release 1.19 (#3215)

Co-authored-by: Gil <almontegil@gmail.com>
Co-authored-by: J. Lavoie <j.lavoie@net-c.ca>
Co-authored-by: Oğuz Ersen <oguz@ersen.moe>
Co-authored-by: Taplou <ploutarchosgram@gmail.com>
Co-authored-by: Yaron Shahrabani <sh.yaron@gmail.com>
Co-authored-by: 이정희 <daemul72@gmail.com>

.codecov.yml

@@ -1,33 +1,30 @@
 codecov:
-  notify:
-    require_ci_to_pass: yes
+    notify:
+        require_ci_to_pass: yes
 
 coverage:
-  precision: 2
-  round: down
-  range: "80...100"
-
-  status:
-    project:
-      default:
-        threshold: 0.5%
-    patch:
-      default:
-        threshold: 50%
-    changes: no
+    precision: 2
+    round: down
+    range: "80...100"
+    status:
+        project:
+            default:
+                threshold: 0.5%
+        patch: off
+        changes: no
 
 parsers:
-  gcov:
-    branch_detection:
-      conditional: yes
-      loop: yes
-      method: no
-      macro: no
+    gcov:
+        branch_detection:
+            conditional: yes
+            loop: yes
+            method: no
+            macro: no
 
 comment:
-  layout: "diff, flags, files"
-  behavior: default
-  require_changes: yes
-  require_base: no
-  require_head: yes
-  branches: null
+    layout: "diff, flags, files"
+    behavior: default
+    require_changes: yes
+    require_base: no
+    require_head: yes
+    branches: null

.editorconfig

@@ -3,7 +3,8 @@ root = true
 
 ; Unix-style newlines
 [*]
-end_of_line = LF
+end_of_line = lf
+charset = utf-8
 
 [*.php]
 indent_style = space

.env.dist

@@ -1,31 +1,16 @@
-# This file is a "template" of which env vars need to be defined for your application
-# Copy this file to .env file for development, create environment variables when deploying to production
-# https://symfony.com/doc/current/best_practices/configuration.html#infrastructure-related-configuration
-
+# Configure your database connection and set the correct server version:
+# for MySQL "serverVersion=5.7" and for MariaDB "serverVersion=mariadb-10.5.8"
+DATABASE_URL=mysql://user:password@127.0.0.1:3306/database?charset=utf8&serverVersion=5.7
+# Email will be sent with this address as sender
 MAILER_FROM=kimai@example.com
-
-###> symfony/framework-bundle ###
+# Email connection (disabled by default) more info at https://www.kimai.org/documentation/emails.html
+MAILER_URL=null://null
+# do not change, unless you are developing for Kimai
 APP_ENV=prod
+# should be changed to a unique character sequence
 APP_SECRET=change_this_to_something_unique
-#TRUSTED_PROXIES=127.0.0.1,127.0.0.2
-#TRUSTED_HOSTS=localhost,example.com
-###< symfony/framework-bundle ###
-
-###> doctrine/doctrine-bundle ###
-# Format described at http://docs.doctrine-project.org/projects/doctrine-dbal/en/latest/reference/configuration.html#connecting-using-a-url
-# For an SQLite database, use: "sqlite:///%kernel.project_dir%/var/data/kimai.sqlite"
-# Configure your db driver and server_version in config/packages/doctrine.yaml
-# DATABASE_URL=mysql://db_user:db_password@127.0.0.1:3306/db_name
-DATABASE_URL=sqlite:///%kernel.project_dir%/var/data/kimai.sqlite
-###< doctrine/doctrine-bundle ###
-
-###> symfony/swiftmailer-bundle ###
-# For Gmail as a transport, use: "gmail://username:password@localhost"
-# For a generic SMTP server, use: "smtp://localhost:25?encryption=&auth_mode="
-# Delivery is disabled by default via "null://localhost"
-MAILER_URL=null://localhost
-###< symfony/swiftmailer-bundle ###
-
-###> nelmio/cors-bundle ###
+# unlikely, that you need to change this one
 CORS_ALLOW_ORIGIN=^https?://localhost(:[0-9]+)?$
-###< nelmio/cors-bundle ###
+# Running behind reverse proxies? Use those:
+# TRUSTED_PROXIES=127.0.0.1,127.0.0.2
+# TRUSTED_HOSTS=localhost,example.com

.github/FUNDING.yml

@@ -1,2 +1,2 @@
-#github: [kevinpapst]
-custom: https://www.kimai.org/donate/
+github: [kevinpapst]
+custom: ["https://www.kimai.org/donate/", "https://www.paypal.me/kevinpapst"]

.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,6 +1,9 @@
 ---
 name: Bug report
-about: Create a report to help us improve Kimai
+about: Found a problem? Create a report to help us improve Kimai
+title: ''
+labels: bug
+assignees: ''
 
 ---
 
@@ -8,27 +11,17 @@ about: Create a report to help us improve Kimai
 A clear and concise description of what the bug is.
 
 **To Reproduce**
-Steps to reproduce the behavior:
 1. Go to '...'
 2. Click on '....'
 3. See error
 
 **Logfile**
 ```
-Add the last lines from your logfile at var/log/prod.log, around the time when the problem happened.
+Add the last lines from your logfile at "var/log/prod.log" or "Doctor > Logs", around the time when the problem happened.
 ```
 
-**Screenshots**
-If applicable, add screenshots to help explain your problem.
-
-**Desktop/Smartphone**
-Please complete the following information if this seems to be a frontend issue:
- - Device: [e.g. iPhone6s]
- - OS: [e.g. iOS]
- - Browser [e.g. chrome, safari]
- - Version [e.g. 22]
-
 **Additional context**
-Add any other context about the problem here.
- - Kimai version
- - PHP version
+ - Kimai version: ?.? 
+ - PHP version: ?.?
+ - Device: [Ubuntu Laptop 16 inch, Windows Desktop 27 inch, iPhone 6s]
+ - Browser [e.g. Firefox 81, Chrome 85, Safari 14]

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+    - name: "Support / Questions / Discussions"
+      url: https://github.com/kevinpapst/kimai2/discussions
+      about:  "This forum is for support questions: eg. if you need help with your Kimai installation, want to know how to use a Kimai feature or wonder where to start creating a new Kimai plugin."

.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,6 +1,9 @@
 ---
 name: Feature request
 about: Suggest an idea to make Kimai better
+title: ''
+labels: feature request
+assignees: ''
 
 ---
 
@@ -13,5 +16,5 @@ A clear and concise description of what you want to happen.
 **Describe alternatives you've considered**
 A clear and concise description of any alternative solutions or features you've considered.
 
-**Additional context**
-Add any other context or screenshots about the feature request here.
+**Screenshot**
+Add a mockup / screenshot of your idea here.

.github/PULL_REQUEST_TEMPLATE.md

@@ -7,6 +7,6 @@ A clear and concise description of what this pull request adds or changes.
 - [ ] Breaking change (fix or feature that would cause existing functionality to change)
 
 ## Checklist
-- [ ] I verified that my code applies to the guidelines (`composer kimai:code-check`)
+- [ ] I verified that my code applies to the guidelines (`composer code-check`)
 - [ ] I updated the documentation (see [here](https://github.com/kimai/www.kimai.org/tree/master/_documentation))
 - [ ] I agree that this code is used in Kimai and will be published under the [MIT license](https://github.com/kevinpapst/kimai2/blob/master/LICENSE)

.github/lock.yml

@@ -1,24 +0,0 @@
-# Configuration for lock-threads - https://github.com/dessant/lock-threads
-
-# Number of days of inactivity before a closed issue or pull request is locked
-daysUntilLock: 60
-
-# Issues and pull requests with these labels will not be locked. Set to `[]` to disable
-exemptLabels: []
-
-# Label to add before locking, such as `outdated`. Set to `false` to disable
-lockLabel: false
-
-# Comment to post before locking. Set to `false` to disable
-lockComment: >
-  This thread has been automatically locked since there has not been
-  any recent activity after it was closed. Please open a new issue for
-  related bugs.
-  If you use Kimai on a daily basis, please [consider donating](https://www.kimai.org/donate/) to
-  support further development of Kimai.
-
-# Assign `resolved` as the reason for locking. Set to `false` to disable
-setLockReason: false
-
-# Limit to only `issues` or `pulls`
-# only: pulls

.github/workflows/coverage.yaml

@@ -0,0 +1,69 @@
+name: Coverage
+on:
+    pull_request: null
+    push:
+        branches:
+            - master
+jobs:
+    tests:
+        runs-on: ubuntu-latest
+        services:
+            mysql:
+                image: mysql:5.7
+                env:
+                    MYSQL_ALLOW_EMPTY_PASSWORD: false
+                    MYSQL_ROOT_PASSWORD: kimai
+                    MYSQL_DATABASE: kimai
+                ports:
+                    - 3306/tcp
+                options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3
+        strategy:
+            matrix:
+                php: ['8.0']
+
+        name: Coverage (${{ matrix.php }})
+        steps:
+
+            -   name: Clone Kimai
+                uses: actions/checkout@v2
+
+            -   name: Setup PHP
+                uses: shivammathur/setup-php@v2
+                with:
+                    php-version: ${{ matrix.php }}
+                    coverage: pcov
+                    extensions: mbstring, xml, ctype, iconv, intl, mysql, zip, gd, ldap
+
+            -   name: Determine composer cache directory
+                id: composer-cache
+                run: "echo \"::set-output name=directory::$(composer config cache-dir)\""
+
+            -   name: Cache Composer dependencies
+                uses: actions/cache@v2
+                with:
+                    path: "${{ steps.composer-cache.outputs.directory }}"
+                    key: ${{ runner.os }}-${{ matrix.php }}-${{ hashFiles('**/composer.lock') }}
+
+            -   name: Install dependencies
+                run: composer install
+
+            -   name: Install LDAP package
+                run: composer require laminas/laminas-ldap
+
+            -   name: Setup problem matchers for PHPUnit
+                run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json"
+
+            -   name: Run tests
+                run: vendor/bin/phpunit tests/ --coverage-clover=coverage.xml
+                env:
+                    DATABASE_URL: mysql://root:kimai@127.0.0.1:${{ job.services.mysql.ports['3306'] }}/kimai?serverVersion=5.7
+                    APP_ENV: dev
+                    MAILER_URL: null://localhost
+                    TEST_WITH_BUNDLES: 1
+
+            -   name: Upload code coverage
+                uses: codecov/codecov-action@v2
+                with:
+                    token: ${{ secrets.CODECOV_TOKEN }}
+                    files: ./coverage.xml
+                    fail_ci_if_error: true

.github/workflows/docker.yaml

@@ -0,0 +1,17 @@
+name: 'Docker Build'
+on:
+  release:
+    types: [released]
+
+jobs:
+  build:
+    name: Dispatch release event to tobybatch
+    runs-on: ubuntu-latest
+    steps:
+      - name: Emit repository_dispatch
+        uses: mvasigh/dispatch-action@1.1.6
+        with:
+          token: ${{ secrets.DOCKER_ACCESS_TOKEN }}
+          repo: kimai2
+          owner: tobybatch
+          event_type: kimai_release

.github/workflows/lock.yaml

@@ -0,0 +1,56 @@
+name: 'Lock Threads'
+
+on:
+    schedule:
+        - cron: '0 0 * * *'
+    workflow_dispatch:
+
+permissions:
+    issues: write
+    pull-requests: write
+
+concurrency:
+    group: lock
+
+jobs:
+    action:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: dessant/lock-threads@v3
+              with:
+                  github-token: ${{ github.token }}
+                  issue-inactive-days: '180'
+                  exclude-issue-created-before: ''
+                  exclude-issue-created-after: ''
+                  exclude-issue-created-between: ''
+                  exclude-issue-closed-before: ''
+                  exclude-issue-closed-after: ''
+                  exclude-issue-closed-between: ''
+                  include-any-issue-labels: ''
+                  include-all-issue-labels: ''
+                  exclude-any-issue-labels: ''
+                  add-issue-labels: ''
+                  remove-issue-labels: ''
+                  issue-comment: >
+                    This thread has been automatically locked since there has not been
+                    any recent activity after it was closed. Please open a new issue for
+                    related bugs.
+                    If you use Kimai on a daily basis, please [consider donating](https://www.kimai.org/donate/) to
+                    support further development of Kimai.
+                  issue-lock-reason: 'resolved'
+                  pr-inactive-days: '180'
+                  exclude-pr-created-before: ''
+                  exclude-pr-created-after: ''
+                  exclude-pr-created-between: ''
+                  exclude-pr-closed-before: ''
+                  exclude-pr-closed-after: ''
+                  exclude-pr-closed-between: ''
+                  include-any-pr-labels: ''
+                  include-all-pr-labels: ''
+                  exclude-any-pr-labels: ''
+                  add-pr-labels: ''
+                  remove-pr-labels: ''
+                  pr-comment: ''
+                  pr-lock-reason: ''
+                  process-only: ''
+                  log-output: false

.github/workflows/lockfiles.yaml

@@ -0,0 +1,21 @@
+name: Check .lock files
+on:
+    pull_request: null
+    push:
+        branches:
+            - master
+jobs:
+    lockfiles:
+        runs-on: ubuntu-latest
+        name: Verify lock file integrity
+        steps:
+
+            - name: Clone Kimai
+              uses: actions/checkout@v2
+
+            - name: Prevent file change
+              uses: xalvarez/prevent-file-change-action@v1
+              with:
+                  githubToken: ${{ secrets.GITHUB_TOKEN }}
+                  pattern: .*.lock
+                  trustedAuthors: kevinpapst, dependabot

.github/workflows/testing.yaml

@@ -0,0 +1,98 @@
+name: Tests
+on:
+    pull_request: null
+    push:
+        branches:
+            - master
+jobs:
+    integration:
+        runs-on: ubuntu-latest
+        services:
+            mysql:
+                image: mysql:5.7
+                env:
+                    MYSQL_ALLOW_EMPTY_PASSWORD: false
+                    MYSQL_ROOT_PASSWORD: kimai
+                    MYSQL_DATABASE: kimai
+                ports:
+                    - 3306/tcp
+                options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3
+        strategy:
+            matrix:
+                php: ['7.4', '8.0', '8.1']
+
+        name: Integration (${{ matrix.php }})
+        steps:
+
+            -   name: Clone Kimai
+                uses: actions/checkout@v2
+
+            -   name: Setup PHP
+                uses: shivammathur/setup-php@v2
+                with:
+                    php-version: ${{ matrix.php }}
+                    coverage: none
+                    extensions: mbstring, xml, ctype, iconv, intl, mysql, zip, gd, ldap
+                    tools: cs2pr:1.1.0
+
+            -   name: Determine composer cache directory
+                id: composer-cache
+                run: "echo \"::set-output name=directory::$(composer config cache-dir)\""
+
+            -   name: Cache Composer dependencies
+                uses: actions/cache@v2
+                with:
+                    path: "${{ steps.composer-cache.outputs.directory }}"
+                    key: ${{ runner.os }}-${{ matrix.php }}-${{ hashFiles('**/composer.lock') }}
+
+            -   name: Install dependencies
+                run: composer install
+
+            -   name: Validate Composer
+                run: composer validate --strict
+
+            -   name: Warmup cache for PHPStan
+                run: APP_ENV=dev bin/console kimai:reload -n
+
+            -   name: Check codestyles
+                run: vendor/bin/php-cs-fixer fix --dry-run --verbose --config=.php-cs-fixer.dist.php --using-cache=no --show-progress=none --format=checkstyle | cs2pr
+
+            -   name: Run PHPStan on Codebase
+                run: vendor/bin/phpstan analyse src -c phpstan.neon --level=5 --no-progress --error-format=checkstyle | cs2pr
+
+            -   name: Run PHPStan on Tests
+                run: vendor/bin/phpstan analyse tests -c tests/phpstan.neon --level=5 --no-progress --error-format=checkstyle | cs2pr
+
+            -   name: Lint codebase
+                run: composer linting
+
+            -   name: Install LDAP package
+                run: composer require laminas/laminas-ldap
+
+            -   name: Setup problem matchers for PHPUnit
+                run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json"
+
+            -   name: Run unit tests
+                run: composer kimai:tests-unit
+                env:
+                    DATABASE_URL: mysql://root:kimai@127.0.0.1:${{ job.services.mysql.ports['3306'] }}/kimai?serverVersion=5.7
+                    APP_ENV: dev
+                    MAILER_URL: null://localhost
+
+            -   name: Run integration tests
+                run: composer kimai:tests-integration
+                env:
+                    DATABASE_URL: mysql://root:kimai@127.0.0.1:${{ job.services.mysql.ports['3306'] }}/kimai?serverVersion=5.7
+                    APP_ENV: dev
+                    MAILER_URL: null://localhost
+
+            -   name: Run migrations on MySQL
+                run: |
+                    bin/console doctrine:database:drop --if-exists --force -n
+                    bin/console doctrine:database:create --if-not-exists -n
+                    bin/console doctrine:migrations:migrate -n
+                    bin/console doctrine:migrations:migrate first -n
+                env:
+                    DATABASE_URL: mysql://root:kimai@127.0.0.1:${{ job.services.mysql.ports['3306'] }}/kimai?serverVersion=5.7
+                    APP_ENV: dev
+                    MAILER_URL: null://localhost

.github_changelog_generator

@@ -1,5 +1,5 @@
 unreleased=true
-future-release=1.2
-exclude-labels=duplicate,question,invalid,wontfix,release
-enhancement_labels=>enhancement,Enhancement,feature request,translation i18n,technical debt
+future-release=1.19
+exclude-labels=duplicate,support,question,invalid,wontfix,release,waiting for feedback,documentation
+enhancement_labels=>enhancement,Enhancement,feature request,translation i18n,technical debt,documentation
 issues-wo-labels=false

.gitignore

@@ -1,23 +1,37 @@
 # ========== KIMAI ==========
-# IDE
+# some hosters require a htaccess to change the PHP version
+.htaccess
+.env-*
 .idea/
+.DS_Store
+
+# for symfony local webserver
+php.ini
 
 /bin/*
 !bin/console
 /config/packages/local.yaml
+/config/packages/*-local.yaml
 /config/packages/*/local.yaml
+/config/packages/*/*-local.yaml
+/config/bundles-local.php
+
+public/avatars/*.png
 
 templates/invoice/renderer/.~lock*
+translations/branding.*.xlf
 
 /var/data/*
 !/var/data/.gitkeep
-!/var/data/kimai_test.sqlite
 /var/coverage/
 /var/cache/*
 !var/cache/.gitkeep
 
 /var/invoices/*
+/var/export/*
 
+/var/packages/*
+!var/packages/.gitkeep
 /var/plugins/*
 !var/plugins/.gitkeep
 
@@ -34,10 +48,6 @@ templates/invoice/renderer/.~lock*
 /vendor/
 ###< symfony/framework-bundle ###
 
-###> symfony/web-server-bundle ###
-.web-server-pid
-###< symfony/web-server-bundle ###
-
 ###> phpunit/phpunit ###
 /phpunit.xml
 /.phpunit.result.cache
@@ -46,6 +56,7 @@ templates/invoice/renderer/.~lock*
 ###> friendsofphp/php-cs-fixer ###
 .php_cs
 .php_cs.cache
+.php-cs-fixer.cache
 ###< friendsofphp/php-cs-fixer ###
 
 ###> symfony/phpunit-bridge ###
@@ -58,3 +69,4 @@ templates/invoice/renderer/.~lock*
 npm-debug.log
 yarn-error.log
 ###< symfony/webpack-encore-bundle ###
+/nbproject/*

.php-cs-fixer.dist.php

@@ -7,7 +7,8 @@ For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 COMMENT;
 
-return PhpCsFixer\Config::create()
+$fixer = new PhpCsFixer\Config();
+$fixer
     ->setRiskyAllowed(true)
     ->setRules([
         'encoding' => true,
@@ -19,7 +20,7 @@ return PhpCsFixer\Config::create()
         'function_declaration' => true,
         'indentation_type' => true,
         'line_ending' => true,
-        'lowercase_constants' => true,
+        'constant_case' => ['case' => 'lower'],
         'lowercase_keywords' => true,
         'method_argument_space' => ['on_multiline' => 'ensure_fully_multiline'],
         'header_comment' => ['header' => $fileHeaderComment, 'separate' => 'both'],
@@ -46,7 +47,7 @@ return PhpCsFixer\Config::create()
             'statements' => ['return'],
         ],
         'cast_spaces' => true,
-        'class_attributes_separation' => ['elements' => ['method']],
+        'class_attributes_separation' => ['elements' => ['method' => 'one']],
         'concat_space' => ['spacing' => 'one'],
         'declare_equal_normalize' => true,
         'function_typehint_space' => true,
@@ -100,10 +101,10 @@ return PhpCsFixer\Config::create()
         ],
         'phpdoc_annotation_without_dot' => true,
         'phpdoc_indent' => true,
-        'phpdoc_inline_tag' => true,
+        'phpdoc_inline_tag_normalizer' => true,
         'phpdoc_no_access' => true,
         'phpdoc_no_alias_tag' => true,
-        'phpdoc_no_empty_return' => true,
+        'phpdoc_no_empty_return' => false,
         'phpdoc_no_package' => true,
         'phpdoc_no_useless_inheritdoc' => true,
         'phpdoc_return_self_reference' => true,
@@ -130,7 +131,7 @@ return PhpCsFixer\Config::create()
         'standardize_increment' => true,
         'standardize_not_equals' => true,
         'ternary_operator_spaces' => true,
-        'trailing_comma_in_multiline_array' => false,
+        'trailing_comma_in_multiline' => false,
         'trim_array_spaces' => true,
         'unary_operator_spaces' => true,
         'whitespace_after_comma_in_array' => true,
@@ -141,6 +142,18 @@ return PhpCsFixer\Config::create()
             'method',
             'property',
         ]],
+        'native_function_invocation' => [
+            'include' => [
+                '@compiler_optimized'
+            ],
+            'scope' => 'namespaced'
+        ],
+        'native_function_type_declaration_casing' => true,
+        'no_alias_functions' => [
+            'sets' => [
+                '@internal'
+            ]
+        ],
     ])
     ->setFinder(
         PhpCsFixer\Finder::create()
@@ -151,3 +164,5 @@ return PhpCsFixer\Config::create()
     )
     ->setFormat('checkstyle')
 ;
+
+return $fixer;

.travis.yml

@@ -1,78 +0,0 @@
-dist: xenial
-language: php
-
-cache:
-  directories:
-    - $HOME/.composer/cache/files
-
-matrix:
-  include:
-    - stage: Code quality
-      env: CODECOVERAGE=0 DB=sqlite
-      php: '7.2'
-      script:
-          - composer validate --no-check-all --strict
-          - composer kimai:codestyle
-          - composer kimai:phpstan
-    - stage: Test
-      php: '7.2'
-      env: CODECOVERAGE=0 DB=mysql
-      sudo: required
-      services: 
-        - mysql
-    - stage: Test
-      php: '7.3'
-      env: CODECOVERAGE=0 DB=mysql
-      sudo: required
-      services: 
-        - mysql
-    - stage: Test
-      php: '7.2'
-      env: CODECOVERAGE=0 DB=sqlite
-    - stage: Test
-      #php: '7.4snapshot'
-      php: '7.3'
-      env: CODECOVERAGE=0 DB=sqlite
-    - stage: Test
-      php: '7.2'
-      env: CODECOVERAGE=0 DB=mariadb
-      addons:
-        mariadb: '10.2'
-      services: 
-        - mysql
-      before_script:
-        - mysql -u root -e 'CREATE USER IF NOT EXISTS travis@localhost; GRANT ALL ON *.* TO travis@localhost;'
-    - stage: Test
-      php: '7.3'
-      env: CODECOVERAGE=0 DB=mariadb
-      addons:
-        mariadb: '10.2'
-      services: 
-        - mysql
-      before_script:
-        - mysql -u root -e 'CREATE USER IF NOT EXISTS travis@localhost; GRANT ALL ON *.* TO travis@localhost;'
-    - stage: Code coverage
-      php: '7.3'
-      env: CODECOVERAGE=1 DB=sqlite
-      after_success:
-          - if [[ $CODECOVERAGE == 1 ]]; then bash <(curl -s https://codecov.io/bash); fi
-
-before_install:
-  - if [[ $CODECOVERAGE == 0 ]]; then phpenv config-rm xdebug.ini; fi;
-  - composer self-update
-  - php -i
-  - php -m
-
-install:
-  - composer install
-  - composer require zendframework/zend-ldap
-
-script:
-  - if [[ $CODECOVERAGE == 1 ]]; then vendor/bin/phpunit tests/ --coverage-clover=coverage.xml; fi;
-  - if [[ $CODECOVERAGE == 0 ]]; then vendor/bin/phpunit tests/; fi;
-  - if [[ $DB == 'sqlite' ]]; then cp tests/.env.dist.sqlite .env; fi;
-  - if [[ $DB == "mysql" || $DB == "mariadb" ]]; then cp tests/.env.dist.mysql .env; fi;
-  - bin/console doctrine:database:create -n
-  - bin/console doctrine:migrations:migrate -n
-  - bin/console doctrine:migrations:migrate first -n
-

CHANGELOG.md

@@ -1,75 +1,3 @@
-# Change Log
+# Changelog
 
-## [1.2](https://github.com/kevinpapst/kimai2/tree/1.2) (2019-08-28)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/1.1...1.2)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/1.2)
-
-## [1.1](https://github.com/kevinpapst/kimai2/tree/1.1) (2019-07-24)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/1.0.1...1.1)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/1.1)
-
-## [1.0.1](https://github.com/kevinpapst/kimai2/tree/1.0.1) (2019-07-05)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/1.0...1.0.1)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/1.0.1)
-
-## [1.0](https://github.com/kevinpapst/kimai2/tree/1.0) (2019-07-02)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.9...1.0)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/1.0)
-
-## [0.9](https://github.com/kevinpapst/kimai2/tree/0.9) (2019-04-29)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.8.1...0.9)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.9)
-
-## [0.8.1](https://github.com/kevinpapst/kimai2/tree/0.8.1) (2019-02-22)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.8...0.8.1)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.8.1)
-
-## [0.8](https://github.com/kevinpapst/kimai2/tree/0.8) (2019-02-19)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.7...0.8)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.8)
-
-## [0.7](https://github.com/kevinpapst/kimai2/tree/0.7) (2019-01-28)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.6.1...0.7)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.7)
-
-## [0.6.1](https://github.com/kevinpapst/kimai2/tree/0.6.1) (2018-11-19)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.6...0.6.1)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.6.1)
-
-## [0.6](https://github.com/kevinpapst/kimai2/tree/0.6) (2018-11-18)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.5...0.6)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.6)
-
-## [0.5](https://github.com/kevinpapst/kimai2/tree/0.5) (2018-09-27)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.4...0.5)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.5)
-
-## [0.4](https://github.com/kevinpapst/kimai2/tree/0.4) (2018-09-01)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.3...0.4)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.4)
-
-## [0.3](https://github.com/kevinpapst/kimai2/tree/0.3) (2018-07-22)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.2...0.3)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.3)
-
-## [0.2](https://github.com/kevinpapst/kimai2/tree/0.2) (2018-06-23)
-[Full Changelog](https://github.com/kevinpapst/kimai2/compare/0.1...0.2)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.2)
-
-## [0.1](https://github.com/kevinpapst/kimai2/tree/0.1) (2018-01-10)
-
-Release notes including the changelog can be found [here](https://github.com/kevinpapst/kimai2/releases/tag/0.1)
+See [GitHub release page](https://github.com/kevinpapst/kimai2/releases). 

Dockerfile

@@ -1,54 +0,0 @@
-# This file is part of the Kimai time-tracking app.
-#
-# For the full copyright and license information, please view the LICENSE
-# file that was distributed with this source code.
-FROM php:7.2.9-apache-stretch AS tmp_kimai2_base
-
-RUN apt update && \
-    apt install -y --allow-unauthenticated \
-        git \
-        haveged \
-        libicu-dev \
-        libjpeg-dev \
-        libldap2-dev \
-        libldb-dev \
-        libpng-dev \
-        mysql-client \
-        unzip \
-        wget \
-        zip \
-        && \
-    EXPECTED_SIGNATURE="$(wget -q -O - https://composer.github.io/installer.sig)" && \
-    php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" && \
-    ACTUAL_SIGNATURE="$(php -r "echo hash_file('sha384', 'composer-setup.php');")" && \
-    if [ "$EXPECTED_SIGNATURE" != "$ACTUAL_SIGNATURE" ]; then >&2 echo 'ERROR: Invalid installer signature'; rm composer-setup.php; exit 1; fi && \
-    php composer-setup.php --quiet && \
-    rm composer-setup.php && \
-    mv /var/www/html/composer.phar /usr/bin/composer && \
-    docker-php-ext-install \
-        gd \
-        intl \
-        ldap \
-        pdo_mysql \
-        zip && \
-    apt remove -y wget && \
-    apt -y autoremove && \
-    apt clean
-
-FROM tmp_kimai2_base
-
-RUN git clone https://github.com/kevinpapst/kimai2.git /opt/kimai && \
-    sed "s/prod/dev/g" /opt/kimai/.env.dist > /opt/kimai/.env && \
-    composer install --working-dir=/opt/kimai --dev --optimize-autoloader && \
-    /opt/kimai/bin/console doctrine:database:create && \
-    /opt/kimai/bin/console doctrine:schema:create && \
-    /opt/kimai/bin/console doctrine:migrations:version --add --all && \
-    /opt/kimai/bin/console cache:warmup && \
-    chown -R www-data:www-data /opt/kimai/var && \
-    chown www-data:www-data /opt/kimai/vendor/mpdf/mpdf/tmp
-
-WORKDIR /opt/kimai
-
-EXPOSE 8001
-USER www-data
-CMD /opt/kimai/bin/console server:run 0.0.0.0:8001

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2017-2019 Kevin Papst @ https://www.kevinpapst.de
+Copyright (c) 2017-2022 Kevin Papst @ https://www.kevinpapst.de
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -1,39 +1,45 @@
-# Kimai 2 - online time-tracker
+<p align="center">
+    <img src="https://raw.githubusercontent.com/kimai/images/master/repository-header.png" alt="Kimai logo">
+</p>
 
-[![Latest Stable Version](https://poser.pugx.org/kevinpapst/kimai2/v/stable)](https://packagist.org/packages/kevinpapst/kimai2)
-[![License](https://poser.pugx.org/kevinpapst/kimai2/license)](https://packagist.org/packages/kevinpapst/kimai2)
-[![Travis Status](https://travis-ci.org/kevinpapst/kimai2.svg?branch=master)](https://travis-ci.org/kevinpapst/kimai2)
-[![Code Coverage](https://codecov.io/gh/kevinpapst/kimai2/branch/master/graph/badge.svg)](https://codecov.io/gh/kevinpapst/kimai2)
-[![Gitter](https://badges.gitter.im/kimai2/support.svg)](https://gitter.im/kimai2/support)
-[![Bountysource](https://img.shields.io/bountysource/team/kimai2/activity)](https://www.bountysource.com/teams/kimai2)
+<p align="center">
+    <a href="https://github.com/kevinpapst/kimai2/actions"><img alt="CI Status" src="https://github.com/kevinpapst/kimai2/workflows/CI/badge.svg"></a>
+    <a href="https://codecov.io/gh/kevinpapst/kimai2"><img alt="Code Coverage" src="https://codecov.io/gh/kevinpapst/kimai2/branch/master/graph/badge.svg"></a>
+    <a href="https://packagist.org/packages/kevinpapst/kimai2"><img alt="Latest stable version" src="https://poser.pugx.org/kevinpapst/kimai2/v/stable"></a>
+    <a href="https://packagist.org/packages/kevinpapst/kimai2"><img alt="License" src="https://poser.pugx.org/kevinpapst/kimai2/license"></a>
+    <a href="https://twitter.com/kimai_org"><img alt="Twitter" src="https://img.shields.io/badge/follow-%40kimai__org-00acee"></a>
+</p>
+
+<h1 align="center">Kimai - time-tracker</h1>
 
 Kimai is a free, open source and online time-tracking software designed for small businesses and freelancers. 
-It is built with modern technologies such as Symfony, Bootstrap, RESTful API, Doctrine, AdminLTE, Webpack, ES6 etc.
+It is built with modern technologies such as [Symfony](https://github.com/symfony/symfony), [Bootstrap](https://github.com/twbs/bootstrap), 
+[RESTful API](https://github.com/FriendsOfSymfony/FOSRestBundle), [Doctrine](https://github.com/doctrine/),
+[AdminLTE](https://github.com/kevinpapst/AdminLTEBundle/), [Webpack](https://github.com/webpack/webpack), ES6 and [many](composer.json) [more](package.json).
 
 ## Introduction
 
-- [Home](https://www.kimai.org) - The house of Kimai
-- [Blog](https://www.kimai.org/blog/) - Get the latest news
-- [Documentation](https://www.kimai.org/documentation/) - Learn how to use
-- [Translations](https://www.kimai.org/documentation/translations.html) - Kimai in your language
-- [Migration](https://www.kimai.org/documentation/migration-v1.html) - Import data from v1 
+- [Home](https://www.kimai.org) - Kimai project homepage
+- [Blog](https://www.kimai.org/blog/) - Read the latest news
+- [Documentation](https://www.kimai.org/documentation/) - Learn how to use Kimai
+- [Translations](https://hosted.weblate.org/projects/kimai/#languages) - Kimai in your language
+- [Migration](https://www.kimai.org/documentation/migration-v1.html) - Import data from Kimai 1 
 
 ### Requirements
 
-- PHP 7.2 or higher
-- Database (MySQL, MariaDB, SQLite)
-- Webserver (nginx, Apache)
-- A modern browser
-- [Other libraries](https://www.kimai.org/download/)
+- PHP 7.4 or higher (PHP 8 supported, PHP 8.1 does not support LDAP yet)
+- MariaDB or MySQL
+- A webserver and subdomain
+- PHP extensions: `gd`, `intl`, `json`, `mbstring`, `pdo`, `xsl`, `zip`
 
 ### About
 
-This is new version of the open source timetracker Kimai. It is stable and production ready, ships
-with most advanced features from Kimai 1 and many new ones, including but not limited to: 
+This is the new version of the open source time tracker Kimai. It is stable and production ready, ships
+with many advanced features, including but not limited to: 
 
 JSON API, invoicing, data exports, multi-timer and punch-in punch-out mode, tagging, multi-user and multi-timezones, 
-LDAP and built-in authentication, customizable role permissions, responsive and ready for your mobile device, 
-hourly and fixed rates, advanced filtering, money and time budgets with report, support for plugins and many more.
+authentication via SAML/LDAP/Database, customizable role and team permissions, responsive and ready for your mobile device, 
+user specific rates, advanced search & filtering, money and time budgets, reporting, support for plugins and many more.
 
 ## Installation
 
@@ -41,11 +47,10 @@ hourly and fixed rates, advanced filtering, money and time budgets with report,
 - [Docker](https://www.kimai.org/documentation/docker.html) - containerized
 - [Development](https://www.kimai.org/documentation/installation.html#development-installation) - on your local machine 
 - [1-click installer](https://www.kimai.org/documentation/installation.html#hosting-and-1-click-installations) - hosted environments 
-- [FTP](https://www.kimai.org/documentation/installation.html#ftp-installation) - unfortunately still widely used ;-)
 
 ### Updating Kimai
 
-- [Update Kimai](https://www.kimai.org/documentation/updates.html) - the documentation
+- [Update Kimai](https://www.kimai.org/documentation/updates.html) - get the latest version
 - [UPGRADING guide](UPGRADING.md) - version specific steps
 
 ### Plugins
@@ -60,15 +65,24 @@ It is open for changes and input from the community, your [ideas and questions](
 
 > Kimai 2 uses a rolling release concept for delivering updates.
 > You can upgrade Kimai at any time, you don't need to wait for the next official release.
+> The master branch is always deployable, release tags are only snapshots of the current development version.
 
-Release versions will be created on a regular base (approx. every second month) and you can use these tags if you are familiar with git.
-Every code change, whether it's a new feature or a bug fix, will be done on the master branch. 
-I have to do it this way, as I develop Kimai in my free time and want to put my effort into the software instead of backporting changes for old versions. 
+Release versions will be created on a regular base (approx. one release every 2 months).
+Every code change, whether it's a new feature or a bugfix, will be done on the master branch. 
+Kimai is actively developed in my spare time, I put my effort into the software instead of backporting changes.
 
-## Credits
+## Contributing
 
-Kimai 2 is developed with modern frameworks like 
-[Symfony v4](https://github.com/symfony/symfony), 
-[Doctrine](https://github.com/doctrine/),
-[AdminLTEBundle](https://github.com/kevinpapst/AdminLTEBundle/) (based on [AdminLTE theme](https://github.com/almasaeed2010/AdminLTE)) and 
-[many](composer.json) [more](package.json).
+You want to contribute to this repository? This is so great!
+The best way to start is to [open a new issue](https://github.com/kevinpapst/kimai2/issues) for bugs or feature requests or a [discussion](https://github.com/kevinpapst/kimai2/discussions) for questions, support and such.
+
+In case you want to contribute, but you wouldn't know how, here are some suggestions:
+
+- Spread the word: More user means more people testing and contributing to Kimai - which in turn means better stability and more and better features. Please vote for Kimai on platforms lie Slant, Product Hunt, Softpedia or AlternativeTo, you can tweet about it, share it on LinkedIn, reddit or any of your favorite social media platforms. Every little bit helps!
+- Answer questions: You know the answer to another user's problem? Share your knowledge!
+- Make a feature request: Something can be done better? Something essential missing? Let us know!
+- Report bugs
+- Contribute: You don't have to be programmer to help. The documentation and translation could use some love as well.
+- Sponsor the project
+
+There is one simple rule in our "Code of conduct": Don't be an ass! 

SECURITY.md

@@ -5,19 +5,20 @@
 As announced in the [README](README.md) I only support the latest available release and master.
 
 | Version | Supported          |
-| ------- | ------------------ |
+|---------|--------------------|
 | master  | :white_check_mark: |
-| 1.2     | :white_check_mark: |
-| < 1.2   | :x:                |
+| 1.19    | :white_check_mark: |
+| < 1.19  | :x:                |
 
 ## Reporting a Vulnerability
 
-Please report any security related vulnerability in the [advisories section at GitHub](https://github.com/kevinpapst/kimai2/security/advisories) or via email to info@keleo.de or kpapst@gmx.net.
+Please read the [Bughunter](https://www.kimai.org/documentation/bughunter.html) documentation before posting, 
+and then you can report any security related vulnerability in the [advisories section at GitHub](https://github.com/kevinpapst/kimai2/security/advisories) or via email to kpapst@gmx.net.
 
 I will work as fast as I can to fix the problem and publish a bugfix release / security update. 
 Depending on the size of the required fixes, this might take a couple of hours or a couple of days.
 
-You can expect that your message will be answered ASAP, but please take into account that I am living in the timezone Europe/Berlin. 
+You can expect that your message will be answered ASAP. 
 
-If your issue is valid and I verified and fixed it, you will be mentioned in the release notes within the Security section at the top of the release. 
-I am grateful for any (discrete) disclosure of vulnerabilities!
+You will be mentioned in the release notes if your issue is valid and after it was fixed. 
+I am grateful for any (discrete) disclosure of vulnerabilities!

UPGRADING.md

@@ -8,28 +8,219 @@ you can upgrade your Kimai installation to the latest stable release.
 Check below if there are more version specific steps required, which need to be executed after the normal update process.
 Perform EACH version specific task between your version and the new one, otherwise you risk data inconsistency or a broken installation.
 
+
+## [1.16](https://github.com/kevinpapst/kimai2/releases/tag/1.16)
+
+**DEVELOPER**
+
+- Removed `formDateTime` field from API model `I18nConfig`
+
+## [1.15](https://github.com/kevinpapst/kimai2/releases/tag/1.15)
+
+**Many database changes: don't forget to [run the updater](https://www.kimai.org/documentation/updates.html).**
+
+Updating the database might take quite a while, depending on the amount of timesheet entries and speed of your database server (~1 minute per 100k records).
+
+**ATTENTION**
+
+- This release bumps the minimum required [PHP version to 7.3](https://www.kimai.org/blog/2021/php8-support-php72-dropped/)
+- Self-registration is disabled by default
+- Self-registration now always requires email confirmation
+- All plugins that use own databases need to be updated as well
+- Removed the YearChart widget and the related configs named `userRecapThisYear`, `userRecapLastYear`, `userRecapTwoYears`, `userRecapThreeYears`
+
+**LDAP & SAML**
+
+Please verify your config with the [LDAP](https://www.kimai.org/documentation/ldap.html) and [SAML](https://www.kimai.org/documentation/saml.html) documentation, especially:
+
+- SAML users: activate it by setting the `kimai.saml.activate: true` config key
+- LDAP users: activate it by setting the `kimai.ldap.activate: true` config key
+- LDAP and SAML users need to remove the complete `security` section from their `local.yaml`
+
+**DEVELOPER**  
+
+PHP 8 compatibility forced to upgrade MANY libraries, including but not limited to:
+
+- Removed FOSUserBundle and hslavich/oneloginsaml
+- Doctrine Migrations, whose new major version forces plugin updates 
+- Gedmo v3 (which include BC breaks in definitions)
+- Doctrine DBAL and others, which required PHP 7.3 as well
+
+**API BC break**: Due to team structure changes, it was impossible to keep the (writing) API structure. Please adjust your code accordingly!
+
+## [1.14](https://github.com/kevinpapst/kimai2/releases/tag/1.14)
+
+**CRITICAL BC break**: SQLite support was removed. If you are using SQLite, you have to [read this blog post](https://www.kimai.org/blog/2021/sqlite-and-ftp-support-removed/) and migrate to MySQL/MariaDB first!
+
+**New database tables and fields: don't forget to [run the updater](https://www.kimai.org/documentation/updates.html).**
+
+Permission changes:
+- `history_invoice` - removed permission entirely
+
+## [1.13](https://github.com/kevinpapst/kimai2/releases/tag/1.13)
+
+- Deprecated `now` variable in export templates: create it yourself with `{% set now = create_date('now', app.user) %}`
+- Changed invoice filename generation (check if you use cronjob for invoices)
+- **BC break**: duration entered as plain numbers will now be treated as decimal duration in hours instead of seconds
+
+## [1.12](https://github.com/kevinpapst/kimai2/releases/tag/1.12)
+
+- Export templates can now include items from plugins (eg. Expenses).
+
+## [1.10](https://github.com/kevinpapst/kimai2/releases/tag/1.10)
+
+**New database tables and fields were created, don't forget to [run the updater](https://www.kimai.org/documentation/updates.html).**
+
+- Invoice renderer `CSV` was removed
+- Sessions are now stored in the database (all users have to re-login after upgrade)
+- New permissions: `lockdown_grace_timesheet`, `lockdown_override_timesheet`, `view_all_data`
+- Fixed team permissions on user queries: depending on your previous team & permission setup your users might see less data (SUPER_ADMINS see all data, but new: ADMINS only see all data if they own the `view_all_data` permission)
+- Markdown does not support headings anymore, text like `# foo` is not converted to `<h1 id="foo">foo</h1>` anymore
+
+### Developer
+
+- **BC break**: removed registration of `.env` with `putenv()` - do not rely on `getenv()` as it is not thread-safe
+- **BC break**: interface method signature `HtmlToPdfConverter::convertToPdf()` changed
+- **BC break**: the macros `badge` and `label` do not apply the `|trans` filter any more
+- **BC Break**: removed `getVisible()` (deprecated since 1.4) method on Customer, Project and Activity (use `isVisible()` instead, templates are still working)
+- **BC Break**: API changes
+    - some representation names changed (eg. from `ActivityMetaField` to `ActivityMeta`, `TimesheetSubCollection` vs `TimesheetCollectionExpanded`), you could use `class_alias()` if you use auto-generated code from Swagger-Gen or alike
+    - new result types were introduced
+    - result data changed in some areas to smooth out inconsistencies (eg. TeamEntity fields changed in nested results)
+
+## [1.9](https://github.com/kevinpapst/kimai2/releases/tag/1.9)
+
+**New database tables and fields were created, don't forget to [run the updater](https://www.kimai.org/documentation/updates.html).**
+
+- The directory `var/data/invoices/` will be used to store archived invoice files (check file permissions)
+- The default invoice number format changed. If you want to use the old one: configure `{date}` as format - see [invoice documentation](https://www.kimai.org/documentation/invoices.html)
+- HTML invoice templates are now treated like other files and offered as download. If you are using relative URLs for including assets (CSS, images) you need to either inline them (see the default templates) or use absolute URLs
+- Invoice templates that use the templates variables `${activity.X}` or `${project.X}` should be checked and possibly adapted, as multi-select is now possible for filtering
+- Invoice templates have access to all meta-fields as variables, not only the ones marked as visible
+- Rates configuration/structure changed for customer, project and activity 
+  - **Invoice templates**: rates variables were removed
+
+Permission changes:
+- `history_invoice` - NEW: grants all features for the new invoice archive (by default for all admins)
+
+### Developer
+
+- **BC break**: `InvoiceItemInterface` has new methods `getType()` and `getCategory()`
+- **BC break**: API fields changed - see new `/rates` endpoints
+
+## [1.8](https://github.com/kevinpapst/kimai2/releases/tag/1.8)
+
+**New database tables and fields were created, don't forget to [run the updater](https://www.kimai.org/documentation/updates.html).**
+
+- New PHP requirement: `ext-xsl` - which should be pre-installed in most environments when `ext-xml` is loaded
+- New mailer library: check if emails are still working (eg. by using the "password forgotten" function) or if you need to adjust your configuration, [see docs at symfony.com](https://symfony.com/doc/current/components/mailer.html#transport)
+- Support for line breaks in multiline invoice fields for spreadsheets (check your invoice templates after the update) 
+
+Permission changes:
+
+- `comments_create_customer` - NEW: permission that allows to add new comments for customers  
+- `comments_create_team_customer` - NEW: permission that allows to add new comments for team members of the current customer 
+- `comments_create_teamlead_customer` - NEW: permission that allows to add new comments for a teamlead of the current customer 
+- `comments_create_project` - NEW: permission that allows to add new comments for project  
+- `comments_create_team_project` - NEW: permission that allows to add new comments for team members of the current project 
+- `comments_create_teamlead_project` - NEW: permission that allows to add new comments for a teamlead of the current project 
+- `edit_teamlead_project` - removed default permission from ROLE_TEAMLEAD (if you use it: change it in the Role & Permission UI) 
+- `edit_teamlead_customer` - removed default permission from ROLE_TEAMLEAD (if you use it: change it in the Role & Permission UI) 
+- `upload_invoice_template` - NEW: permission that allows to upload invoice documents from the UI
+
+## [1.7](https://github.com/kevinpapst/kimai2/releases/tag/1.7)
+
+**New database tables and fields were created, don't forget to [run the updater](https://www.kimai.org/documentation/updates.html).**
+
+New permissions:
+
+- `comments_customer` - show comment list on customer detail page (new feature) 
+- `details_customer` - show detail information for customers (customer number, vat, rates, meta-fields, assigned teams ...)
+- `comments_project` - show comment list on project detail page (new feature) 
+- `details_project` - show detail information for projects (rates, meta-fields, assigned teams ...)
+
+If you are using teams, please read on: The following list of permissions are now also available in the UI and they (can) replace the `X_project` and `X_customer` permissions. 
+They are more strict, as they allow only access to team specific items, the older permissions without `_teamlead_`/`_team_` work on a global level instead.
+  
+- `view_teamlead_customer`, `edit_teamlead_customer`, `budget_teamlead_customer`, `permissions_teamlead_customer`, `comments_teamlead_customer`, `details_teamlead_customer` - allows access to customer data when user is teamlead of a team assigned to the customer (replaces more global permission like `view_customer` for teamleads)
+- `view_team_customer`, `edit_team_customer`, `budget_team_customer`, `comments_team_customer`, `details_team_customer` - allows access to customer data when user is member of a team assigned to the customer (replaces more global permission like `view_customer` for users)
+- `view_teamlead_project`, `edit_teamlead_project`, `budget_teamlead_project`, `permissions_teamlead_project`, `comments_teamlead_project`, `details_teamlead_project` - allows access to customer data when user is teamlead of a team assigned to the project (replaces more global permission like `view_project` for teamleads)
+- `view_team_project`, `edit_team_project`, `budget_team_project`, `comments_team_project`, `details_team_project` - allows access to customer data when user is member of a team assigned to the project (replaces more global permission like `view_project` for users)
+
+### ExpenseBundle
+
+**ATTENTION** due to incompatibilities in the underlying frameworks users of the ExpenseBundle need to do one more step:
+You need to delete the bundle before updating: `rm -r var/plugins/ExpenseBundle`, otherwise you will run into errors during the update.
+After the Kimai update was successful, you have to re-install the latest bundle version, which is compatible with Kimai 1.7 only. 
+
+### Developer
+
+- Projects now have a start and end date and the API will only return those, which are either unconfigured or currently active, you might want to reload the list of projects once the user entered begin and end datetime OR use the new `ignoreDates` parameter.
+- Doctrine bundle was updated to v2, check your code for [the usage of RegistryInterface and ObjectManager](https://github.com/doctrine/DoctrineBundle/blob/master/UPGRADE-2.0.md)
+- Removed the webserver bundle and the command `server:run` - see [docs](https://www.kimai.org/documentation/developers.html)
+
+## [1.6](https://github.com/kevinpapst/kimai2/releases/tag/1.6), [1.6.1](https://github.com/kevinpapst/kimai2/releases/tag/1.6.1), [1.6.2](https://github.com/kevinpapst/kimai2/releases/tag/1.6.2)
+
+**New database tables and fields were created, don't forget to [run the updater](https://www.kimai.org/documentation/updates.html).**
+
+- Invoice changes:
+  - Moved CSV, ODS and XSLX invoice templates to [another repository](https://github.com/Keleo/kimai2-invoice-templates). Using them? Install them manually (see [invoice documentation](https://www.kimai.org/documentation/invoices.html)).
+  - Added new invoice fields (VAT, contact, payment details) and customer field (VAT). Used the twig settings before? Move them to the respective invoice template settings.
+- Permissions can be managed via Admin UI. Please move your permission settings from [local.yaml to your database](https://www.kimai.org/documentation/permissions.html).
+- Important permission change: regular users with the `view_other_timesheet` permission could see all timesheets. This was a legacy from the time before team permissions were introduced. If you rely on this behavior, you need to create a team with all users and the teamlead being the user who needs access to all timesheets. 
+
+### Developer
+
+Please add default permissions to your [plugin](https://www.kimai.org/documentation/plugins.html).
+
+## [1.5](https://github.com/kevinpapst/kimai2/releases/tag/1.5)
+
+[Update as usual](https://www.kimai.org/documentation/updates.html)
+
+## [1.4](https://github.com/kevinpapst/kimai2/releases/tag/1.4)
+
+**There is a new directory, which needs to be writable by the webserver: `public/avatars/`.**
+
+New permission (used in new dashboard widget):
+- `view_team_member` - display team assignments (names, teamleads and members) for the current user
+
+Activated Javascript select component by default (check mobile devices).
+
+### Developer: BC breaks
+
+- Dashboard widgets and rows need to define their `type` by FQCN
+- Switched to Symfony 4.3 event types, this could fail in plugins, but only if they didn't use the official constants for event names
+
+## [1.3](https://github.com/kevinpapst/kimai2/releases/tag/1.3)
+
+Added `manage_tag` permission for new tag features
+
+### Developer: BC breaks
+
+- Refactored toolbars and search, plugins needs to be checked 
+- Invoices now supports multiple repositories, some method signatures had to be changed (eg. `calculateSumIdentifier()`)  
+
 ## [1.2](https://github.com/kevinpapst/kimai2/releases/tag/1.2)
 
-### Possible BC breaks
+**If you are still using 0.7 or below, you need to upgrade to 1.1 before upgrading to this version.**
 
-- Deleted timezone conversion command. If you are still using 0.7 or below, you need to upgrade to 1.1 before upgrading to this version.
+- Deleted timezone conversion command. 
 - Minimum password length raised from 5 to 8 character (applies only for password changes and new users)
 - Maximum customer name length lowered to 150 character
 - Maximum project name length lowered to 150 character
 - Maximum activity name length lowered to 150 character
 - Added new permission: `manage_invoice_template`
   - Removed permissions: `view_invoice_template`, `create_invoice_template`, `edit_invoice_template`, `delete_invoice_template`
-- Removed permission: `view_invoice` (using `create_export` only)
+- Removed permission: `view_export` (using `create_export` only)
+
+### Developer: BC breaks
+
 - Custom export renderer need to check for usage of `Timesheet::getEnd()` as running entries can now be exported as well
 
 ## [1.1](https://github.com/kevinpapst/kimai2/releases/tag/1.1)
 
 [Update as usual](https://www.kimai.org/documentation/updates.html), nothing special for this release if you upgrade from 1.0 / 1.0.1.
 
-## [1.0.1](https://github.com/kevinpapst/kimai2/releases/tag/1.0.1)
-
-[Update as usual](https://www.kimai.org/documentation/updates.html), nothing special for this release if you upgrade from 1.0.
-
 ## [1.0](https://github.com/kevinpapst/kimai2/releases/tag/1.0)
 
 This release contains several changes, as I still have the goal to stabilize the code base to prevent 

assets/app.js

@@ -11,27 +11,75 @@ global.$ = global.jQuery = $;
 
 require('bootstrap-sass');
 require('jquery-slimscroll');
-require('bootstrap-select');
+
+require('select2');
+require('select2/dist/js/i18n/ar');
+require('select2/dist/js/i18n/cs');
+require('select2/dist/js/i18n/da');
+require('select2/dist/js/i18n/de');
+require('select2/dist/js/i18n/el');
+require('select2/dist/js/i18n/es');
+require('select2/dist/js/i18n/eu');
+require('select2/dist/js/i18n/fa');
+require('select2/dist/js/i18n/fi');
+require('select2/dist/js/i18n/fr');
+require('select2/dist/js/i18n/he');
+require('select2/dist/js/i18n/hu');
+require('select2/dist/js/i18n/it');
+require('select2/dist/js/i18n/ja');
+require('select2/dist/js/i18n/ko');
+require('select2/dist/js/i18n/nb');
+require('select2/dist/js/i18n/nl');
+require('select2/dist/js/i18n/pl');
+require('select2/dist/js/i18n/pt');
+require('select2/dist/js/i18n/pt-BR');
+require('select2/dist/js/i18n/ro');
+require('select2/dist/js/i18n/ru');
+require('select2/dist/js/i18n/sk');
+require('select2/dist/js/i18n/sv');
+require('select2/dist/js/i18n/tr');
+require('select2/dist/js/i18n/vi');
+require('select2/dist/js/i18n/zh-CN');
 
 const Moment = require('moment');
 global.moment = Moment;
 require('moment/locale/ar');
+require('moment/locale/cs');
+require('moment/locale/da');
 require('moment/locale/de');
+require('moment/locale/de-at');
+require('moment/locale/de-ch');
+require('moment/locale/el');
+require('moment/locale/eo');
 require('moment/locale/es');
+require('moment/locale/eu');
+require('moment/locale/fa');
+require('moment/locale/fi');
+require('moment/locale/fo');
 require('moment/locale/fr');
+require('moment/locale/he');
 require('moment/locale/hu');
 require('moment/locale/it');
 require('moment/locale/ja');
 require('moment/locale/ko');
+require('moment/locale/nb');
+require('moment/locale/nl');
+require('moment/locale/pl');
+require('moment/locale/pt');
 require('moment/locale/pt-br');
+require('moment/locale/ro');
 require('moment/locale/ru');
 require('moment/locale/sk');
 require('moment/locale/sv');
+require('moment/locale/tr');
+require('moment/locale/vi');
+require('moment/locale/zh-cn');
 
 require('daterangepicker');
 
 // ------ AdminLTE framework ------
-require('../vendor/kevinpapst/adminlte-bundle/Resources/assets/admin-lte.scss');
+require('./sass/bootstrap.scss');
+require('./sass/fontawesome.scss');
 require('admin-lte/dist/css/AdminLTE.min.css');
 require('admin-lte/dist/css/skins/_all-skins.css');
 require('../vendor/kevinpapst/adminlte-bundle/Resources/assets/admin-lte-extensions.scss');
@@ -46,6 +94,10 @@ require('./sass/app.scss');
 
 // ------ Kimai itself ------
 require('./js/KimaiWebLoader.js');
+global.KimaiPaginatedBoxWidget = require('./js/widgets/KimaiPaginatedBoxWidget').default;
+global.KimaiReloadPageWidget = require('./js/widgets/KimaiReloadPageWidget').default;
+global.KimaiCookies = require('./js/widgets/KimaiCookies').default;
+global.KimaiStorage = require('./js/widgets/KimaiStorage').default;
 
 // ------ Autocomplete for tags only ------
-require('jquery-ui/ui/widgets/autocomplete');
+require('jquery-ui/ui/widgets/autocomplete');

assets/calendar.js

@@ -1,17 +1,39 @@
 
+// can be removed, once fullcalendar was updated and works without draggable jquery ui objects
+require('jquery-ui/ui/widgets/draggable');
+
 require('fullcalendar');
 require('fullcalendar/dist/gcal.min');
 
-require('fullcalendar/dist/locale/de');
-require('fullcalendar/dist/locale/it');
-require('fullcalendar/dist/locale/fr');
-require('fullcalendar/dist/locale/es');
-require('fullcalendar/dist/locale/ru');
 require('fullcalendar/dist/locale/ar');
+require('fullcalendar/dist/locale/cs');
+require('fullcalendar/dist/locale/da');
+require('fullcalendar/dist/locale/de');
+require('fullcalendar/dist/locale/de-at');
+require('fullcalendar/dist/locale/de-ch');
+require('fullcalendar/dist/locale/el');
+require('fullcalendar/dist/locale/es');
+require('fullcalendar/dist/locale/eu');
+require('fullcalendar/dist/locale/fa');
+require('fullcalendar/dist/locale/fi');
+require('fullcalendar/dist/locale/fr');
+require('fullcalendar/dist/locale/he');
 require('fullcalendar/dist/locale/hu');
-require('fullcalendar/dist/locale/pt-br');
-require('fullcalendar/dist/locale/sv');
+require('fullcalendar/dist/locale/it');
 require('fullcalendar/dist/locale/ja');
+require('fullcalendar/dist/locale/ko');
+require('fullcalendar/dist/locale/nb');
+require('fullcalendar/dist/locale/nl');
+require('fullcalendar/dist/locale/pl');
+require('fullcalendar/dist/locale/pt');
+require('fullcalendar/dist/locale/pt-br');
+require('fullcalendar/dist/locale/ro');
+require('fullcalendar/dist/locale/ru');
 require('fullcalendar/dist/locale/sk');
+require('fullcalendar/dist/locale/sv');
+require('fullcalendar/dist/locale/tr');
+require('fullcalendar/dist/locale/zh-cn');
+require('fullcalendar/dist/locale/vi');
+require('fullcalendar/dist/locale/en-gb'); // the last imported file is used as fallback for locales that do not exist (like EO)
 
 require('fullcalendar/dist/fullcalendar.min.css');

assets/invoice-pdf.js

@@ -0,0 +1,2 @@
+
+require('./sass/invoice-pdf.scss');

assets/invoice.js

@@ -0,0 +1,2 @@
+
+require('./sass/invoice.scss');

assets/js/KimaiLoader.js

@@ -16,7 +16,6 @@ import KimaiContainer from "./KimaiContainer";
 import KimaiActiveRecordsDuration from './plugins/KimaiActiveRecordsDuration.js';
 import KimaiDatatableColumnView from './plugins/KimaiDatatableColumnView.js';
 import KimaiThemeInitializer from "./plugins/KimaiThemeInitializer";
-import KimaiJqueryPluginInitializer from "./plugins/KimaiJqueryPluginInitializer";
 import KimaiDateRangePicker from "./plugins/KimaiDateRangePicker";
 import KimaiDatatable from "./plugins/KimaiDatatable";
 import KimaiToolbar from "./plugins/KimaiToolbar";
@@ -31,30 +30,39 @@ import KimaiEvent from "./plugins/KimaiEvent";
 import KimaiAPILink from "./plugins/KimaiAPILink";
 import KimaiAlert from "./plugins/KimaiAlert";
 import KimaiAutocomplete from "./plugins/KimaiAutocomplete";
-import KimaiToolbarAction from "./plugins/KimaiToolbarAction";
+import KimaiFormSelect from "./plugins/KimaiFormSelect";
+import KimaiForm from "./plugins/KimaiForm";
+import KimaiDatePicker from "./plugins/KimaiDatePicker";
+import KimaiConfirmationLink from "./plugins/KimaiConfirmationLink";
+import KimaiMultiUpdateTable from "./plugins/KimaiMultiUpdateTable";
+import KimaiDateUtils from "./plugins/KimaiDateUtils";
+import KimaiEscape from "./plugins/KimaiEscape";
 
 export default class KimaiLoader {
 
     constructor(configurations, translations) {
         // set the current locale for all javascript components
-        moment.locale(configurations['locale']);
+        moment.locale(configurations['locale'].replace('_', '-').toLowerCase());
 
         const kimai = new KimaiContainer(
             new KimaiConfiguration(configurations),
             new KimaiTranslation(translations)
         );
 
+        kimai.registerPlugin(new KimaiEscape());
         kimai.registerPlugin(new KimaiEvent());
         kimai.registerPlugin(new KimaiAPI());
         kimai.registerPlugin(new KimaiAlert());
-        kimai.registerPlugin(new KimaiActiveRecordsDuration('[data-since]'));
+        kimai.registerPlugin(new KimaiDateUtils());
+        kimai.registerPlugin(new KimaiFormSelect('.selectpicker'));
+        kimai.registerPlugin(new KimaiConfirmationLink('confirmation-link'));
+        kimai.registerPlugin(new KimaiActiveRecordsDuration());
         kimai.registerPlugin(new KimaiDatatableColumnView('data-column-visibility'));
-        kimai.registerPlugin(new KimaiThemeInitializer());
-        kimai.registerPlugin(new KimaiJqueryPluginInitializer());
-        kimai.registerPlugin(new KimaiDateRangePicker('.content-wrapper'));
-        kimai.registerPlugin(new KimaiDateTimePicker('.content-wrapper'));
-        kimai.registerPlugin(new KimaiDatatable('table.dataTable'));
-        kimai.registerPlugin(new KimaiToolbar());
+        kimai.registerPlugin(new KimaiDateRangePicker('input[data-daterangepickerenable="on"]'));
+        kimai.registerPlugin(new KimaiDateTimePicker('input[data-datetimepicker="on"]'));
+        kimai.registerPlugin(new KimaiDatePicker('input[data-datepickerenable="on"]'));
+        kimai.registerPlugin(new KimaiDatatable('section.content', 'table.dataTable'));
+        kimai.registerPlugin(new KimaiToolbar('form.searchform', 'toolbar-action'));
         kimai.registerPlugin(new KimaiSelectDataAPI('select[data-related-select]'));
         kimai.registerPlugin(new KimaiAlternativeLinks('.alternative-link'));
         kimai.registerPlugin(new KimaiAjaxModalForm('.modal-ajax-form'));
@@ -62,7 +70,9 @@ export default class KimaiLoader {
         kimai.registerPlugin(new KimaiActiveRecords('li.messages-menu', 'li.messages-menu-empty'));
         kimai.registerPlugin(new KimaiAPILink('api-link'));
         kimai.registerPlugin(new KimaiAutocomplete('.js-autocomplete'));
-        kimai.registerPlugin(new KimaiToolbarAction('toolbar-action'));
+        kimai.registerPlugin(new KimaiForm());
+        kimai.registerPlugin(new KimaiThemeInitializer());
+        kimai.registerPlugin(new KimaiMultiUpdateTable());
         //kimai.registerPlugin(new KimaiPauseRecord('li.messages-menu ul.menu li'));
 
         // notify all listeners that Kimai plugins can now be registered

assets/js/KimaiPlugin.js

@@ -42,7 +42,7 @@ export default class KimaiPlugin {
     }
 
     /**
-     * This function returns null, if xou call it BEFORE init().
+     * This function returns null, if you call it BEFORE init().
      *
      * @returns {KimaiContainer}
      */
@@ -50,4 +50,27 @@ export default class KimaiPlugin {
         return this._core;
     }
 
+    /**
+     * @param {string} name
+     * @returns {(string|number|boolean)}
+     */
+    getConfiguration(name) {
+        return this.getContainer().getConfiguration().get(name);
+    }
+
+    /**
+     * @param {string} name
+     * @returns {KimaiPlugin}
+     */
+    getPlugin(name) {
+        return this.getContainer().getPlugin(name);
+    }
+
+    /**
+     * @param {string} title
+     * @returns {string}
+     */
+    escape(title) {
+        return this.getPlugin('escape').escapeForHtml(title);
+    };
 }

assets/js/KimaiTranslation.js

@@ -11,14 +11,25 @@
 
 export default class KimaiTranslation {
 
+    /**
+     * @param {Array<string, string>} translations
+     */
     constructor(translations) {
         this._translations = translations;
     }
 
+    /**
+     * @param {string} name
+     * @returns {string}
+     */
     get(name) {
         return this._translations[name];
     }
 
+    /**
+     * @param {string} name
+     * @returns {boolean}
+     */
     has(name) {
         return name in this._translations;
     }

assets/js/plugins/KimaiAPI.js

@@ -33,7 +33,30 @@ export default class KimaiAPI extends KimaiPlugin {
         });
     }
 
+    post(url, data, callbackSuccess, callbackError) {
+        if (callbackError === null || callbackError === undefined) {
+            callbackError = this.getPostErrorHandler();
+        }
+
+        jQuery.ajax({
+            url: url,
+            headers: {
+                'X-AUTH-SESSION': true,
+                'Content-Type':'application/json'
+            },
+            method: 'POST',
+            data: data,
+            dataType: 'json',
+            success: callbackSuccess,
+            error: callbackError
+        });
+    }
+
     patch(url, data, callbackSuccess, callbackError) {
+        if (callbackError === null || callbackError === undefined) {
+            callbackError = this.getPatchErrorHandler();
+        }
+
         jQuery.ajax({
             url: url,
             headers: {
@@ -49,6 +72,10 @@ export default class KimaiAPI extends KimaiPlugin {
     }
 
     delete(url, callbackSuccess, callbackError) {
+        if (callbackError === null || callbackError === undefined) {
+            callbackError = this.getDeleteErrorHandler();
+        }
+
         jQuery.ajax({
             url: url,
             headers: {
@@ -62,4 +89,64 @@ export default class KimaiAPI extends KimaiPlugin {
         });
     }
 
+    getDeleteErrorHandler() {
+        const self = this;
+        return function(xhr, err) {
+            self.handleError('action.delete.error', xhr, err);
+        };
+    }
+
+    getPatchErrorHandler() {
+        const self = this;
+        return function(xhr, err) {
+            self.handleError('action.update.error', xhr, err);
+        };
+    }
+
+    getPostErrorHandler() {
+        const self = this;
+        return function(xhr, err) {
+            self.handleError('action.update.error', xhr, err);
+        };
+    }
+
+    /**
+     * @param {string} message
+     * @param {jqXHR} xhr
+     * @param {string} err
+     */
+    handleError(message, xhr, err) {
+        let resultError = err;
+        if (xhr.responseJSON && xhr.responseJSON.message) {
+            resultError = xhr.responseJSON.message;
+            // find validation errors
+            if (xhr.status === 400 && xhr.responseJSON.errors) {
+                let collected = ['<u>' + resultError + '</u>'];
+                // form errors that are not attached to a field (like extra fields)
+                if (xhr.responseJSON.errors.errors) {
+                    for (let error of xhr.responseJSON.errors.errors) {
+                        collected.push(error);
+                    }
+                }
+                if (xhr.responseJSON.errors.children) {
+                    for (let field in xhr.responseJSON.errors.children) {
+                        let tmpField = xhr.responseJSON.errors.children[field];
+                        if (tmpField.hasOwnProperty('errors') && tmpField.errors.length > 0) {
+                            for (let error of tmpField.errors) {
+                                collected.push(error);
+                            }
+                        }
+                    }
+                }
+                if (collected.length > 0) {
+                    resultError = collected;
+                }
+            }
+        } else if (xhr.status && xhr.statusText) {
+            resultError = '[' + xhr.status + '] ' + xhr.statusText;
+        }
+
+        this.getPlugin('alert').error(message, resultError);
+    }
+
 }

assets/js/plugins/KimaiAPILink.js

@@ -5,7 +5,7 @@
  * file that was distributed with this source code.
  */
 
-import KimaiClickHandlerReducedInTableRow from "./KimaiClickHandlerReducedInTableRow";
+import KimaiPlugin from "../KimaiPlugin";
 
 /**
  * Needs to be initialized with a class name.
@@ -18,7 +18,7 @@ import KimaiClickHandlerReducedInTableRow from "./KimaiClickHandlerReducedInTabl
  *
  * @param selector
  */
-export default class KimaiAPILink extends KimaiClickHandlerReducedInTableRow {
+export default class KimaiAPILink extends KimaiPlugin {
 
     constructor(selector) {
         super();
@@ -75,10 +75,7 @@ export default class KimaiAPILink extends KimaiClickHandlerReducedInTableRow {
             if (attributes.msgError) {
                 message = attributes.msgError;
             }
-            if (xhr.responseJSON && xhr.responseJSON.message) {
-                err = xhr.responseJSON.message;
-            }
-            alert.error(message, err);
+            API.handleError(message, xhr, err);
         };
 
         if (method === 'PATCH') {
@@ -87,6 +84,12 @@ export default class KimaiAPILink extends KimaiClickHandlerReducedInTableRow {
                 data  = attributes.payload;
             }
             API.patch(url, data, successHandle, errorHandle);
+        } else if (method === 'POST') {
+            let data = {};
+            if (attributes.payload) {
+                data  = attributes.payload;
+            }
+            API.post(url, data, successHandle, errorHandle);
         } else if (method === 'DELETE') {
             API.delete(url, successHandle, errorHandle);
         }

assets/js/plugins/KimaiActiveRecords.js

@@ -24,37 +24,39 @@ export default class KimaiActiveRecords extends KimaiPlugin {
     }
 
     init() {
-        const menu = document.querySelector(this.selector);
+        this.menu = document.querySelector(this.selector);
 
         // the menu can be hidden if user has no permissions to see it
-        if (menu === null) {
+        if (this.menu === null) {
             return;
         }
 
-        const dropdown = menu.querySelector('ul.dropdown-menu');
-
-        this.attributes = dropdown.dataset;
-        this.itemList = dropdown.querySelector('li > ul.menu');
-        this.label = menu.querySelector('a > span.label');
+        this.attributes = this.menu.dataset;
 
         const self = this;
         const handle = function() { self.reloadActiveRecords(); };
 
         document.addEventListener('kimai.timesheetUpdate', handle);
+        document.addEventListener('kimai.timesheetDelete', handle);
         document.addEventListener('kimai.activityUpdate', handle);
+        document.addEventListener('kimai.activityDelete', handle);
         document.addEventListener('kimai.projectUpdate', handle);
+        document.addEventListener('kimai.projectDelete', handle);
         document.addEventListener('kimai.customerUpdate', handle);
-    }
-
-    emptyList() {
-        this.itemList.innerHTML = '';
+        document.addEventListener('kimai.customerDelete', handle);
     }
 
     _toggleMenu(hasEntries) {
-        const menu = document.querySelector(this.selector);
-        const menuEmpty = document.querySelector(this.selectorEmpty);
+        this.menu.style.display = hasEntries ? 'inline-block' : 'none';
+        if (!hasEntries) {
+            // make sure that template entries in the menu are removed, otherwise they
+            // might still be shown in the browsers title
+            for (let record of this.menu.querySelectorAll('[data-since]')) {
+                record.dataset['since'] = '';
+            }
+        }
 
-        menu.style.display = hasEntries ? 'inline-block' : 'none';
+        const menuEmpty = document.querySelector(this.selectorEmpty);
         if (menuEmpty !== null) {
             menuEmpty.style.display = !hasEntries ? 'inline-block' : 'none';
         }
@@ -63,42 +65,52 @@ export default class KimaiActiveRecords extends KimaiPlugin {
     setEntries(entries) {
         this._toggleMenu(entries.length > 0);
 
+        const template = this.menu.querySelector('[data-template="active-record"]');
+
+        const label = this.menu.querySelector('a > span.label');
+        if (label !== null) {
+            label.innerText = entries.length === 0 ? '' : entries.length;
+        }
+
         if (entries.length === 0) {
-            this.label.innerText = '';
-            this.emptyList();
             return;
         }
 
-        let htmlToInsert = '';
-        const durations = this.getContainer().getPlugin('timesheet-duration');
-
-        for (let timesheet of entries) {
-            htmlToInsert +=
-                    `<li>` +
-                        `<a href="${ this.attributes['href'].replace('000', timesheet.id) }" data-event="kimai.timesheetStop kimai.timesheetUpdate" class="api-link" data-method="PATCH" data-msg-error="timesheet.stop.error" data-msg-success="timesheet.stop.success">` +
-                            `<div class="pull-left">` +
-                                `<i class="${ this.attributes['icon'] } fa-2x"></i>` +
-                            `</div>` +
-                            `<h4>` +
-                                `<span>${ timesheet.activity.name }</span>` +
-                                `<small>` +
-                                    `<span data-title="true" data-since="${ timesheet.begin }" data-format="${ this.attributes['format'] }">${ durations.formatDuration(timesheet.duration, this.attributes['format']) }</span>` +
-                                `</small>` +
-                            `</h4>` +
-                            `<p>${ timesheet.project.name } (${ timesheet.project.customer.name })</p>` +
-                        `</a>` +
-                    `</li>`;
-        }
-
-        if (this.label.dataset.warning < entries.length) {
-            this.label.classList = 'label label-danger';
+        if (template === null) {
+            this._replaceInNode(this.menu, entries[0]);
         } else {
-            this.label.classList = 'label label-warning';
-        }
-        this.label.innerText = entries.length;
-        this.itemList.innerHTML = htmlToInsert;
+            const container = template.parentElement;
+            container.innerHTML = '';
 
-        durations.updateRecords();
+            for (let timesheet of entries) {
+                const newNode = template.cloneNode(true);
+                container.appendChild(this._replaceInNode(newNode, timesheet));
+            }
+        }
+
+        this.getContainer().getPlugin('timesheet-duration').updateRecords();
+    }
+
+    _replaceInNode(node, timesheet) {
+        const date = this.getContainer().getPlugin('date');
+        const allReplacer = node.querySelectorAll('[data-replacer]');
+        for (let node of allReplacer) {
+            const replacerName = node.dataset['replacer'];
+            if (replacerName === 'url') {
+                node.href = this.attributes['href'].replace('000', timesheet.id);
+            } else if (replacerName === 'activity') {
+                node.innerText = timesheet.activity.name;
+            } else if (replacerName === 'project') {
+                node.innerText = timesheet.project.name;
+            } else if (replacerName === 'customer') {
+                node.innerText = timesheet.project.customer.name;
+            } else if (replacerName === 'duration') {
+                node.dataset['since'] = timesheet.begin;
+                node.innerText = date.formatDuration(timesheet.duration);
+            }
+        }
+
+        return node;
     }
 
     reloadActiveRecords() {

assets/js/plugins/KimaiActiveRecordsDuration.js

@@ -9,21 +9,16 @@
  * [KIMAI] KimaiActiveRecordsDuration: activate the updates for all active timesheet records on this page
  */
 
-import moment from 'moment';
 import KimaiPlugin from '../KimaiPlugin';
 
 export default class KimaiActiveRecordsDuration extends KimaiPlugin {
 
-    constructor(selector) {
-        super();
-        this.selector = selector;
-    }
-
     getId() {
         return 'timesheet-duration';
     }
 
     init() {
+        this.updateBrowserTitle = !!this.getConfiguration('updateBrowserTitle');
         this.updateRecords();
         const self = this;
         const handle = function() { self.updateRecords(); };
@@ -38,20 +33,29 @@ export default class KimaiActiveRecordsDuration extends KimaiPlugin {
 
     updateRecords() {
         let durations = [];
-        const activeRecords = document.querySelectorAll(this.selector);
+        const activeRecords = document.querySelectorAll('[data-since]:not([data-since=""])');
 
         if (activeRecords.length === 0) {
-            document.title = document.querySelector('body').dataset['title'];
+            if (this.updateBrowserTitle) {
+                if (document.body.dataset['title'] === undefined) {
+                    this.updateBrowserTitle = false;
+                } else {
+                    document.title = document.body.dataset['title'];
+                }
+            }
             return;
         }
 
-        for(let record of activeRecords) {
-            const since = record.getAttribute('data-since');
-            const format = record.getAttribute('data-format');
-            const duration = this.formatDuration(since, format);
-            if (record.getAttribute('data-title') !== null) {
+        const DATE = this.getPlugin('date');
+
+        for (let record of activeRecords) {
+            const since = record.dataset['since'];
+            const duration = DATE.formatDuration(since);
+            // only use the ones from the menu for the title
+            if (record.dataset['replacer'] !== undefined && record.dataset['title'] !== null && duration !== '?') {
                 durations.push(duration);
             }
+            // but update all on the page (running entries in list pages)
             record.textContent = duration;
         }
 
@@ -59,6 +63,10 @@ export default class KimaiActiveRecordsDuration extends KimaiPlugin {
             return;
         }
 
+        if (!this.updateBrowserTitle) {
+            return;
+        }
+
         let title = durations.shift();
         let prefix = ' | ';
 
@@ -67,19 +75,4 @@ export default class KimaiActiveRecordsDuration extends KimaiPlugin {
         }
         document.title = title;
     }
-
-    formatDuration(since, format) {
-        const duration = moment.duration(moment(new Date()).diff(moment(since)));
-
-        let hours = parseInt(duration.asHours()).toString();
-        let minutes = duration.minutes();
-        let seconds = duration.seconds();
-
-        // special case for hours, as they can overflow the 24h barrier - Kimai does not support days as duration unit
-        if (hours.length === 1) {
-            hours = '0' + hours;
-        }
-
-        return format.replace('%h', hours).replace('%m', ('0'+minutes).substr(-2)).replace('%s', ('0'+seconds).substr(-2));
-    }
 }

assets/js/plugins/KimaiAjaxModalForm.js

@@ -13,9 +13,9 @@
  */
 
 import jQuery from 'jquery';
-import KimaiClickHandlerReducedInTableRow from "./KimaiClickHandlerReducedInTableRow";
+import KimaiReducedClickHandler from "./KimaiReducedClickHandler";
 
-export default class KimaiAjaxModalForm extends KimaiClickHandlerReducedInTableRow {
+export default class KimaiAjaxModalForm extends KimaiReducedClickHandler {
 
     constructor(selector) {
         super();
@@ -28,8 +28,33 @@ export default class KimaiAjaxModalForm extends KimaiClickHandlerReducedInTableR
 
     init() {
         const self = this;
+        this.isDirty = false;
 
-        this._addClickHandlerReducedInTableRow(this.selector, function(href) {
+        this.modal = jQuery('#remote_form_modal');
+        this.modal
+            .on('hide.bs.modal', function (e) {
+                if (self.isDirty) {
+                    if (jQuery('#remote_form_modal .modal-body .remote_modal_is_dirty_warning').length === 0) {
+                        const msg = self.getContainer().getTranslation().get('modal.dirty');
+                        jQuery('#remote_form_modal .modal-body').prepend('<p class="'+(self.modal.hasClass('modal-danger') ? 'well well-sm ' : '') + 'text-danger small remote_modal_is_dirty_warning">' + msg + '</p>');
+                    }
+                    e.preventDefault();
+                    return;
+                }
+                jQuery(self._getFormIdentifier()).off('change', self._isDirtyHandler);
+                self.isDirty = false;
+                self.getContainer().getPlugin('event').trigger('modal-hide');
+            })
+            .on('hidden.bs.modal', function () {
+                // kill all references, so GC can kick in
+                self.getContainer().getPlugin('form').destroyForm(self._getFormIdentifier());
+                jQuery('#remote_form_modal .modal-body').replaceWith('');
+            })
+            .on('show.bs.modal', function () {
+                self.getContainer().getPlugin('event').trigger('modal-show');
+            });
+
+        this._addClickHandler(this.selector, function(href) {
             self.openUrlInModal(href);
         });
     }
@@ -39,12 +64,9 @@ export default class KimaiAjaxModalForm extends KimaiClickHandlerReducedInTableR
 
         if (errorHandler === undefined) {
             errorHandler = function(xhr, err) {
-                if (xhr.status !== undefined && xhr.status === 403) {
-                    const alert = self.getContainer().getPlugin('alert');
-                    alert.error(xhr.statusText);
-                    return;
+                if (xhr.status === undefined || xhr.status !== 403) {
+                    window.location = url;
                 }
-                window.location = url;
             };
         }
 
@@ -57,24 +79,33 @@ export default class KimaiAjaxModalForm extends KimaiClickHandlerReducedInTableR
         });
     }
 
+    /**
+     * Returns the CSS selector for the modal form.
+     * 
+     * @returns {string}
+     * @private
+     */
+    _getFormIdentifier() {
+        return '#remote_form_modal .modal-content form';
+    }
+
     _openFormInModal(html) {
         const self = this;
 
-        // the modal that we use to render the form in
-        let formIdentifier = '#remote_form_modal .modal-content form';
+        let formIdentifier = this._getFormIdentifier();
         // if any of these is found in a response, the form will be re-displayed
         let flashErrorIdentifier = 'div.alert-error';
         // messages to show above the form
         let flashMessageIdentifier = 'div.alert';
         let form = jQuery(formIdentifier);
-        let remoteModal = jQuery('#remote_form_modal');
+        let remoteModal = this.modal;
 
         // will be (re-)activated later
         form.off('submit');
 
         // load new form from given content
-        if (jQuery(html).find('#form_modal .modal-content').length > 0 ) {
-            // switch classes, in case the modal type changed
+        if (jQuery(html).find('#form_modal .modal-content').length > 0) {
+            // Support changing modal importance/types
             remoteModal.on('hidden.bs.modal', function () {
                 if (remoteModal.hasClass('modal-danger')) {
                     remoteModal.removeClass('modal-danger');
@@ -85,16 +116,26 @@ export default class KimaiAjaxModalForm extends KimaiClickHandlerReducedInTableR
                 remoteModal.addClass('modal-danger');
             }
 
+            // Support changing modal sizes
+            let modalDialog = remoteModal.find('.modal-dialog');
+            let largeModal = jQuery(html).find('.modal-dialog').hasClass('modal-lg');
+            if (largeModal && !modalDialog.hasClass('modal-lg')) {
+                modalDialog.addClass('modal-lg');
+            }
+            if (!largeModal && modalDialog.hasClass('modal-lg')) {
+                modalDialog.removeClass('modal-lg');
+            }
+
             jQuery('#remote_form_modal .modal-content').replaceWith(
                 jQuery(html).find('#form_modal .modal-content')
             );
 
-            // activate new loaded widgets
-            self.getContainer().getPlugin('date-time-picker').activateDateTimePicker(formIdentifier);
-            self.getContainer().getPlugin('autocomplete').activateAutocomplete(formIdentifier + " .js-autocomplete");
+            jQuery('#remote_form_modal [data-dismiss=modal]').on('click', function() {
+                self.isDirty = false;
+            });
 
-            // activate selectpicker if beta test is active
-            jQuery('.selectpicker').selectpicker('refresh');
+            // activate new loaded widgets
+            self.getContainer().getPlugin('form').activateForm(formIdentifier);
         }
 
         // show error flash messages
@@ -113,18 +154,24 @@ export default class KimaiAjaxModalForm extends KimaiClickHandlerReducedInTableR
         });
         // -----------------------------------------------------------------------
 
-        // workaround for autofocus attribute, as the modal "steals" it
-        remoteModal.on('shown.bs.modal', function () {
-            jQuery(this).find('input[type=text],textarea,select').filter(':not("[data-datetimepicker=on]")').filter(':visible:first').focus().delay(1000).focus();
-        });
-
         remoteModal.modal('show');
 
         // the new form that was loaded via ajax
         form = jQuery(formIdentifier);
 
+        this._isDirtyHandler = function(e) {
+            self.isDirty = true;
+        }
+        form.on('change', this._isDirtyHandler);
+
         // click handler for modal save button, to send forms via ajax
-        form.on('submit', function(event){
+        form.on('submit', function(event) {
+            // if the form has a target, we let the normal HTML flow happen
+            if (form.attr('target') !== undefined) {
+                return true;
+            }
+
+            // otherwise we do some AJAX magic to process the form in the background
             const btn = jQuery(formIdentifier + ' button[type=submit]').button('loading');
             const eventName = form.attr('data-form-event');
             const events = self.getContainer().getPlugin('event');
@@ -165,6 +212,7 @@ export default class KimaiAjaxModalForm extends KimaiClickHandlerReducedInTableR
                         if (msg === null || msg === undefined) {
                             msg = 'action.update.success';
                         }
+                        self.isDirty = false;
                         remoteModal.modal('hide');
                         alert.success(msg);
                     }
@@ -181,6 +229,10 @@ export default class KimaiAjaxModalForm extends KimaiClickHandlerReducedInTableR
                         err = '[' + xhr.status +'] ' + xhr.statusText;
                     }
                     alert.error(message, err);
+                    // this is useful for changing form fields and retrying to save (and in development to test form changes)
+                    setTimeout(function() {
+                        btn.button('reset');
+                    }, 1500);
                 }
             });
         });

assets/js/plugins/KimaiAlert.js

@@ -18,6 +18,10 @@ export default class KimaiAlert extends KimaiPlugin {
         return 'alert';
     }
 
+    /**
+     * @param {string} title
+     * @param {string|array} message
+     */
     error(title, message) {
         const translation = this.getContainer().getTranslation();
         if (translation.has(title)) {
@@ -26,14 +30,48 @@ export default class KimaiAlert extends KimaiPlugin {
         if (translation.has(message)) {
             message = translation.get(message);
         }
-        Swal.fire({
-            type: 'error',
-            title: title.replace('%reason%', ''),
-            text: message,
-        });
+
+        if (Array.isArray(message)) {
+            Swal.fire({
+                icon: 'error',
+                title: title.replace('%reason%', ''),
+                html: message.join('<br>'),
+            });
+        } else {
+            Swal.fire({
+                icon: 'error',
+                title: title.replace('%reason%', ''),
+                text: message,
+            });
+        }
+    }
+
+    warning(message) {
+        this._show('warning', message);
     }
 
     success(message) {
+        this._toast('success', message);
+    }
+
+    info(message) {
+        this._show('info', message);
+    }
+
+    _show(type, message) {
+        const translation = this.getContainer().getTranslation();
+
+        if (translation.has(message)) {
+            message = translation.get(message);
+        }
+
+        Swal.fire({
+            icon: type,
+            title: message,
+        });
+    }
+
+    _toast(type, message) {
         const translation = this.getContainer().getTranslation();
 
         if (translation.has(message)) {
@@ -42,10 +80,11 @@ export default class KimaiAlert extends KimaiPlugin {
 
         Swal.fire({
             timer: 2000,
+            timerProgressBar: true,
             toast: true,
-            position: 'top-end',
+            position: 'top',
             showConfirmButton: false,
-            type: 'success',
+            icon: type,
             title: message,
         });
     }
@@ -65,7 +104,7 @@ export default class KimaiAlert extends KimaiPlugin {
 
         Swal.fire({
             title: message,
-            type: 'question',
+            icon: 'question',
             showCancelButton: true,
             confirmButtonText: translation.get('confirm'),
             cancelButtonText: translation.get('cancel')

assets/js/plugins/KimaiAlternativeLinks.js

@@ -13,9 +13,9 @@
  */
 
 import jQuery from 'jquery';
-import KimaiClickHandlerReducedInTableRow from "./KimaiClickHandlerReducedInTableRow";
+import KimaiReducedClickHandler from "./KimaiReducedClickHandler";
 
-export default class KimaiAlternativeLinks extends KimaiClickHandlerReducedInTableRow {
+export default class KimaiAlternativeLinks extends KimaiReducedClickHandler {
 
     constructor(selector) {
         super();
@@ -23,7 +23,7 @@ export default class KimaiAlternativeLinks extends KimaiClickHandlerReducedInTab
     }
 
     init() {
-        this._addClickHandlerReducedInTableRow(this.selector, function(href) {
+        this._addClickHandler(this.selector, function(href) {
             window.location = href;
         });
     }

assets/js/plugins/KimaiAutocomplete.js

@@ -20,7 +20,7 @@ export default class KimaiAutocomplete extends KimaiPlugin {
     }
 
     init() {
-        this.activateAutocomplete(this.selector);
+        this.minChars = this.getConfiguration('autoComplete');
     }
 
     getId() {
@@ -35,60 +35,72 @@ export default class KimaiAutocomplete extends KimaiPlugin {
         return this.splitTagList(term).pop();
     }
 
-    activateAutocomplete(selector)
-    {
-        const apiUrl = jQuery(selector).attr('data-autocomplete-url');
+    activateAutocomplete(selector) {
         const self = this;
-        const API = self.getContainer().getPlugin('api');
+        
+        jQuery(selector + ' ' + this.selector).each(function(index) {
+            const currentField = jQuery(this);
+            const apiUrl = currentField.attr('data-autocomplete-url');
+            const API = self.getContainer().getPlugin('api');
 
-        jQuery(selector)
-            // don't navigate away from the field on tab when selecting an item
-            .on("keydown", function (event) {
-                if (event.keyCode === jQuery.ui.keyCode.TAB &&
-                    jQuery(this).autocomplete("instance").menu.active) {
-                    event.preventDefault();
-                }
-            })
-            .autocomplete({
-                source: function (request, response) {
-                    const lastEntry = self.extractLastTag(request.term);
-                    API.get(apiUrl, {'name': lastEntry}, function(data){
-                        response(data);
-                    });
-                },
-                search: function () {
-                    // custom minLength
-                    var term = self.extractLastTag(this.value);
-                    if (term.length < 2) {
-                        return false;
+            currentField
+                // don't navigate away from the field on tab when selecting an item
+                .on("keydown", function (event) {
+                    if (event.keyCode === jQuery.ui.keyCode.TAB &&
+                        jQuery(this).autocomplete("instance").menu.active) {
+                        event.preventDefault();
                     }
-                },
-                focus: function () {
-                    // prevent value inserted on focus
-                    return false;
-                },
-                select: function (event, ui) {
-                    var terms = self.splitTagList(this.value);
+                })
+                .autocomplete({
+                        source: function (request, response) {
+                            const lastEntry = self.extractLastTag(request.term);
+                            API.get(apiUrl, {'name': lastEntry}, function(data){
+                                response(data);
+                            });
+                        },
+                        search: function () {
+                            // custom minLength
+                            var term = self.extractLastTag(this.value);
+                            if (term.length < self.minChars) {
+                                return false;
+                            }
+                        },
+                        focus: function () {
+                            // prevent value inserted on focus
+                            return false;
+                        },
+                        select: function (event, ui) {
+                            var terms = self.splitTagList(this.value);
 
-                    // remove the current input
-                    terms.pop();
+                            // remove the current input
+                            terms.pop();
 
-                    // check if selected tag is already in list
-                    if (!terms.includes(ui.item.value)) {
-                        // add the selected item
-                        terms.push(ui.item.value);
+                            // check if selected tag is already in list
+                            if (!terms.includes(ui.item.value)) {
+                                // add the selected item
+                                terms.push(ui.item.value);
+                            }
+                            // add placeholder to get the comma-and-space at the end
+                            terms.push("");
+
+                            this.value = terms.join(", ");
+
+                            $(this).trigger('change');
+
+                            return false;
+                        }
                     }
-                    // add placeholder to get the comma-and-space at the end
-                    terms.push("");
+                )
+            ;
+        });
+    }
 
-                    this.value = terms.join(", ");
-
-                    $(this).trigger('change');
-
-                    return false;
-                }
-            }
-        );
+    destroyAutocomplete(selector) {
+        jQuery(selector + ' ' + this.selector).each(function(index) {
+            const currentField = jQuery(this);
+            currentField.autocomplete("destroy");
+            currentField.removeData('autocomplete');
+        });
     }
 
 }

assets/js/plugins/KimaiConfirmationLink.js

@@ -0,0 +1,70 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+import KimaiPlugin from "../KimaiPlugin";
+
+/**
+ * Needs to be initialized with a class name.
+ *
+ * Allows to assign the given selector to any element, which then is used as click-handler
+ * calling an API method and trigger the event from data-event attribute afterwards.
+ *
+ * @param selector
+ */
+export default class KimaiConfirmationLink extends KimaiPlugin {
+
+    constructor(selector) {
+        super();
+        this.selector = selector;
+    }
+
+    init() {
+        const self = this;
+        document.addEventListener('click', function(event) {
+            let target = event.target;
+            while (target !== null && !target.matches('body')) {
+                if (target.classList.contains(self.selector)) {
+                    const attributes = target.dataset;
+
+                    // is this a link? 
+                    let url = attributes['href'];
+                    // or another HTML element with a custom href 
+                    if (!url) {
+                        url = target.getAttribute('href');
+                    }
+                    
+                    // or is this a button?
+                    let form = null;
+                    if (target.type === 'submit' && target.form !== undefined) {
+                        form = target.form;
+                    }
+
+                    if (attributes.question !== undefined) {
+                        self.getContainer().getPlugin('alert').question(attributes.question, function(value) {
+                            if (value) {
+                                if (form === null) {
+                                    document.location = url;
+                                } else {
+                                    if (url !== null) {
+                                        form.action = url;
+                                    }
+                                    form.submit();
+                                }
+                            }
+                        });
+                    }
+
+                    event.preventDefault();
+                    event.stopPropagation();
+                }
+
+                target = target.parentNode;
+            }
+        });
+    }
+
+}

assets/js/plugins/KimaiDatatable.js

@@ -14,9 +14,10 @@ import KimaiPlugin from "../KimaiPlugin";
 
 export default class KimaiDatatable extends KimaiPlugin {
 
-    constructor(selector) {
+    constructor(contentAreaSelector, tableSelector) {
         super();
-        this.selector = selector;
+        this.contentArea = contentAreaSelector;
+        this.selector = tableSelector;
     }
 
     getId() {
@@ -34,6 +35,8 @@ export default class KimaiDatatable extends KimaiPlugin {
         const attributes = dataTable.dataset;
         const events = attributes['reloadEvent'];
 
+        this.fixDropdowns();
+
         if (events === undefined) {
             return;
         }
@@ -44,18 +47,25 @@ export default class KimaiDatatable extends KimaiPlugin {
         for (let eventName of events.split(' ')) {
             document.addEventListener(eventName, handle);
         }
+
+        document.addEventListener('pagination-change', handle);
+        document.addEventListener('filter-change', handle);
     }
 
     reloadDatatable() {
+        const self = this;
+        const contentArea = this.contentArea;
         const durations = this.getContainer().getPlugin('timesheet-duration');
-        const form = jQuery('.toolbar form');
+        const toolbarSelector = this.getContainer().getPlugin('toolbar').getSelector();
+        
+        const form = jQuery(toolbarSelector);
         let loading = '<div class="overlay"><i class="fas fa-sync fa-spin"></i></div>';
-        jQuery('section.content').append(loading);
+        jQuery(contentArea).append(loading);
 
         // remove the empty fields to prevent errors
-        let formData = jQuery('.toolbar form :input')
+        let formData = jQuery(toolbarSelector + ' :input')
             .filter(function(index, element) {
-                return jQuery(element).val() != '';
+                return jQuery(element).val() !== '';
             })
             .serialize();
 
@@ -64,10 +74,11 @@ export default class KimaiDatatable extends KimaiPlugin {
             type: form.attr('method'),
             data: formData,
             success: function(html) {
-                jQuery('section.content').replaceWith(
-                    jQuery(html).find('section.content')
+                jQuery(contentArea).replaceWith(
+                    jQuery(html).find(contentArea)
                 );
                 durations.updateRecords();
+                self.fixDropdowns();
             },
             error: function(xhr, err) {
                 form.submit();
@@ -75,4 +86,21 @@ export default class KimaiDatatable extends KimaiPlugin {
         });
 
     }
+
+    /**
+     * show dropdown menu upwards, if it is outside the visible viewport
+     */
+    fixDropdowns() {
+        const docHeight = jQuery(document).height();
+        jQuery(this.selector + ' [data-toggle=dropdown]').each(function() {
+            const parent = jQuery(this).parent();
+            const menu = parent.find('.dropdown-menu');
+
+            if (parent && menu) {
+                if ((parent.offset().top + parent.outerHeight() + menu.outerHeight()) > docHeight) {
+                    parent.addClass('dropup').removeClass('dropdown');
+                }
+            }
+        });
+    }
 }

assets/js/plugins/KimaiDatatableColumnView.js

@@ -44,7 +44,7 @@ export default class KimaiDatatableColumnView extends KimaiPlugin {
         });
         for (let checkbox of this.modal.querySelectorAll('form input[type=checkbox]')) {
             checkbox.addEventListener('click', function () {
-                self.changeVisibility(checkbox.getAttribute('name'));
+                self.changeVisibility(checkbox.getAttribute('name'), checkbox.checked);
             });
         }
     }
@@ -55,7 +55,7 @@ export default class KimaiDatatableColumnView extends KimaiPlugin {
         for (let checkbox of form.querySelectorAll('input[type=checkbox]')) {
             settings[checkbox.getAttribute('name')] = checkbox.checked;
         }
-        Cookies.set(form.getAttribute('name'), JSON.stringify(settings), {expires: 365});
+        Cookies.set(form.getAttribute('name'), JSON.stringify(settings), {expires: 365, SameSite: 'Strict'});
         jQuery(this.modal).modal('toggle');
     }
 
@@ -70,24 +70,40 @@ export default class KimaiDatatableColumnView extends KimaiPlugin {
         jQuery(this.modal).modal('toggle');
     }
 
-    changeVisibility(columnName) {
-        const table = document.getElementById('datatable_' + this.id).getElementsByClassName('dataTable')[0];
-        let column = 0;
-        let foundColumn = false;
-        for (let columnElement of table.getElementsByTagName('th')) {
-            if (columnElement.getAttribute('data-field') === columnName) {
-                foundColumn = true;
-                break;
+    changeVisibility(columnName, checked) {
+        const tables = document.getElementsByClassName('datatable_' + this.id);
+        for (let tableBox of tables) {
+            let column = 0;
+            let foundColumn = false;
+            let table = tableBox.getElementsByClassName('dataTable')[0];
+            for (let columnElement of table.getElementsByTagName('th')) {
+                if (columnElement.getAttribute('data-field') === columnName) {
+                    foundColumn = true;
+                    break;
+                }
+
+                if (columnElement.getAttribute('colspan') !== null) {
+                    console.log('Tables with colspans are not supported!');
+                }
+
+                column++;
             }
-            column++;
-        }
 
-        if (!foundColumn) {
-            return;
-        }
+            if (!foundColumn) {
+                return;
+            }
 
-        for (let rowElement of table.getElementsByTagName('tr')) {
-            rowElement.children[column].classList.toggle('hidden');
+            for (let rowElement of table.getElementsByTagName('tr')) {
+                if (rowElement.children[column] === undefined) {
+                    continue;
+                }
+
+                if (checked) {
+                    rowElement.children[column].classList.remove('hidden');
+                } else {
+                    rowElement.children[column].classList.add('hidden');
+                }
+            }
         }
     }
 

assets/js/plugins/KimaiDatePicker.js

@@ -11,7 +11,6 @@
 
 import jQuery from 'jquery';
 import KimaiPlugin from '../KimaiPlugin';
-import moment from 'moment';
 
 export default class KimaiDatePicker extends KimaiPlugin {
 
@@ -24,26 +23,34 @@ export default class KimaiDatePicker extends KimaiPlugin {
         return 'date-picker';
     }
 
-    init() {
-        this.activateDatePicker(this.selector);
-    }
-
     activateDatePicker(selector) {
-        let translator = this.getContainer().getTranslation();
-        jQuery(selector + ' input[data-datepickerenable="on"]').each(function(index) {
+        const TRANSLATE = this.getContainer().getTranslation();
+        const DATE_UTILS = this.getContainer().getPlugin('date');
+        const firstDow = this.getConfiguration('first_dow_iso') % 7;
+
+        jQuery(selector + ' ' + this.selector).each(function(index) {
             let localeFormat = jQuery(this).data('format');
             jQuery(this).daterangepicker({
                 singleDatePicker: true,
                 showDropdowns: true,
                 autoUpdateInput: false,
+                drops: 'down',
                 locale: {
                     format: localeFormat,
-                    firstDay: 1,
-                    applyLabel: translator.get('confirm'),
-                    cancelLabel: translator.get('cancel'),
-                    customRangeLabel: translator.get('customRange'),
-                    daysOfWeek: moment.weekdaysShort(),
-                    monthNames: moment.months(),
+                    firstDay: firstDow,
+                    applyLabel: TRANSLATE.get('confirm'),
+                    cancelLabel: TRANSLATE.get('cancel'),
+                    customRangeLabel: TRANSLATE.get('customRange'),
+                    daysOfWeek: DATE_UTILS.getWeekDaysShort(),
+                    monthNames: DATE_UTILS.getMonthNames(),
+                }
+            });
+
+            jQuery(this).on('show.daterangepicker', function (ev, picker) {
+                if (picker.element.offset().top - jQuery(window).scrollTop() + picker.container.outerHeight() + 30 > jQuery(window).height()) {
+                    // "up" is not possible here, because the code is triggered on many mobile phones and the picker then appears out of window
+                    picker.drops = 'auto';
+                    picker.move();
                 }
             });
 
@@ -54,4 +61,13 @@ export default class KimaiDatePicker extends KimaiPlugin {
         });
     }
 
+    destroyDatePicker(selector) {
+        jQuery(selector + ' ' + this.selector).each(function(index) {
+            if (jQuery(this).data('daterangepicker') !== undefined) {
+                jQuery(this).daterangepicker('destroy');
+                jQuery(this).data('daterangepicker').remove();
+            }
+        });
+    }
+
 }

assets/js/plugins/KimaiDateRangePicker.js

@@ -24,50 +24,73 @@ export default class KimaiDateRangePicker extends KimaiPlugin {
         return 'date-range-picker';
     }
 
-    init() {
-        this.activateDateRangePicker(this.selector);
-    }
-
     activateDateRangePicker(selector) {
-        let translator = this.getContainer().getTranslation();
-        jQuery(selector + ' input[data-daterangepickerenable="on"]').each(function(index) {
+        const TRANSLATE = this.getContainer().getTranslation();
+        const DATE_UTILS = this.getContainer().getPlugin('date');
+        const firstDow = this.getConfiguration('first_dow_iso') % 7;
+
+        jQuery(selector + ' ' + this.selector).each(function(index) {
             let localeFormat = jQuery(this).data('format');
             let separator = jQuery(this).data('separator');
             let rangesList = {};
 
-            rangesList[translator.get('today')] = [moment(), moment()];
-            rangesList[translator.get('yesterday')] = [moment().subtract(1, 'days'), moment().subtract(1, 'days')];
-            rangesList[translator.get('thisWeek')] = [moment().startOf('week'), moment().endOf('week')];
-            rangesList[translator.get('lastWeek')] = [moment().subtract(1, 'week').startOf('week'), moment().subtract(1, 'week').endOf('week')];
-            rangesList[translator.get('thisMonth')] = [moment().startOf('month'), moment().endOf('month')];
-            rangesList[translator.get('lastMonth')] = [moment().subtract(1, 'month').startOf('month'), moment().subtract(1, 'month').endOf('month')];
-            rangesList[translator.get('thisYear')] = [moment().startOf('year'), moment().endOf('year')];
-            rangesList[translator.get('lastYear')] = [moment().subtract(1, 'year').startOf('year'), moment().subtract(1, 'year').endOf('year')];
+            rangesList[TRANSLATE.get('today')] = [moment(), moment()];
+            rangesList[TRANSLATE.get('yesterday')] = [moment().subtract(1, 'days'), moment().subtract(1, 'days')];
+            rangesList[TRANSLATE.get('thisWeek')] = [moment().startOf('isoWeek'), moment().endOf('isoWeek')];
+            rangesList[TRANSLATE.get('lastWeek')] = [moment().subtract(1, 'week').startOf('isoWeek'), moment().subtract(1, 'week').endOf('isoWeek')];
+            if (firstDow === 0) { // sunday = 0
+                rangesList[TRANSLATE.get('thisWeek')] = [moment().startOf('isoWeek').subtract(1, 'day'), moment().endOf('isoWeek').subtract(1, 'day')];
+                rangesList[TRANSLATE.get('lastWeek')] = [moment().subtract(1, 'week').startOf('isoWeek').subtract(1, 'day'), moment().subtract(1, 'week').endOf('isoWeek').subtract(1, 'day')];
+            }
+            rangesList[TRANSLATE.get('thisMonth')] = [moment().startOf('month'), moment().endOf('month')];
+            rangesList[TRANSLATE.get('lastMonth')] = [moment().subtract(1, 'month').startOf('month'), moment().subtract(1, 'month').endOf('month')];
+            rangesList[TRANSLATE.get('thisYear')] = [moment().startOf('year'), moment().endOf('year')];
+            rangesList[TRANSLATE.get('lastYear')] = [moment().subtract(1, 'year').startOf('year'), moment().subtract(1, 'year').endOf('year')];
 
             jQuery(this).daterangepicker({
                 showDropdowns: true,
                 autoUpdateInput: false,
                 autoApply: false,
-                linkedCalendars: false,
+                linkedCalendars: true,
+                drops: 'down',
                 locale: {
                     separator: separator,
                     format: localeFormat,
-                    firstDay: 1,
-                    applyLabel: translator.get('confirm'),
-                    cancelLabel: translator.get('cancel'),
-                    customRangeLabel: translator.get('customRange'),
-                    daysOfWeek: moment.weekdaysShort(),
-                    monthNames: moment.months(),
+                    firstDay: firstDow,
+                    applyLabel: TRANSLATE.get('confirm'),
+                    cancelLabel: TRANSLATE.get('cancel'),
+                    customRangeLabel: TRANSLATE.get('customRange'),
+                    daysOfWeek: DATE_UTILS.getWeekDaysShort(),
+                    monthNames: DATE_UTILS.getMonthNames(),
                 },
                 ranges: rangesList,
                 alwaysShowCalendars: true
             });
 
+            jQuery(this).on('show.daterangepicker', function (ev, picker) {
+                if (picker.element.offset().top - jQuery(window).scrollTop() + picker.container.outerHeight() + 30 > jQuery(window).height()) {
+                    // "up" is not possible here, because the code is triggered on many mobile phones and the picker then appears out of window
+                    picker.drops = 'auto';
+                    picker.move();
+                }
+            });
+
             jQuery(this).on('apply.daterangepicker', function(ev, picker) {
                 jQuery(this).val(picker.startDate.format(localeFormat) + ' - ' + picker.endDate.format(localeFormat));
+                jQuery(this).data('begin', picker.startDate.format(localeFormat));
+                jQuery(this).data('end', picker.endDate.format(localeFormat));
                 jQuery(this).trigger("change");
             });
         });
     }
 
+    destroyDateRangePicker(selector) {
+        jQuery(selector + ' ' + this.selector).each(function(index) {
+            if (jQuery(this).data('daterangepicker') !== undefined) {
+                jQuery(this).daterangepicker('destroy');
+                jQuery(this).data('daterangepicker').remove();
+            }
+        });
+    }
+
 }

assets/js/plugins/KimaiDateTimePicker.js

@@ -11,7 +11,6 @@
 
 import jQuery from 'jquery';
 import KimaiPlugin from '../KimaiPlugin';
-import moment from 'moment';
 
 export default class KimaiDateTimePicker extends KimaiPlugin {
 
@@ -24,30 +23,37 @@ export default class KimaiDateTimePicker extends KimaiPlugin {
         return 'date-time-picker';
     }
 
-    init() {
-        this.activateDateTimePicker(this.selector);
-    }
-
     activateDateTimePicker(selector) {
-        let translator = this.getContainer().getTranslation();
-        let configuration = this.getContainer().getConfiguration();
+        const TRANSLATE = this.getContainer().getTranslation();
+        const DATE_UTILS = this.getContainer().getPlugin('date');
+        const firstDow = this.getConfiguration('first_dow_iso') % 7;
+        const is24hours = this.getConfiguration('twentyFourHours');
 
-        jQuery(selector + ' input[data-datetimepicker="on"]').each(function(index) {
+        jQuery(selector + ' ' + this.selector).each(function(index) {
             let localeFormat = jQuery(this).data('format');
             jQuery(this).daterangepicker({
                 singleDatePicker: true,
                 timePicker: true,
-                timePicker24Hour: configuration.get('twentyFourHours'),
+                timePicker24Hour: is24hours,
                 showDropdowns: true,
                 autoUpdateInput: false,
+                drops: 'down',
                 locale: {
                     format: localeFormat,
-                    firstDay: 1,
-                    applyLabel: translator.get('confirm'),
-                    cancelLabel: translator.get('cancel'),
-                    customRangeLabel: translator.get('customRange'),
-                    daysOfWeek: moment.weekdaysShort(),
-                    monthNames: moment.months(),
+                    firstDay: firstDow,
+                    applyLabel: TRANSLATE.get('confirm'),
+                    cancelLabel: TRANSLATE.get('cancel'),
+                    customRangeLabel: TRANSLATE.get('customRange'),
+                    daysOfWeek: DATE_UTILS.getWeekDaysShort(),
+                    monthNames: DATE_UTILS.getMonthNames(),
+                }
+            });
+
+            jQuery(this).on('show.daterangepicker', function (ev, picker) {
+                if (picker.element.offset().top - jQuery(window).scrollTop() + picker.container.outerHeight() + 30 > jQuery(window).height()) {
+                    // "up" is not possible here, because the code is triggered on many mobile phones and the picker then appears out of window
+                    picker.drops = 'auto';
+                    picker.move();
                 }
             });
 
@@ -58,4 +64,13 @@ export default class KimaiDateTimePicker extends KimaiPlugin {
         });
     }
 
+    destroyDateTimePicker(selector) {
+        jQuery(selector + ' ' + this.selector).each(function(index) {
+            if (jQuery(this).data('daterangepicker') !== undefined) {
+                jQuery(this).daterangepicker('destroy');
+                jQuery(this).data('daterangepicker').remove();
+            }
+        });
+    }
+
 }

assets/js/plugins/KimaiDateUtils.js

@@ -0,0 +1,110 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/*!
+ * [KIMAI] KimaiDateUtils: responsible for handling date specific tasks
+ */
+
+import KimaiPlugin from '../KimaiPlugin';
+import moment from 'moment';
+
+export default class KimaiDateUtils extends KimaiPlugin {
+
+    getId() {
+        return 'date';
+    }
+
+    /**
+     * @param {string} dateTime
+     * @returns {string}
+     */
+    getFormattedDate(dateTime) {
+        return moment(dateTime).format(this.getConfiguration('formatDate'));
+    }
+
+    getWeekDaysShort() {
+        return moment.localeData().weekdaysShort();
+    }
+
+    getMonthNames() {
+        return moment.localeData().months();
+    }
+
+    formatDuration(since) {
+        const duration = moment.duration(moment(new Date()).diff(moment(since)));
+
+        return this.formatMomentDuration(duration);
+    }
+
+    formatSeconds(seconds) {
+        const duration = moment.duration('PT' + seconds + 'S');
+
+        return this.formatMomentDuration(duration);
+    }
+
+    /**
+     * @param {moment.Duration} duration
+     * @returns {string|*}
+     */
+    formatMomentDuration(duration) {
+        const hours = parseInt(duration.asHours()).toString();
+        const minutes = duration.minutes();
+        const seconds = duration.seconds();
+
+        return this.formatTime(hours, minutes, seconds);
+    }
+
+    formatTime(hours, minutes, seconds) {
+        if (hours < 0 || minutes < 0 || seconds < 0) {
+            return '?';
+        }
+
+        // special case for hours, as they can overflow the 24h barrier - Kimai does not support days as duration unit
+        if (hours.length === 1) {
+            hours = '0' + hours;
+        }
+
+        const format = this.getConfiguration('formatDuration');
+
+        return format.replace('%h', hours).replace('%m', ('0' + minutes).substr(-2)).replace('%s', ('0' + seconds).substr(-2));
+    }
+
+    /**
+     * @param {string} duration
+     * @returns {int}
+     */
+    getSecondsFromDurationString(duration)
+    {
+        duration = duration.trim().toUpperCase();
+        let momentDuration = moment.duration(NaN);
+
+        if (duration.indexOf(':') !== -1) {
+            momentDuration = moment.duration(duration);
+        } else if (duration.indexOf('.') !== -1 || duration.indexOf(',') !== -1) {
+            duration = duration.replace(/,/, '.');
+            duration = (parseFloat(duration) * 3600).toString();
+            momentDuration = moment.duration('PT' + duration + 'S');
+        } else if (duration.indexOf('H') !== -1 || duration.indexOf('M') !== -1 || duration.indexOf('S') !== -1) {
+            /* D for days does not work, because 'PT1H' but with days 'P1D' is used */
+            momentDuration = moment.duration('PT' + duration);
+        } else {
+            let c = parseInt(duration);
+            let d = parseInt(duration).toFixed();
+            if (!isNaN(c) && duration === d) {
+                duration = (c * 3600).toString();
+                momentDuration = moment.duration('PT' + duration + 'S');
+            }
+        }
+
+        if (!momentDuration.isValid()) {
+            return 0;
+        }
+
+        return momentDuration.asSeconds();
+    }
+
+}

assets/js/plugins/KimaiEscape.js

@@ -0,0 +1,35 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/*!
+ * [KIMAI] KimaiEscape: sanitize strings
+ */
+
+import KimaiPlugin from "../KimaiPlugin";
+
+export default class KimaiEscape extends KimaiPlugin {
+
+    getId() {
+        return 'escape';
+    }
+
+    /**
+     * @param {string} title
+     * @returns {string}
+     */
+    escapeForHtml(title) {
+        const tagsToReplace = {
+            '&': '&',
+            '<': '&lt;',
+            '>': '&gt;',
+        };
+
+        return title.replace(/[&<>]/g, function(tag) {
+            return tagsToReplace[tag] || tag;
+        });
+    };
+}

assets/js/plugins/KimaiEvent.js

@@ -25,7 +25,7 @@ export default class KimaiEvent extends KimaiPlugin {
         for(let event of name.split(' ')) {
             let triggerEvent = new Event(event);
             if (details !== undefined) {
-                triggerEvent = new CustomEvent(name, {detail: details});
+                triggerEvent = new CustomEvent(event, {detail: details});
             }
             document.dispatchEvent(triggerEvent);
         }

assets/js/plugins/KimaiForm.js

@@ -0,0 +1,56 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/*!
+ * [KIMAI] KimaiForm: basic functions for all forms
+ */
+
+import KimaiPlugin from "../KimaiPlugin";
+
+export default class KimaiForm extends KimaiPlugin {
+
+    getId() {
+        return 'form';
+    }
+
+    activateForm(formSelector, container) {
+        this.getContainer().getPlugin('date-range-picker').activateDateRangePicker(formSelector);
+        this.getContainer().getPlugin('date-time-picker').activateDateTimePicker(formSelector);
+        this.getContainer().getPlugin('date-picker').activateDatePicker(formSelector);
+        this.getContainer().getPlugin('autocomplete').activateAutocomplete(formSelector);
+        this.getContainer().getPlugin('form-select').activateSelectPicker(formSelector, container);
+    }
+    
+    destroyForm(formSelector) {
+        this.getContainer().getPlugin('form-select').destroySelectPicker(formSelector);
+        this.getContainer().getPlugin('autocomplete').destroyAutocomplete(formSelector);
+        this.getContainer().getPlugin('date-picker').destroyDatePicker(formSelector);
+        this.getContainer().getPlugin('date-time-picker').destroyDateTimePicker(formSelector);
+        this.getContainer().getPlugin('date-range-picker').destroyDateRangePicker(formSelector);
+    }
+
+    /**
+     * @param {HTMLFormElement} form
+     * @param {Object} overwrites
+     * @returns {string}
+     */
+    convertFormDataToQueryString(form, overwrites = {})
+    {
+        let serialized = [];
+        let data = new FormData(form);
+
+        for (const key in overwrites) {
+            data.set(key, overwrites[key]);
+        }
+
+        for (let row of data) {
+            serialized.push(encodeURIComponent(row[0]) + "=" + encodeURIComponent(row[1]));
+        }
+
+        return serialized.join('&');
+    }
+}

assets/js/plugins/KimaiFormSelect.js

@@ -0,0 +1,281 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/*!
+ * [KIMAI] KimaiFormSelect: enhanced functionality for HTML select's
+ */
+
+import KimaiPlugin from "../KimaiPlugin";
+import jQuery from "jquery";
+
+export default class KimaiFormSelect extends KimaiPlugin {
+
+    constructor(selector) {
+        super();
+        this.selector = selector;
+    }
+
+    getId() {
+        return 'form-select';
+    }
+
+    init() {
+        // selects the original value inside select2 dropdowns, as the "reset" event (the updated option)
+        // is not automatically catched by select2
+        jQuery('body').on('reset', 'form', function(event) {
+            setTimeout(function() {
+                jQuery(event.target).find(this.selector).trigger('change');
+            }, 10);
+        });
+
+        const self = this;
+
+        // Function to match the name of the parent and not only the names of the children
+        // Based on the original matcher function of Select2: https://github.com/select2/select2/blob/5765090318c4d382ae56463cfa25ba8ca7bdd495/src/js/select2/defaults.js#L272
+        // More information: https://select2.org/searching | https://github.com/select2/docs/blob/develop/pages/11.searching/docs.md
+        this.matcher = function (params, data) {
+            // Always return the object if there is nothing to compare
+            if (jQuery.trim(params.term) === '') {
+                return data;
+            }
+
+            // Check whether options has children
+            let hasChildren = data.children && data.children.length > 0;
+
+            // Split search param by space to search for all terms and convert all to uppercase
+            let terms = params.term.toUpperCase().split(' ');
+            let original = data.text.toUpperCase();
+
+            // Always return the parent option including its children, when the name matches one of the params
+            // Check if the text contains all or at least one of the terms
+            let foundAll = true;
+            let foundOne = false;
+            let missingTerms = [];
+            terms.forEach(function(item, index) {
+                if (original.indexOf(item) > -1) {
+                    foundOne = true;
+                } else {
+                    foundAll = false;
+                    missingTerms.push(item);
+                }
+            });
+
+            // If the option element contains all terms, return it
+            if (foundAll) {
+                return data;
+            }
+
+            // Do a recursive check for options with children
+            if (hasChildren) {
+                // If the parent already contains one or more search terms, proceed only with the missing ones
+                // First: Clone the original params object...
+                let newParams = jQuery.extend(true, {}, params);
+                if (foundOne) {
+                    newParams.term = missingTerms.join(' ');
+                } else {
+                    newParams.term = params.term;
+                }
+
+                // Clone the data object if there are children
+                // This is required as we modify the object to remove any non-matches
+                let match = jQuery.extend(true, {}, data);
+
+                // Check each child of the option
+                for (let c = data.children.length - 1; c >= 0; c--) {
+                    let child = data.children[c];
+
+                    let matches = self.matcher(newParams, child);
+
+                    // If there wasn't a match, remove the object in the array
+                    if (matches === null) {
+                        match.children.splice(c, 1);
+                    }
+                }
+
+                // If any children matched, return the new object
+                if (match.children.length > 0) {
+                    return match;
+                }
+            }
+
+            // If the option or its children do not contain the term, don't return anything
+            return null;
+        }
+    }
+
+    activateSelectPickerByElement(node, container) {
+        let options = {};
+        if (container !== undefined) {
+            options = {
+                dropdownParent: jQuery(container),
+            };
+        }
+
+        options = {...options, ...{
+            language: this.getConfiguration('locale').replace('_', '-'),
+            theme: "bootstrap",
+            matcher: this.matcher,
+            dropdownAutoWidth: true,
+            width: "resolve"
+        }};
+
+        const element = jQuery(node);
+
+        if (node.dataset['renderer'] !== undefined && node.dataset['renderer'] === 'color') {
+            const templateResultFunc = function (state) {
+                return jQuery('<span><span style="background-color:'+state.id+'; width: 20px; height: 20px; display: inline-block; margin-right: 10px;">&nbsp;</span>' + state.text + '</span>');
+            };
+
+            const colorOptions = {...options, ...{
+                templateSelection: templateResultFunc,
+                templateResult: templateResultFunc
+            }};
+
+            element.select2(colorOptions);
+        } else {
+            element.select2(options);
+        }
+
+        // this is a bugfix for safari, which does render the dropdown only with correct width upon the second opening
+        // see https://github.com/select2/select2/issues/4678
+        element.on('select2:open', function (ev) {
+            if (element.data('performing-reopen') === undefined || element.data('performing-reopen') === null) {
+                element.data('performing-reopen', true);
+                element.select2('close');
+                element.select2('open');
+            }
+        });
+    }
+
+    activateSelectPicker(selector, container) {
+        const self = this;
+        jQuery(selector + ' ' + this.selector).each(function(i, el) {
+            self.activateSelectPickerByElement(el, container);
+        });
+    }
+
+    destroySelectPicker(selector) {
+        jQuery(selector + ' ' + this.selector).select2('destroy');
+    }
+
+    updateOptions(selectIdentifier, data) {
+        let select = jQuery(selectIdentifier);
+        let emptyOption = jQuery(selectIdentifier + ' option[value=""]');
+        const selectedValue = select.val();
+
+        select.find('option').remove().end().find('optgroup').remove().end();
+
+        if (emptyOption.length !== 0) {
+            select.append(this._createOption(emptyOption.text(), ''));
+        }
+
+        let emptyOpts = [];
+        let options = [];
+        let titlePattern = null;
+        if (select[0] !== undefined && select[0].dataset !== undefined && select[0].dataset['optionPattern'] !== undefined) {
+            titlePattern = select[0].dataset['optionPattern'];
+        }
+        if (titlePattern === null || titlePattern === '') {
+            titlePattern = '{name}';
+        }
+
+        for (const [key, value] of Object.entries(data)) {
+            if (key === '__empty__') {
+                for (const entity of value) {
+                    emptyOpts.push(this._createOption(this._getTitleFromPattern(titlePattern, entity), entity.id));
+                }
+                continue;
+            }
+
+            let optGroup = this._createOptgroup(key);
+            for (const entity of value) {
+                optGroup.appendChild(this._createOption(this._getTitleFromPattern(titlePattern, entity), entity.id));
+            }
+            options.push(optGroup);
+        }
+
+        select.append(options);
+        select.append(emptyOpts);
+
+        // if available, re-select the previous selected option (mostly usable for global activities)
+        select.val(selectedValue);
+
+        // if we don't trigger the change, the other selects won't reset
+        select.trigger('change');
+
+        // if select2 is active, this will tell the select to refresh
+        if (select.hasClass('selectpicker')) {
+            select.trigger('change.select2');
+        }
+    }
+
+    /**
+     * @param {string} pattern
+     * @param {array} entity
+     * @private
+     */
+    _getTitleFromPattern(pattern, entity) {
+        const DATE_UTILS = this.getPlugin('date');
+        const regexp = new RegExp('{[^}]*?}','g');
+        let title = pattern;
+        let match = null;
+
+        while ((match = regexp.exec(pattern)) !== null) {
+            const field = match[0].substr(1, match[0].length - 2);
+            let value = entity[field] === undefined ? null : entity[field];
+            if ((field === 'start' || field === 'end')) {
+                if (value === null) {
+                    value = '?';
+                } else {
+                    value = DATE_UTILS.getFormattedDate(value);
+                }
+            }
+
+            title = title.replace(new RegExp('{' + field + '}', 'g'), value ?? '');
+        }
+        title = title.replace(/- \?-\?/, '');
+        title = title.replace(/\r\n|\r|\n/g, ' ');
+        title = title.substr(0, 110);
+
+        const chars = '- ';
+        let start = 0, end = title.length;
+
+        while (start < end && chars.indexOf(title[start]) >= 0) {
+            ++start;
+        }
+
+        while (end > start && chars.indexOf(title[end - 1]) >= 0) {
+            --end;
+        }
+
+        return (start > 0 || end < title.length) ? title.substring(start, end) : title;
+    }
+
+    /**
+     * @param {string} label
+     * @param {string} value
+     * @returns {HTMLElement}
+     * @private
+     */
+    _createOption(label, value) {
+        let option = document.createElement('option');
+        option.innerText = label;
+        option.value = value;
+        return option;
+    }
+
+    /**
+     * @param {string} label
+     * @returns {HTMLElement}
+     * @private
+     */
+    _createOptgroup(label) {
+        let optGroup = document.createElement('optgroup');
+        optGroup.label = label;
+        return optGroup;
+    }
+}

assets/js/plugins/KimaiJqueryPluginInitializer.js

@@ -1,24 +0,0 @@
-/*
- * This file is part of the Kimai time-tracking app.
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
-
-/*!
- * [KIMAI] KimaiJqueryPluginInitializer: initialize jQuery plugins
- */
-
-import jQuery from 'jquery';
-import KimaiPlugin from '../KimaiPlugin';
-
-export default class KimaiJqueryPluginInitializer extends KimaiPlugin {
-
-    init() {
-        // activate the dropdown functionality
-        jQuery('.dropdown-toggle').dropdown();
-        // activate the tooltip functionality
-        jQuery('[data-toggle="tooltip"]').tooltip();
-    }
-
-}

assets/js/plugins/KimaiMultiUpdateTable.js

@@ -0,0 +1,73 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/*!
+ * [KIMAI] KimaiMultiUpdateForm: handle the multi update checkbox list and form
+ */
+
+import KimaiPlugin from '../KimaiPlugin';
+import jQuery from "jquery";
+
+export default class KimaiMultiUpdateTable extends KimaiPlugin {
+
+    init() {
+        const self = this;
+        
+        jQuery('body').
+            on('change', '#multi_update_all', function(event) {
+                jQuery('.multi_update_single').prop('checked', jQuery(event.target).prop('checked'));
+                self.toggleForm();
+            })
+            .on('change', '.multi_update_single', function(event) {
+                self.toggleForm();
+            })
+            .on('change', '#multi_update_table_action', function(event) {
+                const selectedItem = jQuery('#multi_update_table_action option:selected');
+                const selectedVal = selectedItem.val();
+
+                if (selectedVal === '') {
+                    return;
+                }
+                
+                const form = jQuery('#multi_update_form form');
+                const selectedText = selectedItem.text();
+                const ids = self.getSelectedIds();
+                const question = form.attr('data-question').replace(/%action%/, selectedText).replace(/%count%/, ids.length);
+                
+                self.getContainer().getPlugin('alert').question(question, function(value) {
+                    if (value) {
+                        form.attr('action', selectedVal).submit();
+                    } else {
+                        jQuery('#multi_update_table_action').val('').trigger('change');
+                    }
+                });
+            });
+    }
+    
+    getSelectedIds()
+    {
+        let ids = [];
+        jQuery('.multi_update_single:checked').each(function(i){
+            ids[i] = $(this).val();
+        });
+
+        return ids;
+    }
+    
+    toggleForm() 
+    {
+        const ids = this.getSelectedIds();
+        jQuery('#multi_update_table_entities').val(ids.join(','));
+
+        if (ids.length > 0) {
+            jQuery('#multi_update_form').show();
+        } else {
+            jQuery('#multi_update_form').hide();
+        }
+    }
+    
+}

assets/js/plugins/KimaiRecentActivities.js

@@ -40,10 +40,15 @@ export default class KimaiRecentActivities extends KimaiPlugin {
         // don't block initial browser rendering
         setTimeout(handle, 500);
 
-        document.addEventListener('kimai.timesheetStop', handle);
+        document.addEventListener('kimai.recentActivities', handle);
+        document.addEventListener('kimai.timesheetUpdate', handle);
+        document.addEventListener('kimai.timesheetDelete', handle);
         document.addEventListener('kimai.activityUpdate', handle);
+        document.addEventListener('kimai.activityDelete', handle);
         document.addEventListener('kimai.projectUpdate', handle);
+        document.addEventListener('kimai.projectDelete', handle);
         document.addEventListener('kimai.customerUpdate', handle);
+        document.addEventListener('kimai.customerDelete', handle);
     }
 
     emptyList() {
@@ -60,9 +65,10 @@ export default class KimaiRecentActivities extends KimaiPlugin {
 
         for (let timesheet of entries) {
             let label = this.attributes['template']
-                .replace('%customer%', timesheet.project.customer.name)
-                .replace('%project%', timesheet.project.name)
-                .replace('%activity%', timesheet.activity.name);
+                .replace('%customer%', this.escape(timesheet.project.customer.name))
+                .replace('%project%', this.escape(timesheet.project.name))
+                .replace('%activity%', this.escape(timesheet.activity.name))
+            ;
 
             htmlToInsert +=
                 `<li>` +

assets/js/plugins/KimaiReducedClickHandler.js

@@ -6,27 +6,28 @@
  */
 
 /*!
- * [KIMAI] KimaiClickHandlerReducedInTableRow: abstract class
+ * [KIMAI] KimaiReducedClickHandler: abstract class
  */
 
 import jQuery from 'jquery';
 import KimaiPlugin from "../KimaiPlugin";
 
-export default class KimaiClickHandlerReducedInTableRow extends KimaiPlugin {
+export default class KimaiReducedClickHandler extends KimaiPlugin {
 
-    _addClickHandlerReducedInTableRow(selector, callback)  {
+    _addClickHandler(selector, callback) {
         jQuery('body').on('click', selector, function(event) {
             // just in case an inner element is editable, than this should not be triggered
-            if (event.target.parentNode.isContentEditable || event.target.isContentEditable) {
+            if (event.target.parentNode.isContentEditable || event.target.isContentEditable) {
                 return;
             }
 
-            // handles the "click" on table rows to open an entry for editing: when a button within a row is clicked,
-            // we don't want the table row event to be processed - so we intercept it
+            // handles the "click" on table rows or list elements
             let target = event.target;
-            if (event.currentTarget.matches('tr')) {
+            if (event.currentTarget.matches('tr') || event.currentTarget.matches('li')) {
                 while (target !== null && !target.matches('body')) {
-                    if (target.matches('a') || target.matches ('button')) {
+                    // when an element within the row is clicked, that can trigger stuff itself, we don't want the event to be processed
+                    // don't act if a link, button or form element was clicked
+                    if (target.matches('a') || target.matches ('button') || target.matches ('input')) {
                         return;
                     }
                     target = target.parentNode;
@@ -41,6 +42,10 @@ export default class KimaiClickHandlerReducedInTableRow extends KimaiPlugin {
                 href = jQuery(this).attr('href');
             }
 
+            if (href === undefined || href === null || href === '') {
+                return;
+            }
+
             callback(href);
         });
     }

assets/js/plugins/KimaiSelectDataAPI.js

@@ -11,6 +11,7 @@
 
 import jQuery from 'jquery';
 import KimaiPlugin from "../KimaiPlugin";
+import moment from 'moment';
 
 export default class KimaiSelectDataAPI extends KimaiPlugin {
 
@@ -32,46 +33,103 @@ export default class KimaiSelectDataAPI extends KimaiPlugin {
         const API = this.getContainer().getPlugin('api');
 
         jQuery('body').on('change', selector, function(event) {
-            let apiUrl = jQuery(this).attr('data-api-url').replace('-s-', jQuery(this).val());
-            const targetSelect = '#' + jQuery(this).attr('data-related-select');
+            const targetSelect = '#' + this.dataset['relatedSelect'];
 
             // if the related target select does not exist, we do not need to load the related data
             if (jQuery(targetSelect).length === 0) {
                 return;
             }
 
-            if (jQuery(this).val() === '') {
-                if (jQuery(this).attr('data-empty-url') === undefined) {
+            let formPrefix = this.dataset['formPrefix'];
+            if (formPrefix === undefined || formPrefix === null) {
+                formPrefix = '';
+            } else if (formPrefix.length > 0) {
+                formPrefix += '_';
+            }
+
+            let newApiUrl = self._buildUrlWithFormFields(this.dataset['apiUrl'], formPrefix);
+
+            const selectValue = jQuery(this).val();
+
+            // Problem: select a project with activities and then select a customer that has no project
+            // results in a wrong URL, it triggers "activities?project=" instead of using the "emptyUrl"
+            if (selectValue === undefined || selectValue === null || selectValue === '' || (Array.isArray(selectValue) && selectValue.length === 0)) {
+                if (this.dataset['emptyUrl'] === undefined) {
                     self._updateSelect(targetSelect, {});
                     jQuery(targetSelect).attr('disabled', 'disabled');
                     return;
                 }
-                apiUrl = jQuery(this).attr('data-empty-url').replace('-s-', jQuery(this).val());
+                newApiUrl = self._buildUrlWithFormFields(this.dataset['emptyUrl'], formPrefix);
             }
 
             jQuery(targetSelect).removeAttr('disabled');
 
-            API.get(apiUrl, {}, function(data){
+            API.get(newApiUrl, {}, function(data){
                 self._updateSelect(targetSelect, data);
             });
         });
     }
+    
+    _buildUrlWithFormFields(apiUrl, formPrefix) {
+        let newApiUrl = apiUrl;
+
+        apiUrl.split('?')[1].split('&').forEach(item => {
+            const [key, value] = item.split('=');
+            const decoded = decodeURIComponent(value);
+            const test = decoded.match(/%(.*)%/);
+            if (test !== null) {
+                const targetField = jQuery('#' + formPrefix + test[1]);
+                let newValue = '';
+                if (targetField.length === 0) {
+                    // happens for example:
+                    // - in duration only mode, when the end field is not found
+                    // console.log('ERROR: Cannot find field with name "' + test[1] + '" by selector: #' + formPrefix + test[1]);
+                } else {
+                    if (targetField.val() !== null) {
+                        newValue = targetField.val();
+
+                        if (newValue !== '') {
+                            // having that special case here is far from being perfect... but for now it works ;-)
+                            if (targetField.data('daterangepicker') !== undefined) {
+                                if (key === 'begin' || key === 'start' || targetField.data('daterangepicker').singleDatePicker) {
+                                    newValue = targetField.data('daterangepicker').startDate.format(moment.HTML5_FMT.DATETIME_LOCAL_SECONDS);
+                                } else if (key === 'end') {
+                                    newValue = targetField.data('daterangepicker').endDate.format(moment.HTML5_FMT.DATETIME_LOCAL_SECONDS);
+                                }
+                            } else if (targetField.data('format') !== undefined) {
+                                if (moment(newValue, targetField.data('format')).isValid()) {
+                                    newValue = moment(newValue, targetField.data('format')).format(moment.HTML5_FMT.DATETIME_LOCAL_SECONDS);
+                                }
+                            }
+                        } else {
+                            // happens for example:
+                            // - when the end date is not set on a timesheet record and the project list is loaded (as the URL contains the %end% replacer)
+                            // console.log('Empty value found for field with name "' + test[1] + '" by selector: #' + formPrefix + test[1]);
+                        }
+                    } else {
+                        // happens for example:
+                        // - when a customer without projects is selected
+                        // console.log('ERROR: Empty field with name "' + test[1] + '" by selector: #' + formPrefix + test[1]);
+                    }
+                }
+
+                if (Array.isArray(newValue)) {
+                    newValue = newValue.join(',');
+                }
+
+                newApiUrl = newApiUrl.replace(value, newValue);
+            }
+        });
+
+        return newApiUrl;
+    }
 
     _updateSelect(selectName, data) {
-        let select = jQuery(selectName);
-        let emptyOption = jQuery(selectName + ' option[value=""]');
-
-        select.find('option').remove().end().find('optgroup').remove().end();
-
-        if (emptyOption.length !== 0) {
-            select.append('<option value="">' + emptyOption.text() + '</option>');
-        }
-
         const options = {};
         for (const apiData of data) {
-            let title = apiData.parentTitle;
-            if (title === null) {
-                title = '__empty__';
+            let title = '__empty__';
+            if (apiData.hasOwnProperty('parentTitle') && apiData.parentTitle !== null) {
+                title = apiData.parentTitle;
             }
             if (!options.hasOwnProperty(title)) {
                 options[title] = [];
@@ -84,32 +142,9 @@ export default class KimaiSelectDataAPI extends KimaiPlugin {
             ordered[key] = options[key];
         });
 
-        let htmlOptions = '';
-        let emptyOptions = '';
-
-        for (const [key, value] of Object.entries(ordered)) {
-            if (key === '__empty__') {
-                for (const entity of value) {
-                    emptyOptions +=  '<option value="' + entity.id + '">' + entity.name + '</option>';
-                }
-                continue;
-            }
-
-            htmlOptions += '<optgroup label="' + key + '">';
-            for (const entity of value) {
-                htmlOptions +=  '<option value="' + entity.id + '">' + entity.name + '</option>';
-            }
-            htmlOptions += '</optgroup>';
-        }
-
-        select.append(htmlOptions);
-        select.append(emptyOptions);
-
-        // if we don't trigger the change, the other selects won't be resetted
-        select.trigger('change');
-
-        // if the beta test kimai.theme.select_type is active, this will tell the selects to refresh
-        jQuery('.selectpicker').selectpicker('refresh');
+        /** @var {KimaiFormSelect} select */
+        const select = this.getContainer().getPlugin('form-select');
+        select.updateOptions(selectName, ordered);
     }
 
 }

assets/js/plugins/KimaiThemeInitializer.js

@@ -15,7 +15,60 @@ import KimaiPlugin from '../KimaiPlugin';
 export default class KimaiThemeInitializer extends KimaiPlugin {
 
     init() {
+        this.registerGlobalAjaxErrorHandler();
         this.registerAutomaticAlertRemove('div.alert-success', 5000);
+        // activate the dropdown functionality
+        jQuery('.dropdown-toggle').dropdown();
+        // activate the tooltip functionality
+        jQuery('[data-toggle="tooltip"]').tooltip();
+        // activate all form plugins
+        this.getContainer().getPlugin('form').activateForm('.content-wrapper form', 'body');
+        this.getContainer().getPlugin('form').activateForm('form.searchform', 'body');
+
+        this.registerModalAutofocus('#modal_search');
+        this.registerModalAutofocus('#remote_form_modal');
+    }
+
+    /**
+     * workaround for autofocus attribute, as the modal "steals" it
+     *
+     * @param {string} selector
+     */
+    registerModalAutofocus(selector) {
+        let modal = jQuery(selector);
+        if (modal.length === 0) {
+            return;
+        }
+
+        modal.on('shown.bs.modal', function () {
+            let form = modal.find('form');
+            let formAutofocus = form.find('[autofocus]');
+            if (formAutofocus.length < 1) {
+                formAutofocus = form.find('input[type=text],textarea,select');
+            }
+            formAutofocus.filter(':not("[data-datetimepicker=on]")').filter(':visible:first').focus().delay(1000).focus();
+        });
+    }
+
+    /**
+     * redirect access denied / session timeouts to login page
+     */
+    registerGlobalAjaxErrorHandler() {
+        const loginUrl = this.getConfiguration('login');
+        const alert = this.getContainer().getPlugin('alert');
+        const translation = this.getContainer().getTranslation().get('login.required');
+        jQuery(document).ajaxError(function(event, jqxhr, settings, thrownError) {
+            if (jqxhr.status !== undefined && jqxhr.status === 403) {
+                const loginRequired = jqxhr.getResponseHeader('login-required');
+                if (loginRequired !== null) {
+                    alert.question(translation, function (result) {
+                        if (result === true) {
+                            window.location.replace(loginUrl);
+                        }
+                    });
+                }
+            }
+        });
     }
 
     /**

assets/js/plugins/KimaiToolbar.js

@@ -14,12 +14,131 @@ import KimaiPlugin from "../KimaiPlugin";
 
 export default class KimaiToolbar extends KimaiPlugin {
 
-    init() {
-        const datatable = this.getContainer().getPlugin('datatable');
+    constructor(formSelector, formSubmitActionClass) {
+        super();
+        this.formSelector = formSelector;
+        this.actionClass = formSubmitActionClass;
+    }
 
-        // This catches all clicks on the pagination and prevents the default action, as we want to relad the page via JS
+    getId() {
+        return 'toolbar';
+    }
+
+    init() {
+        const formSelector = this.getSelector();
+        const self = this;
+        const EVENT = self.getContainer().getPlugin('event');
+
+        this._registerPagination(formSelector, EVENT);
+        this._registerSortableTables(formSelector, EVENT);
+        this._registerAlternativeSubmitActions(formSelector, this.actionClass);
+
+        // Reset the page if filter values are changed, otherwise we might end up with a limited set of data,
+        // which does not support the given page - and it would be just wrong to stay in the same page
+        jQuery(formSelector +' input').change(function (event) {
+            switch (event.target.id) {
+                case 'order':
+                case 'orderBy':
+                case 'page':
+                    break;
+                default:
+                    jQuery(formSelector + ' input#page').val(1);
+                    break;
+            }
+            self.triggerChange();
+        });
+        
+        // when user selected a new customer or project, reset the pagination back to 1
+        // and then find out if the results should be reloaded
+        jQuery(formSelector + ' select').change(function (event) {
+            let reload = true;
+            switch (event.target.id) {
+                case 'customer':
+                    if (jQuery(formSelector + ' select#project').length > 0) {
+                        reload = false;
+                    }
+                    break;
+
+                case 'project':
+                    if (jQuery(formSelector + ' select#activity').length > 0) {
+                        reload = false;
+                    }
+                    break;
+            }
+            jQuery(formSelector + ' input#page').val(1);
+
+            if (reload) {
+                self.triggerChange();
+            }
+        });
+    }
+
+    /**
+     * Some actions utilize the filter from the search form and submit it to another URL.
+     * @private
+     */
+    _registerAlternativeSubmitActions(toolbarSelector, actionBtnClass) {
+        document.addEventListener('click', function(event) {
+            let target = event.target;
+            while (target !== null && !target.matches('body')) {
+                if (target.classList.contains(actionBtnClass)) {
+                    const form = document.querySelector(toolbarSelector);
+                    if (form === null) {
+                        return;
+                    }
+                    const prevAction = form.action;
+                    const prevMethod = form.method;
+                    form.target = '_blank';
+                    form.action = target.href;
+                    if (target.dataset.method !== undefined) {
+                        form.method = target.dataset.method;
+                    }
+                    form.submit();
+                    form.target = '';
+                    form.action = prevAction;
+                    form.method = prevMethod;
+
+                    event.preventDefault();
+                    event.stopPropagation();
+                }
+
+                target = target.parentNode;
+            }
+        });        
+    }
+
+    /**
+     * Sortable datatables use hidden fields in the toolbar filter/search form
+     * @private
+     */
+    _registerSortableTables(formSelector, EVENT) {
+        jQuery('body').on('click', 'th.sortable', function(event){
+            var $header = jQuery(event.target);
+            var order = 'DESC';
+            var orderBy = $header.data('order');
+            if ($header.hasClass('sorting_desc')) {
+                order = 'ASC';
+            }
+
+            jQuery(formSelector + ' #orderBy').val(orderBy);
+            jQuery(formSelector + ' #order').val(order);
+
+            // re-render the selectboxes
+            jQuery(formSelector + ' #orderBy').trigger('change');
+            jQuery(formSelector + ' #order').trigger('change');
+
+            // triggers the datatable reload - search for the event name
+            EVENT.trigger('filter-change');
+        });
+    }
+    
+    /**
+     * This catches all clicks on the pagination and prevents the default action, as we want to reload the page via JS
+     * @private
+     */
+    _registerPagination(formSelector, EVENT) {
         jQuery('body').on('click', 'div.navigation ul.pagination li a', function(event) {
-            let pager = jQuery(".toolbar form input[name='page']");
+            let pager = jQuery(formSelector + " input#page");
             if (pager.length === 0) {
                 return;
             }
@@ -29,41 +148,26 @@ export default class KimaiToolbar extends KimaiPlugin {
             let page = urlParts[urlParts.length-1];
             pager.val(page);
             pager.trigger('change');
+            EVENT.trigger('pagination-change');
             return false;
         });
 
-        // Reset the page if any other value is changed, otherwise we might end up with a limited set
-        // of data which does not support the given page - and it would be just wrong to stay in the same page
-        jQuery('.toolbar form input').change(function (event) {
-            switch (event.target.id) {
-                case 'page':
-                    break;
-                default:
-                    jQuery('.toolbar form input#page').val(1);
-            }
-            datatable.reloadDatatable();
-        });
+    }
+    
+    /**
+     * Triggers an event, that everyone can listen for.
+     */
+    triggerChange() {
+        this.getContainer().getPlugin('event').trigger('toolbar-change');
+    }
 
-        jQuery('.toolbar form select').change(function (event) {
-            let reload = true;
-            switch (event.target.id) {
-                case 'customer':
-                    if (jQuery('.toolbar form select#project').length > 0) {
-                        reload = false;
-                    }
-                    break;
-
-                case 'project':
-                    if (jQuery('.toolbar form select#activity').length > 0) {
-                        reload = false;
-                    }
-                    break;
-            }
-            jQuery('.toolbar form input#page').val(1);
-            if (reload) {
-                datatable.reloadDatatable();
-            }
-        });
+    /**
+     * Returns the CSS selector to target the toolbar form.
+     * 
+     * @returns {string}
+     */
+    getSelector() {
+        return this.formSelector;
     }
 
 }

assets/js/plugins/KimaiToolbarAction.js

@@ -1,56 +0,0 @@
-/*
- * This file is part of the Kimai time-tracking app.
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
-
-import KimaiPlugin from '../KimaiPlugin';
-
-/**
- * Needs to be initialized with a class name.
- *
- * A link like <a href=# class=remoteLink> can be activated with:
- * new KimaiToolbarAction('remoteLink')
- *
- * @param selector
- */
-export default class KimaiToolbarAction extends KimaiPlugin {
-
-    constructor(selector) {
-        super();
-        this.selector = selector;
-    }
-
-    init() {
-        const self = this;
-        document.addEventListener('click', function(event) {
-            let target = event.target;
-            while (target !== null && !target.matches('body')) {
-                if (target.classList.contains(self.selector)) {
-                    const form = document.querySelector('div.toolbar form.navbar-form');
-                    if (form === null) {
-                        return;
-                    }
-                    const prevAction = form.action;
-                    const prevMethod = form.method;
-                    form.target = '_blank';
-                    form.action = target.href;
-                    if (target.dataset.method !== undefined) {
-                        form.method = target.dataset.method;
-                    }
-                    form.submit();
-                    form.target = '';
-                    form.action = prevAction;
-                    form.method = prevMethod;
-
-                    event.preventDefault();
-                    event.stopPropagation();
-                }
-
-                target = target.parentNode;
-            }
-        });
-    }
-
-}

assets/js/widgets/KimaiCookies.js

@@ -0,0 +1,28 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/*!
+ * [KIMAI] KimaiCookies: simple wrapper to handle cookies
+ */
+
+import Cookies from 'js-cookie';
+
+export default class KimaiCookies {
+
+    static set(name, values, options) {
+        Cookies.set(name, values, options);
+    }
+
+    static get(name) {
+        return Cookies.getJSON(name);
+    }
+
+    static remove(name) {
+        Cookies.remove(name);
+    }
+
+}

assets/js/widgets/KimaiPaginatedBoxWidget.js

@@ -0,0 +1,97 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/*!
+ * [KIMAI] KimaiPaginatedBoxWidget: handles box widgets that have a pagination
+ */
+
+import jQuery from "jquery";
+
+export default class KimaiPaginatedBoxWidget {
+
+    constructor(boxId) {
+        this.selector = boxId;
+        this.overlay = jQuery('<div class="overlay"><div class="fas fa-sync fa-spin"></div></div>');
+        this.widget = jQuery(this.selector);
+        this.href = this.widget.data('href');
+        this.events = this.widget.data('reload').split(' ');
+
+        const self = this;
+
+        const reloadPage = function (event) {
+            const page = jQuery(self.selector + ' .box-tools').data('page');
+            const url = self._buildUrl(page);
+            self.loadPage(url);
+        };
+
+        for (const eventName of this.events) {
+            document.addEventListener(eventName, reloadPage);
+        }
+
+        this.widget.on('click', '.box-tools ul.pagination a', function (event) {
+            event.preventDefault();
+            self.loadPage(jQuery(event.currentTarget).attr('href'));
+        });
+    }
+    
+    static create(elementId) {
+        return new KimaiPaginatedBoxWidget(elementId);
+    }
+    
+    _showOverlay() {
+        this.widget.append(this.overlay);
+    }
+    
+    _hideOverlay() {
+        jQuery(this.overlay).remove();
+    }
+    
+    loadPage(url) {
+        const self = this;
+        const selector = this.selector;
+        
+        self._showOverlay();
+
+        jQuery.ajax({
+            url: url,
+            data: {},
+            success: function (response) {
+                const html = jQuery(response);
+                jQuery(selector + ' .box-tools').replaceWith(html.find('.box-tools'));
+                jQuery(selector + ' .box-body').replaceWith(html.find('.box-body'));
+                jQuery(selector + ' .box-title').replaceWith(html.find('.box-title'));
+                if (jQuery(selector + ' .box-footer').length > 0) {
+                    jQuery(selector + ' .box-footer').replaceWith(html.find('.box-footer'));
+                }
+                jQuery(selector + ' .box-body [data-toggle="tooltip"]').tooltip();
+                self.widget.removeData('error-retry');
+                self._hideOverlay();
+            },
+            dataType: 'html',
+            error: function(jqXHR, textStatus, errorThrown) {
+                if (jqXHR.status !== undefined && jqXHR.status === 500) {
+                    if (self.widget.data('error-retry') !== undefined) {
+                        // TODO show error message ?
+                        return;
+                    }
+                    const page = jQuery(selector + ' .box-tools').data('page');
+                    if (page > 1) {
+                        self.widget.data('error-retry', 1);
+                        var url = self._buildUrl(page - 1);
+                        self.loadPage(url);
+                    }
+                }
+                self._hideOverlay();
+            }
+        });        
+    }
+    
+    _buildUrl(page) {
+        return this.href.replace('1', page);
+    }
+    
+}

assets/js/widgets/KimaiReloadPageWidget.js

@@ -0,0 +1,73 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/*!
+ * [KIMAI] KimaiReloadPageWidget: a simple helper to reload the page on events
+ */
+
+import jQuery from "jquery";
+
+export default class KimaiReloadPageWidget {
+
+    constructor(events, fullReload) {
+        this.overlay = jQuery('<div class="overlay-wrapper"><div class="overlay"><div class="fas fa-sync fa-spin"></div></div></div>');
+        this.widget = jQuery('div.content-wrapper');
+
+        const self = this;
+
+        const reloadPage = function (event) {
+            if (fullReload) {
+                document.location.reload(true);
+            } else {
+                self.loadPage(document.location);
+            }
+        };
+
+        for (const eventName of events.split(' ')) {
+            document.addEventListener(eventName, reloadPage);
+        }
+    }
+    
+    static create(events, fullReload) {
+        if (fullReload === undefined || fullReload === null) {
+            fullReload = false;
+        }
+        return new KimaiReloadPageWidget(events, fullReload);
+    }
+    
+    _showOverlay() {
+        this.widget.append(this.overlay);
+    }
+    
+    _hideOverlay() {
+        jQuery(this.overlay).remove();
+    }
+    
+    loadPage(url) {
+        const self = this;
+        
+        self._showOverlay();
+
+        jQuery.ajax({
+            url: url,
+            data: {},
+            success: function (response) {
+                jQuery('section.content').replaceWith(
+                    jQuery(response).find('section.content')
+                );
+                document.dispatchEvent(new Event('kimai.reloadPage'));
+                self._hideOverlay();
+            },
+            dataType: 'html',
+            error: function(jqXHR, textStatus, errorThrown) {
+                self._hideOverlay();
+                document.location = url;
+            }
+        });        
+    }
+
+}

assets/js/widgets/KimaiStorage.js

@@ -0,0 +1,30 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/*!
+ * [KIMAI] KimaiStorage: simple wrapper to handle localStorage access
+ */
+
+export default class KimaiStorage {
+
+    static set(name, values) {
+        window.localStorage.setItem(name, JSON.stringify(values));
+    }
+
+    static get(name) {
+        let value = window.localStorage.getItem(name);
+        if (value === undefined || value === null) {
+            return null;
+        }
+        return JSON.parse(value);
+    }
+
+    static remove(name) {
+        window.localStorage.removeItem(name);
+    }
+
+}

assets/sass/app.scss

@@ -5,15 +5,16 @@
  * file that was distributed with this source code.
  */
 
-@import "~bootstrap-sass/assets/stylesheets/bootstrap/variables";
 @import 'variables';
+@import 'layout';
 @import 'error-page';
 @import 'print';
 @import 'content';
+@import 'box';
+@import 'content-header';
 @import 'toolbar';
 @import 'sidebar';
 @import 'footer';
-@import 'invoice';
 @import 'datatable';
 @import 'datatable-extensions';
 @import 'calendar';
@@ -23,3 +24,11 @@
 @import 'skins';
 @import 'sweetalert';
 @import 'autocomplete';
+@import 'selectpicker';
+@import 'reporting';
+@import 'forms';
+@import 'modal';
+@import 'progressbar';
+@import 'avatar';
+@import 'security';
+@import 'tabs';

assets/sass/avatar.scss

@@ -0,0 +1,60 @@
+
+$avatar-base-size: 30;
+
+.avatar {
+    text-align: center;
+    background-color: #d2d6de;
+    border-radius: 50%;
+    display: inline-block;
+    height: ($avatar-base-size)+px;
+    width: ($avatar-base-size)+px;
+    vertical-align: middle;
+}
+
+.initials {
+    line-height: 1;
+    position: relative;
+    font-weight: bold;
+    font-size: ceil($avatar-base-size / 2 - 2)+px;
+    top: floor($avatar-base-size / 4 - 1)+px;
+}
+
+$avatarSizes: "xs" .75, "sm" 1.25, "md" 1.5, "lg" 2;
+
+@each $avatarSizeName, $avatarBaseSize in $avatarSizes {
+    .avatar-#{$avatarSizeName} {
+        width: ceil($avatar-base-size * $avatarBaseSize)+px;
+        height: ceil($avatar-base-size * $avatarBaseSize)+px;
+
+        .initials {
+            font-size: ceil($avatar-base-size * $avatarBaseSize / 2 - 2)+px;
+            top: ceil($avatar-base-size * $avatarBaseSize / 4 - 1)+px;
+        }
+    }
+}
+
+.widget-user-image {
+    border-radius: 50%;
+    border: 3px solid #fff;
+    .avatar {
+        width: ceil($avatar-base-size * 2.75)+px;
+        height: ceil($avatar-base-size * 2.75)+px;
+        .initials {
+            font-size: ceil($avatar-base-size * 2.75 / 2 - 2)+px;
+            top: ceil($avatar-base-size * 2.75 / 4 - 1)+px;
+        }
+    }
+}
+
+/* Detail tables like my teams (Dashboard) or */
+table.dataTable.table > tbody > tr > td {
+    &.avatars {
+        .avatar {
+            margin: 1px;
+        }
+    }
+}
+
+.avatar.teamlead {
+    box-shadow: 0px 0px 5px 1px rgba(0,0,0,.4),0 0px 3px 0 rgba(0,0,0,0.3);
+}

assets/sass/bootstrap.scss

@@ -0,0 +1,9 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+$icon-font-path: "~bootstrap-sass/assets/fonts/bootstrap/";
+@import '~bootstrap-sass/assets/stylesheets/bootstrap';

assets/sass/box.scss

@@ -0,0 +1,22 @@
+.box {
+    /* used on detail pages for: customer, project and activity */
+    .box-body.no-padding div.comment,
+    .box-body.no-padding .box-padding {
+        padding: 10px;
+    }
+
+    .box-tools {
+        /* a button that is directly connected with a pagination element inside the box tools (eg. project list on customer detail page) */
+        .btn-pager {
+            float: left;
+            margin-right: 5px;
+        }
+    }
+}
+#customer_details_box,
+#project_details_box,
+#activity_details_box {
+    th {
+        width: 30%;
+    }
+}

assets/sass/calendar.scss

@@ -6,3 +6,46 @@
         }
     }
 }
+
+/* Drag and Drop events with styling */
+.external-events {
+    .external-event {
+        vertical-align: middle;
+        padding: 0 !important;
+        display: inline-block;
+        position: relative;
+        width: 100%;
+    }
+
+    .subtitle {
+        padding: 0 7px 4px 7px;
+        display: block;
+        overflow: hidden;
+        text-overflow: ellipsis;
+        white-space: nowrap;
+        font-size: 0.7em;
+    }
+
+    .title {
+        padding: 3px 7px 0;
+        display: block;
+        overflow: hidden;
+        text-overflow: ellipsis;
+        white-space: nowrap;
+    }
+}
+
+
+.fc-bootstrap3 {
+    .table-bordered > tbody > tr > td,
+    .table-bordered > thead > tr > td,
+    .table-bordered > thead > tr > th {
+        border: 1px solid #ddd;
+    }
+    .fc-head {
+        background-color: #fafafa;
+    }
+    td.fc-today {
+        background-color: #fcf8e3!important;
+    }
+}

assets/sass/content-header.scss

@@ -0,0 +1,65 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+.content-header {
+    height: 50px;
+    border-top: 1px solid rgba(0, 0, 0, 0.1);
+    box-shadow: 0 1px 2px rgba(0, 0, 0, 0.1) !important;
+    background-color: #fff !important;
+    padding: 10px 0 0 10px;
+
+    h1 {
+        padding-top: 3px;
+        float: left;
+        small {
+            display: none;
+        }
+    }
+}
+
+/* Page based action buttons in the upper right corner of the content area */
+.content-header>.breadcrumb {
+    position: absolute;
+    float: right;
+    background: transparent;
+    top: 0;
+    right: 0;
+    padding-left: 10px;
+    .btn {
+        span.label {
+            position: absolute;
+            top: 1px;
+            right: 1px;
+            text-align: center;
+            font-size: 9px;
+            padding: 2px 3px;
+        }
+    }
+}
+
+@media (max-width: $screen-md-max) {
+    .content-header h1 {
+        font-size: 1.5em;
+    }
+    .content-header>.breadcrumb {
+        margin-top: 0;
+    }
+}
+
+@media (min-width: $screen-sm-min) {
+    .content-header>.breadcrumb {
+        right: 10px;
+    }
+
+    .content-header {
+        h1 {
+            small {
+                display: inline-block;
+            }
+        }
+    }
+}

assets/sass/content.scss

@@ -8,48 +8,19 @@
 .content {
     padding: 15px 0;
 }
-.content-header {
-    border-top: 1px solid rgba(0, 0, 0, 0.1);
-    box-shadow: 0 1px 2px rgba(0, 0, 0, 0.1) !important;
-    background-color: #fff !important;
-    padding: 15px 0 15px 10px;
-
-    h1 {
-        small {
-            display: none;
-        }
-    }
-}
-
-.content-header>.breadcrumb {
-    position: relative;
-    margin-top: 5px;
-    top: 0;
-    right: 0;
-    float: none;
-    background: #d2d6de;
-    padding-left: 10px;
-}
 
 @media (min-width: $screen-sm-min) {
-    .content-header>.breadcrumb {
-        right: 10px;
-    }
-}
-
-@media (min-width: $screen-sm-min) {
-    .content-header {
-        h1 {
-            small {
-                display: inline-block;
-            }
-        }
-    }
     .content {
         padding: 15px;
     }
 }
 
+@media (min-width: $screen-lg-min) {
+    .content {
+        padding: 20px;
+    }
+}
+
 td {
     &.timesheet-description {
         ul {
@@ -69,4 +40,39 @@ td {
     text-align: center;
     line-height: 35px;
     margin-right: 15px;
+}
+
+.label-gray {
+    background-color: $gray-lte;
+    color: #666;
+}
+
+/* Delete link in action dropdowns */
+.dropdown-menu > li.delete > a {
+    color: #dd4b39;
+}
+
+.open-edit {
+    cursor: pointer;
+}
+
+/* allow minimized table columns, eg. customer team & visibility */
+th.w-min,
+td.w-min {
+    width: 1%;
+    white-space: nowrap;
+}
+table.dataTable thead > tr > th.hw-min {
+    width: 1%;
+    white-space: normal;
+}
+
+.badge {
+    font-weight: normal;
+    color: #000;
+    background-color: $kimai-default;
+}
+
+.label {
+    font-weight: normal;
 }

assets/sass/dashboard.scss

@@ -13,4 +13,8 @@ section {
             }
         }
     }
+    .box-body-scrollable {
+        overflow: auto;
+        max-height: 300px;
+    }
 }

assets/sass/datatable-extensions.scss

@@ -5,35 +5,61 @@
  * file that was distributed with this source code.
  */
 
+@import "variables";
+
+table.dataTable.table > tbody > tr > td {
+    vertical-align: middle;
+    .img-circle {
+        width: 30px;
+        height: 30px;
+        margin-right: 0;
+        &.teamlead {
+            box-shadow: 0 0 5px 3px $gray-lte;
+        }
+    }
+}
+
+span.label-color,
+span.label-meta,
+span.label-tag,
+span.label-user,
 span.label-activity,
 span.label-project,
 span.label-customer {
     display: inline-block;
+    .name {
+        white-space: nowrap;
+        .name-inner {
+            white-space: normal;
+        }
+    }
     .dot {
-        height: 10px;
-        width: 10px;
-        background-color: $gray-lte;
-        border-radius: 50%;
-        display: inline-block;
+        font-size: 9px;
+        margin-right: 3px;
+        color: $gray-lte;
     }
 }
 
 table.dataTable {
     /* action column */
     .actions {
-        width: 90px;
-        li.delete a {
-            color: #dd4b39;
-        }
+        width: 40px;
     }
     tr {
         /* summary row - provided in the users own timesheet table */
         &.summary td {
             font-weight: bold;
             border-bottom: 1px solid #ccc;
+            background-color: #eaeaea;
         }
-        &.open-edit {
-            cursor: pointer;
+        th.multiCheckbox {
+            width: 15px;
+        }
+        &.overlapping {
+            border-top: 2px dotted red;
+        }
+        &.exported {
+            opacity: 0.7;
         }
     }
     td {
@@ -46,8 +72,8 @@ table.dataTable {
         }
         .label {
             font-size: 85%;
-            font-weight: 500;
             padding: .3em .6em .3em;
+            line-height: 24px;
         }
         span.label-activity,
         span.label-project,
@@ -65,4 +91,45 @@ table.dataTable {
             opacity: 0.8;
         }
     }
+    tfoot {
+        tr {
+            /* overwritten if used in tfoot, to switch the border from below to top */
+            &.summary td {
+                border-top: 1px solid #ccc;
+                border-bottom: 0;
+            }
+        }
+    }
+    th.weekend,
+    td.weekend {
+        background-color: #f9f9f9;
+    }
+    /* order is important, "today” should overwrite "weekend" therefor later in the file */
+    th.today,
+    td.today {
+        background-color: $highlight-today;
+    }
+    th.total,
+    td.total {
+        font-weight: bold;
+    }
+}
+
+/* Quick entry form */
+.form-dataTable {
+    table.dataTable {
+        .form-group {
+            margin-bottom: 0;
+        }
+    }
+}
+
+table.table-hover {
+    tr {
+        &.exported {
+            &:hover {
+                opacity: 1.0;
+            }
+        }
+    }
 }

assets/sass/datatable.scss

@@ -23,7 +23,7 @@ section.content .overlay > .fas,
 section.content > .overlay,
 .box > .loading-img,
 .overlay-wrapper > .loading-img {
-    position: absolute;
+    position: fixed; /* see #1330 */
     top: 0;
     left: 0;
     width: 100%;
@@ -125,46 +125,45 @@ table.dataTable thead .sorting_desc_disabled {
     position: relative;
 }
 
+table.dataTable thead .sorting_asc,
+table.dataTable thead .sorting_desc {
+    font-weight: bold;
+}
+
 table.dataTable thead .sorting:after,
 table.dataTable thead .sorting_asc:after,
 table.dataTable thead .sorting_desc:after {
-    position: absolute;
-    top: 8px;
-    right: 8px;
-    display: block;
-    font-family: 'Glyphicons Halflings';
+    padding-left: 5px;
+    font-family: 'Font Awesome 5 Free';
     opacity: 0.5;
+    font-size: 12px;
 }
 table.dataTable thead .sorting:after {
     opacity: 0.2;
-    content: "\e150"; /* sort */
+    content: "\f0dc"; /* sort */
 }
 table.dataTable thead .sorting_asc:after {
-    content: "\e155"; /* sort-by-attributes */
+    content: "\f062";
 }
 table.dataTable thead .sorting_desc:after {
-    content: "\e156"; /* sort-by-attributes-alt */
+    content: "\f063";
 }
-div.dataTables_scrollBody table.dataTable thead .sorting:after,
-div.dataTables_scrollBody table.dataTable thead .sorting_asc:after,
-div.dataTables_scrollBody table.dataTable thead .sorting_desc:after {
+div.dataTables_scrollBody table.dataTable thead .sorting:before,
+div.dataTables_scrollBody table.dataTable thead .sorting_asc:before,
+div.dataTables_scrollBody table.dataTable thead .sorting_desc:before {
     display: none;
 }
 
-table.dataTable thead .sorting_asc_disabled:after,
-table.dataTable thead .sorting_desc_disabled:after {
+table.dataTable thead .sorting_asc_disabled:before,
+table.dataTable thead .sorting_desc_disabled:before {
     color: #eee;
 }
 
 table.dataTable thead > tr > th {
+    vertical-align: top;
     white-space: nowrap;
 }
 
-/*
-table.dataTable thead > tr > th {
-    padding-right: 30px;
-}
-*/
 table.dataTable th:active {
     outline: none;
 }
@@ -175,9 +174,9 @@ table.dataTable.table-condensed thead > tr > th {
     padding-right: 20px;
 }
 
-table.dataTable.table-condensed thead .sorting:after,
-table.dataTable.table-condensed thead .sorting_asc:after,
-table.dataTable.table-condensed thead .sorting_desc:after {
+table.dataTable.table-condensed thead .sorting:before,
+table.dataTable.table-condensed thead .sorting_asc:before,
+table.dataTable.table-condensed thead .sorting_desc:before {
     top: 6px;
     right: 6px;
 }

assets/sass/daterangepicker.scss

@@ -1,3 +1,4 @@
+@import '~daterangepicker/daterangepicker.css';
 
 .drp-calendar {
     .calendar-table {

assets/sass/fontawesome.scss

@@ -0,0 +1,12 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+$fa-font-path: "~@fortawesome/fontawesome-free/webfonts/";
+@import '~@fortawesome/fontawesome-free/scss/fontawesome';
+@import '~@fortawesome/fontawesome-free/scss/regular';
+@import '~@fortawesome/fontawesome-free/scss/solid';
+@import '~@fortawesome/fontawesome-free/scss/brands';

assets/sass/forms.scss

@@ -0,0 +1,60 @@
+/* Currently only used in batch-update form for timesheets, to highlight sections of combined fields */
+form .box-body fieldset {
+    border-radius: $box-border-radius;
+    padding: 10px;
+    &:hover {
+        background-color: $highlight-bg;
+    }
+}
+
+/* To be used with .form-horizontal - to reduce the space between rows, eg. used in the search modals */
+form.form-narrow {
+    .form-group {
+        margin: 0 0 5px 0;
+    }
+}
+
+/* bootstrap3 hack because the filter look plain ugly without it (see report: project month) */
+.checkbox-menu li label {
+    display: block;
+    padding: 5px 15px 5px 10px !important;
+    clear: both;
+    font-weight: normal;
+    line-height: 1.42857143;
+    color: #333;
+    white-space: nowrap;
+    margin:0;
+    transition: background-color .4s ease;
+}
+.checkbox-menu li div.checkbox {
+    display: block;
+    width: 100%;
+}
+.checkbox-menu li div.radio {
+    display: block;
+    width: 100%;
+}
+.checkbox-menu li input {
+    margin: 0 5px !important;
+    position: relative;
+}
+
+.checkbox-menu li.active label {
+    background-color: #cbcbff;
+    font-weight:bold;
+}
+
+.checkbox-menu li label:hover,
+.checkbox-menu li label:focus {
+    background-color: #f5f5f5;
+}
+
+.checkbox-menu li.active label:hover,
+.checkbox-menu li.active label:focus {
+    background-color: #b8b8ff;
+}
+
+.duration-input {
+    min-width:50px;
+    padding: 6px;
+}

assets/sass/invoice-pdf.scss

@@ -0,0 +1,119 @@
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+body {
+    font-family: sans-serif;
+    font-size: 10pt;
+    margin: 0;
+    padding: 0;
+}
+table, tr, td, th, p, h1, h2, h3, h4, h5 {
+    padding: 0;
+    margin: 0;
+}
+th {
+    border: none;
+    text-align: left;
+}
+td {
+    vertical-align: top;
+}
+p {
+    margin-bottom: 12px;
+}
+.text-small {
+    font-size: 7pt;
+}
+.padding-left {
+    padding-left: 15px;
+}
+.text-center {
+    text-align: center;
+}
+.text-left {
+    text-align: left;
+}
+.text-right {
+    text-align: right;
+}
+.text-nowrap {
+    white-space: nowrap;
+}
+.date {
+    color: #666;
+    font-size: 80%;
+    text-align: right;
+    padding-top: 6px;
+}
+.wrapper {
+    margin: 4px;
+}
+table {
+    width: 100%;
+    border-spacing: 0;
+}
+table.addresses, p {
+    line-height: 14pt;
+}
+/* The address table */
+table.addresses {
+    margin-bottom: 30px;
+}
+/* The PDF header */
+table.header {
+    padding-bottom: 4px;
+    border-bottom: 1px solid #999;
+}
+table.header .title {
+    font-weight: normal;
+    font-size: 140%;
+}
+/* The PDF footer */
+table.footer {
+    border-top: 1px solid #999;
+    font-size: 80%;
+    padding-top: 8px;
+    line-height: 14px;
+}
+table.footer td {
+    vertical-align: top;
+}
+/* The invoice items list */
+table.items {
+    border-collapse: collapse;
+    margin-top: 50px;
+    margin-bottom: 60px;
+}
+table.items thead th,
+table.items tbody td {
+    border-bottom: 1px solid #ccc;
+}
+table.items thead th.first,
+table.items tbody td.first {
+    padding-left: 0;
+}
+table.items thead th.last,
+table.items tbody td.last,
+table.items tfoot td.last {
+    padding-right: 0;
+}
+
+table.items td,
+table.items th {
+    padding: 8px 6px;
+}
+table.items tfoot td,
+table.items tfoot th {
+    padding: 20px 0 0 0;
+    line-height: 1px;
+}
+table.items tfoot td.last {
+    padding-left: 10px;
+}
+table.items tr.odd {
+    background-color: #f5f5f5;
+}

assets/sass/invoice.scss

@@ -5,301 +5,301 @@
  * file that was distributed with this source code.
  */
 
-.invoice {
-    margin: 0;
-    border: none;
-}
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/variables";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/mixins";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/normalize";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/print";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/scaffolding";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/type";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/grid";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/tables";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/list-group";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/panels";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/wells";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/utilities";
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/responsive-utilities";
 
-@media (min-width: $screen-sm-min) {
-    .invoice {
-        margin: 25px;
-    }
-}
+body {
+    font-family: $font-family-sans-serif;
+    
+    &.invoice_print {
+        background-color: #eee;
 
-.page-header-small{
-    font-size: 14px;
-}
-
-div.invoice-address {
-    margin-top: 30px;
-    margin-bottom: 30px;
-}
-
-table.invoice-records {}
-table.invoice-meta th {
-    padding-right: 40px;
-}
-table.invoice-sum th {
-    width: 70%;
-}
-table.invoice-sum th, table.invoice-sum td  {
-    text-align: right;
-}
-
-/* ================================ FREELANCER INVOICE ================================ */
-
-#freelancer-invoice {
-    font: 15px/1 $font-family-sans-serif;
-    box-sizing: border-box;
-
-    h1 {
-        font: bold 100% sans-serif;
-        letter-spacing: 0.5em;
-        text-align: center;
-        text-transform: uppercase;
-    }
-
-    h2 {
-        font: bold 1.5em sans-serif;
-        margin-bottom: 1em;
-    }
-
-    /* table */
-
-    table {
-        table-layout: fixed;
-        width: 100%;
-    }
-
-    table {
-        border-collapse: separate;
-        border-spacing: 0;
-    }
-
-    /* header */
-
-    header {
-    }
-
-    header:after {
-        clear: both;
-        content: "";
-        display: table;
-        font-size: 1em;
-    }
-
-    header address {
-        float: left;
-        font-style: normal;
-        line-height: 1.25;
-        margin: 0 1em 1em 0;
-        font-weight: bold;
-        font-size: 0.7em;
-    }
-
-    article address {
-        font-size: 1em;
-        float: left;
-        margin: 1em 0;
-    }
-
-    article.address {
-        margin-bottom: 1.5em;
-    }
-
-    article.footer {
-        margin-top: 60px;
-    }
-
-    /* article */
-
-    article, table.meta, table.inventory {
-        margin: 1em 0;
-    }
-
-    article:after {
-        clear: both;
-        content: "";
-        display: table;
-    }
-
-    article h1 {
-        clip: rect(0 0 0 0);
-        position: absolute;
-    }
-
-    article p {
-        margin-bottom: 20px;
-    }
-
-    /* table meta & balance */
-
-    table.meta:after, table.balance:after {
-        clear: both;
-        content: "";
-        display: table;
-    }
-
-    /* table meta */
-
-    table.meta {
-        float: right;
-        width: 50%;
-        font-size: 85%;
-
-        th {
-            text-align: right;
-            font-weight: normal;
+        .table.no-border, .table.no-border td, .table.no-border th {
+            border: 0;
         }
 
-        td {
-            width: 120px;
-            text-align: right;
-        }
-    }
-
-    /* table balance */
-
-    table.balance {
-        float: right;
-        th {
-            text-align: right;
-            font-weight: normal;
+        h1, h2, h3 {
+            font-family: $font-family-sans-serif;
         }
 
-        td {
-            width: 140px;
+        .invoice {
+            margin: 105px auto 30px auto;
+            padding: 50px 65px;
+            min-height: 297mm;
+            position: relative;
+            max-width: 210mm;
+            box-shadow: 0 0 20px rgba(80, 80, 80, 0.7);
+            background: #fff;
+            border: none;
+        }
+
+        .page-header {
+            margin: 10px 0 20px 0;
+            font-size: 22px;
+
+            > small {
+                color: #666;
+                display: block;
+                margin-top: 5px;
+            }
+
+            h3 {
+                border-color: #ddd;
+            }
+        }
+
+        div.invoice-address {
+            margin-top: 30px;
+            margin-bottom: 30px;
+        }
+
+        table.invoice-meta th {
+            padding-right: 40px;
+        }
+
+        table.invoice-sum th {
+            width: 70%;
+        }
+
+        table.invoice-sum th, table.invoice-sum td {
             text-align: right;
         }
 
-        .total {
-            font-weight: bold;
-        }
-    }
+        .invoice-items {
+            margin-top: 2em;
+            margin-bottom: 3em;
 
-    /* table items */
+            .table {
+                thead th {
+                    font-weight: bold;
+                    border-bottom: 1px solid #ddd;
+                    padding-bottom: 15px
+                }
 
-    table.inventory {
-        clear: both;
-        width: 100%;
-        margin-top: 2em;
-        border-bottom: 1px solid #000;
-    }
+                tfoot {
+                    border-top: 1px solid #ddd;
 
-    table.inventory th {
-        font-weight: bold;
-        border-width: 0 0 1px 0;
-        border-bottom: 1px solid #000;
-    }
-    table.inventory th,
-    table.inventory td {
-        padding: 5px;
-    }
+                    tr:first-child th,
+                    tr:first-child td {
+                        padding-top: 15px
+                    }
 
-    table.inventory td:nth-child(1),
-    table.inventory th:nth-child(1) {
-        text-align: left;
-    }
+                    tr {
+                        th, td {
+                            border: none;
+                            padding: 4px 8px;
+                        }
+                    }
+                }
+            }
 
-    table.inventory td:nth-child(2),
-    table.inventory th:nth-child(2) {
-        text-align: center;
-        width: 20%;
-    }
-
-    table.inventory td:nth-child(3),
-    table.inventory th:nth-child(3) {
-        text-align: center;
-        width: 20%;
-    }
-
-    table.inventory td:nth-child(4),
-    table.inventory th:nth-child(4) {
-        text-align: right;
-        width: 20%;
-    }
-
-    /* footer */
-
-    footer {
-        margin-top: 50px;
-    }
-
-    footer table {
-        border-top: 1px solid #000;
-        font-size: 0.8em;
-        padding-top: 5px;
-    }
-
-    footer th {
-        text-align: left;
-        font-weight: bold;
-        margin-bottom: 10px;
-    }
-
-    footer table th:nth-child(1) {
-        width: 32%;
-    }
-
-    footer table th:nth-child(3) {
-        width: 28%;
-    }
-
-    footer td {
-        text-align: left;
-        vertical-align: bottom;
-    }
-
-    /* aside */
-
-    aside {
-        position: absolute;
-        top: 10in;
-        width: 7.5in;
-    }
-
-    aside h1 {
-        border: none;
-        border-width: 0 0 1px;
-        margin: 0 0 1em;
-    }
-
-    aside h1 {
-        border-color: #999;
-        border-bottom-style: solid;
-    }
-
-    aside p {
-        font-size: 85%;
-    }
-
-    aside div {
-        margin-top: 15px;
-    }
-
-    aside div p {
-        line-height: 1.4;
-    }
-
-    aside p span {
-        width: 130px;
-        font-weight: bold;
-        display: inline-block;
-    }
-}
-
-@media print {
-    * {
-        -webkit-print-color-adjust: exact;
-    }
-    body, .wrapper, #freelancer-invoice {
-        margin: 0;
-        padding: 0;
-    }
-
-    #freelancer-invoice {
-        margin: 1em 2em;
-
-        span:empty {
-            display: none;
         }
 
-        .add, .cut {
-            display: none;
+        .footer {
+            border-top: 1px solid #ccc;
+            margin-top: 50px;
+            font-size: 0.8em;
+            padding-top: 10px;
+            width: 100%;
+        }
+
+        /* ================================ FREELANCER INVOICE ================================ */
+
+        #freelancer-invoice {
+
+            box-sizing: border-box;
+
+            h1 {
+                font: bold 100% sans-serif;
+                letter-spacing: 0.5em;
+                text-align: center;
+                text-transform: uppercase;
+            }
+
+            h2 {
+                font: bold 1.5em sans-serif;
+                margin-bottom: 1em;
+            }
+
+            /* table */
+
+            table {
+                width: 100%;
+            }
+
+            table {
+                border-collapse: separate;
+                border-spacing: 0;
+            }
+
+            /* header */
+
+            header {
+                &:after {
+                    clear: both;
+                    content: "";
+                    display: table;
+                    font-size: 1em;
+                }
+
+                address {
+                    float: left;
+                    font-style: normal;
+                    line-height: 1.25;
+                    margin: 0 1em 1em 0;
+                    font-size: 0.7em;
+                }
+            }
+
+            article address {
+                font-size: 1em;
+                float: left;
+            }
+
+            article.address {
+                margin: 1em 0 1.5em 0;
+            }
+
+            /* article */
+
+            article:after {
+                clear: both;
+                content: "";
+                display: table;
+            }
+
+            article h1 {
+                clip: rect(0 0 0 0);
+                position: absolute;
+            }
+
+            article p {
+                margin-bottom: 20px;
+            }
+
+            /* table meta & balance */
+
+            table.meta:after, table.balance:after {
+                clear: both;
+                content: "";
+                display: table;
+            }
+
+            /* table meta */
+
+            table.meta {
+                float: right;
+                width: 50%;
+                font-size: 85%;
+
+                th {
+                    text-align: right;
+                    font-weight: normal;
+                }
+
+                td {
+                    width: 120px;
+                    text-align: right;
+                }
+            }
+
+            /* table balance */
+
+            table.balance {
+                float: right;
+                margin-top: 1em;
+
+                th {
+                    text-align: right;
+                    font-weight: normal;
+                }
+
+                td {
+                    width: 140px;
+                    text-align: right;
+                    line-height: 22px;
+                }
+
+                .total {
+                    font-weight: bold;
+                }
+            }
+
+            /* table items */
+
+            table.inventory {
+                clear: both;
+                width: 100%;
+                margin-top: 2em;
+                border-bottom: 1px solid #000;
+            }
+
+            table.inventory th,
+            table.inventory td {
+                padding: 5px;
+            }
+
+            table.inventory thead th {
+                font-weight: bold;
+                border-width: 0 0 1px 0;
+                border-bottom: 1px solid #000;
+                padding-bottom: 15px
+            }
+
+            table.inventory tbody tr:first-child td {
+                padding-top: 15px
+            }
+
+            table.inventory tbody tr:last-child td {
+                padding-bottom: 15px
+            }
+
+            .footer {
+                border-color: #000;
+            }
+        }
+
+        /* ================================ PRINTING RULES ================================ */
+
+        @media print {
+            * {
+                -webkit-print-color-adjust: exact;
+            }
+            body, .wrapper {
+                margin: 0;
+                padding: 0;
+                background-color: white;
+            }
+            #freelancer-invoice {
+                span:empty {
+                    display: none;
+                }
+
+                .add, .cut {
+                    display: none;
+                }
+            }
+            .invoice {
+                margin: 1em 2em;
+                font-size: 90%;
+                width: unset;
+                padding: 0;
+                min-height: unset;
+                position: unset;
+                max-width: unset;
+                box-shadow: unset;
+            }
         }
     }
-
-    .invoice {
-        width: unset;
-    }
-}
+}

assets/sass/layout.scss

@@ -0,0 +1,8 @@
+@media (max-width: $screen-sm-max) {
+    .main-header .logo {
+        display: none;
+    }
+    .fixed .content-wrapper, .fixed .right-side, .control-sidebar, .main-sidebar {
+        padding-top: 50px;
+    }
+}

assets/sass/modal.scss

@@ -0,0 +1,9 @@
+.modal-header,
+.modal-footer {
+    padding-top: 10px;
+    padding-bottom: 10px;
+}
+.modal-content {
+    border-radius: 3px;
+    box-shadow: 0 10px 80px rgba(0, 0, 0, 0.6);
+}

assets/sass/navbar.scss

@@ -5,10 +5,30 @@
  * file that was distributed with this source code.
  */
 
+.navbar-custom-menu {
+    .navbar-nav {
+        li>.ddt-small {
+            padding-top: 10px;
+            padding-bottom: 10px;
+        }
+    }
+}
+
 .navbar-nav {
-    li>a.ddt-large {
-        padding: 15px 12px 11px 10px;
-        font-size: 10px;
+    .avatar {
+        max-height: 30px;
+        max-width: 30px;
+        height: 30px;
+        width: 30px;
+        margin-top: 0;
+        .initials {
+            top: 5px;
+            left: 0;
+        }
+    }
+    li>.ddt-small {
+        padding-top: 10px;
+        padding-bottom: 10px;
     }
     li.messages-menu ul.menu li {
         a:hover .pull-left i {
@@ -31,17 +51,13 @@
         width: unset !important;
     }
     .user-menu {
-        margin-right: 10px;
         ul {
             li {
                 a {
+                    color: #444;
                     &:hover {
                         background-color: #f4f4f4;
-                        i {
-                            color: $blue;
-                        }
                     }
-                    color: #444;
                     i {
                         padding-right: 10px;
                     }
@@ -52,41 +68,86 @@
             }
         }
     }
-    .notifications-menu>.dropdown-menu>li .menu>li>a:hover i {
-        color: $green;
+}
+@keyframes ticktac-blink {
+    0% { opacity: 1; }
+    5% { opacity: 0.95; }
+    10% { opacity: 0.9; }
+    15% { opacity: 0.85; }
+    20% { opacity: 0.8; }
+    25% { opacity: 0.75; }
+    30% { opacity: 0.7; }
+    35% { opacity: 0.65; }
+    40% { opacity: 0.6; }
+    45% { opacity: 0.65; }
+    50% { opacity: 0.7; }
+    55% { opacity: 0.75; }
+    60% { opacity: 0.8; }
+    65% { opacity: 0.85; }
+    70% { opacity: 0.9; }
+    75% { opacity: 0.95; }
+    100% { opacity: 1; }
+}
+.ticktac-single {
+    display: block;
+    position: relative;
+    padding-left: 15px;
+    padding-right: 15px;
+    i {
+        animation: ticktac-blink 2s step-end infinite;
+    }
+    span {
+        font-size: 1.8em;
+        line-height: 1em;
+        padding-left: 5px;
+        padding-right: 0;
+    }
+    &:hover {
+        background: rgba(0,0,0,.3);
+    }
+}
+body.fixed {
+    .navbar-nav {
+        .user-menu {
+            margin-right: 10px;
+        }
     }
 }
 
-@media (max-width: $screen-sm-min) {
+@media (max-width: $screen-sm-max) {
     .navbar-custom-menu>.navbar-nav>li>.dropdown-menu {
         right: 0;
     }
-    .navbar-nav .user-menu {
-        margin-right: 0;
+    body.fixed {
+        .navbar-nav {
+            .user-menu {
+                margin-right: 0;
+            }
+        }
     }
     .navbar-nav .user-menu.open .dropdown-menu > li > a {
         padding: 5px 25px 5px 25px
     }
 }
 
-/*
-.ticktac:hover i.running{
-    color: #4ff131;
+@media (max-width: $screen-sm-max) {
+    .ticktac-single {
+        padding-left: 5px;
+        padding-right: 5px;
+    }
+    .navbar-custom-menu .navbar-nav li>.ddt-small {
+        padding-left: 5px;
+        padding-right: 5px;
+    }
 }
 
-li.open .ticktac i.running{
-    color: #4ff131;
+@media (max-width: $screen-md-max) {
+    .ticktac-single {
+        padding-left: 10px;
+        padding-right: 10px;
+    }
+    .navbar-custom-menu .navbar-nav li>.ddt-small {
+        padding-left: 10px;
+        padding-right: 10px;
+    }
 }
-
-.ticktac i.stopped{
-    color: #fff;
-}
-
-.ticktac:hover i.stopped{
-    color: #4ff131;
-}
-.user-panel>.info {
-    left: 40px;
-    padding-top: 0px;
-}
-*/

assets/sass/print.scss

@@ -6,5 +6,21 @@
  */
 
 @media print{
-    .sf-toolbar, .control-sidebar {display: none !important;}
+    .sf-toolbar, .control-sidebar {
+        display: none !important;
+    }
+    .col-print-12{
+        width:100%;
+    }
+    .sidebar-mini.sidebar-collapse .content-wrapper, .sidebar-mini.sidebar-collapse .main-footer, .sidebar-mini.sidebar-collapse .right-side {
+        margin: 0!important;
+    }
+    section.content {
+        margin: 0;
+        padding: 0;
+    }
+    span i.dot {
+        display: none;
+        margin-right: 0!important;
+    }
 }

assets/sass/progressbar.scss

@@ -0,0 +1,20 @@
+/*
+    make sure that the progressbar title does not wrap and does not need to be embedded in a container with white-space: nowrap
+    used for example in the project-overview report
+*/
+.progress-group {
+    .progress-title {
+        width: 100%;
+        white-space: nowrap;
+        .progress-text {
+            display: inline-block;
+            width: 1%;
+        }
+        .progress-number {
+            display: inline-block;
+            width: 98%;
+            text-align: right;
+            float: none;
+        }
+    }
+}

assets/sass/reporting.scss

@@ -0,0 +1,7 @@
+
+.form-reporting .box-header .form-group {
+    margin-right: 10px;
+    label {
+        font-size: $font-size-base;
+    }
+}

assets/sass/security.scss

@@ -0,0 +1,35 @@
+body.login-page {
+    .alert {
+        margin-bottom: 0;
+    }
+    .login-box-body {
+        text-align: center;
+        padding: 30px 35px;
+        box-shadow: 0 10px 30px 0 rgba(172, 168, 168, 0.43);
+        .btn {
+            padding: 7px;
+            font-size: 115%;
+        }
+    }
+    .login-head {
+        margin-top: 0;
+    }
+    .login-actions a {
+        display: block;
+    }
+    .form-group {
+        input[type=password], input[type=text] {
+            padding: 20px 15px;
+        }
+    }
+    span.glyphicon {
+        display: none;
+    }
+}
+@media (max-width: $screen-sm-max) {
+    body.login-page {
+        .login-box-body {
+            padding: 20px 27px;
+        }
+    }
+}

assets/sass/selectpicker.scss

@@ -0,0 +1,29 @@
+@import '~select2/dist/css/select2.min.css';
+@import '~select2-bootstrap-theme/dist/select2-bootstrap.min.css';
+
+/* some labels were placed incorrect due to a margin-top: -4px */
+.select2-container .select2-selection--single .select2-selection__rendered {
+    margin-top: 0;
+}
+/* make sure the border looks like all other form elements */
+.select2-container--bootstrap .select2-selection {
+    border-radius: 0;
+}
+/* placeholder in multi-selects were cut off */
+.select2-search.select2-search--inline .select2-search__field {
+    width: 100% !important;
+}
+/* make sure that <optgroup> elements are padded, to allow visual difference to global activities */
+.select2-container--bootstrap .select2-results__options.select2-results__options--nested li.select2-results__option {
+    padding-left: 30px;
+}
+/* empty <option> were too small to be noticed as clickable element */
+.select2-container--bootstrap .select2-results__option {
+    min-height: 30px;
+}
+
+/* Fixes the size on quick-entry form */
+.select2-container--bootstrap {
+    display: table;
+    table-layout: fixed;
+}

assets/sass/sidebar.scss

@@ -5,28 +5,6 @@
  * file that was distributed with this source code.
  */
 
-/* UserPanel is deactivated right now */
-/*
-.user-panel>.info {
-    left: 80px;
-}
-*/
-
-/* Right sidebar with additional tabs for personal settings and "About Kimai" section */
-/*
-.control-sidebar {
-    select {
-        color: $input-color;
-        background-color: $input-bg;
-    }
-    div.image {
-        img.img-circle {
-            max-width: 34px;
-        }
-    }
-}
-*/
-
 @media (min-width: $screen-sm-min) {
     .sidebar-mini.sidebar-collapse .sidebar-menu li.header {
         border-top-width: 1px;

assets/sass/skins.scss

@@ -1,26 +1,69 @@
 
-$skins: blue, blue, black, green, purple, red, yellow;
+$skins:
+    "blue" $yellow #fff $yellow $red,
+    "black" $yellow #000 $green $red,
+    "green" $yellow #fff $yellow $red,
+    "purple" $yellow #fff $yellow $red,
+    "red" $yellow #fff $yellow $yellow,
+    "yellow" $blue #fff $green $red
+;
 
-@each $skinColor in $skins {
-    @media (max-width: $screen-sm-min) {
-        .skin-#{$skinColor} .main-header .navbar .dropdown-menu li.divider {
-            background-color: #ccc;
-        }
-        .skin-#{$skinColor} .main-header .navbar .dropdown-menu li a {
-            color: #444;
-        }
-        .skin-#{$skinColor} .main-header .navbar .dropdown-menu li a:hover {
-            background: #fff;
-        }
+@each $skinColor, $navHighlight, $tickTacColor, $startButton, $stopButton in $skins {
+    @each $prefix in (".skin-#{$skinColor}", ".skin-#{$skinColor}-light") {
+        @media (max-width: $screen-sm-max) {
+            #{$prefix} {
+                .main-header .navbar .dropdown-menu li.divider {
+                    background-color: #ccc;
+                }
 
-        .skin-#{$skinColor}-light .main-header .navbar .dropdown-menu li.divider {
-            background-color: #ccc;
+                .main-header .navbar .dropdown-menu li a {
+                    color: #444;
+                }
+
+                .main-header .navbar .dropdown-menu li a:hover {
+                    background: #fff;
+                }
+            }
         }
-        .skin-#{$skinColor}-light .main-header .navbar .dropdown-menu li a {
-            color: #444;
-        }
-        .skin-#{$skinColor}-light .main-header .navbar .dropdown-menu li a:hover {
-            background: #fff;
+        #{$prefix} {
+            .navbar-nav {
+                .user-menu {
+                    ul {
+                        li {
+                            a {
+                                &:hover {
+                                    i {
+                                        color: $navHighlight;
+                                    }
+                                }
+                            }
+                        }
+                    }
+                }
+                .notifications-menu > .dropdown-menu > li .menu > li > a:hover i {
+                    color: $navHighlight;
+                }
+            }
+            .ticktac-single {
+                i {
+                    color: $tickTacColor;
+                }
+                span {
+                    color: $tickTacColor;
+                }
+                &:hover {
+                    .ticktac-stop {
+                        i {
+                            color: $stopButton;
+                        }
+                    }
+                    .ticktac-start {
+                        i {
+                            color: $startButton;
+                        }
+                    }
+                }
+            }
         }
     }
 }

assets/sass/sweetalert.scss

@@ -1,3 +1,16 @@
 .swal2-popup {
     font-size: unset;
-}
+}
+
+body.swal2-toast-shown .swal2-container {
+    // never block the top two bars double-bars display (smaller displays)
+    @media only screen and (max-width: 768px) {
+        top: 95px !important;
+        width: 80%;
+    }
+
+    // never block the top bar on single-bar display (larger devices)
+    @media only screen and (min-width: 768px) {
+        top: 60px !important;
+    }
+}

assets/sass/tabs.scss

@@ -0,0 +1,3 @@
+.tab-content {
+    margin-top: 20px;
+}

assets/sass/toolbar.scss

@@ -5,20 +5,9 @@
  * file that was distributed with this source code.
  */
 
-/* Page based action buttons in the upper right corner of the content area */
-.content-header > .breadcrumb {
-    position: absolute;
-    float: right;
-    background: transparent;
-}
-
-.toolbar-pad {
-    padding: 10px;
-}
-
-/* The filter form is available on most pages above the datatable */
 @media (min-width: $screen-sm-min) {
     .toolbar {
+        // @deprecated since 1.2 - using the navbar-form is deprecated and will be removed with 2.0
         form.navbar-form {
             font-size: $font-size-base;
             .form-control {
@@ -34,8 +23,4 @@
             }
         }
     }
-    .toolbar-pad {
-        padding: 10px 0;
-    }
 }
-

assets/sass/variables.scss

@@ -5,8 +5,14 @@
  * file that was distributed with this source code.
  */
 
+@import "~bootstrap-sass/assets/stylesheets/bootstrap/variables";
+
+/* For highlighting rows, fieldsets and so on */
+$highlight-bg: #f5f5f5;
+$highlight-today: #fcf8e3;
+
 /**
- * A simple one to one clone of /node_modules/admin-lte/build/less/variables.less
+ * BELOW: A simple one to one clone of /node_modules/admin-lte/build/less/variables.less
  */
 
 // COLORS
@@ -20,7 +26,7 @@ $green: #00a65a;
 // Info
 //$aqua: #00c0ef;
 // Warning
-//$yellow: #f39c12;
+$yellow: #f0ad4e;
 $blue: #0073b7;
 //$navy: #001F3F;
 //$teal: #39CCCC;
@@ -32,6 +38,7 @@ $blue: #0073b7;
 //$maroon: #D81B60;
 //$black: #111;
 $gray-lte: #d2d6de;
+$kimai-default: $gray-lte;
 
 // LAYOUT
 // --------------------------------------------------------

bin/console

@@ -2,38 +2,28 @@
 <?php
 
 use App\Kernel;
-use Symfony\Bundle\FrameworkBundle\Console\Application;
+use App\ConsoleApplication;
 use Symfony\Component\Console\Input\ArgvInput;
-use Symfony\Component\Debug\Debug;
+use Symfony\Component\ErrorHandler\Debug;
 use Symfony\Component\Dotenv\Dotenv;
 
 set_time_limit(0);
 
-require __DIR__.'/../vendor/autoload.php';
+require dirname(__DIR__) . '/vendor/autoload.php';
 
-if (!class_exists(Application::class)) {
-    throw new \RuntimeException('You need to add "symfony/framework-bundle" as a Composer dependency.');
-}
-
-if (!isset($_SERVER['APP_ENV'])) {
-    if (!class_exists(Dotenv::class)) {
-        throw new \RuntimeException('APP_ENV environment variable is not defined. You need to define environment variables for configuration or add "symfony/dotenv" as a Composer dependency to load variables from a .env file.');
-    }
-    (new Dotenv(true))->load(__DIR__.'/../.env');
-}
+// do NOT rely on calls to getenv() as it is not thread safe
+(new Dotenv(false))->loadEnv(dirname(__DIR__).'/.env');
 
 $input = new ArgvInput();
-$env = $input->getParameterOption(['--env', '-e'], $_SERVER['APP_ENV'] ?? 'dev');
-$debug = ($_SERVER['APP_DEBUG'] ?? ('prod' !== $env)) && !$input->hasParameterOption(['--no-debug', '']);
+$env = $input->getParameterOption(['--env', '-e'], $_SERVER['APP_ENV'] ?? 'prod');
+$debug = (bool) ($_SERVER['APP_DEBUG'] ?? (in_array($env, ['dev', 'test']))) && !$input->hasParameterOption(['--no-debug', '']);
 
 if ($debug) {
     umask(0000);
 
-    if (class_exists(Debug::class)) {
-        Debug::enable();
-    }
+    Debug::enable();
 }
 
 $kernel = new Kernel($env, $debug);
-$application = new Application($kernel);
+$application = new ConsoleApplication($kernel);
 $application->run($input);

composer.json

@@ -2,7 +2,7 @@
     "name": "kevinpapst/kimai2",
     "license": "MIT",
     "type": "project",
-    "description": "Kimai Time-Tracking 2",
+    "description": "Kimai - Time Tracking",
     "authors": [
         {
             "name": "Kevin Papst",
@@ -10,79 +10,108 @@
         }
     ],
     "require": {
-        "php": "^7.2",
+        "php": "7.3.*||7.4.*||8.0.*",
         "ext-gd": "*",
         "ext-intl": "*",
         "ext-json": "*",
         "ext-mbstring": "*",
         "ext-pdo": "*",
+        "ext-xsl": "*",
         "ext-zip": "*",
         "beberlei/doctrineextensions": "^1.2",
+        "composer/package-versions-deprecated": "^1.8",
+        "doctrine/dbal": "^2.1",
+        "doctrine/doctrine-bundle": "^2.0",
+        "doctrine/doctrine-migrations-bundle": "^3.0",
+        "doctrine/orm": "^2.8",
         "erusev/parsedown": "^1.6",
-        "friendsofsymfony/rest-bundle": "^2.5",
-        "friendsofsymfony/user-bundle": "dev-master",
-        "gedmo/doctrine-extensions": "^2.4",
+        "friendsofsymfony/rest-bundle": "^3.0",
+        "gedmo/doctrine-extensions": "^3.0",
+        "handcraftedinthealps/rest-routing-bundle": "^1.0",
         "jms/metadata": "^2.0",
-        "jms/serializer-bundle": "^3.2",
-        "kevinpapst/adminlte-bundle": "~2.6",
-        "kimai/kimai2-composer": "^0.1",
-        "mpdf/mpdf": "^7.1",
+        "jms/serializer-bundle": "^3.9",
+        "kevinpapst/adminlte-bundle": "^3.5",
+        "league/csv": "^9.4",
+        "league/html-to-markdown": "^5.0",
+        "mpdf/mpdf": "^8.0",
         "nelmio/api-doc-bundle": "^3.2",
-        "nelmio/cors-bundle": "^1.5",
-        "ocramius/proxy-manager": "2.1.1",
-        "phpoffice/phpspreadsheet": "^1.4",
-        "phpoffice/phpword": "^0.15.0",
+        "nelmio/cors-bundle": "^2.0",
+        "onelogin/php-saml": "^3.4",
+        "pagerfanta/pagerfanta": "^2.1",
+        "phpoffice/phpspreadsheet": "^1.16",
+        "phpoffice/phpword": "^0.18",
         "psr/log": "^1.1",
-        "sensio/framework-extra-bundle": "^5.2",
-        "symfony/asset": "^4.0",
-        "symfony/console": "^4.0",
-        "symfony/debug-pack": "^1.0",
-        "symfony/dotenv": "^4.0",
-        "symfony/expression-language": "^4.0",
+        "sensio/framework-extra-bundle": "^6.0",
+        "symfony/amazon-mailer": "^4.4",
+        "symfony/asset": "^4.4",
+        "symfony/console": "^4.4",
+        "symfony/dotenv": "^4.4",
+        "symfony/expression-language": "^4.4",
         "symfony/flex": "^1.0",
-        "symfony/form": "^4.0",
-        "symfony/framework-bundle": "^4.0",
-        "symfony/intl": "^4.0",
+        "symfony/form": "^4.4",
+        "symfony/framework-bundle": "^4.4",
+        "symfony/google-mailer": "^4.4",
+        "symfony/http-client": "^4.4",
+        "symfony/intl": "^4.4",
+        "symfony/mailchimp-mailer": "^4.4",
+        "symfony/mailer": "^4.4",
+        "symfony/mailgun-mailer": "^4.4",
         "symfony/monolog-bundle": "^3.4",
-        "symfony/orm-pack": "^1.0",
-        "symfony/security-bundle": "^4.0",
-        "symfony/security-csrf": "^4.0",
-        "symfony/serializer": "^4.0",
-        "symfony/swiftmailer-bundle": "^3.2",
-        "symfony/translation": "^4.0",
-        "symfony/twig-bundle": "^4.0",
-        "symfony/validator": "^4.0",
+        "symfony/postmark-mailer": "^4.4",
+        "symfony/security-bundle": "^4.4",
+        "symfony/security-csrf": "^4.4",
+        "symfony/sendgrid-mailer": "^4.4",
+        "symfony/serializer": "^4.4",
+        "symfony/translation": "^4.4",
+        "symfony/twig-bundle": "^4.4",
+        "symfony/uid": "^5.0",
+        "symfony/validator": "^4.4",
         "symfony/webpack-encore-bundle": "^1.5",
-        "symfony/yaml": "^4.0",
-        "twig/extensions": "^1.5",
-        "white-october/pagerfanta-bundle": "^1.1"
+        "symfony/yaml": "^4.4",
+        "twig/cssinliner-extra": "^3.0",
+        "twig/extra-bundle": "^3.0",
+        "twig/inky-extra": "^3.0",
+        "twig/intl-extra": "^3.0",
+        "twig/string-extra": "^3.0"
     },
     "require-dev": {
-        "dama/doctrine-test-bundle": "^5.0",
+        "dama/doctrine-test-bundle": "^6.0",
         "doctrine/doctrine-fixtures-bundle": "^3.2",
-        "friendsofphp/php-cs-fixer": "^2.10",
-        "fzaninotto/faker": "^1.8",
-        "phpstan/phpstan": "^0.11.7",
-        "phpstan/phpstan-doctrine": "^0.11.4",
-        "phpstan/phpstan-phpunit": "^0.11.2",
-        "phpstan/phpstan-symfony": "^0.11.6",
-        "phpunit/phpunit": "^7.0",
-        "symfony/browser-kit": "^4.0",
-        "symfony/css-selector": "^4.0",
+        "fakerphp/faker": "^1.15",
+        "friendsofphp/php-cs-fixer": "^3.2",
+        "phpstan/phpstan": "^1.0",
+        "phpstan/phpstan-doctrine": "^1.0",
+        "phpstan/phpstan-phpunit": "^1.0",
+        "phpstan/phpstan-symfony": "^1.0",
+        "phpunit/phpunit": "^9.0",
+        "symfony/browser-kit": "^4.4",
+        "symfony/css-selector": "^4.4",
+        "symfony/debug-bundle": "^4.4",
+        "symfony/dom-crawler": "4.4.4",
         "symfony/maker-bundle": "^1.12",
-        "symfony/phpunit-bridge": "^4.0",
-        "symfony/profiler-pack": "^1.0",
-        "symfony/thanks": "^1.0",
-        "symfony/web-server-bundle": "~4.2.0"
+        "symfony/phpunit-bridge": "^4.4",
+        "symfony/stopwatch": "^4.4",
+        "symfony/var-dumper": "^4.4",
+        "symfony/web-profiler-bundle": "^4.4"
     },
+    "repositories": [
+        {
+            "type": "artifact",
+            "url": "var/packages/"
+        }
+    ],
     "config": {
         "platform": {
-            "php": "7.2"
+            "php": "7.3"
         },
         "preferred-install": {
             "*": "dist"
         },
-        "sort-packages": true
+        "sort-packages": true,
+        "allow-plugins": {
+            "composer/package-versions-deprecated": true,
+            "symfony/flex": true
+        }
     },
     "autoload": {
         "psr-4": {
@@ -96,14 +125,18 @@
         }
     },
     "replace": {
+        "symfony/polyfill-mbstring": "*",
+        "symfony/polyfill-intl": "*",
         "symfony/polyfill-iconv": "*",
+        "symfony/polyfill-php72": "*",
         "symfony/polyfill-php71": "*",
         "symfony/polyfill-php70": "*",
-        "symfony/polyfill-php56": "*"
+        "symfony/polyfill-php56": "*",
+        "symfony/polyfill-php55": "*",
+        "symfony/polyfill-php54": "*"
     },
     "suggest": {
-        "ext-mbstring": "If ext-mbstring is not available you MUST install symfony/polyfill-mbstring",
-        "zendframework/zend-ldap": "For LDAP authentication with Kimai"
+        "laminas/laminas-ldap": "For LDAP authentication with Kimai"
     },
     "scripts": {
         "auto-scripts": {
@@ -116,20 +149,39 @@
         "post-update-cmd": [
             "@auto-scripts"
         ],
-        "kimai:code-check":  [
+        "kimai:pre-commit":  [
             "@kimai:codestyle",
             "@kimai:phpstan",
-            "@kimai:tests"
+            "@linting",
+            "@kimai:tests-unit"
         ],
-        "kimai:tests": "vendor/bin/phpunit tests/",
+        "kimai:code-check": "@code-check",
+        "code-check":  [
+            "@kimai:pre-commit",
+            "@kimai:tests-integration"
+        ],
+        "kimai:code-lint": "@linting",
+        "linting": [
+            "composer validate --strict",
+            "bin/console lint:container",
+            "bin/console lint:yaml config --parse-tags",
+            "bin/console lint:twig templates --show-deprecations",
+            "bin/console lint:xliff translations",
+            "bin/console doctrine:schema:validate --skip-sync -vvv --no-interaction"
+        ],
+        "tests": "vendor/bin/phpunit tests/",
+        "kimai:tests": "@tests",
         "kimai:tests-unit": "vendor/bin/phpunit --exclude-group integration tests/",
         "kimai:tests-integration": "vendor/bin/phpunit --group integration tests/",
-        "kimai:phpstan": [
-            "vendor/bin/phpstan analyse src -c phpstan.neon --level=3",
-            "vendor/bin/phpstan analyse tests -c tests/phpstan.neon --level=4"
+        "kimai:phpstan": "@phpstan",
+        "phpstan": [
+            "vendor/bin/phpstan analyse src -c phpstan.neon --level=5",
+            "vendor/bin/phpstan analyse tests -c tests/phpstan.neon --level=5"
         ],
-        "kimai:codestyle": "vendor/bin/php-cs-fixer fix --dry-run --verbose --show-progress=none",
-        "kimai:codestyle-fix": "vendor/bin/php-cs-fixer fix"
+        "kimai:codestyle": "@codestyle",
+        "codestyle": "vendor/bin/php-cs-fixer fix --dry-run --verbose --show-progress=none",
+        "kimai:codestyle-fix": "@codestyle-fix",
+        "codestyle-fix": "vendor/bin/php-cs-fixer fix"
     },
     "conflict": {
         "symfony/symfony": "*"
@@ -138,7 +190,7 @@
         "symfony": {
             "id": "01C3FWRDJJEX9K6Y3A4XDFXPBR",
             "allow-contrib": true,
-            "require": "4.3.*"
+            "require": "4.4.*"
         }
     }
 }

config/bundles.php

@@ -2,8 +2,6 @@
 
 return [
     Symfony\Bundle\FrameworkBundle\FrameworkBundle::class => ['all' => true],
-    Symfony\Bundle\WebServerBundle\WebServerBundle::class => ['dev' => true],
-    Doctrine\Bundle\DoctrineCacheBundle\DoctrineCacheBundle::class => ['all' => true],
     Doctrine\Bundle\DoctrineBundle\DoctrineBundle::class => ['all' => true],
     Doctrine\Bundle\FixturesBundle\DoctrineFixturesBundle::class => ['dev' => true, 'test' => true],
     Doctrine\Bundle\MigrationsBundle\DoctrineMigrationsBundle::class => ['all' => true],
@@ -12,16 +10,15 @@ return [
     Symfony\Bundle\WebProfilerBundle\WebProfilerBundle::class => ['dev' => true, 'test' => true],
     Symfony\Bundle\TwigBundle\TwigBundle::class => ['all' => true],
     Symfony\Bundle\SecurityBundle\SecurityBundle::class => ['all' => true],
-    Symfony\Bundle\SwiftmailerBundle\SwiftmailerBundle::class => ['all' => true],
-    WhiteOctober\PagerfantaBundle\WhiteOctoberPagerfantaBundle::class => ['all' => true],
     Symfony\Bundle\MakerBundle\MakerBundle::class => ['dev' => true],
     Symfony\Bundle\DebugBundle\DebugBundle::class => ['dev' => true, 'test' => true],
     DAMA\DoctrineTestBundle\DAMADoctrineTestBundle::class => ['test' => true],
     KevinPapst\AdminLTEBundle\AdminLTEBundle::class => ['all' => true],
     JMS\SerializerBundle\JMSSerializerBundle::class => ['all' => true],
-    FOS\UserBundle\FOSUserBundle::class => ['all' => true],
     FOS\RestBundle\FOSRestBundle::class => ['all' => true],
     Nelmio\ApiDocBundle\NelmioApiDocBundle::class => ['all' => true],
     Nelmio\CorsBundle\NelmioCorsBundle::class => ['all' => true],
     Symfony\WebpackEncoreBundle\WebpackEncoreBundle::class => ['all' => true],
+    Twig\Extra\TwigExtraBundle\TwigExtraBundle::class => ['all' => true],
+    HandcraftedInTheAlps\RestRoutingBundle\RestRoutingBundle::class => ['all' => true],
 ];

config/packages/admin_lte.yaml

@@ -7,7 +7,7 @@ admin_lte:
         # default image for missing user avatar images
         default_avatar: build/images/default_avatar.png
         # the color skin
-        skin: skin-green
+        skin: skin-blue
         # if activated, the boxed_layout will be deactivated
         fixed_layout: true
         # boxed layout (true) or full-screen (false)

config/packages/assets.yaml

@@ -1,3 +1,6 @@
 framework:
     assets:
         json_manifest_path: '%kernel.project_dir%/public/build/manifest.json'
+        packages:
+            avatars:
+                base_path: 'avatars'

config/packages/dev/easy_log_handler.yaml

@@ -1,16 +0,0 @@
-services:
-    EasyCorp\EasyLog\EasyLogHandler:
-        public: false
-        arguments: ['%kernel.logs_dir%/%kernel.environment%.log']
-
-#// FIXME: How to add this configuration automatically without messing up with the monolog configuration?
-#monolog:
-#    handlers:
-#        buffered:
-#            type:     buffer
-#            handler:  easylog
-#            channels: ['!event']
-#            level:    debug
-#        easylog:
-#            type: service
-#            id:   EasyCorp\EasyLog\EasyLogHandler

config/packages/dev/jms_serializer.yaml

@@ -1,7 +0,0 @@
-jms_serializer:
-    visitors:
-        json_serialization:
-            options:
-                - JSON_PRETTY_PRINT
-                - JSON_UNESCAPED_SLASHES
-                - JSON_PRESERVE_ZERO_FRACTION