Merge pull request 'spotify player' (#15) from spotify-player into master

Reviewed-on: #15

.gitignore

@@ -3,6 +3,9 @@
 db.sqlite3
 *.pyc
 */__pycache__/
-*/migrations/
 albums/
 wallpapers/
+frontend/node_modules/
+frontend/.next/
+frontend/src/data/types.ts
+backend/session_*.log

backend/example.env

@@ -1,11 +1,13 @@
 SPOTIFY_ENCODED_ID=<Spotify-API-Token>
 OIDC_RP_CLIENT_ID=<OIDC-Client-ID>
 OIDC_RP_CLIENT_SECRET=<OIDC-Client-Secret>
+OIDC_RP_SIGN_ALGO=RS256
 OIDC_OP_AUTHORIZATION_ENDPOINT=https://auth.yourwebsite.com/application/o/authorize/
 OIDC_OP_TOKEN_ENDPOINT=https://auth.yourwebsite.com/application/o/token/
 OIDC_OP_USER_ENDPOINT=https://auth.yourwebsite.com/application/o/userinfo/
+OIDC_OP_JWKS_ENDPOINT=https://auth.yourwebsite.com/application/o/name/jwks/
 AI_ENDPOINT=http://localhost:11434/api/generate
 AI_MODEL=myModel
 DATE_OPEN=<ISO-formatted date>
 DATE_NOM_END=<ISO-formatted date>
-DATE_VOTE_END=<ISO-formatted date>
+DATE_VOTE_END=<ISO-formatted date>

backend/muzak/asgi.py

@@ -0,0 +1,26 @@
+"""
+ASGI config for muzak project.
+
+It exposes the ASGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/4.2/howto/deployment/asgi/
+"""
+
+import os
+from django.core.asgi import get_asgi_application
+from channels.routing import ProtocolTypeRouter, URLRouter
+from channels.auth import AuthMiddlewareStack
+from muzak.auth import QueryAuthMiddleware
+import voting.routing
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'muzak.settings')
+
+application = ProtocolTypeRouter({
+    "http": get_asgi_application(),
+    "websocket": QueryAuthMiddleware(
+        URLRouter(
+            voting.routing.websocket_urlpatterns
+        )
+    ),
+})

backend/muzak/auth.py

@@ -0,0 +1,58 @@
+from rest_framework.authentication import BaseAuthentication
+from rest_framework.exceptions import AuthenticationFailed
+from mozilla_django_oidc.auth import OIDCAuthenticationBackend
+from django.contrib.auth.models import User, AnonymousUser
+from channels.db import database_sync_to_async
+
+def get_user_from_token(token, log=False):
+    if log:
+        print("verifying token:", token)
+    backend = OIDCAuthenticationBackend()
+    try:
+        claims = backend.verify_token(token)
+    except Exception as e:
+        raise AuthenticationFailed(f'Invalid token: {e}')
+    return backend.filter_users_by_claims(claims).first()
+
+
+class OIDCBearerTokenAuthentication(BaseAuthentication):
+    def authenticate(self, request):
+        auth = request.META.get('HTTP_AUTHORIZATION', '')
+        if not auth.startswith('Bearer '):
+            return None
+        token = auth.split(' ')[1]
+        user = get_user_from_token(token)
+        if not user:
+            raise AuthenticationFailed(f'Unknown user: {token}')
+        return (user, None)
+
+# @database_sync_to_async
+# def get_user(user_id):
+#     try:
+#         return User.objects.get(id=user_id)
+#     except User.DoesNotExist:
+#         return AnonymousUser()
+
+class QueryAuthMiddleware:
+    """
+    Custom middleware that takes user from passed token.
+    """
+    def __init__(self, app):
+        # Store the ASGI application we were passed
+        self.app = app
+
+    async def __call__(self, scope, receive, send):
+        scope['user'] = AnonymousUser()
+        # print("Authing", scope)
+        # data = await receive()
+        # print("data: ", data)
+        # token = data.get('token')
+        # if token:
+        #     user = database_sync_to_async(get_user_from_token(token, print=True))
+        #     print("USER?", user)
+        #     if user:
+        #         scope['user'] = user
+        #     else:
+        #         pass
+
+        return await self.app(scope, receive, send)

backend/muzak/settings.py

@@ -13,11 +13,14 @@ SECRET_KEY = 'oefjei1lwe918Alkfwuf3ionwu-@kt)6m1e)ah$&^_i9y!qffhm-a$#m6+++'
 DEBUG = True
 
 ALLOWED_HOSTS = ['*']
+CORS_ALLOW_ALL_ORIGINS = True
 
 CURRENT_HOST = 'http://127.0.0.1:8000' # Needs to be set for spotify callback to work.
 
 INSTALLED_APPS = [
+    'daphne',
     'playlist.apps.PlaylistConfig',
+    'voting.apps.VotingConfig',
     'django.contrib.admin',
     'django.contrib.auth',
     'mozilla_django_oidc',
@@ -26,12 +29,16 @@ INSTALLED_APPS = [
     'django.contrib.messages',
     'django.contrib.staticfiles',
     'django_htmx',
-    'rest_framework'
+    'rest_framework',
+    'corsheaders',
+    'drf_spectacular',
+    'channels',
 ]
 
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
+    "corsheaders.middleware.CorsMiddleware",
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
@@ -44,7 +51,7 @@ ROOT_URLCONF = 'muzak.urls'
 TEMPLATES = [
     {
         'BACKEND': 'django.template.backends.django.DjangoTemplates',
-        'DIRS': [],
+        'DIRS': [BASE_DIR / 'templates'],
         'APP_DIRS': True,
         'OPTIONS': {
             'context_processors': [
@@ -58,6 +65,16 @@ TEMPLATES = [
 ]
 
 WSGI_APPLICATION = 'muzak.wsgi.application'
+ASGI_APPLICATION = 'muzak.asgi.application'
+
+CHANNEL_LAYERS = {
+    "default": {
+        "BACKEND": "channels_redis.core.RedisChannelLayer",
+        "CONFIG": {
+            "hosts": [("valkey", 6379)],
+        },
+    },
+}
 
 DATABASES = {
     'default': {
@@ -88,12 +105,20 @@ AUTHENTICATION_BACKENDS = (
 
 REST_FRAMEWORK = {
     'DEFAULT_AUTHENTICATION_CLASSES': [
+        'muzak.auth.OIDCBearerTokenAuthentication',
         'mozilla_django_oidc.contrib.drf.OIDCAuthentication',
         'rest_framework.authentication.SessionAuthentication',
     ],
     'DEFAULT_PERMISSION_CLASSES': [
         'rest_framework.permissions.IsAuthenticated',
-    ]
+    ],
+    'DEFAULT_SCHEMA_CLASS': 'drf_spectacular.openapi.AutoSchema',
+}
+
+SPECTACULAR_SETTINGS = {
+    'TITLE': 'HDcon Muzak',
+    'DESCRIPTION': 'Gewoon een leuk tooltje om samen met je vrienden een muzieklijst samen te stellen.',
+    'VERSION': '1.0.0',
 }
 
 OIDC_RP_CLIENT_ID = os.getenv('OIDC_RP_CLIENT_ID')
@@ -101,6 +126,8 @@ OIDC_RP_CLIENT_SECRET = os.getenv('OIDC_RP_CLIENT_SECRET')
 OIDC_OP_AUTHORIZATION_ENDPOINT = os.getenv('OIDC_OP_AUTHORIZATION_ENDPOINT')
 OIDC_OP_TOKEN_ENDPOINT = os.getenv('OIDC_OP_TOKEN_ENDPOINT')
 OIDC_OP_USER_ENDPOINT = os.getenv('OIDC_OP_USER_ENDPOINT')
+OIDC_RP_SIGN_ALGO = os.getenv('OIDC_RP_SIGN_ALGO')
+OIDC_OP_JWKS_ENDPOINT = os.getenv('OIDC_OP_JWKS_ENDPOINT')
 LOGIN_REDIRECT_URL = "/"
 LOGOUT_REDIRECT_URL = "/"
 LOGIN_URL = "/"

backend/muzak/urls.py

@@ -20,5 +20,6 @@ from django.urls import path, include
 urlpatterns = [
     path('admin/', admin.site.urls),
     path('oidc/', include('mozilla_django_oidc.urls')),
+    path('voting/', include('voting.urls')),
     path('', include('playlist.urls')),
 ]

backend/playlist/admin.py

@@ -1,8 +1,10 @@
 from django.contrib import admin
 from django.utils.http import urlencode
 from django.shortcuts import redirect
-from .models import Track, Artist, Album, Background, Vote, Profile
+from .models import Track, Artist, Album, Background, Vote, Profile, Session
 
+class SessionAdmin(admin.ModelAdmin):
+    pass
 class TrackAdmin(admin.ModelAdmin):
     pass
 class ArtistAdmin(admin.ModelAdmin):
@@ -34,3 +36,4 @@ admin.site.register(Album, AlbumAdmin)
 admin.site.register(Background, BackgroundAdmin)
 admin.site.register(Vote, VoteAdmin)
 admin.site.register(Profile, ProfileAdmin)
+admin.site.register(Session, SessionAdmin)

backend/playlist/migrations/0001_initial.py

@@ -0,0 +1,48 @@
+# Generated by Django 5.0.1 on 2024-02-04 22:50
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Artist',
+            fields=[
+                ('id', models.CharField(max_length=128, primary_key=True, serialize=False)),
+                ('name', models.CharField(max_length=255)),
+                ('popularity', models.SmallIntegerField(blank=True, null=True)),
+                ('genres', models.JSONField()),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Album',
+            fields=[
+                ('id', models.CharField(max_length=128, primary_key=True, serialize=False)),
+                ('name', models.CharField(max_length=255)),
+                ('album_type', models.CharField(max_length=255)),
+                ('total_tracks', models.PositiveSmallIntegerField(null=True)),
+                ('image', models.ImageField(upload_to='albums/')),
+                ('artists', models.ManyToManyField(to='playlist.artist')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Track',
+            fields=[
+                ('id', models.CharField(max_length=128, primary_key=True, serialize=False)),
+                ('title', models.CharField(max_length=255)),
+                ('explicit', models.BooleanField(default=False)),
+                ('duration_ms', models.PositiveIntegerField(null=True)),
+                ('popularity', models.PositiveIntegerField(null=True)),
+                ('banter', models.TextField()),
+                ('album', models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, to='playlist.album')),
+                ('artists', models.ManyToManyField(to='playlist.artist')),
+            ],
+        ),
+    ]

backend/playlist/migrations/0002_track_old.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.1 on 2024-02-05 21:06
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='track',
+            name='old',
+            field=models.BooleanField(default=False),
+        ),
+    ]

backend/playlist/migrations/0003_rename_title_track_name.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.1 on 2024-02-05 21:11
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0002_track_old'),
+    ]
+
+    operations = [
+        migrations.RenameField(
+            model_name='track',
+            old_name='title',
+            new_name='name',
+        ),
+    ]

backend/playlist/migrations/0004_alter_artist_genres_alter_track_banter.py

@@ -0,0 +1,23 @@
+# Generated by Django 5.0.1 on 2024-02-05 22:11
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0003_rename_title_track_name'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='artist',
+            name='genres',
+            field=models.JSONField(null=True),
+        ),
+        migrations.AlterField(
+            model_name='track',
+            name='banter',
+            field=models.TextField(blank=True),
+        ),
+    ]

backend/playlist/migrations/0005_vote.py

@@ -0,0 +1,28 @@
+# Generated by Django 5.0.1 on 2024-02-07 12:26
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0004_alter_artist_genres_alter_track_banter'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Vote',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('points', models.IntegerField()),
+                ('track', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='playlist.track')),
+                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+            ],
+            options={
+                'unique_together': {('user', 'track')},
+            },
+        ),
+    ]

backend/playlist/migrations/0006_track_banter_done.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.1 on 2024-02-07 19:48
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0005_vote'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='track',
+            name='banter_done',
+            field=models.BooleanField(default=False),
+        ),
+    ]

backend/playlist/migrations/0007_album_image_url.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.1 on 2024-02-12 13:42
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0006_track_banter_done'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='album',
+            name='image_url',
+            field=models.URLField(null=True),
+        ),
+    ]

backend/playlist/migrations/0008_background_profile.py

@@ -0,0 +1,32 @@
+# Generated by Django 5.0.1 on 2024-02-21 13:26
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0007_album_image_url'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Background',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('image', models.ImageField(upload_to='wallpapers/')),
+                ('repeat', models.BooleanField(default=False)),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Profile',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('background', models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, to='playlist.background')),
+                ('user', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+            ],
+        ),
+    ]

backend/playlist/migrations/0009_background_name.py

@@ -0,0 +1,19 @@
+# Generated by Django 5.0.1 on 2024-02-21 13:31
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0008_background_profile'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='background',
+            name='name',
+            field=models.CharField(default='Wallpaper', max_length=128),
+            preserve_default=False,
+        ),
+    ]

backend/playlist/migrations/0010_background_color.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.1 on 2024-02-21 14:38
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0009_background_name'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='background',
+            name='color',
+            field=models.CharField(blank=True, max_length=32),
+        ),
+    ]

backend/playlist/migrations/0011_alter_background_image.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.1 on 2024-02-21 14:38
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0010_background_color'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='background',
+            name='image',
+            field=models.ImageField(null=True, upload_to='wallpapers/'),
+        ),
+    ]

backend/playlist/migrations/0012_alter_background_image.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.1 on 2024-02-21 14:39
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0011_alter_background_image'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='background',
+            name='image',
+            field=models.ImageField(blank=True, null=True, upload_to='wallpapers/'),
+        ),
+    ]

backend/playlist/migrations/0013_profile_last_voted.py

@@ -0,0 +1,19 @@
+# Generated by Django 5.0.1 on 2024-02-26 18:38
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0012_alter_background_image'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='profile',
+            name='last_voted',
+            field=models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, to='playlist.track'),
+        ),
+    ]

backend/playlist/migrations/0014_profile_quota_profile_quota_last_updated.py

@@ -0,0 +1,23 @@
+# Generated by Django 5.0.1 on 2024-02-26 20:46
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0013_profile_last_voted'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='profile',
+            name='quota',
+            field=models.FloatField(default=10.0),
+        ),
+        migrations.AddField(
+            model_name='profile',
+            name='quota_last_updated',
+            field=models.DateTimeField(auto_now=True),
+        ),
+    ]

backend/playlist/migrations/0015_alter_profile_quota_last_updated.py

@@ -0,0 +1,19 @@
+# Generated by Django 5.0.1 on 2024-02-26 22:17
+
+import django.utils.timezone
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0014_profile_quota_profile_quota_last_updated'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='profile',
+            name='quota_last_updated',
+            field=models.DateTimeField(default=django.utils.timezone.now),
+        ),
+    ]

backend/playlist/migrations/0016_profile_spt_access_token_profile_spt_refresh_token_and_more.py

@@ -0,0 +1,31 @@
+# Generated by Django 5.0.1 on 2024-03-08 23:53
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0015_alter_profile_quota_last_updated'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='profile',
+            name='spt_access_token',
+            field=models.CharField(default='', max_length=128),
+        ),
+        migrations.AddField(
+            model_name='profile',
+            name='spt_refresh_token',
+            field=models.CharField(default='', max_length=128),
+        ),
+        migrations.CreateModel(
+            name='Playlist',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('name', models.CharField(max_length=255)),
+                ('tracks', models.ManyToManyField(to='playlist.track')),
+            ],
+        ),
+    ]

backend/playlist/migrations/0017_profile_spt_expires.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.1 on 2024-03-08 23:56
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0016_profile_spt_access_token_profile_spt_refresh_token_and_more'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='profile',
+            name='spt_expires',
+            field=models.DateTimeField(default=None, null=True),
+        ),
+    ]

backend/playlist/migrations/0018_alter_profile_spt_access_token_and_more.py

@@ -0,0 +1,23 @@
+# Generated by Django 5.0.1 on 2024-03-13 08:38
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0017_profile_spt_expires'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='profile',
+            name='spt_access_token',
+            field=models.CharField(default='', max_length=128, null=True),
+        ),
+        migrations.AlterField(
+            model_name='profile',
+            name='spt_refresh_token',
+            field=models.CharField(default='', max_length=128, null=True),
+        ),
+    ]

backend/playlist/migrations/0019_vote_skipped.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.4 on 2024-07-20 06:58
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0018_alter_profile_spt_access_token_and_more'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='vote',
+            name='skipped',
+            field=models.BooleanField(default=False),
+        ),
+    ]

backend/playlist/migrations/0020_track_nominated_by_alter_profile_spt_access_token_and_more.py

@@ -0,0 +1,31 @@
+# Generated by Django 5.0.4 on 2024-07-21 07:59
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0019_vote_skipped'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='track',
+            name='nominated_by',
+            field=models.ForeignKey(default=None, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL),
+        ),
+        migrations.AlterField(
+            model_name='profile',
+            name='spt_access_token',
+            field=models.CharField(blank=True, default='', max_length=256, null=True),
+        ),
+        migrations.AlterField(
+            model_name='profile',
+            name='spt_refresh_token',
+            field=models.CharField(blank=True, default='', max_length=256, null=True),
+        ),
+    ]

backend/playlist/migrations/0021_track_from_playlist_alter_track_album_and_more.py

@@ -0,0 +1,46 @@
+# Generated by Django 5.0.4 on 2024-07-22 20:32
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0020_track_nominated_by_alter_profile_spt_access_token_and_more'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='track',
+            name='from_playlist',
+            field=models.CharField(blank=True, default=None, max_length=255, null=True),
+        ),
+        migrations.AlterField(
+            model_name='track',
+            name='album',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='playlist.album'),
+        ),
+        migrations.AlterField(
+            model_name='track',
+            name='banter',
+            field=models.TextField(blank=True, null=True),
+        ),
+        migrations.AlterField(
+            model_name='track',
+            name='duration_ms',
+            field=models.PositiveIntegerField(blank=True, null=True),
+        ),
+        migrations.AlterField(
+            model_name='track',
+            name='nominated_by',
+            field=models.ForeignKey(blank=True, default=None, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL),
+        ),
+        migrations.AlterField(
+            model_name='track',
+            name='popularity',
+            field=models.PositiveIntegerField(blank=True, null=True),
+        ),
+    ]

backend/playlist/migrations/0022_background_cover.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.0.4 on 2024-07-23 11:29
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('playlist', '0021_track_from_playlist_alter_track_album_and_more'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='background',
+            name='cover',
+            field=models.BooleanField(default=False),
+        ),
+    ]

backend/playlist/migrations/0023_alter_vote_points_session_vote_session.py

@@ -0,0 +1,98 @@
+# Generated by Django 5.2.4 on 2025-08-07 17:36
+
+import django.core.validators
+import django.db.models.deletion
+import uuid
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("playlist", "0022_background_cover"),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="vote",
+            name="points",
+            field=models.IntegerField(
+                validators=[
+                    django.core.validators.MinValueValidator(1),
+                    django.core.validators.MaxValueValidator(5),
+                ]
+            ),
+        ),
+        migrations.CreateModel(
+            name="Session",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("opens", models.DateTimeField(default=None, null=True)),
+                ("session_id", models.UUIDField(default=uuid.uuid4, editable=False)),
+                ("seed", models.IntegerField(default=892933)),
+                (
+                    "status",
+                    models.CharField(
+                        choices=[
+                            ("lobby", "Lobby"),
+                            ("voting", "Voting"),
+                            ("waiting_for_next_track", "Waiting for Next Track"),
+                            ("paused", "Paused"),
+                            ("voting_done", "Voting Done"),
+                        ],
+                        default="lobby",
+                        max_length=30,
+                    ),
+                ),
+                ("voting_open", models.BooleanField(default=False)),
+                (
+                    "current_track",
+                    models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.SET_NULL,
+                        to="playlist.track",
+                    ),
+                ),
+                (
+                    "host",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
+                (
+                    "players_connected",
+                    models.ManyToManyField(
+                        related_name="sessions_joined", to=settings.AUTH_USER_MODEL
+                    ),
+                ),
+                (
+                    "players_wanted",
+                    models.ManyToManyField(
+                        related_name="players_wanted", to=settings.AUTH_USER_MODEL
+                    ),
+                ),
+            ],
+        ),
+        migrations.AddField(
+            model_name="vote",
+            name="session",
+            field=models.ForeignKey(
+                default=None,
+                null=True,
+                on_delete=django.db.models.deletion.CASCADE,
+                to="playlist.session",
+            ),
+        ),
+    ]

backend/playlist/migrations/0024_alter_session_seed.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.2.4 on 2025-08-09 06:41
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("playlist", "0023_alter_vote_points_session_vote_session"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="session",
+            name="seed",
+            field=models.IntegerField(default=689663),
+        ),
+    ]

backend/playlist/migrations/0025_alter_session_players_connected_alter_session_seed.py

@@ -0,0 +1,27 @@
+# Generated by Django 5.2.4 on 2025-08-09 08:42
+
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("playlist", "0024_alter_session_seed"),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="session",
+            name="players_connected",
+            field=models.ManyToManyField(
+                null=True, related_name="players_joined", to=settings.AUTH_USER_MODEL
+            ),
+        ),
+        migrations.AlterField(
+            model_name="session",
+            name="seed",
+            field=models.IntegerField(default=804599),
+        ),
+    ]

backend/playlist/migrations/0026_alter_session_players_connected_alter_session_seed.py

@@ -0,0 +1,27 @@
+# Generated by Django 5.2.4 on 2025-08-09 08:42
+
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("playlist", "0025_alter_session_players_connected_alter_session_seed"),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="session",
+            name="players_connected",
+            field=models.ManyToManyField(
+                blank=True, related_name="players_joined", to=settings.AUTH_USER_MODEL
+            ),
+        ),
+        migrations.AlterField(
+            model_name="session",
+            name="seed",
+            field=models.IntegerField(default=456463),
+        ),
+    ]

backend/playlist/migrations/0027_alter_session_seed_alter_vote_unique_together.py

@@ -0,0 +1,24 @@
+# Generated by Django 5.2.4 on 2025-08-15 19:14
+
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("playlist", "0026_alter_session_players_connected_alter_session_seed"),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="session",
+            name="seed",
+            field=models.IntegerField(default=406213),
+        ),
+        migrations.AlterUniqueTogether(
+            name="vote",
+            unique_together={("user", "track", "session")},
+        ),
+    ]

backend/playlist/models/__init__.py

@@ -4,3 +4,4 @@ from .album import Album
 from .vote import Vote
 from .profile import Profile, Background
 from .playlist import Playlist
+from .session import Session

backend/playlist/models/profile.py

@@ -131,7 +131,6 @@ class Profile(models.Model):
         return None
 
     def save(self, *args, **kwargs):
-        self.update_quota()
         super().save(*args, **kwargs)
 
 @receiver(post_save, sender=User)

backend/playlist/models/session.py

@@ -0,0 +1,33 @@
+from django.db import models
+from django.contrib.auth.models import User
+import uuid
+import random
+from datetime import datetime
+
+class Session(models.Model):
+    def __str__(self):
+        return f"Session {self.session_id} - Host: {self.host.username}"
+
+    @property
+    def is_open(self):
+        return (datetime.now() < self.opens) and self.voting_open
+
+    opens = models.DateTimeField(null=True, default=None)
+    session_id = models.UUIDField(default=uuid.uuid4, editable=False)
+    host = models.ForeignKey(User, on_delete=models.CASCADE)
+    players_wanted = models.ManyToManyField(User, related_name='players_wanted')
+    players_connected= models.ManyToManyField(User, related_name='players_joined', blank=True)
+    seed = models.IntegerField(default=random.randint(1, 1000000))
+    status = models.CharField(
+        max_length=30,
+        choices=[
+            ('lobby', 'Lobby'),
+            ('voting', 'Voting'),
+            ('waiting_for_next_track', 'Waiting for Next Track'),
+            ('paused', 'Paused'),
+            ('voting_done', 'Voting Done'),
+        ],
+        default='lobby'
+    )
+    current_track = models.ForeignKey('Track', on_delete=models.SET_NULL, null=True, blank=True)
+    voting_open = models.BooleanField(default=False)

backend/playlist/models/track.py

@@ -104,6 +104,11 @@ class Track(models.Model):
             artists = list(map(lambda a:a.name, self.artists.all()))
             return " & ".join(artists)
 
+    @property
+    def album_cover(self):
+        if self.album:
+            return self.album.image_url
+
     @property
     def name_sanitized(self):
         return re.match("[^\-\(]*\w", self.name)[0]

backend/playlist/models/vote.py

@@ -1,11 +1,13 @@
 from django.db import models
 from django.contrib.auth.models import User
 from django.core.validators import MinValueValidator, MaxValueValidator
+from .session import Session
 
 class Vote(models.Model):
     class Meta:
-        unique_together = ["user", "track"]
+        unique_together = ["user", "track", "session"]
     track = models.ForeignKey('Track', on_delete=models.CASCADE)
     user = models.ForeignKey(User, on_delete=models.CASCADE)
     points = models.IntegerField(validators=[MinValueValidator(1), MaxValueValidator(5)])
     skipped = models.BooleanField(default=False)
+    session = models.ForeignKey(Session, on_delete=models.CASCADE, null=True, default=None)

backend/playlist/serializers/__init__.py

@@ -4,3 +4,4 @@ from .user import *
 from .album import *
 from .profile import *
 from .vote import *
+from .session import *

backend/playlist/serializers/album.py

@@ -0,0 +1,47 @@
+from os import extsep
+from django.db.models.functions import Extract
+from playlist.models import Album
+from rest_framework import serializers
+from drf_spectacular.utils import extend_schema_serializer, OpenApiExample
+
+@extend_schema_serializer(
+    examples = [
+        OpenApiExample(
+            name='Album Example',
+            value = {
+                "url": "http://muzak.hoekveen.net/api/album/7MejfRSNnrpcLZIxkeZDqR",
+                "name": "Leftoverture (Expanded Edition)",
+                "album_type": "album",
+                "total_tracks": 10,
+                "image": "http://127.0.0.1:8001/albums/Leftoverture_Expanded_Edition.png",
+                "image_url": "https://i.scdn.co/image/ab67616d0000b2731be40e44db112e123e5e8b51",
+                "artists": [
+                    "http://127.0.0.1:8001/api/artist/2hl0xAkS2AIRAu23TVMBG1"
+                ]
+            }
+        ),
+        OpenApiExample(
+            name = 'Multiple artist single',
+            value = {
+                "url": "http://127.0.0.1:8001/api/album/1pHD8AFu4z1CvuTPjZFOFi",
+                "name": "ラビリンス",
+                "album_type": "single",
+                "total_tracks": 4,
+                "image": None,
+                "image_url": "https://i.scdn.co/image/ab67616d0000b2731607d3aa3a69ca0e1ffbe26b",
+                "artists": [
+                    "http://127.0.0.1:8001/api/artist/4ZX8Wr8KHHrW7radu6IwYG",
+                    "http://127.0.0.1:8001/api/artist/4d2zOuYJHBPJTpVblHEKJb"
+                ]
+            }
+        )
+    ]
+)
+class AlbumSerializer(serializers.HyperlinkedModelSerializer):
+    class Meta:
+        model = Album
+        fields = '__all__'
+        extra_kwargs = {
+            'url': {'view_name': 'api-album', 'lookup_field': 'id'},
+            'artists': {'view_name': 'api-artist', 'lookup_field': 'id'},
+        }

backend/playlist/serializers/artist.py

@@ -0,0 +1,31 @@
+from playlist.models import Artist
+from rest_framework import serializers
+from drf_spectacular.utils import extend_schema_serializer, OpenApiExample
+
+@extend_schema_serializer(
+    examples=[
+        OpenApiExample(
+            'Daft Punk',
+            value = {
+                "id": "4tZwfgrHOc3mvqYlEYSvVi",
+                "name": "Daft Punk",
+                "url": "http://127.0.0.1:8001/api/artist/4tZwfgrHOc3mvqYlEYSvVi"
+            }
+        ),
+        OpenApiExample(
+            'コリッキー',
+            value = {
+                "id": "307y5sbPNvRpXjBcZgS25q",
+                "name": "コリッキー",
+                "url": "http://127.0.0.1:8001/api/artist/307y5sbPNvRpXjBcZgS25q"
+            }
+        )
+    ]
+)
+class ArtistSerializer(serializers.HyperlinkedModelSerializer):
+    class Meta:
+        model = Artist
+        fields = ['id', 'name', 'url']
+        extra_kwargs = {
+            'url': {'view_name': 'api-artist', 'lookup_field': 'id'},
+        }

backend/playlist/serializers/session.py

@@ -0,0 +1,9 @@
+from rest_framework import serializers
+from playlist.models import Session
+
+class SessionSerializer(serializers.ModelSerializer):
+    host = serializers.EmailField(source='host.email', read_only=True)
+
+    class Meta:
+        model = Session
+        fields = '__all__'

backend/playlist/serializers/track.py

@@ -0,0 +1,61 @@
+from playlist.models import Track
+from rest_framework import serializers
+from drf_spectacular.utils import extend_schema_serializer, OpenApiExample
+
+
+@extend_schema_serializer(
+    examples = [
+         OpenApiExample(
+            'Song with banter',
+            value={
+                "url": "http://127.0.0.1:8001/api/track/0AzD1FEuvkXP1verWfaZdv",
+                "name": "Cbat",
+                "explicit": False,
+                "duration_ms": 171720,
+                "popularity": 0,
+                "banter": "Als je denkt dat \"Cbat\" van Hudson Mohawke de soundtrack is voor het onhandig manoeuvreren van een stelletje klunzen die elkaar constant in de weg zitten, dan heb je waarschijnlijk gelijk. Dit nummer, waarin de beats net zo chaotisch zijn als de liefdesperikelen van een tiener op een eerste date, is het perfecte liedje voor iedereen die zich ooit heeft afgevraagd hoe je een kat kunt imiteren zonder dat je daadwerkelijk een kat bent.",
+                "banter_done": True,
+                "old": False,
+                "from_playlist": None,
+                "nominated_by": "http://127.0.0.1:8001/api/user/1",
+                "album": "http://127.0.0.1:8001/api/album/0d99LxnQpiPLgSGDRuU9HT",
+                "artists": [
+                    "http://127.0.0.1:8001/api/artist/6olWbKW2VLhFCHfOi0iEDb"
+                ]
+            }
+        ),
+        OpenApiExample(
+           'Song from old playlist',
+           description='While this track is from an old playlist, old is still set to False as it has been nominated again this year.',
+           value={
+                "url": "http://127.0.0.1:8001/api/track/4QGUlo1swUpXduW23JM57S",
+                "name": "You Bring On The Sun",
+                "explicit": False,
+                "duration_ms": 215400,
+                "popularity": 43,
+                "banter": None,
+                "banter_done": False,
+                "old": False,
+                "from_playlist": "HD Con 2020 A",
+                "nominated_by": None,
+                "album": "http://127.0.0.1:8001/api/album/01QglfxMtbN2EVEyGWpPyQ",
+                "artists": [
+                    "http://127.0.0.1:8001/api/artist/0gcMPgunYh4rX1UOdvZKBn"
+                ]
+            }
+       ),
+    ]
+)
+class TrackSerializer(serializers.HyperlinkedModelSerializer):
+    artist = serializers.CharField()
+    album_cover = serializers.CharField()
+
+    class Meta:
+        model = Track
+        fields = '__all__'
+        extra_kwargs = {
+            'url': {'view_name': 'api-track', 'lookup_field': 'id'},
+            'artists': {'view_name': 'api-artist', 'lookup_field': 'id'},
+            'album': {'view_name': 'api-album', 'lookup_field': 'id'},
+            'nominated_by': {'view_name': 'api-user', 'lookup_field': 'id'},
+        }

backend/playlist/serializers/user.py

@@ -0,0 +1,7 @@
+from django.contrib.auth.models import User
+from rest_framework import serializers
+
+class UserSerializer(serializers.HyperlinkedModelSerializer):
+    class Meta:
+        model = User
+        fields = ['id', 'username', 'email']