password: "thomas"}, 302)
-		require.Equal(t, "/", resp.Header.Get("Location"))
-		require.NotEmpty(t, s.SessionCookie)
-		require.Equal(t, "thomas", s.User().Username)
-
-		s.Logout()
-	})
-
-	t.Run("InvalidPassword", func(t *testing.T) {
-		resp := s.Request(t, "POST", "/login", db.UserDTO{Username: "thomas", Password: "wrongpassword"}, 302)
-		require.Equal(t, "/login", resp.Header.Get("Location"))
-		require.Nil(t, s.User())
-	})
-
-	t.Run("NonExistentUser", func(t *testing.T) {
-		resp := s.Request(t, "POST", "/login", db.UserDTO{Username: "nonexistent", Password: "password"}, 302)
-		require.Equal(t, "/login", resp.Header.Get("Location"))
-		require.Nil(t, s.User())
-	})
-
-	t.Run("EmptyCredentials", func(t *testing.T) {
-		s.Request(t, "POST", "/login", db.UserDTO{Username: "", Password: ""}, 302)
-		require.Nil(t, s.User())
-	})
-
-	t.Run("LoginFormDisabled", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {"disable-login-form"}, "value": {"1"}}, 200)
-		s.Logout()
-
-		s.Request(t, "POST", "/login", db.UserDTO{Username: "thomas", Password: "thomas"}, 403)
-		require.Nil(t, s.User())
-	})
-}
-
-func TestLogout(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-
-	t.Run("LogoutRedirects", func(t *testing.T) {
-		s.Login(t, "thomas")
-		require.Equal(t, "thomas", s.User().Username)
-
-		resp := s.Request(t, "GET", "/logout", nil, 302)
-		require.Equal(t, "/all", resp.Header.Get("Location"))
-		require.Nil(t, s.User())
-		s.Request(t, "GET", "/", nil, 302)
-	})
-}
--- a/internal/web/handlers/gist/create.go
+++ b/internal/web/handlers/gist/create.go
@@ -24,6 +24,11 @@ func Create(ctx *context.Context) error {
 func ProcessCreate(ctx *context.Context) error {
 	isCreate := ctx.Request().URL.Path == "/"

+	err := ctx.Request().ParseForm()
+	if err != nil {
+		return ctx.ErrorRes(400, ctx.Tr("error.bad-request"), err)
+	}
+
 	dto := new(db.GistDTO)
 	var gist *db.Gist

@@ -34,24 +39,25 @@ func ProcessCreate(ctx *context.Context) error {
 		ctx.SetData("htmlTitle", ctx.TrH("gist.edit.edit-gist", gist.Title))
 	}

-	err := ctx.Bind(dto)
-	if err != nil {
+	if err := ctx.Bind(dto); err != nil {
 		return ctx.ErrorRes(400, ctx.Tr("error.cannot-bind-data"), err)
 	}

 	dto.Files = make([]db.FileDTO, 0)
+	fileCounter := 0

-	names := dto.Name
-	contents := dto.Content
+	names := ctx.Request().PostForm["name"]
+	contents := ctx.Request().PostForm["content"]

 	// Process files from text editors
 	for i, content := range contents {
 		if content == "" {
 			continue
 		}
-		name := git.CleanTreePathName(names[i])
+		name := names[i]
 		if name == "" {
-			name = "gistfile" + strconv.Itoa(len(dto.Files)+1) + ".txt"
+			fileCounter += 1
+			name = "gistfile" + strconv.Itoa(fileCounter) + ".txt"
 		}

 		escapedValue, err := url.PathUnescape(content)
@@ -66,26 +72,18 @@ func ProcessCreate(ctx *context.Context) error {
 	}

 	// Process uploaded files from UUID arrays
-	fileUUIDs := dto.UploadedFilesUUID
-	fileFilenames := dto.UploadedFilesNames
+	fileUUIDs := ctx.Request().PostForm["uploadedfile_uuid"]
+	fileFilenames := ctx.Request().PostForm["uploadedfile_filename"]
 	if len(fileUUIDs) == len(fileFilenames) {
 		for i, fileUUID := range fileUUIDs {
-			if !uuidRegex.MatchString(filepath.Base(fileUUID)) {
-				continue
-			}
-			filePath := filepath.Join(config.GetHomeDir(), "uploads", fileUUID)
+			filePath := filepath.Join(filepath.Join(config.GetHomeDir(), "uploads"), fileUUID)

 			if _, err := os.Stat(filePath); err != nil {
 				continue
 			}

-			name := git.CleanTreePathName(fileFilenames[i])
-			if name == "" {
-				name = "gistfile" + strconv.Itoa(len(dto.Files)+1) + ".txt"
-			}
-
 			dto.Files = append(dto.Files, db.FileDTO{
-				Filename:   name,
+				Filename:   fileFilenames[i],
 				SourcePath: filePath,
 				Content:    "", // Empty since we're using SourcePath
 			})
@@ -93,11 +91,11 @@ func ProcessCreate(ctx *context.Context) error {
 	}

 	// Process binary file operations (edit mode)
-	binaryOldNames := dto.BinaryFileOldName
-	binaryNewNames := dto.BinaryFileNewName
+	binaryOldNames := ctx.Request().PostForm["binary_old_name"]
+	binaryNewNames := ctx.Request().PostForm["binary_new_name"]
 	if len(binaryOldNames) == len(binaryNewNames) {
 		for i, oldName := range binaryOldNames {
-			newName := git.CleanTreePathName(binaryNewNames[i])
+			newName := binaryNewNames[i]

 			if newName == "" { // deletion
 				continue
--- a/internal/web/handlers/gist/create_test.go
+++ b/internal/web/handlers/gist/create_test.go
@@ -1,519 +0,0 @@
-package gist_test
-
-import (
-	"net/http"
-	"net/url"
-	"os"
-	"path/filepath"
-	"strings"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/config"
-	"github.com/thomiceli/opengist/internal/db"
-	"github.com/thomiceli/opengist/internal/git"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-// Helper function to extract username and gist identifier from redirect URL
-func getGistInfoFromRedirect(resp *http.Response) (username, identifier string) {
-	location := resp.Header.Get("Location")
-	// Location format: /{username}/{identifier}
-	parts := strings.Split(strings.TrimPrefix(location, "/"), "/")
-	if len(parts) >= 2 {
-		return parts[0], parts[1]
-	}
-	return "", ""
-}
-
-func verifyGistCreation(t *testing.T, gist *db.Gist, username, identifier string) {
-	require.NotNil(t, gist)
-	require.Equal(t, username, gist.User.Username)
-	require.Equal(t, identifier, gist.Identifier())
-	require.NotEmpty(t, gist.Uuid)
-	require.Greater(t, gist.NbFiles, 0)
-
-	gistPath := filepath.Join(config.GetHomeDir(), git.ReposDirectory, username, gist.Uuid)
-	_, err := os.Stat(gistPath)
-	require.NoError(t, err, "Gist repository should exist on filesystem at %s", gistPath)
-}
-
-func TestGistCreationPage(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-
-	t.Run("NoAuth", func(t *testing.T) {
-		s.Request(t, "GET", "/", nil, 302)
-	})
-
-	t.Run("Authenticated", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "GET", "/", nil, 200)
-	})
-}
-
-func TestGistCreation(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-
-	t.Run("NoAuth", func(t *testing.T) {
-		s.Request(t, "POST", "/", url.Values{
-			"title":   {"Test Gist"},
-			"name":    {"test.txt"},
-			"content": {"hello world"},
-		}, 302) // Redirects to login
-
-		// Verify no gist was created
-		count, err := db.CountAll(db.Gist{})
-		require.NoError(t, err)
-		require.Equal(t, int64(0), count)
-	})
-
-	tests := []struct {
-		name                 string
-		data                 url.Values
-		expectedCode         int
-		expectGistCreated    bool
-		expectedTitle        string
-		expectedDescription  string
-		expectedURL          string
-		expectedTopics       string // Expected topics string
-		expectedNbFiles      int
-		expectedVisibility   db.Visibility
-		expectedFileNames    []string          // Expected filenames in the gist
-		expectedFileContents map[string]string // Expected content for each file (filename -> content)
-	}{
-		{
-			name: "NoFiles",
-			data: url.Values{
-				"title": {"Test Gist"},
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "EmptyContent",
-			data: url.Values{
-				"title":   {"Test Gist"},
-				"name":    {"test.txt"},
-				"content": {""},
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "TitleTooLong",
-			data: url.Values{
-				"title":   {strings.Repeat("a", 251)}, // Max is 250
-				"name":    {"test.txt"},
-				"content": {"hello"},
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "DescriptionTooLong",
-			data: url.Values{
-				"title":       {"Test Gist"},
-				"description": {strings.Repeat("a", 1001)}, // Max is 1000
-				"name":        {"test.txt"},
-				"content":     {"hello"},
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "URLTooLong",
-			data: url.Values{
-				"title":   {"Test Gist"},
-				"url":     {strings.Repeat("a", 33)}, // Max is 32
-				"name":    {"test.txt"},
-				"content": {"hello"},
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "URLInvalidCharacters",
-			data: url.Values{
-				"title":   {"Test Gist"},
-				"url":     {"invalid@url#here"}, // Only alphanumeric and dashes allowed
-				"name":    {"test.txt"},
-				"content": {"hello"},
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "InvalidVisibility",
-			data: url.Values{
-				"title":   {"Test Gist"},
-				"name":    {"test.txt"},
-				"content": {"hello"},
-				"private": {"3"}, // Valid values are 0, 1, 2
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "Valid",
-			data: url.Values{
-				"title":   {"My Test Gist"},
-				"name":    {"test.txt"},
-				"url":     {"my-custom-url-123"}, // Alphanumeric + dashes should be valid
-				"content": {"hello world"},
-				"private": {"0"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "My Test Gist",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"test.txt"},
-			expectedFileContents: map[string]string{
-				"test.txt": "hello world",
-			},
-		},
-		{
-			name: "AutoNamedFile",
-			data: url.Values{
-				"title":   {"Auto Named"},
-				"name":    {""},
-				"content": {"content without name"},
-				"private": {"0"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Auto Named",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"gistfile1.txt"},
-			expectedFileContents: map[string]string{
-				"gistfile1.txt": "content without name",
-			},
-		},
-		{
-			name: "MultipleFiles",
-			data: url.Values{
-				"title":   {"Multi File Gist"},
-				"name":    []string{"", "file2.md"},
-				"content": []string{"content 1", "content 2"},
-				"private": {"0"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Multi File Gist",
-			expectedNbFiles:    2,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"gistfile1.txt", "file2.md"},
-			expectedFileContents: map[string]string{
-				"gistfile1.txt": "content 1",
-				"file2.md":      "content 2",
-			},
-		},
-		{
-			name: "NoTitle",
-			data: url.Values{
-				"name":    {"readme.md"},
-				"content": {"# README"},
-				"private": {"0"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "readme.md",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"readme.md"},
-			expectedFileContents: map[string]string{
-				"readme.md": "# README",
-			},
-		},
-		{
-			name: "Unlisted",
-			data: url.Values{
-				"title":   {"Unlisted Gist"},
-				"name":    {"secret.txt"},
-				"content": {"secret content"},
-				"private": {"1"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Unlisted Gist",
-			expectedNbFiles:    1,
-			expectedVisibility: db.UnlistedVisibility,
-			expectedFileNames:  []string{"secret.txt"},
-			expectedFileContents: map[string]string{
-				"secret.txt": "secret content",
-			},
-		},
-		{
-			name: "Private",
-			data: url.Values{
-				"title":   {"Private Gist"},
-				"name":    {"secret.txt"},
-				"content": {"secret content"},
-				"private": {"2"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Private Gist",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PrivateVisibility,
-			expectedFileNames:  []string{"secret.txt"},
-			expectedFileContents: map[string]string{
-				"secret.txt": "secret content",
-			},
-		},
-		{
-			name: "Topics",
-			data: url.Values{
-				"title":   {"Gist With Topics"},
-				"name":    {"test.txt"},
-				"content": {"hello"},
-				"topics":  {"golang testing webdev"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Gist With Topics",
-			expectedTopics:     "golang,testing,webdev",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"test.txt"},
-			expectedFileContents: map[string]string{
-				"test.txt": "hello",
-			},
-		},
-		{
-			name: "TopicsTooMany",
-			data: url.Values{
-				"title":   {"Test"},
-				"name":    {"test.txt"},
-				"content": {"hello"},
-				"topics":  {"topic1 topic2 topic3 topic4 topic5 topic6 topic7 topic8 topic9 topic10 topic11"},
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "TopicTooLong",
-			data: url.Values{
-				"title":   {"Test"},
-				"name":    {"test.txt"},
-				"content": {"hello"},
-				"topics":  {strings.Repeat("a", 51)}, // 51 chars - exceeds max of 50
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "TopicInvalidCharacters",
-			data: url.Values{
-				"title":   {"Test"},
-				"name":    {"test.txt"},
-				"content": {"hello"},
-				"topics":  {"topic@name topic.name"},
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "TopicUnicode",
-			data: url.Values{
-				"title":   {"Unicode Topics"},
-				"name":    {"test.txt"},
-				"content": {"hello"},
-				"topics":  {"编程 тест"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Unicode Topics",
-			expectedTopics:     "编程,тест",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"test.txt"},
-		},
-		{
-			name: "DuplicateFileNames",
-			data: url.Values{
-				"title":   {"Duplicate Files"},
-				"name":    []string{"test.txt", "test.txt"},
-				"content": []string{"content1", "content2"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Duplicate Files",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"test.txt"},
-			expectedFileContents: map[string]string{
-				"test.txt": "content2",
-			},
-		},
-		{
-			name: "FileNameTooLong",
-			data: url.Values{
-				"title":   {"Too Long Filename"},
-				"name":    {strings.Repeat("a", 256) + ".txt"}, // 260 total - exceeds 255
-				"content": {"hello"},
-			},
-			expectedCode:      400,
-			expectGistCreated: false,
-		},
-		{
-			name: "FileNameWithUnicode",
-			data: url.Values{
-				"title":   {"Unicode Filename"},
-				"name":    {"文件.txt"},
-				"content": {"hello world"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Unicode Filename",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"文件.txt"},
-			expectedFileContents: map[string]string{
-				"文件.txt": "hello world",
-			},
-		},
-		{
-			name: "FileNamePathTraversal",
-			data: url.Values{
-				"title":   {"Path Traversal"},
-				"name":    {"../../../etc/passwd"},
-				"content": {"malicious"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Path Traversal",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"passwd"},
-			expectedFileContents: map[string]string{
-				"passwd": "malicious",
-			},
-		},
-		{
-			name: "EmptyAndValidContent",
-			data: url.Values{
-				"title":   {"Mixed Content"},
-				"name":    []string{"empty.txt", "valid.txt", "also-empty.txt"},
-				"content": []string{"", "valid content", ""},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Mixed Content",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"valid.txt"},
-			expectedFileContents: map[string]string{
-				"valid.txt": "valid content",
-			},
-		},
-		{
-			name: "ContentWithSpecialCharacters",
-			data: url.Values{
-				"title":   {"Special Chars"},
-				"name":    {"special.txt"},
-				"content": {"Line1\nLine2\tTabbed\x00NullByte😀Emoji"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Special Chars",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"special.txt"},
-			expectedFileContents: map[string]string{
-				"special.txt": "Line1\nLine2\tTabbed\x00NullByte😀Emoji",
-			},
-		},
-		{
-			name: "ContentMultibyteUnicode",
-			data: url.Values{
-				"title":   {"Unicode Content"},
-				"name":    {"unicode.txt"},
-				"content": {"Hello 世界 🌍 Привет"},
-			},
-			expectedCode:       302,
-			expectGistCreated:  true,
-			expectedTitle:      "Unicode Content",
-			expectedNbFiles:    1,
-			expectedVisibility: db.PublicVisibility,
-			expectedFileNames:  []string{"unicode.txt"},
-			expectedFileContents: map[string]string{
-				"unicode.txt": "Hello 世界 🌍 Привет",
-			},
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			s.Login(t, "thomas")
-
-			resp := s.Request(t, "POST", "/", tt.data, tt.expectedCode)
-
-			if tt.expectGistCreated {
-				// Get gist info from redirect
-				username, gistIdentifier := getGistInfoFromRedirect(resp)
-				require.Equal(t, "thomas", username)
-				require.NotEmpty(t, gistIdentifier)
-
-				// Verify gist was created
-				gist, err := db.GetGist(username, gistIdentifier)
-				require.NoError(t, err)
-
-				// Run common verification (filesystem, git, etc.)
-				verifyGistCreation(t, gist, username, gistIdentifier)
-
-				// Verify all expected fields
-				require.Equal(t, tt.expectedTitle, gist.Title, "Title mismatch")
-				require.Equal(t, tt.expectedNbFiles, gist.NbFiles, "File count mismatch")
-				require.Equal(t, tt.expectedVisibility, gist.Private, "Visibility mismatch")
-
-				// Verify description if specified
-				if tt.expectedDescription != "" {
-					require.Equal(t, tt.expectedDescription, gist.Description, "Description mismatch")
-				}
-
-				// Verify URL if specified
-				if tt.expectedURL != "" {
-					require.Equal(t, tt.expectedURL, gist.Identifier(), "URL/Identifier mismatch")
-				}
-
-				// Verify topics if specified
-				if tt.expectedTopics != "" {
-					// Get gist topics
-					topics, err := gist.GetTopics()
-					require.NoError(t, err, "Failed to get gist topics")
-					require.ElementsMatch(t, strings.Split(tt.expectedTopics, ","), topics, "Topics mismatch")
-				}
-
-				// Verify files if specified
-				if len(tt.expectedFileNames) > 0 {
-					files, err := gist.Files("HEAD", false)
-					require.NoError(t, err, "Failed to get gist files")
-					require.Len(t, files, len(tt.expectedFileNames), "File count mismatch")
-
-					actualFileNames := make([]string, len(files))
-					for i, file := range files {
-						actualFileNames[i] = file.Filename
-					}
-					require.ElementsMatch(t, tt.expectedFileNames, actualFileNames, "File names mismatch")
-
-					// Verify file contents if specified
-					if len(tt.expectedFileContents) > 0 {
-						for filename, expectedContent := range tt.expectedFileContents {
-							content, _, err := git.GetFileContent(username, gist.Uuid, "HEAD", filename, false)
-							require.NoError(t, err, "Failed to get content for file %s", filename)
-							require.Equal(t, expectedContent, content, "Content mismatch for file %s", filename)
-						}
-					}
-				}
-			}
-		})
-	}
-}
--- a/internal/web/handlers/gist/delete_test.go
+++ b/internal/web/handlers/gist/delete_test.go
@@ -1,74 +0,0 @@
-package gist_test
-
-import (
-	"os"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/db"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestDeleteGist(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	t.Run("NoAuth", func(t *testing.T) {
-		gistPath, _, username, identifier := s.CreateGist(t, "0")
-
-		deleteURL := "/" + username + "/" + identifier + "/delete"
-		s.Request(t, "POST", deleteURL, nil, 302)
-
-		gistCheck, err := db.GetGist(username, identifier)
-		require.NoError(t, err, "Gist should still exist in database")
-		require.NotNil(t, gistCheck)
-
-		_, err = os.Stat(gistPath)
-		require.NoError(t, err, "Gist should still exist on filesystem")
-	})
-
-	t.Run("DeleteOwnGist", func(t *testing.T) {
-		gistPath, _, username, identifier := s.CreateGist(t, "0")
-
-		gistCheck, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.NotNil(t, gistCheck)
-
-		s.Login(t, "thomas")
-		deleteURL := "/" + username + "/" + identifier + "/delete"
-		s.Request(t, "POST", deleteURL, nil, 302)
-
-		gistCheck, err = db.GetGist(username, identifier)
-		require.Error(t, err, "Gist should be deleted from database")
-
-		_, err = os.Stat(gistPath)
-		require.Error(t, err, "Gist should not exist on filesystem after deletion")
-		require.True(t, os.IsNotExist(err), "Filesystem should return 'not exist' error")
-		require.Equal(t, uint(0), gistCheck.ID, "Gist should be not in database after deletion")
-	})
-
-	t.Run("DeleteOthersGist", func(t *testing.T) {
-		gistPath, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Login(t, "alice")
-		deleteURL := "/" + username + "/" + identifier + "/delete"
-		s.Request(t, "POST", deleteURL, nil, 403)
-
-		gistCheck, err := db.GetGist(username, identifier)
-		require.NoError(t, err, "Gist should still exist in database")
-		require.NotNil(t, gistCheck)
-
-		_, err = os.Stat(gistPath)
-		require.NoError(t, err, "Gist should still exist on filesystem")
-	})
-
-	t.Run("DeleteNonExistentGist", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		deleteURL := "/thomas/nonexistent-gist-12345/delete"
-		s.Request(t, "POST", deleteURL, nil, 404)
-	})
-}
--- a/internal/web/handlers/gist/download.go
+++ b/internal/web/handlers/gist/download.go
@@ -3,7 +3,6 @@ package gist
 import (
 	"archive/zip"
 	"bytes"
-	"net/url"
 	"strconv"

 	"github.com/thomiceli/opengist/internal/db"
@@ -20,23 +19,8 @@ func RawFile(ctx *context.Context) error {
 	if file == nil {
 		return ctx.NotFound("File not found")
 	}
-
-	if file.MimeType.IsSVG() {
-		ctx.Response().Header().Set("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox")
-	} else if file.MimeType.IsPDF() {
-		ctx.Response().Header().Set("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'")
-	}
-
-	if file.MimeType.CanBeEmbedded() {
-		ctx.Response().Header().Set("Content-Type", file.MimeType.ContentType)
-	} else if file.MimeType.IsText() {
-		ctx.Response().Header().Set("Content-Type", "text/plain; charset=utf-8")
-	} else {
-		ctx.Response().Header().Set("Content-Type", "application/octet-stream")
-	}
-
-	ctx.Response().Header().Set("Content-Disposition", "inline; filename=\""+url.PathEscape(file.Filename)+"\"")
-	ctx.Response().Header().Set("X-Content-Type-Options", "nosniff")
+	ctx.Response().Header().Set("Content-Type", file.MimeType.ContentType)
+	ctx.Response().Header().Set("Content-Disposition", "inline; filename=\""+file.Filename+"\"")
 	return ctx.PlainText(200, file.Content)
 }

@@ -52,9 +36,8 @@ func DownloadFile(ctx *context.Context) error {
 	}

 	ctx.Response().Header().Set("Content-Type", file.MimeType.ContentType)
-	ctx.Response().Header().Set("Content-Disposition", "attachment; filename=\""+url.PathEscape(file.Filename)+"\"")
+	ctx.Response().Header().Set("Content-Disposition", "attachment; filename="+file.Filename)
 	ctx.Response().Header().Set("Content-Length", strconv.Itoa(len(file.Content)))
-	ctx.Response().Header().Set("X-Content-Type-Options", "nosniff")
 	_, err = ctx.Response().Write([]byte(file.Content))
 	if err != nil {
 		return ctx.ErrorRes(500, "Error downloading the file", err)
--- a/internal/web/handlers/gist/download_test.go
+++ b/internal/web/handlers/gist/download_test.go
@@ -1,141 +0,0 @@
-package gist_test
-
-import (
-	"archive/zip"
-	"bytes"
-	"io"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestDownloadZip(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	t.Run("MultipleFiles", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		resp := s.Request(t, "GET", "/"+username+"/"+identifier+"/archive/HEAD", nil, 200)
-
-		body, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-
-		zipReader, err := zip.NewReader(bytes.NewReader(body), int64(len(body)))
-		require.NoError(t, err)
-		require.Len(t, zipReader.File, 2)
-
-		fileNames := make([]string, len(zipReader.File))
-		contents := make([]string, len(zipReader.File))
-		for i, file := range zipReader.File {
-			fileNames[i] = file.Name
-			f, err := file.Open()
-			require.NoError(t, err)
-			content, err := io.ReadAll(f)
-			require.NoError(t, err)
-			contents[i] = string(content)
-			f.Close()
-		}
-		require.ElementsMatch(t, []string{"file.txt", "otherfile.txt"}, fileNames)
-		require.ElementsMatch(t, []string{"hello world", "other content"}, contents)
-	})
-
-	t.Run("PrivateGist", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "2")
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/archive/HEAD", nil, 404)
-	})
-
-	t.Run("NonExistentRevision", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		// TODO: return 404
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/archive/zz", nil, 0)
-	})
-}
-
-func TestRawFile(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	t.Run("ExistingFile", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		resp := s.Request(t, "GET", "/"+username+"/"+identifier+"/raw/HEAD/file.txt", nil, 200)
-
-		require.Equal(t, `inline; filename="file.txt"`, resp.Header.Get("Content-Disposition"))
-		require.Equal(t, "nosniff", resp.Header.Get("X-Content-Type-Options"))
-		require.Contains(t, resp.Header.Get("Content-Type"), "text/plain")
-
-		body, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-		require.Equal(t, "hello world", string(body))
-	})
-
-	t.Run("NonExistentFile", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/raw/HEAD/nonexistent.txt", nil, 404)
-	})
-
-	t.Run("NonExistentRevision", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/raw/zz/file.txt", nil, 404)
-	})
-
-	t.Run("PrivateGist", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "2")
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/raw/HEAD/file.txt", nil, 404)
-	})
-}
-
-func TestDownloadFile(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	t.Run("ExistingFile", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		resp := s.Request(t, "GET", "/"+username+"/"+identifier+"/download/HEAD/file.txt", nil, 200)
-
-		require.Equal(t, "text/plain; charset=utf-8", resp.Header.Get("Content-Type"))
-		require.Equal(t, `attachment; filename="file.txt"`, resp.Header.Get("Content-Disposition"))
-		require.Equal(t, "11", resp.Header.Get("Content-Length"))
-		require.Equal(t, "nosniff", resp.Header.Get("X-Content-Type-Options"))
-
-		body, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-		require.Equal(t, "hello world", string(body))
-	})
-
-	t.Run("NonExistentFile", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		resp := s.Request(t, "GET", "/"+username+"/"+identifier+"/download/HEAD/nonexistent.txt", nil, 404)
-
-		_, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-		// TODO: change the response to not found
-		// require.Equal(t, "File not found", string(body))
-	})
-
-	t.Run("NonExistentRevision", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		resp := s.Request(t, "GET", "/"+username+"/"+identifier+"/download/zz/file.txt", nil, 404)
-
-		_, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-		// TODO: change the response to not found
-		// require.Equal(t, "File not found", string(body))
-	})
-
-	t.Run("PrivateGist", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "2")
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/download/HEAD/file.txt", nil, 404)
-	})
-}
--- a/internal/web/handlers/gist/edit.go
+++ b/internal/web/handlers/gist/edit.go
@@ -1,11 +1,10 @@
 package gist

 import (
-	"strconv"
-
 	"github.com/thomiceli/opengist/internal/db"
 	"github.com/thomiceli/opengist/internal/render"
 	"github.com/thomiceli/opengist/internal/web/context"
+	"strconv"
 )

 func Edit(ctx *context.Context) error {
--- a/internal/web/handlers/gist/edit_test.go
+++ b/internal/web/handlers/gist/edit_test.go
@@ -1,66 +0,0 @@
-package gist_test
-
-import (
-	"net/url"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/db"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestVisibility(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	t.Run("ChangeVisibility", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Login(t, "thomas")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/visibility", url.Values{
-			"private": {"2"},
-		}, 302)
-
-		gist, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, db.PrivateVisibility, gist.Private)
-	})
-
-	t.Run("ChangeToUnlisted", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Login(t, "thomas")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/visibility", url.Values{
-			"private": {"1"},
-		}, 302)
-
-		gist, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, db.UnlistedVisibility, gist.Private)
-	})
-
-	t.Run("OtherUserCannotChange", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Login(t, "alice")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/visibility", nil, 403)
-
-		gist, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, db.PublicVisibility, gist.Private)
-	})
-
-	t.Run("NoAuth", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Logout()
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/visibility", nil, 302)
-
-		gist, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, db.PublicVisibility, gist.Private)
-	})
-}
--- a/internal/web/handlers/gist/fork_test.go
+++ b/internal/web/handlers/gist/fork_test.go
@@ -1,102 +0,0 @@
-package gist_test
-
-import (
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/db"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestFork(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	t.Run("Fork", func(t *testing.T) {
-		_, gist, username, identifier := s.CreateGist(t, "0")
-		s.Login(t, "alice")
-
-		resp := s.Request(t, "POST", "/"+username+"/"+identifier+"/fork", nil, 302)
-
-		forkedGist, err := db.GetGistByID("2")
-		require.NoError(t, err)
-		require.Equal(t, "alice", forkedGist.User.Username)
-		require.Equal(t, gist.Title, forkedGist.Title)
-		require.Equal(t, gist.Description, forkedGist.Description)
-		require.Equal(t, gist.Private, forkedGist.Private)
-		require.Equal(t, gist.ID, forkedGist.ForkedID)
-
-		forkedFiles, err := forkedGist.Files("HEAD", false)
-		require.NoError(t, err)
-
-		gistFiles, err := gist.Files("HEAD", false)
-		require.NoError(t, err)
-
-		for i, file := range gistFiles {
-			require.Equal(t, file.Filename, forkedFiles[i].Filename)
-			require.Equal(t, file.Content, forkedFiles[i].Content)
-		}
-
-		require.Equal(t, "/alice/"+forkedGist.Identifier(), resp.Header.Get("Location"))
-
-		original, err := db.GetGistByID("1")
-		require.NoError(t, err)
-		require.Equal(t, 1, original.NbForks)
-
-		forks, err := original.GetForks(2, 0)
-		require.NoError(t, err)
-		require.Len(t, forks, 1)
-		require.Equal(t, forkedGist.ID, forks[0].ID)
-
-		forkedGists, err := db.GetAllGistsForkedByUser(2, 2, 0, "created", "asc")
-		require.NoError(t, err)
-		require.Len(t, forkedGists, 1)
-		require.Equal(t, forkedGist.ID, forkedGists[0].ID)
-	})
-
-	t.Run("OwnGist", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-		s.Login(t, "thomas")
-
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/fork", nil, 302)
-
-		original, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, 0, original.NbForks)
-	})
-
-	t.Run("AlreadyForked", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-		s.Login(t, "alice")
-
-		firstResp := s.Request(t, "POST", "/"+username+"/"+identifier+"/fork", nil, 302)
-		forkLocation := firstResp.Header.Get("Location")
-
-		secondResp := s.Request(t, "POST", "/"+username+"/"+identifier+"/fork", nil, 302)
-		require.Equal(t, forkLocation, secondResp.Header.Get("Location"))
-
-		original, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, 1, original.NbForks)
-	})
-
-	t.Run("NoAuth", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/fork", nil, 302)
-
-		original, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, 0, original.NbForks)
-	})
-
-	t.Run("PrivateGist", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "2")
-		s.Login(t, "alice")
-
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/fork", nil, 404)
-	})
-}
--- a/internal/web/handlers/gist/gist.go
+++ b/internal/web/handlers/gist/gist.go
@@ -165,39 +165,10 @@ func escapeJavaScriptContent(htmlContent, cssUrl, themeUrl string) (string, erro
 	}

 	js := fmt.Sprintf(`
-(function() {
-    if (!customElements.get('opengist-embed')) {
-        customElements.define('opengist-embed', class extends HTMLElement {
-            constructor() {
-                super();
-                this.attachShadow({ mode: 'open' });
-            }
-            
-            init(css1, css2, content) {
-                this.shadowRoot.innerHTML = %s
-                    <style>
-                        @import url(${css1});
-                        @import url(${css2});
-                        :host { display: block; all: initial; font-family: sans-serif; }
-                    </style>
-                    <div class="container">${content}</div>
-                %s;
-            }
-        });
-    }
-
-    var currentScript = document.currentScript || (function() {
-        var scripts = document.getElementsByTagName('script');
-        return scripts[scripts.length - 1];
-    })();
-
-    const instance = document.createElement('opengist-embed');
-    instance.init(%s, %s, %s);
- 	currentScript.parentNode.insertBefore(instance, currentScript.nextSibling);
-})();
-`,
-		"`",
-		"`",
+        document.write('<link rel="stylesheet" href=%s>');
+        document.write('<link rel="stylesheet" href=%s>');
+        document.write(%s);
+    `,
 		string(jsonCssUrl),
 		string(jsonThemeUrl),
 		string(jsonContent),
--- a/internal/web/handlers/gist/gist_test.go
+++ b/internal/web/handlers/gist/gist_test.go
@@ -1,327 +0,0 @@
-package gist_test
-
-import (
-	"encoding/json"
-	"io"
-	"net/url"
-	"strings"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/db"
-	"github.com/thomiceli/opengist/internal/web/context"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func setupManifestEntries() {
-	context.ManifestEntries = map[string]context.Asset{
-		"embed.css":   {File: "assets/embed.css"},
-		"ts/embed.ts": {Css: []string{"assets/embed.css"}},
-		"ts/light.ts": {Css: []string{"assets/light.css"}},
-		"ts/dark.ts":  {Css: []string{"assets/dark.css"}},
-	}
-}
-
-func TestGistIndex(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	t.Run("Public", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Request(t, "GET", "/"+username+"/"+identifier, nil, 200)
-	})
-
-	t.Run("NonExistentRevision", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/rev/nonexistent", nil, 404)
-	})
-
-	t.Run("NonExistentGist", func(t *testing.T) {
-		s.Request(t, "GET", "/thomas/nonexistent", nil, 404)
-	})
-
-	t.Run("Unlisted", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "1")
-
-		s.Login(t, "thomas")
-		s.Request(t, "GET", "/"+username+"/"+identifier, nil, 200)
-
-		s.Login(t, "alice")
-		s.Request(t, "GET", "/"+username+"/"+identifier, nil, 200)
-
-		s.Logout()
-		s.Request(t, "GET", "/"+username+"/"+identifier, nil, 200)
-	})
-
-	t.Run("Private", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "2")
-
-		s.Login(t, "thomas")
-		s.Request(t, "GET", "/"+username+"/"+identifier, nil, 200)
-
-		s.Login(t, "alice")
-		s.Request(t, "GET", "/"+username+"/"+identifier, nil, 404)
-
-		s.Logout()
-		s.Request(t, "GET", "/"+username+"/"+identifier, nil, 404)
-	})
-
-	t.Run("SpecificRevision", func(t *testing.T) {
-		_, gist, username, identifier := s.CreateGist(t, "0")
-
-		s.Login(t, "thomas")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/edit", url.Values{
-			"title":   {"Test"},
-			"name":    {"file.txt"},
-			"content": {"updated content"},
-		}, 302)
-
-		files, err := gist.Files("HEAD", false)
-		require.NoError(t, err)
-		found := false
-		for _, f := range files {
-			if f.Filename == "file.txt" {
-				require.Equal(t, "updated content", f.Content)
-				found = true
-			}
-		}
-		require.True(t, found)
-
-		commits, err := gist.Log(0)
-		require.NoError(t, err)
-		require.Len(t, commits, 2)
-
-		filesOld, err := gist.Files(commits[1].Hash, false)
-		require.NoError(t, err)
-		for _, f := range filesOld {
-			if f.Filename == "file.txt" {
-				require.Equal(t, "hello world", f.Content)
-			}
-		}
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/rev/HEAD", nil, 200)
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/rev/"+commits[1].Hash, nil, 200)
-	})
-}
-
-func TestPreview(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-
-	t.Run("Markdown", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		resp := s.Request(t, "POST", "/preview", url.Values{
-			"content": {"# Hello\n\nThis is **bold** and *italic*."},
-		}, 200)
-
-		body, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-		html := string(body)
-		require.Contains(t, html, "<h1>")
-		require.Contains(t, html, "Hello")
-		require.Contains(t, html, "<strong>bold</strong>")
-		require.Contains(t, html, "<em>italic</em>")
-	})
-
-	t.Run("NoAuth", func(t *testing.T) {
-		s.Logout()
-		s.Request(t, "POST", "/preview", url.Values{
-			"content": {"# Hello"},
-		}, 302)
-	})
-}
-
-func TestGistJson(t *testing.T) {
-	setupManifestEntries()
-
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	t.Run("Public", func(t *testing.T) {
-		_, gist, username, identifier := s.CreateGist(t, "0")
-
-		resp := s.Request(t, "GET", "/"+username+"/"+identifier+".json", nil, 200)
-
-		body, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-
-		var result map[string]interface{}
-		err = json.Unmarshal(body, &result)
-		require.NoError(t, err)
-		t.Helper()
-
-		require.Equal(t, username, result["owner"])
-		require.Equal(t, identifier, result["id"])
-		require.Equal(t, gist.Uuid, result["uuid"])
-		require.Equal(t, gist.Title, result["title"])
-		require.Equal(t, "public", result["visibility"])
-		require.Equal(t, []interface{}{"hello", "opengist"}, result["topics"])
-		require.Equal(t, []interface{}{
-			map[string]interface{}{
-				"content":    "hello world",
-				"filename":   "file.txt",
-				"human_size": "11 B",
-				"size":       float64(11),
-				"truncated":  false,
-				"type":       "Text",
-			},
-			map[string]interface{}{
-				"content":    "other content",
-				"filename":   "otherfile.txt",
-				"human_size": "13 B",
-				"size":       float64(13),
-				"truncated":  false,
-				"type":       "Text",
-			},
-		}, result["files"])
-
-		embed, ok := result["embed"].(map[string]interface{})
-		require.True(t, ok)
-		require.Contains(t, embed["js"], identifier+".js")
-		require.Contains(t, embed["js_dark"], identifier+".js?dark")
-		require.NotEmpty(t, embed["css"])
-		require.NotEmpty(t, embed["html"])
-	})
-
-	t.Run("Unlisted", func(t *testing.T) {
-		s.Logout()
-		_, _, username, identifier := s.CreateGist(t, "1")
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+".json", nil, 200)
-	})
-
-	t.Run("Private", func(t *testing.T) {
-		s.Logout()
-		_, _, username, identifier := s.CreateGist(t, "2")
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+".json", nil, 404)
-	})
-
-	t.Run("NonExistentGist", func(t *testing.T) {
-		s.Request(t, "GET", "/thomas/nonexistent.json", nil, 404)
-	})
-}
-
-func TestGistAccess(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	_, _, user, publicId := s.CreateGist(t, "0")
-	_, _, _, unlistedId := s.CreateGist(t, "1")
-	_, _, _, privateId := s.CreateGist(t, "2")
-
-	tests := []struct {
-		name     string
-		settings map[string]string
-		// expected codes: [owner, otherUser, anonymous] x [public, unlisted, private]
-		owner, otherUser, anonymous []int
-	}{
-		{
-			name:      "Default",
-			owner:     []int{200, 200, 200},
-			otherUser: []int{200, 200, 404},
-			anonymous: []int{200, 200, 404},
-		},
-		{
-			name:      "RequireLogin",
-			settings:  map[string]string{db.SettingRequireLogin: "1"},
-			owner:     []int{200, 200, 200},
-			otherUser: []int{200, 200, 404},
-			anonymous: []int{302, 302, 302},
-		},
-		{
-			name:      "AllowGistsWithoutLogin",
-			settings:  map[string]string{db.SettingRequireLogin: "1", db.SettingAllowGistsWithoutLogin: "1"},
-			owner:     []int{200, 200, 200},
-			otherUser: []int{200, 200, 404},
-			anonymous: []int{200, 200, 404},
-		},
-	}
-
-	gists := []string{publicId, unlistedId, privateId}
-	labels := []string{"Public", "Unlisted", "Private"}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			s.Login(t, "thomas")
-			for k, v := range tt.settings {
-				s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {k}, "value": {v}}, 200)
-			}
-
-			t.Run("Owner", func(t *testing.T) {
-				s.Login(t, "thomas")
-				for i, id := range gists {
-					s.Request(t, "GET", "/"+user+"/"+id, nil, tt.owner[i])
-				}
-			})
-
-			t.Run("OtherUser", func(t *testing.T) {
-				s.Login(t, "alice")
-				for i, id := range gists {
-					s.Request(t, "GET", "/"+user+"/"+id, nil, tt.otherUser[i])
-				}
-			})
-
-			t.Run("Anonymous", func(t *testing.T) {
-				s.Logout()
-				for i, id := range gists {
-					t.Run(labels[i], func(t *testing.T) {
-						s.Request(t, "GET", "/"+user+"/"+id, nil, tt.anonymous[i])
-					})
-				}
-			})
-
-			s.Login(t, "thomas")
-			for k := range tt.settings {
-				s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {k}, "value": {"0"}}, 200)
-			}
-		})
-	}
-}
-
-func TestGetGistCaseInsensitive(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "THOmas")
-	s.Login(t, "THOmas")
-
-	s.Request(t, "POST", "/", url.Values{
-		"title":   {"Test"},
-		"name":    {"file.txt"},
-		"content": {"hello world"},
-		"url":     {"my-GIST"},
-		"private": {"0"},
-	}, 302)
-
-	gist, err := db.GetGistByID("1")
-	require.NoError(t, err)
-
-	s.Logout()
-
-	t.Run("URL", func(t *testing.T) {
-		s.Request(t, "GET", "/thomas/my-gist", nil, 200)
-		s.Request(t, "GET", "/THOMAS/MY-GIST", nil, 200)
-		s.Request(t, "GET", "/thomas/MY-GIST", nil, 200)
-		s.Request(t, "GET", "/THOMAS/my-gist", nil, 200)
-	})
-
-	t.Run("UUID", func(t *testing.T) {
-		s.Request(t, "GET", "/thomas/"+strings.ToLower(gist.Uuid), nil, 200)
-		s.Request(t, "GET", "/THOMAS/"+strings.ToUpper(gist.Uuid), nil, 200)
-	})
-}
--- a/internal/web/handlers/gist/like_test.go
+++ b/internal/web/handlers/gist/like_test.go
@@ -1,96 +0,0 @@
-package gist_test
-
-import (
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/db"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestLike(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	t.Run("Like", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Login(t, "alice")
-		resp := s.Request(t, "POST", "/"+username+"/"+identifier+"/like", nil, 302)
-		require.Equal(t, "/"+username+"/"+identifier, resp.Header.Get("Location"))
-
-		s.Login(t, "thomas")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/like", nil, 302)
-
-		gist, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, 2, gist.NbLikes)
-
-		likers, err := gist.GetUsersLikes(0)
-		require.NoError(t, err)
-		require.Len(t, likers, 2)
-	})
-
-	t.Run("Unlike", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Login(t, "alice")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/like", nil, 302)
-
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/like", nil, 302)
-
-		gist, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, 0, gist.NbLikes)
-
-		likers, err := gist.GetUsersLikes(0)
-		require.NoError(t, err)
-		require.Len(t, likers, 0)
-	})
-
-	t.Run("NoAuth", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Logout()
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/like", nil, 302)
-
-		gist, err := db.GetGist(username, identifier)
-		require.NoError(t, err)
-		require.Equal(t, 0, gist.NbLikes)
-	})
-
-	t.Run("PrivateGist", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "2")
-
-		s.Login(t, "alice")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/like", nil, 404)
-	})
-}
-
-func TestLikes(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	t.Run("Likes", func(t *testing.T) {
-		_, gist, username, identifier := s.CreateGist(t, "0")
-
-		s.Login(t, "thomas")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/like", nil, 302)
-		s.Login(t, "alice")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/like", nil, 302)
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/likes", nil, 200)
-
-		users, err := gist.GetUsersLikes(0)
-		require.NoError(t, err)
-		require.Len(t, users, 2)
-		require.Equal(t, "thomas", users[0].Username)
-		require.Equal(t, "alice", users[1].Username)
-	})
-}
--- a/internal/web/handlers/gist/revisions.go
+++ b/internal/web/handlers/gist/revisions.go
@@ -1,11 +1,10 @@
 package gist

 import (
-	"strings"
-
 	"github.com/thomiceli/opengist/internal/db"
 	"github.com/thomiceli/opengist/internal/web/context"
 	"github.com/thomiceli/opengist/internal/web/handlers"
+	"strings"
 )

 func Revisions(ctx *context.Context) error {
--- a/internal/web/handlers/gist/revisions_test.go
+++ b/internal/web/handlers/gist/revisions_test.go
@@ -1,153 +0,0 @@
-package gist_test
-
-import (
-	"net/url"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/git"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestRevisions(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	t.Run("Revisions", func(t *testing.T) {
-		_, gist, username, identifier := s.CreateGist(t, "0")
-
-		s.Login(t, "thomas")
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/edit", url.Values{
-			"title":   {"Test"},
-			"name":    {"file.txt", "ok.txt"},
-			"content": {"updated content", "okay"},
-		}, 302)
-
-		s.Request(t, "POST", "/"+username+"/"+identifier+"/edit", url.Values{
-			"title":   {"Test"},
-			"name":    {"renamed.txt", "ok.txt"},
-			"content": {"updated content", "okay"},
-		}, 302)
-
-		commits, err := gist.Log(0)
-		require.NoError(t, err)
-
-		require.Len(t, commits, 3)
-
-		require.Regexp(t, "^[a-f0-9]{40}$", commits[0].Hash)
-		require.Regexp(t, "^[a-f0-9]{40}$", commits[1].Hash)
-		require.Regexp(t, "^[a-f0-9]{40}$", commits[2].Hash)
-
-		require.Equal(t, &git.Commit{
-			Hash:       commits[0].Hash,
-			Timestamp:  commits[0].Timestamp,
-			AuthorName: "thomas",
-			Changed:    "1 file changed, 0 insertions, 0 deletions",
-			Files: []git.File{
-				{
-					Filename:    "renamed.txt",
-					Size:        0,
-					HumanSize:   "",
-					OldFilename: "file.txt",
-					Content:     ``,
-					Truncated:   false,
-					IsCreated:   false,
-					IsDeleted:   false,
-					IsBinary:    false,
-					MimeType:    git.MimeType{},
-				},
-			},
-		}, commits[0])
-
-		require.Equal(t, &git.Commit{
-			Hash:       commits[1].Hash,
-			Timestamp:  commits[1].Timestamp,
-			AuthorName: "thomas",
-			Changed:    "3 files changed, 2 insertions, 2 deletions",
-			Files: []git.File{
-				{
-					Filename:    "file.txt",
-					OldFilename: "file.txt",
-					Content: `@@ -1 +1 @@
-hello world
-\ No newline at end of file
-+updated content
-\ No newline at end of file
-`,
-					IsCreated: false,
-					IsDeleted: false,
-					IsBinary:  false,
-				}, {
-					Filename:    "ok.txt",
-					OldFilename: "",
-					Content: `@@ -0,0 +1 @@
-+okay
-\ No newline at end of file
-`,
-					IsCreated: true,
-					IsDeleted: false,
-					IsBinary:  false,
-				}, {
-					Filename:    "otherfile.txt",
-					OldFilename: "",
-					Content: `@@ -1 +0,0 @@
-other content
-\ No newline at end of file
-`,
-					IsCreated: false,
-					IsDeleted: true,
-					IsBinary:  false,
-				},
-			},
-		}, commits[1])
-
-		require.Equal(t, &git.Commit{
-			Hash:       commits[2].Hash,
-			Timestamp:  commits[2].Timestamp,
-			AuthorName: "thomas",
-			Changed:    "2 files changed, 2 insertions",
-			Files: []git.File{
-				{
-					Filename:    "file.txt",
-					OldFilename: "",
-					Content: `@@ -0,0 +1 @@
-+hello world
-\ No newline at end of file
-`,
-					IsCreated: true,
-					IsDeleted: false,
-					IsBinary:  false,
-				}, {
-					Filename:    "otherfile.txt",
-					OldFilename: "",
-					Content: `@@ -0,0 +1 @@
-+other content
-\ No newline at end of file
-`,
-					IsCreated: true,
-					IsDeleted: false,
-					IsBinary:  false,
-				},
-			},
-		}, commits[2])
-
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/revisions", nil, 200)
-	})
-
-	t.Run("NoAuth", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "0")
-
-		s.Logout()
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/revisions", nil, 200)
-	})
-
-	t.Run("PrivateGist", func(t *testing.T) {
-		_, _, username, identifier := s.CreateGist(t, "2")
-
-		s.Login(t, "alice")
-		s.Request(t, "GET", "/"+username+"/"+identifier+"/revisions", nil, 404)
-	})
-}
--- a/internal/web/handlers/gist/upload.go
+++ b/internal/web/handlers/gist/upload.go
@@ -4,15 +4,12 @@ import (
 	"io"
 	"os"
 	"path/filepath"
-	"regexp"

 	"github.com/google/uuid"
 	"github.com/thomiceli/opengist/internal/config"
 	"github.com/thomiceli/opengist/internal/web/context"
 )

-var uuidRegex = regexp.MustCompile(`^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$`)
-
 func Upload(ctx *context.Context) error {
 	err := ctx.Request().ParseMultipartForm(32 << 20) // 32 MB max
 	if err != nil {
@@ -60,13 +57,13 @@ func Upload(ctx *context.Context) error {
 }

 func DeleteUpload(ctx *context.Context) error {
-	fileUuid := filepath.Base(ctx.Param("uuid"))
-
-	if fileUuid == "" || !uuidRegex.MatchString(fileUuid) {
+	uuid := ctx.Param("uuid")
+	if uuid == "" {
 		return ctx.ErrorRes(400, ctx.Tr("error.bad-request"), nil)
 	}

-	filePath := filepath.Join(config.GetHomeDir(), "uploads", fileUuid)
+	uploadsDir := filepath.Join(config.GetHomeDir(), "uploads")
+	filePath := filepath.Join(uploadsDir, uuid)

 	if _, err := os.Stat(filePath); err == nil {
 		if err := os.Remove(filePath); err != nil {
--- a/internal/web/handlers/gist/upload_test.go
+++ b/internal/web/handlers/gist/upload_test.go
@@ -1,151 +0,0 @@
-package gist_test
-
-import (
-	"bytes"
-	"encoding/json"
-	"io"
-	"mime/multipart"
-	"net/http"
-	"net/http/httptest"
-	"os"
-	"path/filepath"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/config"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func createMultipartRequest(t *testing.T, uri, fieldName, fileName, content string) *http.Request {
-	body := &bytes.Buffer{}
-	writer := multipart.NewWriter(body)
-	part, err := writer.CreateFormFile(fieldName, fileName)
-	require.NoError(t, err)
-	_, err = part.Write([]byte(content))
-	require.NoError(t, err)
-	require.NoError(t, writer.Close())
-
-	req := httptest.NewRequest(http.MethodPost, uri, body)
-	req.Header.Set("Content-Type", writer.FormDataContentType())
-	return req
-}
-
-func TestUpload(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-
-	t.Run("UploadFile", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		req := createMultipartRequest(t, "/upload", "file", "test.txt", "file content")
-
-		resp := s.RawRequest(t, req, 200)
-
-		body, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-
-		var result map[string]string
-		err = json.Unmarshal(body, &result)
-		require.NoError(t, err)
-
-		require.Equal(t, "test.txt", result["filename"])
-		require.NotEmpty(t, result["uuid"])
-		require.Regexp(t, `^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$`, result["uuid"])
-
-		filePath := filepath.Join(config.GetHomeDir(), "uploads", result["uuid"])
-		data, err := os.ReadFile(filePath)
-		require.NoError(t, err)
-		require.Equal(t, "file content", string(data))
-	})
-
-	t.Run("NoFile", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		req := httptest.NewRequest(http.MethodPost, "/upload", nil)
-		req.Header.Set("Content-Type", "multipart/form-data; boundary=xxx")
-
-		s.RawRequest(t, req, 400)
-	})
-
-	t.Run("NoAuth", func(t *testing.T) {
-		s.Logout()
-
-		req := createMultipartRequest(t, "/upload", "file", "test.txt", "content")
-
-		s.RawRequest(t, req, 302)
-	})
-}
-
-func TestDeleteUpload(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-
-	t.Run("DeleteExistingFile", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		req := createMultipartRequest(t, "/upload", "file", "todelete.txt", "delete me")
-
-		uploadResp := s.RawRequest(t, req, 200)
-
-		body, err := io.ReadAll(uploadResp.Body)
-		require.NoError(t, err)
-		var uploadResult map[string]string
-		err = json.Unmarshal(body, &uploadResult)
-		require.NoError(t, err)
-		fileUUID := uploadResult["uuid"]
-
-		filePath := filepath.Join(config.GetHomeDir(), "uploads", fileUUID)
-		_, err = os.Stat(filePath)
-		require.NoError(t, err)
-
-		deleteReq := httptest.NewRequest(http.MethodDelete, "/upload/"+fileUUID, nil)
-
-		deleteResp := s.RawRequest(t, deleteReq, 200)
-
-		deleteBody, err := io.ReadAll(deleteResp.Body)
-		require.NoError(t, err)
-		var deleteResult map[string]string
-		err = json.Unmarshal(deleteBody, &deleteResult)
-		require.NoError(t, err)
-		require.Equal(t, "deleted", deleteResult["status"])
-
-		_, err = os.Stat(filePath)
-		require.True(t, os.IsNotExist(err))
-	})
-
-	t.Run("DeleteNonExistentFile", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		req := httptest.NewRequest(http.MethodDelete, "/upload/00000000-0000-0000-0000-000000000000", nil)
-
-		s.RawRequest(t, req, 200)
-	})
-
-	t.Run("InvalidUUID", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		req := httptest.NewRequest(http.MethodDelete, "/upload/not-a-valid-uuid", nil)
-
-		s.RawRequest(t, req, 400)
-	})
-
-	t.Run("PathTraversal", func(t *testing.T) {
-		s.Login(t, "thomas")
-
-		req := httptest.NewRequest(http.MethodDelete, "/upload/../../etc/passwd", nil)
-
-		s.RawRequest(t, req, 400)
-	})
-
-	t.Run("NoAuth", func(t *testing.T) {
-		s.Logout()
-
-		req := httptest.NewRequest(http.MethodDelete, "/upload/00000000-0000-0000-0000-000000000000", nil)
-
-		s.RawRequest(t, req, 302)
-	})
-}
--- a/internal/web/handlers/git/http_test.go
+++ b/internal/web/handlers/git/http_test.go
@@ -1,235 +0,0 @@
-package git_test
-
-import (
-	"net/url"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/db"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func gitClone(baseUrl, creds, user, gistId, destDir string) error {
-	authUrl := baseUrl
-	if creds != "" {
-		authUrl = "http://" + creds + "@" + baseUrl[len("http://"):]
-	}
-	return exec.Command("git", "clone", authUrl+"/"+user+"/"+gistId+".git", destDir).Run()
-}
-
-func gitPush(repoDir, filename, content string) error {
-	if err := os.WriteFile(filepath.Join(repoDir, filename), []byte(content), 0644); err != nil {
-		return err
-	}
-	if err := exec.Command("git", "-C", repoDir, "add", filename).Run(); err != nil {
-		return err
-	}
-	if err := exec.Command("git", "-C", repoDir, "commit", "-m", "add "+filename).Run(); err != nil {
-		return err
-	}
-	return exec.Command("git", "-C", repoDir, "push", "origin").Run()
-}
-
-func TestGitClonePull(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	baseUrl := s.StartHttpServer(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	_, _, user, publicId := s.CreateGist(t, "0")
-	_, _, _, unlistedId := s.CreateGist(t, "1")
-	_, _, _, privateId := s.CreateGist(t, "2")
-
-	type credTest struct {
-		name   string
-		creds  string
-		expect [3]bool // [public, unlisted, private]
-	}
-
-	tests := []struct {
-		name     string
-		settings map[string]string
-		creds    []credTest
-	}{
-		{
-			name: "Default",
-			creds: []credTest{
-				{"OwnerAuth", "thomas:thomas", [3]bool{true, true, true}},
-				{"OtherUserAuth", "alice:alice", [3]bool{true, true, false}},
-				{"WrongPassword", "thomas:wrong", [3]bool{true, true, false}},
-				{"WrongUser", "aze:aze", [3]bool{true, true, false}},
-				{"Anonymous", "", [3]bool{true, true, false}},
-			},
-		},
-		{
-			name:     "RequireLogin",
-			settings: map[string]string{db.SettingRequireLogin: "1"},
-			creds: []credTest{
-				{"OwnerAuth", "thomas:thomas", [3]bool{true, true, true}},
-				{"OtherUserAuth", "alice:alice", [3]bool{true, true, false}},
-				{"WrongPassword", "thomas:wrong", [3]bool{false, false, false}},
-				{"WrongUser", "aze:aze", [3]bool{false, false, false}},
-				{"Anonymous", "", [3]bool{false, false, false}},
-			},
-		},
-		{
-			name:     "AllowGistsWithoutLogin",
-			settings: map[string]string{db.SettingRequireLogin: "1", db.SettingAllowGistsWithoutLogin: "1"},
-			creds: []credTest{
-				{"OwnerAuth", "thomas:thomas", [3]bool{true, true, true}},
-				{"OtherUserAuth", "alice:alice", [3]bool{true, true, false}},
-				{"WrongPassword", "thomas:wrong", [3]bool{true, true, false}},
-				{"WrongUser", "aze:aze", [3]bool{true, true, false}},
-				{"Anonymous", "", [3]bool{true, true, false}},
-			},
-		},
-	}
-
-	gists := [3]string{publicId, unlistedId, privateId}
-	labels := [3]string{"Public", "Unlisted", "Private"}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			s.Login(t, "thomas")
-			for k, v := range tt.settings {
-				s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {k}, "value": {v}}, 200)
-			}
-
-			for _, ct := range tt.creds {
-				t.Run(ct.name, func(t *testing.T) {
-					for i, id := range gists {
-						t.Run(labels[i], func(t *testing.T) {
-							dest := t.TempDir()
-							err := gitClone(baseUrl, ct.creds, user, id, dest)
-							if ct.expect[i] {
-								require.NoError(t, err)
-								_, err = os.Stat(filepath.Join(dest, "file.txt"))
-								require.NoError(t, err)
-							} else {
-								require.Error(t, err)
-							}
-						})
-					}
-				})
-			}
-
-			// Reset settings
-			s.Login(t, "thomas")
-			for k := range tt.settings {
-				s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {k}, "value": {"0"}}, 200)
-			}
-		})
-	}
-}
-
-func TestGitPush(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	baseUrl := s.StartHttpServer(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	_, _, user, publicId := s.CreateGist(t, "0")
-	_, _, _, unlistedId := s.CreateGist(t, "1")
-	_, _, _, privateId := s.CreateGist(t, "2")
-
-	type credTest struct {
-		name   string
-		creds  string
-		expect [3]bool // [public, unlisted, private]
-	}
-
-	tests := []credTest{
-		{"OwnerAuth", "thomas:thomas", [3]bool{true, true, true}},
-		{"OtherUserAuth", "alice:alice", [3]bool{false, false, false}},
-		{"WrongPassword", "thomas:wrong", [3]bool{false, false, false}},
-		{"WrongUser", "aze:aze", [3]bool{false, false, false}},
-		{"Anonymous", "", [3]bool{false, false, false}},
-	}
-
-	gists := [3]string{publicId, unlistedId, privateId}
-	labels := [3]string{"Public", "Unlisted", "Private"}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			for i, id := range gists {
-				t.Run(labels[i], func(t *testing.T) {
-					dest := t.TempDir()
-					require.NoError(t, gitClone(baseUrl, "thomas:thomas", user, id, dest))
-
-					if tt.creds != "thomas:thomas" {
-						require.NoError(t, exec.Command("git", "-C", dest, "remote", "set-url", "origin",
-							"http://"+tt.creds+"@"+baseUrl[len("http://"):]+"/"+user+"/"+id+".git").Run())
-					}
-
-					err := gitPush(dest, "newfile.txt", "new content")
-					if tt.expect[i] {
-						require.NoError(t, err)
-					} else {
-						require.Error(t, err)
-					}
-				})
-			}
-		})
-	}
-}
-
-func TestGitCreatePush(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	baseUrl := s.StartHttpServer(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "alice")
-
-	gitInitAndPush := func(t *testing.T, creds, remoteUrl string) error {
-		dest := t.TempDir()
-		require.NoError(t, exec.Command("git", "init", "--initial-branch=master", dest).Run())
-		require.NoError(t, exec.Command("git", "-C", dest, "remote", "add", "origin",
-			"http://"+creds+"@"+baseUrl[len("http://"):]+remoteUrl).Run())
-
-		require.NoError(t, os.WriteFile(filepath.Join(dest, "hello.txt"), []byte("hello"), 0644))
-		require.NoError(t, exec.Command("git", "-C", dest, "add", "hello.txt").Run())
-		require.NoError(t, exec.Command("git", "-C", dest, "commit", "-m", "initial").Run())
-		return exec.Command("git", "-C", dest, "push", "origin").Run()
-	}
-
-	tests := []struct {
-		name      string
-		creds     string
-		url       string
-		expect    bool
-		gistOwner string // if expect=true, verify gist exists at this owner/identifier
-		gistId    string
-	}{
-		{"OwnerCreates", "thomas:thomas", "/thomas/mygist.git", true, "thomas", "mygist"},
-		{"OtherUserCreatesOnOwnUrl", "alice:alice", "/alice/alicegist.git", true, "alice", "alicegist"},
-		{"WrongPassword", "thomas:wrong", "/thomas/newgist.git", false, "", ""},
-		{"OtherUserCannotCreateOnOwner", "alice:alice", "/thomas/hackgist.git", false, "", ""},
-		{"WrongUser", "aze:aze", "/aze/azegist.git", false, "", ""},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			err := gitInitAndPush(t, tt.creds, tt.url)
-			if tt.expect {
-				require.NoError(t, err)
-				gist, err := db.GetGist(tt.gistOwner, tt.gistId)
-				require.NoError(t, err)
-				require.NotNil(t, gist)
-				require.Equal(t, tt.gistId, gist.Identifier())
-			} else {
-				require.Error(t, err)
-			}
-		})
-	}
-}
--- a/internal/web/handlers/health/healthcheck_test.go
+++ b/internal/web/handlers/health/healthcheck_test.go
@@ -1,30 +0,0 @@
-package health_test
-
-import (
-	"encoding/json"
-	"io"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestHealthcheck(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	t.Run("OK", func(t *testing.T) {
-		resp := s.Request(t, "GET", "/healthcheck", nil, 200)
-
-		body, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-
-		var result map[string]interface{}
-		err = json.Unmarshal(body, &result)
-		require.NoError(t, err)
-
-		require.Equal(t, "ok", result["opengist"])
-		require.Equal(t, "ok", result["database"])
-		require.NotEmpty(t, result["time"])
-	})
-}
--- a/internal/web/handlers/metrics/metrics.go
+++ b/internal/web/handlers/metrics/metrics.go
@@ -1,12 +1,16 @@
 package metrics

 import (
+	"github.com/labstack/echo-contrib/echoprometheus"
 	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/client_golang/prometheus/promauto"
+	"github.com/thomiceli/opengist/internal/config"
 	"github.com/thomiceli/opengist/internal/db"
+	"github.com/thomiceli/opengist/internal/web/context"
 )

 var (
+	// Using promauto to automatically register metrics with the default registry
 	countUsersGauge   prometheus.Gauge
 	countGistsGauge   prometheus.Gauge
 	countSSHKeysGauge prometheus.Gauge
@@ -14,52 +18,84 @@ var (
 	metricsInitialized bool = false
 )

+// initMetrics initializes metrics if they're not already initialized
 func initMetrics() {
 	if metricsInitialized {
 		return
 	}

-	countUsersGauge = promauto.NewGauge(
-		prometheus.GaugeOpts{
-			Name: "opengist_users_total",
-			Help: "Total number of users",
-		},
-	)
+	// Only initialize metrics if they're enabled
+	if config.C.MetricsEnabled {
+		countUsersGauge = promauto.NewGauge(
+			prometheus.GaugeOpts{
+				Name: "opengist_users_total",
+				Help: "Total number of users",
+			},
+		)

-	countGistsGauge = promauto.NewGauge(
-		prometheus.GaugeOpts{
-			Name: "opengist_gists_total",
-			Help: "Total number of gists",
-		},
-	)
+		countGistsGauge = promauto.NewGauge(
+			prometheus.GaugeOpts{
+				Name: "opengist_gists_total",
+				Help: "Total number of gists",
+			},
+		)

-	countSSHKeysGauge = promauto.NewGauge(
-		prometheus.GaugeOpts{
-			Name: "opengist_ssh_keys_total",
-			Help: "Total number of SSH keys",
-		},
-	)
+		countSSHKeysGauge = promauto.NewGauge(
+			prometheus.GaugeOpts{
+				Name: "opengist_ssh_keys_total",
+				Help: "Total number of SSH keys",
+			},
+		)

-	metricsInitialized = true
+		metricsInitialized = true
+	}
 }

+// updateMetrics refreshes all metric values from the database
 func updateMetrics() {
-	if !metricsInitialized {
+	// Only update metrics if they're enabled
+	if !config.C.MetricsEnabled || !metricsInitialized {
 		return
 	}

+	// Update users count
 	countUsers, err := db.CountAll(&db.User{})
 	if err == nil {
 		countUsersGauge.Set(float64(countUsers))
 	}

+	// Update gists count
 	countGists, err := db.CountAll(&db.Gist{})
 	if err == nil {
 		countGistsGauge.Set(float64(countGists))
 	}

+	// Update SSH keys count
 	countKeys, err := db.CountAll(&db.SSHKey{})
 	if err == nil {
 		countSSHKeysGauge.Set(float64(countKeys))
 	}
 }
+
+// Metrics handles prometheus metrics endpoint requests.
+func Metrics(ctx *context.Context) error {
+	// If metrics are disabled, return 404
+	if !config.C.MetricsEnabled {
+		return ctx.NotFound("Metrics endpoint is disabled")
+	}
+
+	// Initialize metrics if not already done
+	initMetrics()
+
+	// Update metrics
+	updateMetrics()
+
+	// Get the Echo context
+	echoCtx := ctx.Context
+
+	// Use the Prometheus metrics handler
+	handler := echoprometheus.NewHandler()
+
+	// Call the handler
+	return handler(echoCtx)
+}
--- a/internal/web/handlers/metrics/server.go
+++ b/internal/web/handlers/metrics/server.go
@@ -1,50 +0,0 @@
-package metrics
-
-import (
-	"net/http"
-
-	"github.com/labstack/echo-contrib/echoprometheus"
-	"github.com/labstack/echo/v4"
-	"github.com/rs/zerolog/log"
-	"github.com/thomiceli/opengist/internal/config"
-)
-
-type Server struct {
-	echo *echo.Echo
-}
-
-func NewServer() *Server {
-	e := echo.New()
-	e.HideBanner = true
-	e.HidePort = true
-
-	s := &Server{echo: e}
-
-	initMetrics()
-
-	e.GET("/metrics", func(ctx echo.Context) error {
-		updateMetrics()
-		return echoprometheus.NewHandler()(ctx)
-	})
-
-	return s
-}
-
-func (s *Server) Start() {
-	addr := config.C.MetricsHost + ":" + config.C.MetricsPort
-	log.Info().Msg("Starting metrics server on http://" + addr)
-	if err := s.echo.Start(addr); err != nil && err != http.ErrServerClosed {
-		log.Error().Err(err).Msg("Failed to start metrics server")
-	}
-}
-
-func (s *Server) Stop() {
-	log.Info().Msg("Stopping metrics server...")
-	if err := s.echo.Close(); err != nil {
-		log.Error().Err(err).Msg("Failed to stop metrics server")
-	}
-}
-
-func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
-	s.echo.ServeHTTP(w, r)
-}
--- a/internal/web/handlers/settings/access_token.go
+++ b/internal/web/handlers/settings/access_token.go
@@ -1,75 +0,0 @@
-package settings
-
-import (
-	"strconv"
-
-	"github.com/thomiceli/opengist/internal/db"
-	"github.com/thomiceli/opengist/internal/i18n"
-	"github.com/thomiceli/opengist/internal/validator"
-	"github.com/thomiceli/opengist/internal/web/context"
-)
-
-func AccessTokens(ctx *context.Context) error {
-	user := ctx.User
-
-	tokens, err := db.GetAccessTokensByUserID(user.ID)
-	if err != nil {
-		return ctx.ErrorRes(500, "Cannot get access tokens", err)
-	}
-
-	ctx.SetData("accessTokens", tokens)
-	ctx.SetData("settingsHeaderPage", "tokens")
-	ctx.SetData("htmlTitle", ctx.TrH("settings"))
-	return ctx.Html("settings_tokens.html")
-}
-
-func AccessTokensProcess(ctx *context.Context) error {
-	user := ctx.User
-
-	dto := new(db.AccessTokenDTO)
-	if err := ctx.Bind(dto); err != nil {
-		return ctx.ErrorRes(400, ctx.Tr("error.cannot-bind-data"), err)
-	}
-
-	if err := ctx.Validate(dto); err != nil {
-		ctx.AddFlash(validator.ValidationMessages(&err, ctx.GetData("locale").(*i18n.Locale)), "error")
-		return ctx.RedirectTo("/settings/access-tokens")
-	}
-
-	token := dto.ToAccessToken()
-	token.UserID = user.ID
-
-	plainToken, err := token.GenerateToken()
-	if err != nil {
-		return ctx.ErrorRes(500, "Cannot generate token", err)
-	}
-
-	if err := token.Create(); err != nil {
-		return ctx.ErrorRes(500, "Cannot create access token", err)
-	}
-
-	// Show the token once to the user
-	ctx.AddFlash(ctx.Tr("settings.token-created"), "success")
-	ctx.AddFlash(plainToken, "success")
-	return ctx.RedirectTo("/settings/access-tokens")
-}
-
-func AccessTokensDelete(ctx *context.Context) error {
-	user := ctx.User
-	tokenID, err := strconv.Atoi(ctx.Param("id"))
-	if err != nil {
-		return ctx.RedirectTo("/settings/access-tokens")
-	}
-
-	token, err := db.GetAccessTokenByID(uint(tokenID))
-	if err != nil || token.UserID != user.ID {
-		return ctx.RedirectTo("/settings/access-tokens")
-	}
-
-	if err := token.Delete(); err != nil {
-		return ctx.ErrorRes(500, "Cannot delete access token", err)
-	}
-
-	ctx.AddFlash(ctx.Tr("settings.token-deleted"), "success")
-	return ctx.RedirectTo("/settings/access-tokens")
-}
--- a/internal/web/handlers/settings/access_token_test.go
+++ b/internal/web/handlers/settings/access_token_test.go
@@ -1,332 +0,0 @@
-package settings_test
-
-import (
-	"net/url"
-	"testing"
-	"time"
-
-	"github.com/stretchr/testify/require"
-	"github.com/thomiceli/opengist/internal/db"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
-)
-
-func TestAccessTokensCRUD(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-
-	t.Run("RequiresAuth", func(t *testing.T) {
-		s.Logout()
-		s.Request(t, "GET", "/settings/access-tokens", nil, 302)
-	})
-
-	t.Run("AccessTokensPage", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "GET", "/settings/access-tokens", nil, 200)
-	})
-
-	t.Run("CreateReadToken", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "POST", "/settings/access-tokens", db.AccessTokenDTO{
-			Name:      "test-token",
-			ScopeGist: db.ReadPermission,
-		}, 302)
-
-		tokens, err := db.GetAccessTokensByUserID(1)
-		require.NoError(t, err)
-		require.Len(t, tokens, 1)
-		require.Equal(t, "test-token", tokens[0].Name)
-		require.Equal(t, uint(db.ReadPermission), tokens[0].ScopeGist)
-		require.Equal(t, int64(0), tokens[0].ExpiresAt)
-	})
-
-	t.Run("CreateExpiringToken", func(t *testing.T) {
-		s.Login(t, "thomas")
-		tomorrow := time.Now().AddDate(0, 0, 1).Format("2006-01-02")
-		s.Request(t, "POST", "/settings/access-tokens", db.AccessTokenDTO{
-			Name:      "expiring-token",
-			ScopeGist: db.ReadWritePermission,
-			ExpiresAt: tomorrow,
-		}, 302)
-
-		tokens, err := db.GetAccessTokensByUserID(1)
-		require.NoError(t, err)
-		require.Len(t, tokens, 2)
-	})
-
-	t.Run("DeleteToken", func(t *testing.T) {
-		s.Login(t, "thomas")
-		s.Request(t, "DELETE", "/settings/access-tokens/1", nil, 302)
-
-		tokens, err := db.GetAccessTokensByUserID(1)
-		require.NoError(t, err)
-		require.Len(t, tokens, 1)
-		require.Equal(t, "expiring-token", tokens[0].Name)
-	})
-}
-
-func TestAccessTokenPrivateGistAccess(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	_, _, user, identifier := s.CreateGist(t, "2")
-
-	// Create access token with read permission
-	token := &db.AccessToken{
-		Name:      "read-token",
-		UserID:    1,
-		ScopeGist: db.ReadPermission,
-	}
-	plainToken, err := token.GenerateToken()
-	require.NoError(t, err)
-	require.NoError(t, token.Create())
-
-	s.Logout()
-	headers := map[string]string{"Authorization": "Token " + plainToken}
-
-	t.Run("NoTokenReturns404", func(t *testing.T) {
-		s.Request(t, "GET", "/"+user+"/"+identifier, nil, 404)
-	})
-
-	t.Run("ValidTokenGrantsAccess", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier, nil, 200, headers)
-	})
-
-	t.Run("RawContentAccessible", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier+"/raw/HEAD/file.txt", nil, 200, headers)
-	})
-
-	t.Run("JSONEndpointAccessible", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier+".json", nil, 200, headers)
-	})
-
-	t.Run("InvalidTokenReturns404", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier, nil, 404, map[string]string{
-			"Authorization": "Token invalid_token",
-		})
-	})
-}
-
-func TestAccessTokenPermissions(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	_, _, user, identifier := s.CreateGist(t, "2")
-
-	// Create token with NO permission
-	noPermToken := &db.AccessToken{
-		Name:      "no-perm-token",
-		UserID:    1,
-		ScopeGist: db.NoPermission,
-	}
-	noPermPlain, err := noPermToken.GenerateToken()
-	require.NoError(t, err)
-	require.NoError(t, noPermToken.Create())
-
-	// Create token with READ permission
-	readToken := &db.AccessToken{
-		Name:      "read-token",
-		UserID:    1,
-		ScopeGist: db.ReadPermission,
-	}
-	readPlain, err := readToken.GenerateToken()
-	require.NoError(t, err)
-	require.NoError(t, readToken.Create())
-
-	s.Logout()
-
-	t.Run("NoPermissionDenied", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier, nil, 404, map[string]string{
-			"Authorization": "Token " + noPermPlain,
-		})
-	})
-
-	t.Run("ReadPermissionGranted", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier, nil, 200, map[string]string{
-			"Authorization": "Token " + readPlain,
-		})
-	})
-}
-
-func TestAccessTokenExpiration(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	_, _, user, identifier := s.CreateGist(t, "2")
-
-	// Create an expired token
-	expiredToken := &db.AccessToken{
-		Name:      "expired-token",
-		UserID:    1,
-		ScopeGist: db.ReadPermission,
-		ExpiresAt: time.Now().Add(-24 * time.Hour).Unix(),
-	}
-	expiredPlain, err := expiredToken.GenerateToken()
-	require.NoError(t, err)
-	require.NoError(t, expiredToken.Create())
-
-	// Create a valid token
-	validToken := &db.AccessToken{
-		Name:      "valid-token",
-		UserID:    1,
-		ScopeGist: db.ReadPermission,
-		ExpiresAt: time.Now().Add(24 * time.Hour).Unix(),
-	}
-	validPlain, err := validToken.GenerateToken()
-	require.NoError(t, err)
-	require.NoError(t, validToken.Create())
-
-	s.Logout()
-
-	t.Run("ExpiredTokenDenied", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier, nil, 404, map[string]string{
-			"Authorization": "Token " + expiredPlain,
-		})
-	})
-
-	t.Run("ValidTokenGranted", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier, nil, 200, map[string]string{
-			"Authorization": "Token " + validPlain,
-		})
-	})
-}
-
-func TestAccessTokenWrongUser(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	s.Register(t, "kaguya")
-
-	_, _, user, identifier := s.CreateGist(t, "2")
-
-	// Create token for kaguya
-	kaguyaToken := &db.AccessToken{
-		Name:      "kaguya-token",
-		UserID:    2,
-		ScopeGist: db.ReadPermission,
-	}
-	kaguyaPlain, err := kaguyaToken.GenerateToken()
-	require.NoError(t, err)
-	require.NoError(t, kaguyaToken.Create())
-
-	// Create token for thomas
-	thomasToken := &db.AccessToken{
-		Name:      "thomas-token",
-		UserID:    1,
-		ScopeGist: db.ReadPermission,
-	}
-	thomasPlain, err := thomasToken.GenerateToken()
-	require.NoError(t, err)
-	require.NoError(t, thomasToken.Create())
-
-	s.Logout()
-
-	t.Run("OtherUserTokenDenied", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier, nil, 404, map[string]string{
-			"Authorization": "Token " + kaguyaPlain,
-		})
-	})
-
-	t.Run("OwnerTokenGranted", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier, nil, 200, map[string]string{
-			"Authorization": "Token " + thomasPlain,
-		})
-	})
-}
-
-func TestAccessTokenLastUsedUpdate(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	_, _, user, identifier := s.CreateGist(t, "2")
-
-	token := &db.AccessToken{
-		Name:      "test-token",
-		UserID:    1,
-		ScopeGist: db.ReadPermission,
-	}
-	plainToken, err := token.GenerateToken()
-	require.NoError(t, err)
-	require.NoError(t, token.Create())
-
-	// Verify LastUsedAt is 0 initially
-	tokenFromDB, err := db.GetAccessTokenByID(token.ID)
-	require.NoError(t, err)
-	require.Equal(t, int64(0), tokenFromDB.LastUsedAt)
-
-	s.Logout()
-
-	// Use the token
-	s.RequestWithHeaders(t, "GET", "/"+user+"/"+identifier, nil, 200, map[string]string{
-		"Authorization": "Token " + plainToken,
-	})
-
-	// Verify LastUsedAt was updated
-	tokenFromDB, err = db.GetAccessTokenByID(token.ID)
-	require.NoError(t, err)
-	require.NotEqual(t, int64(0), tokenFromDB.LastUsedAt)
-}
-
-func TestAccessTokenWithRequireLogin(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
-
-	s.Register(t, "thomas")
-	_, _, user1, identifier1 := s.CreateGist(t, "2")
-
-	s.Login(t, "thomas")
-	_, _, user2, identifier2 := s.CreateGist(t, "0")
-
-	s.Login(t, "thomas")
-	token := &db.AccessToken{
-		Name:      "read-token",
-		UserID:    1,
-		ScopeGist: db.ReadPermission,
-	}
-	plainToken, err := token.GenerateToken()
-	require.NoError(t, err)
-	require.NoError(t, token.Create())
-
-	s.Request(t, "PUT", "/admin-panel/set-config", url.Values{"key": {db.SettingRequireLogin}, "value": {"1"}}, 200)
-	s.Logout()
-
-	headers := map[string]string{"Authorization": "Token " + plainToken}
-
-	t.Run("UnauthenticatedRedirects", func(t *testing.T) {
-		s.Request(t, "GET", "/"+user1+"/"+identifier1, nil, 302)
-		s.Request(t, "GET", "/"+user2+"/"+identifier2, nil, 302)
-	})
-
-	t.Run("ValidTokenGrantsAccess", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user1+"/"+identifier1, nil, 200, headers)
-		s.RequestWithHeaders(t, "GET", "/"+user2+"/"+identifier2, nil, 200, headers)
-		s.RequestWithHeaders(t, "GET", "/"+user1+"/"+identifier1+"/raw/HEAD/file.txt", nil, 200, headers)
-	})
-
-	t.Run("InvalidTokenRedirects", func(t *testing.T) {
-		s.RequestWithHeaders(t, "GET", "/"+user1+"/"+identifier1, nil, 302, map[string]string{
-			"Authorization": "Token invalid_token",
-		})
-	})
-
-	t.Run("NoPermTokenRedirects", func(t *testing.T) {
-		noPermToken := &db.AccessToken{
-			Name:      "no-perm-token",
-			UserID:    1,
-			ScopeGist: db.NoPermission,
-		}
-		noPermPlain, err := noPermToken.GenerateToken()
-		require.NoError(t, err)
-		require.NoError(t, noPermToken.Create())
-
-		s.RequestWithHeaders(t, "GET", "/"+user1+"/"+identifier1, nil, 302, map[string]string{
-			"Authorization": "Token " + noPermPlain,
-		})
-	})
-}
--- a/internal/web/handlers/settings/account.go
+++ b/internal/web/handlers/settings/account.go
@@ -3,17 +3,16 @@ package settings
 import (
 	"crypto/md5"
 	"fmt"
-	"os"
-	"path/filepath"
-	"strings"
-	"time"
-
 	"github.com/thomiceli/opengist/internal/config"
 	"github.com/thomiceli/opengist/internal/db"
 	"github.com/thomiceli/opengist/internal/git"
 	"github.com/thomiceli/opengist/internal/i18n"
 	"github.com/thomiceli/opengist/internal/validator"
 	"github.com/thomiceli/opengist/internal/web/context"
+	"os"
+	"path/filepath"
+	"strings"
+	"time"
 )

 func EmailProcess(ctx *context.Context) error {
@@ -62,22 +61,18 @@ func UsernameProcess(ctx *context.Context) error {
 		return ctx.RedirectTo("/settings")
 	}

-	if !strings.EqualFold(dto.Username, user.Username) {
-		if exists, err := db.UserExists(dto.Username); err != nil || exists {
-			ctx.AddFlash(ctx.Tr("flash.auth.username-exists"), "error")
-			return ctx.RedirectTo("/settings")
-		}
+	if exists, err := db.UserExists(dto.Username); err != nil || exists {
+		ctx.AddFlash(ctx.Tr("flash.auth.username-exists"), "error")
+		return ctx.RedirectTo("/settings")
 	}

 	sourceDir := filepath.Join(config.GetHomeDir(), git.ReposDirectory, strings.ToLower(user.Username))
 	destinationDir := filepath.Join(config.GetHomeDir(), git.ReposDirectory, strings.ToLower(dto.Username))

-	if sourceDir != destinationDir {
-		if _, err := os.Stat(sourceDir); !os.IsNotExist(err) {
-			err := os.Rename(sourceDir, destinationDir)
-			if err != nil {
-				return ctx.ErrorRes(500, "Cannot rename user directory", err)
-			}
+	if _, err := os.Stat(sourceDir); !os.IsNotExist(err) {
+		err := os.Rename(sourceDir, destinationDir)
+		if err != nil {
+			return ctx.ErrorRes(500, "Cannot rename user directory", err)
 		}
 	}

--- a/internal/web/server/middlewares.go
+++ b/internal/web/server/middlewares.go
@@ -28,7 +28,7 @@ import (
 func (s *Server) useCustomContext() {
 	s.echo.Use(func(next echo.HandlerFunc) echo.HandlerFunc {
 		return func(c echo.Context) error {
-			cc := context.NewContext(c, filepath.Join(config.GetHomeDir(), "sessions"))
+			cc := context.NewContext(c, s.sessionsPath)
 			return next(cc)
 		}
 	})
@@ -38,7 +38,8 @@ func (s *Server) registerMiddlewares() {
 	s.echo.Use(Middleware(dataInit).toEcho())
 	s.echo.Use(Middleware(locale).toEcho())
 	if config.C.MetricsEnabled {
-		s.echo.Use(echoprometheus.NewMiddleware("opengist"))
+		p := echoprometheus.NewMiddleware("opengist")
+		s.echo.Use(p)
 	}

 	s.echo.Pre(middleware.MethodOverrideWithConfig(middleware.MethodOverrideConfig{
@@ -58,27 +59,29 @@ func (s *Server) registerMiddlewares() {
 	s.echo.Use(middleware.Recover())
 	s.echo.Use(middleware.Secure())
 	s.echo.Use(Middleware(sessionInit).toEcho())
-	s.echo.Use(middleware.CSRFWithConfig(middleware.CSRFConfig{
-		TokenLookup:    "form:_csrf,header:X-CSRF-Token",
-		CookiePath:     "/",
-		CookieHTTPOnly: true,
-		CookieSameSite: http.SameSiteStrictMode,
-		Skipper: func(ctx echo.Context) bool {
-			/* skip CSRF for embeds */
-			gistName := ctx.Param("gistname")

-			/* skip CSRF for git clients */
-			matchUploadPack, _ := regexp.MatchString("(.*?)/git-upload-pack$", ctx.Request().URL.Path)
-			matchReceivePack, _ := regexp.MatchString("(.*?)/git-receive-pack$", ctx.Request().URL.Path)
-			return (filepath.Ext(gistName) == ".js" && ctx.Request().Method == "GET") || matchUploadPack || matchReceivePack
-		},
-		ErrorHandler: func(err error, c echo.Context) error {
-			log.Info().Err(err).Msg("CSRF error")
-			return err
-		},
-	}))
-	s.echo.Use(Middleware(csrfInit).toEcho())
+	if !s.ignoreCsrf {
+		s.echo.Use(middleware.CSRFWithConfig(middleware.CSRFConfig{
+			TokenLookup:    "form:_csrf,header:X-CSRF-Token",
+			CookiePath:     "/",
+			CookieHTTPOnly: true,
+			CookieSameSite: http.SameSiteStrictMode,
+			Skipper: func(ctx echo.Context) bool {
+				/* skip CSRF for embeds */
+				gistName := ctx.Param("gistname")

+				/* skip CSRF for git clients */
+				matchUploadPack, _ := regexp.MatchString("(.*?)/git-upload-pack$", ctx.Request().URL.Path)
+				matchReceivePack, _ := regexp.MatchString("(.*?)/git-receive-pack$", ctx.Request().URL.Path)
+				return filepath.Ext(gistName) == ".js" || matchUploadPack || matchReceivePack
+			},
+			ErrorHandler: func(err error, c echo.Context) error {
+				log.Info().Err(err).Msg("CSRF error")
+				return err
+			},
+		}))
+		s.echo.Use(Middleware(csrfInit).toEcho())
+	}
 }

 func (s *Server) errorHandler(err error, ctx echo.Context) {
@@ -157,10 +160,10 @@ func dataInit(next Handler) Handler {

 func writePermission(next Handler) Handler {
 	return func(ctx *context.Context) error {
-		gist := ctx.GetData("gist").(*db.Gist)
+		gist := ctx.GetData("gist")
 		user := ctx.User
-		if !gist.CanWrite(user) {
-			return ctx.ErrorRes(403, "You don't have permission to edit this gist", nil)
+		if !gist.(*db.Gist).CanWrite(user) {
+			return ctx.RedirectTo("/" + gist.(*db.Gist).User.Username + "/" + gist.(*db.Gist).Identifier())
 		}
 		return next(ctx)
 	}
@@ -197,17 +200,6 @@ func inMFASession(next Handler) Handler {
 	}
 }

-func inOAuthRegisterSession(next Handler) Handler {
-	return func(ctx *context.Context) error {
-		sess := ctx.GetSession()
-		_, ok := sess.Values["oauthProvider"].(string)
-		if !ok {
-			return ctx.RedirectTo("/login")
-		}
-		return next(ctx)
-	}
-}
-
 func makeCheckRequireLogin(isSingleGistAccess bool) Middleware {
 	return func(next Handler) Handler {
 		return func(ctx *context.Context) error {
@@ -215,9 +207,6 @@ func makeCheckRequireLogin(isSingleGistAccess bool) Middleware {
 				return next(ctx)
 			}

-			if getUserByToken(ctx) != nil {
-				return next(ctx)
-			}
 			allow, err := auth.ShouldAllowUnauthenticatedGistAccess(handlers.ContextAuthInfo{Context: ctx}, isSingleGistAccess)
 			if err != nil {
 				log.Fatal().Err(err).Msg("Failed to check if unauthenticated access is allowed")
@@ -318,6 +307,7 @@ func csrfInit(next Handler) Handler {
 			csrf = csrfToken
 		}
 		ctx.SetData("csrfHtml", template.HTML(`<input type="hidden" name="_csrf" value="`+csrf+`">`))
+		ctx.SetData("csrfHtml", template.HTML(`<input type="hidden" name="_csrf" value="`+csrf+`">`))

 		return next(ctx)
 	}
@@ -337,39 +327,6 @@ func loadSettings(ctx *context.Context) error {
 	return nil
 }

-// getUserByToken checks the Authorization header for token-based auth.
-// Expects format: Authorization: Token <token>
-// Returns the user if the token is valid and has gist read permission, nil otherwise.
-func getUserByToken(ctx *context.Context) *db.User {
-	authHeader := ctx.Request().Header.Get("Authorization")
-	if authHeader == "" {
-		return nil
-	}
-
-	if !strings.HasPrefix(authHeader, "Token ") {
-		return nil
-	}
-
-	plainToken := strings.TrimPrefix(authHeader, "Token ")
-
-	accessToken, err := db.GetAccessTokenByToken(plainToken)
-	if err != nil {
-		return nil
-	}
-
-	if accessToken.IsExpired() {
-		return nil
-	}
-
-	if !accessToken.HasGistReadPermission() {
-		return nil
-	}
-
-	_ = accessToken.UpdateLastUsed()
-
-	return &accessToken.User
-}
-
 func gistInit(next Handler) Handler {
 	return func(ctx *context.Context) error {
 		currUser := ctx.User
@@ -396,12 +353,7 @@ func gistInit(next Handler) Handler {

 		if gist.Private == db.PrivateVisibility {
 			if currUser == nil || currUser.ID != gist.UserID {
-				// Check for token-based auth via Authorization header
-				if tokenUser := getUserByToken(ctx); tokenUser != nil && tokenUser.ID == gist.UserID {
-					// Token is valid and belongs to gist owner, allow access
-				} else {
-					return ctx.NotFound("Gist not found")
-				}
+				return ctx.NotFound("Gist not found")
 			}
 		}

--- a/internal/web/server/renderer.go
+++ b/internal/web/server/renderer.go
@@ -192,9 +192,6 @@ func (s *Server) setFuncMap() {
 		"humanDate": func(t int64) string {
 			return time.Unix(t, 0).Format("02/01/2006 15:04")
 		},
-		"humanDateOnly": func(t int64) string {
-			return time.Unix(t, 0).Format("02/01/2006")
-		},
 		"mainTheme": func(theme *db.UserStyleDTO) string {
 			if theme == nil {
 				return "auto"
--- a/internal/web/server/router.go
+++ b/internal/web/server/router.go
@@ -17,6 +17,7 @@ import (
 	"github.com/thomiceli/opengist/internal/web/handlers/gist"
 	"github.com/thomiceli/opengist/internal/web/handlers/git"
 	"github.com/thomiceli/opengist/internal/web/handlers/health"
+	"github.com/thomiceli/opengist/internal/web/handlers/metrics"
 	"github.com/thomiceli/opengist/internal/web/handlers/settings"
 	"github.com/thomiceli/opengist/public"
 )
@@ -33,13 +34,15 @@ func (s *Server) registerRoutes() {

 		r.GET("/healthcheck", health.Healthcheck)

+		if config.C.MetricsEnabled {
+			r.GET("/metrics", metrics.Metrics)
+		}
+
 		r.GET("/register", auth.Register)
 		r.POST("/register", auth.ProcessRegister)
 		r.GET("/login", auth.Login)
 		r.POST("/login", auth.ProcessLogin)
 		r.GET("/logout", auth.Logout)
-		r.GET("/oauth/register", auth.OauthRegister, inOAuthRegisterSession)
-		r.POST("/oauth/register", auth.ProcessOauthRegister, inOAuthRegisterSession)
 		r.GET("/oauth/:provider", auth.Oauth)
 		r.GET("/oauth/:provider/callback", auth.OauthCallback)
 		r.GET("/oauth/:provider/unlink", auth.OauthUnlink, logged)
@@ -64,9 +67,6 @@ func (s *Server) registerRoutes() {
 			sA.DELETE("/account", settings.AccountDeleteProcess)
 			sA.POST("/ssh-keys", settings.SshKeysProcess)
 			sA.DELETE("/ssh-keys/:id", settings.SshKeysDelete)
-			sA.GET("/access-tokens", settings.AccessTokens)
-			sA.POST("/access-tokens", settings.AccessTokensProcess)
-			sA.DELETE("/access-tokens/:id", settings.AccessTokensDelete)
 			sA.DELETE("/passkeys/:id", settings.PasskeyDelete)
 			sA.PUT("/password", settings.PasswordProcess)
 			sA.PUT("/username", settings.UsernameProcess)
--- a/internal/web/server/server.go
+++ b/internal/web/server/server.go
@@ -2,6 +2,7 @@ package server

 import (
 	"fmt"
+	"github.com/thomiceli/opengist/internal/validator"
 	"net"
 	"net/http"
 	"os"
@@ -9,8 +10,6 @@ import (
 	"strconv"
 	"strings"

-	"github.com/thomiceli/opengist/internal/validator"
-
 	"github.com/labstack/echo/v4"
 	"github.com/rs/zerolog/log"
 	"github.com/thomiceli/opengist/internal/config"
@@ -19,16 +18,19 @@ import (

 type Server struct {
 	echo *echo.Echo
-	dev  bool
+
+	dev          bool
+	sessionsPath string
+	ignoreCsrf   bool
 }

-func NewServer(isDev bool) *Server {
+func NewServer(isDev bool, sessionsPath string, ignoreCsrf bool) *Server {
 	e := echo.New()
 	e.HideBanner = true
 	e.HidePort = true
 	e.Validator = validator.NewValidator()

-	s := &Server{echo: e, dev: isDev}
+	s := &Server{echo: e, dev: isDev, sessionsPath: sessionsPath, ignoreCsrf: ignoreCsrf}

 	s.useCustomContext()

@@ -173,7 +175,3 @@ func (s *Server) createPidFile(pidPath string) error {
 func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	s.echo.ServeHTTP(w, r)
 }
-
-func (s *Server) Use(middleware echo.MiddlewareFunc) {
-	s.echo.Use(middleware)
-}
--- a/internal/web/test/actions_test.go
+++ b/internal/web/test/actions_test.go
@@ -0,0 +1,41 @@
+package test
+
+import (
+	"github.com/stretchr/testify/require"
+	"github.com/thomiceli/opengist/internal/db"
+	"testing"
+)
+
+func TestAdminActions(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+	urls := []string{
+		"/admin-panel/sync-fs",
+		"/admin-panel/sync-db",
+		"/admin-panel/gc-repos",
+		"/admin-panel/sync-previews",
+		"/admin-panel/reset-hooks",
+		"/admin-panel/index-gists",
+	}
+
+	for _, url := range urls {
+		err := s.Request("POST", url, nil, 404)
+		require.NoError(t, err)
+	}
+
+	user1 := db.UserDTO{Username: "admin", Password: "admin"}
+	register(t, s, user1)
+	login(t, s, user1)
+	for _, url := range urls {
+		err := s.Request("POST", url, nil, 302)
+		require.NoError(t, err)
+	}
+
+	user2 := db.UserDTO{Username: "nonadmin", Password: "nonadmin"}
+	register(t, s, user2)
+	login(t, s, user2)
+	for _, url := range urls {
+		err := s.Request("POST", url, nil, 404)
+		require.NoError(t, err)
+	}
+}
--- a/internal/web/test/admin_test.go
+++ b/internal/web/test/admin_test.go
@@ -0,0 +1,260 @@
+package test
+
+import (
+	"github.com/stretchr/testify/require"
+	"github.com/thomiceli/opengist/internal/config"
+	"github.com/thomiceli/opengist/internal/db"
+	"github.com/thomiceli/opengist/internal/git"
+	"os"
+	"path/filepath"
+	"strconv"
+	"testing"
+	"time"
+)
+
+func TestAdminPages(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+	urls := []string{
+		"/admin-panel",
+		"/admin-panel/users",
+		"/admin-panel/gists",
+		"/admin-panel/invitations",
+		"/admin-panel/configuration",
+	}
+
+	for _, url := range urls {
+		err := s.Request("GET", url, nil, 404)
+		require.NoError(t, err)
+	}
+
+	user1 := db.UserDTO{Username: "admin", Password: "admin"}
+	register(t, s, user1)
+	login(t, s, user1)
+	for _, url := range urls {
+		err := s.Request("GET", url, nil, 200)
+		require.NoError(t, err)
+	}
+
+	user2 := db.UserDTO{Username: "nonadmin", Password: "nonadmin"}
+	register(t, s, user2)
+	login(t, s, user2)
+	for _, url := range urls {
+		err := s.Request("GET", url, nil, 404)
+		require.NoError(t, err)
+	}
+}
+
+func TestSetConfig(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+	settings := []string{
+		db.SettingDisableSignup,
+		db.SettingRequireLogin,
+		db.SettingAllowGistsWithoutLogin,
+		db.SettingDisableLoginForm,
+		db.SettingDisableGravatar,
+	}
+
+	user1 := db.UserDTO{Username: "admin", Password: "admin"}
+	register(t, s, user1)
+	login(t, s, user1)
+
+	for _, setting := range settings {
+		val, err := db.GetSetting(setting)
+		require.NoError(t, err)
+		require.Equal(t, "0", val)
+
+		err = s.Request("PUT", "/admin-panel/set-config", settingSet{setting, "1"}, 200)
+		require.NoError(t, err)
+
+		val, err = db.GetSetting(setting)
+		require.NoError(t, err)
+		require.Equal(t, "1", val)
+
+		err = s.Request("PUT", "/admin-panel/set-config", settingSet{setting, "0"}, 200)
+		require.NoError(t, err)
+
+		val, err = db.GetSetting(setting)
+		require.NoError(t, err)
+		require.Equal(t, "0", val)
+	}
+}
+
+func TestPagination(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	user1 := db.UserDTO{Username: "admin", Password: "admin"}
+	register(t, s, user1)
+	for i := 0; i < 11; i++ {
+		user := db.UserDTO{Username: "user" + strconv.Itoa(i), Password: "user" + strconv.Itoa(i)}
+		register(t, s, user)
+	}
+
+	login(t, s, user1)
+
+	err := s.Request("GET", "/admin-panel/users", nil, 200)
+	require.NoError(t, err)
+
+	err = s.Request("GET", "/admin-panel/users?page=2", nil, 200)
+	require.NoError(t, err)
+
+	err = s.Request("GET", "/admin-panel/users?page=3", nil, 404)
+	require.NoError(t, err)
+
+	err = s.Request("GET", "/admin-panel/users?page=0", nil, 200)
+	require.NoError(t, err)
+
+	err = s.Request("GET", "/admin-panel/users?page=-1", nil, 200)
+	require.NoError(t, err)
+
+	err = s.Request("GET", "/admin-panel/users?page=a", nil, 200)
+	require.NoError(t, err)
+}
+
+func TestAdminUser(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	user1 := db.UserDTO{Username: "admin", Password: "admin"}
+	user2 := db.UserDTO{Username: "nonadmin", Password: "nonadmin"}
+	register(t, s, user1)
+	register(t, s, user2)
+
+	login(t, s, user2)
+
+	gist1 := db.GistDTO{
+		Title: "gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"gist1.txt"},
+		Content: []string{"yeah"},
+		Topics:  "",
+	}
+	err := s.Request("POST", "/", gist1, 302)
+	require.NoError(t, err)
+
+	_, err = os.Stat(filepath.Join(config.GetHomeDir(), git.ReposDirectory, user2.Username))
+	require.NoError(t, err)
+
+	count, err := db.CountAll(db.User{})
+	require.NoError(t, err)
+	require.Equal(t, int64(2), count)
+
+	login(t, s, user1)
+
+	err = s.Request("POST", "/admin-panel/users/2/delete", nil, 302)
+	require.NoError(t, err)
+
+	count, err = db.CountAll(db.User{})
+	require.NoError(t, err)
+	require.Equal(t, int64(1), count)
+
+	_, err = os.Stat(filepath.Join(config.GetHomeDir(), git.ReposDirectory, user2.Username))
+	require.Error(t, err)
+}
+
+func TestAdminGist(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	user1 := db.UserDTO{Username: "admin", Password: "admin"}
+	register(t, s, user1)
+	login(t, s, user1)
+
+	gist1 := db.GistDTO{
+		Title: "gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"gist1.txt"},
+		Content: []string{"yeah"},
+		Topics:  "",
+	}
+	err := s.Request("POST", "/", gist1, 302)
+	require.NoError(t, err)
+
+	count, err := db.CountAll(db.Gist{})
+	require.NoError(t, err)
+	require.Equal(t, int64(1), count)
+
+	gist1Db, err := db.GetGistByID("1")
+	require.NoError(t, err)
+
+	_, err = os.Stat(filepath.Join(config.GetHomeDir(), git.ReposDirectory, user1.Username, gist1Db.Identifier()))
+	require.NoError(t, err)
+
+	err = s.Request("POST", "/admin-panel/gists/1/delete", nil, 302)
+	require.NoError(t, err)
+
+	count, err = db.CountAll(db.Gist{})
+	require.NoError(t, err)
+	require.Equal(t, int64(0), count)
+
+	_, err = os.Stat(filepath.Join(config.GetHomeDir(), git.ReposDirectory, user1.Username, gist1Db.Identifier()))
+	require.Error(t, err)
+}
+
+func TestAdminInvitation(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	user1 := db.UserDTO{Username: "admin", Password: "admin"}
+	register(t, s, user1)
+	login(t, s, user1)
+
+	err := s.Request("POST", "/admin-panel/invitations", invitationAdmin{
+		nbMax:         "",
+		expiredAtUnix: "",
+	}, 302)
+	require.NoError(t, err)
+	invitation1, err := db.GetInvitationByID(1)
+	require.NoError(t, err)
+	require.Equal(t, uint(1), invitation1.ID)
+	require.Equal(t, uint(0), invitation1.NbUsed)
+	require.Equal(t, uint(10), invitation1.NbMax)
+	require.InDelta(t, time.Now().Unix()+604800, invitation1.ExpiresAt, 10)
+
+	err = s.Request("POST", "/admin-panel/invitations", invitationAdmin{
+		nbMax:         "aa",
+		expiredAtUnix: "1735722000",
+	}, 302)
+	require.NoError(t, err)
+	invitation2, err := db.GetInvitationByID(2)
+	require.NoError(t, err)
+	require.Equal(t, invitation2, &db.Invitation{
+		ID:        2,
+		Code:      invitation2.Code,
+		ExpiresAt: time.Unix(1735722000, 0).Unix(),
+		NbUsed:    0,
+		NbMax:     10,
+	})
+
+	err = s.Request("POST", "/admin-panel/invitations", invitationAdmin{
+		nbMax:         "20",
+		expiredAtUnix: "1735722000",
+	}, 302)
+	require.NoError(t, err)
+	invitation3, err := db.GetInvitationByID(3)
+	require.NoError(t, err)
+	require.Equal(t, invitation3, &db.Invitation{
+		ID:        3,
+		Code:      invitation3.Code,
+		ExpiresAt: time.Unix(1735722000, 0).Unix(),
+		NbUsed:    0,
+		NbMax:     20,
+	})
+
+	count, err := db.CountAll(db.Invitation{})
+	require.NoError(t, err)
+	require.Equal(t, int64(3), count)
+
+	err = s.Request("POST", "/admin-panel/invitations/1/delete", nil, 302)
+	require.NoError(t, err)
+
+	count, err = db.CountAll(db.Invitation{})
+	require.NoError(t, err)
+	require.Equal(t, int64(2), count)
+}
--- a/internal/web/test/auth_test.go
+++ b/internal/web/test/auth_test.go
@@ -0,0 +1,414 @@
+package test
+
+import (
+	"os"
+	"os/exec"
+	"path/filepath"
+	"testing"
+
+	"github.com/rs/zerolog/log"
+	"github.com/stretchr/testify/require"
+	"github.com/thomiceli/opengist/internal/config"
+	"github.com/thomiceli/opengist/internal/db"
+)
+
+func TestRegister(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	err := s.Request("GET", "/", nil, 302)
+	require.NoError(t, err)
+
+	err = s.Request("GET", "/register", nil, 200)
+	require.NoError(t, err)
+
+	user1 := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, user1)
+
+	user1db, err := db.GetUserById(1)
+	require.NoError(t, err)
+	require.Equal(t, user1.Username, user1db.Username)
+	require.True(t, user1db.IsAdmin)
+
+	err = s.Request("GET", "/", nil, 200)
+	require.NoError(t, err)
+
+	s.sessionCookie = ""
+
+	user2 := db.UserDTO{Username: "thomas", Password: "azeaze"}
+	err = s.Request("POST", "/register", user2, 200)
+	require.Error(t, err)
+
+	user3 := db.UserDTO{Username: "kaguya", Password: "kaguya"}
+	register(t, s, user3)
+
+	user3db, err := db.GetUserById(2)
+	require.NoError(t, err)
+	require.False(t, user3db.IsAdmin)
+
+	s.sessionCookie = ""
+
+	count, err := db.CountAll(db.User{})
+	require.NoError(t, err)
+	require.Equal(t, int64(2), count)
+}
+
+func TestLogin(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	err := s.Request("GET", "/login", nil, 200)
+	require.NoError(t, err)
+
+	user1 := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, user1)
+
+	s.sessionCookie = ""
+
+	login(t, s, user1)
+	require.NotEmpty(t, s.sessionCookie)
+
+	s.sessionCookie = ""
+
+	user2 := db.UserDTO{Username: "thomas", Password: "azeaze"}
+	user3 := db.UserDTO{Username: "azeaze", Password: ""}
+
+	err = s.Request("POST", "/login", user2, 302)
+	require.Empty(t, s.sessionCookie)
+	require.Error(t, err)
+
+	err = s.Request("POST", "/login", user3, 302)
+	require.Empty(t, s.sessionCookie)
+	require.Error(t, err)
+}
+
+func register(t *testing.T, s *TestServer, user db.UserDTO) {
+	err := s.Request("POST", "/register", user, 302)
+	require.NoError(t, err)
+}
+
+func login(t *testing.T, s *TestServer, user db.UserDTO) {
+	err := s.Request("POST", "/login", user, 302)
+	require.NoError(t, err)
+}
+
+func TestAnonymous(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	user := db.UserDTO{Username: "thomas", Password: "azeaze"}
+	register(t, s, user)
+
+	err := s.Request("PUT", "/admin-panel/set-config", settingSet{"require-login", "1"}, 200)
+	require.NoError(t, err)
+
+	gist1 := db.GistDTO{
+		Title:       "gist1",
+		Description: "my first gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"gist1.txt", "gist2.txt", "gist3.txt"},
+		Content: []string{"yeah", "yeah\ncool", "yeah\ncool gist actually"},
+		Topics:  "",
+	}
+	err = s.Request("POST", "/", gist1, 302)
+	require.NoError(t, err)
+
+	gist1db, err := db.GetGistByID("1")
+	require.NoError(t, err)
+
+	err = s.Request("GET", "/all", nil, 200)
+	require.NoError(t, err)
+
+	cookie := s.sessionCookie
+	s.sessionCookie = ""
+
+	err = s.Request("GET", "/all", nil, 302)
+	require.NoError(t, err)
+
+	// Should redirect to login if RequireLogin
+	err = s.Request("GET", "/"+gist1db.User.Username+"/"+gist1db.Uuid, nil, 302)
+	require.NoError(t, err)
+
+	s.sessionCookie = cookie
+
+	err = s.Request("PUT", "/admin-panel/set-config", settingSet{"allow-gists-without-login", "1"}, 200)
+	require.NoError(t, err)
+
+	s.sessionCookie = ""
+
+	// Should return results
+	err = s.Request("GET", "/"+gist1db.User.Username+"/"+gist1db.Uuid, nil, 200)
+	require.NoError(t, err)
+
+}
+
+func TestGitOperations(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	admin := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, admin)
+	s.sessionCookie = ""
+	register(t, s, db.UserDTO{Username: "fujiwara", Password: "fujiwara"})
+	s.sessionCookie = ""
+	register(t, s, db.UserDTO{Username: "kaguya", Password: "kaguya"})
+
+	gist1 := db.GistDTO{
+		Title:       "kaguya-pub-gist",
+		URL:         "kaguya-pub-gist",
+		Description: "kaguya's first gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: db.PublicVisibility,
+		},
+		Name: []string{"kaguya-file.txt"},
+		Content: []string{
+			"yeah",
+		},
+		Topics: "",
+	}
+	err := s.Request("POST", "/", gist1, 302)
+	require.NoError(t, err)
+
+	gist2 := db.GistDTO{
+		Title:       "kaguya-unl-gist",
+		URL:         "kaguya-unl-gist",
+		Description: "kaguya's second gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: db.UnlistedVisibility,
+		},
+		Name: []string{"kaguya-file.txt"},
+		Content: []string{
+			"cool",
+		},
+		Topics: "",
+	}
+	err = s.Request("POST", "/", gist2, 302)
+	require.NoError(t, err)
+
+	gist3 := db.GistDTO{
+		Title:       "kaguya-priv-gist",
+		URL:         "kaguya-priv-gist",
+		Description: "kaguya's second gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: db.PrivateVisibility,
+		},
+		Name: []string{"kaguya-file.txt"},
+		Content: []string{
+			"super",
+		},
+		Topics: "",
+	}
+	err = s.Request("POST", "/", gist3, 302)
+	require.NoError(t, err)
+
+	tests := []struct {
+		credentials      string
+		user             string
+		url              string
+		pushOptions      string
+		expectErrorClone bool
+		expectErrorCheck bool
+		expectErrorPush  bool
+	}{
+		{":", "kaguya", "kaguya-pub-gist", "", false, false, true},
+		{":", "kaguya", "kaguya-unl-gist", "", false, false, true},
+		{":", "kaguya", "kaguya-priv-gist", "", true, true, true},
+		{"kaguya:kaguya", "kaguya", "kaguya-pub-gist", "", false, false, false},
+		{"kaguya:kaguya", "kaguya", "kaguya-unl-gist", "", false, false, false},
+		{"kaguya:kaguya", "kaguya", "kaguya-priv-gist", "", false, false, false},
+		{"fujiwara:fujiwara", "kaguya", "kaguya-pub-gist", "", false, false, true},
+		{"fujiwara:fujiwara", "kaguya", "kaguya-unl-gist", "", false, false, true},
+		{"fujiwara:fujiwara", "kaguya", "kaguya-priv-gist", "", true, true, true},
+	}
+
+	for _, test := range tests {
+		gitCloneCheckPush(t, test.credentials, test.user, test.url, "kaguya-file.txt", test.pushOptions, test.expectErrorClone, test.expectErrorCheck, test.expectErrorPush)
+	}
+
+	login(t, s, admin)
+	err = s.Request("PUT", "/admin-panel/set-config", settingSet{"require-login", "1"}, 200)
+	require.NoError(t, err)
+
+	testsRequireLogin := []struct {
+		credentials      string
+		user             string
+		url              string
+		pushOptions      string
+		expectErrorClone bool
+		expectErrorCheck bool
+		expectErrorPush  bool
+	}{
+		{":", "kaguya", "kaguya-pub-gist", "", true, true, true},
+		{":", "kaguya", "kaguya-unl-gist", "", true, true, true},
+		{":", "kaguya", "kaguya-priv-gist", "", true, true, true},
+		{"kaguya:kaguya", "kaguya", "kaguya-pub-gist", "", false, false, false},
+		{"kaguya:kaguya", "kaguya", "kaguya-unl-gist", "", false, false, false},
+		{"kaguya:kaguya", "kaguya", "kaguya-priv-gist", "", false, false, false},
+		{"fujiwara:fujiwara", "kaguya", "kaguya-pub-gist", "", false, false, true},
+		{"fujiwara:fujiwara", "kaguya", "kaguya-unl-gist", "", false, false, true},
+		{"fujiwara:fujiwara", "kaguya", "kaguya-priv-gist", "", true, true, true},
+	}
+
+	for _, test := range testsRequireLogin {
+		gitCloneCheckPush(t, test.credentials, test.user, test.url, "kaguya-file.txt", test.pushOptions, test.expectErrorClone, test.expectErrorCheck, test.expectErrorPush)
+	}
+
+	login(t, s, admin)
+	err = s.Request("PUT", "/admin-panel/set-config", settingSet{"allow-gists-without-login", "1"}, 200)
+	require.NoError(t, err)
+
+	for _, test := range tests {
+		gitCloneCheckPush(t, test.credentials, test.user, test.url, "kaguya-file.txt", test.pushOptions, test.expectErrorClone, test.expectErrorCheck, test.expectErrorPush)
+	}
+}
+
+func TestGitInit(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	admin := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, admin)
+	s.sessionCookie = ""
+	register(t, s, db.UserDTO{Username: "fujiwara", Password: "fujiwara"})
+	s.sessionCookie = ""
+	register(t, s, db.UserDTO{Username: "kaguya", Password: "kaguya"})
+
+	testsNewWithPush := []struct {
+		credentials      string
+		user             string
+		url              string
+		pushOptions      string
+		expectErrorClone bool
+		expectErrorCheck bool
+		expectErrorPush  bool
+	}{
+		{":", "kaguya", "gist1", "", true, true, true},
+		{"kaguya:wrongpass", "kaguya", "gist2", "", true, true, true},
+		{"fujiwara:fujiwara", "kaguya", "gist3", "", true, true, true},
+		{"kaguya:kaguya", "kaguya", "gist4", "", false, false, false},
+		{"kaguya:kaguya", "kaguya", "gist5/g", "", true, true, true},
+	}
+
+	for _, test := range testsNewWithPush {
+		gitInitPush(t, test.credentials, test.user, test.url, "newfile.txt", test.pushOptions, test.expectErrorPush)
+	}
+
+	gist1db, err := db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, "kaguya", gist1db.User.Username)
+
+	for _, test := range testsNewWithPush {
+		gitCloneCheckPush(t, test.credentials, test.user, test.url, "newfile.txt", test.pushOptions, test.expectErrorClone, test.expectErrorCheck, test.expectErrorPush)
+	}
+
+	count, err := db.CountAll(db.Gist{})
+	require.NoError(t, err)
+	require.Equal(t, int64(1), count)
+
+	testsNewWithInit := []struct {
+		credentials     string
+		url             string
+		pushOptions     string
+		expectErrorPush bool
+	}{
+		{":", "init", "", true},
+		{"fujiwara:wrongpass", "init", "", true},
+		{"kaguya:kaguya", "init", "", false},
+		{"fujiwara:fujiwara", "init", "", false},
+	}
+
+	for _, test := range testsNewWithInit {
+		gitInitPush(t, test.credentials, "kaguya", test.url, "newfile.txt", test.pushOptions, test.expectErrorPush)
+	}
+
+	count, err = db.CountAll(db.Gist{})
+	require.NoError(t, err)
+	require.Equal(t, int64(3), count)
+
+	gist2db, err := db.GetGistByID("2")
+	require.NoError(t, err)
+	require.Equal(t, "kaguya", gist2db.User.Username)
+
+	gist3db, err := db.GetGistByID("3")
+	require.NoError(t, err)
+	require.Equal(t, "fujiwara", gist3db.User.Username)
+}
+
+func clientGitClone(creds string, user string, url string) error {
+	return exec.Command("git", "clone", "http://"+creds+"@localhost:6157/"+user+"/"+url, filepath.Join(config.GetHomeDir(), "tmp", url)).Run()
+}
+
+func clientGitPush(url string, pushOptions string, file string) error {
+	f, err := os.Create(filepath.Join(config.GetHomeDir(), "tmp", url, file))
+	if err != nil {
+		return err
+	}
+	_, _ = f.WriteString("new file")
+	_ = f.Close()
+
+	_ = exec.Command("git", "-C", filepath.Join(config.GetHomeDir(), "tmp", url), "add", file).Run()
+	_ = exec.Command("git", "-C", filepath.Join(config.GetHomeDir(), "tmp", url), "commit", "-m", "new file").Run()
+	if pushOptions != "" {
+		err = exec.Command("git", "-C", filepath.Join(config.GetHomeDir(), "tmp", url), "push", pushOptions, "origin").Run()
+	} else {
+		err = exec.Command("git", "-C", filepath.Join(config.GetHomeDir(), "tmp", url), "push", "origin").Run()
+	}
+	_ = os.RemoveAll(filepath.Join(config.GetHomeDir(), "tmp", url))
+
+	return err
+}
+
+func clientGitInit(path string) error {
+	return exec.Command("git", "init", "--initial-branch=master", filepath.Join(config.GetHomeDir(), "tmp", path)).Run()
+}
+
+func clientGitSetRemote(path string, remoteName string, remoteUrl string) error {
+	return exec.Command("git", "-C", filepath.Join(config.GetHomeDir(), "tmp", path), "remote", "add", remoteName, remoteUrl).Run()
+}
+
+func clientCheckRepo(url string, file string) error {
+	_, err := os.ReadFile(filepath.Join(config.GetHomeDir(), "tmp", url, file))
+	return err
+}
+
+func gitCloneCheckPush(t *testing.T, credentials, owner, url, filename, pushOptions string, expectErrorClone, expectErrorCheck, expectErrorPush bool) {
+	log.Debug().Msgf("Testing %s %s %t %t %t", credentials, url, expectErrorClone, expectErrorCheck, expectErrorPush)
+	err := clientGitClone(credentials, owner, url)
+	if expectErrorClone {
+		require.Error(t, err)
+	} else {
+		require.NoError(t, err)
+	}
+	err = clientCheckRepo(url, filename)
+	if expectErrorCheck {
+		require.Error(t, err)
+	} else {
+		require.NoError(t, err)
+	}
+	err = clientGitPush(url, pushOptions, filename)
+	if expectErrorPush {
+		require.Error(t, err)
+	} else {
+		require.NoError(t, err)
+	}
+}
+
+func gitInitPush(t *testing.T, credentials, owner, url, filename, pushOptions string, expectErrorPush bool) {
+	log.Debug().Msgf("Testing %s %s %t", credentials, url, expectErrorPush)
+	err := clientGitInit(url)
+	require.NoError(t, err)
+	if url == "init" {
+		err = clientGitSetRemote(url, "origin", "http://"+credentials+"@localhost:6157/init/")
+	} else {
+		err = clientGitSetRemote(url, "origin", "http://"+credentials+"@localhost:6157/"+owner+"/"+url)
+	}
+	require.NoError(t, err)
+	err = clientGitPush(url, pushOptions, filename)
+	if expectErrorPush {
+		require.Error(t, err)
+	} else {
+		require.NoError(t, err)
+	}
+}
--- a/internal/web/test/gist_test.go
+++ b/internal/web/test/gist_test.go
@@ -0,0 +1,342 @@
+package test
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/require"
+	"github.com/thomiceli/opengist/internal/db"
+	"github.com/thomiceli/opengist/internal/git"
+)
+
+func TestGists(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	err := s.Request("GET", "/", nil, 302)
+	require.NoError(t, err)
+
+	user1 := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, user1)
+
+	err = s.Request("GET", "/all", nil, 200)
+	require.NoError(t, err)
+
+	err = s.Request("POST", "/", nil, 400)
+	require.NoError(t, err)
+
+	gist1 := db.GistDTO{
+		Title:       "gist1",
+		Description: "my first gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"gist1.txt", "gist2.txt", "gist3.txt"},
+		Content: []string{"yeah", "yeah\ncool", "yeah\ncool gist actually"},
+		Topics:  "",
+	}
+	err = s.Request("POST", "/", gist1, 302)
+	require.NoError(t, err)
+
+	gist1db, err := db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, uint(1), gist1db.ID)
+	require.Equal(t, gist1.Title, gist1db.Title)
+	require.Equal(t, gist1.Description, gist1db.Description)
+	require.Regexp(t, "[a-f0-9]{32}", gist1db.Uuid)
+	require.Equal(t, user1.Username, gist1db.User.Username)
+
+	err = s.Request("GET", "/"+gist1db.User.Username+"/"+gist1db.Uuid, nil, 200)
+	require.NoError(t, err)
+
+	gist1files, err := git.GetFilesOfRepository(gist1db.User.Username, gist1db.Uuid, "HEAD")
+	require.NoError(t, err)
+	require.Equal(t, 3, len(gist1files))
+
+	gist1fileContent, _, err := git.GetFileContent(gist1db.User.Username, gist1db.Uuid, "HEAD", gist1.Name[0], false)
+	require.NoError(t, err)
+	require.Equal(t, gist1.Content[0], gist1fileContent)
+
+	gist2 := db.GistDTO{
+		Title:       "gist2",
+		Description: "my second gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"", "gist2.txt", "gist3.txt"},
+		Content: []string{"", "yeah\ncool", "yeah\ncool gist actually"},
+		Topics:  "",
+	}
+	err = s.Request("POST", "/", gist2, 302)
+	require.NoError(t, err)
+
+	gist3 := db.GistDTO{
+		Title:       "gist3",
+		Description: "my third gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{""},
+		Content: []string{"yeah"},
+		Topics:  "",
+	}
+	err = s.Request("POST", "/", gist3, 302)
+	require.NoError(t, err)
+
+	gist3db, err := db.GetGistByID("3")
+	require.NoError(t, err)
+
+	gist3files, err := git.GetFilesOfRepository(gist3db.User.Username, gist3db.Uuid, "HEAD")
+	require.NoError(t, err)
+	require.Equal(t, "gistfile1.txt", gist3files[0])
+
+	err = s.Request("POST", "/"+gist1db.User.Username+"/"+gist1db.Uuid+"/edit", nil, 400)
+	require.NoError(t, err)
+
+	gist1.Name = []string{"gist1.txt"}
+	gist1.Content = []string{"only want one gist"}
+
+	err = s.Request("POST", "/"+gist1db.User.Username+"/"+gist1db.Uuid+"/edit", gist1, 302)
+	require.NoError(t, err)
+
+	gist1files, err = git.GetFilesOfRepository(gist1db.User.Username, gist1db.Uuid, "HEAD")
+	require.NoError(t, err)
+	require.Equal(t, 1, len(gist1files))
+
+	err = s.Request("POST", "/"+gist1db.User.Username+"/"+gist1db.Uuid+"/delete", nil, 302)
+	require.NoError(t, err)
+}
+
+func TestVisibility(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	user1 := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, user1)
+
+	gist1 := db.GistDTO{
+		Title:       "gist1",
+		Description: "my first gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: db.UnlistedVisibility,
+		},
+		Name:    []string{""},
+		Content: []string{"yeah"},
+		Topics:  "",
+	}
+	err := s.Request("POST", "/", gist1, 302)
+	require.NoError(t, err)
+
+	gist1db, err := db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, db.UnlistedVisibility, gist1db.Private)
+
+	err = s.Request("POST", "/"+gist1db.User.Username+"/"+gist1db.Uuid+"/visibility", db.VisibilityDTO{Private: db.PrivateVisibility}, 302)
+	require.NoError(t, err)
+	gist1db, err = db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, db.PrivateVisibility, gist1db.Private)
+
+	err = s.Request("POST", "/"+gist1db.User.Username+"/"+gist1db.Uuid+"/visibility", db.VisibilityDTO{Private: db.PublicVisibility}, 302)
+	require.NoError(t, err)
+	gist1db, err = db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, db.PublicVisibility, gist1db.Private)
+
+	err = s.Request("POST", "/"+gist1db.User.Username+"/"+gist1db.Uuid+"/visibility", db.VisibilityDTO{Private: db.UnlistedVisibility}, 302)
+	require.NoError(t, err)
+	gist1db, err = db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, db.UnlistedVisibility, gist1db.Private)
+}
+
+func TestLikeFork(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	user1 := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, user1)
+
+	gist1 := db.GistDTO{
+		Title:       "gist1",
+		Description: "my first gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 1,
+		},
+		Name:    []string{""},
+		Content: []string{"yeah"},
+		Topics:  "",
+	}
+	err := s.Request("POST", "/", gist1, 302)
+	require.NoError(t, err)
+
+	s.sessionCookie = ""
+
+	user2 := db.UserDTO{Username: "kaguya", Password: "kaguya"}
+	register(t, s, user2)
+
+	gist1db, err := db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, 0, gist1db.NbLikes)
+	likeCount, err := db.CountAll(db.Like{})
+	require.NoError(t, err)
+	require.Equal(t, int64(0), likeCount)
+
+	err = s.Request("POST", "/"+gist1db.User.Username+"/"+gist1db.Uuid+"/like", nil, 302)
+	require.NoError(t, err)
+	gist1db, err = db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, 1, gist1db.NbLikes)
+	likeCount, err = db.CountAll(db.Like{})
+	require.NoError(t, err)
+	require.Equal(t, int64(1), likeCount)
+
+	err = s.Request("POST", "/"+gist1db.User.Username+"/"+gist1db.Uuid+"/like", nil, 302)
+	require.NoError(t, err)
+	gist1db, err = db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, 0, gist1db.NbLikes)
+	likeCount, err = db.CountAll(db.Like{})
+	require.NoError(t, err)
+	require.Equal(t, int64(0), likeCount)
+
+	err = s.Request("POST", "/"+gist1db.User.Username+"/"+gist1db.Uuid+"/fork", nil, 302)
+	require.NoError(t, err)
+	gist2db, err := db.GetGistByID("2")
+	require.NoError(t, err)
+	require.Equal(t, gist1db.Title, gist2db.Title)
+	require.Equal(t, gist1db.Description, gist2db.Description)
+	require.Equal(t, gist1db.Private, gist2db.Private)
+	require.Equal(t, user2.Username, gist2db.User.Username)
+}
+
+func TestCustomUrl(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	user1 := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, user1)
+
+	gist1 := db.GistDTO{
+		Title:       "gist1",
+		URL:         "my-gist",
+		Description: "my first gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"gist1.txt", "gist2.txt", "gist3.txt"},
+		Content: []string{"yeah", "yeah\ncool", "yeah\ncool gist actually"},
+		Topics:  "",
+	}
+	err := s.Request("POST", "/", gist1, 302)
+	require.NoError(t, err)
+
+	gist1db, err := db.GetGistByID("1")
+	require.NoError(t, err)
+	require.Equal(t, uint(1), gist1db.ID)
+	require.Equal(t, gist1.Title, gist1db.Title)
+	require.Equal(t, gist1.Description, gist1db.Description)
+	require.Regexp(t, "[a-f0-9]{32}", gist1db.Uuid)
+	require.Equal(t, gist1.URL, gist1db.URL)
+	require.Equal(t, user1.Username, gist1db.User.Username)
+
+	gist1dbUuid, err := db.GetGist(user1.Username, gist1db.Uuid)
+	require.NoError(t, err)
+	require.Equal(t, gist1db, gist1dbUuid)
+
+	gist1dbUrl, err := db.GetGist(user1.Username, gist1.URL)
+	require.NoError(t, err)
+	require.Equal(t, gist1db, gist1dbUrl)
+
+	require.Equal(t, gist1.URL, gist1db.Identifier())
+
+	gist2 := db.GistDTO{
+		Title:       "gist2",
+		Description: "my second gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"gist1.txt", "gist2.txt", "gist3.txt"},
+		Content: []string{"yeah", "yeah\ncool", "yeah\ncool gist actually"},
+		Topics:  "",
+	}
+	err = s.Request("POST", "/", gist2, 302)
+	require.NoError(t, err)
+
+	gist2db, err := db.GetGistByID("2")
+	require.NoError(t, err)
+
+	require.Equal(t, gist2db.Uuid, gist2db.Identifier())
+	require.NotEqual(t, gist2db.URL, gist2db.Identifier())
+}
+
+func TestTopics(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	user1 := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, user1)
+
+	gist1 := db.GistDTO{
+		Title:       "gist1",
+		URL:         "my-gist",
+		Description: "my first gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"gist1.txt", "gist2.txt", "gist3.txt"},
+		Content: []string{"yeah", "yeah\ncool", "yeah\ncool gist actually"},
+		Topics:  "topic1 topic2 topic3",
+	}
+	err := s.Request("POST", "/", gist1, 302)
+	require.NoError(t, err)
+
+	gist1db, err := db.GetGistByID("1")
+	require.NoError(t, err)
+
+	require.Equal(t, []db.GistTopic{
+		{GistID: 1, Topic: "topic1"},
+		{GistID: 1, Topic: "topic2"},
+		{GistID: 1, Topic: "topic3"},
+	}, gist1db.Topics)
+
+	gist2 := db.GistDTO{
+		Title:       "gist2",
+		URL:         "my-gist",
+		Description: "my second gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"gist1.txt", "gist2.txt", "gist3.txt"},
+		Content: []string{"yeah", "yeah\ncool", "yeah\ncool gist actually"},
+		Topics:  "topic1 topic2 topic3 topic2 topic4 topic1",
+	}
+	err = s.Request("POST", "/", gist2, 302)
+	require.NoError(t, err)
+
+	gist2db, err := db.GetGistByID("2")
+	require.NoError(t, err)
+	require.Equal(t, []db.GistTopic{
+		{GistID: 2, Topic: "topic1"},
+		{GistID: 2, Topic: "topic2"},
+		{GistID: 2, Topic: "topic3"},
+		{GistID: 2, Topic: "topic4"},
+	}, gist2db.Topics)
+
+	gist3 := db.GistDTO{
+		Title:       "gist3",
+		URL:         "my-gist",
+		Description: "my third gist",
+		VisibilityDTO: db.VisibilityDTO{
+			Private: 0,
+		},
+		Name:    []string{"gist1.txt", "gist2.txt", "gist3.txt"},
+		Content: []string{"yeah", "yeah\ncool", "yeah\ncool gist actually"},
+		Topics:  "topic1 topic2 topic3 topic4 topic5 topic6 topic7 topic8 topic9 topic10 topic11",
+	}
+	err = s.Request("POST", "/", gist3, 400)
+	require.NoError(t, err)
+
+	gist3.Topics = "topictoolongggggggggggggggggggggggggggggggggggggggg"
+	err = s.Request("POST", "/", gist3, 400)
+	require.NoError(t, err)
+}
--- a/internal/web/handlers/metrics/metrics_test.go
+++ b/internal/web/handlers/metrics/metrics_test.go
@@ -1,26 +1,28 @@
-package metrics_test
+package test

 import (
-	"io"
-	"net/http/httptest"
-	"strconv"
-	"strings"
-	"testing"
-
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 	"github.com/thomiceli/opengist/internal/db"
-	webtest "github.com/thomiceli/opengist/internal/web/test"
+	"io"
+	"net/http"
+	"os"
+	"strconv"
+	"strings"
+	"testing"
 )

-func TestMetrics(t *testing.T) {
-	s := webtest.Setup(t)
-	defer webtest.Teardown(t)
+var (
+	SSHKey = db.SSHKeyDTO{
+		Title:   "Test SSH Key",
+		Content: `ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAklOUpkDHrfHY17SbrmTIpNLTGK9Tjom/BWDSUGPl+nafzlHDTYW7hdI4yZ5ew18JH4JW9jbhUFrviQzM7xlELEVf4h9lFX5QVkbPppSwg0cda3Pbv7kOdJ/MTyBlWXFCR+HAo3FXRitBqxiX1nKhXpHAZsMciLq8V6RjsNAQwdsdMFvSlVK/7XAt3FaoJoAsncM1Q9x5+3V0Ww68/eIFmb1zuUFljQJKprrX88XypNDvjYNby6vw/Pb0rwert/EnmZ+AW4OZPnTPI89ZPmVMLuayrD2cE86Z/il8b+gw3r3+1nKatmIkjn2so1d01QraTlMqVSsbxNrRFi9wrf+M7Q== admin@admin.local`,
+	}
+	AdminUser = db.UserDTO{
+		Username: "admin",
+		Password: "admin",
+	}

-	s.Register(t, "thomas")
-	s.Login(t, "thomas")
-
-	s.Request(t, "POST", "/", db.GistDTO{
+	SimpleGist = db.GistDTO{
 		Title:       "Simple Test Gist",
 		Description: "A simple gist for testing",
 		VisibilityDTO: db.VisibilityDTO{
@@ -29,22 +31,53 @@ func TestMetrics(t *testing.T) {
 		Name:    []string{"file1.txt"},
 		Content: []string{"This is the content of file1"},
 		Topics:  "",
-	}, 302)
+	}
+)

-	s.Request(t, "POST", "/settings/ssh-keys", db.SSHKeyDTO{
-		Title:   "Test SSH Key",
-		Content: `ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAklOUpkDHrfHY17SbrmTIpNLTGK9Tjom/BWDSUGPl+nafzlHDTYW7hdI4yZ5ew18JH4JW9jbhUFrviQzM7xlELEVf4h9lFX5QVkbPppSwg0cda3Pbv7kOdJ/MTyBlWXFCR+HAo3FXRitBqxiX1nKhXpHAZsMciLq8V6RjsNAQwdsdMFvSlVK/7XAt3FaoJoAsncM1Q9x5+3V0Ww68/eIFmb1zuUFljQJKprrX88XypNDvjYNby6vw/Pb0rwert/EnmZ+AW4OZPnTPI89ZPmVMLuayrD2cE86Z/il8b+gw3r3+1nKatmIkjn2so1d01QraTlMqVSsbxNrRFi9wrf+M7Q== admin@admin.local`,
-	}, 302)
+// TestMetrics tests the metrics endpoint functionality of the application.
+// It verifies that the metrics endpoint correctly reports counts for:
+// - Total number of users
+// - Total number of gists
+// - Total number of SSH keys
+//
+// The test follows these steps:
+// 1. Enables metrics via environment variable
+// 2. Sets up test environment
+// 3. Registers and logs in an admin user
+// 4. Creates a gist and adds an SSH key
+// 5. Queries the metrics endpoint
+// 6. Verifies the reported metrics match expected values
+//
+// Environment variables:
+//   - OG_METRICS_ENABLED: Set to "true" for this test
+func TestMetrics(t *testing.T) {
+	originalValue := os.Getenv("OG_METRICS_ENABLED")

-	metricsServer := webtest.NewTestMetricsServer()
+	os.Setenv("OG_METRICS_ENABLED", "true")

-	req := httptest.NewRequest("GET", "/metrics", nil)
-	w := httptest.NewRecorder()
-	metricsServer.ServeHTTP(w, req)
+	defer os.Setenv("OG_METRICS_ENABLED", originalValue)

-	require.Equal(t, 200, w.Code)
+	s := Setup(t)
+	defer Teardown(t, s)

-	body, err := io.ReadAll(w.Body)
+	register(t, s, AdminUser)
+	login(t, s, AdminUser)
+
+	err := s.Request("GET", "/all", nil, 200)
+	require.NoError(t, err)
+
+	err = s.Request("POST", "/", SimpleGist, 302)
+	require.NoError(t, err)
+
+	err = s.Request("POST", "/settings/ssh-keys", SSHKey, 302)
+	require.NoError(t, err)
+
+	var metricsRes http.Response
+	err = s.Request("GET", "/metrics", nil, 200, &metricsRes)
+	require.NoError(t, err)
+
+	body, err := io.ReadAll(metricsRes.Body)
+	defer metricsRes.Body.Close()
 	require.NoError(t, err)

 	lines := strings.Split(string(body), "\n")
--- a/internal/web/test/server.go
+++ b/internal/web/test/server.go
@@ -1,6 +1,8 @@
 package test

 import (
+	"errors"
+	"fmt"
 	"io"
 	"net/http"
 	"net/http/httptest"
@@ -8,74 +10,71 @@ import (
 	"os"
 	"os/exec"
 	"path/filepath"
+	"reflect"
+	"runtime"
+	"strconv"
 	"strings"
 	"testing"
+	"time"

-	"github.com/gorilla/schema"
-	"github.com/labstack/echo/v4"
+	"github.com/rs/zerolog/log"
 	"github.com/stretchr/testify/require"
 	"github.com/thomiceli/opengist/internal/config"
 	"github.com/thomiceli/opengist/internal/db"
 	"github.com/thomiceli/opengist/internal/git"
-	"github.com/thomiceli/opengist/internal/index"
-	"github.com/thomiceli/opengist/internal/web/context"
-	"github.com/thomiceli/opengist/internal/web/handlers/metrics"
 	"github.com/thomiceli/opengist/internal/web/server"
 )

 var databaseType string
-var formEncoder *schema.Encoder

-func init() {
-	formEncoder = schema.NewEncoder()
-	formEncoder.SetAliasTag("form")
-}
-
-type Server struct {
+type TestServer struct {
 	server        *server.Server
-	SessionCookie string
-	contextData   echo.Map
+	sessionCookie string
 }

-func (s *Server) Request(t *testing.T, method, uri string, data interface{}, expectedCode int) *http.Response {
-	return s.RequestWithHeaders(t, method, uri, data, expectedCode, nil)
-}
-
-func (s *Server) RequestWithHeaders(t *testing.T, method, uri string, data interface{}, expectedCode int, headers map[string]string) *http.Response {
-	var bodyReader io.Reader
-	if method == http.MethodPost || method == http.MethodPut || method == http.MethodDelete {
-		if values, ok := data.(url.Values); ok {
-			bodyReader = strings.NewReader(values.Encode())
-		} else if data != nil {
-			values := url.Values{}
-			_ = formEncoder.Encode(data, values)
-			bodyReader = strings.NewReader(values.Encode())
-		}
+func newTestServer() (*TestServer, error) {
+	s := &TestServer{
+		server: server.NewServer(true, filepath.Join(config.GetHomeDir(), "tmp", "sessions"), true),
 	}

-	req := httptest.NewRequest(method, uri, bodyReader)
+	go s.start()
+	return s, nil
+}
+
+func (s *TestServer) start() {
+	s.server.Start()
+}
+
+func (s *TestServer) stop() {
+	s.server.Stop()
+}
+
+func (s *TestServer) Request(method, uri string, data interface{}, expectedCode int, responsePtr ...*http.Response) error {
+	var bodyReader io.Reader
+	if method == http.MethodPost || method == http.MethodPut {
+		values := structToURLValues(data)
+		bodyReader = strings.NewReader(values.Encode())
+	}
+
+	req := httptest.NewRequest(method, "http://localhost:6157"+uri, bodyReader)
 	w := httptest.NewRecorder()

 	if method == http.MethodPost || method == http.MethodPut {
 		req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
 	}

-	req.Header.Set("Sec-Fetch-Site", "same-origin")
-
-	for key, value := range headers {
-		req.Header.Set(key, value)
-	}
-
-	if s.SessionCookie != "" {
-		req.AddCookie(&http.Cookie{Name: "session", Value: s.SessionCookie})
+	if s.sessionCookie != "" {
+		req.AddCookie(&http.Cookie{Name: "session", Value: s.sessionCookie})
 	}

 	s.server.ServeHTTP(w, req)
-	if expectedCode != 0 {
-		require.Equalf(t, expectedCode, w.Code, "Unexpected status code for %s %s: got %d, expected %d", method, uri, w.Code, expectedCode)
+
+	if w.Code != expectedCode {
+		return fmt.Errorf("unexpected status code %d, expected %d", w.Code, expectedCode)
 	}
+
 	if method == http.MethodPost {
-		if strings.Contains(uri, "/login") {
+		if strings.Contains(uri, "/login") || strings.Contains(uri, "/register") {
 			cookie := ""
 			h := w.Header().Get("Set-Cookie")
 			parts := strings.Split(h, "; ")
@@ -85,119 +84,78 @@ func (s *Server) RequestWithHeaders(t *testing.T, method, uri string, data inter
 					break
 				}
 			}
-			s.SessionCookie = strings.TrimPrefix(cookie, "session=")
+			if cookie == "" {
+				return errors.New("unable to find access session token in response headers")
+			}
+			s.sessionCookie = strings.TrimPrefix(cookie, "session=")
 		} else if strings.Contains(uri, "/logout") {
-			s.SessionCookie = ""
+			s.sessionCookie = ""
 		}
 	}

-	return w.Result()
-}
-
-func (s *Server) RawRequest(t *testing.T, req *http.Request, expectedCode int) *http.Response {
-	w := httptest.NewRecorder()
-
-	req.Header.Set("Sec-Fetch-Site", "same-origin")
-
-	if s.SessionCookie != "" {
-		req.AddCookie(&http.Cookie{Name: "session", Value: s.SessionCookie})
+	// If a response pointer was provided, fill it with the response data
+	if len(responsePtr) > 0 && responsePtr[0] != nil {
+		*responsePtr[0] = *w.Result()
 	}

-	s.server.ServeHTTP(w, req)
-
-	require.Equal(t, expectedCode, w.Code, "unexpected status code for %s %s", req.Method, req.URL.Path)
-
-	return w.Result()
-}
-
-func (s *Server) StartHttpServer(t *testing.T) string {
-	hs := httptest.NewServer(s.server)
-	t.Cleanup(hs.Close)
-	return hs.URL
-}
-
-func (s *Server) User() *db.User {
-	s.Request(nil, "GET", "/", nil, 0)
-	if user, ok := s.contextData["userLogged"].(*db.User); ok {
-		return user
-	}
 	return nil
 }

-func (s *Server) TestCtxData(t *testing.T, expected echo.Map) {
-	for key, expectedValue := range expected {
-		actualValue, exists := s.contextData[key]
-		require.True(t, exists, "Key %q not found in context data", key)
-		require.Equal(t, expectedValue, actualValue, "Context data mismatch for key %q", key)
+func structToURLValues(s interface{}) url.Values {
+	v := url.Values{}
+	if s == nil {
+		return v
 	}
+
+	rValue := reflect.ValueOf(s)
+	if rValue.Kind() != reflect.Struct {
+		return v
+	}
+
+	for i := 0; i < rValue.NumField(); i++ {
+		field := rValue.Type().Field(i)
+		tag := field.Tag.Get("form")
+		if tag != "" || field.Anonymous {
+			if field.Type.Kind() == reflect.Int {
+				fieldValue := rValue.Field(i).Int()
+				v.Add(tag, strconv.FormatInt(fieldValue, 10))
+			} else if field.Type.Kind() == reflect.Slice {
+				fieldValue := rValue.Field(i).Interface().([]string)
+				for _, va := range fieldValue {
+					v.Add(tag, va)
+				}
+			} else if field.Type.Kind() == reflect.Struct {
+				for key, val := range structToURLValues(rValue.Field(i).Interface()) {
+					for _, vv := range val {
+						v.Add(key, vv)
+					}
+				}
+			} else {
+				fieldValue := rValue.Field(i).String()
+				v.Add(tag, fieldValue)
+			}
+		}
+	}
+	return v
 }

-func (s *Server) Register(t *testing.T, user string) {
-	s.Request(t, "POST", "/register", db.UserDTO{Username: user, Password: user}, 302)
-}
-
-func (s *Server) Login(t *testing.T, user string) {
-	s.Request(t, "POST", "/login", db.UserDTO{Username: user, Password: user}, 302)
-}
-
-func (s *Server) Logout() {
-	s.SessionCookie = ""
-}
-
-func (s *Server) CreateGist(t *testing.T, visibility string) (gistPath string, gist *db.Gist, username, identifier string) {
-	s.Request(t, "POST", "/register", db.UserDTO{Username: "thomas", Password: "thomas"}, 0)
-	s.Login(t, "thomas")
-
-	resp := s.Request(t, "POST", "/", url.Values{
-		"title":   {"Test"},
-		"name":    {"file.txt", "otherfile.txt"},
-		"content": {"hello world", "other content"},
-		"topics":  {"hello opengist"},
-		"private": {visibility},
-	}, 302)
-
-	// Extract gist identifier from redirect
-	location := resp.Header.Get("Location")
-	parts := strings.Split(strings.TrimPrefix(location, "/"), "/")
-	require.Len(t, parts, 2, "Expected redirect format: /{username}/{identifier}")
-
-	gistUsername := parts[0]
-	gistIdentifier := parts[1]
-
-	gist, err := db.GetGist(gistUsername, gistIdentifier)
-	require.NoError(t, err)
-	require.NotNil(t, gist)
-
-	gistPath = filepath.Join(config.GetHomeDir(), git.ReposDirectory, "thomas", gist.Uuid)
-
-	// Verify gist exists on filesystem
-	_, err = os.Stat(gistPath)
-	require.NoError(t, err, "Gist repository should exist at %s", gistPath)
-
-	username = gist.User.Username
-	identifier = gist.Identifier()
-
-	s.Logout()
-	return gistPath, gist, username, identifier
-}
-
-func Setup(t *testing.T) *Server {
-	tmpDir := t.TempDir()
-	t.Setenv("OPENGIST_SKIP_GIT_HOOKS", "1")
+func Setup(t *testing.T) *TestServer {
+	_ = os.Setenv("OPENGIST_SKIP_GIT_HOOKS", "1")

 	err := config.InitConfig("", io.Discard)
 	require.NoError(t, err, "Could not init config")

-	config.C.LogLevel = "warn"
-	config.C.LogOutput = "stdout"
-	config.C.GitDefaultBranch = "master"
-	config.C.OpengistHome = tmpDir
+	err = os.MkdirAll(filepath.Join(config.GetHomeDir()), 0755)
+	require.NoError(t, err, "Could not create Opengist home directory")

 	config.SetupSecretKey()
-	config.InitLog()

-	tmpGitConfig := filepath.Join(tmpDir, "gitconfig")
-	t.Setenv("GIT_CONFIG_GLOBAL", tmpGitConfig)
+	git.ReposDirectory = filepath.Join("tests")
+
+	config.C.Index = ""
+	config.C.LogLevel = "error"
+	config.C.GitDefaultBranch = "master"
+	config.InitLog()

 	err = exec.Command("git", "config", "--global", "--type", "bool", "push.autoSetupRemote", "true").Run()
 	require.NoError(t, err)
@@ -205,7 +163,9 @@ func Setup(t *testing.T) *Server {
 	require.NoError(t, err)
 	err = exec.Command("git", "config", "--global", "user.name", "test").Run()
 	require.NoError(t, err)
+
 	homePath := config.GetHomeDir()
+	log.Info().Msg("Data directory: " + homePath)

 	var databaseDsn string
 	databaseType = os.Getenv("OPENGIST_TEST_DB")
@@ -215,57 +175,68 @@ func Setup(t *testing.T) *Server {
 	case "mysql":
 		databaseDsn = "mysql://root:opengist@localhost:3306/opengist_test"
 	default:
-		databaseDsn = config.C.DBUri
+		databaseDsn = "file:" + filepath.Join(homePath, "tmp", "opengist_test.db")
 	}

-	err = os.MkdirAll(filepath.Join(homePath, "sessions"), 0755)
-	require.NoError(t, err, "Could not create sessions directory")
+	err = os.MkdirAll(filepath.Join(homePath, "tests"), 0755)
+	require.NoError(t, err, "Could not create tests directory")

-	err = os.MkdirAll(filepath.Join(homePath, "repos"), 0755)
-	require.NoError(t, err, "Could not create repos directory")
+	err = os.MkdirAll(filepath.Join(homePath, "tmp", "sessions"), 0755)
+	require.NoError(t, err, "Could not create sessions directory")

 	err = os.MkdirAll(filepath.Join(homePath, "tmp", "repos"), 0755)
 	require.NoError(t, err, "Could not create tmp repos directory")

-	err = os.MkdirAll(filepath.Join(homePath, "custom"), 0755)
-	require.NoError(t, err, "Could not create custom directory")
-
 	err = db.Setup(databaseDsn)
 	require.NoError(t, err, "Could not initialize database")

-	t.Cleanup(func() {
-		db.Close()
-	})
-
-	if index.IndexEnabled() {
-		go index.NewIndexer(index.IndexType())
+	if err != nil {
+		log.Fatal().Err(err).Msg("Could not initialize database")
 	}

-	s := &Server{
-		server: server.NewServer(true),
-	}
+	// err = index.Open(filepath.Join(homePath, "testsindex", "opengist.index"))
+	// require.NoError(t, err, "Could not open index")

-	s.server.Use(func(next echo.HandlerFunc) echo.HandlerFunc {
-		return func(c echo.Context) error {
-			err := next(c)
-			if data, ok := c.Request().Context().Value(context.DataKeyStr).(echo.Map); ok {
-				s.contextData = data
-			}
-			return err
-		}
-	})
+	s, err := newTestServer()
+	require.NoError(t, err, "Failed to create test server")

 	return s
 }

-func Teardown(t *testing.T) {
-	switch databaseType {
-	case "postgres", "mysql":
-		err := db.TruncateDatabase()
-		require.NoError(t, err, "Could not truncate database")
+func Teardown(t *testing.T, s *TestServer) {
+	s.stop()
+
+	//err := db.Close()
+	//require.NoError(t, err, "Could not close database")
+
+	err := db.TruncateDatabase()
+	require.NoError(t, err, "Could not truncate database")
+
+	err = os.RemoveAll(filepath.Join(config.GetHomeDir(), "tests"))
+	require.NoError(t, err, "Could not remove repos directory")
+
+	if runtime.GOOS == "windows" {
+		err = db.Close()
+		require.NoError(t, err, "Could not close database")
+
+		time.Sleep(2 * time.Second)
 	}
+	err = os.RemoveAll(filepath.Join(config.GetHomeDir(), "tmp"))
+	require.NoError(t, err, "Could not remove tmp directory")
+
+	// err = os.RemoveAll(path.Join(config.C.OpengistHome, "testsindex"))
+	// require.NoError(t, err, "Could not remove repos directory")
+
+	// err = index.Close()
+	// require.NoError(t, err, "Could not close index")
 }

-func NewTestMetricsServer() *metrics.Server {
-	return metrics.NewServer()
+type settingSet struct {
+	key   string `form:"key"`
+	value string `form:"value"`
+}
+
+type invitationAdmin struct {
+	nbMax         string `form:"nbMax"`
+	expiredAtUnix string `form:"expiredAtUnix"`
 }
--- a/internal/web/test/settings_test.go
+++ b/internal/web/test/settings_test.go
@@ -0,0 +1,22 @@
+package test
+
+import (
+	"github.com/stretchr/testify/require"
+	"github.com/thomiceli/opengist/internal/db"
+	"testing"
+)
+
+func TestSettingsPage(t *testing.T) {
+	s := Setup(t)
+	defer Teardown(t, s)
+
+	err := s.Request("GET", "/settings", nil, 302)
+	require.NoError(t, err)
+
+	user1 := db.UserDTO{Username: "thomas", Password: "thomas"}
+	register(t, s, user1)
+	login(t, s, user1)
+
+	err = s.Request("GET", "/settings", nil, 200)
+	require.NoError(t, err)
+}
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,23 +9,23 @@
        "@catppuccin/highlightjs": "^1.0.1",
        "@codemirror/commands": "^6.10.1",
        "@codemirror/lang-javascript": "^6.2.4",
-        "@codemirror/language": "^6.12.2",
-        "@codemirror/state": "^6.5.4",
+        "@codemirror/language": "^6.12.1",
+        "@codemirror/state": "^6.5.3",
        "@codemirror/text": "^0.19.6",
-        "@codemirror/view": "^6.39.11",
+        "@codemirror/view": "^6.39.8",
        "@tailwindcss/forms": "^0.5.11",
        "@tailwindcss/typography": "^0.5.19",
-        "@tailwindcss/vite": "^4.2.1",
+        "@tailwindcss/vite": "^4.1.18",
        "codemirror": "^6.0.2",
        "github-markdown-css": "^5.8.1",
        "highlight.js": "^11.11.1",
        "jdenticon": "^3.3.0",
-        "katex": "^0.16.33",
-        "marked": "^17.0.3",
+        "katex": "^0.16.27",
+        "marked": "^17.0.1",
        "nodemon": "^3.1.11",
        "pdfobject": "^2.3.1",
-        "tailwindcss": "^4.2.1",
-        "vite": "^7.3.1"
+        "tailwindcss": "^4.1.18",
+        "vite": "^7.3.0"
      }
    },
    "node_modules/@catppuccin/highlightjs": {
@@ -94,9 +94,9 @@
      }
    },
    "node_modules/@codemirror/language": {
-      "version": "6.12.2",
-      "resolved": "https://registry.npmjs.org/@codemirror/language/-/language-6.12.2.tgz",
-      "integrity": "sha512-jEPmz2nGGDxhRTg3lTpzmIyGKxz3Gp3SJES4b0nAuE5SWQoKdT5GoQ69cwMmFd+wvFUhYirtDTr0/DRHpQAyWg==",
+      "version": "6.12.1",
+      "resolved": "https://registry.npmjs.org/@codemirror/language/-/language-6.12.1.tgz",
+      "integrity": "sha512-Fa6xkSiuGKc8XC8Cn96T+TQHYj4ZZ7RdFmXA3i9xe/3hLHfwPZdM+dqfX0Cp0zQklBKhVD8Yzc8LS45rkqcwpQ==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -133,9 +133,9 @@
      }
    },
    "node_modules/@codemirror/state": {
-      "version": "6.5.4",
-      "resolved": "https://registry.npmjs.org/@codemirror/state/-/state-6.5.4.tgz",
-      "integrity": "sha512-8y7xqG/hpB53l25CIoit9/ngxdfoG+fx+V3SHBrinnhOtLvKHRyAJJuHzkWrR4YXXLX8eXBsejgAAxHUOdW1yw==",
+      "version": "6.5.3",
+      "resolved": "https://registry.npmjs.org/@codemirror/state/-/state-6.5.3.tgz",
+      "integrity": "sha512-MerMzJzlXogk2fxWFU1nKp36bY5orBG59HnPiz0G9nLRebWa0zXuv2siH6PLIHBvv5TH8CkQRqjBs0MlxCZu+A==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -150,9 +150,9 @@
      "license": "MIT"
    },
    "node_modules/@codemirror/view": {
-      "version": "6.39.11",
-      "resolved": "https://registry.npmjs.org/@codemirror/view/-/view-6.39.11.tgz",
-      "integrity": "sha512-bWdeR8gWM87l4DB/kYSF9A+dVackzDb/V56Tq7QVrQ7rn86W0rgZFtlL3g3pem6AeGcb9NQNoy3ao4WpW4h5tQ==",
+      "version": "6.39.8",
+      "resolved": "https://registry.npmjs.org/@codemirror/view/-/view-6.39.8.tgz",
+      "integrity": "sha512-1rASYd9Z/mE3tkbC9wInRlCNyCkSn+nLsiQKZhEDUUJiUfs/5FHDpCUDaQpoTIaNGeDc6/bhaEAyLmeEucEFPw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -1022,49 +1022,49 @@
      }
    },
    "node_modules/@tailwindcss/node": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/node/-/node-4.2.1.tgz",
-      "integrity": "sha512-jlx6sLk4EOwO6hHe1oCGm1Q4AN/s0rSrTTPBGPM0/RQ6Uylwq17FuU8IeJJKEjtc6K6O07zsvP+gDO6MMWo7pg==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/node/-/node-4.1.18.tgz",
+      "integrity": "sha512-DoR7U1P7iYhw16qJ49fgXUlry1t4CpXeErJHnQ44JgTSKMaZUdf17cfn5mHchfJ4KRBZRFA/Coo+MUF5+gOaCQ==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@jridgewell/remapping": "^2.3.5",
-        "enhanced-resolve": "^5.19.0",
+        "@jridgewell/remapping": "^2.3.4",
+        "enhanced-resolve": "^5.18.3",
        "jiti": "^2.6.1",
-        "lightningcss": "1.31.1",
+        "lightningcss": "1.30.2",
        "magic-string": "^0.30.21",
        "source-map-js": "^1.2.1",
-        "tailwindcss": "4.2.1"
+        "tailwindcss": "4.1.18"
      }
    },
    "node_modules/@tailwindcss/oxide": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.2.1.tgz",
-      "integrity": "sha512-yv9jeEFWnjKCI6/T3Oq50yQEOqmpmpfzG1hcZsAOaXFQPfzWprWrlHSdGPEF3WQTi8zu8ohC9Mh9J470nT5pUw==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.1.18.tgz",
+      "integrity": "sha512-EgCR5tTS5bUSKQgzeMClT6iCY3ToqE1y+ZB0AKldj809QXk1Y+3jB0upOYZrn9aGIzPtUsP7sX4QQ4XtjBB95A==",
      "dev": true,
      "license": "MIT",
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      },
      "optionalDependencies": {
-        "@tailwindcss/oxide-android-arm64": "4.2.1",
-        "@tailwindcss/oxide-darwin-arm64": "4.2.1",
-        "@tailwindcss/oxide-darwin-x64": "4.2.1",
-        "@tailwindcss/oxide-freebsd-x64": "4.2.1",
-        "@tailwindcss/oxide-linux-arm-gnueabihf": "4.2.1",
-        "@tailwindcss/oxide-linux-arm64-gnu": "4.2.1",
-        "@tailwindcss/oxide-linux-arm64-musl": "4.2.1",
-        "@tailwindcss/oxide-linux-x64-gnu": "4.2.1",
-        "@tailwindcss/oxide-linux-x64-musl": "4.2.1",
-        "@tailwindcss/oxide-wasm32-wasi": "4.2.1",
-        "@tailwindcss/oxide-win32-arm64-msvc": "4.2.1",
-        "@tailwindcss/oxide-win32-x64-msvc": "4.2.1"
+        "@tailwindcss/oxide-android-arm64": "4.1.18",
+        "@tailwindcss/oxide-darwin-arm64": "4.1.18",
+        "@tailwindcss/oxide-darwin-x64": "4.1.18",
+        "@tailwindcss/oxide-freebsd-x64": "4.1.18",
+        "@tailwindcss/oxide-linux-arm-gnueabihf": "4.1.18",
+        "@tailwindcss/oxide-linux-arm64-gnu": "4.1.18",
+        "@tailwindcss/oxide-linux-arm64-musl": "4.1.18",
+        "@tailwindcss/oxide-linux-x64-gnu": "4.1.18",
+        "@tailwindcss/oxide-linux-x64-musl": "4.1.18",
+        "@tailwindcss/oxide-wasm32-wasi": "4.1.18",
+        "@tailwindcss/oxide-win32-arm64-msvc": "4.1.18",
+        "@tailwindcss/oxide-win32-x64-msvc": "4.1.18"
      }
    },
    "node_modules/@tailwindcss/oxide-android-arm64": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-android-arm64/-/oxide-android-arm64-4.2.1.tgz",
-      "integrity": "sha512-eZ7G1Zm5EC8OOKaesIKuw77jw++QJ2lL9N+dDpdQiAB/c/B2wDh0QPFHbkBVrXnwNugvrbJFk1gK2SsVjwWReg==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-android-arm64/-/oxide-android-arm64-4.1.18.tgz",
+      "integrity": "sha512-dJHz7+Ugr9U/diKJA0W6N/6/cjI+ZTAoxPf9Iz9BFRF2GzEX8IvXxFIi/dZBloVJX/MZGvRuFA9rqwdiIEZQ0Q==",
      "cpu": [
        "arm64"
      ],
@@ -1075,13 +1075,13 @@
        "android"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-darwin-arm64": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-arm64/-/oxide-darwin-arm64-4.2.1.tgz",
-      "integrity": "sha512-q/LHkOstoJ7pI1J0q6djesLzRvQSIfEto148ppAd+BVQK0JYjQIFSK3JgYZJa+Yzi0DDa52ZsQx2rqytBnf8Hw==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-arm64/-/oxide-darwin-arm64-4.1.18.tgz",
+      "integrity": "sha512-Gc2q4Qhs660bhjyBSKgq6BYvwDz4G+BuyJ5H1xfhmDR3D8HnHCmT/BSkvSL0vQLy/nkMLY20PQ2OoYMO15Jd0A==",
      "cpu": [
        "arm64"
      ],
@@ -1092,13 +1092,13 @@
        "darwin"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-darwin-x64": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-x64/-/oxide-darwin-x64-4.2.1.tgz",
-      "integrity": "sha512-/f/ozlaXGY6QLbpvd/kFTro2l18f7dHKpB+ieXz+Cijl4Mt9AI2rTrpq7V+t04nK+j9XBQHnSMdeQRhbGyt6fw==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-x64/-/oxide-darwin-x64-4.1.18.tgz",
+      "integrity": "sha512-FL5oxr2xQsFrc3X9o1fjHKBYBMD1QZNyc1Xzw/h5Qu4XnEBi3dZn96HcHm41c/euGV+GRiXFfh2hUCyKi/e+yw==",
      "cpu": [
        "x64"
      ],
@@ -1109,13 +1109,13 @@
        "darwin"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-freebsd-x64": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-freebsd-x64/-/oxide-freebsd-x64-4.2.1.tgz",
-      "integrity": "sha512-5e/AkgYJT/cpbkys/OU2Ei2jdETCLlifwm7ogMC7/hksI2fC3iiq6OcXwjibcIjPung0kRtR3TxEITkqgn0TcA==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-freebsd-x64/-/oxide-freebsd-x64-4.1.18.tgz",
+      "integrity": "sha512-Fj+RHgu5bDodmV1dM9yAxlfJwkkWvLiRjbhuO2LEtwtlYlBgiAT4x/j5wQr1tC3SANAgD+0YcmWVrj8R9trVMA==",
      "cpu": [
        "x64"
      ],
@@ -1126,13 +1126,13 @@
        "freebsd"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-linux-arm-gnueabihf": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm-gnueabihf/-/oxide-linux-arm-gnueabihf-4.2.1.tgz",
-      "integrity": "sha512-Uny1EcVTTmerCKt/1ZuKTkb0x8ZaiuYucg2/kImO5A5Y/kBz41/+j0gxUZl+hTF3xkWpDmHX+TaWhOtba2Fyuw==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm-gnueabihf/-/oxide-linux-arm-gnueabihf-4.1.18.tgz",
+      "integrity": "sha512-Fp+Wzk/Ws4dZn+LV2Nqx3IilnhH51YZoRaYHQsVq3RQvEl+71VGKFpkfHrLM/Li+kt5c0DJe/bHXK1eHgDmdiA==",
      "cpu": [
        "arm"
      ],
@@ -1143,13 +1143,13 @@
        "linux"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-linux-arm64-gnu": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-gnu/-/oxide-linux-arm64-gnu-4.2.1.tgz",
-      "integrity": "sha512-CTrwomI+c7n6aSSQlsPL0roRiNMDQ/YzMD9EjcR+H4f0I1SQ8QqIuPnsVp7QgMkC1Qi8rtkekLkOFjo7OlEFRQ==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-gnu/-/oxide-linux-arm64-gnu-4.1.18.tgz",
+      "integrity": "sha512-S0n3jboLysNbh55Vrt7pk9wgpyTTPD0fdQeh7wQfMqLPM/Hrxi+dVsLsPrycQjGKEQk85Kgbx+6+QnYNiHalnw==",
      "cpu": [
        "arm64"
      ],
@@ -1160,13 +1160,13 @@
        "linux"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-linux-arm64-musl": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-musl/-/oxide-linux-arm64-musl-4.2.1.tgz",
-      "integrity": "sha512-WZA0CHRL/SP1TRbA5mp9htsppSEkWuQ4KsSUumYQnyl8ZdT39ntwqmz4IUHGN6p4XdSlYfJwM4rRzZLShHsGAQ==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-musl/-/oxide-linux-arm64-musl-4.1.18.tgz",
+      "integrity": "sha512-1px92582HkPQlaaCkdRcio71p8bc8i/ap5807tPRDK/uw953cauQBT8c5tVGkOwrHMfc2Yh6UuxaH4vtTjGvHg==",
      "cpu": [
        "arm64"
      ],
@@ -1177,13 +1177,13 @@
        "linux"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-linux-x64-gnu": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.2.1.tgz",
-      "integrity": "sha512-qMFzxI2YlBOLW5PhblzuSWlWfwLHaneBE0xHzLrBgNtqN6mWfs+qYbhryGSXQjFYB1Dzf5w+LN5qbUTPhW7Y5g==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.1.18.tgz",
+      "integrity": "sha512-v3gyT0ivkfBLoZGF9LyHmts0Isc8jHZyVcbzio6Wpzifg/+5ZJpDiRiUhDLkcr7f/r38SWNe7ucxmGW3j3Kb/g==",
      "cpu": [
        "x64"
      ],
@@ -1194,13 +1194,13 @@
        "linux"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-linux-x64-musl": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.2.1.tgz",
-      "integrity": "sha512-5r1X2FKnCMUPlXTWRYpHdPYUY6a1Ar/t7P24OuiEdEOmms5lyqjDRvVY1yy9Rmioh+AunQ0rWiOTPE8F9A3v5g==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.1.18.tgz",
+      "integrity": "sha512-bhJ2y2OQNlcRwwgOAGMY0xTFStt4/wyU6pvI6LSuZpRgKQwxTec0/3Scu91O8ir7qCR3AuepQKLU/kX99FouqQ==",
      "cpu": [
        "x64"
      ],
@@ -1211,13 +1211,13 @@
        "linux"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-wasm32-wasi": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.2.1.tgz",
-      "integrity": "sha512-MGFB5cVPvshR85MTJkEvqDUnuNoysrsRxd6vnk1Lf2tbiqNlXpHYZqkqOQalydienEWOHHFyyuTSYRsLfxFJ2Q==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.1.18.tgz",
+      "integrity": "sha512-LffYTvPjODiP6PT16oNeUQJzNVyJl1cjIebq/rWWBF+3eDst5JGEFSc5cWxyRCJ0Mxl+KyIkqRxk1XPEs9x8TA==",
      "bundleDependencies": [
        "@napi-rs/wasm-runtime",
        "@emnapi/core",
@@ -1233,19 +1233,19 @@
      "license": "MIT",
      "optional": true,
      "dependencies": {
-        "@emnapi/core": "^1.8.1",
-        "@emnapi/runtime": "^1.8.1",
+        "@emnapi/core": "^1.7.1",
+        "@emnapi/runtime": "^1.7.1",
        "@emnapi/wasi-threads": "^1.1.0",
-        "@napi-rs/wasm-runtime": "^1.1.1",
+        "@napi-rs/wasm-runtime": "^1.1.0",
        "@tybys/wasm-util": "^0.10.1",
-        "tslib": "^2.8.1"
+        "tslib": "^2.4.0"
      },
      "engines": {
        "node": ">=14.0.0"
      }
    },
    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/core": {
-      "version": "1.8.1",
+      "version": "1.7.1",
      "dev": true,
      "inBundle": true,
      "license": "MIT",
@@ -1256,7 +1256,7 @@
      }
    },
    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/runtime": {
-      "version": "1.8.1",
+      "version": "1.7.1",
      "dev": true,
      "inBundle": true,
      "license": "MIT",
@@ -1276,7 +1276,7 @@
      }
    },
    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@napi-rs/wasm-runtime": {
-      "version": "1.1.1",
+      "version": "1.1.0",
      "dev": true,
      "inBundle": true,
      "license": "MIT",
@@ -1285,10 +1285,6 @@
        "@emnapi/core": "^1.7.1",
        "@emnapi/runtime": "^1.7.1",
        "@tybys/wasm-util": "^0.10.1"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
      }
    },
    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@tybys/wasm-util": {
@@ -1309,9 +1305,9 @@
      "optional": true
    },
    "node_modules/@tailwindcss/oxide-win32-arm64-msvc": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.2.1.tgz",
-      "integrity": "sha512-YlUEHRHBGnCMh4Nj4GnqQyBtsshUPdiNroZj8VPkvTZSoHsilRCwXcVKnG9kyi0ZFAS/3u+qKHBdDc81SADTRA==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.1.18.tgz",
+      "integrity": "sha512-HjSA7mr9HmC8fu6bdsZvZ+dhjyGCLdotjVOgLA2vEqxEBZaQo9YTX4kwgEvPCpRh8o4uWc4J/wEoFzhEmjvPbA==",
      "cpu": [
        "arm64"
      ],
@@ -1322,13 +1318,13 @@
        "win32"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/oxide-win32-x64-msvc": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-x64-msvc/-/oxide-win32-x64-msvc-4.2.1.tgz",
-      "integrity": "sha512-rbO34G5sMWWyrN/idLeVxAZgAKWrn5LiR3/I90Q9MkA67s6T1oB0xtTe+0heoBvHSpbU9Mk7i6uwJnpo4u21XQ==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-x64-msvc/-/oxide-win32-x64-msvc-4.1.18.tgz",
+      "integrity": "sha512-bJWbyYpUlqamC8dpR7pfjA0I7vdF6t5VpUGMWRkXVE3AXgIZjYUYAK7II1GNaxR8J1SSrSrppRar8G++JekE3Q==",
      "cpu": [
        "x64"
      ],
@@ -1339,7 +1335,7 @@
        "win32"
      ],
      "engines": {
-        "node": ">= 20"
+        "node": ">= 10"
      }
    },
    "node_modules/@tailwindcss/typography": {
@@ -1356,15 +1352,15 @@
      }
    },
    "node_modules/@tailwindcss/vite": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/vite/-/vite-4.2.1.tgz",
-      "integrity": "sha512-TBf2sJjYeb28jD2U/OhwdW0bbOsxkWPwQ7SrqGf9sVcoYwZj7rkXljroBO9wKBut9XnmQLXanuDUeqQK0lGg/w==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/vite/-/vite-4.1.18.tgz",
+      "integrity": "sha512-jVA+/UpKL1vRLg6Hkao5jldawNmRo7mQYrZtNHMIVpLfLhDml5nMRUo/8MwoX2vNXvnaXNNMedrMfMugAVX1nA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@tailwindcss/node": "4.2.1",
-        "@tailwindcss/oxide": "4.2.1",
-        "tailwindcss": "4.2.1"
+        "@tailwindcss/node": "4.1.18",
+        "@tailwindcss/oxide": "4.1.18",
+        "tailwindcss": "4.1.18"
      },
      "peerDependencies": {
        "vite": "^5.2.0 || ^6 || ^7"
@@ -1552,14 +1548,14 @@
      }
    },
    "node_modules/enhanced-resolve": {
-      "version": "5.20.0",
-      "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.20.0.tgz",
-      "integrity": "sha512-/ce7+jQ1PQ6rVXwe+jKEg5hW5ciicHwIQUagZkp6IufBoY3YDgdTTY1azVs0qoRgVmvsNB+rbjLJxDAeHHtwsQ==",
+      "version": "5.18.4",
+      "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.18.4.tgz",
+      "integrity": "sha512-LgQMM4WXU3QI+SYgEc2liRgznaD5ojbmY3sb8LxyguVkIg5FxdpTkvk72te2R38/TGKxH634oLxXRGY6d7AP+Q==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "graceful-fs": "^4.2.4",
-        "tapable": "^2.3.0"
+        "tapable": "^2.2.0"
      },
      "engines": {
        "node": ">=10.13.0"
@@ -1768,9 +1764,9 @@
      }
    },
    "node_modules/katex": {
-      "version": "0.16.33",
-      "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.33.tgz",
-      "integrity": "sha512-q3N5u+1sY9Bu7T4nlXoiRBXWfwSefNGoKeOwekV+gw0cAXQlz2Ww6BLcmBxVDeXBMUDQv6fK5bcNaJLxob3ZQA==",
+      "version": "0.16.27",
+      "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.27.tgz",
+      "integrity": "sha512-aeQoDkuRWSqQN6nSvVCEFvfXdqo1OQiCmmW1kc9xSdjutPv7BGO7pqY9sQRJpMOGrEdfDgF2TfRXe5eUAD2Waw==",
      "dev": true,
      "funding": [
        "https://opencollective.com/katex",
@@ -1795,9 +1791,9 @@
      }
    },
    "node_modules/lightningcss": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.31.1.tgz",
-      "integrity": "sha512-l51N2r93WmGUye3WuFoN5k10zyvrVs0qfKBhyC5ogUQ6Ew6JUSswh78mbSO+IU3nTWsyOArqPCcShdQSadghBQ==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.30.2.tgz",
+      "integrity": "sha512-utfs7Pr5uJyyvDETitgsaqSyjCb2qNRAtuqUeWIAKztsOYdcACf2KtARYXg2pSvhkt+9NfoaNY7fxjl6nuMjIQ==",
      "dev": true,
      "license": "MPL-2.0",
      "dependencies": {
@@ -1811,23 +1807,23 @@
        "url": "https://opencollective.com/parcel"
      },
      "optionalDependencies": {
-        "lightningcss-android-arm64": "1.31.1",
-        "lightningcss-darwin-arm64": "1.31.1",
-        "lightningcss-darwin-x64": "1.31.1",
-        "lightningcss-freebsd-x64": "1.31.1",
-        "lightningcss-linux-arm-gnueabihf": "1.31.1",
-        "lightningcss-linux-arm64-gnu": "1.31.1",
-        "lightningcss-linux-arm64-musl": "1.31.1",
-        "lightningcss-linux-x64-gnu": "1.31.1",
-        "lightningcss-linux-x64-musl": "1.31.1",
-        "lightningcss-win32-arm64-msvc": "1.31.1",
-        "lightningcss-win32-x64-msvc": "1.31.1"
+        "lightningcss-android-arm64": "1.30.2",
+        "lightningcss-darwin-arm64": "1.30.2",
+        "lightningcss-darwin-x64": "1.30.2",
+        "lightningcss-freebsd-x64": "1.30.2",
+        "lightningcss-linux-arm-gnueabihf": "1.30.2",
+        "lightningcss-linux-arm64-gnu": "1.30.2",
+        "lightningcss-linux-arm64-musl": "1.30.2",
+        "lightningcss-linux-x64-gnu": "1.30.2",
+        "lightningcss-linux-x64-musl": "1.30.2",
+        "lightningcss-win32-arm64-msvc": "1.30.2",
+        "lightningcss-win32-x64-msvc": "1.30.2"
      }
    },
    "node_modules/lightningcss-android-arm64": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.31.1.tgz",
-      "integrity": "sha512-HXJF3x8w9nQ4jbXRiNppBCqeZPIAfUo8zE/kOEGbW5NZvGc/K7nMxbhIr+YlFlHW5mpbg/YFPdbnCh1wAXCKFg==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.30.2.tgz",
+      "integrity": "sha512-BH9sEdOCahSgmkVhBLeU7Hc9DWeZ1Eb6wNS6Da8igvUwAe0sqROHddIlvU06q3WyXVEOYDZ6ykBZQnjTbmo4+A==",
      "cpu": [
        "arm64"
      ],
@@ -1846,9 +1842,9 @@
      }
    },
    "node_modules/lightningcss-darwin-arm64": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.31.1.tgz",
-      "integrity": "sha512-02uTEqf3vIfNMq3h/z2cJfcOXnQ0GRwQrkmPafhueLb2h7mqEidiCzkE4gBMEH65abHRiQvhdcQ+aP0D0g67sg==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.30.2.tgz",
+      "integrity": "sha512-ylTcDJBN3Hp21TdhRT5zBOIi73P6/W0qwvlFEk22fkdXchtNTOU4Qc37SkzV+EKYxLouZ6M4LG9NfZ1qkhhBWA==",
      "cpu": [
        "arm64"
      ],
@@ -1867,9 +1863,9 @@
      }
    },
    "node_modules/lightningcss-darwin-x64": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.31.1.tgz",
-      "integrity": "sha512-1ObhyoCY+tGxtsz1lSx5NXCj3nirk0Y0kB/g8B8DT+sSx4G9djitg9ejFnjb3gJNWo7qXH4DIy2SUHvpoFwfTA==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.30.2.tgz",
+      "integrity": "sha512-oBZgKchomuDYxr7ilwLcyms6BCyLn0z8J0+ZZmfpjwg9fRVZIR5/GMXd7r9RH94iDhld3UmSjBM6nXWM2TfZTQ==",
      "cpu": [
        "x64"
      ],
@@ -1888,9 +1884,9 @@
      }
    },
    "node_modules/lightningcss-freebsd-x64": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.31.1.tgz",
-      "integrity": "sha512-1RINmQKAItO6ISxYgPwszQE1BrsVU5aB45ho6O42mu96UiZBxEXsuQ7cJW4zs4CEodPUioj/QrXW1r9pLUM74A==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.30.2.tgz",
+      "integrity": "sha512-c2bH6xTrf4BDpK8MoGG4Bd6zAMZDAXS569UxCAGcA7IKbHNMlhGQ89eRmvpIUGfKWNVdbhSbkQaWhEoMGmGslA==",
      "cpu": [
        "x64"
      ],
@@ -1909,9 +1905,9 @@
      }
    },
    "node_modules/lightningcss-linux-arm-gnueabihf": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.31.1.tgz",
-      "integrity": "sha512-OOCm2//MZJ87CdDK62rZIu+aw9gBv4azMJuA8/KB74wmfS3lnC4yoPHm0uXZ/dvNNHmnZnB8XLAZzObeG0nS1g==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.30.2.tgz",
+      "integrity": "sha512-eVdpxh4wYcm0PofJIZVuYuLiqBIakQ9uFZmipf6LF/HRj5Bgm0eb3qL/mr1smyXIS1twwOxNWndd8z0E374hiA==",
      "cpu": [
        "arm"
      ],
@@ -1930,9 +1926,9 @@
      }
    },
    "node_modules/lightningcss-linux-arm64-gnu": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.31.1.tgz",
-      "integrity": "sha512-WKyLWztD71rTnou4xAD5kQT+982wvca7E6QoLpoawZ1gP9JM0GJj4Tp5jMUh9B3AitHbRZ2/H3W5xQmdEOUlLg==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.30.2.tgz",
+      "integrity": "sha512-UK65WJAbwIJbiBFXpxrbTNArtfuznvxAJw4Q2ZGlU8kPeDIWEX1dg3rn2veBVUylA2Ezg89ktszWbaQnxD/e3A==",
      "cpu": [
        "arm64"
      ],
@@ -1951,9 +1947,9 @@
      }
    },
    "node_modules/lightningcss-linux-arm64-musl": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.31.1.tgz",
-      "integrity": "sha512-mVZ7Pg2zIbe3XlNbZJdjs86YViQFoJSpc41CbVmKBPiGmC4YrfeOyz65ms2qpAobVd7WQsbW4PdsSJEMymyIMg==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.30.2.tgz",
+      "integrity": "sha512-5Vh9dGeblpTxWHpOx8iauV02popZDsCYMPIgiuw97OJ5uaDsL86cnqSFs5LZkG3ghHoX5isLgWzMs+eD1YzrnA==",
      "cpu": [
        "arm64"
      ],
@@ -1972,9 +1968,9 @@
      }
    },
    "node_modules/lightningcss-linux-x64-gnu": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.31.1.tgz",
-      "integrity": "sha512-xGlFWRMl+0KvUhgySdIaReQdB4FNudfUTARn7q0hh/V67PVGCs3ADFjw+6++kG1RNd0zdGRlEKa+T13/tQjPMA==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.30.2.tgz",
+      "integrity": "sha512-Cfd46gdmj1vQ+lR6VRTTadNHu6ALuw2pKR9lYq4FnhvgBc4zWY1EtZcAc6EffShbb1MFrIPfLDXD6Xprbnni4w==",
      "cpu": [
        "x64"
      ],
@@ -1993,9 +1989,9 @@
      }
    },
    "node_modules/lightningcss-linux-x64-musl": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.31.1.tgz",
-      "integrity": "sha512-eowF8PrKHw9LpoZii5tdZwnBcYDxRw2rRCyvAXLi34iyeYfqCQNA9rmUM0ce62NlPhCvof1+9ivRaTY6pSKDaA==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.30.2.tgz",
+      "integrity": "sha512-XJaLUUFXb6/QG2lGIW6aIk6jKdtjtcffUT0NKvIqhSBY3hh9Ch+1LCeH80dR9q9LBjG3ewbDjnumefsLsP6aiA==",
      "cpu": [
        "x64"
      ],
@@ -2014,9 +2010,9 @@
      }
    },
    "node_modules/lightningcss-win32-arm64-msvc": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.31.1.tgz",
-      "integrity": "sha512-aJReEbSEQzx1uBlQizAOBSjcmr9dCdL3XuC/6HLXAxmtErsj2ICo5yYggg1qOODQMtnjNQv2UHb9NpOuFtYe4w==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.30.2.tgz",
+      "integrity": "sha512-FZn+vaj7zLv//D/192WFFVA0RgHawIcHqLX9xuWiQt7P0PtdFEVaxgF9rjM/IRYHQXNnk61/H/gb2Ei+kUQ4xQ==",
      "cpu": [
        "arm64"
      ],
@@ -2035,9 +2031,9 @@
      }
    },
    "node_modules/lightningcss-win32-x64-msvc": {
-      "version": "1.31.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.31.1.tgz",
-      "integrity": "sha512-I9aiFrbd7oYHwlnQDqr1Roz+fTz61oDDJX7n9tYF9FJymH1cIN1DtKw3iYt6b8WZgEjoNwVSncwF4wx/ZedMhw==",
+      "version": "1.30.2",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.30.2.tgz",
+      "integrity": "sha512-5g1yc73p+iAkid5phb4oVFMB45417DkRevRbt/El/gKXJk4jid+vPFF/AXbxn05Aky8PapwzZrdJShv5C0avjw==",
      "cpu": [
        "x64"
      ],
@@ -2066,9 +2062,9 @@
      }
    },
    "node_modules/marked": {
-      "version": "17.0.3",
-      "resolved": "https://registry.npmjs.org/marked/-/marked-17.0.3.tgz",
-      "integrity": "sha512-jt1v2ObpyOKR8p4XaUJVk3YWRJ5n+i4+rjQopxvV32rSndTJXvIzuUdWWIy/1pFQMkQmvTXawzDNqOH/CUmx6A==",
+      "version": "17.0.1",
+      "resolved": "https://registry.npmjs.org/marked/-/marked-17.0.1.tgz",
+      "integrity": "sha512-boeBdiS0ghpWcSwoNm/jJBwdpFaMnZWRzjA6SkUMYb40SVaN1x7mmfGKp0jvexGcx+7y2La5zRZsYFZI6Qpypg==",
      "dev": true,
      "license": "MIT",
      "bin": {
@@ -2355,9 +2351,9 @@
      }
    },
    "node_modules/tailwindcss": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.2.1.tgz",
-      "integrity": "sha512-/tBrSQ36vCleJkAOsy9kbNTgaxvGbyOamC30PRePTQe/o1MFwEKHQk4Cn7BNGaPtjp+PuUrByJehM1hgxfq4sw==",
+      "version": "4.1.18",
+      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.1.18.tgz",
+      "integrity": "sha512-4+Z+0yiYyEtUVCScyfHCxOYP06L5Ne+JiHhY2IjR2KWMIWhJOYZKLSGZaP5HkZ8+bY0cxfzwDE5uOmzFXyIwxw==",
      "dev": true,
      "license": "MIT"
    },
@@ -2468,9 +2464,9 @@
      "license": "MIT"
    },
    "node_modules/vite": {
-      "version": "7.3.1",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.1.tgz",
-      "integrity": "sha512-w+N7Hifpc3gRjZ63vYBXA56dvvRlNWRczTdmCBBa+CotUzAPf5b7YMdMR/8CQoeYE5LX3W4wj6RYTgonm1b9DA==",
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.0.tgz",
+      "integrity": "sha512-dZwN5L1VlUBewiP6H9s2+B3e3Jg96D0vzN+Ry73sOefebhYr9f94wwkMNN/9ouoU8pV1BqA1d1zGk8928cx0rg==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
--- a/package.json
+++ b/package.json
@@ -14,22 +14,22 @@
    "@catppuccin/highlightjs": "^1.0.1",
    "@codemirror/commands": "^6.10.1",
    "@codemirror/lang-javascript": "^6.2.4",
-    "@codemirror/language": "^6.12.2",
-    "@codemirror/state": "^6.5.4",
+    "@codemirror/language": "^6.12.1",
+    "@codemirror/state": "^6.5.3",
    "@codemirror/text": "^0.19.6",
-    "@codemirror/view": "^6.39.11",
+    "@codemirror/view": "^6.39.8",
    "@tailwindcss/forms": "^0.5.11",
    "@tailwindcss/typography": "^0.5.19",
-    "@tailwindcss/vite": "^4.2.1",
+    "@tailwindcss/vite": "^4.1.18",
    "codemirror": "^6.0.2",
    "github-markdown-css": "^5.8.1",
    "highlight.js": "^11.11.1",
    "jdenticon": "^3.3.0",
-    "katex": "^0.16.33",
-    "marked": "^17.0.3",
+    "katex": "^0.16.27",
+    "marked": "^17.0.1",
    "nodemon": "^3.1.11",
    "pdfobject": "^2.3.1",
-    "tailwindcss": "^4.2.1",
-    "vite": "^7.3.1"
+    "tailwindcss": "^4.1.18",
+    "vite": "^7.3.0"
  }
 }
--- a/public/css/embed.css
+++ b/public/css/embed.css
@@ -35,14 +35,6 @@
    --border-width-1: 1px;
 }

-@layer base {
-    :host {
-        --tw-border-style: solid;
-        --tw-border-width: 0;
-        display: block;
-    }
-}
-
 .opengist-embed {
    @import "tailwindcss";
    @layer base {
@@ -58,4 +50,4 @@
        @import './ipynb.css';
        @import "./style.css";
    }
-}
+}
--- a/public/ts/gist.ts
+++ b/public/ts/gist.ts
@@ -1,4 +1,5 @@
 import '../ts/ipynb.ts';
+import PDFObject from 'pdfobject';

 document.querySelectorAll<HTMLElement>('.table-code').forEach((el) => {
    el.addEventListener('click', event => {
@@ -75,4 +76,8 @@ if (document.getElementById('gist').dataset.own) {
    checkboxes.forEach((el: HTMLButtonElement) => {
        el.disabled = true;
    });
-}
+}
+
+document.querySelectorAll(".pdf").forEach((el) => {
+    PDFObject.embed(el.dataset.src || "", el);
+})
--- a/public/ts/main.ts
+++ b/public/ts/main.ts
@@ -2,14 +2,9 @@ import '../css/tailwind.css';
 import '../img/favicon-32.png';
 import '../img/opengist.svg';
 import jdenticon from 'jdenticon/standalone';
-import PDFObject from 'pdfobject';

 jdenticon.update("[data-jdenticon-value]")

-document.querySelectorAll(".pdf").forEach((el) => {
-    PDFObject.embed(el.dataset.src || "", el);
-})
-
 document.addEventListener('DOMContentLoaded', () => {
    document.getElementById('user-btn')?.addEventListener("click" , () => {
        document.getElementById('user-menu')!.classList.toggle('hidden');
--- a/templates/base/settings_header.html
+++ b/templates/base/settings_header.html
@@ -15,8 +15,6 @@
                    {{ else }} text-gray-600 dark:text-gray-400 hover:text-gray-400 dark:hover:text-slate-300 px-3 py-2 font-medium text-sm rounded-md {{ end }}" aria-current="page">{{ .locale.Tr "settings.header.mfa" }}</a>
                    <a href="{{ $.c.ExternalUrl }}/settings/ssh" class="{{ if eq .settingsHeaderPage "ssh" }}bg-gray-100 dark:bg-gray-700 text-slate-700 dark:text-slate-300 px-3 py-2 font-medium text-sm rounded-md
                    {{ else }} text-gray-600 dark:text-gray-400 hover:text-gray-400 dark:hover:text-slate-300 px-3 py-2 font-medium text-sm rounded-md {{ end }}" aria-current="page">{{ .locale.Tr "settings.header.ssh" }}</a>
-                    <a href="{{ $.c.ExternalUrl }}/settings/access-tokens" class="{{ if eq .settingsHeaderPage "tokens" }}bg-gray-100 dark:bg-gray-700 text-slate-700 dark:text-slate-300 px-3 py-2 font-medium text-sm rounded-md
-                    {{ else }} text-gray-600 dark:text-gray-400 hover:text-gray-400 dark:hover:text-slate-300 px-3 py-2 font-medium text-sm rounded-md {{ end }}" aria-current="page">{{ .locale.Tr "settings.header.tokens" }}</a>
                    <a href="{{ $.c.ExternalUrl }}/settings/style" class="{{ if eq .settingsHeaderPage "style" }}bg-gray-100 dark:bg-gray-700 text-slate-700 dark:text-slate-300 px-3 py-2 font-medium text-sm rounded-md
                    {{ else }} text-gray-600 dark:text-gray-400 hover:text-gray-400 dark:hover:text-slate-300 px-3 py-2 font-medium text-sm rounded-md {{ end }}" aria-current="page">{{ .locale.Tr "settings.header.style" }}</a>
                </nav>
--- a/templates/pages/oauth_register.html
+++ b/templates/pages/oauth_register.html
@@ -1,85 +0,0 @@
-{{ template "header" .}}
-<div class="py-10">
-    <header>
-        <h1 class="text-2xl font-bold leading-tight text-slate-700 dark:text-slate-300">
-            {{ .title }}
-        </h1>
-    </header>
-    <main class="mt-4">
-        <div class="grid sm:grid-cols-2">
-            <div class="">
-                <div class="mt-8 sm:w-full sm:max-w-md">
-                    <div class="bg-white dark:bg-gray-900 rounded-md border border-1 border-gray-200 dark:border-gray-700 py-8 px-4 shadow sm:rounded-lg sm:px-10">
-
-                        <div class="mb-6 text-center">
-                            {{ if .oauthAvatarURL }}
-                            <img src="{{ .oauthAvatarURL }}" alt="Avatar" class="w-16 h-16 rounded-full mx-auto mb-2">
-                            {{ end }}
-                            <p class="text-sm text-gray-600 dark:text-gray-400">
-                                {{ .locale.Tr "auth.oauth.signing-in-with" $.c.OIDCProviderName }}
-                            </p>
-                        </div>
-
-                        <form class="space-y-6" method="post">
-                            <div>
-                                <label for="username" class="block text-sm font-medium text-slate-700 dark:text-slate-300">
-                                    {{ .locale.Tr "auth.username" }}
-                                </label>
-                                <div class="mt-1">
-                                    <input id="username" name="username" type="text" value="{{ .oauthNickname }}" required
-                                           class="dark:bg-gray-800 appearance-none block w-full px-3 py-2 border border-gray-200 dark:border-gray-700 rounded-md shadow-sm placeholder-gray-600 dark:placeholder-gray-400 focus:outline-none focus:ring-primary-500 focus:border-primary-500 sm:text-sm">
-                                </div>
-                            </div>
-
-                            <div class="mt-8">
-                                <label for="email" class="block text-sm font-medium text-slate-700 dark:text-slate-300">
-                                    {{ .locale.Tr "settings.email" }}
-                                </label>
-                                <div class="mt-1">
-                                    <input id="email" name="email" type="email" value="{{ .oauthEmail }}"
-                                           class="dark:bg-gray-800 appearance-none block w-full px-3 py-2 border border-gray-200 dark:border-gray-700 rounded-md shadow-sm placeholder-gray-600 dark:placeholder-gray-400 focus:outline-none focus:ring-primary-500 focus:border-primary-500 sm:text-sm">
-                                </div>
-                                <p class="mt-1 text-xs text-gray-500 dark:text-gray-400">
-                                    {{ .locale.Tr "settings.email-help" }}
-                                </p>
-                            </div>
-
-                            <div class="flex">
-                                <div class="flex-auto">
-                                    <button type="submit" class="inline-flex items-center px-4 py-2 border border-transparent border-gray-200 dark:border-gray-700 text-sm font-medium rounded-md shadow-sm text-white dark:text-white bg-primary-500 hover:bg-primary-600 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-primary-500">
-                                        {{ .locale.Tr "auth.oauth.complete-registration-button" }}
-                                    </button>
-                                </div>
-                                <span class="float-right text-sm py-2 underline">
-                                    <a href="{{ $.c.ExternalUrl }}/login">{{ .locale.Tr "auth.oauth.cancel" }}</a>
-                                </span>
-                            </div>
-                            {{ .csrfHtml }}
-                        </form>
-                    </div>
-                </div>
-            </div>
-            <div class="">
-                <div class="mt-8 sm:w-full sm:max-w-md">
-                    <div class="bg-white dark:bg-gray-900 rounded-md border border-1 border-gray-200 dark:border-gray-700 py-8 px-4 shadow sm:rounded-lg sm:px-10">
-                        <p class="block text-sm font-medium text-slate-700 dark:text-slate-300">{{ .locale.Tr "auth.oauth.existing-account" }}</p>
-                        <div class="flex items-center justify-center mt-4">
-                            <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="size-14 text-gray-400">
-                                <path stroke-linecap="round" stroke-linejoin="round" d="M13.19 8.688a4.5 4.5 0 0 1 1.242 7.244l-4.5 4.5a4.5 4.5 0 0 1-6.364-6.364l1.757-1.757m13.35-.622 1.757-1.757a4.5 4.5 0 0 0-6.364-6.364l-4.5 4.5a4.5 4.5 0 0 0 1.242 7.244" />
-                            </svg>
-                        </div>
-                        <p class="mt-4 text-sm text-center">
-                            {{ .locale.Tr "auth.oauth.already-have-account" $.c.OIDCProviderName }}
-                        </p>
-                        <div class="flex items-center justify-center mt-4">
-                            <a href="{{ $.c.ExternalUrl }}/login" class="inline-flex items-center px-4 py-2 border border-gray-200 dark:border-gray-700 text-sm font-medium rounded-md shadow-sm text-slate-700 dark:text-slate-300 bg-gray-50 dark:bg-gray-800 hover:bg-gray-100 dark:hover:bg-gray-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-primary-500">
-                                {{ .locale.Tr "auth.login" }}
-                            </a>
-                        </div>
-                    </div>
-                </div>
-            </div>
-        </div>
-    </main>
-</div>
-{{ template "footer" .}}
--- a/templates/pages/settings_tokens.html
+++ b/templates/pages/settings_tokens.html
@@ -1,95 +0,0 @@
-{{ template "header" .}}
-{{ template "settings_header" .}}
-<div class="relative mx-auto max-w-160 space-y-8">
-    <div class="sm:grid grid-cols-2 gap-x-4 md:gap-x-8">
-        <div class="w-full">
-            <div class="bg-white dark:bg-gray-900 rounded-md border border-1 border-gray-200 dark:border-gray-700 py-8 px-4 shadow sm:rounded-lg sm:px-10">
-                <h2 class="text-md font-bold text-slate-700 dark:text-slate-300">
-                    {{ .locale.Tr "settings.create-token" }}
-                </h2>
-                <h3 class="text-sm text-gray-600 dark:text-gray-400 italic mb-4">
-                    {{ .locale.Tr "settings.create-token-help" }}
-                </h3>
-                <form class="space-y-6" action="{{ $.c.ExternalUrl }}/settings/access-tokens" method="post">
-                    <div>
-                        <label for="name" class="block text-sm font-medium text-slate-700 dark:text-slate-300"> {{ .locale.Tr "settings.token-name" }} </label>
-                        <div class="mt-1">
-                            <input id="name" name="name" type="text" required autocomplete="off" class="dark:bg-gray-800 appearance-none block w-full px-3 py-2 border border-gray-200 dark:border-gray-700 rounded-md shadow-sm placeholder-gray-600 dark:placeholder-gray-400 focus:outline-none focus:ring-primary-500 focus:border-primary-500 sm:text-sm">
-                        </div>
-                    </div>
-
-                    <div class="mt-4">
-                        <label class="block text-sm font-medium text-slate-700 dark:text-slate-300 mb-2"> {{ .locale.Tr "settings.token-permissions" }} </label>
-                        <div class="space-y-2">
-                            <label class="block text-sm text-slate-600 dark:text-slate-400">{{ .locale.Tr "settings.token-gist-permission" }}</label>
-                            <select name="scope_gist" class="dark:bg-gray-800 block w-full px-3 py-2 border border-gray-200 dark:border-gray-700 rounded-md shadow-sm focus:outline-none focus:ring-primary-500 focus:border-primary-500 sm:text-sm">
-                                <option value="0">{{ .locale.Tr "settings.token-permission-none" }}</option>
-                                <option value="1">{{ .locale.Tr "settings.token-permission-read" }}</option>
-                                <option value="2">{{ .locale.Tr "settings.token-permission-read-write" }}</option>
-                            </select>
-                        </div>
-                    </div>
-
-                    <div class="mt-4">
-                        <label for="expires_at" class="block text-sm font-medium text-slate-700 dark:text-slate-300"> {{ .locale.Tr "settings.token-expiration" }} </label>
-                        <h3 class="text-sm text-gray-600 dark:text-gray-400 italic mb-2">
-                            {{ .locale.Tr "settings.token-expiration-help" }}
-                        </h3>
-                        <div class="mt-1">
-                            <input id="expires_at" name="expires_at" type="date" class="dark:bg-gray-800 appearance-none block w-full px-3 py-2 border border-gray-200 dark:border-gray-700 rounded-md shadow-sm placeholder-gray-600 dark:placeholder-gray-400 focus:outline-none focus:ring-primary-500 focus:border-primary-500 sm:text-sm">
-                        </div>
-                    </div>
-
-                    <button type="submit" class="inline-flex items-center px-4 py-2 border border-transparent border-gray-200 dark:border-gray-700 text-sm font-medium rounded-md shadow-sm text-white dark:text-white bg-primary-500 hover:bg-primary-600 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-primary-500">{{ .locale.Tr "settings.create-token" }}</button>
-                    {{ .csrfHtml }}
-                </form>
-            </div>
-        </div>
-        <div>
-            <div class="mt-6 flow-root">
-                <ul role="list" class="-my-5 divide-y divide-gray-300 dark:divide-gray-700 list-none">
-                    {{ if .accessTokens }}
-                    {{ range $token := .accessTokens }}
-                    <li class="py-5">
-                        <div class="inline-flex">
-                            <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-12 h-12 mr-4">
-                                <path stroke-linecap="round" stroke-linejoin="round" d="M7.864 4.243A7.5 7.5 0 0 1 19.5 10.5c0 2.92-.556 5.709-1.568 8.268M5.742 6.364A7.465 7.465 0 0 0 4.5 10.5a7.464 7.464 0 0 1-1.15 3.993m1.989 3.559A11.209 11.209 0 0 0 8.25 10.5a3.75 3.75 0 1 1 7.5 0c0 .527-.021 1.049-.064 1.565M12 10.5a14.94 14.94 0 0 1-3.386 9.522m6.772-6.521a6.02 6.02 0 0 1-2.122 4.256" />
-                            </svg>
-                            <div>
-                                <h3 class="text-sm font-semibold text-slate-700 dark:text-slate-300">{{ .Name }}</h3>
-                                <p class="text-xs text-gray-500">
-                                    {{ $.locale.Tr "settings.token-gist-permission" }}:
-                                    {{ if eq .ScopeGist 0 }}{{ $.locale.Tr "settings.token-permission-none" }}{{ end }}
-                                    {{ if eq .ScopeGist 1 }}{{ $.locale.Tr "settings.token-permission-read" }}{{ end }}
-                                    {{ if eq .ScopeGist 2 }}{{ $.locale.Tr "settings.token-permission-read-write" }}{{ end }}
-                                </p>
-                                <p class="text-xs text-gray-500 line-clamp-2">{{ $.locale.Tr "settings.token-created-at" }} <span>{{ .CreatedAt | humanDate }}</span></p>
-                                {{ if eq .ExpiresAt 0 }}
-                                <p class="text-xs text-gray-500 line-clamp-2">{{ $.locale.Tr "settings.token-no-expiration" }}</p>
-                                {{ else }}
-                                <p class="text-xs {{ if .IsExpired }}text-rose-500{{ else }}text-gray-500{{ end }} line-clamp-2">{{ $.locale.Tr "settings.token-expires-at" }} <span>{{ .ExpiresAt | humanDateOnly }}</span>{{ if .IsExpired }} ({{ $.locale.Tr "settings.token-expired" }}){{ end }}</p>
-                                {{ end }}
-                                {{ if eq .LastUsedAt 0 }}
-                                <p class="text-xs text-gray-500 line-clamp-2">{{ $.locale.Tr "settings.token-never-used" }}</p>
-                                {{ else }}
-                                <p class="text-xs text-gray-500 line-clamp-2">{{ $.locale.Tr "settings.token-last-used" }} <span>{{ .LastUsedAt | humanTimeDiff }}</span></p>
-                                {{ end }}
-                            </div>
-                            <form action="{{ $.c.ExternalUrl }}/settings/access-tokens/{{.ID}}" method="post" class="inline-block">
-                                <input type="hidden" name="_method" value="DELETE">
-                                {{ $.csrfHtml }}
-
-                                <button type="submit" onclick="return confirm('{{ $.locale.Tr "settings.delete-token-confirm" }}')" class="align-middle items-center leading-2 ml-2 px-3 py-1 border border-transparent border-gray-200 dark:border-gray-700 text-xs font-medium rounded-md shadow-sm text-white dark:text-white bg-rose-600 hover:bg-rose-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-rose-500">{{ $.locale.Tr "settings.delete-token" }}</button>
-                            </form>
-                        </div>
-                    </li>
-                    {{ end }}
-                    {{ end }}
-                </ul>
-            </div>
-        </div>
-    </div>
-</div>
-
-{{ template "settings_footer" .}}
-{{ template "footer" .}}
--- a/templates/partials/_gist_preview.html
+++ b/templates/partials/_gist_preview.html
@@ -60,33 +60,7 @@
            <div class="rounded-md border border-1 border-gray-200 dark:border-gray-700 overflow-auto hover:border-primary-600">
                <div class="code overflow-auto">
                    {{ if .gist.PreviewFilename }}
-                        {{ if .gist.PreviewMimeType }}
-                            {{ if .gist.PreviewMimeType.IsSVG }}
-                                <div class="p-8 flex justify-center">
-                                    <img src="{{ .c.ExternalUrl }}/{{ .gist.User.Username }}/{{ .gist.Identifier }}/raw/HEAD/{{ .gist.PreviewFilename }}" alt="{{ .gist.PreviewFilename }}" class="max-h-80 object-contain">
-                                </div>
-                            {{ else if .gist.PreviewMimeType.IsImage }}
-                                <div class="p-8 flex justify-center">
-                                    <img src="{{ .c.ExternalUrl }}/{{ .gist.User.Username }}/{{ .gist.Identifier }}/raw/HEAD/{{ .gist.PreviewFilename }}" alt="{{ .gist.PreviewFilename }}" class="max-h-80 object-contain">
-                                </div>
-                            {{ else if .gist.PreviewMimeType.IsAudio }}
-                                <div class="p-8 flex justify-center">
-                                    <audio controls class="w-full max-w-lg">
-                                        <source src="{{ .c.ExternalUrl }}/{{ .gist.User.Username }}/{{ .gist.Identifier }}/raw/HEAD/{{ .gist.PreviewFilename }}" type="{{ .gist.PreviewMimeType.ContentType }}">
-                                    </audio>
-                                </div>
-                            {{ else if .gist.PreviewMimeType.IsVideo }}
-                                <div class="p-8 flex justify-center">
-                                    <video controls class="max-h-80 max-w-full">
-                                        <source src="{{ .c.ExternalUrl }}/{{ .gist.User.Username }}/{{ .gist.Identifier }}/raw/HEAD/{{ .gist.PreviewFilename }}" type="{{ .gist.PreviewMimeType.ContentType }}">
-                                    </video>
-                                </div>
-                            {{ else if .gist.PreviewMimeType.IsPDF }}
-                                <div class="pdf max-h-80" data-src="{{ .c.ExternalUrl }}/{{ .gist.User.Username }}/{{ .gist.Identifier }}/raw/HEAD/{{ .gist.PreviewFilename }}"></div>
-                            {{ else }}
-                                <div class="pl-4 py-0.5 text-xs"><p>{{ .locale.Tr "gist.preview-non-available" }}</p></div>
-                            {{ end }}
-                        {{ else if .gist.Preview }}
+                        {{ if .gist.Preview }}
                            {{ if isMarkdown .gist.PreviewFilename }}
                                <div class="chroma preview markdown markdown-body p-8">{{ .gist.HTML | safe }}</div>
                            {{ else }}
@@ -106,8 +80,8 @@
                                </table>
                            {{ end }}
                        {{ else }}
-                            <div class="pl-4 py-0.5 text-xs"><p>{{ .locale.Tr "gist.preview-non-available" }}</p></div>
-                        {{ end }}
+                        <div class="pl-4 py-0.5 text-xs"><p>{{ .locale.Tr "gist.preview-non-available" }}</p></div>
+                    {{ end }}
                    {{ else }}
                        <div class="pl-4 py-0.5 text-xs"><p>{{ .locale.Tr "gist.no-content" }}</p></div>
                    {{ end }}
--- a/test.md
+++ b/test.md
@@ -1,277 +0,0 @@
---
-description: Testing handler and middleware
-slug: /testing
-sidebar_position: 13
---
-
-# Testing
-
-## Testing Handler
-
-`GET` `/users/:id`
-
-Handler below retrieves user by id from the database. If user is not found it returns
-`404` error with a message.
-
-### CreateUser
-
-`POST` `/users`
-
- Accepts JSON payload
- On success `201 - Created`
- On error `500 - Internal Server Error`
-
-### GetUser
-
-`GET` `/users/:email`
-
- On success `200 - OK`
- On error `404 - Not Found` if user is not found otherwise `500 - Internal Server Error`
-
-`handler.go`
-
-```go
-package handler
-
-import (
-	"net/http"
-
-	"github.com/labstack/echo/v5"
-)
-
-type (
-	User struct {
-		Name  string `json:"name" form:"name"`
-		Email string `json:"email" form:"email"`
-	}
-	handler struct {
-		db map[string]*User
-	}
-)
-
-func (h *handler) createUser(c *echo.Context) error {
-	u := new(User)
-	if err := c.Bind(u); err != nil {
-		return err
-	}
-	return c.JSON(http.StatusCreated, u)
-}
-
-func (h *handler) getUser(c *echo.Context) error {
-	email := c.Param("email")
-	user := h.db[email]
-	if user == nil {
-		return echo.NewHTTPError(http.StatusNotFound, "user not found")
-	}
-	return c.JSON(http.StatusOK, user)
-}
-```
-
-`handler_test.go`
-
-```go
-package handler
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"testing"
-
-	"github.com/labstack/echo/v5"
-	"github.com/labstack/echo/v5/echotest"
-	"github.com/stretchr/testify/assert"
-)
-
-var (
-	mockDB = map[string]*User{
-		"jon@labstack.com": &User{"Jon Snow", "jon@labstack.com"},
-	}
-	userJSON = `{"name":"Jon Snow","email":"jon@labstack.com"}`
-)
-
-func TestCreateUser(t *testing.T) {
-	// Setup
-	e := echo.New()
-	req := httptest.NewRequest(http.MethodPost, "/", strings.NewReader(userJSON))
-	req.Header.Set(echo.HeaderContentType, echo.MIMEApplicationJSON)
-
-	rec := httptest.NewRecorder()
-	c := e.NewContext(req, rec)
-
-	h := &controller{mockDB}
-
-	// Assertions
-	if assert.NoError(t, h.createUser(c)) {
-		assert.Equal(t, http.StatusCreated, rec.Code)
-		assert.Equal(t, userJSON, rec.Body.String())
-	}
-}
-
-// Same test as above but using `echotest` package helpers
-func TestCreateUserWithEchoTest(t *testing.T) {
-	c, rec := echotest.ContextConfig{
-		Headers: map[string][]string{
-			echo.HeaderContentType: {echo.MIMEApplicationJSON},
-		},
-		JSONBody: []byte(`{"name":"Jon Snow","email":"jon@labstack.com"}`),
-	}.ToContextRecorder(t)
-
-	h := &controller{mockDB}
-
-	// Assertions
-	if assert.NoError(t, h.createUser(c)) {
-		assert.Equal(t, http.StatusCreated, rec.Code)
-		assert.Equal(t, userJSON+"\n", rec.Body.String())
-	}
-}
-
-// Same test as above but even shorter
-func TestCreateUserWithEchoTest2(t *testing.T) {
-	h := &controller{mockDB}
-
-	rec := echotest.ContextConfig{
-		Headers: map[string][]string{
-			echo.HeaderContentType: {echo.MIMEApplicationJSON},
-		},
-		JSONBody: []byte(`{"name":"Jon Snow","email":"jon@labstack.com"}`),
-	}.ServeWithHandler(t, h.createUser)
-
-	assert.Equal(t, http.StatusCreated, rec.Code)
-	assert.Equal(t, userJSON+"\n", rec.Body.String())
-}
-
-func TestGetUser(t *testing.T) {
-	// Setup
-	e := echo.New()
-	req := httptest.NewRequest(http.MethodGet, "/", nil)
-	rec := httptest.NewRecorder()
-	c := e.NewContext(req, rec)
-
-	c.SetPath("/users/:email")
-	c.SetPathValues(echo.PathValues{
-		{Name: "email", Value: "jon@labstack.com"},
-	})
-	h := &controller{mockDB}
-
-	// Assertions
-	if assert.NoError(t, h.getUser(c)) {
-		assert.Equal(t, http.StatusOK, rec.Code)
-		assert.Equal(t, userJSON, rec.Body.String())
-	}
-}
-
-func TestGetUserWithEchoTest(t *testing.T) {
-	c, rec := echotest.ContextConfig{
-		PathValues: echo.PathValues{
-			{Name: "email", Value: "jon@labstack.com"},
-		},
-		Headers: map[string][]string{
-			echo.HeaderContentType: {echo.MIMEApplicationJSON},
-		},
-		JSONBody: []byte(userJSON),
-	}.ToContextRecorder(t)
-
-	h := &controller{mockDB}
-
-	// Assertions
-	if assert.NoError(t, h.getUser(c)) {
-		assert.Equal(t, http.StatusOK, rec.Code)
-		assert.Equal(t, userJSON+"\n", rec.Body.String())
-	}
-}
-```
-
-### Using Form Payload
-
-```go
-// import "net/url"
-f := make(url.Values)
-f.Set("name", "Jon Snow")
-f.Set("email", "jon@labstack.com")
-req := httptest.NewRequest(http.MethodPost, "/", strings.NewReader(f.Encode()))
-req.Header.Set(echo.HeaderContentType, echo.MIMEApplicationForm)
-```
-
-Multipart form payload:
-```go
-func TestContext_MultipartForm(t *testing.T) {
-	testConf := echotest.ContextConfig{
-		MultipartForm: &echotest.MultipartForm{
-			Fields: map[string]string{
-				"key": "value",
-			},
-			Files: []echotest.MultipartFormFile{
-				{
-					Fieldname: "file",
-					Filename:  "test.json",
-					Content:   echotest.LoadBytes(t, "testdata/test.json"),
-				},
-			},
-		},
-	}
-	c := testConf.ToContext(t)
-
-	assert.Equal(t, "value", c.FormValue("key"))
-	assert.Equal(t, http.MethodPost, c.Request().Method)
-	assert.Equal(t, true, strings.HasPrefix(c.Request().Header.Get(echo.HeaderContentType), "multipart/form-data; boundary="))
-
-	fv, err := c.FormFile("file")
-	if err != nil {
-		t.Fatal(err)
-	}
-	assert.Equal(t, "test.json", fv.Filename)
-}
-```
-
-### Setting Path Params
-
-```go
-c.SetPathValues(echo.PathValues{
-	{Name: "id", Value: "1"},
-	{Name: "email", Value: "jon@labstack.com"},
-})
-```
-
-### Setting Query Params
-
-```go
-// import "net/url"
-q := make(url.Values)
-q.Set("email", "jon@labstack.com")
-req := httptest.NewRequest(http.MethodGet, "/?"+q.Encode(), nil)
-```
-
-## Testing Middleware
-
-```go
-func TestCreateUserWithEchoTest2(t *testing.T) {
-	handler := func(c *echo.Context) error {
-		return c.JSON(http.StatusTeapot, fmt.Sprintf("email: %s", c.Param("email")))
-	}
-	middleware := func(next echo.HandlerFunc) echo.HandlerFunc {
-		return func(c *echo.Context) error {
-			c.Set("user_id", int64(1234))
-			return next(c)
-		}
-	}
-
-	c, rec := echotest.ContextConfig{
-		PathValues: echo.PathValues{{Name: "email", Value: "jon@labstack.com"}},
-	}.ToContextRecorder(t)
-
-	err := middleware(handler)(c)
-	if err != nil {
-		t.Fatal(err)
-	}
-	// check that middleware set the value
-	userID, err := echo.ContextGet[int64](c, "user_id")
-	assert.NoError(t, err)
-	assert.Equal(t, int64(1234), userID)
-
-	// check that handler returned the correct response
-	assert.Equal(t, http.StatusTeapot, rec.Code)
-}
-```
-
-For now you can look into built-in middleware [test cases](https://github.com/labstack/echo/tree/master/middleware).
--- a/test2.md
+++ b/test2.md
@@ -1,158 +0,0 @@
---
-description: Testing handler and middleware
-slug: /testing
-sidebar_position: 13
---
-
-# Testing
-
-## Testing Handler
-
-`GET` `/users/:id`
-
-Handler below retrieves user by id from the database. If user is not found it returns
-`404` error with a message.
-
-### CreateUser
-
-`POST` `/users`
-
- Accepts JSON payload
- On success `201 - Created`
- On error `500 - Internal Server Error`
-
-### GetUser
-
-`GET` `/users/:email`
-
- On success `200 - OK`
- On error `404 - Not Found` if user is not found otherwise `500 - Internal Server Error`
-
-`handler.go`
-
-```go
-package handler
-
-import (
-	"net/http"
-
-	"github.com/labstack/echo/v4"
-)
-
-type (
-	User struct {
-		Name  string `json:"name" form:"name"`
-		Email string `json:"email" form:"email"`
-	}
-	handler struct {
-		db map[string]*User
-	}
-)
-
-func (h *handler) createUser(c echo.Context) error {
-	u := new(User)
-	if err := c.Bind(u); err != nil {
-		return err
-	}
-	return c.JSON(http.StatusCreated, u)
-}
-
-func (h *handler) getUser(c echo.Context) error {
-	email := c.Param("email")
-	user := h.db[email]
-	if user == nil {
-		return echo.NewHTTPError(http.StatusNotFound, "user not found")
-	}
-	return c.JSON(http.StatusOK, user)
-}
-```
-
-`handler_test.go`
-
-```go
-package handler
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"testing"
-
-	"github.com/labstack/echo/v4"
-	"github.com/stretchr/testify/assert"
-)
-
-var (
-	mockDB = map[string]*User{
-		"jon@labstack.com": &User{"Jon Snow", "jon@labstack.com"},
-	}
-	userJSON = `{"name":"Jon Snow","email":"jon@labstack.com"}`
-)
-
-func TestCreateUser(t *testing.T) {
-	// Setup
-	e := echo.New()
-	req := httptest.NewRequest(http.MethodPost, "/", strings.NewReader(userJSON))
-	req.Header.Set(echo.HeaderContentType, echo.MIMEApplicationJSON)
-	rec := httptest.NewRecorder()
-	c := e.NewContext(req, rec)
-	h := &handler{mockDB}
-
-	// Assertions
-	if assert.NoError(t, h.createUser(c)) {
-		assert.Equal(t, http.StatusCreated, rec.Code)
-		assert.Equal(t, userJSON, rec.Body.String())
-	}
-}
-
-func TestGetUser(t *testing.T) {
-	// Setup
-	e := echo.New()
-	req := httptest.NewRequest(http.MethodGet, "/", nil)
-	rec := httptest.NewRecorder()
-	c := e.NewContext(req, rec)
-	c.SetPath("/users/:email")
-	c.SetParamNames("email")
-	c.SetParamValues("jon@labstack.com")
-	h := &handler{mockDB}
-
-	// Assertions
-	if assert.NoError(t, h.getUser(c)) {
-		assert.Equal(t, http.StatusOK, rec.Code)
-		assert.Equal(t, userJSON, rec.Body.String())
-	}
-}
-```
-
-### Using Form Payload
-
-```go
-// import "net/url"
-f := make(url.Values)
-f.Set("name", "Jon Snow")
-f.Set("email", "jon@labstack.com")
-req := httptest.NewRequest(http.MethodPost, "/", strings.NewReader(f.Encode()))
-req.Header.Set(echo.HeaderContentType, echo.MIMEApplicationForm)
-```
-
-### Setting Path Params
-
-```go
-c.SetParamNames("id", "email")
-c.SetParamValues("1", "jon@labstack.com")
-```
-
-### Setting Query Params
-
-```go
-// import "net/url"
-q := make(url.Values)
-q.Set("email", "jon@labstack.com")
-req := httptest.NewRequest(http.MethodGet, "/?"+q.Encode(), nil)
-```
-
-## Testing Middleware
-
-*TBD*
-
-For now you can look into built-in middleware [test cases](https://github.com/labstack/echo/tree/master/middleware).
Author	SHA1	Message	Date
Thomas Miceli	97bb9bd831	lint	2026-01-27 12:33:40 +07:00
Laptop Kitty	7a5c7c117f	Ignore TCP errors Fixes: #594	2026-01-26 11:41:04 -08:00