first commit

2026-04-26 22:16:43 +03:00
commit 6d95e27114
97 changed files with 15687 additions and 0 deletions
--- a/.dockerignore
+++ b/.dockerignore
@@ -0,0 +1,9 @@
+Dockerfile
+.dockerignore
+node_modules
+npm-debug.log
+README.md
+.next
+.git
+.env
+.DS_Store
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1,41 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/versions
+
+# testing
+/coverage
+
+# next.js
+/.next/
+/out/
+
+# production
+/build
+
+# misc
+.DS_Store
+*.pem
+
+# debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.pnpm-debug.log*
+
+# env files (can opt-in for committing if needed)
+.env*
+
+# vercel
+.vercel
+
+# typescript
+*.tsbuildinfo
+next-env.d.ts
--- a/.idea/.gitignore
+++ b/.idea/.gitignore
@@ -0,0 +1,10 @@
+# Default ignored files
+/shelf/
+/workspace.xml
+# Ignored default folder with query files
+/queries/
+# Datasource local storage ignored files
+/dataSources/
+/dataSources.local.xml
+# Editor-based HTTP Client requests
+/httpRequests/
--- a/.idea/copilot.data.migration.agent.xml
+++ b/.idea/copilot.data.migration.agent.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="AgentMigrationStateService">
+    <option name="migrationStatus" value="COMPLETED" />
+  </component>
+</project>
--- a/.idea/copilot.data.migration.ask.xml
+++ b/.idea/copilot.data.migration.ask.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="AskMigrationStateService">
+    <option name="migrationStatus" value="COMPLETED" />
+  </component>
+</project>
--- a/.idea/copilot.data.migration.ask2agent.xml
+++ b/.idea/copilot.data.migration.ask2agent.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="Ask2AgentMigrationStateService">
+    <option name="migrationStatus" value="COMPLETED" />
+  </component>
+</project>
--- a/.idea/copilot.data.migration.edit.xml
+++ b/.idea/copilot.data.migration.edit.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="EditMigrationStateService">
+    <option name="migrationStatus" value="COMPLETED" />
+  </component>
+</project>
--- a/.idea/inspectionProfiles/Project_Default.xml
+++ b/.idea/inspectionProfiles/Project_Default.xml
@@ -0,0 +1,6 @@
+<component name="InspectionProjectProfileManager">
+  <profile version="1.0">
+    <option name="myName" value="Project Default" />
+    <inspection_tool class="Eslint" enabled="true" level="WARNING" enabled_by_default="true" />
+  </profile>
+</component>
--- a/.idea/modules.xml
+++ b/.idea/modules.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ProjectModuleManager">
+    <modules>
+      <module fileurl="file://$PROJECT_DIR$/.idea/next-go-blog.iml" filepath="$PROJECT_DIR$/.idea/next-go-blog.iml" />
+    </modules>
+  </component>
+</project>
--- a/.idea/next-go-blog.iml
+++ b/.idea/next-go-blog.iml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="WEB_MODULE" version="4">
+  <component name="NewModuleRootManager">
+    <content url="file://$MODULE_DIR$" />
+    <orderEntry type="inheritedJdk" />
+    <orderEntry type="sourceFolder" forTests="false" />
+  </component>
+</module>
--- a/.idea/vcs.xml
+++ b/.idea/vcs.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="VcsDirectoryMappings">
+    <mapping directory="" vcs="Git" />
+  </component>
+</project>
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -0,0 +1,3 @@
+{
+    "nuxt.isNuxtApp": false
+}
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -0,0 +1,171 @@
+# Genimi (AI) Kuralları
+- **Dil:** Her zaman (kod blokları hariç) Türkçe cevap vermelisin.
+
+# Go Backend Guidelines — JWT + OAuth + RBAC & Security
+# Go Next Js Guidelines
+Bu doküman Next frontend'e hizmet edecek Go (backend) uygulaması için güncel proje ve mimari rehberidir.
+
+## Proje Backend Durumu ve Özellikler
+
+- **Go Sürümü:** 1.25.6
+- **Veritabanı:** PostgreSQL
+- **Web Framework:** Gin
+- **Mimari:** RESTful API
+
+## Proje Frontend Durumu ve Özellikler
+
+- **Next js:** 16.1.6
+- **Next-auth":** 4.24.13
+- **Radix-ui":** 1.4.3 
+- **Shadcn/ui":** Latest
+- **Sweetalert2":** 11.26.18
+- **Ioredis":** 5.9.2
+- **Redux":** 1.4.3
+- **Redux Toolkit":** 1.4.3
+- **Zod":** 4.3.6
+- **Tailwindcss":** 4
+- **Tailwind-merge":** 3.4.0
+- **Lucide-react":** 0.563.0
+- **Tw-animate-css":** 1.4.0
+- **server side rendering:** true
+
+## API Uç Noktaları
+
+-- Register Yeni Kullanıcı
+POST
+http://localhost:8080/v1/auth/register
+-- Gönderrilen JSON
+{
+    "email":"beyhanod@beyhan.dev",
+    "password":"1923btO**",
+    "username":"test yaptim"
+}
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmMDVlZTc0Zi1hYjgzLTQxNzEtYjI3Ny1mZGM0NDZhNjA3YjciLCJlbWFpbCI6ImJleHlzc2hhbm9kQGJleWhhbi5kZXYiLCJwZXJtaXNzaW9ucyI6WyJ1c2VyOnJlYWQiXSwiaXNzIjoiZ2F1dGgtY2VudHJhbCIsImV4cCI6MTc3MDEzMDQ2OCwiaWF0IjoxNzcwMTI5NTY4fQ.Qc5EnE2r-In7hm6-NjP6WX2TKm3MyuM68SwsHYUNJbI",
+    "email": "bexysshanod@beyhan.dev",
+    "message": "User created successfully",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmMDVlZTc0Zi1hYjgzLTQxNzEtYjI3Ny1mZGM0NDZhNjA3YjciLCJlbWFpbCI6ImJleHlzc2hhbm9kQGJleWhhbi5kZXYiLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwNzM0MzY4LCJpYXQiOjE3NzAxMjk1Njh9.JE2UZ6jJti2N2jbExx_TTY5VPSfXKvc2ZGB-Nw_toLQ",
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ],
+    "user_id": "f05ee74f-ab83-4171-b277-fdc446a607b7",
+    "username": "test yaptim"
+}
+
+-- Login Yeni Kullanıcı
+POST
+http://localhost:8080/v1/auth/login
+-- Gönderrilen JSON
+{
+    "email":"beyhanod@beyhan.dev",
+    "password":"1923btO**"
+}
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsInBlcm1pc3Npb25zIjpbInVzZXI6cmVhZCJdLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwMTMwNjU3LCJpYXQiOjE3NzAxMjk3NTd9.QbsRFn5fr7L4Wc7HCxOs0_zOWWhuceWzPmt20TV5lNI",
+    "email": "beyhano@beyhan.dev",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzQ1NTcsImlhdCI6MTc3MDEyOTc1N30.wBML1pT9S9i9FtAw3PKmJBMdcobZexWVBTRV5remb_s",
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ],
+    "user_id": "91cf0868-df24-4b8f-b491-70d9eb7a4373",
+    "username": "user_91cf0868"
+}
+
+-- Refresh Token
+POST
+http://localhost:8080/v1/auth/refresh
+-- Gönderilen JSON
+{
+    "refresh_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzQ2NDUsImlhdCI6MTc3MDEyOTg0NX0.ACDDM20v1u6yjyNrqBnWafjXnrRAAT1-8CvfqSkjTsE"
+} 
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsInBlcm1pc3Npb25zIjpbInVzZXI6cmVhZCJdLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwMTMxMjYwLCJpYXQiOjE3NzAxMzAzNjB9.BKmZBkL6FPo208mYLeBFMkNOqJ2tsmGXJUN_0bdZFHQ",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzUxNjAsImlhdCI6MTc3MDEzMDM2MH0.tkpcbQ6QmVVXK-r0QgP333X_FrAktVOuh1AJhwvV1BQ"
+}
+
+-- Me (Kullanıcı Profili)
+GET
+http://localhost:8080/v1/auth/me
+-- Header
+Authorization: Bearer ACCESS_TOKEN_BURAYA
+-- Body: YOK (GET isteği)
+-- Cevap
+{
+    "id": "91cf0868-df24-4b8f-b491-70d9eb7a4373",
+    "username": "user_91cf0868",
+    "email": "beyhano@beyhan.dev",
+    "created_at": "2026-02-03T17:03:07.863425+03:00",
+    "updated_at": "2026-02-03T17:03:07.880923+03:00",
+    "social_accounts": null,
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ]
+}
+
+-- Validate Token (Token Doğrulama)
+GET
+http://localhost:8080/v1/auth/validate
+-- Header
+Authorization: Bearer ACCESS_TOKEN_BURAYA
+-- Body: YOK (GET isteği, body gönderilmez)
+-- Cevap
+{
+    "email": "beyhano@beyhan.dev",
+    "message": "Token is valid",
+    "user_id": "91cf0868-df24-4b8f-b491-70d9eb7a4373"
+}
+## Kurulum ve Çalıştırma
+
+1.  `.env.example` dosyasını `.env` olarak kopyalayın ve değerleri düzenleyin.
+2.  Docker ile veritabanını ve uygulamayı başlatmak için:
+    ```bash
+    ./scripts/run.sh
+    ```
+    _(Bu script Docker konteynerini kontrol eder, yoksa başlatır ve ardından Go sunucusunu çalıştırır)_
+
+## Geliştirme Notları
+
+- **Env Değişkenleri:**
+  - `RATE_LIMIT_BLACKLIST_IPS=...`, `RATE_LIMIT_BLACKLIST_DOMAINS=...` ile yasaklama.
+  - `RATE_LIMIT_WHITELIST=...`, `RATE_LIMIT_WHITELIST_DOMAINS=...` ile muafiyet.
+
+- **Migration Ekleme:** `internal/db/migrations` klasörüne `00000X_description.up.sql` formatında yeni dosya ekleyin.
+- **Admin Kullanıcısı:** Sistem ilk açılışta `admin@example.com` / `admin123` kullanıcısını otomatik oluşturur.
+- **Docker Volume:** `/uploads` klasörü `uploads_data` volume'ü ile kalıcı hale getirilmiştir.
+- **Image Processing:** WebP desteği için Dockerfile `CGO_ENABLED=1` ve `build-base` içerir.
--- a/BACKEND_ENDPOINT.mb
+++ b/BACKEND_ENDPOINT.mb
@@ -0,0 +1,223 @@
+-- Register Yeni Kullanıcı
+POST
+http://localhost:8080/v1/auth/register
+-- Gönderrilen JSON
+{
+    "email":"beyhanod@beyhan.dev",
+    "password":"1923btO**",
+    "username":"test yaptim"
+}
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmMDVlZTc0Zi1hYjgzLTQxNzEtYjI3Ny1mZGM0NDZhNjA3YjciLCJlbWFpbCI6ImJleHlzc2hhbm9kQGJleWhhbi5kZXYiLCJwZXJtaXNzaW9ucyI6WyJ1c2VyOnJlYWQiXSwiaXNzIjoiZ2F1dGgtY2VudHJhbCIsImV4cCI6MTc3MDEzMDQ2OCwiaWF0IjoxNzcwMTI5NTY4fQ.Qc5EnE2r-In7hm6-NjP6WX2TKm3MyuM68SwsHYUNJbI",
+    "email": "bexysshanod@beyhan.dev",
+    "message": "User created successfully",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmMDVlZTc0Zi1hYjgzLTQxNzEtYjI3Ny1mZGM0NDZhNjA3YjciLCJlbWFpbCI6ImJleHlzc2hhbm9kQGJleWhhbi5kZXYiLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwNzM0MzY4LCJpYXQiOjE3NzAxMjk1Njh9.JE2UZ6jJti2N2jbExx_TTY5VPSfXKvc2ZGB-Nw_toLQ",
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ],
+    "user_id": "f05ee74f-ab83-4171-b277-fdc446a607b7",
+    "username": "test yaptim"
+}
+
+-- Login Yeni Kullanıcı
+POST
+http://localhost:8080/v1/auth/login
+-- Gönderrilen JSON
+{
+    "email":"beyhanod@beyhan.dev",
+    "password":"1923btO**"
+}
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsInBlcm1pc3Npb25zIjpbInVzZXI6cmVhZCJdLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwMTMwNjU3LCJpYXQiOjE3NzAxMjk3NTd9.QbsRFn5fr7L4Wc7HCxOs0_zOWWhuceWzPmt20TV5lNI",
+    "email": "beyhano@beyhan.dev",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzQ1NTcsImlhdCI6MTc3MDEyOTc1N30.wBML1pT9S9i9FtAw3PKmJBMdcobZexWVBTRV5remb_s",
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ],
+    "user_id": "91cf0868-df24-4b8f-b491-70d9eb7a4373",
+    "username": "user_91cf0868"
+}
+
+-- Refresh Token
+POST
+http://localhost:8080/v1/auth/refresh
+-- Gönderilen JSON
+{
+    "refresh_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzQ2NDUsImlhdCI6MTc3MDEyOTg0NX0.ACDDM20v1u6yjyNrqBnWafjXnrRAAT1-8CvfqSkjTsE"
+} 
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsInBlcm1pc3Npb25zIjpbInVzZXI6cmVhZCJdLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwMTMxMjYwLCJpYXQiOjE3NzAxMzAzNjB9.BKmZBkL6FPo208mYLeBFMkNOqJ2tsmGXJUN_0bdZFHQ",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzUxNjAsImlhdCI6MTc3MDEzMDM2MH0.tkpcbQ6QmVVXK-r0QgP333X_FrAktVOuh1AJhwvV1BQ"
+}
+
+-- Me (Kullanıcı Profili)
+GET
+http://localhost:8080/v1/auth/me
+-- Header
+Authorization: Bearer ACCESS_TOKEN_BURAYA
+-- Body: YOK (GET isteği)
+-- Cevap
+{
+    "id": "91cf0868-df24-4b8f-b491-70d9eb7a4373",
+    "username": "user_91cf0868",
+    "email": "beyhano@beyhan.dev",
+    "created_at": "2026-02-03T17:03:07.863425+03:00",
+    "updated_at": "2026-02-03T17:03:07.880923+03:00",
+    "social_accounts": null,
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ]
+}
+
+-- Validate Token (Token Doğrulama)
+GET
+http://localhost:8080/v1/auth/validate
+-- Header
+Authorization: Bearer ACCESS_TOKEN_BURAYA
+-- Body: YOK (GET isteği, body gönderilmez)
+-- Cevap
+{
+    "email": "beyhano@beyhan.dev",
+    "message": "Token is valid",
+    "user_id": "91cf0868-df24-4b8f-b491-70d9eb7a4373"
+}
+
+
+-- userlist admin
+{
+    "pagination": {
+        "limit": 10,
+        "page": 1,
+        "total": 5,
+        "totalPages": 1
+    },
+    "users": [
+        {
+            "id": "d056c1fd-4f99-42ab-bad9-0f205555a872",
+            "username": "ares2000@gmail.com",
+            "email": "zxczxcc@sdfsdf.com",
+            "avatar": "/uploads/avatars/d056c1fd-4f99-42ab-bad9-0f205555a872_1770180464146441000.png",
+            "created_at": "2026-02-04T07:47:44.100874+03:00",
+            "updated_at": "2026-02-04T07:47:44.148572+03:00",
+            "email_verified": true,
+            "roles": [
+                {
+                    "id": 2,
+                    "name": "user",
+                    "description": "Default user role",
+                    "permissions": null
+                }
+            ]
+        },
+        {
+            "id": "fbfdfb16-3ffa-423a-9914-b1624aab2ddb",
+            "username": "adsssssmin@demo.com",
+            "email": "xxxxxadmin@demo.com",
+            "avatar": "/uploads/avatars/fbfdfb16-3ffa-423a-9914-b1624aab2ddb_1770179925659471000.png",
+            "created_at": "2026-02-04T07:38:45.618572+03:00",
+            "updated_at": "2026-02-04T07:44:54.318372+03:00",
+            "email_verified": true,
+            "roles": [
+                {
+                    "id": 2,
+                    "name": "user",
+                    "description": "Default user role",
+                    "permissions": null
+                }
+            ]
+        },
+        {
+            "id": "4f177189-7c96-48cd-825d-4e9a5a76421a",
+            "username": "admin@demo.com",
+            "email": "admin@demo.com",
+            "avatar": "/uploads/avatars/4f177189-7c96-48cd-825d-4e9a5a76421a_1770180623694066000.png",
+            "created_at": "2026-02-04T07:37:17.716058+03:00",
+            "updated_at": "2026-02-04T07:50:23.696197+03:00",
+            "email_verified": true,
+            "roles": [
+                {
+                    "id": 2,
+                    "name": "user",
+                    "description": "Default user role",
+                    "permissions": null
+                }
+            ]
+        },
+        {
+            "id": "4971553b-99da-432c-99a8-28ef172cb139",
+            "username": "Beyhan Oğur",
+            "email": "beyhan@beyhan.dev",
+            "avatar": "/uploads/avatars/4971553b-99da-432c-99a8-28ef172cb139_1770181055825103000.png",
+            "created_at": "2026-02-04T06:05:17.334092+03:00",
+            "updated_at": "2026-02-04T07:57:35.826692+03:00",
+            "email_verified": true,
+            "roles": [
+                {
+                    "id": 1,
+                    "name": "admin",
+                    "description": "Default admin role",
+                    "permissions": null
+                }
+            ]
+        },
+        {
+            "id": "2503e3d9-3ff5-4e4a-97af-b23ac37f37db",
+            "username": "admin",
+            "email": "admin@gauth.local",
+            "avatar": "/uploads/avatars/2503e3d9-3ff5-4e4a-97af-b23ac37f37db_1770181222075819000.png",
+            "created_at": "2026-02-04T06:04:40.83783+03:00",
+            "updated_at": "2026-02-04T08:00:22.077544+03:00",
+            "email_verified": true,
+            "roles": [
+                {
+                    "id": 1,
+                    "name": "admin",
+                    "description": "Default admin role",
+                    "permissions": null
+                },
+                {
+                    "id": 2,
+                    "name": "user",
+                    "description": "Default user role",
+                    "permissions": null
+                }
+            ]
+        }
+    ]
+}
--- a/CORS_API_DOCUMENTATION.md
+++ b/CORS_API_DOCUMENTATION.md
@@ -0,0 +1,620 @@
+# CORS Whitelist & Blacklist API Dokümantasyonu
+
+## 📋 Genel Bakış
+
+AuthCentral'da CORS (Cross-Origin Resource Sharing) yönetimi için Whitelist ve Blacklist sistemleri mevcuttur.
+
+### Özellikler:
+- ✅ CRUD operasyonları (Create, Read, Update, Delete)
+- ✅ Redis cache desteği
+- ✅ Admin only endpoints
+- ✅ Active/Inactive durumları
+- ✅ Audit trail (created_by, updated_by)
+
+---
+
+## 🔐 Authentication
+
+Tüm endpoint'ler **Admin** yetkisi gerektirir:
+```
+Authorization: Bearer {admin_access_token}
+```
+
+---
+
+## 📡 CORS Whitelist API
+
+### 1. Tüm Whitelist Kayıtlarını Listele
+
+```http
+GET /v1/settings/cors/whitelist
+```
+
+**Headers:**
+```
+Authorization: Bearer {token}
+```
+
+**Yanıt:**
+```json
+[
+  {
+    "id": "uuid",
+    "origin": "http://localhost:3000",
+    "description": "Development frontend",
+    "is_active": true,
+    "created_by": "admin@gauth.local",
+    "created_at": "2026-02-05T10:00:00Z",
+    "updated_at": "2026-02-05T10:00:00Z"
+  },
+  {
+    "id": "uuid",
+    "origin": "https://myapp.com",
+    "description": "Production frontend",
+    "is_active": true,
+    "created_by": "admin@gauth.local",
+    "created_at": "2026-02-05T09:00:00Z",
+    "updated_at": "2026-02-05T09:00:00Z"
+  }
+]
+```
+
+### 2. Whitelist Kaydı Oluştur
+
+```http
+POST /v1/settings/cors/whitelist
+```
+
+**Headers:**
+```
+Authorization: Bearer {token}
+Content-Type: application/json
+```
+
+**Body:**
+```json
+{
+  "origin": "https://example.com",
+  "description": "Customer frontend application"
+}
+```
+
+**Başarılı Yanıt (201):**
+```json
+{
+  "id": "new-uuid",
+  "origin": "https://example.com",
+  "description": "Customer frontend application",
+  "is_active": true,
+  "created_by": "admin@gauth.local",
+  "created_at": "2026-02-05T11:00:00Z",
+  "updated_at": "2026-02-05T11:00:00Z"
+}
+```
+
+### 3. Whitelist Kaydını Güncelle
+
+```http
+PUT /v1/settings/cors/whitelist/{id}
+```
+
+**Headers:**
+```
+Authorization: Bearer {token}
+Content-Type: application/json
+```
+
+**Body (tüm alanlar opsiyonel):**
+```json
+{
+  "origin": "https://new-domain.com",
+  "description": "Updated description",
+  "is_active": false
+}
+```
+
+**Başarılı Yanıt (200):**
+```json
+{
+  "message": "Whitelist updated successfully"
+}
+```
+
+### 4. Whitelist Kaydını Sil
+
+```http
+DELETE /v1/settings/cors/whitelist/{id}
+```
+
+**Headers:**
+```
+Authorization: Bearer {token}
+```
+
+**Başarılı Yanıt (200):**
+```json
+{
+  "message": "Whitelist entry deleted successfully"
+}
+```
+
+---
+
+## 🚫 CORS Blacklist API
+
+### 1. Tüm Blacklist Kayıtlarını Listele
+
+```http
+GET /v1/settings/cors/blacklist
+```
+
+**Headers:**
+```
+Authorization: Bearer {token}
+```
+
+**Yanıt:**
+```json
+[
+  {
+    "id": "uuid",
+    "origin": "https://malicious-site.com",
+    "reason": "Security threat detected",
+    "is_active": true,
+    "created_by": "admin@gauth.local",
+    "created_at": "2026-02-05T10:00:00Z",
+    "updated_at": "2026-02-05T10:00:00Z"
+  }
+]
+```
+
+### 2. Blacklist Kaydı Oluştur
+
+```http
+POST /v1/settings/cors/blacklist
+```
+
+**Headers:**
+```
+Authorization: Bearer {token}
+Content-Type: application/json
+```
+
+**Body:**
+```json
+{
+  "origin": "https://spam-domain.com",
+  "reason": "Spam attempts detected"
+}
+```
+
+**Başarılı Yanıt (201):**
+```json
+{
+  "id": "new-uuid",
+  "origin": "https://spam-domain.com",
+  "reason": "Spam attempts detected",
+  "is_active": true,
+  "created_by": "admin@gauth.local",
+  "created_at": "2026-02-05T11:00:00Z",
+  "updated_at": "2026-02-05T11:00:00Z"
+}
+```
+
+### 3. Blacklist Kaydını Güncelle
+
+```http
+PUT /v1/settings/cors/blacklist/{id}
+```
+
+**Headers:**
+```
+Authorization: Bearer {token}
+Content-Type: application/json
+```
+
+**Body (tüm alanlar opsiyonel):**
+```json
+{
+  "origin": "https://updated-domain.com",
+  "reason": "Updated reason",
+  "is_active": false
+}
+```
+
+**Başarılı Yanıt (200):**
+```json
+{
+  "message": "Blacklist updated successfully"
+}
+```
+
+### 4. Blacklist Kaydını Sil
+
+```http
+DELETE /v1/settings/cors/blacklist/{id}
+```
+
+**Headers:**
+```
+Authorization: Bearer {token}
+```
+
+**Başarılı Yanıt (200):**
+```json
+{
+  "message": "Blacklist entry deleted successfully"
+}
+```
+
+---
+
+## 🧪 Kullanım Örnekleri
+
+### Tam İş Akışı (cURL)
+
+```bash
+#!/bin/bash
+
+# 1. Admin Login
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+echo "Token: ${TOKEN:0:30}..."
+
+# 2. Whitelist'e domain ekle
+echo -e "\n=== Create Whitelist Entry ==="
+curl -X POST http://localhost:8080/v1/settings/cors/whitelist \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "origin": "https://myapp.com",
+    "description": "Production app"
+  }' | jq .
+
+# 3. Tüm whitelist'i listele
+echo -e "\n=== List All Whitelist ==="
+curl -X GET http://localhost:8080/v1/settings/cors/whitelist \
+  -H "Authorization: Bearer $TOKEN" | jq .
+
+# 4. Blacklist'e domain ekle
+echo -e "\n=== Create Blacklist Entry ==="
+curl -X POST http://localhost:8080/v1/settings/cors/blacklist \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "origin": "https://spam.com",
+    "reason": "Spam detected"
+  }' | jq .
+
+# 5. Whitelist entry'yi güncelle (ID'yi yukarıdaki response'dan alın)
+WHITELIST_ID="your-whitelist-id-here"
+echo -e "\n=== Update Whitelist Entry ==="
+curl -X PUT "http://localhost:8080/v1/settings/cors/whitelist/$WHITELIST_ID" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "description": "Updated description",
+    "is_active": true
+  }' | jq .
+
+# 6. Blacklist entry'yi sil
+BLACKLIST_ID="your-blacklist-id-here"
+echo -e "\n=== Delete Blacklist Entry ==="
+curl -X DELETE "http://localhost:8080/v1/settings/cors/blacklist/$BLACKLIST_ID" \
+  -H "Authorization: Bearer $TOKEN" | jq .
+```
+
+---
+
+## 🎯 Frontend Entegrasyonu (React)
+
+### API Client
+
+```javascript
+class CorsSettingsAPI {
+  constructor(baseURL, token) {
+    this.baseURL = baseURL;
+    this.token = token;
+  }
+
+  // ====== Whitelist ======
+  
+  async getWhitelist() {
+    const response = await fetch(`${this.baseURL}/v1/settings/cors/whitelist`, {
+      headers: {
+        'Authorization': `Bearer ${this.token}`
+      }
+    });
+    return response.json();
+  }
+
+  async createWhitelist(origin, description) {
+    const response = await fetch(`${this.baseURL}/v1/settings/cors/whitelist`, {
+      method: 'POST',
+      headers: {
+        'Authorization': `Bearer ${this.token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({ origin, description })
+    });
+    return response.json();
+  }
+
+  async updateWhitelist(id, updates) {
+    const response = await fetch(`${this.baseURL}/v1/settings/cors/whitelist/${id}`, {
+      method: 'PUT',
+      headers: {
+        'Authorization': `Bearer ${this.token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(updates)
+    });
+    return response.json();
+  }
+
+  async deleteWhitelist(id) {
+    const response = await fetch(`${this.baseURL}/v1/settings/cors/whitelist/${id}`, {
+      method: 'DELETE',
+      headers: {
+        'Authorization': `Bearer ${this.token}`
+      }
+    });
+    return response.json();
+  }
+
+  // ====== Blacklist ======
+  
+  async getBlacklist() {
+    const response = await fetch(`${this.baseURL}/v1/settings/cors/blacklist`, {
+      headers: {
+        'Authorization': `Bearer ${this.token}`
+      }
+    });
+    return response.json();
+  }
+
+  async createBlacklist(origin, reason) {
+    const response = await fetch(`${this.baseURL}/v1/settings/cors/blacklist`, {
+      method: 'POST',
+      headers: {
+        'Authorization': `Bearer ${this.token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({ origin, reason })
+    });
+    return response.json();
+  }
+
+  async updateBlacklist(id, updates) {
+    const response = await fetch(`${this.baseURL}/v1/settings/cors/blacklist/${id}`, {
+      method: 'PUT',
+      headers: {
+        'Authorization': `Bearer ${this.token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(updates)
+    });
+    return response.json();
+  }
+
+  async deleteBlacklist(id) {
+    const response = await fetch(`${this.baseURL}/v1/settings/cors/blacklist/${id}`, {
+      method: 'DELETE',
+      headers: {
+        'Authorization': `Bearer ${this.token}`
+      }
+    });
+    return response.json();
+  }
+}
+
+// Kullanım
+const api = new CorsSettingsAPI('http://localhost:8080', YOUR_ADMIN_TOKEN);
+
+// Whitelist listele
+const whitelists = await api.getWhitelist();
+console.log(whitelists);
+
+// Yeni whitelist ekle
+const newEntry = await api.createWhitelist('https://newapp.com', 'New application');
+console.log(newEntry);
+```
+
+### React Component Örneği
+
+```jsx
+import React, { useState, useEffect } from 'react';
+
+function CorsWhitelistManager() {
+  const [whitelists, setWhitelists] = useState([]);
+  const [newOrigin, setNewOrigin] = useState('');
+  const [newDescription, setNewDescription] = useState('');
+  const token = localStorage.getItem('admin_token');
+
+  useEffect(() => {
+    fetchWhitelists();
+  }, []);
+
+  const fetchWhitelists = async () => {
+    try {
+      const response = await fetch('http://localhost:8080/v1/settings/cors/whitelist', {
+        headers: {
+          'Authorization': `Bearer ${token}`
+        }
+      });
+      const data = await response.json();
+      setWhitelists(data);
+    } catch (error) {
+      console.error('Error fetching whitelists:', error);
+    }
+  };
+
+  const handleCreate = async (e) => {
+    e.preventDefault();
+    try {
+      const response = await fetch('http://localhost:8080/v1/settings/cors/whitelist', {
+        method: 'POST',
+        headers: {
+          'Authorization': `Bearer ${token}`,
+          'Content-Type': 'application/json'
+        },
+        body: JSON.stringify({
+          origin: newOrigin,
+          description: newDescription
+        })
+      });
+      
+      if (response.ok) {
+        setNewOrigin('');
+        setNewDescription('');
+        fetchWhitelists(); // Refresh list
+        alert('Whitelist entry created!');
+      }
+    } catch (error) {
+      console.error('Error creating whitelist:', error);
+    }
+  };
+
+  const handleDelete = async (id) => {
+    if (!confirm('Are you sure you want to delete this entry?')) return;
+    
+    try {
+      const response = await fetch(`http://localhost:8080/v1/settings/cors/whitelist/${id}`, {
+        method: 'DELETE',
+        headers: {
+          'Authorization': `Bearer ${token}`
+        }
+      });
+      
+      if (response.ok) {
+        fetchWhitelists(); // Refresh list
+        alert('Whitelist entry deleted!');
+      }
+    } catch (error) {
+      console.error('Error deleting whitelist:', error);
+    }
+  };
+
+  const toggleActive = async (id, currentStatus) => {
+    try {
+      const response = await fetch(`http://localhost:8080/v1/settings/cors/whitelist/${id}`, {
+        method: 'PUT',
+        headers: {
+          'Authorization': `Bearer ${token}`,
+          'Content-Type': 'application/json'
+        },
+        body: JSON.stringify({
+          is_active: !currentStatus
+        })
+      });
+      
+      if (response.ok) {
+        fetchWhitelists(); // Refresh list
+      }
+    } catch (error) {
+      console.error('Error updating whitelist:', error);
+    }
+  };
+
+  return (
+    <div className="cors-whitelist-manager">
+      <h2>CORS Whitelist Manager</h2>
+      
+      {/* Add New Entry Form */}
+      <form onSubmit={handleCreate} className="add-form">
+        <input
+          type="text"
+          placeholder="Origin (e.g., https://example.com)"
+          value={newOrigin}
+          onChange={(e) => setNewOrigin(e.target.value)}
+          required
+        />
+        <input
+          type="text"
+          placeholder="Description"
+          value={newDescription}
+          onChange={(e) => setNewDescription(e.target.value)}
+        />
+        <button type="submit">Add to Whitelist</button>
+      </form>
+
+      {/* Whitelist Table */}
+      <table>
+        <thead>
+          <tr>
+            <th>Origin</th>
+            <th>Description</th>
+            <th>Active</th>
+            <th>Created By</th>
+            <th>Actions</th>
+          </tr>
+        </thead>
+        <tbody>
+          {whitelists.map(entry => (
+            <tr key={entry.id}>
+              <td>{entry.origin}</td>
+              <td>{entry.description}</td>
+              <td>
+                <button onClick={() => toggleActive(entry.id, entry.is_active)}>
+                  {entry.is_active ? '✅ Active' : '❌ Inactive'}
+                </button>
+              </td>
+              <td>{entry.created_by}</td>
+              <td>
+                <button onClick={() => handleDelete(entry.id)}>Delete</button>
+              </td>
+            </tr>
+          ))}
+        </tbody>
+      </table>
+    </div>
+  );
+}
+
+export default CorsWhitelistManager;
+```
+
+---
+
+## 📊 API Endpoints Özeti
+
+| Endpoint | Method | Açıklama | Admin Required |
+|----------|--------|----------|----------------|
+| `/v1/settings/cors/whitelist` | GET | Whitelist listele | ✅ |
+| `/v1/settings/cors/whitelist` | POST | Whitelist ekle | ✅ |
+| `/v1/settings/cors/whitelist/:id` | PUT | Whitelist güncelle | ✅ |
+| `/v1/settings/cors/whitelist/:id` | DELETE | Whitelist sil | ✅ |
+| `/v1/settings/cors/blacklist` | GET | Blacklist listele | ✅ |
+| `/v1/settings/cors/blacklist` | POST | Blacklist ekle | ✅ |
+| `/v1/settings/cors/blacklist/:id` | PUT | Blacklist güncelle | ✅ |
+| `/v1/settings/cors/blacklist/:id` | DELETE | Blacklist sil | ✅ |
+
+---
+
+## 🔧 Cache Yönetimi
+
+CORS ayarları Redis'te cache'lenir:
+- **Cache süresi:** 1 saat
+- **Otomatik invalidation:** Create/Update/Delete işlemlerinde
+- **Cache key:** 
+  - Whitelist: `cors:whitelist`
+  - Blacklist: `cors:blacklist`
+
+---
+
+## ✅ Test Checklist
+
+- [ ] Admin token alındı
+- [ ] Whitelist ekleme testi
+- [ ] Whitelist listeleme testi
+- [ ] Whitelist güncelleme testi
+- [ ] Whitelist silme testi
+- [ ] Blacklist ekleme testi
+- [ ] Blacklist listeleme testi
+- [ ] Blacklist güncelleme testi
+- [ ] Blacklist silme testi
+- [ ] Swagger dokümantasyonu kontrol edildi
+
+**CORS Whitelist & Blacklist API'leri tam çalışır durumda!** 🚀
--- a/70
+++ b/70
@@ -0,0 +1,70 @@
+# Base image
+FROM node:23-alpine AS base
+
+# Install dependencies only when needed
+FROM base AS deps
+# Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed.
+RUN apk add --no-cache libc6-compat
+WORKDIR /app
+
+# Install dependencies based on the preferred package manager
+COPY package.json yarn.lock* package-lock.json* pnpm-lock.yaml* ./
+RUN \
+    if [ -f yarn.lock ]; then yarn --frozen-lockfile; \
+    elif [ -f package-lock.json ]; then npm ci; \
+    elif [ -f pnpm-lock.yaml ]; then corepack enable pnpm && pnpm i --frozen-lockfile; \
+    else echo "Lockfile not found." && exit 1; fi
+
+
+# Rebuild the source code only when needed
+FROM base AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+# Next.js collects completely anonymous telemetry data about general usage.
+# Learn more here: https://nextjs.org/telemetry
+# Uncomment the following line in case you want to disable telemetry during the build.
+# ENV NEXT_TELEMETRY_DISABLED 1
+
+ARG NEXT_PUBLIC_API_BASE
+ENV NEXT_PUBLIC_API_BASE=$NEXT_PUBLIC_API_BASE
+
+RUN \
+    if [ -f yarn.lock ]; then yarn run build; \
+    elif [ -f package-lock.json ]; then npm run build; \
+    elif [ -f pnpm-lock.yaml ]; then corepack enable pnpm && pnpm run build; \
+    else echo "Lockfile not found." && exit 1; fi
+
+# Production image, copy all the files and run next
+FROM base AS runner
+WORKDIR /app
+
+ENV NODE_ENV production
+# Uncomment the following line in case you want to disable telemetry during runtime.
+# ENV NEXT_TELEMETRY_DISABLED 1
+
+# User and Group creation
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+COPY --from=builder /app/public ./public
+
+# Automatically leverage output traces to reduce image size
+# https://nextjs.org/docs/advanced-features/output-file-tracing
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT 3000
+
+# Set hostname to localhost by default, but allow overwriting.
+# For Docker, 0.0.0.0 is needed to accept connections from outside the container
+ENV HOSTNAME "0.0.0.0"
+
+# server.js is created by next build from the standalone output
+# https://nextjs.org/docs/pages/api-reference/next-config-js/output
+CMD ["node", "server.js"]
--- a/EMAIL_VERIFICATION.md
+++ b/EMAIL_VERIFICATION.md
@@ -0,0 +1,236 @@
+# Email Doğrulama Sistemi
+
+## Genel Bakış
+
+AuthCentral'da kullanıcılar iki şekilde kayıt olabilir:
+
+1. **Email/Password ile Kayıt**: Email doğrulaması gerektirir
+2. **OAuth (Google/GitHub)**: Otomatik olarak doğrulanmış kabul edilir
+
+## Email/Password ile Kayıt Akışı
+
+### 1. Kullanıcı Kaydı
+```bash
+POST /v1/auth/register
+{
+  "username": "johndoe",
+  "email": "john@example.com",
+  "password": "securepass123"
+}
+```
+
+**Yanıt:**
+```json
+{
+  "message": "User created. Please verify your email.",
+  "user_id": "...",
+  "username": "johndoe",
+  "email": "john@example.com",
+  "email_verified": false,
+  "verification_token": "..."
+}
+```
+
+**Not:** Kullanıcı oluşturulur ancak `email_verified: false` olarak ayarlanır.
+
+### 2. Email Doğrulama
+
+Kullanıcıya otomatik olarak doğrulama email'i gönderilir. Email'deki linke tıklayarak doğrulama yapılır:
+
+```bash
+GET /v1/auth/verify-email?token=VERIFICATION_TOKEN
+```
+
+**Yanıt:**
+```json
+{
+  "message": "Email verified successfully"
+}
+```
+
+### 3. Login Denemesi (Email Doğrulanmadan)
+
+Email doğrulanmadan login yapılamaz:
+
+```bash
+POST /v1/auth/login
+{
+  "email": "john@example.com",
+  "password": "securepass123"
+}
+```
+
+**Hata Yanıtı:**
+```json
+{
+  "error": "email not verified"
+}
+```
+
+### 4. Login (Email Doğrulandıktan Sonra)
+
+Email doğrulandıktan sonra başarıyla login yapılabilir:
+
+```bash
+POST /v1/auth/login
+{
+  "email": "john@example.com",
+  "password": "securepass123"
+}
+```
+
+**Başarılı Yanıt:**
+```json
+{
+  "access_token": "...",
+  "refresh_token": "...",
+  "user_id": "...",
+  "username": "johndoe",
+  "email": "john@example.com",
+  "avatar": "",
+  "roles": [...]
+}
+```
+
+## OAuth (Google/GitHub) ile Kayıt
+
+OAuth sağlayıcıları email'i zaten doğruladığı için, bu kullanıcılar otomatik olarak `email_verified: true` olarak kaydedilir.
+
+```bash
+GET /v1/auth/google
+GET /v1/auth/github
+```
+
+OAuth callback'ten sonra kullanıcı otomatik olarak login edilir ve token'lar döndürülür.
+
+## Veritabanı Yapısı
+
+### Users Tablosu
+
+```sql
+CREATE TABLE users (
+  id UUID PRIMARY KEY,
+  user_name TEXT NOT NULL,
+  email VARCHAR(255) UNIQUE NOT NULL,
+  password TEXT,
+  avatar VARCHAR(500),
+  email_verified BOOLEAN DEFAULT false,
+  email_verify_token TEXT,
+  email_verified_at TIMESTAMP,
+  created_at TIMESTAMP,
+  updated_at TIMESTAMP,
+  deleted_at TIMESTAMP  -- Soft delete için
+);
+```
+
+### Email Verification Alanları
+
+- `email_verified`: Boolean - Email doğrulandı mı? (Email/password için false, OAuth için true)
+- `email_verify_token`: String - Doğrulama token'ı (email/password kayıt için)
+- `email_verified_at`: Timestamp - Email ne zaman doğrulandı?
+
+## Admin Kullanıcı Yönetimi
+
+### Kullanıcı Silme
+
+#### Soft Delete (Varsayılan)
+```bash
+DELETE /v1/admin/users/{user_id}
+```
+
+Kullanıcı `deleted_at` timestamp'i ile işaretlenir, veritabanından silinmez.
+
+#### Hard Delete (Kalıcı Silme)
+```bash
+DELETE /v1/admin/users/{user_id}?hard=true
+```
+
+Kullanıcı ve tüm ilişkili kayıtları (user_roles, social_accounts) kalıcı olarak silinir.
+
+**Not:** Kendi hesabınızı silemezsiniz.
+
+## Email Ayarları
+
+Email gönderimi için `.env` dosyasındaki ayarları yapılandırın:
+
+```env
+# Email Settings (Mailpit - Development)
+EMAIL_HOST=212.64.215.243
+EMAIL_PORT=1025
+EMAIL_HOST_USER=""
+EMAIL_HOST_PASSWORD=""
+EMAIL_USE_TLS=false
+EMAIL_USE_SSL=false
+EMAIL_FROM=noreply@gauth.local
+```
+
+## Güvenlik Notları
+
+1. **Verification Token**: 32 byte güvenli rastgele token oluşturulur
+2. **Token Süresi**: Şu anda token'ların süresi dolmuyor (ileride eklenebilir)
+3. **Rate Limiting**: Register endpoint'i için rate limit aktif
+4. **Password Hashing**: bcrypt kullanılarak güvenli şekilde hash'lenir
+
+## Geliştirme Notları
+
+### Migration
+
+Email verification özelliği sonradan eklendiği için, mevcut kullanıcılar otomatik olarak `email_verified: true` olarak işaretlenmiştir. Yeni kayıtlar `email_verified: false` ile başlar.
+
+Migration fonksiyonu `internal/database/db.go` dosyasında devre dışı bırakılmıştır.
+
+### Model Değişiklikleri
+
+User model'de `EmailVerified` alanı `*bool` (pointer) olarak tanımlanmıştır. Bu, GORM'un false değerlerini doğru şekilde işlemesini sağlar.
+
+```go
+type User struct {
+    // ...
+    EmailVerified    *bool      `gorm:"default:false" json:"email_verified"`
+    EmailVerifyToken string     `gorm:"index" json:"-"`
+    EmailVerifiedAt  *time.Time `json:"email_verified_at,omitempty"`
+    // ...
+}
+```
+
+## Test Senaryosu
+
+```bash
+# 1. Yeni kullanıcı kaydı
+curl -X POST http://localhost:8080/v1/auth/register \
+  -H "Content-Type: application/json" \
+  -d '{
+    "username": "testuser",
+    "email": "test@example.com",
+    "password": "password123"
+  }'
+
+# 2. Email doğrulanmadan login dene (BAŞARISIZ)
+curl -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{
+    "email": "test@example.com",
+    "password": "password123"
+  }'
+# Yanıt: {"error": "email not verified"}
+
+# 3. Email'i doğrula
+curl -X GET "http://localhost:8080/v1/auth/verify-email?token=VERIFICATION_TOKEN"
+
+# 4. Login (BAŞARILI)
+curl -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{
+    "email": "test@example.com",
+    "password": "password123"
+  }'
+# Yanıt: access_token, refresh_token, user bilgileri
+```
+
+## Özet
+
+✅ Email/password ile kayıt olanlar email doğrulaması yapmalı
+✅ Email doğrulanmadan login yapılamaz
+✅ OAuth ile giriş yapanlar otomatik doğrulanmış kabul edilir
+✅ Soft delete varsayılan, hard delete `?hard=true` ile yapılır
+✅ Email doğrulama sistemi tam çalışır durumda
--- a/GEMINI.md
+++ b/GEMINI.md
@@ -0,0 +1,171 @@
+# Genimi (AI) Kuralları
+- **Dil:** Her zaman (kod blokları hariç) Türkçe cevap vermelisin.
+
+# Go Backend Guidelines — JWT + OAuth + RBAC & Security
+# Go Next Js Guidelines
+Bu doküman Next frontend'e hizmet edecek Go (backend) uygulaması için güncel proje ve mimari rehberidir.
+
+## Proje Backend Durumu ve Özellikler
+
+- **Go Sürümü:** 1.25.6
+- **Veritabanı:** PostgreSQL
+- **Web Framework:** Gin
+- **Mimari:** RESTful API
+
+## Proje Frontend Durumu ve Özellikler
+
+- **Next js:** 16.1.6
+- **Next-auth":** 4.24.13
+- **Radix-ui":** 1.4.3 
+- **Shadcn/ui":** Latest
+- **Sweetalert2":** 11.26.18
+- **Ioredis":** 5.9.2
+- **Redux":** 1.4.3
+- **Redux Toolkit":** 1.4.3
+- **Zod":** 4.3.6
+- **Tailwindcss":** 4
+- **Tailwind-merge":** 3.4.0
+- **Lucide-react":** 0.563.0
+- **Tw-animate-css":** 1.4.0
+- **server side rendering:** true
+
+## API Uç Noktaları
+
+-- Register Yeni Kullanıcı
+POST
+http://localhost:8080/v1/auth/register
+-- Gönderrilen JSON
+{
+    "email":"beyhanod@beyhan.dev",
+    "password":"1923btO**",
+    "username":"test yaptim"
+}
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmMDVlZTc0Zi1hYjgzLTQxNzEtYjI3Ny1mZGM0NDZhNjA3YjciLCJlbWFpbCI6ImJleHlzc2hhbm9kQGJleWhhbi5kZXYiLCJwZXJtaXNzaW9ucyI6WyJ1c2VyOnJlYWQiXSwiaXNzIjoiZ2F1dGgtY2VudHJhbCIsImV4cCI6MTc3MDEzMDQ2OCwiaWF0IjoxNzcwMTI5NTY4fQ.Qc5EnE2r-In7hm6-NjP6WX2TKm3MyuM68SwsHYUNJbI",
+    "email": "bexysshanod@beyhan.dev",
+    "message": "User created successfully",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmMDVlZTc0Zi1hYjgzLTQxNzEtYjI3Ny1mZGM0NDZhNjA3YjciLCJlbWFpbCI6ImJleHlzc2hhbm9kQGJleWhhbi5kZXYiLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwNzM0MzY4LCJpYXQiOjE3NzAxMjk1Njh9.JE2UZ6jJti2N2jbExx_TTY5VPSfXKvc2ZGB-Nw_toLQ",
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ],
+    "user_id": "f05ee74f-ab83-4171-b277-fdc446a607b7",
+    "username": "test yaptim"
+}
+
+-- Login Yeni Kullanıcı
+POST
+http://localhost:8080/v1/auth/login
+-- Gönderrilen JSON
+{
+    "email":"beyhanod@beyhan.dev",
+    "password":"1923btO**"
+}
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsInBlcm1pc3Npb25zIjpbInVzZXI6cmVhZCJdLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwMTMwNjU3LCJpYXQiOjE3NzAxMjk3NTd9.QbsRFn5fr7L4Wc7HCxOs0_zOWWhuceWzPmt20TV5lNI",
+    "email": "beyhano@beyhan.dev",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzQ1NTcsImlhdCI6MTc3MDEyOTc1N30.wBML1pT9S9i9FtAw3PKmJBMdcobZexWVBTRV5remb_s",
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ],
+    "user_id": "91cf0868-df24-4b8f-b491-70d9eb7a4373",
+    "username": "user_91cf0868"
+}
+
+-- Refresh Token
+POST
+http://localhost:8080/v1/auth/refresh
+-- Gönderilen JSON
+{
+    "refresh_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzQ2NDUsImlhdCI6MTc3MDEyOTg0NX0.ACDDM20v1u6yjyNrqBnWafjXnrRAAT1-8CvfqSkjTsE"
+} 
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsInBlcm1pc3Npb25zIjpbInVzZXI6cmVhZCJdLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwMTMxMjYwLCJpYXQiOjE3NzAxMzAzNjB9.BKmZBkL6FPo208mYLeBFMkNOqJ2tsmGXJUN_0bdZFHQ",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzUxNjAsImlhdCI6MTc3MDEzMDM2MH0.tkpcbQ6QmVVXK-r0QgP333X_FrAktVOuh1AJhwvV1BQ"
+}
+
+-- Me (Kullanıcı Profili)
+GET
+http://localhost:8080/v1/auth/me
+-- Header
+Authorization: Bearer ACCESS_TOKEN_BURAYA
+-- Body: YOK (GET isteği)
+-- Cevap
+{
+    "id": "91cf0868-df24-4b8f-b491-70d9eb7a4373",
+    "username": "user_91cf0868",
+    "email": "beyhano@beyhan.dev",
+    "created_at": "2026-02-03T17:03:07.863425+03:00",
+    "updated_at": "2026-02-03T17:03:07.880923+03:00",
+    "social_accounts": null,
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ]
+}
+
+-- Validate Token (Token Doğrulama)
+GET
+http://localhost:8080/v1/auth/validate
+-- Header
+Authorization: Bearer ACCESS_TOKEN_BURAYA
+-- Body: YOK (GET isteği, body gönderilmez)
+-- Cevap
+{
+    "email": "beyhano@beyhan.dev",
+    "message": "Token is valid",
+    "user_id": "91cf0868-df24-4b8f-b491-70d9eb7a4373"
+}
+## Kurulum ve Çalıştırma
+
+1.  `.env.example` dosyasını `.env` olarak kopyalayın ve değerleri düzenleyin.
+2.  Docker ile veritabanını ve uygulamayı başlatmak için:
+    ```bash
+    ./scripts/run.sh
+    ```
+    _(Bu script Docker konteynerini kontrol eder, yoksa başlatır ve ardından Go sunucusunu çalıştırır)_
+
+## Geliştirme Notları
+
+- **Env Değişkenleri:**
+  - `RATE_LIMIT_BLACKLIST_IPS=...`, `RATE_LIMIT_BLACKLIST_DOMAINS=...` ile yasaklama.
+  - `RATE_LIMIT_WHITELIST=...`, `RATE_LIMIT_WHITELIST_DOMAINS=...` ile muafiyet.
+
+- **Migration Ekleme:** `internal/db/migrations` klasörüne `00000X_description.up.sql` formatında yeni dosya ekleyin.
+- **Admin Kullanıcısı:** Sistem ilk açılışta `admin@example.com` / `admin123` kullanıcısını otomatik oluşturur.
+- **Docker Volume:** `/uploads` klasörü `uploads_data` volume'ü ile kalıcı hale getirilmiştir.
+- **Image Processing:** WebP desteği için Dockerfile `CGO_ENABLED=1` ve `build-base` içerir.
--- a/HARD_DELETE_GUIDE.md
+++ b/HARD_DELETE_GUIDE.md
@@ -0,0 +1,191 @@
+# Hard Delete Hızlı Referans
+
+## Tek Komutla Hard Delete
+
+### 1. Kullanıcı ID ile Hard Delete
+
+```bash
+# Admin token al ve kullanıcıyı sil
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token') && \
+curl -X DELETE "http://localhost:8080/v1/admin/users/USER_ID_BURAYA?hard=true" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+**USER_ID_BURAYA** yerine gerçek UUID'yi yazın.
+
+### 2. Email ile Bul ve Hard Delete
+
+```bash
+# Token al
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+# Email ile kullanıcı bul
+USER_ID=$(curl -s -X GET "http://localhost:8080/v1/admin/users/search?q=test@example.com" \
+  -H "Authorization: Bearer $TOKEN" | jq -r '.users[0].id')
+
+# Hard delete
+curl -X DELETE "http://localhost:8080/v1/admin/users/$USER_ID?hard=true" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+### 3. One-Liner (Tek Satırda)
+
+```bash
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login -H "Content-Type: application/json" -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token') && USER_ID=$(curl -s -X GET "http://localhost:8080/v1/admin/users/search?q=EMAIL_BURAYA" -H "Authorization: Bearer $TOKEN" | jq -r '.users[0].id') && curl -X DELETE "http://localhost:8080/v1/admin/users/$USER_ID?hard=true" -H "Authorization: Bearer $TOKEN"
+```
+
+**EMAIL_BURAYA** yerine silinecek email'i yazın.
+
+## API Endpoint'leri
+
+| İşlem | Method | Endpoint | Query Param |
+|-------|--------|----------|-------------|
+| Soft Delete | DELETE | `/v1/admin/users/{id}` | - |
+| Hard Delete | DELETE | `/v1/admin/users/{id}` | `?hard=true` |
+| Kullanıcı Ara | GET | `/v1/admin/users/search` | `?q=email` |
+| Kullanıcı Listele | GET | `/v1/admin/users` | `?page=1&limit=10` |
+
+## Örnek Yanıtlar
+
+### Başarılı Hard Delete
+```json
+{
+  "message": "User deleted permanently successfully"
+}
+```
+
+### Başarılı Soft Delete
+```json
+{
+  "message": "User deleted soft successfully"
+}
+```
+
+### Hata (Kullanıcı Bulunamadı)
+```json
+{
+  "error": "Failed to delete user"
+}
+```
+
+### Hata (Kendi Hesabını Silmeye Çalışma)
+```json
+{
+  "error": "Cannot delete your own account"
+}
+```
+
+## cURL ile POST Örnekleri
+
+### Yeni Kullanıcı Oluştur (Hard Delete için)
+
+```bash
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+# Form data ile (avatar ile)
+curl -X POST http://localhost:8080/v1/admin/users \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "email=newuser@test.com" \
+  -F "password=password123" \
+  -F "user_name=New User" \
+  -F "email_verified=false" \
+  -F "roles=user"
+
+# Yanıt - User ID'yi not edin
+# {
+#   "id": "abc-123-def-456",
+#   "email": "newuser@test.com",
+#   ...
+# }
+
+# Hard delete
+curl -X DELETE "http://localhost:8080/v1/admin/users/abc-123-def-456?hard=true" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+## Pratik Scriptler
+
+### test-hard-delete.sh
+```bash
+#!/bin/bash
+
+# Test kullanıcısı oluştur ve hemen hard delete yap
+echo "Creating admin token..."
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+echo "Creating test user..."
+CREATE_RESPONSE=$(curl -s -X POST http://localhost:8080/v1/admin/users \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "email=temp@test.com" \
+  -F "password=temp123" \
+  -F "user_name=Temp User" \
+  -F "email_verified=false" \
+  -F "roles=user")
+
+USER_ID=$(echo $CREATE_RESPONSE | jq -r '.id')
+echo "Created user: $USER_ID"
+
+echo "Hard deleting user..."
+DELETE_RESPONSE=$(curl -s -X DELETE "http://localhost:8080/v1/admin/users/$USER_ID?hard=true" \
+  -H "Authorization: Bearer $TOKEN")
+
+echo "Result: $DELETE_RESPONSE"
+```
+
+### bulk-hard-delete.sh
+```bash
+#!/bin/bash
+
+# Belirli email pattern'e uyan tüm kullanıcıları hard delete yap
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+# test içeren emailler
+SEARCH_QUERY="test"
+
+echo "Searching users with pattern: $SEARCH_QUERY"
+USER_IDS=$(curl -s -X GET "http://localhost:8080/v1/admin/users/search?q=$SEARCH_QUERY" \
+  -H "Authorization: Bearer $TOKEN" | jq -r '.users[].id')
+
+for USER_ID in $USER_IDS; do
+  echo "Hard deleting: $USER_ID"
+  curl -s -X DELETE "http://localhost:8080/v1/admin/users/$USER_ID?hard=true" \
+    -H "Authorization: Bearer $TOKEN" | jq '.'
+  sleep 0.5  # Rate limiting için
+done
+
+echo "Bulk hard delete completed!"
+```
+
+## Önemli Notlar
+
+✅ **Kullanım Öncesi:**
+- Admin token'ınızın geçerli olduğundan emin olun
+- Silinecek kullanıcının ID'sini doğrulayın
+- Soft delete yerine hard delete kullanmak istediğinizden emin olun
+
+⚠️ **Dikkat:**
+- Hard delete **GERİ ALINAMAZ**
+- Kendi hesabınızı silemezsiniz
+- Üretim ortamında dikkatli kullanın
+- Yedek almadan hard delete yapmayın
+
+🔧 **Debug:**
+```bash
+# Token geçerli mi kontrol et
+curl -X GET http://localhost:8080/v1/auth/validate \
+  -H "Authorization: Bearer $TOKEN"
+
+# Kullanıcı var mı kontrol et
+curl -X GET "http://localhost:8080/v1/admin/users/$USER_ID" \
+  -H "Authorization: Bearer $TOKEN"
+```
--- a/Login.txt
+++ b/Login.txt
@@ -0,0 +1,35 @@
+curl -X 'POST' \
+  'http://127.0.0.1:8080/v1/auth/login' \
+  -H 'accept: application/json' \
+  -H 'Content-Type: application/json' \
+  -d '{
+  "email": "beyhan@beyhan.dev",
+  "password": "1923btO**"
+}'
+
+	
+Response body
+Download
+
+{
+  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI1M2JmNGIwNS03ZDgzLTQ4ZjUtODQ3Ny1kODc4YTFkYjY3ZDkiLCJlbWFpbCI6ImJleWhhbkBiZXloYW4uZGV2IiwicGVybWlzc2lvbnMiOlsidXNlcjpyZWFkIl0sImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzAyMzc5NTksImlhdCI6MTc3MDIzNzA1OX0.I2z8n8G8kv3phvdv_IyL8CaY-LnYl9wpyleGQjTXmQc",
+  "avatar": "",
+  "email": "beyhan@beyhan.dev",
+  "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI1M2JmNGIwNS03ZDgzLTQ4ZjUtODQ3Ny1kODc4YTFkYjY3ZDkiLCJlbWFpbCI6ImJleWhhbkBiZXloYW4uZGV2IiwiaXNzIjoiZ2F1dGgtY2VudHJhbCIsImV4cCI6MTc3MDg0MTg1OSwiaWF0IjoxNzcwMjM3MDU5fQ.sHEQU1LWFSD9FJ2d1gj_GHjP35uzGm2NDvaqa_ckLHk",
+  "roles": [
+    {
+      "id": 2,
+      "name": "user",
+      "description": "Default user role",
+      "permissions": [
+        {
+          "id": 1,
+          "name": "user:read",
+          "description": "Can read user data"
+        }
+      ]
+    }
+  ],
+  "user_id": "53bf4b05-7d83-48f5-8477-d878a1db67d9",
+  "username": "Beyhan Oğur"
+} 
--- a/README.md
+++ b/README.md
@@ -0,0 +1,36 @@
+This is a [Next.js](https://nextjs.org) project bootstrapped with [`create-next-app`](https://nextjs.org/docs/app/api-reference/cli/create-next-app).
+
+## Getting Started
+
+First, run the development server:
+
+```bash
+npm run dev
+# or
+yarn dev
+# or
+pnpm dev
+# or
+bun dev
+```
+
+Open [http://localhost:3000](http://localhost:3000) with your browser to see the result.
+
+You can start editing the page by modifying `app/page.tsx`. The page auto-updates as you edit the file.
+
+This project uses [`next/font`](https://nextjs.org/docs/app/building-your-application/optimizing/fonts) to automatically optimize and load [Geist](https://vercel.com/font), a new font family for Vercel.
+
+## Learn More
+
+To learn more about Next.js, take a look at the following resources:
+
+- [Next.js Documentation](https://nextjs.org/docs) - learn about Next.js features and API.
+- [Learn Next.js](https://nextjs.org/learn) - an interactive Next.js tutorial.
+
+You can check out [the Next.js GitHub repository](https://github.com/vercel/next.js) - your feedback and contributions are welcome!
+
+## Deploy on Vercel
+
+The easiest way to deploy your Next.js app is to use the [Vercel Platform](https://vercel.com/new?utm_medium=default-template&filter=next.js&utm_source=create-next-app&utm_campaign=create-next-app-readme) from the creators of Next.js.
+
+Check out our [Next.js deployment documentation](https://nextjs.org/docs/app/building-your-application/deploying) for more details.
--- a/Register.txt
+++ b/Register.txt
@@ -0,0 +1,35 @@
+curl -X 'POST' \
+  'http://127.0.0.1:8080/v1/auth/register' \
+  -H 'accept: application/json' \
+  -H 'Content-Type: application/json' \
+  -d '{
+  "email": "beyhan@beyhan.dev",
+  "password": "1923btO**",
+  "username": "Beyhan Oğur"
+}'
+Response body
+Download
+
+{
+  "avatar": "",
+  "email": "beyhan@beyhan.dev",
+  "email_verified": false,
+  "message": "User created. Please verify your email.",
+  "roles": [
+    {
+      "id": 2,
+      "name": "user",
+      "description": "Default user role",
+      "permissions": [
+        {
+          "id": 1,
+          "name": "user:read",
+          "description": "Can read user data"
+        }
+      ]
+    }
+  ],
+  "user_id": "53bf4b05-7d83-48f5-8477-d878a1db67d9",
+  "username": "Beyhan Oğur",
+  "verification_token": "25b6ea0d5f7376881d5f57b11305122431e8967a13ce66888f2312b22bca48ef"
+}
--- a/SOFT_DELETE_MANAGEMENT.md
+++ b/SOFT_DELETE_MANAGEMENT.md
@@ -0,0 +1,414 @@
+# Soft Delete Kullanıcı Yönetimi
+
+## Genel Bakış
+
+AuthCentral'da silinen kullanıcılar soft delete ile yönetilir. Bu, kullanıcıların veritabanından silinmeden sadece işaretlenerek pasif hale getirilmesi anlamına gelir.
+
+## Yeni Endpoint'ler
+
+### 1. Silinen Kullanıcıları Listele
+
+```bash
+GET /v1/admin/users/deleted
+```
+
+**Query Parameters:**
+- `page` (int, optional) - Sayfa numarası (default: 1)
+- `limit` (int, optional) - Sayfa başına kayıt (default: 10, max: 100)
+
+**Örnek:**
+```bash
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+curl -X GET "http://localhost:8080/v1/admin/users/deleted?page=1&limit=10" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+**Yanıt:**
+```json
+{
+  "users": [
+    {
+      "id": "ca567947-ef2a-49ad-b955-bf0ef6bbf136",
+      "username": "Delete Me",
+      "email": "deleteme@test.com",
+      "avatar": "",
+      "email_verified": true,
+      "created_at": "2026-02-05T00:03:08.360433+03:00",
+      "updated_at": "2026-02-05T00:03:08.38027+03:00",
+      "deleted_at": "2026-02-05T00:03:25.549299+03:00",
+      "roles": [
+        {
+          "id": 2,
+          "name": "user",
+          "description": "Default user role"
+        }
+      ],
+      "social_accounts": []
+    }
+  ],
+  "pagination": {
+    "page": 1,
+    "limit": 10,
+    "total": 12,
+    "totalPages": 2
+  }
+}
+```
+
+**Özellikler:**
+- ✅ `deleted_at` field'ı görünür (normal endpoint'lerde gizli)
+- ✅ Pagination desteği
+- ✅ Sadece soft delete edilmiş kullanıcılar gösterilir
+- ✅ En son silinen kullanıcılar önce gelir (deleted_at DESC)
+
+### 2. Kullanıcıyı Geri Yükle (Restore)
+
+```bash
+POST /v1/admin/users/{id}/restore
+```
+
+**Path Parameters:**
+- `id` (uuid, required) - Kullanıcı ID
+
+**Örnek:**
+```bash
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+USER_ID="ca567947-ef2a-49ad-b955-bf0ef6bbf136"
+
+curl -X POST "http://localhost:8080/v1/admin/users/$USER_ID/restore" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+**Başarılı Yanıt:**
+```json
+{
+  "message": "User restored successfully"
+}
+```
+
+**Hata Yanıtları:**
+```json
+{
+  "error": "deleted user not found"
+}
+```
+
+## Kullanım Senaryoları
+
+### Senaryo 1: Silinen Kullanıcıları İnceleme
+
+```bash
+#!/bin/bash
+
+# Admin login
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+# Tüm silinen kullanıcıları listele
+echo "=== Deleted Users ==="
+curl -s -X GET "http://localhost:8080/v1/admin/users/deleted" \
+  -H "Authorization: Bearer $TOKEN" | jq '.users[] | {id, email, username, deleted_at}'
+```
+
+### Senaryo 2: Kullanıcıyı Soft Delete ve Restore
+
+```bash
+#!/bin/bash
+
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+USER_ID="abc-123-def-456"
+
+# 1. Kullanıcıyı soft delete yap
+echo "Step 1: Soft delete user"
+curl -s -X DELETE "http://localhost:8080/v1/admin/users/$USER_ID" \
+  -H "Authorization: Bearer $TOKEN" | jq '.'
+
+# 2. Silinen kullanıcılar listesinde kontrol et
+echo -e "\nStep 2: Check deleted users"
+curl -s -X GET "http://localhost:8080/v1/admin/users/deleted" \
+  -H "Authorization: Bearer $TOKEN" | jq ".users[] | select(.id==\"$USER_ID\")"
+
+# 3. Kullanıcıyı geri yükle
+echo -e "\nStep 3: Restore user"
+curl -s -X POST "http://localhost:8080/v1/admin/users/$USER_ID/restore" \
+  -H "Authorization: Bearer $TOKEN" | jq '.'
+
+# 4. Normal kullanıcı listesinde kontrol et
+echo -e "\nStep 4: Verify user is restored"
+curl -s -X GET "http://localhost:8080/v1/admin/users/$USER_ID" \
+  -H "Authorization: Bearer $TOKEN" | jq '{id, email, username}'
+```
+
+### Senaryo 3: Frontend İçin Silinen Kullanıcılar Yönetimi
+
+**Frontend JavaScript Örneği:**
+
+```javascript
+// API Client
+class AdminAPI {
+  constructor(baseURL, token) {
+    this.baseURL = baseURL;
+    this.token = token;
+  }
+
+  async getDeletedUsers(page = 1, limit = 10) {
+    const response = await fetch(
+      `${this.baseURL}/v1/admin/users/deleted?page=${page}&limit=${limit}`,
+      {
+        headers: {
+          'Authorization': `Bearer ${this.token}`
+        }
+      }
+    );
+    return response.json();
+  }
+
+  async restoreUser(userId) {
+    const response = await fetch(
+      `${this.baseURL}/v1/admin/users/${userId}/restore`,
+      {
+        method: 'POST',
+        headers: {
+          'Authorization': `Bearer ${this.token}`
+        }
+      }
+    );
+    return response.json();
+  }
+
+  async softDeleteUser(userId) {
+    const response = await fetch(
+      `${this.baseURL}/v1/admin/users/${userId}`,
+      {
+        method: 'DELETE',
+        headers: {
+          'Authorization': `Bearer ${this.token}`
+        }
+      }
+    );
+    return response.json();
+  }
+
+  async hardDeleteUser(userId) {
+    const response = await fetch(
+      `${this.baseURL}/v1/admin/users/${userId}?hard=true`,
+      {
+        method: 'DELETE',
+        headers: {
+          'Authorization': `Bearer ${this.token}`
+        }
+      }
+    );
+    return response.json();
+  }
+}
+
+// Kullanım
+const admin = new AdminAPI('http://localhost:8080', YOUR_TOKEN);
+
+// Silinen kullanıcıları getir
+const deletedUsers = await admin.getDeletedUsers(1, 10);
+console.log(deletedUsers);
+
+// Kullanıcıyı geri yükle
+const result = await admin.restoreUser('user-uuid-here');
+console.log(result);
+```
+
+## API Endpoint'leri Özeti
+
+| Endpoint | Method | Açıklama | Query/Body |
+|----------|--------|----------|------------|
+| `/v1/admin/users` | GET | Aktif kullanıcılar | `?page=1&limit=10` |
+| `/v1/admin/users/deleted` | GET | **Silinen kullanıcılar** | `?page=1&limit=10` |
+| `/v1/admin/users/{id}` | DELETE | Soft delete | - |
+| `/v1/admin/users/{id}?hard=true` | DELETE | Hard delete (kalıcı) | `?hard=true` |
+| `/v1/admin/users/{id}/restore` | POST | **Kullanıcıyı geri yükle** | - |
+
+## Soft Delete vs Hard Delete
+
+| Özellik | Soft Delete | Hard Delete |
+|---------|-------------|-------------|
+| **Veritabanı** | `deleted_at` timestamp set edilir | Tamamen silinir |
+| **Görünürlük** | `/deleted` endpoint'inde görünür | Hiçbir yerde görünmez |
+| **Geri Getirme** | ✅ `/restore` ile mümkün | ❌ İmkansız |
+| **İlişkiler** | Korunur | Silinir |
+| **Kullanım** | Varsayılan, güvenli | Dikkatli kullanılmalı |
+| **Komut** | `DELETE /users/{id}` | `DELETE /users/{id}?hard=true` |
+
+## Frontend Entegrasyonu
+
+### React Örneği
+
+```jsx
+import React, { useState, useEffect } from 'react';
+
+function DeletedUsersManager() {
+  const [deletedUsers, setDeletedUsers] = useState([]);
+  const [loading, setLoading] = useState(false);
+  const [page, setPage] = useState(1);
+
+  const fetchDeletedUsers = async () => {
+    setLoading(true);
+    try {
+      const response = await fetch(
+        `http://localhost:8080/v1/admin/users/deleted?page=${page}&limit=10`,
+        {
+          headers: {
+            'Authorization': `Bearer ${localStorage.getItem('token')}`
+          }
+        }
+      );
+      const data = await response.json();
+      setDeletedUsers(data.users);
+    } catch (error) {
+      console.error('Error fetching deleted users:', error);
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  const restoreUser = async (userId) => {
+    if (!confirm('Bu kullanıcıyı geri yüklemek istediğinize emin misiniz?')) {
+      return;
+    }
+
+    try {
+      const response = await fetch(
+        `http://localhost:8080/v1/admin/users/${userId}/restore`,
+        {
+          method: 'POST',
+          headers: {
+            'Authorization': `Bearer ${localStorage.getItem('token')}`
+          }
+        }
+      );
+      
+      if (response.ok) {
+        alert('Kullanıcı başarıyla geri yüklendi!');
+        fetchDeletedUsers(); // Listeyi yenile
+      }
+    } catch (error) {
+      console.error('Error restoring user:', error);
+    }
+  };
+
+  useEffect(() => {
+    fetchDeletedUsers();
+  }, [page]);
+
+  return (
+    <div className="deleted-users-manager">
+      <h2>Silinen Kullanıcılar</h2>
+      
+      {loading ? (
+        <p>Yükleniyor...</p>
+      ) : (
+        <table>
+          <thead>
+            <tr>
+              <th>Email</th>
+              <th>Kullanıcı Adı</th>
+              <th>Silinme Tarihi</th>
+              <th>İşlemler</th>
+            </tr>
+          </thead>
+          <tbody>
+            {deletedUsers.map(user => (
+              <tr key={user.id}>
+                <td>{user.email}</td>
+                <td>{user.username}</td>
+                <td>{new Date(user.deleted_at).toLocaleString('tr-TR')}</td>
+                <td>
+                  <button onClick={() => restoreUser(user.id)}>
+                    Geri Yükle
+                  </button>
+                </td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+      )}
+      
+      <div className="pagination">
+        <button onClick={() => setPage(p => Math.max(1, p - 1))}>
+          Önceki
+        </button>
+        <span>Sayfa {page}</span>
+        <button onClick={() => setPage(p => p + 1)}>
+          Sonraki
+        </button>
+      </div>
+    </div>
+  );
+}
+
+export default DeletedUsersManager;
+```
+
+## Güvenlik Notları
+
+✅ **İyi Pratikler:**
+- Silinen kullanıcıları düzenli olarak gözden geçirin
+- Restore işleminden önce kullanıcıyı doğrulayın
+- Hard delete yapmadan önce soft delete kullanın
+- Kritik kullanıcılar için restore geçmişi tutun
+
+⚠️ **Dikkat Edilmesi Gerekenler:**
+- Sadece admin rolündeki kullanıcılar bu endpoint'lere erişebilir
+- Restore edilen kullanıcı önceki tüm rolleri ve ayarları ile geri gelir
+- Soft delete edilmiş kullanıcılar login yapamaz
+- Hard delete geri alınamaz, dikkatli kullanın
+
+## Test Komutları
+
+```bash
+# 1. Kullanıcı oluştur
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@gauth.local","password":"Admin@123"}' | jq -r '.access_token')
+
+curl -X POST http://localhost:8080/v1/admin/users \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "email=test@example.com" \
+  -F "password=test123" \
+  -F "user_name=Test User" \
+  -F "roles=user"
+
+# 2. Kullanıcıyı soft delete yap
+curl -X DELETE "http://localhost:8080/v1/admin/users/USER_ID" \
+  -H "Authorization: Bearer $TOKEN"
+
+# 3. Silinen kullanıcıları listele
+curl -X GET "http://localhost:8080/v1/admin/users/deleted" \
+  -H "Authorization: Bearer $TOKEN" | jq '.'
+
+# 4. Kullanıcıyı geri yükle
+curl -X POST "http://localhost:8080/v1/admin/users/USER_ID/restore" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+## Özet
+
+🎯 **Yeni Özellikler:**
+- ✅ Silinen kullanıcıları listeleme
+- ✅ Kullanıcıyı geri yükleme (restore)
+- ✅ `deleted_at` field'ı görünürlüğü
+- ✅ Pagination desteği
+- ✅ Frontend entegrasyonu için hazır
+
+📊 **Kullanım:**
+- Soft delete varsayılan silme yöntemi
+- Hard delete sadece kalıcı silme için
+- Restore ile yanlışlıkla silinen kullanıcılar kurtarılabilir
+- Frontend'de silinen kullanıcılar yönetilebilir
--- a/USER_PROFILE_API.md
+++ b/USER_PROFILE_API.md
@@ -0,0 +1,586 @@
+# Kullanıcı Profil Yönetimi API
+
+## Genel Bakış
+
+AuthCentral kullanıcıları kendi profillerini yönetebilir. Bu dokümantasyon kullanıcı profil yönetimi endpoint'lerini açıklar.
+
+## Endpoint'ler
+
+### 1. Profil Bilgilerini Getir
+
+```bash
+GET /v1/profile
+```
+
+**Headers:**
+- `Authorization: Bearer {access_token}`
+
+**Yanıt:**
+```json
+{
+  "id": "7d8b023c-d5e4-4f62-8811-ddbf00d675bb",
+  "username": "admin",
+  "email": "admin@gauth.local",
+  "avatar": "/uploads/avatars/admin_avatar.png",
+  "email_verified": true,
+  "is_oauth_user": false,
+  "created_at": "2026-02-04T20:00:00Z",
+  "updated_at": "2026-02-05T10:00:00Z",
+  "roles": [
+    {
+      "id": 1,
+      "name": "admin",
+      "description": "Administrator role"
+    }
+  ],
+  "social_accounts": []
+}
+```
+
+**Yeni Field:**
+- `is_oauth_user` (boolean) - Kullanıcı OAuth ile mi giriş yapmış (Google/GitHub)
+
+**Örnek:**
+```bash
+TOKEN="your_access_token_here"
+
+curl -X GET "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+---
+
+### 2. Profil Güncelle
+
+```bash
+PUT /v1/profile
+```
+
+**Headers:**
+- `Authorization: Bearer {access_token}`
+- `Content-Type: multipart/form-data` (avatar yüklemek için)
+
+**Form Data:**
+- `user_name` (string, optional) - Yeni kullanıcı adı
+- `avatar` (file, optional) - Profil resmi (max 5MB)
+
+**Örnek (Username Güncelleme):**
+```bash
+TOKEN="your_access_token_here"
+
+curl -X PUT "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "user_name=Beyhan Oğur"
+```
+
+**Örnek (Avatar Yükleme):**
+```bash
+TOKEN="your_access_token_here"
+
+curl -X PUT "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "avatar=@/path/to/profile-picture.jpg"
+```
+
+**Örnek (Username + Avatar):**
+```bash
+TOKEN="your_access_token_here"
+
+curl -X PUT "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "user_name=Beyhan Oğur" \
+  -F "avatar=@/path/to/profile-picture.jpg"
+```
+
+**Başarılı Yanıt:**
+```json
+{
+  "message": "Profile updated successfully",
+  "user": {
+    "id": "7d8b023c-d5e4-4f62-8811-ddbf00d675bb",
+    "username": "Beyhan Oğur",
+    "email": "admin@gauth.local",
+    "avatar": "/uploads/avatars/7d8b023c_1770238858420987000.png",
+    "email_verified": true,
+    "roles": [...]
+  }
+}
+```
+
+---
+
+### 3. Şifre Değiştir
+
+```bash
+PUT /v1/profile/password
+```
+
+**Headers:**
+- `Authorization: Bearer {access_token}`
+- `Content-Type: application/json`
+
+**Request Body:**
+```json
+{
+  "current_password": "OldPassword123",
+  "new_password": "NewPassword123"
+}
+```
+
+**Örnek:**
+```bash
+TOKEN="your_access_token_here"
+
+curl -X PUT "http://localhost:8080/v1/profile/password" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "current_password": "OldPassword123",
+    "new_password": "NewPassword123"
+  }'
+```
+
+**Başarılı Yanıt:**
+```json
+{
+  "message": "Password changed successfully"
+}
+```
+
+**Hata Yanıtları:**
+```json
+{
+  "error": "Current password is incorrect"
+}
+```
+
+```json
+{
+  "error": "Cannot change password for OAuth users (Google/GitHub login)"
+}
+```
+
+**Notlar:**
+- ✅ Mevcut şifre doğrulanır
+- ✅ Yeni şifre minimum 6 karakter olmalı
+- ⚠️ **OAuth kullanıcıları (Google/GitHub) şifre değiştiremez**
+- ⚠️ Şifre değiştirildikten sonra yeni şifre ile login yapılmalı
+- 💡 `is_oauth_user: true` ise şifre değiştirme butonu gösterilmemeli
+
+---
+
+### 4. Email Adresi Değiştir
+
+```bash
+PUT /v1/profile/email
+```
+
+**Headers:**
+- `Authorization: Bearer {access_token}`
+- `Content-Type: application/json`
+
+**Request Body:**
+```json
+{
+  "new_email": "newemail@example.com",
+  "password": "YourCurrentPassword"
+}
+```
+
+**Örnek:**
+```bash
+TOKEN="your_access_token_here"
+
+curl -X PUT "http://localhost:8080/v1/profile/email" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "new_email": "newemail@example.com",
+    "password": "YourPassword123"
+  }'
+```
+
+**Başarılı Yanıt:**
+```json
+{
+  "message": "Email updated. Please verify your new email address.",
+  "new_email": "newemail@example.com",
+  "verification_token": "abc123def456..."
+}
+```
+
+**Hata Yanıtları:**
+```json
+{
+  "error": "Password is incorrect"
+}
+```
+
+```json
+{
+  "error": "Email already in use"
+}
+```
+
+```json
+{
+  "error": "Cannot change email for OAuth users (Google/GitHub login)"
+}
+```
+
+**Önemli Notlar:**
+- ⚠️ **OAuth kullanıcıları (Google/GitHub) email değiştiremez**
+- ⚠️ Email değiştirildiğinde `email_verified` false olur
+- ⚠️ Yeni email adresine doğrulama email'i gönderilir
+- ⚠️ Email doğrulanana kadar login yapılamaz
+- ⚠️ Email doğrulama için `/v1/auth/verify-email?token=...` endpoint'i kullanılır
+- 💡 `is_oauth_user: true` ise email değiştirme butonu gösterilmemeli
+
+---
+
+## Kullanım Senaryoları
+
+### Senaryo 1: Tam Profil Güncelleme
+
+```bash
+#!/bin/bash
+
+# Login
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"user@example.com","password":"password123"}' | jq -r '.access_token')
+
+# 1. Kullanıcı adını güncelle
+curl -X PUT "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "user_name=Yeni İsim"
+
+# 2. Avatar yükle
+curl -X PUT "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "avatar=@./my-photo.jpg"
+
+# 3. Şifre değiştir
+curl -X PUT "http://localhost:8080/v1/profile/password" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "current_password": "password123",
+    "new_password": "newpassword456"
+  }'
+
+# 4. Profili kontrol et
+curl -X GET "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN" | jq '.'
+```
+
+### Senaryo 2: Email Değiştirme ve Doğrulama
+
+```bash
+#!/bin/bash
+
+# Login
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"old@example.com","password":"password123"}' | jq -r '.access_token')
+
+# 1. Email değiştir
+RESPONSE=$(curl -s -X PUT "http://localhost:8080/v1/profile/email" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "new_email": "new@example.com",
+    "password": "password123"
+  }')
+
+echo $RESPONSE | jq '.'
+
+# 2. Verification token'ı al
+VERIFY_TOKEN=$(echo $RESPONSE | jq -r '.verification_token')
+
+# 3. Email'i doğrula
+curl -X GET "http://localhost:8080/v1/auth/verify-email?token=$VERIFY_TOKEN"
+
+# 4. Yeni email ile login
+curl -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{
+    "email": "new@example.com",
+    "password": "password123"
+  }'
+```
+
+---
+
+## Frontend Entegrasyonu
+
+### React Örneği
+
+```jsx
+import React, { useState, useEffect } from 'react';
+
+function ProfilePage() {
+  const [user, setUser] = useState(null);
+  const [loading, setLoading] = useState(false);
+  const token = localStorage.getItem('access_token');
+
+  // Profil bilgilerini yükle
+  const fetchProfile = async () => {
+    try {
+      const response = await fetch('http://localhost:8080/v1/profile', {
+        headers: {
+          'Authorization': `Bearer ${token}`
+        }
+      });
+      const data = await response.json();
+      setUser(data);
+    } catch (error) {
+      console.error('Error fetching profile:', error);
+    }
+  };
+
+  // Username güncelle
+  const updateUsername = async (newUsername) => {
+    const formData = new FormData();
+    formData.append('user_name', newUsername);
+
+    try {
+      const response = await fetch('http://localhost:8080/v1/profile', {
+        method: 'PUT',
+        headers: {
+          'Authorization': `Bearer ${token}`
+        },
+        body: formData
+      });
+      
+      if (response.ok) {
+        fetchProfile(); // Profili yenile
+        alert('Username updated!');
+      }
+    } catch (error) {
+      console.error('Error updating username:', error);
+    }
+  };
+
+  // Avatar yükle
+  const uploadAvatar = async (file) => {
+    const formData = new FormData();
+    formData.append('avatar', file);
+
+    try {
+      const response = await fetch('http://localhost:8080/v1/profile', {
+        method: 'PUT',
+        headers: {
+          'Authorization': `Bearer ${token}`
+        },
+        body: formData
+      });
+      
+      if (response.ok) {
+        fetchProfile(); // Profili yenile
+        alert('Avatar uploaded!');
+      }
+    } catch (error) {
+      console.error('Error uploading avatar:', error);
+    }
+  };
+
+  // Şifre değiştir
+  const changePassword = async (currentPassword, newPassword) => {
+    try {
+      const response = await fetch('http://localhost:8080/v1/profile/password', {
+        method: 'PUT',
+        headers: {
+          'Authorization': `Bearer ${token}`,
+          'Content-Type': 'application/json'
+        },
+        body: JSON.stringify({
+          current_password: currentPassword,
+          new_password: newPassword
+        })
+      });
+      
+      const data = await response.json();
+      
+      if (response.ok) {
+        alert('Password changed successfully!');
+      } else {
+        alert(data.error);
+      }
+    } catch (error) {
+      console.error('Error changing password:', error);
+    }
+  };
+
+  // Email değiştir
+  const changeEmail = async (newEmail, password) => {
+    try {
+      const response = await fetch('http://localhost:8080/v1/profile/email', {
+        method: 'PUT',
+        headers: {
+          'Authorization': `Bearer ${token}`,
+          'Content-Type': 'application/json'
+        },
+        body: JSON.stringify({
+          new_email: newEmail,
+          password: password
+        })
+      });
+      
+      const data = await response.json();
+      
+      if (response.ok) {
+        alert('Email updated! Please check your email to verify.');
+      } else {
+        alert(data.error);
+      }
+    } catch (error) {
+      console.error('Error changing email:', error);
+    }
+  };
+
+  useEffect(() => {
+    fetchProfile();
+  }, []);
+
+  return (
+    <div>
+      <h1>Profile</h1>
+      {user && (
+        <div>
+          <img src={`http://localhost:8080${user.avatar}`} alt="Avatar" />
+          <p>Username: {user.username}</p>
+          <p>Email: {user.email}</p>
+          <p>Verified: {user.email_verified ? 'Yes' : 'No'}</p>
+          
+          {/* OAuth user indicator */}
+          {user.is_oauth_user && (
+            <p className="info">
+              ℹ️ Logged in with {user.social_accounts?.[0]?.provider || 'OAuth'}
+            </p>
+          )}
+          
+          {/* Password change - only for non-OAuth users */}
+          {!user.is_oauth_user && (
+            <button onClick={() => {
+              const current = prompt('Current password:');
+              const newPass = prompt('New password:');
+              if (current && newPass) changePassword(current, newPass);
+            }}>
+              Change Password
+            </button>
+          )}
+          
+          {/* Email change - only for non-OAuth users */}
+          {!user.is_oauth_user && (
+            <button onClick={() => {
+              const newEmail = prompt('New email:');
+              const password = prompt('Your password:');
+              if (newEmail && password) changeEmail(newEmail, password);
+            }}>
+              Change Email
+            </button>
+          )}
+        </div>
+      )}
+    </div>
+  );
+}
+```
+
+---
+
+## API Özeti
+
+| Endpoint | Method | Açıklama | Auth Required |
+|----------|--------|----------|---------------|
+| `/v1/profile` | GET | Profil bilgilerini getir | ✅ |
+| `/v1/profile` | PUT | Profil güncelle (username, avatar) | ✅ |
+| `/v1/profile/password` | PUT | Şifre değiştir | ✅ |
+| `/v1/profile/email` | PUT | Email değiştir | ✅ |
+
+---
+
+## Güvenlik Notları
+
+✅ **İyi Pratikler:**
+- Şifre değiştirirken mevcut şifre doğrulanır
+- Email değiştirirken doğrulama email'i gönderilir
+- Avatar dosya boyutu sınırlandırılmıştır (max 5MB)
+- Tüm endpoint'ler authentication gerektirir
+
+⚠️ **Dikkat Edilmesi Gerekenler:**
+- **OAuth kullanıcıları (Google/GitHub) şifre ve email değiştiremez**
+- OAuth kullanıcıları sadece username ve avatar değiştirebilir
+- Frontend'de `is_oauth_user` flag'ini kontrol edin
+- Şifre değiştirme butonu OAuth kullanıcılarına gösterilmemeli
+- Email değiştirme butonu OAuth kullanıcılarına gösterilmemeli
+- Email değiştirildiğinde yeniden doğrulama gerekir
+- Şifre minimum 6 karakter olmalı
+- Avatar sadece resim formatları kabul edilir
+
+## OAuth Kullanıcı Kısıtlamaları
+
+| Özellik | Email/Password Kullanıcı | OAuth Kullanıcı (Google/GitHub) |
+|---------|-------------------------|--------------------------------|
+| Profil Görüntüleme | ✅ Evet | ✅ Evet |
+| Username Değiştirme | ✅ Evet | ✅ Evet |
+| Avatar Yükleme | ✅ Evet | ✅ Evet |
+| **Şifre Değiştirme** | ✅ Evet | ❌ **Hayır** |
+| **Email Değiştirme** | ✅ Evet | ❌ **Hayır** |
+
+**Önemli:** Frontend'de `is_oauth_user` field'ını kontrol ederek UI'ı buna göre düzenleyin.
+
+---
+
+## Test Komutları
+
+```bash
+# Login ve token al
+TOKEN=$(curl -s -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"user@example.com","password":"password123"}' | jq -r '.access_token')
+
+# Profil bilgilerini getir
+curl -X GET "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN" | jq '.'
+
+# Username güncelle
+curl -X PUT "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "user_name=New Name"
+
+# Avatar yükle
+curl -X PUT "http://localhost:8080/v1/profile" \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "avatar=@./photo.jpg"
+
+# Şifre değiştir
+curl -X PUT "http://localhost:8080/v1/profile/password" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"current_password":"old123","new_password":"new456"}'
+
+# Email değiştir
+curl -X PUT "http://localhost:8080/v1/profile/email" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"new_email":"new@email.com","password":"password123"}'
+```
+
+---
+
+## Özet
+
+🎯 **Özellikler:**
+- ✅ Profil bilgilerini görüntüleme
+- ✅ Kullanıcı adı güncelleme
+- ✅ Avatar yükleme (max 5MB)
+- ✅ Şifre değiştirme (mevcut şifre doğrulaması ile)
+- ✅ Email değiştirme (yeniden doğrulama ile)
+
+📊 **Kullanım:**
+- Her kullanıcı kendi profilini yönetebilir
+- OAuth kullanıcıları şifre değiştiremez
+- Email değişikliği doğrulama gerektirir
+- Avatar otomatik optimize edilir
--- a/app/(admin)/admin/cors/page.tsx
+++ b/app/(admin)/admin/cors/page.tsx
@@ -0,0 +1,178 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import {
+    Breadcrumb,
+    BreadcrumbItem,
+    BreadcrumbLink,
+    BreadcrumbList,
+    BreadcrumbPage,
+    BreadcrumbSeparator,
+} from "@/components/ui/breadcrumb";
+import { Separator } from "@/components/ui/separator";
+import { useAppDispatch, useAppSelector } from "@/lib/hooks";
+import {
+    fetchWhitelists,
+    fetchBlacklists,
+    createWhitelist,
+    createBlacklist,
+    deleteWhitelist,
+    deleteBlacklist,
+    updateWhitelist,
+    updateBlacklist,
+    CorsEntry,
+} from "@/lib/features/cors/corsSlice";
+import { CorsTable } from "@/components/cors/cors-table";
+import { CorsDialog } from "@/components/cors/cors-dialog";
+import { Button } from "@/components/ui/button";
+import { Plus } from "lucide-react";
+import Swal from "sweetalert2";
+
+export default function CorsPage() {
+    const dispatch = useAppDispatch();
+    const { whitelist, blacklist } = useAppSelector((state) => state.cors);
+    const [activeTab, setActiveTab] = useState<"whitelist" | "blacklist">("whitelist");
+    const [mounted, setMounted] = useState(false);
+
+    // Dialog state
+    const [dialogOpen, setDialogOpen] = useState(false);
+    const [editingEntry, setEditingEntry] = useState<CorsEntry | null>(null);
+
+    useEffect(() => {
+        setMounted(true);
+        dispatch(fetchWhitelists());
+        dispatch(fetchBlacklists());
+    }, [dispatch]);
+
+    if (!mounted) return null;
+
+    const handleDelete = (id: string) => {
+        Swal.fire({
+            title: 'Emin misiniz?',
+            text: "Bu kaydı silmek istediğinize emin misiniz?",
+            icon: 'warning',
+            showCancelButton: true,
+            confirmButtonColor: '#3085d6',
+            cancelButtonColor: '#d33',
+            confirmButtonText: 'Evet, sil!',
+            cancelButtonText: 'İptal'
+        }).then((result) => {
+            if (result.isConfirmed) {
+                if (activeTab === "whitelist") {
+                    dispatch(deleteWhitelist(id)).then(() => {
+                        Swal.fire('Silindi!', 'Kayıt başarıyla silindi.', 'success');
+                    });
+                } else {
+                    dispatch(deleteBlacklist(id)).then(() => {
+                        Swal.fire('Silindi!', 'Kayıt başarıyla silindi.', 'success');
+                    });
+                }
+            }
+        });
+    };
+
+    const handleToggleActive = (id: string, currentStatus: boolean) => {
+        const data = { is_active: !currentStatus };
+        if (activeTab === "whitelist") {
+            dispatch(updateWhitelist({ id, data }));
+        } else {
+            dispatch(updateBlacklist({ id, data }));
+        }
+    };
+
+    const handleEdit = (entry: CorsEntry) => {
+        setEditingEntry(entry);
+        setDialogOpen(true);
+    };
+
+    const handleAddClick = () => {
+        setEditingEntry(null);
+        setDialogOpen(true);
+    };
+
+    const handleDialogSubmit = async (origin: string, note: string) => {
+        if (editingEntry) {
+            // Update existing
+            const data: Partial<CorsEntry> = activeTab === "whitelist"
+                ? { origin, description: note }
+                : { origin, reason: note };
+
+            if (activeTab === "whitelist") {
+                await dispatch(updateWhitelist({ id: editingEntry.id, data })).unwrap();
+            } else {
+                await dispatch(updateBlacklist({ id: editingEntry.id, data })).unwrap();
+            }
+            Swal.fire('Güncellendi!', 'Kayıt başarıyla güncellendi.', 'success');
+        } else {
+            // Create new
+            if (activeTab === "whitelist") {
+                await dispatch(createWhitelist({ origin, description: note })).unwrap();
+            } else {
+                await dispatch(createBlacklist({ origin, reason: note })).unwrap();
+            }
+            Swal.fire('Eklendi!', 'Yeni kayıt başarıyla eklendi.', 'success');
+        }
+    };
+
+    return (
+        <div className="flex flex-col gap-4">
+            {/* Header / Breadcrumb Section */}
+            <div className="flex items-center gap-2">
+                <Breadcrumb>
+                    <BreadcrumbList>
+                        <BreadcrumbItem className="hidden md:block">
+                            <BreadcrumbLink href="/admin">Admin</BreadcrumbLink>
+                        </BreadcrumbItem>
+                        <BreadcrumbSeparator className="hidden md:block" />
+                        <BreadcrumbItem>
+                            <BreadcrumbPage>CORS Ayarları</BreadcrumbPage>
+                        </BreadcrumbItem>
+                    </BreadcrumbList>
+                </Breadcrumb>
+            </div>
+
+            <Separator />
+
+            {/* Actions & Dialog */}
+            <div className="flex items-center justify-between">
+                <div className="space-x-2">
+                    <Button
+                        variant={activeTab === "whitelist" ? "default" : "outline"}
+                        onClick={() => setActiveTab("whitelist")}
+                    >
+                        Whitelist
+                    </Button>
+                    <Button
+                        variant={activeTab === "blacklist" ? "default" : "outline"}
+                        onClick={() => setActiveTab("blacklist")}
+                    >
+                        Blacklist
+                    </Button>
+                </div>
+                <Button onClick={handleAddClick}>
+                    <Plus className="mr-2 h-4 w-4" />
+                    Yeni Ekle
+                </Button>
+            </div>
+
+            <CorsDialog
+                open={dialogOpen}
+                onOpenChange={setDialogOpen}
+                type={activeTab}
+                entry={editingEntry}
+                onSubmit={handleDialogSubmit}
+            />
+
+            {/* Table */}
+            <div className="rounded-xl border bg-card">
+                <CorsTable
+                    data={activeTab === "whitelist" ? whitelist : blacklist}
+                    type={activeTab}
+                    onDelete={handleDelete}
+                    onEdit={handleEdit}
+                    onToggleActive={handleToggleActive}
+                />
+            </div>
+        </div>
+    );
+}
--- a/app/(admin)/admin/page.tsx
+++ b/app/(admin)/admin/page.tsx
@@ -0,0 +1,61 @@
+"use client";
+
+import { useAppSelector } from "@/lib/hooks";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Avatar, AvatarFallback, AvatarImage } from "@/components/ui/avatar";
+import { getAvatarUrl } from "@/lib/utils";
+
+export default function DashboardPage() {
+    const { user } = useAppSelector((state) => state.auth);
+
+    return (
+        <div className="space-y-6">
+            <div>
+                <h3 className="text-lg font-medium">Hoşgeldin, {user?.username}</h3>
+                <p className="text-sm text-muted-foreground">
+                    Admin paneli kontrol merkezi.
+                </p>
+            </div>
+            <div className="grid gap-4 md:grid-cols-2 lg:grid-cols-4">
+                <Card>
+                    <CardHeader className="flex flex-row items-center justify-between space-y-0 pb-2">
+                        <CardTitle className="text-sm font-medium">Toplam Kullanıcı</CardTitle>
+                    </CardHeader>
+                    <CardContent>
+                        <div className="text-2xl font-bold">128</div>
+                        <p className="text-xs text-muted-foreground">
+                            +4% geçen aydan beri
+                        </p>
+                    </CardContent>
+                </Card>
+                <Card>
+                    <CardHeader className="flex flex-row items-center justify-between space-y-0 pb-2">
+                        <CardTitle className="text-sm font-medium">Aktif Roller</CardTitle>
+                    </CardHeader>
+                    <CardContent>
+                        <div className="text-2xl font-bold">
+                            {user?.roles?.map(r => r.name).join(", ") || "Yok"}
+                        </div>
+                    </CardContent>
+                </Card>
+            </div>
+
+            <Card>
+                <CardHeader>
+                    <CardTitle>Profil Bilgileri</CardTitle>
+                </CardHeader>
+                <CardContent className="flex items-center gap-4">
+                    <Avatar className="h-20 w-20">
+                        <AvatarImage src={getAvatarUrl(user?.avatar_url)} />
+                        <AvatarFallback>{user?.username?.slice(0, 2).toUpperCase()}</AvatarFallback>
+                    </Avatar>
+                    <div>
+                        <div className="font-semibold text-lg">{user?.username}</div>
+                        <div className="text-muted-foreground">{user?.email}</div>
+                        <div className="text-xs text-muted-foreground mt-1">ID: {user?.id}</div>
+                    </div>
+                </CardContent>
+            </Card>
+        </div>
+    );
+}
--- a/app/(admin)/admin/users/page.tsx
+++ b/app/(admin)/admin/users/page.tsx
@@ -0,0 +1,223 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { useAppDispatch, useAppSelector } from "@/lib/hooks";
+import { fetchUsers, fetchDeletedUsers, createUser, updateUser, deleteUser, restoreUser, CreateUserRequest, UpdateUserRequest } from "@/lib/features/users/usersSlice";
+import { UserTable } from "@/components/users/user-table";
+import { DeletedUserTable } from "@/components/users/deleted-user-table";
+import { UserDialog } from "@/components/users/user-dialog";
+import { Button } from "@/components/ui/button";
+import { Plus, Trash, Trash2 } from "lucide-react";
+import Swal from "sweetalert2";
+import { User } from "@/lib/features/auth/authSlice";
+
+export default function UsersPage() {
+    const dispatch = useAppDispatch();
+    const { users, deletedUsers, isLoading, error } = useAppSelector((state) => state.users);
+    const [dialogOpen, setDialogOpen] = useState(false);
+    const [selectedUser, setSelectedUser] = useState<User | null>(null);
+
+    useEffect(() => {
+        dispatch(fetchUsers());
+        dispatch(fetchDeletedUsers());
+    }, [dispatch]);
+
+    const handleCreate = () => {
+        setSelectedUser(null);
+        setDialogOpen(true);
+    };
+
+    const handleEdit = (user: User) => {
+        setSelectedUser(user);
+        setDialogOpen(true);
+    };
+
+    const handleDelete = (id: string) => {
+        Swal.fire({
+            title: "Soft Delete",
+            text: "Bu kullanıcı 'silindi' olarak işaretlenecek (Soft Delete). Geri alınabilir.",
+            icon: "warning",
+            showCancelButton: true,
+            confirmButtonColor: "#f97316", // Orange
+            cancelButtonColor: "#3085d6",
+            confirmButtonText: "Evet, Sil",
+            cancelButtonText: "İptal",
+        }).then((result) => {
+            if (result.isConfirmed) {
+                dispatch(deleteUser(id))
+                    .unwrap()
+                    .then(() => {
+                        Swal.fire("Silindi!", "Kullanıcı başarıyla silindi (Soft).", "success");
+                        // Refresh both lists because a user moved from active to deleted
+                        dispatch(fetchUsers());
+                        dispatch(fetchDeletedUsers());
+                    })
+                    .catch((err) => {
+                        Swal.fire("Hata!", err || "Silme işlemi başarısız.", "error");
+                    });
+            }
+        });
+    };
+
+    const handleHardDelete = (id: string) => {
+        Swal.fire({
+            title: "KALICI OLARAK SİL?",
+            text: "Bu işlem GERİ ALINAMAZ! Kullanıcı ve tüm verileri veritabanından tamamen silinecek (Hard Delete).",
+            icon: "error", // Red
+            showCancelButton: true,
+            confirmButtonColor: "#d33", // Red
+            cancelButtonColor: "#3085d6",
+            confirmButtonText: "Evet, KALICI SİL!",
+            cancelButtonText: "İptal",
+        }).then((result) => {
+            if (result.isConfirmed) {
+                const isSoftDeleted = deletedUsers.some(u => u.id === id);
+
+                if (isSoftDeleted) {
+                    // WORKAROUND: Backend soft-deleted kullanıcıları bulamıyor olabilir.
+                    // Önce restore et, sonra hard delete yap.
+                    dispatch(restoreUser(id))
+                        .unwrap()
+                        .then(() => {
+                            return dispatch(deleteUser({ id, hard: true })).unwrap();
+                        })
+                        .then(() => {
+                            Swal.fire("Silindi!", "Kullanıcı kalıcı olarak silindi.", "success");
+                        })
+                        .catch((err) => {
+                            Swal.fire("Hata!", err || "Silme işlemi başarısız.", "error");
+                        });
+                } else {
+                    // Normal Hard Delete (Aktif kullanıcı)
+                    dispatch(deleteUser({ id, hard: true }))
+                        .unwrap()
+                        .then(() => {
+                            Swal.fire("Silindi!", "Kullanıcı kalıcı olarak silindi.", "success");
+                        })
+                        .catch((err) => {
+                            Swal.fire("Hata!", err || "Silme işlemi başarısız.", "error");
+                        });
+                }
+            }
+        });
+    };
+
+    const handleRestore = (id: string) => {
+        Swal.fire({
+            title: "Geri Yükle?",
+            text: "Kullanıcı tekrar aktif edilecek.",
+            icon: "question",
+            showCancelButton: true,
+            confirmButtonColor: "#16a34a", // Green
+            cancelButtonColor: "#d33",
+            confirmButtonText: "Evet, Geri Yükle",
+            cancelButtonText: "İptal",
+        }).then((result) => {
+            if (result.isConfirmed) {
+                dispatch(restoreUser(id))
+                    .unwrap()
+                    .then(() => {
+                        Swal.fire("Başarılı!", "Kullanıcı geri yüklendi.", "success");
+                        dispatch(fetchUsers());
+                        dispatch(fetchDeletedUsers());
+                    })
+                    .catch((err) => {
+                        Swal.fire("Hata!", err || "Geri yükleme başarısız.", "error");
+                    });
+            }
+        });
+    };
+
+    const handleSubmit = (data: CreateUserRequest | UpdateUserRequest) => {
+        if ("id" in data) {
+            dispatch(updateUser(data as UpdateUserRequest))
+                .unwrap()
+                .then(() => {
+                    setDialogOpen(false);
+                    Swal.fire("Başarılı", "Kullanıcı güncellendi.", "success");
+                    dispatch(fetchUsers());
+                })
+                .catch((err) => {
+                    Swal.fire("Hata", err || "Güncelleme başarısız.", "error");
+                });
+        } else {
+            dispatch(createUser(data as CreateUserRequest))
+                .unwrap()
+                .then(() => {
+                    setDialogOpen(false);
+                    Swal.fire("Başarılı", "Kullanıcı oluşturuldu.", "success");
+                    dispatch(fetchUsers());
+                })
+                .catch((err) => {
+                    Swal.fire("Hata", err || "Oluşturma başarısız.", "error");
+                });
+        }
+    };
+
+    return (
+        <div className="space-y-12">
+            {/* Active Users Section */}
+            <div className="space-y-6">
+                <div className="flex items-center justify-between">
+                    <div>
+                        <h2 className="text-md  font-bold tracking-tight">Kullanıcılar</h2>
+                        <p className="text-muted-foreground">
+                            Sistemdeki aktif kullanıcıları yönetin.
+                        </p>
+                    </div>
+                    <Button onClick={() => { setSelectedUser(null); setDialogOpen(true); }}>
+                        <Plus className="mr-2 h-4 w-4" /> Yeni Kullanıcı
+                    </Button>
+                </div>
+
+                {error && (
+                    <div className="rounded-md bg-destructive/15 p-4 text-destructive">
+                        {error}
+                    </div>
+                )}
+
+                <UserTable
+                    users={users}
+                    onEdit={(u) => { setSelectedUser(u); setDialogOpen(true); }}
+                    onDelete={handleDelete}
+                    onHardDelete={handleHardDelete}
+                />
+            </div>
+
+            {/* Deleted Users Section */}
+            <div className="space-y-6">
+                <div>
+                    <h2 className="text-2xl font-bold tracking-tight text-destructive flex items-center gap-2">
+                        <Trash2 className="h-6 w-6" /> Çöp Kutusu
+                    </h2>
+                    <p className="text-muted-foreground">
+                        Silinmiş kullanıcıları geri yükleyin veya kalıcı olarak silin.
+                    </p>
+                </div>
+
+                <DeletedUserTable
+                    users={deletedUsers}
+                    onRestore={handleRestore}
+                    onHardDelete={handleHardDelete}
+                />
+            </div>
+
+            <UserDialog
+                open={dialogOpen}
+                onOpenChange={setDialogOpen}
+                user={selectedUser}
+                onSubmit={(data) => {
+                    // Re-implementing handleSubmit logic inline or keep it separate as before if preferred, 
+                    // but for brevity I'll assume the previous handleSubmit function is available in scope 
+                    // or I should include it in replacement if I am replacing the whole return block.
+                    // Ideally, I should keep the existing handleSubmit and just pass it.
+                    // Since I am replacing the whole return, I must ensure handleSubmit is defined above or passed correctly.
+                    // Wait, I am replacing a range that includes imports and component setup? No, just the function body?
+                    // Let's modify the instruction to be safer.
+                    handleSubmit(data);
+                }}
+                isLoading={isLoading}
+            />
+        </div>
+    );
+}
--- a/app/(admin)/layout.tsx
+++ b/app/(admin)/layout.tsx
@@ -0,0 +1,83 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { useRouter } from "next/navigation";
+import Link from "next/link";
+import { useAppSelector } from "@/lib/hooks";
+import { Loader2 } from "lucide-react";
+import Cookies from "js-cookie";
+import { SidebarProvider, SidebarInset, SidebarTrigger } from "@/components/ui/sidebar";
+import { AppSidebar } from "@/components/app-sidebar";
+
+export default function AdminLayout({
+    children,
+}: {
+    children: React.ReactNode;
+}) {
+    const { isAuthenticated, isLoading, user } = useAppSelector((state) => state.auth);
+    const router = useRouter();
+    const [authorized, setAuthorized] = useState(false);
+
+    useEffect(() => {
+        // If we're not loading and not authenticated, redirect
+        // We wait for initial restoration to complete (managed by StoreProvider and authSlice)
+        const checkAuth = () => {
+            const token = Cookies.get("access_token");
+            if (!token) {
+                router.push("/login");
+                return;
+            }
+
+            // Get user from state or localStorage
+            let currentUser = user;
+            if (!currentUser && typeof window !== 'undefined') {
+                const userStr = localStorage.getItem("user");
+                if (userStr) {
+                    try {
+                        currentUser = JSON.parse(userStr);
+                    } catch (e) { }
+                }
+            }
+
+            if (currentUser) {
+                const isAdmin = currentUser.roles?.some((r: any) => r.name === "admin");
+                if (isAdmin) {
+                    setAuthorized(true);
+                } else {
+                    // Redirect non-admins to home page
+                    router.push("/");
+                }
+            } else {
+                // Token exists but user data is missing/loading. 
+                // If strictly protected, redirect to login.
+                router.push("/login");
+            }
+        };
+        checkAuth();
+    }, [isAuthenticated, user, router]);
+
+    if (!authorized) {
+        return (
+            <div className="flex h-screen items-center justify-center">
+                <Loader2 className="h-8 w-8 animate-spin text-primary" />
+            </div>
+        );
+    }
+
+    return (
+        <SidebarProvider style={{ "--sidebar-width": "16rem" } as React.CSSProperties}>
+            <AppSidebar />
+            <SidebarInset>
+                <header className="flex h-14 shrink-0 items-center gap-2 px-4">
+                    <SidebarTrigger className="-ml-1" />
+                    <div className="h-4 w-[1px] bg-slate-200 dark:bg-slate-800" />
+                    <span className="text-sm font-medium">Yönetim Paneli</span>
+                </header>
+
+                <div className="flex flex-1 flex-col gap-4 p-4 pt-0">
+                    {children}
+                </div>
+            </SidebarInset>
+        </SidebarProvider>
+    );
+}
--- a/app/(auth)/layout.tsx
+++ b/app/(auth)/layout.tsx
@@ -0,0 +1,11 @@
+export default function AuthLayout({
+    children,
+}: {
+    children: React.ReactNode;
+}) {
+    return (
+        <div className="flex min-h-[calc(100vh-4rem)] items-center justify-center py-12 sm:px-6 lg:px-8">
+            <div className="w-full max-w-md space-y-8">{children}</div>
+        </div>
+    );
+}
--- a/app/(auth)/login/page.tsx
+++ b/app/(auth)/login/page.tsx
@@ -0,0 +1,135 @@
+"use client";
+
+import { useState } from "react";
+import { useAppDispatch, useAppSelector } from "@/lib/hooks";
+import { login } from "@/lib/features/auth/authSlice";
+import { useRouter } from "next/navigation";
+import { Turnstile } from "nextjs-turnstile";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle } from "@/components/ui/card";
+import { AlertCircle, Loader2 } from "lucide-react";
+import Link from "next/link";
+import Swal from 'sweetalert2'
+
+import { loginSchema } from "@/lib/schemas/login";
+
+export default function LoginPage() {
+    const [email, setEmail] = useState("");
+    const [password, setPassword] = useState("");
+    const [formErrors, setFormErrors] = useState<Record<string, string>>({});
+    const [turnstileToken, setTurnstileToken] = useState<string | null>(null);
+
+    const dispatch = useAppDispatch();
+    const { isLoading, error } = useAppSelector((state) => state.auth);
+    const router = useRouter();
+
+    const handleSubmit = async (e: React.FormEvent) => {
+        e.preventDefault();
+        setFormErrors({});
+
+        // Zod Validation
+        const result = loginSchema.safeParse({
+            email,
+            password
+        });
+
+        if (!result.success) {
+            const errors: Record<string, string> = {};
+            result.error.issues.forEach((issue) => {
+                const path = issue.path[0];
+                if (typeof path === 'string') {
+                    errors[path] = issue.message;
+                }
+            });
+            setFormErrors(errors);
+            return;
+        }
+
+        if (!turnstileToken) {
+            Swal.fire({
+                icon: 'error',
+                title: 'Hata',
+                text: 'Lütfen doğrulamayı tamamlayın (Turnstile).',
+            })
+            return;
+        }
+
+        const dispatchResult = await dispatch(login({ email, password }));
+        if (login.fulfilled.match(dispatchResult)) {
+            Swal.fire({
+                position: "center",
+                icon: "success",
+                title: "Giriş Başarılı",
+                showConfirmButton: false,
+                timer: 1500
+            });
+            router.push("/admin");
+        }
+    };
+
+    return (
+        <Card className="w-full shadow-lg dark:shadow-slate-800/20">
+            <CardHeader>
+                <CardTitle className="text-2xl font-bold text-center">Giriş Yap</CardTitle>
+                <CardDescription className="text-center">
+                    Admin paneline erişmek için giriş yapın
+                </CardDescription>
+            </CardHeader>
+            <CardContent>
+                <form onSubmit={handleSubmit} className="space-y-4">
+                    <div className="space-y-2">
+                        <Label htmlFor="email">Email</Label>
+                        <Input
+                            id="email"
+                            type="email"
+                            placeholder="admin@example.com"
+                            value={email}
+                            onChange={(e) => setEmail(e.target.value)}
+                        // required override by Zod
+                        />
+                        {formErrors.email && <p className="text-destructive text-sm">{formErrors.email}</p>}
+                    </div>
+                    <div className="space-y-2">
+                        <Label htmlFor="password">Şifre</Label>
+                        <Input
+                            id="password"
+                            type="password"
+                            value={password}
+                            onChange={(e) => setPassword(e.target.value)}
+                        // required override by Zod
+                        />
+                        {formErrors.password && <p className="text-destructive text-sm">{formErrors.password}</p>}
+                    </div>
+
+                    <div className="flex justify-center py-2">
+                        <Turnstile
+                            siteKey={process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY || "0x4AAAAAACHzHKvlEwMamxCM"}
+                            onSuccess={(token) => setTurnstileToken(token)}
+                        />
+                    </div>
+
+                    {error && (
+                        <div className="flex items-center gap-2 text-sm text-destructive bg-destructive/10 p-3 rounded-md">
+                            <AlertCircle className="h-4 w-4" />
+                            <span>{error}</span>
+                        </div>
+                    )}
+
+                    <Button type="submit" className="w-full" disabled={isLoading || !turnstileToken}>
+                        {isLoading ? <Loader2 className="mr-2 h-4 w-4 animate-spin" /> : "Giriş Yap"}
+                    </Button>
+                </form>
+            </CardContent>
+            <CardFooter className="flex justify-center">
+                <p className="text-sm text-muted-foreground">
+                    Hesabınız yok mu?{" "}
+                    <Link href="/register" className="text-primary hover:underline">
+                        Kayıt Ol
+                    </Link>
+                </p>
+            </CardFooter>
+        </Card>
+    );
+}
--- a/app/(auth)/register/page.tsx
+++ b/app/(auth)/register/page.tsx
@@ -0,0 +1,161 @@
+"use client";
+
+import { useState } from "react";
+import { useAppDispatch, useAppSelector } from "@/lib/hooks";
+import { register } from "@/lib/features/auth/authSlice";
+import { useRouter } from "next/navigation";
+import { Turnstile } from "nextjs-turnstile";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle } from "@/components/ui/card";
+import { AlertCircle, Loader2 } from "lucide-react";
+import Link from "next/link";
+import Swal from 'sweetalert2'
+
+import { registerSchema } from "@/lib/schemas/register";
+
+export default function RegisterPage() {
+    const [username, setUsername] = useState("");
+    const [email, setEmail] = useState("");
+    const [password, setPassword] = useState("");
+    const [confirmPassword, setConfirmPassword] = useState("");
+    const [formErrors, setFormErrors] = useState<Record<string, string>>({});
+    const [turnstileToken, setTurnstileToken] = useState<string | null>(null);
+
+    const dispatch = useAppDispatch();
+    const { isLoading, error } = useAppSelector((state) => state.auth);
+    const router = useRouter();
+
+    const handleSubmit = async (e: React.FormEvent) => {
+        e.preventDefault();
+        setFormErrors({});
+
+        // Zod Validation
+        const result = registerSchema.safeParse({
+            username,
+            email,
+            password,
+            confirmPassword
+        });
+
+        if (!result.success) {
+            const errors: Record<string, string> = {};
+            result.error.issues.forEach((issue) => {
+                const path = issue.path[0];
+                if (typeof path === 'string') {
+                    errors[path] = issue.message;
+                }
+            });
+            setFormErrors(errors);
+            return;
+        }
+
+        if (!turnstileToken) {
+            Swal.fire({
+                icon: 'error',
+                title: 'Hata',
+                text: 'Lütfen doğrulamayı tamamlayın (Turnstile).',
+            })
+            return;
+        }
+
+        const dispatchResult = await dispatch(register({ username, email, password }));
+        if (register.fulfilled.match(dispatchResult)) {
+            Swal.fire({
+                position: "center",
+                icon: "success",
+                title: "Kayıt Başarılı!",
+                text: "Lütfen email adresinize gönderilen doğrulama linkine tıklayarak hesabınızı aktif edin.",
+                showConfirmButton: true,
+                confirmButtonText: "Giriş Yap"
+            }).then(() => {
+                router.push("/login");
+            });
+        }
+    };
+
+    return (
+        <Card className="w-full shadow-lg dark:shadow-slate-800/20">
+            <CardHeader>
+                <CardTitle className="text-2xl font-bold text-center">Kayıt Ol</CardTitle>
+                <CardDescription className="text-center">
+                    Yeni bir hesap oluşturun
+                </CardDescription>
+            </CardHeader>
+            <CardContent>
+                <form onSubmit={handleSubmit} className="space-y-4">
+                    <div className="space-y-2">
+                        <Label htmlFor="username">Kullanıcı Adı</Label>
+                        <Input
+                            id="username"
+                            type="text"
+                            placeholder="kullaniciadi"
+                            value={username}
+                            onChange={(e) => setUsername(e.target.value)}
+                        // required validation is now handled by Zod manually on submit
+                        />
+                        {formErrors.username && <p className="text-destructive text-sm">{formErrors.username}</p>}
+                    </div>
+                    <div className="space-y-2">
+                        <Label htmlFor="email">Email</Label>
+                        <Input
+                            id="email"
+                            type="email"
+                            placeholder="ornek@email.com"
+                            value={email}
+                            onChange={(e) => setEmail(e.target.value)}
+                        />
+                        {formErrors.email && <p className="text-destructive text-sm">{formErrors.email}</p>}
+                    </div>
+                    <div className="space-y-2">
+                        <Label htmlFor="password">Şifre</Label>
+                        <Input
+                            id="password"
+                            type="password"
+                            value={password}
+                            onChange={(e) => setPassword(e.target.value)}
+                        />
+                        {formErrors.password && <p className="text-destructive text-sm">{formErrors.password}</p>}
+                    </div>
+                    <div className="space-y-2">
+                        <Label htmlFor="confirmPassword">Şifre Tekrar</Label>
+                        <Input
+                            id="confirmPassword"
+                            type="password"
+                            value={confirmPassword}
+                            onChange={(e) => setConfirmPassword(e.target.value)}
+                        />
+                        {formErrors.confirmPassword && <p className="text-destructive text-sm">{formErrors.confirmPassword}</p>}
+                    </div>
+
+                    <div className="flex justify-center py-2">
+                        <Turnstile
+                            siteKey={process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY || "0x4AAAAAACHzHKvlEwMamxCM"}
+                            onSuccess={(token) => setTurnstileToken(token)}
+                        />
+                    </div>
+
+                    {error && (
+                        <div className="flex items-center gap-2 text-sm text-destructive bg-destructive/10 p-3 rounded-md">
+                            <AlertCircle className="h-4 w-4" />
+                            <span>{error}</span>
+                        </div>
+                    )}
+
+                    <Button type="submit" className="w-full" disabled={isLoading || !turnstileToken}>
+                        {isLoading ? <Loader2 className="mr-2 h-4 w-4 animate-spin" /> : "Kayıt Ol"}
+                    </Button>
+                </form>
+            </CardContent>
+            <CardFooter className="flex justify-center">
+                <p className="text-sm text-muted-foreground">
+                    Zaten hesabınız var mı?{" "}
+                    <Link href="/login" className="text-primary hover:underline">
+                        Giriş Yap
+                    </Link>
+                </p>
+            </CardFooter>
+        </Card>
+    );
+}
--- a/app/(dashboard)/layout.tsx
+++ b/app/(dashboard)/layout.tsx
@@ -0,0 +1,13 @@
+export default function DashboardLayout({
+    children,
+}: {
+    children: React.ReactNode;
+}) {
+    return (
+        <div className="flex min-h-screen flex-col">
+            <main className="flex-1 p-6 md:p-8 pt-6">
+                {children}
+            </main>
+        </div>
+    );
+}
--- a/app/(dashboard)/profile/page.tsx
+++ b/app/(dashboard)/profile/page.tsx
@@ -0,0 +1,309 @@
+"use client";
+
+import { useEffect, useState, useRef } from "react";
+import { useAppDispatch, useAppSelector } from "@/lib/hooks";
+import { fetchProfile, updateProfile, changePassword, changeEmail } from "@/lib/features/auth/authSlice";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle } from "@/components/ui/card";
+import { Avatar, AvatarFallback, AvatarImage } from "@/components/ui/avatar";
+import { getAvatarUrl } from "@/lib/utils";
+import Swal from "sweetalert2";
+import { Loader2, Camera, Shield, Mail, User as UserIcon } from "lucide-react";
+
+export default function ProfilePage() {
+    const dispatch = useAppDispatch();
+    const { user, isLoading } = useAppSelector((state) => state.auth);
+    const [file, setFile] = useState<File | null>(null);
+    const fileInputRef = useRef<HTMLInputElement>(null);
+
+    // Form states
+    const [username, setUsername] = useState("");
+
+    // Password change states
+    const [currentPassword, setCurrentPassword] = useState("");
+    const [newPassword, setNewPassword] = useState("");
+
+    // Email change states
+    const [newEmail, setNewEmail] = useState("");
+    const [emailPassword, setEmailPassword] = useState("");
+    const [isMounted, setIsMounted] = useState(false);
+
+    useEffect(() => {
+        setIsMounted(true);
+        dispatch(fetchProfile());
+    }, [dispatch]);
+
+    useEffect(() => {
+        if (user) {
+            setUsername(user.username);
+        }
+    }, [user]);
+
+    const handleAvatarChange = (e: React.ChangeEvent<HTMLInputElement>) => {
+        if (e.target.files && e.target.files[0]) {
+            setFile(e.target.files[0]);
+        }
+    };
+
+    const handleProfileUpdate = () => {
+        const formData = new FormData();
+        formData.append("user_name", username);
+        if (file) {
+            formData.append("avatar", file);
+        }
+
+        dispatch(updateProfile(formData))
+            .unwrap()
+            .then(() => {
+                Swal.fire("Başarılı", "Profil bilgileriniz güncellendi.", "success");
+                setFile(null);
+            })
+            .catch((err) => {
+                Swal.fire("Hata", err || "Profil güncellenemedi.", "error");
+            });
+    };
+
+    const handleChangePassword = () => {
+        if (!currentPassword || !newPassword) {
+            Swal.fire("Uyarı", "Lütfen tüm alanları doldurun.", "warning");
+            return;
+        }
+
+        if (newPassword.length < 6) {
+            Swal.fire("Uyarı", "Yeni şifre en az 6 karakter olmalıdır.", "warning");
+            return;
+        }
+
+        dispatch(changePassword({ current_password: currentPassword, new_password: newPassword }))
+            .unwrap()
+            .then(() => {
+                Swal.fire("Başarılı", "Şifreniz değiştirildi. Lütfen yeni şifrenizle tekrar giriş yapın.", "success");
+                setCurrentPassword("");
+                setNewPassword("");
+            })
+            .catch((err) => {
+                Swal.fire("Hata", err || "Şifre değiştirilemedi.", "error");
+            });
+    };
+
+    const handleChangeEmail = () => {
+        if (!newEmail || !emailPassword) {
+            Swal.fire("Uyarı", "Lütfen tüm alanları doldurun.", "warning");
+            return;
+        }
+
+        dispatch(changeEmail({ new_email: newEmail, password: emailPassword }))
+            .unwrap()
+            .then((res: any) => {
+                Swal.fire({
+                    title: "Başarılı",
+                    text: `Email adresiniz güncellendi. Lütfen ${newEmail} adresine gönderilen doğrulama linkine tıklayın.`,
+                    icon: "success"
+                });
+                setNewEmail("");
+                setEmailPassword("");
+            })
+            .catch((err) => {
+                Swal.fire("Hata", err || "Email değiştirilemedi.", "error");
+            });
+    };
+
+    if (!isMounted) {
+        return <div className="flex justify-center pt-10"><Loader2 className="h-8 w-8 animate-spin" /></div>;
+    }
+
+    if (!user && isLoading) {
+        return <div className="flex justify-center pt-10"><Loader2 className="h-8 w-8 animate-spin" /></div>;
+    }
+
+    if (!user) {
+        return <div className="text-center pt-10">Kullanıcı bilgileri yüklenemedi.</div>;
+    }
+
+    return (
+        <div className="max-w-4xl mx-auto space-y-8">
+            <h1 className="text-3xl font-bold tracking-tight">Profilim</h1>
+
+            {/* Profile Info & Edit */}
+            <div className="grid gap-6 md:grid-cols-2">
+                <Card>
+                    <CardHeader>
+                        <CardTitle>Profil Bilgileri</CardTitle>
+                        <CardDescription>Kişisel bilgilerinizi buradan güncelleyebilirsiniz.</CardDescription>
+                    </CardHeader>
+                    <CardContent className="space-y-6">
+                        <div className="flex flex-col items-center space-y-4">
+                            <div className="relative">
+                                <Avatar className="h-24 w-24 border-2 border-border">
+                                    <AvatarImage src={file ? URL.createObjectURL(file) : getAvatarUrl(user.avatar_url)} />
+                                    <AvatarFallback className="text-xl font-bold">
+                                        {user.username.slice(0, 2).toUpperCase()}
+                                    </AvatarFallback>
+                                </Avatar>
+                                <Button
+                                    size="icon"
+                                    variant="secondary"
+                                    className="absolute bottom-0 right-0 h-8 w-8 rounded-full shadow-md"
+                                    onClick={() => fileInputRef.current?.click()}
+                                >
+                                    <Camera className="h-4 w-4" />
+                                </Button>
+                                <input
+                                    type="file"
+                                    ref={fileInputRef}
+                                    className="hidden"
+                                    accept="image/*"
+                                    onChange={handleAvatarChange}
+                                />
+                            </div>
+                            <div className="text-center">
+                                <p className="font-semibold text-lg">{user.username}</p>
+                                <p className="text-sm text-muted-foreground">{user.email}</p>
+                                <div className="mt-2 flex items-center justify-center gap-2">
+                                    {user.roles.map(role => (
+                                        <span key={role.id} className="inline-flex items-center rounded-md border px-2.5 py-0.5 text-xs font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-primary text-primary-foreground hover:bg-primary/80">
+                                            {role.name}
+                                        </span>
+                                    ))}
+                                    {user.is_oauth_user ? (
+                                        <span className="inline-flex items-center rounded-md border px-2.5 py-0.5 text-xs font-semibold transition-colors border-transparent bg-blue-100 text-blue-800 dark:bg-blue-900 dark:text-blue-300">
+                                            OAuth
+                                        </span>
+                                    ) : (
+                                        user.email_verified && <span className="inline-flex items-center rounded-md border px-2.5 py-0.5 text-xs font-semibold transition-colors border-transparent bg-green-100 text-green-800 dark:bg-green-900 dark:text-green-300">
+                                            Email Onaylı
+                                        </span>
+                                    )}
+                                </div>
+                            </div>
+                        </div>
+
+                        <div className="space-y-2">
+                            <Label htmlFor="username">Kullanıcı Adı</Label>
+                            <div className="relative">
+                                <UserIcon className="absolute left-3 top-3 h-4 w-4 text-muted-foreground" />
+                                <Input
+                                    id="username"
+                                    value={username}
+                                    onChange={(e) => setUsername(e.target.value)}
+                                    className="pl-9"
+                                />
+                            </div>
+                        </div>
+                    </CardContent>
+                    <CardFooter>
+                        <Button onClick={handleProfileUpdate} disabled={isLoading}>
+                            {isLoading && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+                            Güncelle
+                        </Button>
+                    </CardFooter>
+                </Card>
+
+                {/* Security Settings - Only for non-OAuth users */}
+                {!user.is_oauth_user && (
+                    <div className="space-y-6">
+                        {/* Change Password */}
+                        <Card>
+                            <CardHeader>
+                                <CardTitle className="flex items-center gap-2">
+                                    <Shield className="h-5 w-5" /> Şifre Değiştir
+                                </CardTitle>
+                                <CardDescription>Güvenliğiniz için güçlü bir şifre kullanın.</CardDescription>
+                            </CardHeader>
+                            <CardContent className="space-y-4">
+                                <div className="space-y-2">
+                                    <Label htmlFor="current-password">Mevcut Şifre</Label>
+                                    <Input
+                                        id="current-password"
+                                        type="password"
+                                        value={currentPassword}
+                                        onChange={(e) => setCurrentPassword(e.target.value)}
+                                    />
+                                </div>
+                                <div className="space-y-2">
+                                    <Label htmlFor="new-password">Yeni Şifre</Label>
+                                    <Input
+                                        id="new-password"
+                                        type="password"
+                                        value={newPassword}
+                                        onChange={(e) => setNewPassword(e.target.value)}
+                                    />
+                                </div>
+                            </CardContent>
+                            <CardFooter>
+                                <Button onClick={handleChangePassword} disabled={isLoading} variant="outline">
+                                    Şifreyi Değiştir
+                                </Button>
+                            </CardFooter>
+                        </Card>
+
+                        {/* Change Email */}
+                        <Card>
+                            <CardHeader>
+                                <CardTitle className="flex items-center gap-2">
+                                    <Mail className="h-5 w-5" /> Email Değiştir
+                                </CardTitle>
+                                <CardDescription>Email adresinizi değiştirirseniz yeniden doğrulama yapmanız gerekir.</CardDescription>
+                            </CardHeader>
+                            <CardContent className="space-y-4">
+                                <div className="space-y-2">
+                                    <Label htmlFor="new-email">Yeni Email Adresi</Label>
+                                    <Input
+                                        id="new-email"
+                                        type="email"
+                                        value={newEmail}
+                                        onChange={(e) => setNewEmail(e.target.value)}
+                                    />
+                                </div>
+                                <div className="space-y-2">
+                                    <Label htmlFor="email-password">Şifreniz (Onay için)</Label>
+                                    <Input
+                                        id="email-password"
+                                        type="password"
+                                        value={emailPassword}
+                                        onChange={(e) => setEmailPassword(e.target.value)}
+                                    />
+                                </div>
+                            </CardContent>
+                            <CardFooter>
+                                <Button onClick={handleChangeEmail} disabled={isLoading} variant="outline">
+                                    Email'i Güncelle
+                                </Button>
+                            </CardFooter>
+                        </Card>
+                    </div>
+                )}
+
+                {/* OAuth Info - Only for OAuth users */}
+                {user.is_oauth_user && (
+                    <Card>
+                        <CardHeader>
+                            <CardTitle>Bağlı Hesaplar</CardTitle>
+                            <CardDescription>Hesabınız aşağıdaki sosyal medya platformlarına bağlıdır.</CardDescription>
+                        </CardHeader>
+                        <CardContent>
+                            <div className="flex gap-4">
+                                {user.social_accounts?.map((account) => (
+                                    <div key={account.id} className="flex items-center gap-3 p-3 border rounded-lg bg-muted/50 w-full">
+                                        <div className="h-8 w-8 rounded-full bg-primary/10 flex items-center justify-center">
+                                            {account.provider === 'google' ? 'G' : account.provider.charAt(0).toUpperCase()}
+                                        </div>
+                                        <div>
+                                            <p className="font-medium capitalize">{account.provider}</p>
+                                            <p className="text-xs text-muted-foreground">{account.email}</p>
+                                        </div>
+                                    </div>
+                                ))}
+                                {(!user.social_accounts || user.social_accounts.length === 0) && (
+                                    <p className="text-sm text-muted-foreground">Bağlı hesap bilgisi bulunamadı (OAuth User flag true olmasına rağmen).</p>
+                                )}
+                            </div>
+                        </CardContent>
+                    </Card>
+                )}
+            </div>
+        </div>
+    );
+}
--- a/app/favicon.ico
+++ b/app/favicon.ico
--- a/app/globals.css
+++ b/app/globals.css
@@ -0,0 +1,125 @@
+@import "tailwindcss";
+@import "tw-animate-css";
+
+@custom-variant dark (&:is(.dark *));
+
+@theme inline {
+  --color-background: var(--background);
+  --color-foreground: var(--foreground);
+  --font-sans: var(--font-geist-sans);
+  --font-mono: var(--font-geist-mono);
+  --color-sidebar-ring: var(--sidebar-ring);
+  --color-sidebar-border: var(--sidebar-border);
+  --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
+  --color-sidebar-accent: var(--sidebar-accent);
+  --color-sidebar-primary-foreground: var(--sidebar-primary-foreground);
+  --color-sidebar-primary: var(--sidebar-primary);
+  --color-sidebar-foreground: var(--sidebar-foreground);
+  --color-sidebar: var(--sidebar);
+  --color-chart-5: var(--chart-5);
+  --color-chart-4: var(--chart-4);
+  --color-chart-3: var(--chart-3);
+  --color-chart-2: var(--chart-2);
+  --color-chart-1: var(--chart-1);
+  --color-ring: var(--ring);
+  --color-input: var(--input);
+  --color-border: var(--border);
+  --color-destructive: var(--destructive);
+  --color-accent-foreground: var(--accent-foreground);
+  --color-accent: var(--accent);
+  --color-muted-foreground: var(--muted-foreground);
+  --color-muted: var(--muted);
+  --color-secondary-foreground: var(--secondary-foreground);
+  --color-secondary: var(--secondary);
+  --color-primary-foreground: var(--primary-foreground);
+  --color-primary: var(--primary);
+  --color-popover-foreground: var(--popover-foreground);
+  --color-popover: var(--popover);
+  --color-card-foreground: var(--card-foreground);
+  --color-card: var(--card);
+  --radius-sm: calc(var(--radius) - 4px);
+  --radius-md: calc(var(--radius) - 2px);
+  --radius-lg: var(--radius);
+  --radius-xl: calc(var(--radius) + 4px);
+  --radius-2xl: calc(var(--radius) + 8px);
+  --radius-3xl: calc(var(--radius) + 12px);
+  --radius-4xl: calc(var(--radius) + 16px);
+}
+
+:root {
+  --radius: 0.625rem;
+  --background: oklch(1 0 0);
+  --foreground: oklch(0.145 0 0);
+  --card: oklch(1 0 0);
+  --card-foreground: oklch(0.145 0 0);
+  --popover: oklch(1 0 0);
+  --popover-foreground: oklch(0.145 0 0);
+  --primary: oklch(0.205 0 0);
+  --primary-foreground: oklch(0.985 0 0);
+  --secondary: oklch(0.97 0 0);
+  --secondary-foreground: oklch(0.205 0 0);
+  --muted: oklch(0.97 0 0);
+  --muted-foreground: oklch(0.556 0 0);
+  --accent: oklch(0.97 0 0);
+  --accent-foreground: oklch(0.205 0 0);
+  --destructive: oklch(0.577 0.245 27.325);
+  --border: oklch(0.922 0 0);
+  --input: oklch(0.922 0 0);
+  --ring: oklch(0.708 0 0);
+  --chart-1: oklch(0.646 0.222 41.116);
+  --chart-2: oklch(0.6 0.118 184.704);
+  --chart-3: oklch(0.398 0.07 227.392);
+  --chart-4: oklch(0.828 0.189 84.429);
+  --chart-5: oklch(0.769 0.188 70.08);
+  --sidebar: oklch(0.985 0 0);
+  --sidebar-foreground: oklch(0.145 0 0);
+  --sidebar-primary: oklch(0.205 0 0);
+  --sidebar-primary-foreground: oklch(0.985 0 0);
+  --sidebar-accent: oklch(0.97 0 0);
+  --sidebar-accent-foreground: oklch(0.205 0 0);
+  --sidebar-border: oklch(0.922 0 0);
+  --sidebar-ring: oklch(0.708 0 0);
+}
+
+.dark {
+  --background: oklch(0.145 0 0);
+  --foreground: oklch(0.985 0 0);
+  --card: oklch(0.205 0 0);
+  --card-foreground: oklch(0.985 0 0);
+  --popover: oklch(0.205 0 0);
+  --popover-foreground: oklch(0.985 0 0);
+  --primary: oklch(0.922 0 0);
+  --primary-foreground: oklch(0.205 0 0);
+  --secondary: oklch(0.269 0 0);
+  --secondary-foreground: oklch(0.985 0 0);
+  --muted: oklch(0.269 0 0);
+  --muted-foreground: oklch(0.708 0 0);
+  --accent: oklch(0.269 0 0);
+  --accent-foreground: oklch(0.985 0 0);
+  --destructive: oklch(0.704 0.191 22.216);
+  --border: oklch(1 0 0 / 10%);
+  --input: oklch(1 0 0 / 15%);
+  --ring: oklch(0.556 0 0);
+  --chart-1: oklch(0.488 0.243 264.376);
+  --chart-2: oklch(0.696 0.17 162.48);
+  --chart-3: oklch(0.769 0.188 70.08);
+  --chart-4: oklch(0.627 0.265 303.9);
+  --chart-5: oklch(0.645 0.246 16.439);
+  --sidebar: oklch(0.205 0 0);
+  --sidebar-foreground: oklch(0.985 0 0);
+  --sidebar-primary: oklch(0.488 0.243 264.376);
+  --sidebar-primary-foreground: oklch(0.985 0 0);
+  --sidebar-accent: oklch(0.269 0 0);
+  --sidebar-accent-foreground: oklch(0.985 0 0);
+  --sidebar-border: oklch(1 0 0 / 10%);
+  --sidebar-ring: oklch(0.556 0 0);
+}
+
+@layer base {
+  * {
+    @apply border-border outline-ring/50;
+  }
+  body {
+    @apply bg-background text-foreground;
+  }
+}
--- a/app/layout.tsx
+++ b/app/layout.tsx
@@ -0,0 +1,37 @@
+import type { Metadata } from "next";
+import { Inter } from "next/font/google";
+import "./globals.css";
+import StoreProvider from "@/components/StoreProvider";
+import { ThemeProvider } from "@/components/theme-provider";
+import { Header } from "@/components/header/header";
+
+const inter = Inter({ subsets: ["latin"] });
+
+export const metadata: Metadata = {
+  title: "Next Go Blog",
+  description: "Advanced blog application",
+};
+
+export default function RootLayout({
+  children,
+}: Readonly<{
+  children: React.ReactNode;
+}>) {
+  return (
+    <html lang="en" suppressHydrationWarning>
+      <body className={`${inter.className} antialiased`}>
+        <StoreProvider>
+          <ThemeProvider
+            attribute="class"
+            defaultTheme="system"
+            enableSystem
+            disableTransitionOnChange
+          >
+            <Header />
+            <main className="min-h-screen bg-background">{children}</main>
+          </ThemeProvider>
+        </StoreProvider>
+      </body>
+    </html>
+  );
+}
--- a/app/page.tsx
+++ b/app/page.tsx
@@ -0,0 +1,65 @@
+import Image from "next/image";
+
+export default function Home() {
+  return (
+    <div className="flex min-h-screen items-center justify-center bg-zinc-50 font-sans dark:bg-black">
+      <main className="flex min-h-screen w-full max-w-3xl flex-col items-center justify-between py-32 px-16 bg-white dark:bg-black sm:items-start">
+        <Image
+          className="dark:invert"
+          src="/next.svg"
+          alt="Next.js logo"
+          width={100}
+          height={20}
+          priority
+        />
+        <div className="flex flex-col items-center gap-6 text-center sm:items-start sm:text-left">
+          <h1 className="max-w-xs text-3xl font-semibold leading-10 tracking-tight text-black dark:text-zinc-50">
+            To get started, edit the page.tsx file.
+          </h1>
+          <p className="max-w-md text-lg leading-8 text-zinc-600 dark:text-zinc-400">
+            Looking for a starting point or more instructions? Head over to{" "}
+            <a
+              href="https://vercel.com/templates?framework=next.js&utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
+              className="font-medium text-zinc-950 dark:text-zinc-50"
+            >
+              Templates
+            </a>{" "}
+            or the{" "}
+            <a
+              href="https://nextjs.org/learn?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
+              className="font-medium text-zinc-950 dark:text-zinc-50"
+            >
+              Learning
+            </a>{" "}
+            center.
+          </p>
+        </div>
+        <div className="flex flex-col gap-4 text-base font-medium sm:flex-row">
+          <a
+            className="flex h-12 w-full items-center justify-center gap-2 rounded-full bg-foreground px-5 text-background transition-colors hover:bg-[#383838] dark:hover:bg-[#ccc] md:w-[158px]"
+            href="https://vercel.com/new?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
+            target="_blank"
+            rel="noopener noreferrer"
+          >
+            <Image
+              className="dark:invert"
+              src="/vercel.svg"
+              alt="Vercel logomark"
+              width={16}
+              height={16}
+            />
+            Deploy Now
+          </a>
+          <a
+            className="flex h-12 w-full items-center justify-center rounded-full border border-solid border-black/[.08] px-5 transition-colors hover:border-transparent hover:bg-black/[.04] dark:border-white/[.145] dark:hover:bg-[#1a1a1a] md:w-[158px]"
+            href="https://nextjs.org/docs?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
+            target="_blank"
+            rel="noopener noreferrer"
+          >
+            Documentation
+          </a>
+        </div>
+      </main>
+    </div>
+  );
+}
--- a/components.json
+++ b/components.json
@@ -0,0 +1,23 @@
+{
+  "$schema": "https://ui.shadcn.com/schema.json",
+  "style": "new-york",
+  "rsc": true,
+  "tsx": true,
+  "tailwind": {
+    "config": "",
+    "css": "app/globals.css",
+    "baseColor": "neutral",
+    "cssVariables": true,
+    "prefix": ""
+  },
+  "iconLibrary": "lucide",
+  "rtl": false,
+  "aliases": {
+    "components": "@/components",
+    "utils": "@/lib/utils",
+    "ui": "@/components/ui",
+    "lib": "@/lib",
+    "hooks": "@/hooks"
+  },
+  "registries": {}
+}
--- a/components/StoreProvider.tsx
+++ b/components/StoreProvider.tsx
@@ -0,0 +1,21 @@
+"use client";
+import { useRef } from "react";
+import { Provider } from "react-redux";
+import { makeStore, AppStore } from "@/lib/store";
+import { restoreSession } from "@/lib/features/auth/authSlice";
+
+export default function StoreProvider({
+    children,
+}: {
+    children: React.ReactNode;
+}) {
+    const storeRef = useRef<AppStore>(null);
+    if (!storeRef.current) {
+        // Create the store instance the first time this renders
+        storeRef.current = makeStore();
+        // Restore session from localStorage
+        storeRef.current.dispatch(restoreSession());
+    }
+
+    return <Provider store={storeRef.current}>{children}</Provider>;
+}
--- a/components/app-sidebar.tsx
+++ b/components/app-sidebar.tsx
@@ -0,0 +1,106 @@
+"use client"
+
+import { Home, Users, Settings, LogOut, Shield } from "lucide-react"
+import Link from "next/link"
+import { usePathname } from "next/navigation"
+
+import {
+    Sidebar,
+    SidebarContent,
+    SidebarFooter,
+    SidebarGroup,
+    SidebarGroupContent,
+    SidebarGroupLabel,
+    SidebarMenu,
+    SidebarMenuButton,
+    SidebarMenuItem,
+    SidebarHeader,
+} from "@/components/ui/sidebar"
+import { useAppDispatch, useAppSelector } from "@/lib/hooks"
+import { logout } from "@/lib/features/auth/authSlice"
+
+// Menu items.
+const items = [
+    {
+        title: "Genel Bakış",
+        url: "/admin",
+        icon: Home,
+    },
+    {
+        title: "Kullanıcılar",
+        url: "/admin/users",
+        icon: Users,
+    },
+    {
+        title: "Ayarlar",
+        url: "/admin/settings",
+        icon: Settings,
+    },
+    {
+        title: "CORS Ayarları",
+        url: "/admin/cors",
+        icon: Shield,
+    },
+]
+
+export function AppSidebar() {
+    const pathname = usePathname()
+    const dispatch = useAppDispatch()
+    const user = useAppSelector((state) => state.auth.user)
+    const isAdmin = user?.roles?.some((r: any) => r.name === "admin")
+
+    return (
+        <Sidebar className="top-14 h-[calc(100svh-3.5rem)]">
+            <SidebarHeader className="p-4 md:hidden">
+                <Link href="/" className="font-bold text-lg">NextGoBlog</Link>
+            </SidebarHeader>
+            <SidebarContent>
+                {isAdmin && (
+                    <SidebarGroup>
+                        <SidebarGroupLabel>Admin Panel</SidebarGroupLabel>
+                        <SidebarGroupContent>
+                            <SidebarMenu>
+                                {items.map((item) => (
+                                    <SidebarMenuItem key={item.title}>
+                                        <SidebarMenuButton asChild isActive={pathname === item.url}>
+                                            <Link href={item.url}>
+                                                <item.icon />
+                                                <span>{item.title}</span>
+                                            </Link>
+                                        </SidebarMenuButton>
+                                    </SidebarMenuItem>
+                                ))}
+                            </SidebarMenu>
+                        </SidebarGroupContent>
+                    </SidebarGroup>
+                )}
+
+                <SidebarGroup>
+                    <SidebarGroupLabel>Hesabım</SidebarGroupLabel>
+                    <SidebarGroupContent>
+                        <SidebarMenu>
+                            <SidebarMenuItem>
+                                <SidebarMenuButton asChild isActive={pathname === "/profile"}>
+                                    <Link href="/profile">
+                                        <Users className="h-4 w-4" />
+                                        <span>Profilim</span>
+                                    </Link>
+                                </SidebarMenuButton>
+                            </SidebarMenuItem>
+                        </SidebarMenu>
+                    </SidebarGroupContent>
+                </SidebarGroup>
+            </SidebarContent>
+            <SidebarFooter>
+                <SidebarMenu>
+                    <SidebarMenuItem>
+                        <SidebarMenuButton onClick={() => dispatch(logout())}>
+                            <LogOut />
+                            <span>Çıkış Yap</span>
+                        </SidebarMenuButton>
+                    </SidebarMenuItem>
+                </SidebarMenu>
+            </SidebarFooter>
+        </Sidebar>
+    )
+}
--- a/components/cors/cors-dialog.tsx
+++ b/components/cors/cors-dialog.tsx
@@ -0,0 +1,107 @@
+import { Button } from "@/components/ui/button";
+import {
+    Dialog,
+    DialogContent,
+    DialogDescription,
+    DialogFooter,
+    DialogHeader,
+    DialogTitle,
+} from "@/components/ui/dialog";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { useState, useEffect } from "react";
+import { CorsEntry } from "@/lib/features/cors/corsSlice";
+
+interface CorsDialogProps {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    type: "whitelist" | "blacklist";
+    entry: CorsEntry | null;
+    onSubmit: (origin: string, note: string) => Promise<void>;
+}
+
+export function CorsDialog({ open, onOpenChange, type, entry, onSubmit }: CorsDialogProps) {
+    const [origin, setOrigin] = useState("");
+    const [note, setNote] = useState(""); // Description or Reason
+    const [loading, setLoading] = useState(false);
+
+    useEffect(() => {
+        if (open) {
+            if (entry) {
+                setOrigin(entry.origin);
+                setNote(type === "whitelist" ? (entry.description || "") : (entry.reason || ""));
+            } else {
+                setOrigin("");
+                setNote("");
+            }
+        }
+    }, [open, entry, type]);
+
+    const handleSubmit = async (e: React.FormEvent) => {
+        e.preventDefault();
+        setLoading(true);
+        try {
+            await onSubmit(origin, note);
+            onOpenChange(false);
+        } catch (error) {
+            console.error(error);
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    const isEdit = !!entry;
+    const typeLabel = type === "whitelist" ? "Whitelist" : "Blacklist";
+    const noteLabel = type === "whitelist" ? "Açıklama" : "Sebep";
+    const title = `${typeLabel} ${isEdit ? "Düzenle" : "Ekle"}`;
+    const description = isEdit
+        ? "Mevcut kaydı düzenleyin."
+        : "Listeye yeni bir domain ekleyin.";
+
+    return (
+        <Dialog open={open} onOpenChange={onOpenChange}>
+            <DialogContent className="sm:max-w-[425px]">
+                <DialogHeader>
+                    <DialogTitle>{title}</DialogTitle>
+                    <DialogDescription>
+                        {description}
+                    </DialogDescription>
+                </DialogHeader>
+                <form onSubmit={handleSubmit}>
+                    <div className="grid gap-4 py-4">
+                        <div className="grid grid-cols-4 items-center gap-4">
+                            <Label htmlFor="origin" className="text-right">
+                                Origin
+                            </Label>
+                            <Input
+                                id="origin"
+                                placeholder="https://example.com"
+                                className="col-span-3"
+                                value={origin}
+                                onChange={(e) => setOrigin(e.target.value)}
+                                required
+                            />
+                        </div>
+                        <div className="grid grid-cols-4 items-center gap-4">
+                            <Label htmlFor="note" className="text-right">
+                                {noteLabel}
+                            </Label>
+                            <Input
+                                id="note"
+                                placeholder={noteLabel}
+                                className="col-span-3"
+                                value={note}
+                                onChange={(e) => setNote(e.target.value)}
+                            />
+                        </div>
+                    </div>
+                    <DialogFooter>
+                        <Button type="submit" disabled={loading}>
+                            {loading ? "Kaydediliyor..." : "Kaydet"}
+                        </Button>
+                    </DialogFooter>
+                </form>
+            </DialogContent>
+        </Dialog>
+    );
+}
--- a/components/cors/cors-edit-dialog.tsx
+++ b/components/cors/cors-edit-dialog.tsx
@@ -0,0 +1,99 @@
+import { Button } from "@/components/ui/button";
+import {
+    Dialog,
+    DialogContent,
+    DialogDescription,
+    DialogFooter,
+    DialogHeader,
+    DialogTitle,
+} from "@/components/ui/dialog";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { useState, useEffect } from "react";
+import { CorsEntry } from "@/lib/features/cors/corsSlice";
+
+interface CorsEditDialogProps {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    entry: CorsEntry | null;
+    type: "whitelist" | "blacklist";
+    onUpdate: (id: string, origin: string, note: string) => Promise<void>;
+}
+
+export function CorsEditDialog({ open, onOpenChange, entry, type, onUpdate }: CorsEditDialogProps) {
+    const [origin, setOrigin] = useState("");
+    const [note, setNote] = useState(""); // Description or Reason
+    const [loading, setLoading] = useState(false);
+
+    useEffect(() => {
+        if (entry) {
+            setOrigin(entry.origin);
+            setNote(entry.description || entry.reason || "");
+        }
+    }, [entry]);
+
+    const handleSubmit = async (e: React.FormEvent) => {
+        e.preventDefault();
+        if (!entry) return;
+
+        setLoading(true);
+        try {
+            await onUpdate(entry.id, origin, note);
+            onOpenChange(false);
+        } catch (error) {
+            console.error(error);
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    const typeLabel = type === "whitelist" ? "Whitelist" : "Blacklist";
+    const noteLabel = type === "whitelist" ? "Açıklama" : "Sebep";
+
+    return (
+        <Dialog open={open} onOpenChange={onOpenChange}>
+            <DialogContent className="sm:max-w-[425px]">
+                <DialogHeader>
+                    <DialogTitle>{typeLabel} Güncelle</DialogTitle>
+                    <DialogDescription>
+                        Mevcut kaydı düzenleyin.
+                    </DialogDescription>
+                </DialogHeader>
+                <form onSubmit={handleSubmit}>
+                    <div className="grid gap-4 py-4">
+                        <div className="grid grid-cols-4 items-center gap-4">
+                            <Label htmlFor="edit-origin" className="text-right">
+                                Origin
+                            </Label>
+                            <Input
+                                id="edit-origin"
+                                placeholder="https://example.com"
+                                className="col-span-3"
+                                value={origin}
+                                onChange={(e) => setOrigin(e.target.value)}
+                                required
+                            />
+                        </div>
+                        <div className="grid grid-cols-4 items-center gap-4">
+                            <Label htmlFor="edit-note" className="text-right">
+                                {noteLabel}
+                            </Label>
+                            <Input
+                                id="edit-note"
+                                placeholder={noteLabel}
+                                className="col-span-3"
+                                value={note}
+                                onChange={(e) => setNote(e.target.value)}
+                            />
+                        </div>
+                    </div>
+                    <DialogFooter>
+                        <Button type="submit" disabled={loading}>
+                            {loading ? "Güncelleniyor..." : "Güncelle"}
+                        </Button>
+                    </DialogFooter>
+                </form>
+            </DialogContent>
+        </Dialog>
+    );
+}
--- a/components/cors/cors-table.tsx
+++ b/components/cors/cors-table.tsx
@@ -0,0 +1,93 @@
+import {
+    Table,
+    TableBody,
+    TableCell,
+    TableHead,
+    TableHeader,
+    TableRow,
+} from "@/components/ui/table";
+import { Button } from "@/components/ui/button";
+import { Badge } from "@/components/ui/badge";
+import { Switch } from "@/components/ui/switch";
+import { Trash2, Edit } from "lucide-react";
+import { CorsEntry } from "@/lib/features/cors/corsSlice";
+
+interface CorsTableProps {
+    data: CorsEntry[];
+    type: "whitelist" | "blacklist";
+    onDelete: (id: string) => void;
+    onEdit: (entry: CorsEntry) => void;
+    onToggleActive: (id: string, currentStatus: boolean) => void;
+}
+
+export function CorsTable({ data, type, onDelete, onEdit, onToggleActive }: CorsTableProps) {
+    return (
+        <div className="rounded-md border">
+            <Table>
+                <TableHeader>
+                    <TableRow>
+                        <TableHead>Origin</TableHead>
+                        <TableHead>{type === "whitelist" ? "Açıklama" : "Sebep"}</TableHead>
+                        <TableHead>Durum</TableHead>
+                        <TableHead>Oluşturan</TableHead>
+                        <TableHead className="text-right">İşlemler</TableHead>
+                    </TableRow>
+                </TableHeader>
+                <TableBody>
+                    {data.length === 0 ? (
+                        <TableRow>
+                            <TableCell colSpan={5} className="h-24 text-center text-muted-foreground">
+                                Kayıt bulunamadı.
+                            </TableCell>
+                        </TableRow>
+                    ) : (
+                        data.map((entry) => (
+                            <TableRow key={entry.id}>
+                                <TableCell className="font-medium">{entry.origin}</TableCell>
+                                <TableCell>
+                                    {type === "whitelist" ? entry.description : entry.reason}
+                                </TableCell>
+                                <TableCell>
+                                    <div className="flex items-center gap-2">
+                                        <Switch
+                                            checked={entry.is_active}
+                                            onCheckedChange={() => onToggleActive(entry.id, entry.is_active)}
+                                        />
+                                        <span className="text-sm text-muted-foreground">
+                                            {entry.is_active ? "Aktif" : "Pasif"}
+                                        </span>
+                                    </div>
+                                </TableCell>
+                                <TableCell className="text-muted-foreground text-sm">
+                                    {entry.created_by}
+                                </TableCell>
+                                <TableCell className="text-right space-x-2">
+                                    <Button
+                                        variant="outline"
+                                        size="icon"
+                                        className="h-8 w-8"
+                                        onClick={() => onEdit(entry)}
+                                        title="Düzenle"
+                                    >
+                                        <Edit className="h-4 w-4" />
+                                        <span className="sr-only">Düzenle</span>
+                                    </Button>
+                                    <Button
+                                        variant="outline"
+                                        size="icon"
+                                        className="h-8 w-8 text-destructive hover:text-destructive hover:bg-destructive/10"
+                                        onClick={() => onDelete(entry.id)}
+                                        title="Sil"
+                                    >
+                                        <Trash2 className="h-4 w-4" />
+                                        <span className="sr-only">Sil</span>
+                                    </Button>
+                                </TableCell>
+                            </TableRow>
+                        ))
+                    )}
+                </TableBody>
+            </Table>
+        </div>
+    );
+}
--- a/components/header/header.tsx
+++ b/components/header/header.tsx
@@ -0,0 +1,172 @@
+"use client";
+
+import Link from "next/link";
+import { useTheme } from "next-themes";
+import { useAppSelector, useAppDispatch } from "@/lib/hooks";
+import { logout } from "@/lib/features/auth/authSlice";
+import { Button } from "@/components/ui/button";
+import {
+    DropdownMenu,
+    DropdownMenuContent,
+    DropdownMenuItem,
+    DropdownMenuLabel,
+    DropdownMenuSeparator,
+    DropdownMenuTrigger,
+} from "@/components/ui/dropdown-menu";
+import { Avatar, AvatarFallback, AvatarImage } from "@/components/ui/avatar";
+import { Sun, Moon, LogOut, User, LayoutDashboard, Menu } from "lucide-react";
+import { Sheet, SheetContent, SheetTrigger } from "@/components/ui/sheet";
+import { useState, useEffect } from "react";
+import { getAvatarUrl } from "@/lib/utils";
+
+export function Header() {
+    const { setTheme, theme } = useTheme();
+    const dispatch = useAppDispatch();
+    const { isAuthenticated, user } = useAppSelector((state) => state.auth);
+    const [mounted, setMounted] = useState(false);
+
+    // Prevent hydration mismatch
+    useEffect(() => {
+        setMounted(true);
+    }, []);
+
+    const handleLogout = () => {
+        dispatch(logout());
+    };
+
+    if (!mounted) {
+        return (
+            <header className="sticky top-0 z-50 w-full border-b bg-background/95 backdrop-blur supports-[backdrop-filter]:bg-background/60">
+                <div className="container flex h-14 items-center pl-10 pr-10">
+                    <div className="mr-4 hidden md:flex">
+                        <Link href="/" className="mr-6 flex items-center space-x-2">
+                            <span className="hidden font-bold sm:inline-block">
+                                NextGoBlog
+                            </span>
+                        </Link>
+                        <nav className="flex items-center space-x-6 text-sm font-medium">
+                            <Link href="/blog">Blog</Link>
+                            <Link href="/about">Hakkında</Link>
+                        </nav>
+                    </div>
+                    <div className="flex flex-1 items-center justify-end space-x-2">
+                        <div className="flex items-center gap-2">
+                            <Button variant="ghost" asChild>
+                                <Link href="/login">Giriş Yap</Link>
+                            </Button>
+                            <Button asChild>
+                                <Link href="/register">Kayıt Ol</Link>
+                            </Button>
+                        </div>
+                    </div>
+                </div>
+            </header>
+        )
+    }
+
+    return (
+        <header className="sticky top-0 z-50 w-full border-b bg-background/95 backdrop-blur supports-[backdrop-filter]:bg-background/60">
+            <div className="container flex h-14 items-center pl-10 pr-10">
+                {/* Desktop Interface */}
+                <div className="mr-4 hidden md:flex">
+                    <Link href="/" className="mr-6 flex items-center space-x-2">
+                        <span className="hidden font-bold sm:inline-block">
+                            NextGoBlog
+                        </span>
+                    </Link>
+                    <nav className="flex items-center space-x-6 text-sm font-medium">
+                        <Link href="/blog">Blog</Link>
+                        <Link href="/about">Hakkında</Link>
+                    </nav>
+                </div>
+
+                {/* Mobile Interface */}
+                <Sheet>
+                    <SheetTrigger asChild>
+                        <Button
+                            variant="ghost"
+                            className="mr-2 px-0 text-base hover:bg-transparent focus-visible:bg-transparent focus-visible:ring-0 focus-visible:ring-offset-0 md:hidden"
+                        >
+                            <Menu className="h-5 w-5" />
+                            <span className="sr-only">Toggle Menu</span>
+                        </Button>
+                    </SheetTrigger>
+                    <SheetContent side="left" className="pr-0">
+                        <Link href="/" className="flex items-center">
+                            <span className="font-bold">NextGoBlog</span>
+                        </Link>
+                        <nav className="mt-8 flex flex-col gap-4">
+                            <Link href="/blog">Blog</Link>
+                            <Link href="/about">Hakkında</Link>
+                        </nav>
+                    </SheetContent>
+                </Sheet>
+
+                {/* Right Side */}
+                <div className="flex flex-1 items-center justify-end space-x-2">
+                    <Button
+                        variant="ghost"
+                        size="icon"
+                        onClick={() => setTheme(theme === "dark" ? "light" : "dark")}
+                    >
+                        <Sun className="h-[1.2rem] w-[1.2rem] rotate-0 scale-100 transition-all dark:-rotate-90 dark:scale-0" />
+                        <Moon className="absolute h-[1.2rem] w-[1.2rem] rotate-90 scale-0 transition-all dark:rotate-0 dark:scale-100" />
+                        <span className="sr-only">Toggle theme</span>
+                    </Button>
+
+                    {isAuthenticated ? (
+                        <DropdownMenu>
+                            <DropdownMenuTrigger asChild>
+                                <Button variant="ghost" className="relative h-8 w-8 rounded-full">
+                                    <Avatar className="h-8 w-8">
+                                        <AvatarImage src={getAvatarUrl(user?.avatar_url)} alt={user?.username} />
+                                        <AvatarFallback>{user?.username?.slice(0, 2).toUpperCase()}</AvatarFallback>
+                                    </Avatar>
+                                </Button>
+                            </DropdownMenuTrigger>
+                            <DropdownMenuContent className="w-56" align="end" forceMount>
+                                <DropdownMenuLabel className="font-normal">
+                                    <div className="flex flex-col space-y-1">
+                                        <p className="text-sm font-medium leading-none">{user?.username}</p>
+                                        <p className="text-xs leading-none text-muted-foreground">
+                                            {user?.email}
+                                        </p>
+                                    </div>
+                                </DropdownMenuLabel>
+                                <DropdownMenuSeparator />
+                                {user?.roles?.some((r: any) => r.name === "admin") && (
+                                    <DropdownMenuItem asChild>
+                                        <Link href="/admin">
+                                            <LayoutDashboard className="mr-2 h-4 w-4" />
+                                            <span>Admin Panel</span>
+                                        </Link>
+                                    </DropdownMenuItem>
+                                )}
+                                <DropdownMenuItem asChild>
+                                    <Link href="/profile">
+                                        <User className="mr-2 h-4 w-4" />
+                                        <span>Profil</span>
+                                    </Link>
+                                </DropdownMenuItem>
+                                <DropdownMenuSeparator />
+                                <DropdownMenuItem onClick={handleLogout}>
+                                    <LogOut className="mr-2 h-4 w-4" />
+                                    <span>Çıkış Yap</span>
+                                </DropdownMenuItem>
+                            </DropdownMenuContent>
+                        </DropdownMenu>
+                    ) : (
+                        <div className="flex items-center gap-2">
+                            <Button variant="ghost" asChild>
+                                <Link href="/login">Giriş Yap</Link>
+                            </Button>
+                            <Button asChild>
+                                <Link href="/register">Kayıt Ol</Link>
+                            </Button>
+                        </div>
+                    )}
+                </div>
+            </div>
+        </header>
+    );
+}
--- a/components/theme-provider.tsx
+++ b/components/theme-provider.tsx
@@ -0,0 +1,11 @@
+"use client"
+
+import * as React from "react"
+import { ThemeProvider as NextThemesProvider } from "next-themes"
+
+export function ThemeProvider({
+    children,
+    ...props
+}: React.ComponentProps<typeof NextThemesProvider>) {
+    return <NextThemesProvider {...props}>{children}</NextThemesProvider>
+}
--- a/components/ui/avatar.tsx
+++ b/components/ui/avatar.tsx
@@ -0,0 +1,109 @@
+"use client"
+
+import * as React from "react"
+import { Avatar as AvatarPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function Avatar({
+  className,
+  size = "default",
+  ...props
+}: React.ComponentProps<typeof AvatarPrimitive.Root> & {
+  size?: "default" | "sm" | "lg"
+}) {
+  return (
+    <AvatarPrimitive.Root
+      data-slot="avatar"
+      data-size={size}
+      className={cn(
+        "group/avatar relative flex size-8 shrink-0 overflow-hidden rounded-full select-none data-[size=lg]:size-10 data-[size=sm]:size-6",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function AvatarImage({
+  className,
+  ...props
+}: React.ComponentProps<typeof AvatarPrimitive.Image>) {
+  return (
+    <AvatarPrimitive.Image
+      data-slot="avatar-image"
+      className={cn("aspect-square size-full", className)}
+      {...props}
+    />
+  )
+}
+
+function AvatarFallback({
+  className,
+  ...props
+}: React.ComponentProps<typeof AvatarPrimitive.Fallback>) {
+  return (
+    <AvatarPrimitive.Fallback
+      data-slot="avatar-fallback"
+      className={cn(
+        "bg-muted text-muted-foreground flex size-full items-center justify-center rounded-full text-sm group-data-[size=sm]/avatar:text-xs",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function AvatarBadge({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      data-slot="avatar-badge"
+      className={cn(
+        "bg-primary text-primary-foreground ring-background absolute right-0 bottom-0 z-10 inline-flex items-center justify-center rounded-full ring-2 select-none",
+        "group-data-[size=sm]/avatar:size-2 group-data-[size=sm]/avatar:[&>svg]:hidden",
+        "group-data-[size=default]/avatar:size-2.5 group-data-[size=default]/avatar:[&>svg]:size-2",
+        "group-data-[size=lg]/avatar:size-3 group-data-[size=lg]/avatar:[&>svg]:size-2",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function AvatarGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="avatar-group"
+      className={cn(
+        "*:data-[slot=avatar]:ring-background group/avatar-group flex -space-x-2 *:data-[slot=avatar]:ring-2",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function AvatarGroupCount({
+  className,
+  ...props
+}: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="avatar-group-count"
+      className={cn(
+        "bg-muted text-muted-foreground ring-background relative flex size-8 shrink-0 items-center justify-center rounded-full text-sm ring-2 group-has-data-[size=lg]/avatar-group:size-10 group-has-data-[size=sm]/avatar-group:size-6 [&>svg]:size-4 group-has-data-[size=lg]/avatar-group:[&>svg]:size-5 group-has-data-[size=sm]/avatar-group:[&>svg]:size-3",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+export {
+  Avatar,
+  AvatarImage,
+  AvatarFallback,
+  AvatarBadge,
+  AvatarGroup,
+  AvatarGroupCount,
+}
--- a/components/ui/badge.tsx
+++ b/components/ui/badge.tsx
@@ -0,0 +1,36 @@
+import * as React from "react"
+import { cva, type VariantProps } from "class-variance-authority"
+
+import { cn } from "@/lib/utils"
+
+const badgeVariants = cva(
+    "inline-flex items-center rounded-md border px-2.5 py-0.5 text-xs font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2",
+    {
+        variants: {
+            variant: {
+                default:
+                    "border-transparent bg-primary text-primary-foreground shadow hover:bg-primary/80",
+                secondary:
+                    "border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80",
+                destructive:
+                    "border-transparent bg-destructive text-destructive-foreground shadow hover:bg-destructive/80",
+                outline: "text-foreground",
+            },
+        },
+        defaultVariants: {
+            variant: "default",
+        },
+    }
+)
+
+export interface BadgeProps
+    extends React.HTMLAttributes<HTMLDivElement>,
+    VariantProps<typeof badgeVariants> { }
+
+function Badge({ className, variant, ...props }: BadgeProps) {
+    return (
+        <div className={cn(badgeVariants({ variant }), className)} {...props} />
+    )
+}
+
+export { Badge, badgeVariants }
--- a/components/ui/breadcrumb.tsx
+++ b/components/ui/breadcrumb.tsx
@@ -0,0 +1,115 @@
+import * as React from "react"
+import { ChevronRight, MoreHorizontal } from "lucide-react"
+import { Slot } from "@radix-ui/react-slot"
+
+import { cn } from "@/lib/utils"
+
+const Breadcrumb = React.forwardRef<
+    HTMLElement,
+    React.ComponentPropsWithoutRef<"nav"> & {
+        separator?: React.ReactNode
+    }
+>(({ ...props }, ref) => <nav ref={ref} aria-label="breadcrumb" {...props} />)
+Breadcrumb.displayName = "Breadcrumb"
+
+const BreadcrumbList = React.forwardRef<
+    HTMLOListElement,
+    React.ComponentPropsWithoutRef<"ol">
+>(({ className, ...props }, ref) => (
+    <ol
+        ref={ref}
+        className={cn(
+            "flex flex-wrap items-center gap-1.5 break-words text-sm text-muted-foreground sm:gap-2.5",
+            className
+        )}
+        {...props}
+    />
+))
+BreadcrumbList.displayName = "BreadcrumbList"
+
+const BreadcrumbItem = React.forwardRef<
+    HTMLLIElement,
+    React.ComponentPropsWithoutRef<"li">
+>(({ className, ...props }, ref) => (
+    <li
+        ref={ref}
+        className={cn("inline-flex items-center gap-1.5", className)}
+        {...props}
+    />
+))
+BreadcrumbItem.displayName = "BreadcrumbItem"
+
+const BreadcrumbLink = React.forwardRef<
+    HTMLAnchorElement,
+    React.ComponentPropsWithoutRef<"a"> & {
+        asChild?: boolean
+    }
+>(({ asChild, className, ...props }, ref) => {
+    const Comp = asChild ? Slot : "a"
+
+    return (
+        <Comp
+            ref={ref}
+            className={cn("transition-colors hover:text-foreground", className)}
+            {...props}
+        />
+    )
+})
+BreadcrumbLink.displayName = "BreadcrumbLink"
+
+const BreadcrumbPage = React.forwardRef<
+    HTMLSpanElement,
+    React.ComponentPropsWithoutRef<"span">
+>(({ className, ...props }, ref) => (
+    <span
+        ref={ref}
+        role="link"
+        aria-disabled="true"
+        aria-current="page"
+        className={cn("font-normal text-foreground", className)}
+        {...props}
+    />
+))
+BreadcrumbPage.displayName = "BreadcrumbPage"
+
+const BreadcrumbSeparator = ({
+    children,
+    className,
+    ...props
+}: React.ComponentProps<"li">) => (
+    <li
+        role="presentation"
+        aria-hidden="true"
+        className={cn("[&>svg]:size-3.5", className)}
+        {...props}
+    >
+        {children ?? <ChevronRight />}
+    </li>
+)
+BreadcrumbSeparator.displayName = "BreadcrumbSeparator"
+
+const BreadcrumbEllipsis = ({
+    className,
+    ...props
+}: React.ComponentProps<"span">) => (
+    <span
+        role="presentation"
+        aria-hidden="true"
+        className={cn("flex h-9 w-9 items-center justify-center", className)}
+        {...props}
+    >
+        <MoreHorizontal className="h-4 w-4" />
+        <span className="sr-only">More</span>
+    </span>
+)
+BreadcrumbEllipsis.displayName = "BreadcrumbEllipsis"
+
+export {
+    Breadcrumb,
+    BreadcrumbList,
+    BreadcrumbItem,
+    BreadcrumbLink,
+    BreadcrumbPage,
+    BreadcrumbSeparator,
+    BreadcrumbEllipsis,
+}
--- a/components/ui/button.tsx
+++ b/components/ui/button.tsx
@@ -0,0 +1,64 @@
+import * as React from "react"
+import { cva, type VariantProps } from "class-variance-authority"
+import { Slot } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+const buttonVariants = cva(
+  "inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-md text-sm font-medium transition-all disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg:not([class*='size-'])]:size-4 shrink-0 [&_svg]:shrink-0 outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive",
+  {
+    variants: {
+      variant: {
+        default: "bg-primary text-primary-foreground hover:bg-primary/90",
+        destructive:
+          "bg-destructive text-white hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/60",
+        outline:
+          "border bg-background shadow-xs hover:bg-accent hover:text-accent-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50",
+        secondary:
+          "bg-secondary text-secondary-foreground hover:bg-secondary/80",
+        ghost:
+          "hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50",
+        link: "text-primary underline-offset-4 hover:underline",
+      },
+      size: {
+        default: "h-9 px-4 py-2 has-[>svg]:px-3",
+        xs: "h-6 gap-1 rounded-md px-2 text-xs has-[>svg]:px-1.5 [&_svg:not([class*='size-'])]:size-3",
+        sm: "h-8 rounded-md gap-1.5 px-3 has-[>svg]:px-2.5",
+        lg: "h-10 rounded-md px-6 has-[>svg]:px-4",
+        icon: "size-9",
+        "icon-xs": "size-6 rounded-md [&_svg:not([class*='size-'])]:size-3",
+        "icon-sm": "size-8",
+        "icon-lg": "size-10",
+      },
+    },
+    defaultVariants: {
+      variant: "default",
+      size: "default",
+    },
+  }
+)
+
+function Button({
+  className,
+  variant = "default",
+  size = "default",
+  asChild = false,
+  ...props
+}: React.ComponentProps<"button"> &
+  VariantProps<typeof buttonVariants> & {
+    asChild?: boolean
+  }) {
+  const Comp = asChild ? Slot.Root : "button"
+
+  return (
+    <Comp
+      data-slot="button"
+      data-variant={variant}
+      data-size={size}
+      className={cn(buttonVariants({ variant, size, className }))}
+      {...props}
+    />
+  )
+}
+
+export { Button, buttonVariants }
--- a/components/ui/card.tsx
+++ b/components/ui/card.tsx
@@ -0,0 +1,92 @@
+import * as React from "react"
+
+import { cn } from "@/lib/utils"
+
+function Card({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card"
+      className={cn(
+        "bg-card text-card-foreground flex flex-col gap-6 rounded-xl border py-6 shadow-sm",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function CardHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-header"
+      className={cn(
+        "@container/card-header grid auto-rows-min grid-rows-[auto_auto] items-start gap-2 px-6 has-data-[slot=card-action]:grid-cols-[1fr_auto] [.border-b]:pb-6",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function CardTitle({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-title"
+      className={cn("leading-none font-semibold", className)}
+      {...props}
+    />
+  )
+}
+
+function CardDescription({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-description"
+      className={cn("text-muted-foreground text-sm", className)}
+      {...props}
+    />
+  )
+}
+
+function CardAction({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-action"
+      className={cn(
+        "col-start-2 row-span-2 row-start-1 self-start justify-self-end",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function CardContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-content"
+      className={cn("px-6", className)}
+      {...props}
+    />
+  )
+}
+
+function CardFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-footer"
+      className={cn("flex items-center px-6 [.border-t]:pt-6", className)}
+      {...props}
+    />
+  )
+}
+
+export {
+  Card,
+  CardHeader,
+  CardFooter,
+  CardTitle,
+  CardAction,
+  CardDescription,
+  CardContent,
+}
--- a/components/ui/dialog.tsx
+++ b/components/ui/dialog.tsx
@@ -0,0 +1,158 @@
+"use client"
+
+import * as React from "react"
+import { XIcon } from "lucide-react"
+import { Dialog as DialogPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+import { Button } from "@/components/ui/button"
+
+function Dialog({
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Root>) {
+  return <DialogPrimitive.Root data-slot="dialog" {...props} />
+}
+
+function DialogTrigger({
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Trigger>) {
+  return <DialogPrimitive.Trigger data-slot="dialog-trigger" {...props} />
+}
+
+function DialogPortal({
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Portal>) {
+  return <DialogPrimitive.Portal data-slot="dialog-portal" {...props} />
+}
+
+function DialogClose({
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Close>) {
+  return <DialogPrimitive.Close data-slot="dialog-close" {...props} />
+}
+
+function DialogOverlay({
+  className,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Overlay>) {
+  return (
+    <DialogPrimitive.Overlay
+      data-slot="dialog-overlay"
+      className={cn(
+        "data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 fixed inset-0 z-50 bg-black/50",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function DialogContent({
+  className,
+  children,
+  showCloseButton = true,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Content> & {
+  showCloseButton?: boolean
+}) {
+  return (
+    <DialogPortal data-slot="dialog-portal">
+      <DialogOverlay />
+      <DialogPrimitive.Content
+        data-slot="dialog-content"
+        className={cn(
+          "bg-background data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 fixed top-[50%] left-[50%] z-50 grid w-full max-w-[calc(100%-2rem)] translate-x-[-50%] translate-y-[-50%] gap-4 rounded-lg border p-6 shadow-lg duration-200 outline-none sm:max-w-lg",
+          className
+        )}
+        {...props}
+      >
+        {children}
+        {showCloseButton && (
+          <DialogPrimitive.Close
+            data-slot="dialog-close"
+            className="ring-offset-background focus:ring-ring data-[state=open]:bg-accent data-[state=open]:text-muted-foreground absolute top-4 right-4 rounded-xs opacity-70 transition-opacity hover:opacity-100 focus:ring-2 focus:ring-offset-2 focus:outline-hidden disabled:pointer-events-none [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4"
+          >
+            <XIcon />
+            <span className="sr-only">Close</span>
+          </DialogPrimitive.Close>
+        )}
+      </DialogPrimitive.Content>
+    </DialogPortal>
+  )
+}
+
+function DialogHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="dialog-header"
+      className={cn("flex flex-col gap-2 text-center sm:text-left", className)}
+      {...props}
+    />
+  )
+}
+
+function DialogFooter({
+  className,
+  showCloseButton = false,
+  children,
+  ...props
+}: React.ComponentProps<"div"> & {
+  showCloseButton?: boolean
+}) {
+  return (
+    <div
+      data-slot="dialog-footer"
+      className={cn(
+        "flex flex-col-reverse gap-2 sm:flex-row sm:justify-end",
+        className
+      )}
+      {...props}
+    >
+      {children}
+      {showCloseButton && (
+        <DialogPrimitive.Close asChild>
+          <Button variant="outline">Close</Button>
+        </DialogPrimitive.Close>
+      )}
+    </div>
+  )
+}
+
+function DialogTitle({
+  className,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Title>) {
+  return (
+    <DialogPrimitive.Title
+      data-slot="dialog-title"
+      className={cn("text-lg leading-none font-semibold", className)}
+      {...props}
+    />
+  )
+}
+
+function DialogDescription({
+  className,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Description>) {
+  return (
+    <DialogPrimitive.Description
+      data-slot="dialog-description"
+      className={cn("text-muted-foreground text-sm", className)}
+      {...props}
+    />
+  )
+}
+
+export {
+  Dialog,
+  DialogClose,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogOverlay,
+  DialogPortal,
+  DialogTitle,
+  DialogTrigger,
+}
--- a/components/ui/dropdown-menu.tsx
+++ b/components/ui/dropdown-menu.tsx
@@ -0,0 +1,257 @@
+"use client"
+
+import * as React from "react"
+import { CheckIcon, ChevronRightIcon, CircleIcon } from "lucide-react"
+import { DropdownMenu as DropdownMenuPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function DropdownMenu({
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Root>) {
+  return <DropdownMenuPrimitive.Root data-slot="dropdown-menu" {...props} />
+}
+
+function DropdownMenuPortal({
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Portal>) {
+  return (
+    <DropdownMenuPrimitive.Portal data-slot="dropdown-menu-portal" {...props} />
+  )
+}
+
+function DropdownMenuTrigger({
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Trigger>) {
+  return (
+    <DropdownMenuPrimitive.Trigger
+      data-slot="dropdown-menu-trigger"
+      {...props}
+    />
+  )
+}
+
+function DropdownMenuContent({
+  className,
+  sideOffset = 4,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Content>) {
+  return (
+    <DropdownMenuPrimitive.Portal>
+      <DropdownMenuPrimitive.Content
+        data-slot="dropdown-menu-content"
+        sideOffset={sideOffset}
+        className={cn(
+          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 max-h-(--radix-dropdown-menu-content-available-height) min-w-[8rem] origin-(--radix-dropdown-menu-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-md border p-1 shadow-md",
+          className
+        )}
+        {...props}
+      />
+    </DropdownMenuPrimitive.Portal>
+  )
+}
+
+function DropdownMenuGroup({
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Group>) {
+  return (
+    <DropdownMenuPrimitive.Group data-slot="dropdown-menu-group" {...props} />
+  )
+}
+
+function DropdownMenuItem({
+  className,
+  inset,
+  variant = "default",
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Item> & {
+  inset?: boolean
+  variant?: "default" | "destructive"
+}) {
+  return (
+    <DropdownMenuPrimitive.Item
+      data-slot="dropdown-menu-item"
+      data-inset={inset}
+      data-variant={variant}
+      className={cn(
+        "focus:bg-accent focus:text-accent-foreground data-[variant=destructive]:text-destructive data-[variant=destructive]:focus:bg-destructive/10 dark:data-[variant=destructive]:focus:bg-destructive/20 data-[variant=destructive]:focus:text-destructive data-[variant=destructive]:*:[svg]:!text-destructive [&_svg:not([class*='text-'])]:text-muted-foreground relative flex cursor-default items-center gap-2 rounded-sm px-2 py-1.5 text-sm outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 data-[inset]:pl-8 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function DropdownMenuCheckboxItem({
+  className,
+  children,
+  checked,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.CheckboxItem>) {
+  return (
+    <DropdownMenuPrimitive.CheckboxItem
+      data-slot="dropdown-menu-checkbox-item"
+      className={cn(
+        "focus:bg-accent focus:text-accent-foreground relative flex cursor-default items-center gap-2 rounded-sm py-1.5 pr-2 pl-8 text-sm outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
+        className
+      )}
+      checked={checked}
+      {...props}
+    >
+      <span className="pointer-events-none absolute left-2 flex size-3.5 items-center justify-center">
+        <DropdownMenuPrimitive.ItemIndicator>
+          <CheckIcon className="size-4" />
+        </DropdownMenuPrimitive.ItemIndicator>
+      </span>
+      {children}
+    </DropdownMenuPrimitive.CheckboxItem>
+  )
+}
+
+function DropdownMenuRadioGroup({
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.RadioGroup>) {
+  return (
+    <DropdownMenuPrimitive.RadioGroup
+      data-slot="dropdown-menu-radio-group"
+      {...props}
+    />
+  )
+}
+
+function DropdownMenuRadioItem({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.RadioItem>) {
+  return (
+    <DropdownMenuPrimitive.RadioItem
+      data-slot="dropdown-menu-radio-item"
+      className={cn(
+        "focus:bg-accent focus:text-accent-foreground relative flex cursor-default items-center gap-2 rounded-sm py-1.5 pr-2 pl-8 text-sm outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
+        className
+      )}
+      {...props}
+    >
+      <span className="pointer-events-none absolute left-2 flex size-3.5 items-center justify-center">
+        <DropdownMenuPrimitive.ItemIndicator>
+          <CircleIcon className="size-2 fill-current" />
+        </DropdownMenuPrimitive.ItemIndicator>
+      </span>
+      {children}
+    </DropdownMenuPrimitive.RadioItem>
+  )
+}
+
+function DropdownMenuLabel({
+  className,
+  inset,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Label> & {
+  inset?: boolean
+}) {
+  return (
+    <DropdownMenuPrimitive.Label
+      data-slot="dropdown-menu-label"
+      data-inset={inset}
+      className={cn(
+        "px-2 py-1.5 text-sm font-medium data-[inset]:pl-8",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function DropdownMenuSeparator({
+  className,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Separator>) {
+  return (
+    <DropdownMenuPrimitive.Separator
+      data-slot="dropdown-menu-separator"
+      className={cn("bg-border -mx-1 my-1 h-px", className)}
+      {...props}
+    />
+  )
+}
+
+function DropdownMenuShortcut({
+  className,
+  ...props
+}: React.ComponentProps<"span">) {
+  return (
+    <span
+      data-slot="dropdown-menu-shortcut"
+      className={cn(
+        "text-muted-foreground ml-auto text-xs tracking-widest",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function DropdownMenuSub({
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Sub>) {
+  return <DropdownMenuPrimitive.Sub data-slot="dropdown-menu-sub" {...props} />
+}
+
+function DropdownMenuSubTrigger({
+  className,
+  inset,
+  children,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.SubTrigger> & {
+  inset?: boolean
+}) {
+  return (
+    <DropdownMenuPrimitive.SubTrigger
+      data-slot="dropdown-menu-sub-trigger"
+      data-inset={inset}
+      className={cn(
+        "focus:bg-accent focus:text-accent-foreground data-[state=open]:bg-accent data-[state=open]:text-accent-foreground [&_svg:not([class*='text-'])]:text-muted-foreground flex cursor-default items-center gap-2 rounded-sm px-2 py-1.5 text-sm outline-hidden select-none data-[inset]:pl-8 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
+        className
+      )}
+      {...props}
+    >
+      {children}
+      <ChevronRightIcon className="ml-auto size-4" />
+    </DropdownMenuPrimitive.SubTrigger>
+  )
+}
+
+function DropdownMenuSubContent({
+  className,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.SubContent>) {
+  return (
+    <DropdownMenuPrimitive.SubContent
+      data-slot="dropdown-menu-sub-content"
+      className={cn(
+        "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 min-w-[8rem] origin-(--radix-dropdown-menu-content-transform-origin) overflow-hidden rounded-md border p-1 shadow-lg",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+export {
+  DropdownMenu,
+  DropdownMenuPortal,
+  DropdownMenuTrigger,
+  DropdownMenuContent,
+  DropdownMenuGroup,
+  DropdownMenuLabel,
+  DropdownMenuItem,
+  DropdownMenuCheckboxItem,
+  DropdownMenuRadioGroup,
+  DropdownMenuRadioItem,
+  DropdownMenuSeparator,
+  DropdownMenuShortcut,
+  DropdownMenuSub,
+  DropdownMenuSubTrigger,
+  DropdownMenuSubContent,
+}
--- a/components/ui/input.tsx
+++ b/components/ui/input.tsx
@@ -0,0 +1,21 @@
+import * as React from "react"
+
+import { cn } from "@/lib/utils"
+
+function Input({ className, type, ...props }: React.ComponentProps<"input">) {
+  return (
+    <input
+      type={type}
+      data-slot="input"
+      className={cn(
+        "file:text-foreground placeholder:text-muted-foreground selection:bg-primary selection:text-primary-foreground dark:bg-input/30 border-input h-9 w-full min-w-0 rounded-md border bg-transparent px-3 py-1 text-base shadow-xs transition-[color,box-shadow] outline-none file:inline-flex file:h-7 file:border-0 file:bg-transparent file:text-sm file:font-medium disabled:pointer-events-none disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
+        "focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px]",
+        "aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+export { Input }
--- a/components/ui/label.tsx
+++ b/components/ui/label.tsx
@@ -0,0 +1,24 @@
+"use client"
+
+import * as React from "react"
+import { Label as LabelPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function Label({
+  className,
+  ...props
+}: React.ComponentProps<typeof LabelPrimitive.Root>) {
+  return (
+    <LabelPrimitive.Root
+      data-slot="label"
+      className={cn(
+        "flex items-center gap-2 text-sm leading-none font-medium select-none group-data-[disabled=true]:pointer-events-none group-data-[disabled=true]:opacity-50 peer-disabled:cursor-not-allowed peer-disabled:opacity-50",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+export { Label }
--- a/components/ui/select.tsx
+++ b/components/ui/select.tsx
@@ -0,0 +1,190 @@
+"use client"
+
+import * as React from "react"
+import { CheckIcon, ChevronDownIcon, ChevronUpIcon } from "lucide-react"
+import { Select as SelectPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function Select({
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Root>) {
+  return <SelectPrimitive.Root data-slot="select" {...props} />
+}
+
+function SelectGroup({
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Group>) {
+  return <SelectPrimitive.Group data-slot="select-group" {...props} />
+}
+
+function SelectValue({
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Value>) {
+  return <SelectPrimitive.Value data-slot="select-value" {...props} />
+}
+
+function SelectTrigger({
+  className,
+  size = "default",
+  children,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Trigger> & {
+  size?: "sm" | "default"
+}) {
+  return (
+    <SelectPrimitive.Trigger
+      data-slot="select-trigger"
+      data-size={size}
+      className={cn(
+        "border-input data-[placeholder]:text-muted-foreground [&_svg:not([class*='text-'])]:text-muted-foreground focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:bg-input/30 dark:hover:bg-input/50 flex w-fit items-center justify-between gap-2 rounded-md border bg-transparent px-3 py-2 text-sm whitespace-nowrap shadow-xs transition-[color,box-shadow] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50 data-[size=default]:h-9 data-[size=sm]:h-8 *:data-[slot=select-value]:line-clamp-1 *:data-[slot=select-value]:flex *:data-[slot=select-value]:items-center *:data-[slot=select-value]:gap-2 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
+        className
+      )}
+      {...props}
+    >
+      {children}
+      <SelectPrimitive.Icon asChild>
+        <ChevronDownIcon className="size-4 opacity-50" />
+      </SelectPrimitive.Icon>
+    </SelectPrimitive.Trigger>
+  )
+}
+
+function SelectContent({
+  className,
+  children,
+  position = "item-aligned",
+  align = "center",
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Content>) {
+  return (
+    <SelectPrimitive.Portal>
+      <SelectPrimitive.Content
+        data-slot="select-content"
+        className={cn(
+          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 relative z-50 max-h-(--radix-select-content-available-height) min-w-[8rem] origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-md border shadow-md",
+          position === "popper" &&
+            "data-[side=bottom]:translate-y-1 data-[side=left]:-translate-x-1 data-[side=right]:translate-x-1 data-[side=top]:-translate-y-1",
+          className
+        )}
+        position={position}
+        align={align}
+        {...props}
+      >
+        <SelectScrollUpButton />
+        <SelectPrimitive.Viewport
+          className={cn(
+            "p-1",
+            position === "popper" &&
+              "h-[var(--radix-select-trigger-height)] w-full min-w-[var(--radix-select-trigger-width)] scroll-my-1"
+          )}
+        >
+          {children}
+        </SelectPrimitive.Viewport>
+        <SelectScrollDownButton />
+      </SelectPrimitive.Content>
+    </SelectPrimitive.Portal>
+  )
+}
+
+function SelectLabel({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Label>) {
+  return (
+    <SelectPrimitive.Label
+      data-slot="select-label"
+      className={cn("text-muted-foreground px-2 py-1.5 text-xs", className)}
+      {...props}
+    />
+  )
+}
+
+function SelectItem({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Item>) {
+  return (
+    <SelectPrimitive.Item
+      data-slot="select-item"
+      className={cn(
+        "focus:bg-accent focus:text-accent-foreground [&_svg:not([class*='text-'])]:text-muted-foreground relative flex w-full cursor-default items-center gap-2 rounded-sm py-1.5 pr-8 pl-2 text-sm outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4 *:[span]:last:flex *:[span]:last:items-center *:[span]:last:gap-2",
+        className
+      )}
+      {...props}
+    >
+      <span
+        data-slot="select-item-indicator"
+        className="absolute right-2 flex size-3.5 items-center justify-center"
+      >
+        <SelectPrimitive.ItemIndicator>
+          <CheckIcon className="size-4" />
+        </SelectPrimitive.ItemIndicator>
+      </span>
+      <SelectPrimitive.ItemText>{children}</SelectPrimitive.ItemText>
+    </SelectPrimitive.Item>
+  )
+}
+
+function SelectSeparator({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Separator>) {
+  return (
+    <SelectPrimitive.Separator
+      data-slot="select-separator"
+      className={cn("bg-border pointer-events-none -mx-1 my-1 h-px", className)}
+      {...props}
+    />
+  )
+}
+
+function SelectScrollUpButton({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.ScrollUpButton>) {
+  return (
+    <SelectPrimitive.ScrollUpButton
+      data-slot="select-scroll-up-button"
+      className={cn(
+        "flex cursor-default items-center justify-center py-1",
+        className
+      )}
+      {...props}
+    >
+      <ChevronUpIcon className="size-4" />
+    </SelectPrimitive.ScrollUpButton>
+  )
+}
+
+function SelectScrollDownButton({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.ScrollDownButton>) {
+  return (
+    <SelectPrimitive.ScrollDownButton
+      data-slot="select-scroll-down-button"
+      className={cn(
+        "flex cursor-default items-center justify-center py-1",
+        className
+      )}
+      {...props}
+    >
+      <ChevronDownIcon className="size-4" />
+    </SelectPrimitive.ScrollDownButton>
+  )
+}
+
+export {
+  Select,
+  SelectContent,
+  SelectGroup,
+  SelectItem,
+  SelectLabel,
+  SelectScrollDownButton,
+  SelectScrollUpButton,
+  SelectSeparator,
+  SelectTrigger,
+  SelectValue,
+}
--- a/components/ui/separator.tsx
+++ b/components/ui/separator.tsx
@@ -0,0 +1,28 @@
+"use client"
+
+import * as React from "react"
+import { Separator as SeparatorPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function Separator({
+  className,
+  orientation = "horizontal",
+  decorative = true,
+  ...props
+}: React.ComponentProps<typeof SeparatorPrimitive.Root>) {
+  return (
+    <SeparatorPrimitive.Root
+      data-slot="separator"
+      decorative={decorative}
+      orientation={orientation}
+      className={cn(
+        "bg-border shrink-0 data-[orientation=horizontal]:h-px data-[orientation=horizontal]:w-full data-[orientation=vertical]:h-full data-[orientation=vertical]:w-px",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+export { Separator }
--- a/components/ui/sheet.tsx
+++ b/components/ui/sheet.tsx
@@ -0,0 +1,143 @@
+"use client"
+
+import * as React from "react"
+import { XIcon } from "lucide-react"
+import { Dialog as SheetPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function Sheet({ ...props }: React.ComponentProps<typeof SheetPrimitive.Root>) {
+  return <SheetPrimitive.Root data-slot="sheet" {...props} />
+}
+
+function SheetTrigger({
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Trigger>) {
+  return <SheetPrimitive.Trigger data-slot="sheet-trigger" {...props} />
+}
+
+function SheetClose({
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Close>) {
+  return <SheetPrimitive.Close data-slot="sheet-close" {...props} />
+}
+
+function SheetPortal({
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Portal>) {
+  return <SheetPrimitive.Portal data-slot="sheet-portal" {...props} />
+}
+
+function SheetOverlay({
+  className,
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Overlay>) {
+  return (
+    <SheetPrimitive.Overlay
+      data-slot="sheet-overlay"
+      className={cn(
+        "data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 fixed inset-0 z-50 bg-black/50",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function SheetContent({
+  className,
+  children,
+  side = "right",
+  showCloseButton = true,
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Content> & {
+  side?: "top" | "right" | "bottom" | "left"
+  showCloseButton?: boolean
+}) {
+  return (
+    <SheetPortal>
+      <SheetOverlay />
+      <SheetPrimitive.Content
+        data-slot="sheet-content"
+        className={cn(
+          "bg-background data-[state=open]:animate-in data-[state=closed]:animate-out fixed z-50 flex flex-col gap-4 shadow-lg transition ease-in-out data-[state=closed]:duration-300 data-[state=open]:duration-500",
+          side === "right" &&
+            "data-[state=closed]:slide-out-to-right data-[state=open]:slide-in-from-right inset-y-0 right-0 h-full w-3/4 border-l sm:max-w-sm",
+          side === "left" &&
+            "data-[state=closed]:slide-out-to-left data-[state=open]:slide-in-from-left inset-y-0 left-0 h-full w-3/4 border-r sm:max-w-sm",
+          side === "top" &&
+            "data-[state=closed]:slide-out-to-top data-[state=open]:slide-in-from-top inset-x-0 top-0 h-auto border-b",
+          side === "bottom" &&
+            "data-[state=closed]:slide-out-to-bottom data-[state=open]:slide-in-from-bottom inset-x-0 bottom-0 h-auto border-t",
+          className
+        )}
+        {...props}
+      >
+        {children}
+        {showCloseButton && (
+          <SheetPrimitive.Close className="ring-offset-background focus:ring-ring data-[state=open]:bg-secondary absolute top-4 right-4 rounded-xs opacity-70 transition-opacity hover:opacity-100 focus:ring-2 focus:ring-offset-2 focus:outline-hidden disabled:pointer-events-none">
+            <XIcon className="size-4" />
+            <span className="sr-only">Close</span>
+          </SheetPrimitive.Close>
+        )}
+      </SheetPrimitive.Content>
+    </SheetPortal>
+  )
+}
+
+function SheetHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="sheet-header"
+      className={cn("flex flex-col gap-1.5 p-4", className)}
+      {...props}
+    />
+  )
+}
+
+function SheetFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="sheet-footer"
+      className={cn("mt-auto flex flex-col gap-2 p-4", className)}
+      {...props}
+    />
+  )
+}
+
+function SheetTitle({
+  className,
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Title>) {
+  return (
+    <SheetPrimitive.Title
+      data-slot="sheet-title"
+      className={cn("text-foreground font-semibold", className)}
+      {...props}
+    />
+  )
+}
+
+function SheetDescription({
+  className,
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Description>) {
+  return (
+    <SheetPrimitive.Description
+      data-slot="sheet-description"
+      className={cn("text-muted-foreground text-sm", className)}
+      {...props}
+    />
+  )
+}
+
+export {
+  Sheet,
+  SheetTrigger,
+  SheetClose,
+  SheetContent,
+  SheetHeader,
+  SheetFooter,
+  SheetTitle,
+  SheetDescription,
+}
--- a/components/ui/sidebar.tsx
+++ b/components/ui/sidebar.tsx
@@ -0,0 +1,726 @@
+"use client"
+
+import * as React from "react"
+import { cva, type VariantProps } from "class-variance-authority"
+import { PanelLeftIcon } from "lucide-react"
+import { Slot } from "radix-ui"
+
+import { useIsMobile } from "@/hooks/use-mobile"
+import { cn } from "@/lib/utils"
+import { Button } from "@/components/ui/button"
+import { Input } from "@/components/ui/input"
+import { Separator } from "@/components/ui/separator"
+import {
+  Sheet,
+  SheetContent,
+  SheetDescription,
+  SheetHeader,
+  SheetTitle,
+} from "@/components/ui/sheet"
+import { Skeleton } from "@/components/ui/skeleton"
+import {
+  Tooltip,
+  TooltipContent,
+  TooltipProvider,
+  TooltipTrigger,
+} from "@/components/ui/tooltip"
+
+const SIDEBAR_COOKIE_NAME = "sidebar_state"
+const SIDEBAR_COOKIE_MAX_AGE = 60 * 60 * 24 * 7
+const SIDEBAR_WIDTH = "16rem"
+const SIDEBAR_WIDTH_MOBILE = "18rem"
+const SIDEBAR_WIDTH_ICON = "3rem"
+const SIDEBAR_KEYBOARD_SHORTCUT = "b"
+
+type SidebarContextProps = {
+  state: "expanded" | "collapsed"
+  open: boolean
+  setOpen: (open: boolean) => void
+  openMobile: boolean
+  setOpenMobile: (open: boolean) => void
+  isMobile: boolean
+  toggleSidebar: () => void
+}
+
+const SidebarContext = React.createContext<SidebarContextProps | null>(null)
+
+function useSidebar() {
+  const context = React.useContext(SidebarContext)
+  if (!context) {
+    throw new Error("useSidebar must be used within a SidebarProvider.")
+  }
+
+  return context
+}
+
+function SidebarProvider({
+  defaultOpen = true,
+  open: openProp,
+  onOpenChange: setOpenProp,
+  className,
+  style,
+  children,
+  ...props
+}: React.ComponentProps<"div"> & {
+  defaultOpen?: boolean
+  open?: boolean
+  onOpenChange?: (open: boolean) => void
+}) {
+  const isMobile = useIsMobile()
+  const [openMobile, setOpenMobile] = React.useState(false)
+
+  // This is the internal state of the sidebar.
+  // We use openProp and setOpenProp for control from outside the component.
+  const [_open, _setOpen] = React.useState(defaultOpen)
+  const open = openProp ?? _open
+  const setOpen = React.useCallback(
+    (value: boolean | ((value: boolean) => boolean)) => {
+      const openState = typeof value === "function" ? value(open) : value
+      if (setOpenProp) {
+        setOpenProp(openState)
+      } else {
+        _setOpen(openState)
+      }
+
+      // This sets the cookie to keep the sidebar state.
+      document.cookie = `${SIDEBAR_COOKIE_NAME}=${openState}; path=/; max-age=${SIDEBAR_COOKIE_MAX_AGE}`
+    },
+    [setOpenProp, open]
+  )
+
+  // Helper to toggle the sidebar.
+  const toggleSidebar = React.useCallback(() => {
+    return isMobile ? setOpenMobile((open) => !open) : setOpen((open) => !open)
+  }, [isMobile, setOpen, setOpenMobile])
+
+  // Adds a keyboard shortcut to toggle the sidebar.
+  React.useEffect(() => {
+    const handleKeyDown = (event: KeyboardEvent) => {
+      if (
+        event.key === SIDEBAR_KEYBOARD_SHORTCUT &&
+        (event.metaKey || event.ctrlKey)
+      ) {
+        event.preventDefault()
+        toggleSidebar()
+      }
+    }
+
+    window.addEventListener("keydown", handleKeyDown)
+    return () => window.removeEventListener("keydown", handleKeyDown)
+  }, [toggleSidebar])
+
+  // We add a state so that we can do data-state="expanded" or "collapsed".
+  // This makes it easier to style the sidebar with Tailwind classes.
+  const state = open ? "expanded" : "collapsed"
+
+  const contextValue = React.useMemo<SidebarContextProps>(
+    () => ({
+      state,
+      open,
+      setOpen,
+      isMobile,
+      openMobile,
+      setOpenMobile,
+      toggleSidebar,
+    }),
+    [state, open, setOpen, isMobile, openMobile, setOpenMobile, toggleSidebar]
+  )
+
+  return (
+    <SidebarContext.Provider value={contextValue}>
+      <TooltipProvider delayDuration={0}>
+        <div
+          data-slot="sidebar-wrapper"
+          style={
+            {
+              "--sidebar-width": SIDEBAR_WIDTH,
+              "--sidebar-width-icon": SIDEBAR_WIDTH_ICON,
+              ...style,
+            } as React.CSSProperties
+          }
+          className={cn(
+            "group/sidebar-wrapper has-data-[variant=inset]:bg-sidebar flex min-h-svh w-full",
+            className
+          )}
+          {...props}
+        >
+          {children}
+        </div>
+      </TooltipProvider>
+    </SidebarContext.Provider>
+  )
+}
+
+function Sidebar({
+  side = "left",
+  variant = "sidebar",
+  collapsible = "offcanvas",
+  className,
+  children,
+  ...props
+}: React.ComponentProps<"div"> & {
+  side?: "left" | "right"
+  variant?: "sidebar" | "floating" | "inset"
+  collapsible?: "offcanvas" | "icon" | "none"
+}) {
+  const { isMobile, state, openMobile, setOpenMobile } = useSidebar()
+
+  if (collapsible === "none") {
+    return (
+      <div
+        data-slot="sidebar"
+        className={cn(
+          "bg-sidebar text-sidebar-foreground flex h-full w-(--sidebar-width) flex-col",
+          className
+        )}
+        {...props}
+      >
+        {children}
+      </div>
+    )
+  }
+
+  if (isMobile) {
+    return (
+      <Sheet open={openMobile} onOpenChange={setOpenMobile} {...props}>
+        <SheetContent
+          data-sidebar="sidebar"
+          data-slot="sidebar"
+          data-mobile="true"
+          className="bg-sidebar text-sidebar-foreground w-(--sidebar-width) p-0 [&>button]:hidden"
+          style={
+            {
+              "--sidebar-width": SIDEBAR_WIDTH_MOBILE,
+            } as React.CSSProperties
+          }
+          side={side}
+        >
+          <SheetHeader className="sr-only">
+            <SheetTitle>Sidebar</SheetTitle>
+            <SheetDescription>Displays the mobile sidebar.</SheetDescription>
+          </SheetHeader>
+          <div className="flex h-full w-full flex-col">{children}</div>
+        </SheetContent>
+      </Sheet>
+    )
+  }
+
+  return (
+    <div
+      className="group peer text-sidebar-foreground hidden md:block"
+      data-state={state}
+      data-collapsible={state === "collapsed" ? collapsible : ""}
+      data-variant={variant}
+      data-side={side}
+      data-slot="sidebar"
+    >
+      {/* This is what handles the sidebar gap on desktop */}
+      <div
+        data-slot="sidebar-gap"
+        className={cn(
+          "relative w-(--sidebar-width) bg-transparent transition-[width] duration-200 ease-linear",
+          "group-data-[collapsible=offcanvas]:w-0",
+          "group-data-[side=right]:rotate-180",
+          variant === "floating" || variant === "inset"
+            ? "group-data-[collapsible=icon]:w-[calc(var(--sidebar-width-icon)+(--spacing(4)))]"
+            : "group-data-[collapsible=icon]:w-(--sidebar-width-icon)"
+        )}
+      />
+      <div
+        data-slot="sidebar-container"
+        className={cn(
+          "fixed inset-y-0 z-10 hidden h-svh w-(--sidebar-width) transition-[left,right,width] duration-200 ease-linear md:flex",
+          side === "left"
+            ? "left-0 group-data-[collapsible=offcanvas]:left-[calc(var(--sidebar-width)*-1)]"
+            : "right-0 group-data-[collapsible=offcanvas]:right-[calc(var(--sidebar-width)*-1)]",
+          // Adjust the padding for floating and inset variants.
+          variant === "floating" || variant === "inset"
+            ? "p-2 group-data-[collapsible=icon]:w-[calc(var(--sidebar-width-icon)+(--spacing(4))+2px)]"
+            : "group-data-[collapsible=icon]:w-(--sidebar-width-icon) group-data-[side=left]:border-r group-data-[side=right]:border-l",
+          className
+        )}
+        {...props}
+      >
+        <div
+          data-sidebar="sidebar"
+          data-slot="sidebar-inner"
+          className="bg-sidebar group-data-[variant=floating]:border-sidebar-border flex h-full w-full flex-col group-data-[variant=floating]:rounded-lg group-data-[variant=floating]:border group-data-[variant=floating]:shadow-sm"
+        >
+          {children}
+        </div>
+      </div>
+    </div>
+  )
+}
+
+function SidebarTrigger({
+  className,
+  onClick,
+  ...props
+}: React.ComponentProps<typeof Button>) {
+  const { toggleSidebar } = useSidebar()
+
+  return (
+    <Button
+      data-sidebar="trigger"
+      data-slot="sidebar-trigger"
+      variant="ghost"
+      size="icon"
+      className={cn("size-7", className)}
+      onClick={(event) => {
+        onClick?.(event)
+        toggleSidebar()
+      }}
+      {...props}
+    >
+      <PanelLeftIcon />
+      <span className="sr-only">Toggle Sidebar</span>
+    </Button>
+  )
+}
+
+function SidebarRail({ className, ...props }: React.ComponentProps<"button">) {
+  const { toggleSidebar } = useSidebar()
+
+  return (
+    <button
+      data-sidebar="rail"
+      data-slot="sidebar-rail"
+      aria-label="Toggle Sidebar"
+      tabIndex={-1}
+      onClick={toggleSidebar}
+      title="Toggle Sidebar"
+      className={cn(
+        "hover:after:bg-sidebar-border absolute inset-y-0 z-20 hidden w-4 -translate-x-1/2 transition-all ease-linear group-data-[side=left]:-right-4 group-data-[side=right]:left-0 after:absolute after:inset-y-0 after:left-1/2 after:w-[2px] sm:flex",
+        "in-data-[side=left]:cursor-w-resize in-data-[side=right]:cursor-e-resize",
+        "[[data-side=left][data-state=collapsed]_&]:cursor-e-resize [[data-side=right][data-state=collapsed]_&]:cursor-w-resize",
+        "hover:group-data-[collapsible=offcanvas]:bg-sidebar group-data-[collapsible=offcanvas]:translate-x-0 group-data-[collapsible=offcanvas]:after:left-full",
+        "[[data-side=left][data-collapsible=offcanvas]_&]:-right-2",
+        "[[data-side=right][data-collapsible=offcanvas]_&]:-left-2",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function SidebarInset({ className, ...props }: React.ComponentProps<"main">) {
+  return (
+    <main
+      data-slot="sidebar-inset"
+      className={cn(
+        "bg-background relative flex w-full flex-1 flex-col",
+        "md:peer-data-[variant=inset]:m-2 md:peer-data-[variant=inset]:ml-0 md:peer-data-[variant=inset]:rounded-xl md:peer-data-[variant=inset]:shadow-sm md:peer-data-[variant=inset]:peer-data-[state=collapsed]:ml-2",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function SidebarInput({
+  className,
+  ...props
+}: React.ComponentProps<typeof Input>) {
+  return (
+    <Input
+      data-slot="sidebar-input"
+      data-sidebar="input"
+      className={cn("bg-background h-8 w-full shadow-none", className)}
+      {...props}
+    />
+  )
+}
+
+function SidebarHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="sidebar-header"
+      data-sidebar="header"
+      className={cn("flex flex-col gap-2 p-2", className)}
+      {...props}
+    />
+  )
+}
+
+function SidebarFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="sidebar-footer"
+      data-sidebar="footer"
+      className={cn("flex flex-col gap-2 p-2", className)}
+      {...props}
+    />
+  )
+}
+
+function SidebarSeparator({
+  className,
+  ...props
+}: React.ComponentProps<typeof Separator>) {
+  return (
+    <Separator
+      data-slot="sidebar-separator"
+      data-sidebar="separator"
+      className={cn("bg-sidebar-border mx-2 w-auto", className)}
+      {...props}
+    />
+  )
+}
+
+function SidebarContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="sidebar-content"
+      data-sidebar="content"
+      className={cn(
+        "flex min-h-0 flex-1 flex-col gap-2 overflow-auto group-data-[collapsible=icon]:overflow-hidden",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function SidebarGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="sidebar-group"
+      data-sidebar="group"
+      className={cn("relative flex w-full min-w-0 flex-col p-2", className)}
+      {...props}
+    />
+  )
+}
+
+function SidebarGroupLabel({
+  className,
+  asChild = false,
+  ...props
+}: React.ComponentProps<"div"> & { asChild?: boolean }) {
+  const Comp = asChild ? Slot.Root : "div"
+
+  return (
+    <Comp
+      data-slot="sidebar-group-label"
+      data-sidebar="group-label"
+      className={cn(
+        "text-sidebar-foreground/70 ring-sidebar-ring flex h-8 shrink-0 items-center rounded-md px-2 text-xs font-medium outline-hidden transition-[margin,opacity] duration-200 ease-linear focus-visible:ring-2 [&>svg]:size-4 [&>svg]:shrink-0",
+        "group-data-[collapsible=icon]:-mt-8 group-data-[collapsible=icon]:opacity-0",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function SidebarGroupAction({
+  className,
+  asChild = false,
+  ...props
+}: React.ComponentProps<"button"> & { asChild?: boolean }) {
+  const Comp = asChild ? Slot.Root : "button"
+
+  return (
+    <Comp
+      data-slot="sidebar-group-action"
+      data-sidebar="group-action"
+      className={cn(
+        "text-sidebar-foreground ring-sidebar-ring hover:bg-sidebar-accent hover:text-sidebar-accent-foreground absolute top-3.5 right-3 flex aspect-square w-5 items-center justify-center rounded-md p-0 outline-hidden transition-transform focus-visible:ring-2 [&>svg]:size-4 [&>svg]:shrink-0",
+        // Increases the hit area of the button on mobile.
+        "after:absolute after:-inset-2 md:after:hidden",
+        "group-data-[collapsible=icon]:hidden",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function SidebarGroupContent({
+  className,
+  ...props
+}: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="sidebar-group-content"
+      data-sidebar="group-content"
+      className={cn("w-full text-sm", className)}
+      {...props}
+    />
+  )
+}
+
+function SidebarMenu({ className, ...props }: React.ComponentProps<"ul">) {
+  return (
+    <ul
+      data-slot="sidebar-menu"
+      data-sidebar="menu"
+      className={cn("flex w-full min-w-0 flex-col gap-1", className)}
+      {...props}
+    />
+  )
+}
+
+function SidebarMenuItem({ className, ...props }: React.ComponentProps<"li">) {
+  return (
+    <li
+      data-slot="sidebar-menu-item"
+      data-sidebar="menu-item"
+      className={cn("group/menu-item relative", className)}
+      {...props}
+    />
+  )
+}
+
+const sidebarMenuButtonVariants = cva(
+  "peer/menu-button flex w-full items-center gap-2 overflow-hidden rounded-md p-2 text-left text-sm outline-hidden ring-sidebar-ring transition-[width,height,padding] hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:ring-2 active:bg-sidebar-accent active:text-sidebar-accent-foreground disabled:pointer-events-none disabled:opacity-50 group-has-data-[sidebar=menu-action]/menu-item:pr-8 aria-disabled:pointer-events-none aria-disabled:opacity-50 data-[active=true]:bg-sidebar-accent data-[active=true]:font-medium data-[active=true]:text-sidebar-accent-foreground data-[state=open]:hover:bg-sidebar-accent data-[state=open]:hover:text-sidebar-accent-foreground group-data-[collapsible=icon]:size-8! group-data-[collapsible=icon]:p-2! [&>span:last-child]:truncate [&>svg]:size-4 [&>svg]:shrink-0",
+  {
+    variants: {
+      variant: {
+        default: "hover:bg-sidebar-accent hover:text-sidebar-accent-foreground",
+        outline:
+          "bg-background shadow-[0_0_0_1px_hsl(var(--sidebar-border))] hover:bg-sidebar-accent hover:text-sidebar-accent-foreground hover:shadow-[0_0_0_1px_hsl(var(--sidebar-accent))]",
+      },
+      size: {
+        default: "h-8 text-sm",
+        sm: "h-7 text-xs",
+        lg: "h-12 text-sm group-data-[collapsible=icon]:p-0!",
+      },
+    },
+    defaultVariants: {
+      variant: "default",
+      size: "default",
+    },
+  }
+)
+
+function SidebarMenuButton({
+  asChild = false,
+  isActive = false,
+  variant = "default",
+  size = "default",
+  tooltip,
+  className,
+  ...props
+}: React.ComponentProps<"button"> & {
+  asChild?: boolean
+  isActive?: boolean
+  tooltip?: string | React.ComponentProps<typeof TooltipContent>
+} & VariantProps<typeof sidebarMenuButtonVariants>) {
+  const Comp = asChild ? Slot.Root : "button"
+  const { isMobile, state } = useSidebar()
+
+  const button = (
+    <Comp
+      data-slot="sidebar-menu-button"
+      data-sidebar="menu-button"
+      data-size={size}
+      data-active={isActive}
+      className={cn(sidebarMenuButtonVariants({ variant, size }), className)}
+      {...props}
+    />
+  )
+
+  if (!tooltip) {
+    return button
+  }
+
+  if (typeof tooltip === "string") {
+    tooltip = {
+      children: tooltip,
+    }
+  }
+
+  return (
+    <Tooltip>
+      <TooltipTrigger asChild>{button}</TooltipTrigger>
+      <TooltipContent
+        side="right"
+        align="center"
+        hidden={state !== "collapsed" || isMobile}
+        {...tooltip}
+      />
+    </Tooltip>
+  )
+}
+
+function SidebarMenuAction({
+  className,
+  asChild = false,
+  showOnHover = false,
+  ...props
+}: React.ComponentProps<"button"> & {
+  asChild?: boolean
+  showOnHover?: boolean
+}) {
+  const Comp = asChild ? Slot.Root : "button"
+
+  return (
+    <Comp
+      data-slot="sidebar-menu-action"
+      data-sidebar="menu-action"
+      className={cn(
+        "text-sidebar-foreground ring-sidebar-ring hover:bg-sidebar-accent hover:text-sidebar-accent-foreground peer-hover/menu-button:text-sidebar-accent-foreground absolute top-1.5 right-1 flex aspect-square w-5 items-center justify-center rounded-md p-0 outline-hidden transition-transform focus-visible:ring-2 [&>svg]:size-4 [&>svg]:shrink-0",
+        // Increases the hit area of the button on mobile.
+        "after:absolute after:-inset-2 md:after:hidden",
+        "peer-data-[size=sm]/menu-button:top-1",
+        "peer-data-[size=default]/menu-button:top-1.5",
+        "peer-data-[size=lg]/menu-button:top-2.5",
+        "group-data-[collapsible=icon]:hidden",
+        showOnHover &&
+          "peer-data-[active=true]/menu-button:text-sidebar-accent-foreground group-focus-within/menu-item:opacity-100 group-hover/menu-item:opacity-100 data-[state=open]:opacity-100 md:opacity-0",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function SidebarMenuBadge({
+  className,
+  ...props
+}: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="sidebar-menu-badge"
+      data-sidebar="menu-badge"
+      className={cn(
+        "text-sidebar-foreground pointer-events-none absolute right-1 flex h-5 min-w-5 items-center justify-center rounded-md px-1 text-xs font-medium tabular-nums select-none",
+        "peer-hover/menu-button:text-sidebar-accent-foreground peer-data-[active=true]/menu-button:text-sidebar-accent-foreground",
+        "peer-data-[size=sm]/menu-button:top-1",
+        "peer-data-[size=default]/menu-button:top-1.5",
+        "peer-data-[size=lg]/menu-button:top-2.5",
+        "group-data-[collapsible=icon]:hidden",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function SidebarMenuSkeleton({
+  className,
+  showIcon = false,
+  ...props
+}: React.ComponentProps<"div"> & {
+  showIcon?: boolean
+}) {
+  // Random width between 50 to 90%.
+  const width = React.useMemo(() => {
+    return `${Math.floor(Math.random() * 40) + 50}%`
+  }, [])
+
+  return (
+    <div
+      data-slot="sidebar-menu-skeleton"
+      data-sidebar="menu-skeleton"
+      className={cn("flex h-8 items-center gap-2 rounded-md px-2", className)}
+      {...props}
+    >
+      {showIcon && (
+        <Skeleton
+          className="size-4 rounded-md"
+          data-sidebar="menu-skeleton-icon"
+        />
+      )}
+      <Skeleton
+        className="h-4 max-w-(--skeleton-width) flex-1"
+        data-sidebar="menu-skeleton-text"
+        style={
+          {
+            "--skeleton-width": width,
+          } as React.CSSProperties
+        }
+      />
+    </div>
+  )
+}
+
+function SidebarMenuSub({ className, ...props }: React.ComponentProps<"ul">) {
+  return (
+    <ul
+      data-slot="sidebar-menu-sub"
+      data-sidebar="menu-sub"
+      className={cn(
+        "border-sidebar-border mx-3.5 flex min-w-0 translate-x-px flex-col gap-1 border-l px-2.5 py-0.5",
+        "group-data-[collapsible=icon]:hidden",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function SidebarMenuSubItem({
+  className,
+  ...props
+}: React.ComponentProps<"li">) {
+  return (
+    <li
+      data-slot="sidebar-menu-sub-item"
+      data-sidebar="menu-sub-item"
+      className={cn("group/menu-sub-item relative", className)}
+      {...props}
+    />
+  )
+}
+
+function SidebarMenuSubButton({
+  asChild = false,
+  size = "md",
+  isActive = false,
+  className,
+  ...props
+}: React.ComponentProps<"a"> & {
+  asChild?: boolean
+  size?: "sm" | "md"
+  isActive?: boolean
+}) {
+  const Comp = asChild ? Slot.Root : "a"
+
+  return (
+    <Comp
+      data-slot="sidebar-menu-sub-button"
+      data-sidebar="menu-sub-button"
+      data-size={size}
+      data-active={isActive}
+      className={cn(
+        "text-sidebar-foreground ring-sidebar-ring hover:bg-sidebar-accent hover:text-sidebar-accent-foreground active:bg-sidebar-accent active:text-sidebar-accent-foreground [&>svg]:text-sidebar-accent-foreground flex h-7 min-w-0 -translate-x-px items-center gap-2 overflow-hidden rounded-md px-2 outline-hidden focus-visible:ring-2 disabled:pointer-events-none disabled:opacity-50 aria-disabled:pointer-events-none aria-disabled:opacity-50 [&>span:last-child]:truncate [&>svg]:size-4 [&>svg]:shrink-0",
+        "data-[active=true]:bg-sidebar-accent data-[active=true]:text-sidebar-accent-foreground",
+        size === "sm" && "text-xs",
+        size === "md" && "text-sm",
+        "group-data-[collapsible=icon]:hidden",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+export {
+  Sidebar,
+  SidebarContent,
+  SidebarFooter,
+  SidebarGroup,
+  SidebarGroupAction,
+  SidebarGroupContent,
+  SidebarGroupLabel,
+  SidebarHeader,
+  SidebarInput,
+  SidebarInset,
+  SidebarMenu,
+  SidebarMenuAction,
+  SidebarMenuBadge,
+  SidebarMenuButton,
+  SidebarMenuItem,
+  SidebarMenuSkeleton,
+  SidebarMenuSub,
+  SidebarMenuSubButton,
+  SidebarMenuSubItem,
+  SidebarProvider,
+  SidebarRail,
+  SidebarSeparator,
+  SidebarTrigger,
+  useSidebar,
+}
--- a/components/ui/skeleton.tsx
+++ b/components/ui/skeleton.tsx
@@ -0,0 +1,13 @@
+import { cn } from "@/lib/utils"
+
+function Skeleton({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="skeleton"
+      className={cn("bg-accent animate-pulse rounded-md", className)}
+      {...props}
+    />
+  )
+}
+
+export { Skeleton }
--- a/components/ui/switch.tsx
+++ b/components/ui/switch.tsx
@@ -0,0 +1,29 @@
+"use client"
+
+import * as React from "react"
+import * as SwitchPrimitives from "@radix-ui/react-switch"
+
+import { cn } from "@/lib/utils"
+
+const Switch = React.forwardRef<
+    React.ElementRef<typeof SwitchPrimitives.Root>,
+    React.ComponentPropsWithoutRef<typeof SwitchPrimitives.Root>
+>(({ className, ...props }, ref) => (
+    <SwitchPrimitives.Root
+        className={cn(
+            "peer inline-flex h-5 w-9 shrink-0 cursor-pointer items-center rounded-full border-2 border-transparent shadow-sm transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 focus-visible:ring-offset-background disabled:cursor-not-allowed disabled:opacity-50 data-[state=checked]:bg-primary data-[state=unchecked]:bg-input",
+            className
+        )}
+        {...props}
+        ref={ref}
+    >
+        <SwitchPrimitives.Thumb
+            className={cn(
+                "pointer-events-none block h-4 w-4 rounded-full bg-background shadow-lg ring-0 transition-transform data-[state=checked]:translate-x-4 data-[state=unchecked]:translate-x-0"
+            )}
+        />
+    </SwitchPrimitives.Root>
+))
+Switch.displayName = SwitchPrimitives.Root.displayName
+
+export { Switch }
--- a/components/ui/table.tsx
+++ b/components/ui/table.tsx
@@ -0,0 +1,116 @@
+"use client"
+
+import * as React from "react"
+
+import { cn } from "@/lib/utils"
+
+function Table({ className, ...props }: React.ComponentProps<"table">) {
+  return (
+    <div
+      data-slot="table-container"
+      className="relative w-full overflow-x-auto"
+    >
+      <table
+        data-slot="table"
+        className={cn("w-full caption-bottom text-sm", className)}
+        {...props}
+      />
+    </div>
+  )
+}
+
+function TableHeader({ className, ...props }: React.ComponentProps<"thead">) {
+  return (
+    <thead
+      data-slot="table-header"
+      className={cn("[&_tr]:border-b", className)}
+      {...props}
+    />
+  )
+}
+
+function TableBody({ className, ...props }: React.ComponentProps<"tbody">) {
+  return (
+    <tbody
+      data-slot="table-body"
+      className={cn("[&_tr:last-child]:border-0", className)}
+      {...props}
+    />
+  )
+}
+
+function TableFooter({ className, ...props }: React.ComponentProps<"tfoot">) {
+  return (
+    <tfoot
+      data-slot="table-footer"
+      className={cn(
+        "bg-muted/50 border-t font-medium [&>tr]:last:border-b-0",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function TableRow({ className, ...props }: React.ComponentProps<"tr">) {
+  return (
+    <tr
+      data-slot="table-row"
+      className={cn(
+        "hover:bg-muted/50 data-[state=selected]:bg-muted border-b transition-colors",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function TableHead({ className, ...props }: React.ComponentProps<"th">) {
+  return (
+    <th
+      data-slot="table-head"
+      className={cn(
+        "text-foreground h-10 px-2 text-left align-middle font-medium whitespace-nowrap [&:has([role=checkbox])]:pr-0 [&>[role=checkbox]]:translate-y-[2px]",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function TableCell({ className, ...props }: React.ComponentProps<"td">) {
+  return (
+    <td
+      data-slot="table-cell"
+      className={cn(
+        "p-2 align-middle whitespace-nowrap [&:has([role=checkbox])]:pr-0 [&>[role=checkbox]]:translate-y-[2px]",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function TableCaption({
+  className,
+  ...props
+}: React.ComponentProps<"caption">) {
+  return (
+    <caption
+      data-slot="table-caption"
+      className={cn("text-muted-foreground mt-4 text-sm", className)}
+      {...props}
+    />
+  )
+}
+
+export {
+  Table,
+  TableHeader,
+  TableBody,
+  TableFooter,
+  TableHead,
+  TableRow,
+  TableCell,
+  TableCaption,
+}
--- a/components/ui/tooltip.tsx
+++ b/components/ui/tooltip.tsx
@@ -0,0 +1,61 @@
+"use client"
+
+import * as React from "react"
+import { Tooltip as TooltipPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function TooltipProvider({
+  delayDuration = 0,
+  ...props
+}: React.ComponentProps<typeof TooltipPrimitive.Provider>) {
+  return (
+    <TooltipPrimitive.Provider
+      data-slot="tooltip-provider"
+      delayDuration={delayDuration}
+      {...props}
+    />
+  )
+}
+
+function Tooltip({
+  ...props
+}: React.ComponentProps<typeof TooltipPrimitive.Root>) {
+  return (
+    <TooltipProvider>
+      <TooltipPrimitive.Root data-slot="tooltip" {...props} />
+    </TooltipProvider>
+  )
+}
+
+function TooltipTrigger({
+  ...props
+}: React.ComponentProps<typeof TooltipPrimitive.Trigger>) {
+  return <TooltipPrimitive.Trigger data-slot="tooltip-trigger" {...props} />
+}
+
+function TooltipContent({
+  className,
+  sideOffset = 0,
+  children,
+  ...props
+}: React.ComponentProps<typeof TooltipPrimitive.Content>) {
+  return (
+    <TooltipPrimitive.Portal>
+      <TooltipPrimitive.Content
+        data-slot="tooltip-content"
+        sideOffset={sideOffset}
+        className={cn(
+          "bg-foreground text-background animate-in fade-in-0 zoom-in-95 data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=closed]:zoom-out-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 w-fit origin-(--radix-tooltip-content-transform-origin) rounded-md px-3 py-1.5 text-xs text-balance",
+          className
+        )}
+        {...props}
+      >
+        {children}
+        <TooltipPrimitive.Arrow className="bg-foreground fill-foreground z-50 size-2.5 translate-y-[calc(-50%_-_2px)] rotate-45 rounded-[2px]" />
+      </TooltipPrimitive.Content>
+    </TooltipPrimitive.Portal>
+  )
+}
+
+export { Tooltip, TooltipTrigger, TooltipContent, TooltipProvider }
--- a/components/users/deleted-user-table.tsx
+++ b/components/users/deleted-user-table.tsx
@@ -0,0 +1,90 @@
+import {
+    Table,
+    TableBody,
+    TableCell,
+    TableHead,
+    TableHeader,
+    TableRow,
+} from "@/components/ui/table";
+import { Avatar, AvatarFallback, AvatarImage } from "@/components/ui/avatar";
+import { Button } from "@/components/ui/button";
+import { RefreshCcw, ShieldAlert } from "lucide-react";
+import { User } from "@/lib/features/auth/authSlice";
+import { getAvatarUrl } from "@/lib/utils";
+
+interface DeletedUserTableProps {
+    users: (User & { deleted_at?: string })[];
+    onRestore: (id: string) => void;
+    onHardDelete: (id: string) => void;
+}
+
+export function DeletedUserTable({ users, onRestore, onHardDelete }: DeletedUserTableProps) {
+    return (
+        <div className="rounded-md border border-destructive/20 bg-destructive/5">
+            <Table>
+                <TableHeader>
+                    <TableRow>
+                        <TableHead className="w-14">Avatar</TableHead>
+                        <TableHead>Username (Silinmiş)</TableHead>
+                        <TableHead>Email</TableHead>
+                        <TableHead>Silinme Tarihi</TableHead>
+                        <TableHead className="text-right">İşlemler</TableHead>
+                    </TableRow>
+                </TableHeader>
+                <TableBody>
+                    {users.length === 0 ? (
+                        <TableRow>
+                            <TableCell colSpan={5} className="h-24 text-center text-muted-foreground">
+                                Çöp kutusu boş.
+                            </TableCell>
+                        </TableRow>
+                    ) : (
+                        users.map((user) => (
+                            <TableRow key={user.id}>
+                                <TableCell>
+                                    <Avatar className="h-9 w-9 grayscale opacity-50">
+                                        <AvatarImage src={getAvatarUrl(user.avatar_url)} alt={user.username} />
+                                        <AvatarFallback className="text-xs">
+                                            {user.username?.slice(0, 2).toUpperCase() || "?"}
+                                        </AvatarFallback>
+                                    </Avatar>
+                                </TableCell>
+                                <TableCell className="font-medium text-muted-foreground line-through">
+                                    {user.username}
+                                </TableCell>
+                                <TableCell className="text-muted-foreground">{user.email}</TableCell>
+                                <TableCell className="text-muted-foreground text-sm">
+                                    {user.deleted_at ? new Date(user.deleted_at).toLocaleString('tr-TR') : "-"}
+                                </TableCell>
+                                <TableCell className="text-right">
+                                    <div className="inline-flex rounded-md border border-input bg-background [&>button]:rounded-none [&>button:first-child]:rounded-l-md [&>button:last-child]:rounded-r-md [&>button:first-child]:border-r [&>button:first-child]:border-input">
+                                        <Button
+                                            variant="ghost"
+                                            size="icon"
+                                            className="h-9 w-9 text-green-600 hover:text-green-700 hover:bg-green-100 dark:hover:bg-green-900/20"
+                                            onClick={() => onRestore(user.id)}
+                                            title="Geri Yükle"
+                                        >
+                                            <RefreshCcw className="h-4 w-4" />
+                                            <span className="sr-only">Geri Yükle</span>
+                                        </Button>
+                                        <Button
+                                            variant="ghost"
+                                            size="icon"
+                                            className="h-9 w-9 text-destructive hover:text-destructive hover:bg-destructive/10"
+                                            onClick={() => onHardDelete(user.id)}
+                                            title="Kalıcı Sil (Hard)"
+                                        >
+                                            <ShieldAlert className="h-4 w-4" />
+                                            <span className="sr-only">Kalıcı Sil</span>
+                                        </Button>
+                                    </div>
+                                </TableCell>
+                            </TableRow>
+                        ))
+                    )}
+                </TableBody>
+            </Table>
+        </div>
+    );
+}
--- a/components/users/user-dialog.tsx
+++ b/components/users/user-dialog.tsx
@@ -0,0 +1,190 @@
+import { Button } from "@/components/ui/button";
+import {
+    Dialog,
+    DialogContent,
+    DialogDescription,
+    DialogFooter,
+    DialogHeader,
+    DialogTitle,
+} from "@/components/ui/dialog";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import {
+    Select,
+    SelectContent,
+    SelectItem,
+    SelectTrigger,
+    SelectValue,
+} from "@/components/ui/select";
+import { Avatar, AvatarFallback, AvatarImage } from "@/components/ui/avatar";
+import { CreateUserRequest, UpdateUserRequest } from "@/lib/features/users/usersSlice";
+import { User } from "@/lib/features/auth/authSlice";
+import { getAvatarUrl } from "@/lib/utils";
+import { useState, useEffect } from "react";
+
+interface UserDialogProps {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    user?: User | null;
+    onSubmit: (data: CreateUserRequest | UpdateUserRequest) => void;
+    isLoading: boolean;
+}
+
+export function UserDialog({ open, onOpenChange, user, onSubmit, isLoading }: UserDialogProps) {
+    const [username, setUsername] = useState("");
+    const [email, setEmail] = useState("");
+    const [password, setPassword] = useState("");
+    const [role, setRole] = useState("user");
+    const [avatar, setAvatar] = useState<File | null>(null);
+    const [avatarPreview, setAvatarPreview] = useState<string | null>(null);
+
+    useEffect(() => {
+        if (user) {
+            setUsername(user.username);
+            setEmail(user.email);
+            setPassword("");
+            setRole(user.roles?.[0]?.name || "user");
+            setAvatar(null);
+            setAvatarPreview(null);
+        } else {
+            setUsername("");
+            setEmail("");
+            setPassword("");
+            setRole("user");
+            setAvatar(null);
+            setAvatarPreview(null);
+        }
+    }, [user, open]);
+
+    const onAvatarChange = (e: React.ChangeEvent<HTMLInputElement>) => {
+        const file = e.target.files?.[0] || null;
+        setAvatar(file);
+        if (avatarPreview) URL.revokeObjectURL(avatarPreview);
+        setAvatarPreview(file ? URL.createObjectURL(file) : null);
+    };
+
+    const handleSubmit = (e: React.FormEvent) => {
+        e.preventDefault();
+
+        const roles = [role];
+
+        if (user) {
+            const updateData: UpdateUserRequest = {
+                id: user.id,
+                username,
+                email,
+                roles
+            };
+            if (password) updateData.password = password;
+            if (avatar) updateData.avatar = avatar;
+            onSubmit(updateData);
+        } else {
+            const createData: CreateUserRequest = {
+                username,
+                email,
+                password,
+                roles,
+                avatar: avatar || undefined
+            };
+            onSubmit(createData);
+        }
+    };
+
+    return (
+        <Dialog open={open} onOpenChange={onOpenChange}>
+            <DialogContent className="sm:max-w-[425px]">
+                <DialogHeader>
+                    <DialogTitle>{user ? "Kullanıcıyı Düzenle" : "Yeni Kullanıcı Ekle"}</DialogTitle>
+                    <DialogDescription>
+                        {user ? "Kullanıcı bilgilerini güncelleyin." : "Yeni bir kullanıcı oluşturun."}
+                    </DialogDescription>
+                </DialogHeader>
+                <form onSubmit={handleSubmit}>
+                    <div className="grid gap-4 py-4">
+                        <div className="grid grid-cols-4 items-center gap-4">
+                            <Label htmlFor="username" className="text-right">
+                                Username
+                            </Label>
+                            <Input
+                                id="username"
+                                value={username}
+                                onChange={(e) => setUsername(e.target.value)}
+                                className="col-span-3"
+                                required
+                            />
+                        </div>
+                        <div className="grid grid-cols-4 items-center gap-4">
+                            <Label htmlFor="email" className="text-right">
+                                Email
+                            </Label>
+                            <Input
+                                id="email"
+                                type="email"
+                                value={email}
+                                onChange={(e) => setEmail(e.target.value)}
+                                className="col-span-3"
+                                required
+                            />
+                        </div>
+                        <div className="grid grid-cols-4 items-center gap-4">
+                            <Label htmlFor="password" className="text-right">
+                                Şifre
+                            </Label>
+                            <Input
+                                id="password"
+                                type="password"
+                                value={password}
+                                onChange={(e) => setPassword(e.target.value)}
+                                className="col-span-3"
+                                placeholder={user ? "Değiştirmek için girin" : "Şifre"}
+                                required={!user}
+                            />
+                        </div>
+                        <div className="grid grid-cols-4 items-center gap-4">
+                            <Label htmlFor="role" className="text-right">
+                                Rol
+                            </Label>
+                            <Select onValueChange={setRole} value={role}>
+                                <SelectTrigger className="w-[180px]">
+                                    <SelectValue placeholder="Rol Seçin" />
+                                </SelectTrigger>
+                                <SelectContent>
+                                    <SelectItem value="user">User</SelectItem>
+                                    <SelectItem value="admin">Admin</SelectItem>
+                                </SelectContent>
+                            </Select>
+                        </div>
+                        <div className="grid grid-cols-4 items-center gap-4">
+                            <Label htmlFor="avatar" className="text-right">
+                                Avatar
+                            </Label>
+                            <div className="col-span-3 flex items-center gap-4">
+                                <Avatar className="h-14 w-14">
+                                    <AvatarImage
+                                        src={avatarPreview ?? (user ? getAvatarUrl(user.avatar_url) : undefined)}
+                                        alt={username || "Avatar"}
+                                    />
+                                    <AvatarFallback className="text-lg">
+                                        {username?.slice(0, 2).toUpperCase() || "?"}
+                                    </AvatarFallback>
+                                </Avatar>
+                                <Input
+                                    id="avatar"
+                                    type="file"
+                                    accept="image/*"
+                                    onChange={onAvatarChange}
+                                    className="cursor-pointer"
+                                />
+                            </div>
+                        </div>
+                    </div>
+                    <DialogFooter>
+                        <Button type="submit" disabled={isLoading}>
+                            {isLoading ? "Kaydediliyor..." : "Kaydet"}
+                        </Button>
+                    </DialogFooter>
+                </form>
+            </DialogContent>
+        </Dialog>
+    );
+}
--- a/components/users/user-table.tsx
+++ b/components/users/user-table.tsx
@@ -0,0 +1,99 @@
+import {
+    Table,
+    TableBody,
+    TableCell,
+    TableHead,
+    TableHeader,
+    TableRow,
+} from "@/components/ui/table";
+import { Avatar, AvatarFallback, AvatarImage } from "@/components/ui/avatar";
+import { Button } from "@/components/ui/button";
+import { Edit, Trash2, ShieldAlert } from "lucide-react";
+import { User } from "@/lib/features/auth/authSlice";
+import { getAvatarUrl } from "@/lib/utils";
+
+interface UserTableProps {
+    users: User[];
+    onEdit: (user: User) => void;
+    onDelete: (id: string) => void;
+    onHardDelete: (id: string) => void;
+}
+
+export function UserTable({ users, onEdit, onDelete, onHardDelete }: UserTableProps) {
+    return (
+        <div className="rounded-md border">
+            <Table>
+                <TableHeader>
+                    <TableRow>
+                        <TableHead className="w-14">Avatar</TableHead>
+                        <TableHead>Username</TableHead>
+                        <TableHead>Email</TableHead>
+                        <TableHead>Roller</TableHead>
+                        <TableHead className="text-right">İşlemler</TableHead>
+                    </TableRow>
+                </TableHeader>
+                <TableBody>
+                    {users.length === 0 ? (
+                        <TableRow>
+                            <TableCell colSpan={5} className="h-24 text-center">
+                                Kullanıcı bulunamadı.
+                            </TableCell>
+                        </TableRow>
+                    ) : (
+                        users.map((user) => (
+                            <TableRow key={user.id}>
+                                <TableCell>
+                                    <Avatar className="h-9 w-9">
+                                        <AvatarImage src={getAvatarUrl(user.avatar_url)} alt={user.username} />
+                                        <AvatarFallback className="text-xs">
+                                            {user.username?.slice(0, 2).toUpperCase() || "?"}
+                                        </AvatarFallback>
+                                    </Avatar>
+                                </TableCell>
+                                <TableCell className="font-medium">{user.username}</TableCell>
+                                <TableCell>{user.email}</TableCell>
+                                <TableCell>
+                                    {user.roles?.map((r) => r.name).join(", ") || "-"}
+                                </TableCell>
+                                <TableCell className="text-right">
+                                    <div className="inline-flex rounded-md border border-input bg-background [&>button]:rounded-none [&>button:first-child]:rounded-l-md [&>button:last-child]:rounded-r-md [&>button]:border-r [&>button:last-child]:border-r-0 [&>button]:border-input">
+                                        <Button
+                                            variant="ghost"
+                                            size="icon"
+                                            onClick={() => onEdit(user)}
+                                            className="h-9 w-9"
+                                            title="Düzenle"
+                                        >
+                                            <Edit className="h-4 w-4" />
+                                            <span className="sr-only">Düzenle</span>
+                                        </Button>
+                                        <Button
+                                            variant="ghost"
+                                            size="icon"
+                                            className="h-9 w-9 text-orange-500 hover:text-orange-600 hover:bg-orange-100 dark:hover:bg-orange-900/20"
+                                            onClick={() => onDelete(user.id)}
+                                            title="Sil (Soft)"
+                                        >
+                                            <Trash2 className="h-4 w-4" />
+                                            <span className="sr-only">Sil</span>
+                                        </Button>
+                                        <Button
+                                            variant="ghost"
+                                            size="icon"
+                                            className="h-9 w-9 text-destructive hover:text-destructive hover:bg-destructive/10"
+                                            onClick={() => onHardDelete(user.id)}
+                                            title="Kalıcı Sil (Hard)"
+                                        >
+                                            <ShieldAlert className="h-4 w-4" />
+                                            <span className="sr-only">Kalıcı Sil</span>
+                                        </Button>
+                                    </div>
+                                </TableCell>
+                            </TableRow>
+                        ))
+                    )}
+                </TableBody>
+            </Table>
+        </div>
+    );
+}
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -0,0 +1,27 @@
+services:
+  next-go-blog:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        NEXT_PUBLIC_API_BASE: ${NEXT_PUBLIC_API_BASE}
+    container_name: next-go-blog
+    restart: always
+    #ports:
+    #  - "${PORT:-3000}:3000"
+    #env_file:
+    #  - .env
+    environment:
+      - NODE_ENV=production
+    healthcheck:
+      test: [ "CMD", "wget", "-q", "--spider", "http://127.0.0.1:3000" ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+    networks:
+      - dokploy-network
+
+networks:
+  dokploy-network:
+    external: true
--- a/docs/API_ENDPOINTS.md
+++ b/docs/API_ENDPOINTS.md
@@ -0,0 +1,590 @@
+# 🌐 GAuth-Central API Endpoints
+
+## Base URL
+
+```
+Local Development: http://localhost:8080
+Production: http://your-domain.com
+```
+
+## API Version: v1
+
+Base Path: `/v1`
+
+---
+
+## 📍 Endpoints
+
+### Public Endpoints (No Authentication Required)
+
+#### 1. Homepage
+```
+GET /
+Content-Type: text/html
+```
+
+**Response:** HTML homepage
+
+---
+
+#### 2. Swagger Documentation
+```
+GET /docs/index.html
+Content-Type: text/html
+```
+
+**Response:** Swagger UI
+
+---
+
+### Authentication Endpoints
+
+#### 3. Register User
+```
+POST /v1/auth/register
+Content-Type: application/json
+Rate Limit: 3 requests / 5 minutes
+```
+
+**Request Body:**
+```json
+{
+  "email": "user@example.com",
+  "password": "SecurePass123!",
+  "user_name": "username"
+}
+```
+
+**Response (201):**
+```json
+{
+  "message": "User created successfully. Please verify your email.",
+  "user": {
+    "id": "uuid",
+    "email": "user@example.com",
+    "user_name": "username"
+  }
+}
+```
+
+**cURL Example:**
+```bash
+curl -X POST http://localhost:8080/v1/auth/register \
+  -H "Content-Type: application/json" \
+  -d '{
+    "email": "user@example.com",
+    "password": "SecurePass123!",
+    "user_name": "username"
+  }'
+```
+
+---
+
+#### 4. Login
+```
+POST /v1/auth/login
+Content-Type: application/json
+Rate Limit: 5 requests / 1 minute
+```
+
+**Request Body:**
+```json
+{
+  "email": "user@example.com",
+  "password": "SecurePass123!"
+}
+```
+
+**Response (200):**
+```json
+{
+  "access_token": "eyJhbGciOiJIUzI1NiIs...",
+  "refresh_token": "eyJhbGciOiJIUzI1NiIs...",
+  "user": {
+    "id": "uuid",
+    "email": "user@example.com",
+    "user_name": "username"
+  }
+}
+```
+
+**cURL Example:**
+```bash
+curl -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{
+    "email": "user@example.com",
+    "password": "SecurePass123!"
+  }'
+```
+
+---
+
+#### 5. Email Verification
+```
+GET /v1/auth/verify-email?token={verification_token}
+```
+
+**Query Parameters:**
+- `token` (required): Email verification token
+
+**Response (200):**
+```json
+{
+  "message": "Email verified successfully"
+}
+```
+
+**cURL Example:**
+```bash
+curl -X GET "http://localhost:8080/v1/auth/verify-email?token=abc123xyz"
+```
+
+---
+
+#### 6. OAuth Login (Google/GitHub)
+```
+GET /v1/auth/{provider}
+```
+
+**Parameters:**
+- `provider`: `google` or `github`
+
+**Example:**
+```
+http://localhost:8080/v1/auth/google
+http://localhost:8080/v1/auth/github
+```
+
+**Response:** Redirects to OAuth provider
+
+---
+
+#### 7. OAuth Callback
+```
+GET /v1/auth/{provider}/callback
+```
+
+**Parameters:**
+- `provider`: `google` or `github`
+
+**Query Parameters:** (Provided by OAuth provider)
+- `code`
+- `state`
+
+**Response (200):**
+```json
+{
+  "access_token": "eyJhbGciOiJIUzI1NiIs...",
+  "refresh_token": "eyJhbGciOiJIUzI1NiIs...",
+  "user": {
+    "id": "uuid",
+    "email": "user@example.com",
+    "user_name": "username"
+  }
+}
+```
+
+---
+
+#### 8. Refresh Token
+```
+POST /v1/auth/refresh
+Content-Type: application/json
+```
+
+**Request Body:**
+```json
+{
+  "refresh_token": "eyJhbGciOiJIUzI1NiIs..."
+}
+```
+
+**Response (200):**
+```json
+{
+  "access_token": "eyJhbGciOiJIUzI1NiIs...",
+  "refresh_token": "eyJhbGciOiJIUzI1NiIs..."
+}
+```
+
+**cURL Example:**
+```bash
+curl -X POST http://localhost:8080/v1/auth/refresh \
+  -H "Content-Type: application/json" \
+  -d '{
+    "refresh_token": "your_refresh_token_here"
+  }'
+```
+
+---
+
+### Protected Endpoints (Authentication Required)
+
+**Note:** All protected endpoints require the `Authorization` header:
+```
+Authorization: Bearer {access_token}
+```
+
+---
+
+#### 9. Get Current User
+```
+GET /v1/auth/me
+Authorization: Bearer {access_token}
+```
+
+**Response (200):**
+```json
+{
+  "id": "uuid",
+  "email": "user@example.com",
+  "user_name": "username",
+  "email_verified": true,
+  "created_at": "2026-02-04T00:00:00Z"
+}
+```
+
+**cURL Example:**
+```bash
+curl -X GET http://localhost:8080/v1/auth/me \
+  -H "Authorization: Bearer your_access_token_here"
+```
+
+---
+
+#### 10. Validate Token
+```
+GET /v1/auth/validate
+Authorization: Bearer {access_token}
+```
+
+**Response (200):**
+```json
+{
+  "message": "Token is valid",
+  "user_id": "uuid",
+  "email": "user@example.com"
+}
+```
+
+**cURL Example:**
+```bash
+curl -X GET http://localhost:8080/v1/auth/validate \
+  -H "Authorization: Bearer your_access_token_here"
+```
+
+---
+
+## 🔒 Authentication Flow
+
+### Standard Email/Password Flow
+
+```
+1. Register
+   POST /v1/auth/register
+   ↓
+2. Verify Email
+   GET /v1/auth/verify-email?token=...
+   ↓
+3. Login
+   POST /v1/auth/login
+   ↓
+4. Access Protected Resources
+   GET /v1/auth/me (with Bearer token)
+```
+
+### OAuth Flow
+
+```
+1. Initiate OAuth
+   GET /v1/auth/google (or /github)
+   ↓
+2. User authorizes on OAuth provider
+   ↓
+3. Callback with code
+   GET /v1/auth/google/callback?code=...
+   ↓
+4. Access Protected Resources
+   GET /v1/auth/me (with Bearer token)
+```
+
+---
+
+## 📝 Error Responses
+
+### Standard Error Format
+
+```json
+{
+  "error": "Error message description"
+}
+```
+
+### Common Error Codes
+
+| Status Code | Meaning |
+|------------|---------|
+| 400 | Bad Request - Invalid input |
+| 401 | Unauthorized - Invalid or missing token |
+| 403 | Forbidden - Valid token but insufficient permissions |
+| 404 | Not Found - Resource not found |
+| 429 | Too Many Requests - Rate limit exceeded |
+| 500 | Internal Server Error |
+
+---
+
+## 🚦 Rate Limits
+
+| Endpoint | Limit | Time Window |
+|----------|-------|-------------|
+| POST /v1/auth/register | 3 requests | 5 minutes |
+| POST /v1/auth/login | 5 requests | 1 minute |
+| All API endpoints | 100 requests | 1 minute |
+
+**Rate Limit Headers:**
+```
+X-RateLimit-Limit: 100
+X-RateLimit-Remaining: 95
+X-RateLimit-Reset: 1643980800
+```
+
+---
+
+## 🔑 Authentication Headers
+
+### Access Token
+```
+Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
+```
+
+### CORS Headers
+```
+Origin: http://localhost:3000
+Content-Type: application/json
+```
+
+---
+
+## 🌍 CORS Configuration
+
+**Allowed Origins:**
+- `http://localhost:3000` (development)
+
+**Allowed Methods:**
+- GET, POST, PUT, PATCH, DELETE, OPTIONS
+
+**Allowed Headers:**
+- Origin, Content-Type, Accept, Authorization
+
+**Credentials:**
+- Enabled (`Access-Control-Allow-Credentials: true`)
+
+---
+
+## 📦 Response Examples
+
+### Successful Response
+```json
+{
+  "message": "Operation successful",
+  "data": { ... }
+}
+```
+
+### Error Response
+```json
+{
+  "error": "Invalid credentials"
+}
+```
+
+### Validation Error
+```json
+{
+  "error": "Validation failed: email is required"
+}
+```
+
+---
+
+## 🔗 Frontend Integration
+
+### JavaScript/TypeScript Example
+
+```javascript
+// Base URL
+const API_BASE_URL = 'http://localhost:8080';
+
+// Login
+async function login(email, password) {
+  const response = await fetch(`${API_BASE_URL}/v1/auth/login`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+    },
+    credentials: 'include',
+    body: JSON.stringify({ email, password })
+  });
+  
+  const data = await response.json();
+  
+  if (response.ok) {
+    localStorage.setItem('access_token', data.access_token);
+    localStorage.setItem('refresh_token', data.refresh_token);
+    return data;
+  } else {
+    throw new Error(data.error);
+  }
+}
+
+// Get Current User (Protected)
+async function getCurrentUser() {
+  const token = localStorage.getItem('access_token');
+  
+  const response = await fetch(`${API_BASE_URL}/v1/auth/me`, {
+    method: 'GET',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+      'Content-Type': 'application/json',
+    },
+    credentials: 'include'
+  });
+  
+  const data = await response.json();
+  
+  if (response.ok) {
+    return data;
+  } else {
+    throw new Error(data.error);
+  }
+}
+
+// Register
+async function register(email, password, username) {
+  const response = await fetch(`${API_BASE_URL}/v1/auth/register`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+    },
+    credentials: 'include',
+    body: JSON.stringify({ 
+      email, 
+      password, 
+      user_name: username 
+    })
+  });
+  
+  const data = await response.json();
+  
+  if (!response.ok) {
+    throw new Error(data.error);
+  }
+  
+  return data;
+}
+```
+
+### Axios Example
+
+```javascript
+import axios from 'axios';
+
+const api = axios.create({
+  baseURL: 'http://localhost:8080/v1',
+  withCredentials: true,
+  headers: {
+    'Content-Type': 'application/json'
+  }
+});
+
+// Add token to requests
+api.interceptors.request.use((config) => {
+  const token = localStorage.getItem('access_token');
+  if (token) {
+    config.headers.Authorization = `Bearer ${token}`;
+  }
+  return config;
+});
+
+// Login
+export const login = (email, password) => 
+  api.post('/auth/login', { email, password });
+
+// Register
+export const register = (email, password, user_name) => 
+  api.post('/auth/register', { email, password, user_name });
+
+// Get current user
+export const getCurrentUser = () => 
+  api.get('/auth/me');
+
+// Refresh token
+export const refreshToken = (refresh_token) => 
+  api.post('/auth/refresh', { refresh_token });
+```
+
+---
+
+## 🧪 Postman Collection
+
+You can import these endpoints into Postman:
+
+**Environment Variables:**
+```
+base_url: http://localhost:8080
+access_token: {{access_token}}
+```
+
+**Collection Structure:**
+```
+GAuth-Central API
+├── Public
+│   ├── Register
+│   ├── Login
+│   ├── Verify Email
+│   ├── Refresh Token
+│   ├── OAuth Google
+│   └── OAuth GitHub
+└── Protected (Auth Required)
+    ├── Get Current User
+    └── Validate Token
+```
+
+---
+
+## 📚 Additional Resources
+
+- **Swagger Documentation**: http://localhost:8080/docs/index.html
+- **API Version**: v1.0
+- **Last Updated**: February 4, 2026
+
+---
+
+## ⚡ Quick Start
+
+```bash
+# 1. Start the server
+go run main.go
+
+# 2. Test with curl
+curl http://localhost:8080/
+
+# 3. Register a user
+curl -X POST http://localhost:8080/v1/auth/register \
+  -H "Content-Type: application/json" \
+  -d '{"email":"test@test.com","password":"Test123!","user_name":"testuser"}'
+
+# 4. Login
+curl -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"test@test.com","password":"Test123!"}'
+
+# 5. Use the token from login response
+curl http://localhost:8080/v1/auth/me \
+  -H "Authorization: Bearer YOUR_TOKEN_HERE"
+```
+
+---
+
+💡 **Tip**: Use the Swagger UI at http://localhost:8080/docs/index.html for interactive API testing!
--- a/docs/BACKEND_ENDPOINT.mb
+++ b/docs/BACKEND_ENDPOINT.mb
@@ -0,0 +1,119 @@
+-- Register Yeni Kullanıcı
+POST
+http://localhost:8080/v1/auth/register
+-- Gönderrilen JSON
+{
+    "email":"beyhanod@beyhan.dev",
+    "password":"1923btO**",
+    "username":"test yaptim"
+}
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmMDVlZTc0Zi1hYjgzLTQxNzEtYjI3Ny1mZGM0NDZhNjA3YjciLCJlbWFpbCI6ImJleHlzc2hhbm9kQGJleWhhbi5kZXYiLCJwZXJtaXNzaW9ucyI6WyJ1c2VyOnJlYWQiXSwiaXNzIjoiZ2F1dGgtY2VudHJhbCIsImV4cCI6MTc3MDEzMDQ2OCwiaWF0IjoxNzcwMTI5NTY4fQ.Qc5EnE2r-In7hm6-NjP6WX2TKm3MyuM68SwsHYUNJbI",
+    "email": "bexysshanod@beyhan.dev",
+    "message": "User created successfully",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmMDVlZTc0Zi1hYjgzLTQxNzEtYjI3Ny1mZGM0NDZhNjA3YjciLCJlbWFpbCI6ImJleHlzc2hhbm9kQGJleWhhbi5kZXYiLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwNzM0MzY4LCJpYXQiOjE3NzAxMjk1Njh9.JE2UZ6jJti2N2jbExx_TTY5VPSfXKvc2ZGB-Nw_toLQ",
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ],
+    "user_id": "f05ee74f-ab83-4171-b277-fdc446a607b7",
+    "username": "test yaptim"
+}
+
+-- Login Yeni Kullanıcı
+POST
+http://localhost:8080/v1/auth/login
+-- Gönderrilen JSON
+{
+    "email":"beyhanod@beyhan.dev",
+    "password":"1923btO**"
+}
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsInBlcm1pc3Npb25zIjpbInVzZXI6cmVhZCJdLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwMTMwNjU3LCJpYXQiOjE3NzAxMjk3NTd9.QbsRFn5fr7L4Wc7HCxOs0_zOWWhuceWzPmt20TV5lNI",
+    "email": "beyhano@beyhan.dev",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzQ1NTcsImlhdCI6MTc3MDEyOTc1N30.wBML1pT9S9i9FtAw3PKmJBMdcobZexWVBTRV5remb_s",
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ],
+    "user_id": "91cf0868-df24-4b8f-b491-70d9eb7a4373",
+    "username": "user_91cf0868"
+}
+
+-- Refresh Token
+POST
+http://localhost:8080/v1/auth/refresh
+-- Gönderilen JSON
+{
+    "refresh_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzQ2NDUsImlhdCI6MTc3MDEyOTg0NX0.ACDDM20v1u6yjyNrqBnWafjXnrRAAT1-8CvfqSkjTsE"
+} 
+-- Cevap
+{
+    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsInBlcm1pc3Npb25zIjpbInVzZXI6cmVhZCJdLCJpc3MiOiJnYXV0aC1jZW50cmFsIiwiZXhwIjoxNzcwMTMxMjYwLCJpYXQiOjE3NzAxMzAzNjB9.BKmZBkL6FPo208mYLeBFMkNOqJ2tsmGXJUN_0bdZFHQ",
+    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI5MWNmMDg2OC1kZjI0LTRiOGYtYjQ5MS03MGQ5ZWI3YTQzNzMiLCJlbWFpbCI6ImJleWhhbm9AYmV5aGFuLmRldiIsImlzcyI6ImdhdXRoLWNlbnRyYWwiLCJleHAiOjE3NzA3MzUxNjAsImlhdCI6MTc3MDEzMDM2MH0.tkpcbQ6QmVVXK-r0QgP333X_FrAktVOuh1AJhwvV1BQ"
+}
+
+-- Me (Kullanıcı Profili)
+GET
+http://localhost:8080/v1/auth/me
+-- Header
+Authorization: Bearer ACCESS_TOKEN_BURAYA
+-- Body: YOK (GET isteği)
+-- Cevap
+{
+    "id": "91cf0868-df24-4b8f-b491-70d9eb7a4373",
+    "username": "user_91cf0868",
+    "email": "beyhano@beyhan.dev",
+    "created_at": "2026-02-03T17:03:07.863425+03:00",
+    "updated_at": "2026-02-03T17:03:07.880923+03:00",
+    "social_accounts": null,
+    "roles": [
+        {
+            "id": 2,
+            "name": "user",
+            "description": "Default user role",
+            "permissions": [
+                {
+                    "id": 1,
+                    "name": "user:read",
+                    "description": "Can read user data"
+                }
+            ]
+        }
+    ]
+}
+
+-- Validate Token (Token Doğrulama)
+GET
+http://localhost:8080/v1/auth/validate
+-- Header
+Authorization: Bearer ACCESS_TOKEN_BURAYA
+-- Body: YOK (GET isteği, body gönderilmez)
+-- Cevap
+{
+    "email": "beyhano@beyhan.dev",
+    "message": "Token is valid",
+    "user_id": "91cf0868-df24-4b8f-b491-70d9eb7a4373"
+}
--- a/docs/BACKEND_URLS.md
+++ b/docs/BACKEND_URLS.md
@@ -0,0 +1,237 @@
+🔗 Backend URL Yönetimi
+API Endpoint Listesi
+Base URL
+Local: http://localhost:8080
+Production: https://api.yourdomain.com
+API Version
+v1
+📋 Tüm Endpoint'ler
+Method	Endpoint	Auth	Rate Limit	Açıklama
+GET	/	❌	-	Homepage
+GET	/docs/index.html	❌	-	Swagger UI
+POST	/v1/auth/register	❌	3/5min	Kullanıcı kaydı
+POST	/v1/auth/login	❌	5/1min	Giriş
+GET	/v1/auth/verify-email	❌	-	Email doğrulama
+GET	/v1/auth/:provider	❌	-	OAuth başlat
+GET	/v1/auth/:provider/callback	❌	-	OAuth callback
+POST	/v1/auth/refresh	❌	-	Token yenile
+GET	/v1/auth/me	✅	-	Kullanıcı bilgileri
+GET	/v1/auth/validate	✅	-	Token doğrula
+Admin - User Management (Admin rolü gerekli)
+Method	Endpoint	Auth	Açıklama
+GET	/v1/admin/users	✅ Admin	Tüm kullanıcıları listele
+GET	/v1/admin/users/search?q={query}	✅ Admin	Kullanıcı ara
+GET	/v1/admin/users/:id	✅ Admin	Kullanıcı detayı
+POST	/v1/admin/users	✅ Admin	Yeni kullanıcı oluştur
+PUT	/v1/admin/users/:id	✅ Admin	Kullanıcı güncelle
+DELETE	/v1/admin/users/:id	✅ Admin	Kullanıcı sil
+POST	/v1/admin/users/:id/roles	✅ Admin	Rol ata
+DELETE	/v1/admin/users/:id/roles/:role	✅ Admin	Rol kaldır
+Admin - Settings (Admin rolü gerekli)
+Method	Endpoint	Auth	Açıklama
+GET	/v1/settings/cors/whitelist	✅ Admin	CORS whitelist listele
+POST	/v1/settings/cors/whitelist	✅ Admin	CORS whitelist ekle
+PUT	/v1/settings/cors/whitelist/:id	✅ Admin	CORS whitelist güncelle
+DELETE	/v1/settings/cors/whitelist/:id	✅ Admin	CORS whitelist sil
+GET	/v1/settings/cors/blacklist	✅ Admin	CORS blacklist listele
+POST	/v1/settings/cors/blacklist	✅ Admin	CORS blacklist ekle
+PUT	/v1/settings/cors/blacklist/:id	✅ Admin	CORS blacklist güncelle
+DELETE	/v1/settings/cors/blacklist/:id	✅ Admin	CORS blacklist sil
+GET	/v1/settings/ratelimit	✅ Admin	Rate limit ayarları
+PUT	/v1/settings/ratelimit/:id	✅ Admin	Rate limit güncelle
+🎯 Frontend için URL Yapısı
+JavaScript/TypeScript Constants
+// config/api.js
+export const API_CONFIG = {
+  BASE_URL: process.env.NEXT_PUBLIC_API_URL || 'http://localhost:8080',
+  API_VERSION: 'v1',
+  ENDPOINTS: {
+    // Auth endpoints
+    REGISTER: '/auth/register',
+    LOGIN: '/auth/login',
+    LOGOUT: '/auth/logout',
+    REFRESH: '/auth/refresh',
+    VERIFY_EMAIL: '/auth/verify-email',
+    ME: '/auth/me',
+    VALIDATE: '/auth/validate',
+    
+    // OAuth endpoints
+    OAUTH_GOOGLE: '/auth/google',
+    OAUTH_GITHUB: '/auth/github',
+    OAUTH_GOOGLE_CALLBACK: '/auth/google/callback',
+    OAUTH_GITHUB_CALLBACK: '/auth/github/callback',
+  }
+};
+
+// Helper function
+export function getApiUrl(endpoint) {
+  return `${API_CONFIG.BASE_URL}/${API_CONFIG.API_VERSION}${endpoint}`;
+}
+
+// Usage
+const loginUrl = getApiUrl(API_CONFIG.ENDPOINTS.LOGIN);
+// Result: http://localhost:8080/v1/auth/login
+📦 Kullanım Örnekleri
+1. React/Next.js
+// lib/api.js
+const API_BASE = 'http://localhost:8080/v1';
+
+export const authAPI = {
+  register: (data) => 
+    fetch(`${API_BASE}/auth/register`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      credentials: 'include',
+      body: JSON.stringify(data)
+    }),
+    
+  login: (data) => 
+    fetch(`${API_BASE}/auth/login`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      credentials: 'include',
+      body: JSON.stringify(data)
+    }),
+    
+  getCurrentUser: (token) => 
+    fetch(`${API_BASE}/auth/me`, {
+      headers: { 
+        'Authorization': `Bearer ${token}`,
+        'Content-Type': 'application/json' 
+      },
+      credentials: 'include'
+    })
+};
+2. Vue.js/Nuxt
+// plugins/api.js
+export default defineNuxtPlugin(() => {
+  const config = useRuntimeConfig();
+  const baseURL = config.public.apiBase || 'http://localhost:8080/v1';
+
+  return {
+    provide: {
+      api: {
+        auth: {
+          register: (data) => $fetch(`${baseURL}/auth/register`, {
+            method: 'POST',
+            body: data,
+            credentials: 'include'
+          }),
+          login: (data) => $fetch(`${baseURL}/auth/login`, {
+            method: 'POST',
+            body: data,
+            credentials: 'include'
+          }),
+          me: () => $fetch(`${baseURL}/auth/me`, {
+            credentials: 'include'
+          })
+        }
+      }
+    }
+  };
+});
+3. Axios Instance
+// lib/axios.js
+import axios from 'axios';
+
+const api = axios.create({
+  baseURL: 'http://localhost:8080/v1',
+  withCredentials: true,
+  headers: {
+    'Content-Type': 'application/json'
+  }
+});
+
+// Add auth token to requests
+api.interceptors.request.use((config) => {
+  const token = localStorage.getItem('access_token');
+  if (token) {
+    config.headers.Authorization = `Bearer ${token}`;
+  }
+  return config;
+});
+
+// Handle 401 errors
+api.interceptors.response.use(
+  (response) => response,
+  async (error) => {
+    if (error.response?.status === 401) {
+      // Try to refresh token
+      const refreshToken = localStorage.getItem('refresh_token');
+      if (refreshToken) {
+        try {
+          const { data } = await api.post('/auth/refresh', {
+            refresh_token: refreshToken
+          });
+          localStorage.setItem('access_token', data.access_token);
+          // Retry original request
+          error.config.headers.Authorization = `Bearer ${data.access_token}`;
+          return api.request(error.config);
+        } catch {
+          // Refresh failed, logout
+          localStorage.clear();
+          window.location.href = '/login';
+        }
+      }
+    }
+    return Promise.reject(error);
+  }
+);
+
+export default api;
+🔐 Environment Variables
+.env.local (Frontend)
+# Development
+NEXT_PUBLIC_API_URL=http://localhost:8080
+NEXT_PUBLIC_API_VERSION=v1
+
+# Production
+# NEXT_PUBLIC_API_URL=https://api.yourdomain.com
+# NEXT_PUBLIC_API_VERSION=v1
+.env (Backend)
+PORT=8080
+CLIENT_CALLBACK_URL=http://localhost:8080/v1/auth
+APP_URL=http://localhost:8080
+🧪 Test Komutları
+# Register
+curl -X POST http://localhost:8080/v1/auth/register \
+  -H "Content-Type: application/json" \
+  -d '{"email":"test@test.com","password":"Test123!","user_name":"test"}'
+
+# Login
+curl -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"test@test.com","password":"Test123!"}'
+
+# Get user (with token)
+curl http://localhost:8080/v1/auth/me \
+  -H "Authorization: Bearer YOUR_TOKEN"
+
+# Admin - Update user
+curl -X PUT http://localhost:8080/v1/admin/users/54687716-1aed-41ff-aa13-bb05dd7f34e7 \
+  -H "Authorization: Bearer ADMIN_TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "email": "newemail@example.com",
+    "user_name": "newusername",
+    "email_verified": true
+  }'
+
+# Admin - Get all users
+curl -X GET http://localhost:8080/v1/admin/users?page=1&limit=10 \
+  -H "Authorization: Bearer ADMIN_TOKEN"
+
+# Admin - Search users
+curl -X GET "http://localhost:8080/v1/admin/users/search?q=test" \
+  -H "Authorization: Bearer ADMIN_TOKEN"
+📚 Swagger Dokümantasyonu
+Tüm endpoint'lerin detaylı dokümantasyonu için:
+
+http://localhost:8080/docs/index.html
+✅ Hazır Kullanım
+API endpoint'leri hazır ve çalışıyor! Frontend'inizde kullanmaya başlayabilirsiniz:
+
+API_ENDPOINTS.md - Detaylı endpoint dokümantasyonu
+Swagger UI - İnteraktif API testi: http://localhost:8080/docs/index.html
+Yukarıdaki örnekleri projenize kopyalayıp kullanabilirsiniz
+Önemli: CORS zaten http://localhost:3000 için yapılandırılmış durumda! ✅
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -0,0 +1,119 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+## [1.1.0] - 2026-02-04
+
+### Added
+- ✅ **Redis Integration**: Full Redis caching and session management
+  - Session storage with Redis
+  - User data caching
+  - Token blacklist for logout
+  - Email verification token cache
+  - Password reset token cache
+  
+- ✅ **Cache Service**: New dedicated cache service (`internal/services/cache_service.go`)
+  - SetUser/GetUser/DeleteUser for user caching
+  - Session management methods
+  - Rate limiting support
+  - Token blacklist operations
+  - Email verification and password reset token management
+
+- ✅ **Rate Limiting**: API rate limiting with Redis backend
+  - Login rate limiting: 5 attempts per minute
+  - Registration rate limiting: 3 attempts per 5 minutes
+  - General API rate limiting: 100 requests per minute
+  - Graceful degradation when Redis is unavailable
+
+- ✅ **CORS Configuration**: Cross-Origin Resource Sharing support
+  - Configurable allowed origins
+  - Credentials support
+  - Multiple HTTP methods allowed
+
+- ✅ **Docker Compose**: Complete Docker setup with 3 services
+  - PostgreSQL 17 Alpine
+  - Redis 7 Alpine with persistence
+  - Application service with auto-restart
+
+- ✅ **Documentation**:
+  - README.md with comprehensive project documentation
+  - SETUP.md with detailed setup instructions
+  - .env.example template file
+  - Quick start script (start-with-docker.sh)
+
+### Changed
+- 🔄 Updated `main.go` to initialize Redis connection
+- 🔄 Updated routes to include rate limiting middlewares
+- 🔄 Enhanced docker-compose.yml with Redis service
+
+### Technical Details
+- **Redis Client**: go-redis/v9
+- **CORS Middleware**: gin-contrib/cors
+- **Default CORS Origin**: http://localhost:3000
+- **Redis Connection**: Gracefully handles unavailability
+
+## [1.0.0] - Initial Release
+
+### Added
+- JWT-based authentication
+- OAuth2 integration (Google, GitHub)
+- Email verification
+- PostgreSQL database with GORM
+- Swagger/OpenAPI documentation
+- User roles and permissions
+- Password hashing with bcrypt
+- Protected routes with middleware
+- Auto-migration and seeding
+
+### Database Models
+- Users table with email verification
+- Social accounts for OAuth
+- Roles and permissions system
+- User-Role relationships
+
+### API Endpoints
+- POST /v1/auth/register - User registration
+- POST /v1/auth/login - User login
+- GET /v1/auth/verify-email - Email verification
+- POST /v1/auth/refresh - Token refresh
+- GET /v1/auth/:provider - OAuth login
+- GET /v1/auth/:provider/callback - OAuth callback
+- GET /v1/auth/me - Get current user (protected)
+- GET /v1/auth/validate - Validate token (protected)
+
+---
+
+## Future Roadmap
+
+### Planned Features
+- [ ] Email service integration (SMTP)
+- [ ] Password reset functionality
+- [ ] 2FA (Two-Factor Authentication)
+- [ ] User profile management
+- [ ] Admin dashboard
+- [ ] Audit logging
+- [ ] Metrics and monitoring (Prometheus)
+- [ ] API versioning
+- [ ] Webhook support
+- [ ] Multi-tenancy support
+
+### Performance Improvements
+- [ ] Database query optimization
+- [ ] Redis clustering support
+- [ ] Connection pooling enhancements
+- [ ] Response compression
+
+### Security Enhancements
+- [ ] IP whitelisting
+- [ ] Advanced rate limiting (per user, per endpoint)
+- [ ] Brute force protection
+- [ ] Session management dashboard
+- [ ] Security headers middleware
+- [ ] CSP (Content Security Policy)
+
+---
+
+## Version History
+
+- **v1.1.0** - Redis integration, CORS, Rate limiting, Complete documentation
+- **v1.0.0** - Initial release with basic authentication and OAuth
--- a/docs/DEPLOYMENT.md
+++ b/docs/DEPLOYMENT.md
@@ -0,0 +1,406 @@
+# 🚀 GAuth-Central Deployment Rehberi
+
+## 📋 Deployment Senaryoları
+
+### Senaryo 1: Standalone Deployment (Mevcut Sunucularla)
+
+Bu senaryoda mevcut PostgreSQL ve Redis sunucularınızı kullanıyorsunuz.
+
+#### Ön Gereksinimler
+- ✅ PostgreSQL 17+ sunucusu çalışıyor
+- ✅ Redis 7+ sunucusu çalışıyor
+- ✅ Go 1.23+ yüklü
+- ✅ Sunuculara network erişimi var
+
+#### Adımlar
+
+1. **Repository'yi klonlayın**
+```bash
+git clone <repository-url>
+cd AuthCentral
+```
+
+2. **.env dosyasını yapılandırın**
+```bash
+# .env dosyasını oluşturun
+cp .env.example .env
+
+# Düzenleyin
+nano .env
+```
+
+**.env içeriği:**
+```env
+PORT=8080
+
+# Mevcut PostgreSQL sunucunuz
+DB_URL="host=10.80.80.70 user=cloud password=xxx dbname=go_gauth port=5432 sslmode=disable TimeZone=Europe/Istanbul"
+DB_USER=cloud
+DB_PASSWORD=xxx
+DB_NAME=go_gauth
+DB_PORT=5432
+DB_HOST=10.80.80.70
+
+# Mevcut Redis sunucunuz
+REDIS_HOST=10.80.80.70
+REDIS_PORT=6379
+REDIS_USER=default
+REDIS_PASSWORD=xxx
+REDIS_URL=redis://default:xxx@10.80.80.70:6379/0
+
+# JWT Secret (production için güçlü bir değer)
+JWT_SECRET=super_secure_production_secret_key_change_this
+
+# OAuth Credentials
+GOOGLE_CLIENT_ID=your_client_id
+GOOGLE_CLIENT_SECRET=your_client_secret
+GITHUB_CLIENT_ID=your_client_id
+GITHUB_CLIENT_SECRET=your_client_secret
+CLIENT_CALLBACK_URL=http://your-domain.com/v1/auth
+APP_URL=http://your-domain.com
+```
+
+3. **Bağımlılıkları yükleyin**
+```bash
+go mod download
+```
+
+4. **Bağlantıları test edin**
+```bash
+# PostgreSQL bağlantısı
+PGPASSWORD=xxx psql -h 10.80.80.70 -U cloud -d go_gauth -c "SELECT version();"
+
+# Redis bağlantısı
+redis-cli -h 10.80.80.70 -p 6379 -a xxx --no-auth-warning PING
+```
+
+5. **Uygulamayı başlatın**
+```bash
+# Quick start script ile
+./start.sh
+
+# veya systemd service olarak (aşağıya bakın)
+```
+
+---
+
+### Senaryo 2: Docker Compose Deployment
+
+Tüm servisleri (PostgreSQL, Redis, App) Docker ile çalıştırma.
+
+#### Adımlar
+
+1. **Repository'yi klonlayın**
+```bash
+git clone <repository-url>
+cd AuthCentral
+```
+
+2. **.env dosyasını yapılandırın**
+```bash
+cp .env.example .env
+nano .env
+```
+
+3. **Docker Compose ile başlatın**
+```bash
+docker-compose up -d
+```
+
+4. **Logları kontrol edin**
+```bash
+docker-compose logs -f app
+```
+
+5. **Durum kontrolü**
+```bash
+docker-compose ps
+curl http://localhost:8080/
+```
+
+---
+
+### Senaryo 3: Production Deployment (Systemd)
+
+Production ortamında systemd ile çalıştırma.
+
+#### 1. Systemd Service Dosyası Oluşturun
+
+```bash
+sudo nano /etc/systemd/system/gauth-central.service
+```
+
+**gauth-central.service:**
+```ini
+[Unit]
+Description=GAuth-Central Authentication Service
+After=network.target
+
+[Service]
+Type=simple
+User=www-data
+Group=www-data
+WorkingDirectory=/opt/gauth-central
+EnvironmentFile=/opt/gauth-central/.env
+ExecStart=/opt/gauth-central/main
+Restart=always
+RestartSec=5
+StandardOutput=append:/var/log/gauth-central/app.log
+StandardError=append:/var/log/gauth-central/error.log
+
+# Security
+NoNewPrivileges=true
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target
+```
+
+#### 2. Log Dizinini Oluşturun
+
+```bash
+sudo mkdir -p /var/log/gauth-central
+sudo chown www-data:www-data /var/log/gauth-central
+```
+
+#### 3. Uygulamayı Deploy Edin
+
+```bash
+# Deployment dizinine kopyalayın
+sudo mkdir -p /opt/gauth-central
+sudo cp -r . /opt/gauth-central/
+cd /opt/gauth-central
+
+# Build edin
+go build -o main .
+
+# İzinleri ayarlayın
+sudo chown -R www-data:www-data /opt/gauth-central
+sudo chmod +x /opt/gauth-central/main
+```
+
+#### 4. Service'i Başlatın
+
+```bash
+sudo systemctl daemon-reload
+sudo systemctl enable gauth-central
+sudo systemctl start gauth-central
+sudo systemctl status gauth-central
+```
+
+#### 5. Logları İzleyin
+
+```bash
+# Real-time logs
+sudo journalctl -u gauth-central -f
+
+# Son 100 satır
+sudo journalctl -u gauth-central -n 100
+
+# Application logs
+tail -f /var/log/gauth-central/app.log
+```
+
+---
+
+## 🔒 Production Checklist
+
+### Güvenlik
+
+- [ ] JWT_SECRET güçlü bir değer olarak ayarlandı
+- [ ] PostgreSQL şifreleri güçlü
+- [ ] Redis şifre koruması aktif
+- [ ] SSL/TLS sertifikaları yapılandırıldı (Nginx/Caddy ile)
+- [ ] CORS AllowOrigins production domain'lere güncellendi
+- [ ] Firewall kuralları ayarlandı
+- [ ] PostgreSQL sslmode=require (production)
+- [ ] Rate limiting limitleri gözden geçirildi
+
+### Performance
+
+- [ ] PostgreSQL connection pooling ayarları
+- [ ] Redis max memory policy ayarlandı
+- [ ] Log rotation yapılandırıldı
+- [ ] Monitoring kuruldu (Prometheus/Grafana)
+- [ ] Health check endpoint'i aktif
+
+### Backup
+
+- [ ] PostgreSQL otomatik backup
+- [ ] Redis persistence yapılandırması
+- [ ] Backup restore testi yapıldı
+
+### Monitoring
+
+- [ ] Application logs toplanıyor
+- [ ] Error tracking (Sentry vb.)
+- [ ] Uptime monitoring
+- [ ] Resource monitoring (CPU, RAM, Disk)
+
+---
+
+## 🌐 Nginx Reverse Proxy
+
+Production'da Nginx kullanarak SSL termination:
+
+```nginx
+server {
+    listen 80;
+    server_name api.yourdomain.com;
+    return 301 https://$server_name$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    server_name api.yourdomain.com;
+
+    ssl_certificate /etc/letsencrypt/live/api.yourdomain.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/api.yourdomain.com/privkey.pem;
+
+    # Security headers
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+
+    location / {
+        proxy_pass http://localhost:8080;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+    }
+}
+```
+
+---
+
+## 📊 Health Checks
+
+### Application Health Check
+
+```bash
+curl http://localhost:8080/
+```
+
+### PostgreSQL Health
+
+```bash
+PGPASSWORD=xxx psql -h 10.80.80.70 -U cloud -d go_gauth -c "SELECT 1;"
+```
+
+### Redis Health
+
+```bash
+redis-cli -h 10.80.80.70 -p 6379 -a xxx --no-auth-warning PING
+```
+
+---
+
+## 🔄 Update/Rollback Prosedürü
+
+### Update
+
+```bash
+cd /opt/gauth-central
+
+# Backup
+sudo cp main main.backup
+
+# Pull updates
+git pull
+
+# Build
+go build -o main .
+
+# Restart service
+sudo systemctl restart gauth-central
+
+# Check status
+sudo systemctl status gauth-central
+
+# Check logs
+sudo journalctl -u gauth-central -f
+```
+
+### Rollback
+
+```bash
+cd /opt/gauth-central
+
+# Restore backup
+sudo cp main.backup main
+
+# Restart
+sudo systemctl restart gauth-central
+```
+
+---
+
+## 🐛 Troubleshooting
+
+### Service başlamıyor
+
+```bash
+# Logs kontrol
+sudo journalctl -u gauth-central -n 50
+
+# Config kontrol
+cat /opt/gauth-central/.env
+
+# Permissions kontrol
+ls -la /opt/gauth-central/main
+```
+
+### PostgreSQL bağlantı hatası
+
+```bash
+# Bağlantı testi
+PGPASSWORD=xxx psql -h HOST -U USER -d DB -c "SELECT 1;"
+
+# Network kontrolü
+telnet HOST 5432
+```
+
+### Redis bağlantı hatası
+
+```bash
+# Redis testi
+redis-cli -h HOST -p PORT -a PASSWORD PING
+
+# Network kontrolü
+telnet HOST 6379
+```
+
+---
+
+## 📝 Environment Variables Reference
+
+| Variable | Required | Example | Description |
+|----------|----------|---------|-------------|
+| `PORT` | Yes | `8080` | Application port |
+| `DB_URL` | Yes | `host=...` | PostgreSQL connection string |
+| `REDIS_URL` | Yes | `redis://...` | Redis connection URL |
+| `JWT_SECRET` | Yes | `secret123` | JWT signing key |
+| `GOOGLE_CLIENT_ID` | No | `xxx.apps.googleusercontent.com` | Google OAuth |
+| `GITHUB_CLIENT_ID` | No | `Ov23li...` | GitHub OAuth |
+| `CLIENT_CALLBACK_URL` | Yes | `http://localhost:8080/v1/auth` | OAuth callback base URL |
+| `APP_URL` | Yes | `http://localhost:8080` | Application URL |
+
+---
+
+## 🎯 Next Steps
+
+1. Setup monitoring (Prometheus + Grafana)
+2. Configure log aggregation (ELK Stack)
+3. Setup automated backups
+4. Configure CI/CD pipeline
+5. Setup staging environment
+6. Configure load balancing (if needed)
+
+---
+
+💡 **Pro Tip**: Her deployment öncesi staging ortamında test edin!
--- a/docs/QUICKSTART.txt
+++ b/docs/QUICKSTART.txt
@@ -0,0 +1,166 @@
+╔═══════════════════════════════════════════════════════════════════════╗
+║                    🚀 GAuth-Central Quick Start                      ║
+╚═══════════════════════════════════════════════════════════════════════╝
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 🎯 HIZLI BAŞLATMA                                                   │
+└─────────────────────────────────────────────────────────────────────┘
+
+   Standalone Mode (Mevcut Sunucularla):
+   ────────────────────────────────────────
+   $ ./start.sh
+
+   Docker Mode (Tüm Servisler):
+   ────────────────────────────
+   $ ./start-with-docker.sh
+
+   Manuel:
+   ───────
+   $ go run main.go
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 🌐 ERİŞİM NOKTALARI                                                 │
+└─────────────────────────────────────────────────────────────────────┘
+
+   API:         http://localhost:8080
+   Swagger:     http://localhost:8080/docs/index.html
+   Frontend:    http://localhost:3000 (CORS enabled)
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 🔧 MEVCUT YAPILANDIRMA                                              │
+└─────────────────────────────────────────────────────────────────────┘
+
+   PostgreSQL:  10.80.80.70:5432/go_gauth (user: cloud)
+   Redis:       10.80.80.70:6379 (user: default)
+   Backend:     localhost:8080
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 🧪 TEST KOMUTLARI                                                   │
+└─────────────────────────────────────────────────────────────────────┘
+
+   Sağlık Kontrolü:
+   ────────────────
+   $ curl http://localhost:8080/
+
+   PostgreSQL Test:
+   ────────────────
+   $ PGPASSWORD=gg7678290 psql -h 10.80.80.70 -U cloud \
+     -d go_gauth -c "SELECT 1;"
+
+   Redis Test:
+   ───────────
+   $ redis-cli -h 10.80.80.70 -p 6379 -a gg7678290 \
+     --no-auth-warning PING
+
+   Kullanıcı Kaydı:
+   ────────────────
+   $ curl -X POST http://localhost:8080/v1/auth/register \
+     -H "Content-Type: application/json" \
+     -d '{"email":"test@test.com","password":"Pass123!",
+          "user_name":"test"}'
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 📚 DOKÜMANTASYON                                                    │
+└─────────────────────────────────────────────────────────────────────┘
+
+   README.md           - Genel bilgiler ve özellikler
+   SETUP.md            - Detaylı kurulum rehberi (4 seçenek)
+   DEPLOYMENT.md       - Production deployment rehberi
+   QUICK_REFERENCE.md  - Komutlar ve örnekler
+   CHANGELOG.md        - Versiyon geçmişi
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ ✨ ÖNE ÇIKAN ÖZELLİKLER                                             │
+└─────────────────────────────────────────────────────────────────────┘
+
+   ✅ CORS yapılandırması (localhost:3000)
+   ✅ Redis cache & session management
+   ✅ Rate limiting (Login: 5/min, Register: 3/5min)
+   ✅ JWT authentication
+   ✅ OAuth2 (Google, GitHub)
+   ✅ Email verification
+   ✅ PostgreSQL + GORM
+   ✅ Swagger documentation
+   ✅ Docker support
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 🔐 GÜVENLİK ÖZELLİKLERİ                                            │
+└─────────────────────────────────────────────────────────────────────┘
+
+   • Bcrypt password hashing
+   • JWT token authentication
+   • Rate limiting (brute force protection)
+   • Token blacklist (logout)
+   • CORS policy
+   • Session management with Redis
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 📊 API ENDPOINTS                                                    │
+└─────────────────────────────────────────────────────────────────────┘
+
+   POST   /v1/auth/register          - Kayıt (rate limited)
+   POST   /v1/auth/login             - Giriş (rate limited)
+   GET    /v1/auth/verify-email      - Email doğrulama
+   POST   /v1/auth/refresh           - Token yenileme
+   GET    /v1/auth/me       [Auth]   - Kullanıcı bilgileri
+   GET    /v1/auth/validate [Auth]   - Token doğrulama
+   GET    /v1/auth/:provider         - OAuth (google/github)
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 🛠️ YARARLI KOMUTLAR                                                │
+└─────────────────────────────────────────────────────────────────────┘
+
+   Build:           go build -o main .
+   Run:             ./main
+   Dev Mode:        go run main.go
+   Swagger Update:  swag init -g main.go
+   Dependencies:    go mod tidy
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 📦 SİSTEM GEREKSİNİMLERİ                                           │
+└─────────────────────────────────────────────────────────────────────┘
+
+   • Go 1.23+
+   • PostgreSQL 17+ erişimi (10.80.80.70:5432)
+   • Redis 7+ erişimi (10.80.80.70:6379)
+   • Network bağlantısı
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 🚨 SORUN GİDERME                                                    │
+└─────────────────────────────────────────────────────────────────────┘
+
+   PostgreSQL bağlanamıyor:
+   ────────────────────────
+   • .env dosyasında DB_URL kontrol edin
+   • Network erişimini test edin: telnet 10.80.80.70 5432
+   • Kullanıcı adı/şifre doğru mu kontrol edin
+
+   Redis bağlanamıyor:
+   ──────────────────
+   • REDIS_URL doğru mu kontrol edin
+   • Network erişimi: telnet 10.80.80.70 6379
+   • Redis şifresini kontrol edin
+
+   CORS hatası:
+   ────────────
+   • main.go'da AllowOrigins kontrol edin
+   • Frontend URL'i http://localhost:3000 mi?
+
+   Rate limit:
+   ───────────
+   • api/middlewares/rate_limit_middleware.go'da
+     limit değerlerini artırın
+
+┌─────────────────────────────────────────────────────────────────────┐
+│ 📞 DAHA FAZLA BİLGİ                                                 │
+└─────────────────────────────────────────────────────────────────────┘
+
+   Tüm detaylar için dokümantasyon dosyalarına bakın:
+
+   $ cat README.md
+   $ cat SETUP.md
+   $ cat DEPLOYMENT.md
+
+╔═══════════════════════════════════════════════════════════════════════╗
+║  🎉 Başarılı çalışmalar! Sorularınız için dokümantasyona bakın.     ║
+╚═══════════════════════════════════════════════════════════════════════╝
--- a/docs/QUICK_REFERENCE.md
+++ b/docs/QUICK_REFERENCE.md
@@ -0,0 +1,267 @@
+# 🚀 GAuth-Central - Quick Reference
+
+## 🏃 Hızlı Başlatma
+
+```bash
+# Standalone Mode (Mevcut PostgreSQL & Redis ile)
+./start.sh
+
+# Docker ile (Tüm servisler)
+./start-with-docker.sh
+
+# Manuel
+go run main.go
+```
+
+## 🔗 Önemli URL'ler
+
+| Servis | URL | Açıklama |
+|--------|-----|----------|
+| API | http://localhost:8080 | Ana API |
+| Swagger | http://localhost:8080/docs/index.html | API Dokümantasyonu |
+| PostgreSQL | localhost:5432 | Database |
+| Redis | localhost:6379 | Cache |
+
+## 📝 Temel Komutlar
+
+```bash
+# Docker Servisleri
+docker-compose up -d              # Başlat
+docker-compose down               # Durdur
+docker-compose down -v            # Durdur + Volume'ları sil
+docker-compose logs -f app        # Logları izle
+docker-compose ps                 # Servis durumları
+
+# Go Komutları
+go run main.go                    # Çalıştır
+go build -o main .                # Derle
+go mod tidy                       # Bağımlılıkları temizle
+swag init -g main.go             # Swagger güncelle
+
+# Redis Komutları
+docker exec -it gauth_redis redis-cli
+> PING                            # Bağlantı testi
+> KEYS *                          # Tüm key'leri listele
+> GET user:UUID                   # User cache getir
+> DEL session:TOKEN               # Session sil
+> FLUSHDB                         # Tüm cache'i temizle
+
+# PostgreSQL Komutları
+docker exec -it gauth_postgres psql -U postgres -d gauth
+\dt                              # Tabloları listele
+\d users                         # Users tablosu yapısı
+SELECT * FROM roles;             # Rolleri listele
+SELECT * FROM users LIMIT 10;   # Kullanıcıları listele
+```
+
+## 🔧 Environment Variables
+
+| Değişken | Varsayılan | Açıklama |
+|----------|------------|----------|
+| `PORT` | 8080 | Server portu |
+| `DB_URL` | - | PostgreSQL bağlantısı |
+| `REDIS_URL` | - | Redis bağlantısı |
+| `JWT_SECRET` | - | JWT gizli anahtar |
+| `GOOGLE_CLIENT_ID` | - | Google OAuth |
+| `GITHUB_CLIENT_ID` | - | GitHub OAuth |
+
+## 📡 API Endpoints
+
+### Public Endpoints
+
+```bash
+# Register
+POST /v1/auth/register
+{
+  "email": "user@example.com",
+  "password": "SecurePass123!",
+  "user_name": "username"
+}
+
+# Login
+POST /v1/auth/login
+{
+  "email": "user@example.com",
+  "password": "SecurePass123!"
+}
+
+# OAuth
+GET /v1/auth/google
+GET /v1/auth/github
+
+# Verify Email
+GET /v1/auth/verify-email?token=...
+
+# Refresh Token
+POST /v1/auth/refresh
+{
+  "refresh_token": "..."
+}
+```
+
+### Protected Endpoints (Requires Authorization Header)
+
+```bash
+# Get User Info
+GET /v1/auth/me
+Authorization: Bearer <token>
+
+# Validate Token
+GET /v1/auth/validate
+Authorization: Bearer <token>
+```
+
+## 🛡️ Rate Limits
+
+| Endpoint | Limit | Süre |
+|----------|-------|------|
+| `/v1/auth/login` | 5 | 1 dakika |
+| `/v1/auth/register` | 3 | 5 dakika |
+| Genel API | 100 | 1 dakika |
+
+## 🗄️ Redis Keys
+
+| Pattern | Açıklama | TTL |
+|---------|----------|-----|
+| `user:{id}` | User cache | 1 saat |
+| `session:{token}` | Session data | 24 saat |
+| `blacklist:{token}` | Invalidated tokens | 24 saat |
+| `ratelimit:{key}` | Rate limit counters | Dinamik |
+| `email_verify:{email}` | Email verification | Dinamik |
+| `password_reset:{email}` | Password reset | Dinamik |
+
+## 🧪 Test Komutları
+
+```bash
+# Health Check
+curl http://localhost:8080/
+
+# Register Test
+curl -X POST http://localhost:8080/v1/auth/register \
+  -H "Content-Type: application/json" \
+  -d '{"email":"test@test.com","password":"Test123!","user_name":"testuser"}'
+
+# Login Test
+curl -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{"email":"test@test.com","password":"Test123!"}'
+
+# Get User Info (with token)
+curl http://localhost:8080/v1/auth/me \
+  -H "Authorization: Bearer YOUR_TOKEN_HERE"
+```
+
+## 🐛 Sorun Giderme
+
+```bash
+# Servis durumlarını kontrol et
+docker-compose ps
+
+# App loglarını kontrol et
+docker-compose logs app
+
+# Redis bağlantısı
+docker exec -it gauth_redis redis-cli PING
+
+# PostgreSQL bağlantısı
+docker exec -it gauth_postgres pg_isready -U postgres
+
+# Container'ı yeniden başlat
+docker-compose restart app
+
+# Tüm servisleri yeniden oluştur
+docker-compose down
+docker-compose up -d --build
+```
+
+## 📊 Database Schema
+
+```sql
+-- Users Table
+users (
+  id UUID PRIMARY KEY,
+  email VARCHAR UNIQUE,
+  user_name VARCHAR NOT NULL,
+  password_hash VARCHAR,
+  email_verified BOOLEAN,
+  email_verify_token VARCHAR,
+  created_at TIMESTAMP,
+  updated_at TIMESTAMP
+)
+
+-- Roles Table
+roles (
+  id UUID PRIMARY KEY,
+  name VARCHAR UNIQUE,
+  description TEXT
+)
+
+-- Permissions Table
+permissions (
+  id UUID PRIMARY KEY,
+  name VARCHAR UNIQUE,
+  description TEXT
+)
+```
+
+## 🔐 CORS Yapılandırması
+
+Varsayılan: `http://localhost:3000`
+
+Değiştirmek için `main.go`:
+```go
+AllowOrigins: []string{
+  "http://localhost:3000",
+  "https://yourdomain.com",
+}
+```
+
+## 📚 Cache Service Örnekleri
+
+```go
+import "gauth-central/internal/services"
+
+cache := services.NewCacheService()
+
+// User caching
+cache.SetUser(userID, user, 1*time.Hour)
+user, err := cache.GetUser(userID)
+
+// Session
+cache.SetSession(token, userID, 24*time.Hour)
+userID, err := cache.GetSession(token)
+
+// Rate limiting
+count, err := cache.IncrementRateLimit("login:"+ip, 1*time.Minute)
+if count > 5 {
+  // Rate limit exceeded
+}
+
+// Token blacklist
+cache.BlacklistToken(token, 24*time.Hour)
+isBlacklisted, err := cache.IsTokenBlacklisted(token)
+```
+
+## 🎯 Önemli Dosyalar
+
+| Dosya | Açıklama |
+|-------|----------|
+| `main.go` | Ana uygulama |
+| `config/config.go` | Yapılandırma |
+| `internal/database/redis.go` | Redis bağlantısı |
+| `internal/services/cache_service.go` | Cache servisi |
+| `api/routes/routes.go` | Route tanımları |
+| `api/middlewares/rate_limit_middleware.go` | Rate limiting |
+| `docker-compose.yml` | Docker yapılandırması |
+| `.env` | Environment variables |
+
+## 📖 Dokümantasyon
+
+- `README.md` - Genel proje bilgisi
+- `SETUP.md` - Detaylı kurulum rehberi
+- `CHANGELOG.md` - Versiyon geçmişi
+- `QUICK_REFERENCE.md` - Bu dosya
+
+---
+
+💡 **İpucu**: Swagger UI'da tüm endpoint'leri test edebilirsiniz: http://localhost:8080/docs/index.html
--- a/docs/SETTINGS_API.md
+++ b/docs/SETTINGS_API.md
@@ -0,0 +1,558 @@
+# 🔧 CORS & Rate Limit Yönetim API'si
+
+## Yeni Endpoint'ler
+
+### Base URL
+```
+http://localhost:8080/v1/settings
+```
+
+**Not:** Tüm settings endpoint'leri authentication gerektirir (Bearer token).
+
+---
+
+## 📋 CORS Whitelist Yönetimi
+
+### 1. Tüm Whitelist Kayıtlarını Getir
+```
+GET /v1/settings/cors/whitelist
+Authorization: Bearer {token}
+```
+
+**Response:**
+```json
+[
+  {
+    "id": "uuid",
+    "origin": "http://localhost:3000",
+    "description": "Default local frontend",
+    "is_active": true,
+    "created_by": "system",
+    "created_at": "2026-02-04T00:00:00Z",
+    "updated_at": "2026-02-04T00:00:00Z"
+  }
+]
+```
+
+### 2. Yeni Whitelist Ekle
+```
+POST /v1/settings/cors/whitelist
+Authorization: Bearer {token}
+Content-Type: application/json
+```
+
+**Request Body:**
+```json
+{
+  "origin": "https://example.com",
+  "description": "Production frontend"
+}
+```
+
+**Response (201):**
+```json
+{
+  "id": "uuid",
+  "origin": "https://example.com",
+  "description": "Production frontend",
+  "is_active": true,
+  "created_by": "user@example.com",
+  "created_at": "2026-02-04T00:00:00Z",
+  "updated_at": "2026-02-04T00:00:00Z"
+}
+```
+
+### 3. Whitelist Güncelle
+```
+PUT /v1/settings/cors/whitelist/{id}
+Authorization: Bearer {token}
+Content-Type: application/json
+```
+
+**Request Body:**
+```json
+{
+  "origin": "https://newdomain.com",
+  "description": "Updated description",
+  "is_active": false
+}
+```
+
+**Response (200):**
+```json
+{
+  "message": "Whitelist updated successfully"
+}
+```
+
+### 4. Whitelist Sil
+```
+DELETE /v1/settings/cors/whitelist/{id}
+Authorization: Bearer {token}
+```
+
+**Response (200):**
+```json
+{
+  "message": "Whitelist entry deleted successfully"
+}
+```
+
+---
+
+## 🚫 CORS Blacklist Yönetimi
+
+### 1. Tüm Blacklist Kayıtlarını Getir
+```
+GET /v1/settings/cors/blacklist
+Authorization: Bearer {token}
+```
+
+**Response:**
+```json
+[
+  {
+    "id": "uuid",
+    "origin": "http://malicious-site.com",
+    "reason": "Security threat",
+    "is_active": true,
+    "created_by": "admin@example.com",
+    "created_at": "2026-02-04T00:00:00Z",
+    "updated_at": "2026-02-04T00:00:00Z"
+  }
+]
+```
+
+### 2. Yeni Blacklist Ekle
+```
+POST /v1/settings/cors/blacklist
+Authorization: Bearer {token}
+Content-Type: application/json
+```
+
+**Request Body:**
+```json
+{
+  "origin": "http://spam-site.com",
+  "reason": "Spam attempts detected"
+}
+```
+
+**Response (201):**
+```json
+{
+  "id": "uuid",
+  "origin": "http://spam-site.com",
+  "reason": "Spam attempts detected",
+  "is_active": true,
+  "created_by": "user@example.com",
+  "created_at": "2026-02-04T00:00:00Z",
+  "updated_at": "2026-02-04T00:00:00Z"
+}
+```
+
+### 3. Blacklist Güncelle
+```
+PUT /v1/settings/cors/blacklist/{id}
+Authorization: Bearer {token}
+Content-Type: application/json
+```
+
+**Request Body:**
+```json
+{
+  "origin": "http://updated-domain.com",
+  "reason": "Updated reason",
+  "is_active": true
+}
+```
+
+**Response (200):**
+```json
+{
+  "message": "Blacklist updated successfully"
+}
+```
+
+### 4. Blacklist Sil
+```
+DELETE /v1/settings/cors/blacklist/{id}
+Authorization: Bearer {token}
+```
+
+**Response (200):**
+```json
+{
+  "message": "Blacklist entry deleted successfully"
+}
+```
+
+---
+
+## ⚡ Rate Limit Ayarları Yönetimi
+
+### 1. Tüm Rate Limit Ayarlarını Getir
+```
+GET /v1/settings/ratelimit
+Authorization: Bearer {token}
+```
+
+**Response:**
+```json
+[
+  {
+    "id": "uuid",
+    "name": "login",
+    "description": "Login endpoint rate limit",
+    "max_requests": 5,
+    "window_seconds": 60,
+    "is_active": true,
+    "updated_by": "admin@example.com",
+    "created_at": "2026-02-04T00:00:00Z",
+    "updated_at": "2026-02-04T00:00:00Z"
+  },
+  {
+    "id": "uuid",
+    "name": "register",
+    "description": "Registration endpoint rate limit",
+    "max_requests": 3,
+    "window_seconds": 300,
+    "is_active": true,
+    "updated_by": null,
+    "created_at": "2026-02-04T00:00:00Z",
+    "updated_at": "2026-02-04T00:00:00Z"
+  },
+  {
+    "id": "uuid",
+    "name": "api",
+    "description": "General API rate limit",
+    "max_requests": 100,
+    "window_seconds": 60,
+    "is_active": true,
+    "updated_by": null,
+    "created_at": "2026-02-04T00:00:00Z",
+    "updated_at": "2026-02-04T00:00:00Z"
+  }
+]
+```
+
+### 2. Rate Limit Ayarını Güncelle
+```
+PUT /v1/settings/ratelimit/{id}
+Authorization: Bearer {token}
+Content-Type: application/json
+```
+
+**Request Body:**
+```json
+{
+  "max_requests": 10,
+  "window_seconds": 120,
+  "description": "Updated rate limit",
+  "is_active": true
+}
+```
+
+**Response (200):**
+```json
+{
+  "message": "Rate limit setting updated successfully"
+}
+```
+
+---
+
+## 🔄 Çalışma Mantığı
+
+### CORS Kontrolü
+
+1. **Request gelir** → Origin header okunur
+2. **Blacklist kontrolü** → Origin blacklist'te var mı?
+   - Varsa → **403 Forbidden**
+3. **Whitelist kontrolü** → Origin whitelist'te var mı?
+   - Varsa → **İzin ver**
+   - Yoksa → **403 Forbidden**
+
+### Cache Stratejisi
+
+- **Whitelist/Blacklist**: 1 saat cache
+- **Rate Limit Settings**: 1 saat cache
+- Her CRUD işleminden sonra ilgili cache **invalidate** edilir
+- Database'den tekrar okunur ve cache'lenir
+
+### Rate Limiting
+
+1. **Database'den ayarlar okunur** (cache'den veya DB'den)
+2. **IP bazlı sayaç** Redis'te tutulur
+3. **Limit aşılırsa** → **429 Too Many Requests**
+
+---
+
+## 📝 Kullanım Örnekleri
+
+### JavaScript/TypeScript
+
+```javascript
+const API_BASE = 'http://localhost:8080/v1/settings';
+const token = localStorage.getItem('access_token');
+
+// Whitelist'e yeni origin ekle
+async function addToWhitelist(origin, description) {
+  const response = await fetch(`${API_BASE}/cors/whitelist`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+      'Content-Type': 'application/json'
+    },
+    body: JSON.stringify({ origin, description })
+  });
+  
+  return response.json();
+}
+
+// Rate limit ayarlarını getir
+async function getRateLimits() {
+  const response = await fetch(`${API_BASE}/ratelimit`, {
+    headers: {
+      'Authorization': `Bearer ${token}`
+    }
+  });
+  
+  return response.json();
+}
+
+// Rate limit güncelle
+async function updateRateLimit(id, maxRequests, windowSeconds) {
+  const response = await fetch(`${API_BASE}/ratelimit/${id}`, {
+    method: 'PUT',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+      'Content-Type': 'application/json'
+    },
+    body: JSON.stringify({
+      max_requests: maxRequests,
+      window_seconds: windowSeconds
+    })
+  });
+  
+  return response.json();
+}
+
+// Blacklist'e ekle
+async function addToBlacklist(origin, reason) {
+  const response = await fetch(`${API_BASE}/cors/blacklist`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+      'Content-Type': 'application/json'
+    },
+    body: JSON.stringify({ origin, reason })
+  });
+  
+  return response.json();
+}
+```
+
+### cURL Örnekleri
+
+```bash
+# Token al (önce login)
+TOKEN="your_access_token_here"
+
+# Whitelist'i görüntüle
+curl -X GET http://localhost:8080/v1/settings/cors/whitelist \
+  -H "Authorization: Bearer $TOKEN"
+
+# Yeni origin ekle
+curl -X POST http://localhost:8080/v1/settings/cors/whitelist \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "origin": "https://myapp.com",
+    "description": "Production app"
+  }'
+
+# Whitelist güncelle
+curl -X PUT http://localhost:8080/v1/settings/cors/whitelist/UUID_HERE \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "is_active": false
+  }'
+
+# Blacklist'e ekle
+curl -X POST http://localhost:8080/v1/settings/cors/blacklist \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "origin": "http://bad-site.com",
+    "reason": "Security threat"
+  }'
+
+# Rate limit ayarlarını görüntüle
+curl -X GET http://localhost:8080/v1/settings/ratelimit \
+  -H "Authorization: Bearer $TOKEN"
+
+# Rate limit güncelle
+curl -X PUT http://localhost:8080/v1/settings/ratelimit/UUID_HERE \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "max_requests": 20,
+    "window_seconds": 60,
+    "description": "Updated login limit"
+  }'
+```
+
+---
+
+## 🗄️ Database Tabloları
+
+### cors_whitelists
+```sql
+CREATE TABLE cors_whitelists (
+    id UUID PRIMARY KEY,
+    origin VARCHAR(255) UNIQUE NOT NULL,
+    description TEXT,
+    is_active BOOLEAN DEFAULT true,
+    created_by VARCHAR(255),
+    created_at TIMESTAMP,
+    updated_at TIMESTAMP
+);
+```
+
+### cors_blacklists
+```sql
+CREATE TABLE cors_blacklists (
+    id UUID PRIMARY KEY,
+    origin VARCHAR(255) UNIQUE NOT NULL,
+    reason TEXT,
+    is_active BOOLEAN DEFAULT true,
+    created_by VARCHAR(255),
+    created_at TIMESTAMP,
+    updated_at TIMESTAMP
+);
+```
+
+### rate_limit_settings
+```sql
+CREATE TABLE rate_limit_settings (
+    id UUID PRIMARY KEY,
+    name VARCHAR(100) UNIQUE NOT NULL,
+    description TEXT,
+    max_requests BIGINT NOT NULL,
+    window_seconds INTEGER NOT NULL,
+    is_active BOOLEAN DEFAULT true,
+    updated_by VARCHAR(255),
+    created_at TIMESTAMP,
+    updated_at TIMESTAMP
+);
+```
+
+---
+
+## ⚙️ Default Ayarlar
+
+Uygulama ilk kez başlatıldığında otomatik olarak şu ayarlar oluşturulur:
+
+### CORS Whitelist
+- `http://localhost:3000` - Default local frontend
+- `http://localhost:8080` - Backend self
+
+### Rate Limit Settings
+- **login**: 5 istek / 60 saniye
+- **register**: 3 istek / 300 saniye
+- **api**: 100 istek / 60 saniye
+
+---
+
+## 🔐 Güvenlik Notları
+
+1. **Authentication Zorunlu**: Tüm settings endpoint'leri authentication gerektirir
+2. **Admin Kontrolü**: Şu anda tüm authenticated kullanıcılar yönetebilir (TODO: Admin role check eklenecek)
+3. **Cache**: Değişiklikler 1 saat boyunca cache'de kalır
+4. **Blacklist Önceliği**: Blacklist kontrolü whitelist'ten önce yapılır
+
+---
+
+## 📊 Frontend Admin Panel Örneği
+
+```javascript
+// Admin Panel Component
+class CorsManagement {
+  constructor() {
+    this.api = 'http://localhost:8080/v1/settings';
+    this.token = localStorage.getItem('access_token');
+  }
+
+  async getWhitelist() {
+    const res = await fetch(`${this.api}/cors/whitelist`, {
+      headers: { 'Authorization': `Bearer ${this.token}` }
+    });
+    return res.json();
+  }
+
+  async addWhitelist(origin, description) {
+    const res = await fetch(`${this.api}/cors/whitelist`, {
+      method: 'POST',
+      headers: {
+        'Authorization': `Bearer ${this.token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({ origin, description })
+    });
+    return res.json();
+  }
+
+  async updateWhitelist(id, data) {
+    const res = await fetch(`${this.api}/cors/whitelist/${id}`, {
+      method: 'PUT',
+      headers: {
+        'Authorization': `Bearer ${this.token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(data)
+    });
+    return res.json();
+  }
+
+  async deleteWhitelist(id) {
+    const res = await fetch(`${this.api}/cors/whitelist/${id}`, {
+      method: 'DELETE',
+      headers: { 'Authorization': `Bearer ${this.token}` }
+    });
+    return res.json();
+  }
+}
+
+// Kullanım
+const corsManager = new CorsManagement();
+
+// Whitelist listele
+corsManager.getWhitelist().then(data => {
+  console.log('Whitelist:', data);
+});
+
+// Yeni ekle
+corsManager.addWhitelist('https://myapp.com', 'Production app');
+
+// Güncelle
+corsManager.updateWhitelist('uuid-here', { is_active: false });
+
+// Sil
+corsManager.deleteWhitelist('uuid-here');
+```
+
+---
+
+## ✅ Özet
+
+Artık CORS whitelist/blacklist ve rate limit ayarlarını:
+
+- ✅ **Database'de** saklayabiliyorsunuz
+- ✅ **Redis ile cache**'leyebiliyorsunuz
+- ✅ **Frontend'den yönetebiliyorsunuz**
+- ✅ **CRUD işlemleri** yapabiliyorsunuz
+- ✅ **Dinamik olarak** güncelleyebiliyorsunuz
+
+Tüm ayarlar database'de tutulur, değişiklikler anında Redis cache'ini invalidate eder ve yeni değerler kullanılmaya başlanır!
--- a/docs/SETUP.md
+++ b/docs/SETUP.md
@@ -0,0 +1,328 @@
+# 🚀 GAuth-Central Kurulum Rehberi
+
+## Hızlı Başlangıç
+
+### Option 1: Standalone Mode (Mevcut Sunucular ile)
+
+Eğer zaten çalışan PostgreSQL ve Redis sunucularınız varsa:
+
+```bash
+# 1. .env dosyasını kontrol edin ve sunucu bilgilerini girin
+# DB_URL="host=YOUR_HOST user=YOUR_USER password=YOUR_PASS dbname=YOUR_DB..."
+# REDIS_URL=redis://user:pass@YOUR_HOST:6379/0
+
+# 2. Uygulamayı başlatın
+./start.sh
+```
+
+Script şunları yapacaktır:
+- ✅ .env dosyasını kontrol eder
+- ✅ PostgreSQL bağlantısını test eder
+- ✅ Redis bağlantısını test eder
+- ✅ Uygulamayı derler ve başlatır
+
+### Option 2: Docker ile (Yeni Kurulum)
+
+```bash
+# 1. Start-with-docker scriptini çalıştırın
+./start-with-docker.sh
+
+# 2. Logları izleyin
+docker-compose logs -f app
+```
+
+### Option 2: Docker ile (Yeni Kurulum)
+
+```bash
+# 1. Start-with-docker scriptini çalıştırın
+./start-with-docker.sh
+
+# 2. Logları izleyin
+docker-compose logs -f app
+```
+
+### Option 3: Manuel Kurulum (Sadece Uygulama)
+
+**Not:** Bu option mevcut PostgreSQL ve Redis sunucularınızla çalışmak için kullanılır.
+
+#### 1. Bağımlılıkları Yükleyin
+
+```bash
+go mod download
+```
+
+#### 2. .env Dosyasını Yapılandırın
+
+```bash
+# .env dosyasını düzenleyin
+nano .env
+```
+
+Gerekli ayarlar:
+```env
+PORT=8080
+
+# Mevcut PostgreSQL sunucunuz
+DB_URL="host=10.80.80.70 user=cloud password=xxx dbname=go_gauth port=5432 sslmode=disable TimeZone=Europe/Istanbul"
+
+# Mevcut Redis sunucunuz
+REDIS_URL=redis://default:xxx@10.80.80.70:6379/0
+
+# JWT Secret
+JWT_SECRET=your_super_secret_key
+
+# OAuth credentials (opsiyonel)
+GOOGLE_CLIENT_ID=...
+GOOGLE_CLIENT_SECRET=...
+GITHUB_CLIENT_ID=...
+GITHUB_CLIENT_SECRET=...
+CLIENT_CALLBACK_URL=http://localhost:8080/v1/auth
+```
+
+#### 3. Uygulamayı Çalıştırın
+
+```bash
+# Quick start script ile
+./start.sh
+
+# veya manuel
+go build -o main .
+./main
+
+# veya doğrudan
+go run main.go
+```
+
+### Option 4: Docker ile Sadece Veritabanları
+
+### Option 4: Docker ile Sadece Veritabanları
+
+Eğer uygulamayı local'de çalıştırıp sadece veritabanlarını Docker'da tutmak isterseniz:
+
+#### 1. PostgreSQL'i Başlatın
+
+```bash
+docker run -d \
+  --name gauth_postgres \
+  -e POSTGRES_USER=postgres \
+  -e POSTGRES_PASSWORD=yourpassword \
+  -e POSTGRES_DB=gauth \
+  -p 5432:5432 \
+  postgres:17-alpine
+```
+
+#### 2. Redis'i Başlatın
+
+```bash
+# Docker ile
+docker run -d \
+  --name gauth_redis \
+  -p 6379:6379 \
+  redis:7-alpine
+```
+
+#### 4. .env Dosyasını Yapılandırın
+
+```bash
+cp .env.example .env
+# .env dosyasını düzenleyin
+```
+
+Örnek .env:
+```env
+PORT=8080
+DB_URL="host=localhost user=postgres password=yourpassword dbname=gauth port=5432 sslmode=disable TimeZone=Europe/Istanbul"
+REDIS_URL=redis://localhost:6379/0
+JWT_SECRET=your_super_secret_key
+```
+
+#### 5. Uygulamayı Çalıştırın
+
+```bash
+# Geliştirme modu
+go run main.go
+
+# Veya derleyip çalıştırın
+go build -o main .
+./main
+```
+
+## 🔧 Yapılandırma Detayları
+
+### PostgreSQL Bağlantısı
+
+Uygulamanız PostgreSQL veritabanına bağlanacak ve otomatik olarak:
+- Tabloları oluşturacak (migration)
+- Seed data ekleyecek (roles, permissions)
+- Email doğrulama sütununu güncelleyecek
+
+### Redis Cache
+
+Redis aşağıdaki amaçlarla kullanılır:
+
+1. **Session Yönetimi**: Token-based session storage
+2. **Rate Limiting**: API çağrılarını sınırlandırma
+3. **Cache**: Kullanıcı verileri ve sık erişilen datalar
+4. **Token Blacklist**: Logout işlemlerinde token iptal
+5. **Email Verification**: Email doğrulama token'ları
+6. **Password Reset**: Şifre sıfırlama token'ları
+
+### CORS Yapılandırması
+
+Varsayılan olarak `http://localhost:3000` origin'ine izin verilir. Değiştirmek için `main.go` dosyasını düzenleyin:
+
+```go
+AllowOrigins: []string{"http://localhost:3000", "https://yourdomain.com"},
+```
+
+## 🧪 Test Etme
+
+### 1. Sağlık Kontrolü
+
+```bash
+curl http://localhost:8080/
+```
+
+### 2. Swagger UI
+
+Tarayıcınızda: `http://localhost:8080/docs/index.html`
+
+### 3. Kullanıcı Kaydı
+
+```bash
+curl -X POST http://localhost:8080/v1/auth/register \
+  -H "Content-Type: application/json" \
+  -d '{
+    "email": "test@example.com",
+    "password": "SecurePass123!",
+    "user_name": "testuser"
+  }'
+```
+
+### 4. Giriş
+
+```bash
+curl -X POST http://localhost:8080/v1/auth/login \
+  -H "Content-Type: application/json" \
+  -d '{
+    "email": "test@example.com",
+    "password": "SecurePass123!"
+  }'
+```
+
+### 5. Redis Bağlantı Kontrolü
+
+```bash
+# Redis CLI ile
+docker exec -it gauth_redis redis-cli
+
+# Redis içinde
+> PING
+PONG
+
+> KEYS *
+(Redis'teki tüm key'leri gösterir)
+
+> GET user:UUID_HERE
+(Kullanıcı cache verisi)
+```
+
+### 6. PostgreSQL Bağlantı Kontrolü
+
+```bash
+# PostgreSQL CLI ile
+docker exec -it gauth_postgres psql -U postgres -d gauth
+
+# PostgreSQL içinde
+\dt  -- Tabloları listele
+\d users  -- Users tablosu yapısını göster
+SELECT * FROM roles;  -- Rolleri listele
+```
+
+## 📊 Rate Limiting Yapılandırması
+
+Varsayılan limitler:
+
+- **Login**: 5 deneme / dakika
+- **Register**: 3 deneme / 5 dakika
+- **Genel API**: 100 istek / dakika
+
+Değiştirmek için `api/middlewares/rate_limit_middleware.go` dosyasını düzenleyin.
+
+## 🔐 OAuth Yapılandırması
+
+### Google OAuth
+
+1. [Google Cloud Console](https://console.cloud.google.com/) → API & Services → Credentials
+2. OAuth 2.0 Client ID oluşturun
+3. Authorized redirect URIs: `http://localhost:8080/v1/auth/google/callback`
+4. Client ID ve Secret'ı `.env` dosyasına ekleyin
+
+### GitHub OAuth
+
+1. [GitHub Developer Settings](https://github.com/settings/developers) → OAuth Apps → New
+2. Authorization callback URL: `http://localhost:8080/v1/auth/github/callback`
+3. Client ID ve Secret'ı `.env` dosyasına ekleyin
+
+## 🐛 Sorun Giderme
+
+### Redis bağlanamıyor
+
+```bash
+# Redis durumunu kontrol et
+docker ps | grep redis
+
+# Redis loglarını kontrol et
+docker logs gauth_redis
+
+# Redis'i yeniden başlat
+docker restart gauth_redis
+```
+
+### PostgreSQL bağlanamıyor
+
+```bash
+# PostgreSQL durumunu kontrol et
+docker ps | grep postgres
+
+# PostgreSQL loglarını kontrol et
+docker logs gauth_postgres
+
+# Bağlantıyı test et
+docker exec -it gauth_postgres pg_isready -U postgres
+```
+
+### CORS hatası alıyorum
+
+`main.go` dosyasında `AllowOrigins` değerini kontrol edin ve frontend URL'inizi ekleyin.
+
+### Rate limit çok düşük
+
+`api/middlewares/rate_limit_middleware.go` dosyasında limit değerlerini artırın.
+
+## 📝 Notlar
+
+- Üretim ortamında `JWT_SECRET` değerini güçlü bir değerle değiştirin
+- Redis şifre koruması için production'da Redis AUTH kullanın
+- PostgreSQL için SSL bağlantısı kullanın (sslmode=require)
+- Log seviyelerini production'da ayarlayın
+- CORS origin'lerini production domain'lerinizle güncelleyin
+
+## 🔄 Güncellemeler
+
+Swagger dokümantasyonunu güncellemek için:
+
+```bash
+swag init -g main.go
+```
+
+Migration eklemek için:
+
+`internal/database/db.go` dosyasındaki `Migrate()` fonksiyonunu güncelleyin.
+
+## 📚 Daha Fazla Bilgi
+
+- [Gin Web Framework](https://gin-gonic.com/)
+- [GORM ORM](https://gorm.io/)
+- [Redis Go Client](https://redis.uptrace.dev/)
+- [JWT Go](https://github.com/golang-jwt/jwt)
--- a/docs/api_backend.txt
+++ b/docs/api_backend.txt
@@ -0,0 +1,9 @@
+/                         --> gauth-central/api/routes.SetupRoutes.func1 (3 handlers)
+[GIN-debug] GET    /docs/*any                --> github.com/swaggo/gin-swagger.CustomWrapHandler.func1 (3 handlers)
+[GIN-debug] POST   /v1/auth/register         --> gauth-central/api/handlers.(*AuthHandler).Register-fm (3 handlers)
+[GIN-debug] POST   /v1/auth/login            --> gauth-central/api/handlers.(*AuthHandler).Login-fm (3 handlers)
+[GIN-debug] GET    /v1/auth/:provider        --> gauth-central/api/handlers.(*AuthHandler).BeginAuth-fm (3 handlers)
+[GIN-debug] GET    /v1/auth/:provider/callback --> gauth-central/api/handlers.(*AuthHandler).Callback-fm (3 handlers)
+[GIN-debug] POST   /v1/auth/refresh          --> gauth-central/api/handlers.(*AuthHandler).Refresh-fm (3 handlers)
+[GIN-debug] GET    /v1/auth/me               --> gauth-central/api/handlers.(*AuthHandler).Me-fm (4 handlers)
+[GIN-debug] GET    /v1/auth/validate
--- a/eslint.config.mjs
+++ b/eslint.config.mjs
@@ -0,0 +1,18 @@
+import { defineConfig, globalIgnores } from "eslint/config";
+import nextVitals from "eslint-config-next/core-web-vitals";
+import nextTs from "eslint-config-next/typescript";
+
+const eslintConfig = defineConfig([
+  ...nextVitals,
+  ...nextTs,
+  // Override default ignores of eslint-config-next.
+  globalIgnores([
+    // Default ignores of eslint-config-next:
+    ".next/**",
+    "out/**",
+    "build/**",
+    "next-env.d.ts",
+  ]),
+]);
+
+export default eslintConfig;
--- a/hooks/use-mobile.ts
+++ b/hooks/use-mobile.ts
@@ -0,0 +1,19 @@
+import * as React from "react"
+
+const MOBILE_BREAKPOINT = 768
+
+export function useIsMobile() {
+  const [isMobile, setIsMobile] = React.useState<boolean | undefined>(undefined)
+
+  React.useEffect(() => {
+    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`)
+    const onChange = () => {
+      setIsMobile(window.innerWidth < MOBILE_BREAKPOINT)
+    }
+    mql.addEventListener("change", onChange)
+    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT)
+    return () => mql.removeEventListener("change", onChange)
+  }, [])
+
+  return !!isMobile
+}
--- a/lib/api/fetchClient.ts
+++ b/lib/api/fetchClient.ts
@@ -0,0 +1,109 @@
+import Cookies from "js-cookie";
+
+// .env'deki NEXT_PUBLIC_API_BASE kullanılır (örn: http://127.0.0.1:8080). /v1 prefix'i burada eklenir.
+const getBaseUrl = () => {
+    const base = process.env.NEXT_PUBLIC_API_BASE || "http://localhost:8080";
+    const normalized = base.replace(/\/$/, "");
+    return `${normalized}/v1`;
+};
+const BASE_URL = getBaseUrl();
+
+interface FetchOptions extends RequestInit {
+    headers?: Record<string, string>;
+}
+
+interface AuthResponse {
+    access_token: string;
+    refresh_token: string;
+}
+
+export const fetchClient = async (endpoint: string, options: FetchOptions = {}) => {
+    const getAccessToken = () => Cookies.get("access_token");
+    const getRefreshToken = () => Cookies.get("refresh_token");
+
+    const setTokens = (access: string, refresh: string) => {
+        Cookies.set("access_token", access, { secure: true, sameSite: 'strict' });
+        Cookies.set("refresh_token", refresh, { secure: true, sameSite: 'strict' });
+        // Dispatch event for other tabs or parts of the app to know (optional)
+        if (typeof window !== "undefined") {
+            window.dispatchEvent(new Event("storage"));
+        }
+    };
+
+    const clearTokens = () => {
+        Cookies.remove("access_token");
+        Cookies.remove("refresh_token");
+        if (typeof window !== "undefined") {
+            try {
+                localStorage.removeItem("user");
+            } catch (e) { }
+            window.location.href = "/login";
+        }
+    };
+
+    const headers: Record<string, string> = {
+        ...options.headers,
+    };
+
+    if (!(options.body instanceof FormData)) {
+        headers["Content-Type"] = "application/json";
+    }
+
+    const token = getAccessToken();
+    if (token) {
+        headers["Authorization"] = `Bearer ${token}`;
+    }
+
+    const config: RequestInit = {
+        ...options,
+        headers,
+    };
+
+    let response = await fetch(`${BASE_URL}${endpoint}`, config);
+
+    // Handle 401 - Token Expired
+    if (response.status === 401) {
+        const refreshToken = getRefreshToken();
+        if (!refreshToken) {
+            clearTokens();
+            throw new Error("Session expired");
+        }
+
+        try {
+            // Attempt to refresh token
+            const refreshResponse = await fetch(`${BASE_URL}/auth/refresh`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ refresh_token: refreshToken }),
+            });
+
+            if (!refreshResponse.ok) {
+                throw new Error("Refresh failed");
+            }
+
+            const data: AuthResponse = await refreshResponse.json();
+            setTokens(data.access_token, data.refresh_token);
+
+            // Retry original request with new token
+            headers["Authorization"] = `Bearer ${data.access_token}`;
+            response = await fetch(`${BASE_URL}${endpoint}`, { ...options, headers });
+        } catch (error) {
+            clearTokens();
+            throw new Error("Session expired. Please login again.");
+        }
+    }
+
+    // Handle other errors
+    if (!response.ok) {
+        const errorData = await response.json().catch(() => ({}));
+        const errorMessage = errorData.error || errorData.message || response.statusText;
+        throw new Error(errorMessage);
+    }
+
+    // Return json if content type is json, otherwise text or null
+    const contentType = response.headers.get("content-type");
+    if (contentType && contentType.includes("application/json")) {
+        return response.json();
+    }
+    return response.text();
+};
--- a/lib/features/auth/authSlice.ts
+++ b/lib/features/auth/authSlice.ts
@@ -0,0 +1,300 @@
+import { createSlice, createAsyncThunk, PayloadAction } from "@reduxjs/toolkit";
+import { fetchClient } from "@/lib/api/fetchClient";
+import Cookies from "js-cookie";
+
+// Types
+export interface Permission {
+    id: number;
+    name: string;
+    description: string;
+}
+
+export interface Role {
+    id: number;
+    name: string;
+    description: string;
+    permissions?: Permission[] | null;
+}
+
+export interface SocialAccount {
+    id: number;
+    provider: string;
+    email: string;
+}
+
+export interface User {
+    id: string;
+    username: string;
+    email: string;
+    roles: Role[];
+    avatar_url?: string;
+    email_verified?: boolean;
+    is_oauth_user?: boolean;
+    social_accounts?: SocialAccount[];
+    created_at?: string;
+    updated_at?: string;
+}
+
+interface AuthState {
+    user: User | null;
+    isAuthenticated: boolean;
+    isLoading: boolean;
+    error: string | null;
+}
+
+interface LoginResponse {
+    user_id: string;
+    username: string;
+    email: string;
+    access_token: string;
+    refresh_token: string;
+    roles: Role[];
+    avatar?: string;
+}
+
+interface RegisterResponse {
+    user_id: string;
+    username: string;
+    email: string;
+    avatar: string;
+    email_verified: boolean;
+    message: string;
+    roles: Role[];
+    verification_token: string;
+}
+
+// Initial State
+const initialState: AuthState = {
+    user: null,
+    isAuthenticated: false,
+    isLoading: false,
+    error: null,
+};
+
+// Async Thunks
+export const login = createAsyncThunk(
+    "auth/login",
+    async (credentials: any, { rejectWithValue }) => {
+        try {
+            const response: LoginResponse = await fetchClient("/auth/login", {
+                method: "POST",
+                body: JSON.stringify(credentials),
+            });
+
+            // Validate Check: Ensure tokens exist
+            if (!response.access_token || !response.refresh_token) {
+                return rejectWithValue("Giriş başarısız: Token alınamadı. Lütfen emailinizi doğruladığınızdan emin olun.");
+            }
+
+            // Store tokens in cookies
+            Cookies.set("access_token", response.access_token, { secure: true, sameSite: 'strict' });
+            Cookies.set("refresh_token", response.refresh_token, { secure: true, sameSite: 'strict' });
+
+            // Store user info in localStorage for convenience (optional, can be removed if strict cookie only)
+            if (typeof window !== "undefined") {
+                localStorage.setItem("user", JSON.stringify({
+                    id: response.user_id,
+                    username: response.username,
+                    email: response.email,
+                    roles: response.roles,
+                    avatar_url: response.avatar
+                }));
+            }
+
+            return response;
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const register = createAsyncThunk(
+    "auth/register",
+    async (credentials: any, { rejectWithValue }) => {
+        try {
+            const response: RegisterResponse = await fetchClient("/auth/register", {
+                method: "POST",
+                body: JSON.stringify(credentials),
+            });
+
+            // NOTE: Register does NOT return tokens anymore.
+            // We do NOT set cookies here.
+            // We do NOT set localStorage user here.
+
+            return response;
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const fetchProfile = createAsyncThunk(
+    "auth/fetchProfile",
+    async (_, { rejectWithValue }) => {
+        try {
+            const response = await fetchClient("/profile");
+            const data = response as any;
+            // Map API response to User type, specifically avatar -> avatar_url
+            return {
+                ...data,
+                avatar_url: data.avatar,
+                roles: data.roles || []
+            } as User;
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const updateProfile = createAsyncThunk(
+    "auth/updateProfile",
+    async (formData: FormData, { rejectWithValue }) => {
+        try {
+            const response = await fetchClient("/profile", {
+                method: "PUT",
+                body: formData,
+            });
+
+            const data = (response as any).user;
+
+            // Map API response to User type, specifically avatar -> avatar_url
+            return {
+                ...data,
+                avatar_url: data.avatar,
+                roles: data.roles || []
+            } as User;
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const changePassword = createAsyncThunk(
+    "auth/changePassword",
+    async (data: any, { rejectWithValue }) => {
+        try {
+            const response = await fetchClient("/profile/password", {
+                method: "PUT",
+                body: JSON.stringify(data),
+            });
+            return response;
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const changeEmail = createAsyncThunk(
+    "auth/changeEmail",
+    async (data: any, { rejectWithValue }) => {
+        try {
+            const response = await fetchClient("/profile/email", {
+                method: "PUT",
+                body: JSON.stringify(data),
+            });
+            return response;
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+// Slice
+const authSlice = createSlice({
+    name: "auth",
+    initialState,
+    reducers: {
+        logout: (state) => {
+            state.user = null;
+            state.isAuthenticated = false;
+            state.error = null;
+            Cookies.remove("access_token");
+            Cookies.remove("refresh_token");
+            if (typeof window !== "undefined") {
+                localStorage.removeItem("user");
+            }
+        },
+        restoreSession: (state) => {
+            if (typeof window !== "undefined") {
+                const userStr = localStorage.getItem("user");
+                const token = Cookies.get("access_token");
+                if (userStr && token) {
+                    try {
+                        const parsedUser = JSON.parse(userStr);
+                        // Migration for legacy data: map avatar to avatar_url if needed
+                        if (parsedUser.avatar && !parsedUser.avatar_url) {
+                            parsedUser.avatar_url = parsedUser.avatar;
+                        }
+                        state.user = parsedUser;
+                        state.isAuthenticated = true;
+                    } catch (e) {
+                        // Corrupt user data
+                        localStorage.removeItem("user");
+                        Cookies.remove("access_token");
+                        Cookies.remove("refresh_token");
+                    }
+                }
+            }
+        }
+    },
+    extraReducers: (builder) => {
+        // Login
+        builder.addCase(login.pending, (state) => {
+            state.isLoading = true;
+            state.error = null;
+        });
+        builder.addCase(login.fulfilled, (state, action) => {
+            state.isLoading = false;
+            state.isAuthenticated = true;
+            state.user = {
+                id: action.payload.user_id,
+                username: action.payload.username,
+                email: action.payload.email,
+                roles: action.payload.roles,
+                avatar_url: action.payload.avatar
+            };
+        });
+        builder.addCase(login.rejected, (state, action) => {
+            state.isLoading = false;
+            state.error = action.payload as string;
+        });
+
+        // Register
+        builder.addCase(register.pending, (state) => {
+            state.isLoading = true;
+            state.error = null;
+        });
+        builder.addCase(register.fulfilled, (state, action) => {
+            state.isLoading = false;
+            // isAuthenticated remains false because we need email verification
+            state.isAuthenticated = false;
+            // We do not set the user state effectively until they login
+            state.user = null;
+        });
+        builder.addCase(register.rejected, (state, action) => {
+            state.isLoading = false;
+            state.error = action.payload as string;
+        });
+
+        // Fetch Profile
+        builder.addCase(fetchProfile.fulfilled, (state, action) => {
+            state.user = action.payload;
+            // Sync with localStorage so next refresh has fresh data
+            if (typeof window !== "undefined") {
+                localStorage.setItem("user", JSON.stringify(action.payload));
+            }
+        });
+
+        // Update Profile
+        builder.addCase(updateProfile.fulfilled, (state, action) => {
+            state.user = action.payload;
+            // Sync with localStorage so next refresh has fresh data
+            if (typeof window !== "undefined") {
+                localStorage.setItem("user", JSON.stringify(action.payload));
+            }
+        });
+    },
+});
+
+export const { logout, restoreSession } = authSlice.actions;
+export default authSlice.reducer;
--- a/lib/features/cors/corsSlice.ts
+++ b/lib/features/cors/corsSlice.ts
@@ -0,0 +1,215 @@
+import { createSlice, createAsyncThunk } from "@reduxjs/toolkit";
+import { fetchClient } from "@/lib/api/fetchClient";
+
+// Types
+export interface CorsEntry {
+    id: string;
+    origin: string;
+    description?: string; // For whitelist
+    reason?: string;      // For blacklist
+    is_active: boolean;
+    created_by: string;
+    created_at: string;
+    updated_at: string;
+}
+
+interface CorsState {
+    whitelist: CorsEntry[];
+    blacklist: CorsEntry[];
+    isLoading: boolean;
+    error: string | null;
+}
+
+const initialState: CorsState = {
+    whitelist: [],
+    blacklist: [],
+    isLoading: false,
+    error: null,
+};
+
+// Async Thunks
+
+// --- WHITELIST ---
+
+export const fetchWhitelists = createAsyncThunk(
+    "cors/fetchWhitelists",
+    async (_, { rejectWithValue }) => {
+        try {
+            return await fetchClient("/settings/cors/whitelist");
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const createWhitelist = createAsyncThunk(
+    "cors/createWhitelist",
+    async (data: { origin: string; description: string }, { rejectWithValue }) => {
+        try {
+            return await fetchClient("/settings/cors/whitelist", {
+                method: "POST",
+                body: JSON.stringify(data),
+            });
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const updateWhitelist = createAsyncThunk(
+    "cors/updateWhitelist",
+    async ({ id, data }: { id: string; data: Partial<CorsEntry> }, { rejectWithValue }) => {
+        try {
+            await fetchClient(`/settings/cors/whitelist/${id}`, {
+                method: "PUT",
+                body: JSON.stringify(data),
+            });
+            return { id, data };
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const deleteWhitelist = createAsyncThunk(
+    "cors/deleteWhitelist",
+    async (id: string, { rejectWithValue }) => {
+        try {
+            await fetchClient(`/settings/cors/whitelist/${id}`, {
+                method: "DELETE",
+            });
+            return id;
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+// --- BLACKLIST ---
+
+export const fetchBlacklists = createAsyncThunk(
+    "cors/fetchBlacklists",
+    async (_, { rejectWithValue }) => {
+        try {
+            return await fetchClient("/settings/cors/blacklist");
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const createBlacklist = createAsyncThunk(
+    "cors/createBlacklist",
+    async (data: { origin: string; reason: string }, { rejectWithValue }) => {
+        try {
+            return await fetchClient("/settings/cors/blacklist", {
+                method: "POST",
+                body: JSON.stringify(data),
+            });
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const updateBlacklist = createAsyncThunk(
+    "cors/updateBlacklist",
+    async ({ id, data }: { id: string; data: Partial<CorsEntry> }, { rejectWithValue }) => {
+        try {
+            await fetchClient(`/settings/cors/blacklist/${id}`, {
+                method: "PUT",
+                body: JSON.stringify(data),
+            });
+            return { id, data };
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const deleteBlacklist = createAsyncThunk(
+    "cors/deleteBlacklist",
+    async (id: string, { rejectWithValue }) => {
+        try {
+            await fetchClient(`/settings/cors/blacklist/${id}`, {
+                method: "DELETE",
+            });
+            return id;
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+const corsSlice = createSlice({
+    name: "cors",
+    initialState,
+    reducers: {},
+    extraReducers: (builder) => {
+        // Fetch Whitelists
+        builder.addCase(fetchWhitelists.pending, (state) => {
+            state.isLoading = true;
+            state.error = null;
+        });
+        builder.addCase(fetchWhitelists.fulfilled, (state, action) => {
+            state.isLoading = false;
+            state.whitelist = action.payload as CorsEntry[];
+        });
+        builder.addCase(fetchWhitelists.rejected, (state, action) => {
+            state.isLoading = false;
+            state.error = action.payload as string;
+        });
+
+        // Create Whitelist
+        builder.addCase(createWhitelist.fulfilled, (state, action) => {
+            state.whitelist.push(action.payload as CorsEntry);
+        });
+
+        // Update Whitelist
+        builder.addCase(updateWhitelist.fulfilled, (state, action) => {
+            const index = state.whitelist.findIndex((item) => item.id === action.payload.id);
+            if (index !== -1) {
+                state.whitelist[index] = { ...state.whitelist[index], ...action.payload.data };
+            }
+        });
+
+        // Delete Whitelist
+        builder.addCase(deleteWhitelist.fulfilled, (state, action) => {
+            state.whitelist = state.whitelist.filter((item) => item.id !== action.payload);
+        });
+
+        // Fetch Blacklists
+        builder.addCase(fetchBlacklists.pending, (state) => {
+            state.isLoading = true;
+            state.error = null;
+        });
+        builder.addCase(fetchBlacklists.fulfilled, (state, action) => {
+            state.isLoading = false;
+            state.blacklist = action.payload as CorsEntry[];
+        });
+        builder.addCase(fetchBlacklists.rejected, (state, action) => {
+            state.isLoading = false;
+            state.error = action.payload as string;
+        });
+
+        // Create Blacklist
+        builder.addCase(createBlacklist.fulfilled, (state, action) => {
+            state.blacklist.push(action.payload as CorsEntry);
+        });
+
+        // Update Blacklist
+        builder.addCase(updateBlacklist.fulfilled, (state, action) => {
+            const index = state.blacklist.findIndex((item) => item.id === action.payload.id);
+            if (index !== -1) {
+                state.blacklist[index] = { ...state.blacklist[index], ...action.payload.data };
+            }
+        });
+
+        // Delete Blacklist
+        builder.addCase(deleteBlacklist.fulfilled, (state, action) => {
+            state.blacklist = state.blacklist.filter((item) => item.id !== action.payload);
+        });
+    },
+});
+
+export default corsSlice.reducer;
--- a/lib/features/users/usersSlice.ts
+++ b/lib/features/users/usersSlice.ts
@@ -0,0 +1,256 @@
+import { createSlice, createAsyncThunk, PayloadAction } from "@reduxjs/toolkit";
+// Users Slice for managing users and deleted users
+import { fetchClient } from "@/lib/api/fetchClient";
+import { User } from "@/lib/features/auth/authSlice";
+
+/** API'den gelen kullanıcıyı frontend User tipine çevirir (avatar -> avatar_url, permissions null ise []). */
+function mapApiUserToUser(apiUser: Record<string, unknown>): User & { deleted_at?: string } {
+    const roles = (apiUser.roles as User["roles"]) || [];
+    return {
+        id: String(apiUser.id),
+        username: String(apiUser.username ?? ""),
+        email: String(apiUser.email ?? ""),
+        roles: roles.map((r) => ({ ...r, permissions: r.permissions ?? [] })),
+        avatar_url: apiUser.avatar ? String(apiUser.avatar) : (apiUser.avatar_url as string | undefined),
+        deleted_at: apiUser.deleted_at ? String(apiUser.deleted_at) : undefined,
+    };
+}
+
+// Types
+export interface CreateUserRequest {
+    username: string;
+    email: string;
+    password?: string;
+    roles?: string[];
+    avatar?: File;
+}
+
+export interface UpdateUserRequest {
+    id: string;
+    username?: string;
+    email?: string;
+    password?: string;
+    roles?: string[];
+    avatar?: File;
+}
+
+interface UsersState {
+    users: User[]; // Active users
+    deletedUsers: (User & { deleted_at?: string })[]; // Soft-deleted users
+    isLoading: boolean;
+    error: string | null;
+}
+
+const initialState: UsersState = {
+    users: [],
+    deletedUsers: [],
+    isLoading: false,
+    error: null,
+};
+
+// Async Thunks
+export const fetchUsers = createAsyncThunk(
+    "users/fetchAll",
+    async (_, { rejectWithValue }) => {
+        try {
+            const response = await fetchClient("/admin/users") as { users?: unknown[]; data?: unknown[]; pagination?: unknown };
+            const rawList = response.users ?? response.data ?? (Array.isArray(response) ? response : null);
+            const list = Array.isArray(rawList) ? rawList : [];
+            return list.map((u) => mapApiUserToUser(u as Record<string, unknown>));
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const fetchDeletedUsers = createAsyncThunk(
+    "users/fetchDeleted",
+    async (_, { rejectWithValue }) => {
+        try {
+            const response = await fetchClient("/admin/users/deleted") as { users?: unknown[]; data?: unknown[]; pagination?: unknown };
+            const rawList = response.users ?? response.data ?? (Array.isArray(response) ? response : null);
+            const list = Array.isArray(rawList) ? rawList : [];
+            return list.map((u) => mapApiUserToUser(u as Record<string, unknown>));
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const createUser = createAsyncThunk(
+    "users/create",
+    async (userData: CreateUserRequest, { rejectWithValue }) => {
+        try {
+            const formData = new FormData();
+            formData.append("user_name", userData.username);
+            formData.append("email", userData.email);
+            if (userData.password) formData.append("password", userData.password);
+
+            if (userData.roles && userData.roles.length > 0) {
+                userData.roles.forEach((r) => formData.append("roles", r));
+            }
+
+            if (userData.avatar) {
+                formData.append("avatar", userData.avatar);
+            }
+
+            const response = await fetchClient("/admin/users", {
+                method: "POST",
+                body: formData,
+            });
+            const raw = (response as { user?: Record<string, unknown> }).user ?? response;
+            return mapApiUserToUser(raw as Record<string, unknown>);
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const updateUser = createAsyncThunk(
+    "users/update",
+    async (userData: UpdateUserRequest, { rejectWithValue }) => {
+        try {
+            const { id, username, email, password, roles, avatar } = userData;
+
+            const formData = new FormData();
+            if (username !== undefined) formData.append("user_name", username);
+            if (email !== undefined) formData.append("email", email);
+            if (password) formData.append("password", password);
+            if (roles && roles.length > 0) {
+                roles.forEach((r) => formData.append("roles", r));
+            }
+            if (avatar) {
+                formData.append("avatar", avatar);
+            }
+
+            const response = await fetchClient(`/admin/users/${id}`, {
+                method: "PUT",
+                body: formData,
+            });
+            const raw = (response as { user?: Record<string, unknown> }).user ?? response;
+            return mapApiUserToUser(raw as Record<string, unknown>);
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const deleteUser = createAsyncThunk(
+    "users/delete",
+    async (payload: string | { id: string; hard: boolean }, { rejectWithValue }) => {
+        try {
+            const id = typeof payload === "string" ? payload : payload.id;
+            const isHard = typeof payload === "object" && payload.hard;
+
+            const endpoint = `/admin/users/${id}${isHard ? "?hard=true" : ""}`;
+
+            await fetchClient(endpoint, {
+                method: "DELETE",
+            });
+            return { id, isHard };
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+export const restoreUser = createAsyncThunk(
+    "users/restore",
+    async (id: string, { rejectWithValue }) => {
+        try {
+            await fetchClient(`/admin/users/${id}/restore`, {
+                method: "POST",
+            });
+            return id;
+        } catch (error: any) {
+            return rejectWithValue(error.message);
+        }
+    }
+);
+
+const usersSlice = createSlice({
+    name: "users",
+    initialState,
+    reducers: {},
+    extraReducers: (builder) => {
+        // Fetch Active
+        builder.addCase(fetchUsers.pending, (state) => {
+            state.isLoading = true;
+            state.error = null;
+        });
+        builder.addCase(fetchUsers.fulfilled, (state, action: PayloadAction<User[]>) => {
+            state.isLoading = false;
+            state.users = action.payload;
+        });
+        builder.addCase(fetchUsers.rejected, (state, action) => {
+            state.isLoading = false;
+            state.error = action.payload as string;
+        });
+
+        // Fetch Deleted
+        builder.addCase(fetchDeletedUsers.pending, (state) => {
+            state.isLoading = true;
+            state.error = null;
+        });
+        builder.addCase(fetchDeletedUsers.fulfilled, (state, action: PayloadAction<User[]>) => {
+            state.isLoading = false;
+            state.deletedUsers = action.payload;
+        });
+
+        // Create
+        builder.addCase(createUser.fulfilled, (state, action: PayloadAction<User>) => {
+            state.isLoading = false;
+            if (action.payload && action.payload.id) {
+                state.users.push(action.payload);
+            }
+        });
+
+        // Update
+        builder.addCase(updateUser.fulfilled, (state, action: PayloadAction<User>) => {
+            state.isLoading = false;
+            if (action.payload && action.payload.id) {
+                const index = state.users.findIndex(u => u.id === action.payload.id);
+                if (index !== -1) {
+                    state.users[index] = action.payload;
+                }
+            }
+        });
+
+        // Delete
+        builder.addCase(deleteUser.fulfilled, (state, action: PayloadAction<{ id: string, isHard: boolean }>) => {
+            state.isLoading = false;
+            const { id, isHard } = action.payload;
+
+            // Remove from active users list (always happens)
+            const deletedUser = state.users.find(u => u.id === id);
+            state.users = state.users.filter(u => u.id !== id);
+
+            // If Soft Delete, add to deletedUsers list (mechanically we should re-fetch, but optimistically we can add if we had the full object)
+            if (!isHard && deletedUser) {
+                state.deletedUsers.unshift({ ...deletedUser, deleted_at: new Date().toISOString() });
+            }
+
+            // If Hard Delete, remove from deletedUsers list too (checking if it was there)
+            if (isHard) {
+                state.deletedUsers = state.deletedUsers.filter(u => u.id !== id);
+            }
+        });
+
+        // Restore
+        builder.addCase(restoreUser.fulfilled, (state, action: PayloadAction<string>) => {
+            const id = action.payload;
+            const restoredUser = state.deletedUsers.find(u => u.id === id);
+
+            // Remove from deleted list
+            state.deletedUsers = state.deletedUsers.filter(u => u.id !== id);
+
+            // Add to active list
+            if (restoredUser) {
+                const { deleted_at, ...user } = restoredUser;
+                state.users.push(user);
+            }
+        });
+    },
+});
+
+export default usersSlice.reducer;
--- a/lib/hooks.ts
+++ b/lib/hooks.ts
@@ -0,0 +1,8 @@
+import { useDispatch, useSelector, useStore } from "react-redux";
+import type { TypedUseSelectorHook } from "react-redux";
+import type { AppDispatch, AppStore, RootState } from "./store";
+
+// Use throughout your app instead of plain `useDispatch` and `useSelector`
+export const useAppDispatch: () => AppDispatch = useDispatch;
+export const useAppSelector: TypedUseSelectorHook<RootState> = useSelector;
+export const useAppStore: () => AppStore = useStore;
--- a/lib/schemas/login.ts
+++ b/lib/schemas/login.ts
@@ -0,0 +1,8 @@
+import { z } from "zod";
+
+export const loginSchema = z.object({
+    email: z.string().email("Geçerli bir email adresi giriniz"),
+    password: z.string().min(1, "Şifre alanı zorunludur"),
+});
+
+export type LoginSchema = z.infer<typeof loginSchema>;
--- a/lib/schemas/register.ts
+++ b/lib/schemas/register.ts
@@ -0,0 +1,13 @@
+import { z } from "zod";
+
+export const registerSchema = z.object({
+    username: z.string().min(3, "Kullanıcı adı en az 3 karakter olmalıdır"),
+    email: z.string().email("Geçerli bir email adresi giriniz"),
+    password: z.string().min(6, "Şifre en az 6 karakter olmalıdır"),
+    confirmPassword: z.string()
+}).refine((data) => data.password === data.confirmPassword, {
+    message: "Şifreler eşleşmiyor",
+    path: ["confirmPassword"],
+});
+
+export type RegisterSchema = z.infer<typeof registerSchema>;
--- a/lib/store.ts
+++ b/lib/store.ts
@@ -0,0 +1,20 @@
+import { configureStore } from "@reduxjs/toolkit";
+import authReducer from "./features/auth/authSlice";
+import usersReducer from "./features/users/usersSlice";
+import corsReducer from "./features/cors/corsSlice";
+
+export const makeStore = () => {
+    return configureStore({
+        reducer: {
+            auth: authReducer,
+            users: usersReducer,
+            cors: corsReducer,
+        },
+    });
+};
+
+// Infer the type of makeStore
+export type AppStore = ReturnType<typeof makeStore>;
+// Infer the `RootState` and `AppDispatch` types from the store itself
+export type RootState = ReturnType<AppStore["getState"]>;
+export type AppDispatch = AppStore["dispatch"];
--- a/lib/utils.ts
+++ b/lib/utils.ts
@@ -0,0 +1,15 @@
+import { clsx, type ClassValue } from "clsx"
+import { twMerge } from "tailwind-merge"
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs))
+}
+
+/** Backend'den gelen avatar_url tam veya relative olabilir; görüntülenebilir URL döner. */
+export function getAvatarUrl(avatarUrl: string | undefined): string | undefined {
+  if (!avatarUrl) return undefined
+  if (avatarUrl.startsWith("http://") || avatarUrl.startsWith("https://")) return avatarUrl
+  const base = process.env.NEXT_PUBLIC_API_BASE || ""
+  const normalized = base.replace(/\/$/, "")
+  return `${normalized}${avatarUrl.startsWith("/") ? "" : "/"}${avatarUrl}`
+}
--- a/next.config.ts
+++ b/next.config.ts
@@ -0,0 +1,19 @@
+import type { NextConfig } from "next";
+
+const nextConfig: NextConfig = {
+  output: "standalone",
+  images: {
+    remotePatterns: [
+      {
+        protocol: "http",
+        hostname: "localhost",
+      },
+      {
+        protocol: "http",
+        hostname: "127.0.0.1",
+      },
+    ],
+  },
+};
+
+export default nextConfig;
--- a/package.json
+++ b/package.json
@@ -0,0 +1,42 @@
+{
+  "name": "next-go-blog",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "lint": "eslint"
+  },
+  "dependencies": {
+    "@reduxjs/toolkit": "^2.11.2",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "ioredis": "^5.9.2",
+    "js-cookie": "^3.0.5",
+    "lucide-react": "^0.563.0",
+    "next": "16.1.6",
+    "next-auth": "^4.24.13",
+    "next-themes": "^0.4.6",
+    "nextjs-turnstile": "^1.0.3",
+    "radix-ui": "^1.4.3",
+    "react": "19.2.3",
+    "react-dom": "19.2.3",
+    "react-redux": "^9.2.0",
+    "sweetalert2": "^11.26.18",
+    "tailwind-merge": "^3.4.0",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@tailwindcss/postcss": "^4",
+    "@types/js-cookie": "^3.0.6",
+    "@types/node": "^20",
+    "@types/react": "^19",
+    "@types/react-dom": "^19",
+    "eslint": "^9",
+    "eslint-config-next": "16.1.6",
+    "tailwindcss": "^4",
+    "tw-animate-css": "^1.4.0",
+    "typescript": "^5"
+  }
+}
--- a/postcss.config.mjs
+++ b/postcss.config.mjs
@@ -0,0 +1,7 @@
+const config = {
+  plugins: {
+    "@tailwindcss/postcss": {},
+  },
+};
+
+export default config;
--- a/public/file.svg
+++ b/public/file.svg
@@ -0,0 +1 @@
+<svg fill="none" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path d="M14.5 13.5V5.41a1 1 0 0 0-.3-.7L9.8.29A1 1 0 0 0 9.08 0H1.5v13.5A2.5 2.5 0 0 0 4 16h8a2.5 2.5 0 0 0 2.5-2.5m-1.5 0v-7H8v-5H3v12a1 1 0 0 0 1 1h8a1 1 0 0 0 1-1M9.5 5V2.12L12.38 5zM5.13 5h-.62v1.25h2.12V5zm-.62 3h7.12v1.25H4.5zm.62 3h-.62v1.25h7.12V11z" clip-rule="evenodd" fill="#666" fill-rule="evenodd"/></svg>
--- a/public/globe.svg
+++ b/public/globe.svg
@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><g clip-path="url(#a)"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.27 14.1a6.5 6.5 0 0 0 3.67-3.45q-1.24.21-2.7.34-.31 1.83-.97 3.1M8 16A8 8 0 1 0 8 0a8 8 0 0 0 0 16m.48-1.52a7 7 0 0 1-.96 0H7.5a4 4 0 0 1-.84-1.32q-.38-.89-.63-2.08a40 40 0 0 0 3.92 0q-.25 1.2-.63 2.08a4 4 0 0 1-.84 1.31zm2.94-4.76q1.66-.15 2.95-.43a7 7 0 0 0 0-2.58q-1.3-.27-2.95-.43a18 18 0 0 1 0 3.44m-1.27-3.54a17 17 0 0 1 0 3.64 39 39 0 0 1-4.3 0 17 17 0 0 1 0-3.64 39 39 0 0 1 4.3 0m1.1-1.17q1.45.13 2.69.34a6.5 6.5 0 0 0-3.67-3.44q.65 1.26.98 3.1M8.48 1.5l.01.02q.41.37.84 1.31.38.89.63 2.08a40 40 0 0 0-3.92 0q.25-1.2.63-2.08a4 4 0 0 1 .85-1.32 7 7 0 0 1 .96 0m-2.75.4a6.5 6.5 0 0 0-3.67 3.44 29 29 0 0 1 2.7-.34q.31-1.83.97-3.1M4.58 6.28q-1.66.16-2.95.43a7 7 0 0 0 0 2.58q1.3.27 2.95.43a18 18 0 0 1 0-3.44m.17 4.71q-1.45-.12-2.69-.34a6.5 6.5 0 0 0 3.67 3.44q-.65-1.27-.98-3.1" fill="#666"/></g><defs><clipPath id="a"><path fill="#fff" d="M0 0h16v16H0z"/></clipPath></defs></svg>
--- a/public/next.svg
+++ b/public/next.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 394 80"><path fill="#000" d="M262 0h68.5v12.7h-27.2v66.6h-13.6V12.7H262V0ZM149 0v12.7H94v20.4h44.3v12.6H94v21h55v12.6H80.5V0h68.7zm34.3 0h-17.8l63.8 79.4h17.9l-32-39.7 32-39.6h-17.9l-23 28.6-23-28.6zm18.3 56.7-9-11-27.1 33.7h17.8l18.3-22.7z"/><path fill="#000" d="M81 79.3 17 0H0v79.3h13.6V17l50.2 62.3H81Zm252.6-.4c-1 0-1.8-.4-2.5-1s-1.1-1.6-1.1-2.6.3-1.8 1-2.5 1.6-1 2.6-1 1.8.3 2.5 1a3.4 3.4 0 0 1 .6 4.3 3.7 3.7 0 0 1-3 1.8zm23.2-33.5h6v23.3c0 2.1-.4 4-1.3 5.5a9.1 9.1 0 0 1-3.8 3.5c-1.6.8-3.5 1.3-5.7 1.3-2 0-3.7-.4-5.3-1s-2.8-1.8-3.7-3.2c-.9-1.3-1.4-3-1.4-5h6c.1.8.3 1.6.7 2.2s1 1.2 1.6 1.5c.7.4 1.5.5 2.4.5 1 0 1.8-.2 2.4-.6a4 4 0 0 0 1.6-1.8c.3-.8.5-1.8.5-3V45.5zm30.9 9.1a4.4 4.4 0 0 0-2-3.3 7.5 7.5 0 0 0-4.3-1.1c-1.3 0-2.4.2-3.3.5-.9.4-1.6 1-2 1.6a3.5 3.5 0 0 0-.3 4c.3.5.7.9 1.3 1.2l1.8 1 2 .5 3.2.8c1.3.3 2.5.7 3.7 1.2a13 13 0 0 1 3.2 1.8 8.1 8.1 0 0 1 3 6.5c0 2-.5 3.7-1.5 5.1a10 10 0 0 1-4.4 3.5c-1.8.8-4.1 1.2-6.8 1.2-2.6 0-4.9-.4-6.8-1.2-2-.8-3.4-2-4.5-3.5a10 10 0 0 1-1.7-5.6h6a5 5 0 0 0 3.5 4.6c1 .4 2.2.6 3.4.6 1.3 0 2.5-.2 3.5-.6 1-.4 1.8-1 2.4-1.7a4 4 0 0 0 .8-2.4c0-.9-.2-1.6-.7-2.2a11 11 0 0 0-2.1-1.4l-3.2-1-3.8-1c-2.8-.7-5-1.7-6.6-3.2a7.2 7.2 0 0 1-2.4-5.7 8 8 0 0 1 1.7-5 10 10 0 0 1 4.3-3.5c2-.8 4-1.2 6.4-1.2 2.3 0 4.4.4 6.2 1.2 1.8.8 3.2 2 4.3 3.4 1 1.4 1.5 3 1.5 5h-5.8z"/></svg>
--- a/public/vercel.svg
+++ b/public/vercel.svg
@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1155 1000"><path d="m577.3 0 577.4 1000H0z" fill="#fff"/></svg>
--- a/public/window.svg
+++ b/public/window.svg
@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><path fill-rule="evenodd" clip-rule="evenodd" d="M1.5 2.5h13v10a1 1 0 0 1-1 1h-11a1 1 0 0 1-1-1zM0 1h16v11.5a2.5 2.5 0 0 1-2.5 2.5h-11A2.5 2.5 0 0 1 0 12.5zm3.75 4.5a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5M7 4.75a.75.75 0 1 1-1.5 0 .75.75 0 0 1 1.5 0m1.75.75a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5" fill="#666"/></svg>
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -0,0 +1,34 @@
+{
+  "compilerOptions": {
+    "target": "ES2017",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "react-jsx",
+    "incremental": true,
+    "plugins": [
+      {
+        "name": "next"
+      }
+    ],
+    "paths": {
+      "@/*": ["./*"]
+    }
+  },
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts",
+    ".next/dev/types/**/*.ts",
+    "**/*.mts"
+  ],
+  "exclude": ["node_modules"]
+}
--- a/yarn.lock
+++ b/yarn.lock
				`@@ -0,0 +1 @@`
				`<svg fill="none" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path d="M14.5 13.5V5.41a1 1 0 0 0-.3-.7L9.8.29A1 1 0 0 0 9.08 0H1.5v13.5A2.5 2.5 0 0 0 4 16h8a2.5 2.5 0 0 0 2.5-2.5m-1.5 0v-7H8v-5H3v12a1 1 0 0 0 1 1h8a1 1 0 0 0 1-1M9.5 5V2.12L12.38 5zM5.13 5h-.62v1.25h2.12V5zm-.62 3h7.12v1.25H4.5zm.62 3h-.62v1.25h7.12V11z" clip-rule="evenodd" fill="#666" fill-rule="evenodd"/></svg>`
				`@@ -0,0 +1 @@`
				<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><g clip-path="url(#a)"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.27 14.1a6.5 6.5 0 0 0 3.67-3.45q-1.24.21-2.7.34-.31 1.83-.97 3.1M8 16A8 8 0 1 0 8 0a8 8 0 0 0 0 16m.48-1.52a7 7 0 0 1-.96 0H7.5a4 4 0 0 1-.84-1.32q-.38-.89-.63-2.08a40 40 0 0 0 3.92 0q-.25 1.2-.63 2.08a4 4 0 0 1-.84 1.31zm2.94-4.76q1.66-.15 2.95-.43a7 7 0 0 0 0-2.58q-1.3-.27-2.95-.43a18 18 0 0 1 0 3.44m-1.27-3.54a17 17 0 0 1 0 3.64 39 39 0 0 1-4.3 0 17 17 0 0 1 0-3.64 39 39 0 0 1 4.3 0m1.1-1.17q1.45.13 2.69.34a6.5 6.5 0 0 0-3.67-3.44q.65 1.26.98 3.1M8.48 1.5l.01.02q.41.37.84 1.31.38.89.63 2.08a40 40 0 0 0-3.92 0q.25-1.2.63-2.08a4 4 0 0 1 .85-1.32 7 7 0 0 1 .96 0m-2.75.4a6.5 6.5 0 0 0-3.67 3.44 29 29 0 0 1 2.7-.34q.31-1.83.97-3.1M4.58 6.28q-1.66.16-2.95.43a7 7 0 0 0 0 2.58q1.3.27 2.95.43a18 18 0 0 1 0-3.44m.17 4.71q-1.45-.12-2.69-.34a6.5 6.5 0 0 0 3.67 3.44q-.65-1.27-.98-3.1" fill="#666"/></g><defs><clipPath id="a"><path fill="#fff" d="M0 0h16v16H0z"/></clipPath></defs></svg>
				`@@ -0,0 +1 @@`
				<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 394 80"><path fill="#000" d="M262 0h68.5v12.7h-27.2v66.6h-13.6V12.7H262V0ZM149 0v12.7H94v20.4h44.3v12.6H94v21h55v12.6H80.5V0h68.7zm34.3 0h-17.8l63.8 79.4h17.9l-32-39.7 32-39.6h-17.9l-23 28.6-23-28.6zm18.3 56.7-9-11-27.1 33.7h17.8l18.3-22.7z"/><path fill="#000" d="M81 79.3 17 0H0v79.3h13.6V17l50.2 62.3H81Zm252.6-.4c-1 0-1.8-.4-2.5-1s-1.1-1.6-1.1-2.6.3-1.8 1-2.5 1.6-1 2.6-1 1.8.3 2.5 1a3.4 3.4 0 0 1 .6 4.3 3.7 3.7 0 0 1-3 1.8zm23.2-33.5h6v23.3c0 2.1-.4 4-1.3 5.5a9.1 9.1 0 0 1-3.8 3.5c-1.6.8-3.5 1.3-5.7 1.3-2 0-3.7-.4-5.3-1s-2.8-1.8-3.7-3.2c-.9-1.3-1.4-3-1.4-5h6c.1.8.3 1.6.7 2.2s1 1.2 1.6 1.5c.7.4 1.5.5 2.4.5 1 0 1.8-.2 2.4-.6a4 4 0 0 0 1.6-1.8c.3-.8.5-1.8.5-3V45.5zm30.9 9.1a4.4 4.4 0 0 0-2-3.3 7.5 7.5 0 0 0-4.3-1.1c-1.3 0-2.4.2-3.3.5-.9.4-1.6 1-2 1.6a3.5 3.5 0 0 0-.3 4c.3.5.7.9 1.3 1.2l1.8 1 2 .5 3.2.8c1.3.3 2.5.7 3.7 1.2a13 13 0 0 1 3.2 1.8 8.1 8.1 0 0 1 3 6.5c0 2-.5 3.7-1.5 5.1a10 10 0 0 1-4.4 3.5c-1.8.8-4.1 1.2-6.8 1.2-2.6 0-4.9-.4-6.8-1.2-2-.8-3.4-2-4.5-3.5a10 10 0 0 1-1.7-5.6h6a5 5 0 0 0 3.5 4.6c1 .4 2.2.6 3.4.6 1.3 0 2.5-.2 3.5-.6 1-.4 1.8-1 2.4-1.7a4 4 0 0 0 .8-2.4c0-.9-.2-1.6-.7-2.2a11 11 0 0 0-2.1-1.4l-3.2-1-3.8-1c-2.8-.7-5-1.7-6.6-3.2a7.2 7.2 0 0 1-2.4-5.7 8 8 0 0 1 1.7-5 10 10 0 0 1 4.3-3.5c2-.8 4-1.2 6.4-1.2 2.3 0 4.4.4 6.2 1.2 1.8.8 3.2 2 4.3 3.4 1 1.4 1.5 3 1.5 5h-5.8z"/></svg>
				`@@ -0,0 +1 @@`
				`<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1155 1000"><path d="m577.3 0 577.4 1000H0z" fill="#fff"/></svg>`