From f4ee10f09f4bddc6540ea99034f2c131958f8b47 Mon Sep 17 00:00:00 2001
From: Ruben van der Linde <rubenvdlinde@gmail.com>
Date: Thu, 24 Jul 2025 12:15:08 +0200
Subject: [PATCH 1/8] Bit of savety on the mapper

---
 lib/Service/ObjectService.php | 67 ++++++++++++++++++++++++++++-------
 1 file changed, 54 insertions(+), 13 deletions(-)

diff --git a/lib/Service/ObjectService.php b/lib/Service/ObjectService.php
index bb85d7d5..4be6caea 100644
--- a/lib/Service/ObjectService.php
+++ b/lib/Service/ObjectService.php
@@ -265,6 +265,28 @@ public function getOpenRegisters(): ?\OCA\OpenRegister\Service\ObjectService
 		return null;
 	}
 
+	/**
+	 * Gets the OpenRegister ObjectEntityMapper directly.
+	 * This is more efficient than going through the OpenRegister service.
+	 *
+	 * @return \OCA\OpenRegister\Db\ObjectEntityMapper|null The ObjectEntityMapper if available, null otherwise.
+	 * @throws ContainerExceptionInterface|NotFoundExceptionInterface
+	 */
+	public function getOpenRegisterObjectEntityMapper(): ?\OCA\OpenRegister\Db\ObjectEntityMapper
+	{
+		if (in_array(needle: 'openregister', haystack: $this->appManager->getInstalledApps()) === true) {
+			try {
+				// Attempt to get the ObjectEntityMapper directly from the container
+				return $this->container->get('OCA\OpenRegister\Db\ObjectEntityMapper');
+			} catch (Exception $e) {
+				// If the mapper is not available, return null
+				return null;
+			}
+		}
+
+		return null;
+	}
+
 	/**
 	 * Gets the appropriate mapper based on the object type.
 	 * (This can be a objectType for OpenRegister, by using an instantiation of the objectService of OpenRegister).
@@ -280,24 +302,43 @@ public function getOpenRegisters(): ?\OCA\OpenRegister\Service\ObjectService
 	 */
 	public function getMapper(?string $objectType = null, ?int $schema = null, ?int $register = null): mixed
 	{
+		// If register and schema are provided, use OpenRegister's new API
 		if ($register !== null && $schema !== null && $objectType === null) {
-			return $this->getOpenRegisters()->getMapper(register: $register, schema: $schema);
+			$openRegisterService = $this->getOpenRegisters();
+			if ($openRegisterService === null) {
+				throw new InvalidArgumentException("OpenRegister service is not available");
+			}
+			return $openRegisterService->getMapper(register: $register, schema: $schema);
 		}
 
-		$objectTypeLower = strtolower($objectType);
+		// If objectType is provided, handle internal OpenConnector mappers
+		if ($objectType !== null) {
+			$objectTypeLower = strtolower($objectType);
+
+			// Handle OpenRegister ObjectEntityMapper requests
+			if ($objectTypeLower === 'objectentity') {
+				$objectEntityMapper = $this->getOpenRegisterObjectEntityMapper();
+				if ($objectEntityMapper === null) {
+					throw new InvalidArgumentException("OpenRegister ObjectEntityMapper is not available");
+				}
+				return $objectEntityMapper;
+			}
 
-		// If the source is internal, return the appropriate mapper based on the object type
-		return match ($objectTypeLower) {
-			'endpoint' 			=> $this->endpointMapper,
-			'eventSubscription'	=> $this->eventSubscriptionMapper,
-			'job' 	   			=> $this->jobMapper,
-			'mapping'  			=> $this->mappingMapper,
-			'rule'     			=> $this->ruleMapper,
-			'source'   			=> $this->sourceMapper,
-			'synchronization' 	=> $this->synchronizationMapper,
-			default => throw new InvalidArgumentException("Unknown object type: $objectType"),
-		};
+			// If the source is internal, return the appropriate mapper based on the object type
+			return match ($objectTypeLower) {
+				'endpoint' 			=> $this->endpointMapper,
+				'eventSubscription'	=> $this->eventSubscriptionMapper,
+				'job' 	   			=> $this->jobMapper,
+				'mapping'  			=> $this->mappingMapper,
+				'rule'     			=> $this->ruleMapper,
+				'source'   			=> $this->sourceMapper,
+				'synchronization' 	=> $this->synchronizationMapper,
+				default => throw new InvalidArgumentException("Unknown object type: $objectType"),
+			};
+		}
 
+		// If no parameters provided, throw an error
+		throw new InvalidArgumentException("Either objectType or both register and schema must be provided");
 	}
 
 }

From 54abedcaa760950ea1ced50a7eb23dd1c7f8f360 Mon Sep 17 00:00:00 2001
From: Ruben van der Linde <rubenvdlinde@gmail.com>
Date: Fri, 25 Jul 2025 02:54:03 +0200
Subject: [PATCH 2/8] Hotfix: Login

---
 appinfo/routes.php                           |   4 +
 examples/README.md                           | 149 +++++
 examples/browser-authentication.md           | 462 +++++++++++++
 examples/test-admin-login.php                | 240 +++++++
 lib/AppInfo/Application.php                  |   4 +-
 lib/Controller/UserController.php            | 205 +++++-
 lib/Service/EndpointService.php              |  27 +-
 lib/Service/OrganisationBridgeService.php    |  57 +-
 lib/Service/OrganisationService.php          | 664 +++++++++++++++++++
 lib/Service/SecurityService.php              |  18 +-
 tests/Unit/Controller/UserControllerTest.php | 370 ++++++++---
 11 files changed, 2074 insertions(+), 126 deletions(-)
 create mode 100644 examples/README.md
 create mode 100644 examples/browser-authentication.md
 create mode 100644 examples/test-admin-login.php
 create mode 100644 lib/Service/OrganisationService.php

diff --git a/appinfo/routes.php b/appinfo/routes.php
index cef9bd18..748744c2 100644
--- a/appinfo/routes.php
+++ b/appinfo/routes.php
@@ -80,6 +80,10 @@
 		['name' => 'synchronizationContracts#deactivate', 'url' => '/api/synchronization-contracts/{id}/deactivate', 'verb' => 'POST'],
 		['name' => 'synchronizationContracts#execute', 'url' => '/api/synchronization-contracts/{id}/execute', 'verb' => 'POST'],
 
+		// User CORS endpoints
+		['name' => 'user#preflightedCors', 'url' => '/api/user/me', 'verb' => 'OPTIONS'],
+		['name' => 'user#preflightedCors', 'url' => '/api/user/login', 'verb' => 'OPTIONS'],
+
 		// User endpoints
 		['name' => 'user#me', 'url' => '/api/user/me', 'verb' => 'GET'],
 		['name' => 'user#updateMe', 'url' => '/api/user/me', 'verb' => 'PUT'],
diff --git a/examples/README.md b/examples/README.md
new file mode 100644
index 00000000..e325a776
--- /dev/null
+++ b/examples/README.md
@@ -0,0 +1,149 @@
+# Testing Admin Login Endpoint
+
+This directory contains examples and test scripts for testing the OpenConnector admin login functionality.
+
+## Overview
+
+The UserController now includes comprehensive CORS support and enhanced security features for the login and user management endpoints. This enables cross-origin requests from web applications while maintaining security.
+
+## Files
+
+- **test-admin-login.php** - Manual test script for testing admin login with CORS
+- **README.md** - This documentation file
+
+## Quick Test Guide
+
+### 1. Manual Testing with cURL
+
+Test the admin login endpoint directly:
+
+```bash
+# Test login endpoint
+curl -X POST http://localhost:8080/apps/openconnector/api/user/login \
+  -H "Content-Type: application/json" \
+  -H "Origin: https://localhost:3000" \
+  -d '{"username":"admin","password":"admin"}' \
+  -v
+
+# Test OPTIONS preflight (CORS)
+curl -X OPTIONS http://localhost:8080/apps/openconnector/api/user/login \
+  -H "Origin: https://localhost:3000" \
+  -v
+```
+
+### 2. Using the Test Script
+
+```bash
+# Run the PHP test script
+php examples/test-admin-login.php
+```
+
+Make sure to update the configuration in the script:
+- `$baseUrl` - Your Nextcloud installation URL
+- `$adminUsername` - Admin username (usually 'admin')
+- `$adminPassword` - Admin password
+
+### 3. Running Unit Tests
+
+```bash
+# Run the UserController tests
+./vendor/bin/phpunit tests/Unit/Controller/UserControllerTest.php
+```
+
+## Expected Responses
+
+### Successful Login Response
+```json
+{
+    "message": "Login successful",
+    "user": {
+        "uid": "admin",
+        "displayName": "Administrator", 
+        "email": "admin@example.com",
+        "enabled": true,
+        "isAdmin": true,
+        "groups": ["admin"],
+        "permissions": ["all"]
+    },
+    "session_created": true
+}
+```
+
+### CORS Headers
+The response should include these CORS headers:
+```
+Access-Control-Allow-Origin: https://localhost:3000
+Access-Control-Allow-Methods: PUT, POST, GET, DELETE, PATCH
+Access-Control-Allow-Headers: Authorization, Content-Type, Accept
+```
+
+### Error Responses
+
+**Invalid Credentials (401)**
+```json
+{
+    "error": "Invalid username or password"
+}
+```
+
+**Validation Error (400)**
+```json
+{
+    "error": "Username and password are required"
+}
+```
+
+**Rate Limited (429)**
+```json
+{
+    "error": "Too many login attempts",
+    "retry_after": 60,
+    "lockout_until": "2024-01-01T12:00:00Z"
+}
+```
+
+## Testing Checklist
+
+- [ ] Login with valid admin credentials returns 200
+- [ ] Login response includes user data with admin privileges
+- [ ] CORS headers are present in all responses
+- [ ] OPTIONS preflight requests work correctly
+- [ ] Invalid credentials return proper error
+- [ ] Rate limiting works for repeated failed attempts
+- [ ] Session is created and can be used for /me endpoint
+- [ ] /me endpoint returns user data with CORS headers
+- [ ] Security headers are present in responses
+
+## Security Features Tested
+
+1. **Input Validation** - Username/password sanitization
+2. **Rate Limiting** - Protection against brute force attacks
+3. **CORS Support** - Proper cross-origin request handling
+4. **Session Management** - Secure session creation
+5. **Error Handling** - Generic error messages to prevent enumeration
+6. **Security Headers** - XSS and other security protections
+
+## Troubleshooting
+
+### Common Issues
+
+1. **CORS Errors**: Ensure the Origin header matches expected domains
+2. **404 Errors**: Check that routes are properly registered
+3. **500 Errors**: Verify all dependencies are properly injected
+4. **Auth Errors**: Confirm admin credentials are correct
+
+### Debug Tips
+
+- Enable verbose cURL output with `-v` flag
+- Check Nextcloud logs for detailed error information
+- Verify app is properly installed and enabled
+- Test with simple credentials first (admin/admin)
+
+## Development Notes
+
+The UserController includes several new features:
+- CORS preflight handling via `preflightedCors()` method
+- Enhanced security with SecurityService integration
+- Memory monitoring for performance
+- Comprehensive error handling with proper HTTP status codes
+- Security headers in all responses 
\ No newline at end of file
diff --git a/examples/browser-authentication.md b/examples/browser-authentication.md
new file mode 100644
index 00000000..209c6805
--- /dev/null
+++ b/examples/browser-authentication.md
@@ -0,0 +1,462 @@
+# Browser-Based Authentication with OpenConnector API
+
+This guide explains how to authenticate with the OpenConnector API from a web browser using session cookies and AJAX/fetch requests.
+
+## Overview
+
+The OpenConnector API supports two authentication methods:
+1. **Session-based authentication** (recommended for browsers)
+2. **HTTP Basic Authentication** (recommended for server-to-server)
+
+For browser applications, session-based authentication using cookies is the preferred method as it's more secure and follows web standards.
+
+## The Authentication Flow
+
+### 1. Login Process
+
+When you make a POST request to `/api/user/login`, the server:
+- Validates credentials
+- Creates a session
+- Returns session cookies in the response headers
+- These cookies are automatically stored by the browser
+
+### 2. Authenticated Requests
+
+For subsequent API calls:
+- The browser automatically includes session cookies
+- The server recognizes the session and authenticates the user
+- No need to manually handle tokens or credentials
+
+## Key Requirements for Browser Authentication
+
+### 1. CORS Configuration
+
+The server must be configured to:
+- Allow credentials in cross-origin requests
+- Set `Access-Control-Allow-Credentials: true`
+- Specify exact origins (not wildcards when using credentials)
+
+### 2. Fetch Configuration
+
+All requests must include:
+```javascript
+credentials: 'include'  // This tells the browser to include cookies
+```
+
+### 3. Same-Site Cookie Handling
+
+Nextcloud sets cookies with `SameSite=Lax`, which works for most scenarios but may require additional configuration for cross-site requests.
+
+## React Authentication Examples
+
+### Basic Authentication Hook
+
+```javascript
+import { useState, useEffect, createContext, useContext } from 'react';
+
+// Create authentication context
+const AuthContext = createContext();
+
+export const useAuth = () => {
+  const context = useContext(AuthContext);
+  if (!context) {
+    throw new Error('useAuth must be used within an AuthProvider');
+  }
+  return context;
+};
+
+// Authentication provider component
+export const AuthProvider = ({ children, apiBaseUrl }) => {
+  const [user, setUser] = useState(null);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState(null);
+
+  // Check if user is already logged in when component mounts
+  useEffect(() => {
+    checkAuthStatus();
+  }, []);
+
+  const checkAuthStatus = async () => {
+    try {
+      const response = await fetch(`${apiBaseUrl}/api/user/me`, {
+        method: 'GET',
+        credentials: 'include', // Include cookies
+        headers: {
+          'Content-Type': 'application/json',
+        },
+      });
+
+      if (response.ok) {
+        const userData = await response.json();
+        setUser(userData);
+      } else {
+        setUser(null);
+      }
+    } catch (err) {
+      console.error('Auth check failed:', err);
+      setUser(null);
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  const login = async (username, password) => {
+    setLoading(true);
+    setError(null);
+
+    try {
+      const response = await fetch(`${apiBaseUrl}/api/user/login`, {
+        method: 'POST',
+        credentials: 'include', // Include cookies
+        headers: {
+          'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ username, password }),
+      });
+
+      if (response.ok) {
+        const result = await response.json();
+        setUser(result.user);
+        return { success: true, user: result.user };
+      } else {
+        const errorData = await response.json();
+        setError(errorData.error || 'Login failed');
+        return { success: false, error: errorData.error };
+      }
+    } catch (err) {
+      const errorMessage = 'Login request failed';
+      setError(errorMessage);
+      return { success: false, error: errorMessage };
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  const logout = async () => {
+    try {
+      // Note: You might want to implement a logout endpoint
+      // For now, we'll just clear the local state
+      setUser(null);
+      
+      // Optional: Call a logout endpoint if available
+      // await fetch(`${apiBaseUrl}/api/user/logout`, {
+      //   method: 'POST',
+      //   credentials: 'include',
+      // });
+    } catch (err) {
+      console.error('Logout failed:', err);
+    }
+  };
+
+  const value = {
+    user,
+    loading,
+    error,
+    login,
+    logout,
+    checkAuthStatus,
+    isAuthenticated: !!user,
+  };
+
+  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;
+};
+```
+
+### Login Component
+
+```javascript
+import React, { useState } from 'react';
+import { useAuth } from './AuthProvider';
+
+const LoginForm = () => {
+  const [username, setUsername] = useState('');
+  const [password, setPassword] = useState('');
+  const [isSubmitting, setIsSubmitting] = useState(false);
+  const { login, error, loading } = useAuth();
+
+  const handleSubmit = async (e) => {
+    e.preventDefault();
+    setIsSubmitting(true);
+
+    const result = await login(username, password);
+    
+    if (result.success) {
+      console.log('Login successful:', result.user);
+      // Redirect or update UI as needed
+    } else {
+      console.error('Login failed:', result.error);
+    }
+    
+    setIsSubmitting(false);
+  };
+
+  return (
+    <form onSubmit={handleSubmit} className="login-form">
+      <div className="form-group">
+        <label htmlFor="username">Username:</label>
+        <input
+          id="username"
+          type="text"
+          value={username}
+          onChange={(e) => setUsername(e.target.value)}
+          required
+          disabled={isSubmitting || loading}
+        />
+      </div>
+      
+      <div className="form-group">
+        <label htmlFor="password">Password:</label>
+        <input
+          id="password"
+          type="password"
+          value={password}
+          onChange={(e) => setPassword(e.target.value)}
+          required
+          disabled={isSubmitting || loading}
+        />
+      </div>
+
+      {error && (
+        <div className="error-message">
+          {error}
+        </div>
+      )}
+
+      <button 
+        type="submit" 
+        disabled={isSubmitting || loading}
+        className="login-button"
+      >
+        {isSubmitting ? 'Logging in...' : 'Login'}
+      </button>
+    </form>
+  );
+};
+
+export default LoginForm;
+```
+
+### Authenticated API Requests
+
+```javascript
+import { useAuth } from './AuthProvider';
+
+const ApiService = (apiBaseUrl) => {
+  // Generic function for making authenticated API requests
+  const makeAuthenticatedRequest = async (endpoint, options = {}) => {
+    const defaultOptions = {
+      credentials: 'include', // Always include cookies
+      headers: {
+        'Content-Type': 'application/json',
+        ...options.headers,
+      },
+    };
+
+    const response = await fetch(`${apiBaseUrl}${endpoint}`, {
+      ...defaultOptions,
+      ...options,
+    });
+
+    if (!response.ok) {
+      throw new Error(`API request failed: ${response.status} ${response.statusText}`);
+    }
+
+    return response.json();
+  };
+
+  return {
+    // Get user info
+    getMe: () => makeAuthenticatedRequest('/api/user/me'),
+    
+    // Update user info
+    updateMe: (userData) => makeAuthenticatedRequest('/api/user/me', {
+      method: 'PUT',
+      body: JSON.stringify(userData),
+    }),
+
+    // Example: Get some other data
+    getData: (endpoint) => makeAuthenticatedRequest(endpoint),
+    
+    // Example: Post data
+    postData: (endpoint, data) => makeAuthenticatedRequest(endpoint, {
+      method: 'POST',
+      body: JSON.stringify(data),
+    }),
+  };
+};
+
+// Component using the API service
+const UserProfile = () => {
+  const { user, isAuthenticated } = useAuth();
+  const [profile, setProfile] = useState(null);
+  const [loading, setLoading] = useState(false);
+  const api = ApiService('http://localhost:8080'); // Your API base URL
+
+  useEffect(() => {
+    if (isAuthenticated) {
+      loadProfile();
+    }
+  }, [isAuthenticated]);
+
+  const loadProfile = async () => {
+    setLoading(true);
+    try {
+      const profileData = await api.getMe();
+      setProfile(profileData);
+    } catch (error) {
+      console.error('Failed to load profile:', error);
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  if (!isAuthenticated) {
+    return <div>Please log in to view your profile.</div>;
+  }
+
+  if (loading) {
+    return <div>Loading profile...</div>;
+  }
+
+  return (
+    <div className="user-profile">
+      <h2>User Profile</h2>
+      {profile && (
+        <div>
+          <p><strong>Username:</strong> {profile.uid}</p>
+          <p><strong>Display Name:</strong> {profile.displayName}</p>
+          <p><strong>Email:</strong> {profile.email}</p>
+          <p><strong>Organizations:</strong> {profile.organisations?.length || 0}</p>
+        </div>
+      )}
+    </div>
+  );
+};
+
+export default UserProfile;
+```
+
+### Complete App Example
+
+```javascript
+import React from 'react';
+import { AuthProvider, useAuth } from './AuthProvider';
+import LoginForm from './LoginForm';
+import UserProfile from './UserProfile';
+
+const AppContent = () => {
+  const { isAuthenticated, user, logout, loading } = useAuth();
+
+  if (loading) {
+    return <div>Loading...</div>;
+  }
+
+  return (
+    <div className="app">
+      <header>
+        <h1>OpenConnector Demo</h1>
+        {isAuthenticated && (
+          <div className="user-info">
+            Welcome, {user?.displayName || user?.uid}!
+            <button onClick={logout} className="logout-button">
+              Logout
+            </button>
+          </div>
+        )}
+      </header>
+
+      <main>
+        {isAuthenticated ? (
+          <UserProfile />
+        ) : (
+          <LoginForm />
+        )}
+      </main>
+    </div>
+  );
+};
+
+const App = () => {
+  return (
+    <AuthProvider apiBaseUrl="http://localhost:8080">
+      <AppContent />
+    </AuthProvider>
+  );
+};
+
+export default App;
+```
+
+## Common Issues and Solutions
+
+### 1. CORS Errors
+
+If you see CORS errors, ensure:
+- The server sets `Access-Control-Allow-Credentials: true`
+- The server specifies the exact origin (not `*`)
+- Your requests include `credentials: 'include'`
+
+### 2. Cookies Not Being Sent
+
+Check that:
+- You're using `credentials: 'include'` in all fetch requests
+- The domain/port matches between your app and API
+- Cookies aren't being blocked by browser security settings
+
+### 3. Session Not Persisting
+
+Verify that:
+- The login endpoint properly establishes a session
+- Session cookies have the correct path and domain
+- The server session storage is working
+
+### 4. Development vs Production
+
+For development with different ports:
+```javascript
+// Development configuration
+const API_BASE_URL = 'http://localhost:8080';
+
+// Ensure CORS is properly configured on the server
+// for requests from http://localhost:3000 (or your dev server port)
+```
+
+For production:
+```javascript
+// Production configuration
+const API_BASE_URL = ''; // Use relative URLs or same domain
+```
+
+## Testing the Authentication
+
+You can test the authentication flow using browser developer tools:
+
+1. **Open Network tab** in DevTools
+2. **Make a login request** - you should see:
+   - POST to `/api/user/login`
+   - Response includes `Set-Cookie` headers
+3. **Make a `/me` request** - you should see:
+   - GET to `/api/user/me`
+   - Request includes `Cookie` header
+   - Response returns user data
+
+## Security Considerations
+
+1. **Always use HTTPS in production** to protect session cookies
+2. **Set secure cookie flags** on the server for production
+3. **Implement proper CSRF protection** if needed
+4. **Consider cookie expiration** and session timeout
+5. **Handle authentication errors gracefully**
+
+## Example Server CORS Configuration
+
+The server should return these headers for browser authentication:
+
+```
+Access-Control-Allow-Origin: http://localhost:3000
+Access-Control-Allow-Credentials: true
+Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
+Access-Control-Allow-Headers: Content-Type, Authorization
+```
+
+Note: Replace `http://localhost:3000` with your actual frontend URL. 
\ No newline at end of file
diff --git a/examples/test-admin-login.php b/examples/test-admin-login.php
new file mode 100644
index 00000000..8fa83835
--- /dev/null
+++ b/examples/test-admin-login.php
@@ -0,0 +1,240 @@
+<?php
+
+/**
+ * Manual test script for admin login endpoint
+ *
+ * This script demonstrates how to test the login endpoint with admin credentials.
+ * It can be used for manual testing and verification of the login functionality.
+ *
+ * @category  Example
+ * @package   OpenConnector
+ * @author    Conduction <info@conduction.nl>
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ * @version   1.0.0
+ * @link      https://github.com/ConductionNL/openconnector
+ */
+
+// Configuration for testing
+$baseUrl = 'http://localhost:8080/apps/openconnector'; // Adjust to your Nextcloud URL
+$adminUsername = 'admin'; // Default admin username
+$adminPassword = 'admin'; // Replace with actual admin password
+
+/**
+ * Test the login endpoint with admin credentials
+ *
+ * This function demonstrates how to make a login request to the API
+ * and handle the response including CORS headers.
+ *
+ * @param string $baseUrl The base URL of the OpenConnector app
+ * @param string $username The admin username
+ * @param string $password The admin password
+ * @return array The response data
+ */
+function testAdminLogin(string $baseUrl, string $username, string $password): array
+{
+    $loginUrl = $baseUrl . '/api/user/login';
+    
+    // Prepare login data
+    $loginData = [
+        'username' => $username,
+        'password' => $password
+    ];
+    
+    // Initialize cURL session
+    $ch = curl_init();
+    
+    // Set cURL options
+    curl_setopt_array($ch, [
+        CURLOPT_URL => $loginUrl,
+        CURLOPT_POST => true,
+        CURLOPT_POSTFIELDS => json_encode($loginData),
+        CURLOPT_RETURNTRANSFER => true,
+        CURLOPT_HEADER => true,
+        CURLOPT_HTTPHEADER => [
+            'Content-Type: application/json',
+            'Accept: application/json',
+            'Origin: https://localhost:3000', // Test CORS
+        ],
+        CURLOPT_FOLLOWLOCATION => true,
+        CURLOPT_SSL_VERIFYPEER => false, // For local testing only
+        CURLOPT_TIMEOUT => 30,
+        CURLOPT_VERBOSE => true
+    ]);
+    
+    // Execute the request
+    $response = curl_exec($ch);
+    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    $headerSize = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
+    
+    // Check for cURL errors
+    if (curl_error($ch)) {
+        $error = curl_error($ch);
+        curl_close($ch);
+        throw new \Exception("cURL Error: $error");
+    }
+    
+    curl_close($ch);
+    
+    // Separate headers and body
+    $headers = substr($response, 0, $headerSize);
+    $body = substr($response, $headerSize);
+    
+    // Parse headers
+    $headerLines = explode("\n", $headers);
+    $parsedHeaders = [];
+    foreach ($headerLines as $line) {
+        if (strpos($line, ':') !== false) {
+            [$key, $value] = explode(':', $line, 2);
+            $parsedHeaders[trim($key)] = trim($value);
+        }
+    }
+    
+    // Decode JSON body
+    $bodyData = json_decode($body, true);
+    
+    return [
+        'http_code' => $httpCode,
+        'headers' => $parsedHeaders,
+        'body' => $bodyData,
+        'raw_response' => $response
+    ];
+}
+
+/**
+ * Test the /me endpoint after login
+ *
+ * This function tests the /me endpoint to verify the session was created
+ * and the user data is accessible.
+ *
+ * @param string $baseUrl The base URL of the OpenConnector app
+ * @param string $sessionCookie The session cookie from login
+ * @return array The response data
+ */
+function testMeEndpoint(string $baseUrl, string $sessionCookie = ''): array
+{
+    $meUrl = $baseUrl . '/api/user/me';
+    
+    // Initialize cURL session
+    $ch = curl_init();
+    
+    // Set cURL options
+    curl_setopt_array($ch, [
+        CURLOPT_URL => $meUrl,
+        CURLOPT_RETURNTRANSFER => true,
+        CURLOPT_HEADER => true,
+        CURLOPT_HTTPHEADER => [
+            'Content-Type: application/json',
+            'Accept: application/json',
+            'Origin: https://localhost:3000', // Test CORS
+        ],
+        CURLOPT_COOKIE => $sessionCookie,
+        CURLOPT_FOLLOWLOCATION => true,
+        CURLOPT_SSL_VERIFYPEER => false, // For local testing only
+        CURLOPT_TIMEOUT => 30
+    ]);
+    
+    // Execute the request
+    $response = curl_exec($ch);
+    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    $headerSize = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
+    
+    // Check for cURL errors
+    if (curl_error($ch)) {
+        $error = curl_error($ch);
+        curl_close($ch);
+        throw new \Exception("cURL Error: $error");
+    }
+    
+    curl_close($ch);
+    
+    // Separate headers and body
+    $headers = substr($response, 0, $headerSize);
+    $body = substr($response, $headerSize);
+    
+    // Decode JSON body
+    $bodyData = json_decode($body, true);
+    
+    return [
+        'http_code' => $httpCode,
+        'body' => $bodyData,
+        'raw_response' => $response
+    ];
+}
+
+/**
+ * Main test execution
+ */
+try {
+    echo "Testing OpenConnector Admin Login Endpoint\n";
+    echo "==========================================\n\n";
+    
+    // Test admin login
+    echo "1. Testing admin login...\n";
+    $loginResponse = testAdminLogin($baseUrl, $adminUsername, $adminPassword);
+    
+    echo "HTTP Status Code: " . $loginResponse['http_code'] . "\n";
+    
+    // Check CORS headers
+    $corsHeaders = [
+        'Access-Control-Allow-Origin',
+        'Access-Control-Allow-Methods',
+        'Access-Control-Allow-Headers'
+    ];
+    
+    echo "\nCORS Headers:\n";
+    foreach ($corsHeaders as $header) {
+        if (isset($loginResponse['headers'][$header])) {
+            echo "  $header: " . $loginResponse['headers'][$header] . "\n";
+        }
+    }
+    
+    echo "\nResponse Body:\n";
+    if ($loginResponse['body']) {
+        echo json_encode($loginResponse['body'], JSON_PRETTY_PRINT) . "\n";
+    } else {
+        echo "No JSON response body\n";
+    }
+    
+    // Test session validation with /me endpoint
+    if ($loginResponse['http_code'] === 200) {
+        echo "\n2. Testing /me endpoint...\n";
+        
+        // Extract session cookie if available
+        $sessionCookie = '';
+        if (isset($loginResponse['headers']['Set-Cookie'])) {
+            $sessionCookie = $loginResponse['headers']['Set-Cookie'];
+        }
+        
+        $meResponse = testMeEndpoint($baseUrl, $sessionCookie);
+        echo "HTTP Status Code: " . $meResponse['http_code'] . "\n";
+        echo "Response Body:\n";
+        if ($meResponse['body']) {
+            echo json_encode($meResponse['body'], JSON_PRETTY_PRINT) . "\n";
+        } else {
+            echo "No JSON response body\n";
+        }
+    }
+    
+    echo "\nTest completed successfully!\n";
+    
+} catch (\Exception $e) {
+    echo "Test failed: " . $e->getMessage() . "\n";
+    exit(1);
+}
+
+/**
+ * Usage instructions
+ */
+echo "\n";
+echo "Usage Instructions:\n";
+echo "===================\n";
+echo "1. Update the \$baseUrl variable to match your Nextcloud installation\n";
+echo "2. Update the \$adminUsername and \$adminPassword with valid admin credentials\n";
+echo "3. Run this script: php examples/test-admin-login.php\n";
+echo "4. Check the output for successful login and CORS headers\n\n";
+
+echo "Expected successful response:\n";
+echo "- HTTP Status Code: 200\n";
+echo "- CORS headers should be present\n";
+echo "- Response should contain user data with admin privileges\n";
+echo "- Session should be created for subsequent requests\n"; 
\ No newline at end of file
diff --git a/lib/AppInfo/Application.php b/lib/AppInfo/Application.php
index c36a9f08..a985aa1e 100644
--- a/lib/AppInfo/Application.php
+++ b/lib/AppInfo/Application.php
@@ -39,8 +39,8 @@ public function register(IRegistrationContext $context): void {
         // @todo: remove this temporary listener to the software catalog application
 //        $dispatcher->addServiceListener(eventName: ViewUpdatedOrCreatedEventListener::class, className: ViewUpdatedOrCreatedEventListener::class);
 
-		// Register the OrganisationBridgeService
-		$context->registerService(OrganisationBridgeService::class);
+		// OrganisationBridgeService now uses lazy dependency resolution
+		// No manual registration needed - Nextcloud will auto-inject it
 	}
 
 	public function boot(IBootContext $context): void {
diff --git a/lib/Controller/UserController.php b/lib/Controller/UserController.php
index 2b9a4968..cde7fc28 100644
--- a/lib/Controller/UserController.php
+++ b/lib/Controller/UserController.php
@@ -93,6 +93,27 @@ class UserController extends Controller
      */
     private readonly LoggerInterface $logger;
 
+    /**
+     * Allowed CORS methods
+     *
+     * @var string
+     */
+    private readonly string $corsMethods;
+
+    /**
+     * Allowed CORS headers
+     *
+     * @var string
+     */
+    private readonly string $corsAllowedHeaders;
+
+    /**
+     * CORS max age
+     *
+     * @var int
+     */
+    private readonly int $corsMaxAge;
+
     /**
      * Constructor for the UserController
      *
@@ -108,6 +129,9 @@ class UserController extends Controller
      * @param LoggerInterface $logger The logger for security events
      * @param UserService $userService The user service for user-related operations
      * @param OrganisationBridgeService $organisationBridgeService The organization bridge service
+     * @param string $corsMethods Allowed CORS methods
+     * @param string $corsAllowedHeaders Allowed CORS headers
+     * @param int $corsMaxAge CORS max age
      *
      * @psalm-param string $appName
      * @psalm-param IRequest $request
@@ -118,6 +142,9 @@ class UserController extends Controller
      * @psalm-param LoggerInterface $logger
      * @psalm-param UserService $userService
      * @psalm-param OrganisationBridgeService $organisationBridgeService
+     * @psalm-param string $corsMethods
+     * @psalm-param string $corsAllowedHeaders
+     * @psalm-param int $corsMaxAge
      * @phpstan-param string $appName
      * @phpstan-param IRequest $request
      * @phpstan-param IUserManager $userManager
@@ -127,6 +154,9 @@ class UserController extends Controller
      * @phpstan-param LoggerInterface $logger
      * @phpstan-param UserService $userService
      * @phpstan-param OrganisationBridgeService $organisationBridgeService
+     * @phpstan-param string $corsMethods
+     * @phpstan-param string $corsAllowedHeaders
+     * @phpstan-param int $corsMaxAge
      */
     public function __construct(
         string $appName,
@@ -137,7 +167,10 @@ public function __construct(
         ICacheFactory $cacheFactory,
         LoggerInterface $logger,
         UserService $userService,
-        OrganisationBridgeService $organisationBridgeService
+        OrganisationBridgeService $organisationBridgeService,
+        string $corsMethods = 'PUT, POST, GET, DELETE, PATCH',
+        string $corsAllowedHeaders = 'Authorization, Content-Type, Accept',
+        int $corsMaxAge = 1728000
     ) {
         parent::__construct($appName, $request);
         $this->userManager = $userManager;
@@ -147,6 +180,80 @@ public function __construct(
         $this->userService = $userService;
         $this->organisationBridgeService = $organisationBridgeService;
         $this->logger = $logger;
+        $this->corsMethods = $corsMethods;
+        $this->corsAllowedHeaders = $corsAllowedHeaders;
+        $this->corsMaxAge = $corsMaxAge;
+    }
+
+    /**
+     * Implements a preflighted CORS response for OPTIONS requests
+     *
+     * This method handles CORS preflight requests by returning appropriate
+     * CORS headers to allow cross-origin requests from web applications.
+     *
+     * @NoAdminRequired
+     * @NoCSRFRequired
+     * @PublicPage
+     *
+     * @return \OCP\AppFramework\Http\Response The CORS response with appropriate headers
+     * 
+     * @psalm-return \OCP\AppFramework\Http\Response
+     * @phpstan-return \OCP\AppFramework\Http\Response
+     */
+    public function preflightedCors(): \OCP\AppFramework\Http\Response
+    {
+        // Determine the origin from request headers
+        $origin = $this->request->getHeader('Origin') ?: ($this->request->server['HTTP_ORIGIN'] ?? '*');
+
+        // For credentials to work, we cannot use '*' as origin
+        if ($origin === '*' && $this->request->getHeader('Origin') === '') {
+            $origin = 'http://localhost:3000'; // Default for development
+        }
+
+        // Create and configure the CORS response
+        $response = new \OCP\AppFramework\Http\Response();
+        $response->addHeader('Access-Control-Allow-Origin', $origin);
+        $response->addHeader('Access-Control-Allow-Methods', $this->corsMethods);
+        $response->addHeader('Access-Control-Max-Age', (string) $this->corsMaxAge);
+        $response->addHeader('Access-Control-Allow-Headers', $this->corsAllowedHeaders);
+        $response->addHeader('Access-Control-Allow-Credentials', 'true'); // Enable credentials for browser auth
+
+        return $response;
+    }
+
+    /**
+     * Add CORS headers to a JSON response
+     *
+     * This method adds the necessary CORS headers to a JSONResponse to allow
+     * cross-origin requests from web applications, including support for
+     * credentials (cookies) for browser-based authentication.
+     *
+     * @param JSONResponse $response The response to add CORS headers to
+     * @return JSONResponse The response with CORS headers added
+     * 
+     * @psalm-param JSONResponse $response
+     * @psalm-return JSONResponse
+     * @phpstan-param JSONResponse $response
+     * @phpstan-return JSONResponse
+     */
+    private function addCorsHeaders(JSONResponse $response): JSONResponse
+    {
+        // Determine the origin from request headers
+        $origin = $this->request->getHeader('Origin') ?: ($this->request->server['HTTP_ORIGIN'] ?? '*');
+        
+        // For credentials to work, we cannot use '*' as origin
+        // Use the actual origin or a default allowed origin
+        if ($origin === '*' && $this->request->getHeader('Origin') === '') {
+            $origin = 'http://localhost:3000'; // Default for development
+        }
+        
+        // Add CORS headers to the response with credentials support
+        $response->addHeader('Access-Control-Allow-Origin', $origin);
+        $response->addHeader('Access-Control-Allow-Methods', $this->corsMethods);
+        $response->addHeader('Access-Control-Allow-Headers', $this->corsAllowedHeaders);
+        $response->addHeader('Access-Control-Allow-Credentials', 'true'); // Enable credentials
+        
+        return $response;
     }
 
     /**
@@ -154,6 +261,7 @@ public function __construct(
      *
      * This method returns the current authenticated user's information
      * in JSON format for external API consumption with security headers.
+     * Supports both session-based and basic authentication.
      *
      * @NoAdminRequired
      * @NoCSRFRequired
@@ -166,30 +274,45 @@ public function __construct(
     public function me(): JSONResponse
     {
         try {
-            // Get the current user from the session
+            // First try to get user from session
             $currentUser = $this->userService->getCurrentUser();
             
-            // Check if user is logged in
+            // If no session user, try basic authentication
             if ($currentUser === null) {
+                $authHeader = $this->request->getHeader('Authorization');
+                if ($authHeader && str_starts_with($authHeader, 'Basic ')) {
+                    $credentials = base64_decode(substr($authHeader, 6));
+                    if ($credentials && str_contains($credentials, ':')) {
+                        [$username, $password] = explode(':', $credentials, 2);
+                        $currentUser = $this->userManager->checkPassword($username, $password);
+                    }
+                }
+            }
+            
+            // Check if user is authenticated (either via session or basic auth)
+            if ($currentUser === false || $currentUser === null) {
                 $response = new JSONResponse(
-                    data: ['error' => 'User not authenticated'],
+                    data: ['message' => 'Current user is not logged in'],
                     statusCode: 401
                 );
-                return $this->securityService->addSecurityHeaders($response);
+                $response = $this->securityService->addSecurityHeaders($response);
+                return $this->addCorsHeaders($response);
             }
 
             // Build user data array with essential information (already sanitized)
             $userData = $this->userService->buildUserDataArray($currentUser);
 
             $response = new JSONResponse($userData);
-            return $this->securityService->addSecurityHeaders($response);
+            $response = $this->securityService->addSecurityHeaders($response);
+            return $this->addCorsHeaders($response);
         } catch (\Exception $e) {
             // Log the error and return generic error response
             $response = new JSONResponse(
                 data: ['error' => 'Failed to retrieve user information'],
                 statusCode: 500
             );
-            return $this->securityService->addSecurityHeaders($response);
+            $response = $this->securityService->addSecurityHeaders($response);
+            return $this->addCorsHeaders($response);
         }
     }
 
@@ -219,7 +342,8 @@ public function updateMe(): JSONResponse
                     data: ['error' => 'User not authenticated'],
                     statusCode: 401
                 );
-                return $this->securityService->addSecurityHeaders($response);
+                $response = $this->securityService->addSecurityHeaders($response);
+                return $this->addCorsHeaders($response);
             }
 
             // Get and sanitize the request data to prevent XSS
@@ -246,14 +370,16 @@ public function updateMe(): JSONResponse
             }
 
             $response = new JSONResponse($responseData);
-            return $this->securityService->addSecurityHeaders($response);
+            $response = $this->securityService->addSecurityHeaders($response);
+            return $this->addCorsHeaders($response);
         } catch (\Exception $e) {
             // Log the error and return generic error response
             $response = new JSONResponse(
                 data: ['error' => 'Failed to update user information'],
                 statusCode: 500
             );
-            return $this->securityService->addSecurityHeaders($response);
+            $response = $this->securityService->addSecurityHeaders($response);
+            return $this->addCorsHeaders($response);
         }
     }
 
@@ -294,7 +420,8 @@ public function login(): JSONResponse
                     data: ['error' => 'Server memory usage too high, please try again later'],
                     statusCode: 503 // Service Unavailable
                 );
-                return $this->securityService->addSecurityHeaders($response);
+                $response = $this->securityService->addSecurityHeaders($response);
+                return $this->addCorsHeaders($response);
             }
             
             // Get client IP address for rate limiting
@@ -310,7 +437,8 @@ public function login(): JSONResponse
                     data: ['error' => $credentialValidation['error']],
                     statusCode: 400
                 );
-                return $this->securityService->addSecurityHeaders($response);
+                $response = $this->securityService->addSecurityHeaders($response);
+                return $this->addCorsHeaders($response);
             }
 
             $credentials = $credentialValidation['credentials'];
@@ -333,7 +461,8 @@ public function login(): JSONResponse
                     ],
                     statusCode: 429 // Too Many Requests
                 );
-                return $this->securityService->addSecurityHeaders($response);
+                $response = $this->securityService->addSecurityHeaders($response);
+                return $this->addCorsHeaders($response);
             }
 
             // Attempt to authenticate the user
@@ -349,7 +478,8 @@ public function login(): JSONResponse
                     data: ['error' => 'Invalid username or password'],
                     statusCode: 401
                 );
-                return $this->securityService->addSecurityHeaders($response);
+                $response = $this->securityService->addSecurityHeaders($response);
+                return $this->addCorsHeaders($response);
             }
 
             // Check if user account is enabled
@@ -361,14 +491,29 @@ public function login(): JSONResponse
                     data: ['error' => 'Account is disabled'],
                     statusCode: 401
                 );
-                return $this->securityService->addSecurityHeaders($response);
+                $response = $this->securityService->addSecurityHeaders($response);
+                return $this->addCorsHeaders($response);
             }
 
             // Authentication successful - record success and clear rate limits
             $this->securityService->recordSuccessfulLogin($username, $clientIp);
 
-            // Set the user in the session to create login session
+            // Set the user in the session using Nextcloud's session management
             $this->userSession->setUser($user);
+            
+            // Create a complete login using Nextcloud's login flow
+            $this->userSession->createSessionToken($this->request, $user->getUID(), $user->getUID(), $password);
+            
+            // Verify the session was established
+            $sessionUser = $this->userSession->getUser();
+            if ($sessionUser === null || $sessionUser->getUID() !== $user->getUID()) {
+                $response = new JSONResponse(
+                    data: ['error' => 'Failed to establish persistent session'],
+                    statusCode: 500
+                );
+                $response = $this->securityService->addSecurityHeaders($response);
+                return $this->addCorsHeaders($response);
+            }
 
             // Build user data array for response (sanitized)
             $userData = $this->userService->buildUserDataArray($user);
@@ -388,21 +533,39 @@ public function login(): JSONResponse
                 ]);
             }
 
-            // Create successful response with security headers
+            // Get session information for API usage
+            $sessionId = session_id();
+            $sessionName = session_name();
+            
+            // Create successful response with security headers and session info
             $response = new JSONResponse([
                 'message' => 'Login successful',
                 'user' => $userData,
-                'session_created' => true
+                'session_created' => true,
+                'session' => [
+                    'id' => $sessionId,
+                    'name' => $sessionName,
+                    'cookie_instructions' => 'Use the returned session cookies for subsequent authenticated requests'
+                ]
             ]);
             
-            return $this->securityService->addSecurityHeaders($response);
+            $response = $this->securityService->addSecurityHeaders($response);
+            return $this->addCorsHeaders($response);
         } catch (\Exception $e) {
-            // Log the error securely without exposing sensitive information
+            // Log the actual error for debugging
+            $this->logger->error('Login method exception', [
+                'exception' => $e->getMessage(),
+                'trace' => $e->getTraceAsString(),
+                'file' => $e->getFile(),
+                'line' => $e->getLine()
+            ]);
+            
             $response = new JSONResponse(
                 data: ['error' => 'Login failed due to a system error'],
                 statusCode: 500
             );
-            return $this->securityService->addSecurityHeaders($response);
+            $response = $this->securityService->addSecurityHeaders($response);
+            return $this->addCorsHeaders($response);
         }
     }
 
diff --git a/lib/Service/EndpointService.php b/lib/Service/EndpointService.php
index a7e9788d..1a16a773 100644
--- a/lib/Service/EndpointService.php
+++ b/lib/Service/EndpointService.php
@@ -376,7 +376,16 @@ private function replaceInternalReferences(
         } else if ($serializedObject === null) {
             return $serializedObject;
         } else {
-            $object = $mapper->find($serializedObject['id']);
+            try {
+                $object = $mapper->find($serializedObject['id']);
+            } catch (DoesNotExistException $e) {
+                // Object doesn't exist yet, return the serialized object as-is
+                $this->logger->info('OpenConnector: Object not found during reference resolution', [
+                    'objectId' => $serializedObject['id'] ?? 'unknown',
+                    'reason' => 'Object not found during initial lookup'
+                ]);
+                return $serializedObject;
+            }
         }
 
         $uses = (new Dot($object->jsonSerialize()))->flatten();
@@ -430,10 +439,26 @@ private function replaceInternalReferences(
             }
 
             try {
+                // Try to find the object first to ensure it exists before generating URL
+                try {
+                    $mapper->find($useId);
+                } catch (DoesNotExistException $e) {
+                    // Object doesn't exist yet, skip this reference
+                    $this->logger->info('OpenConnector: Skipping reference to non-existent object', [
+                        'objectId' => $useId,
+                        'reason' => 'Object not found during reference resolution'
+                    ]);
+                    continue;
+                }
+                
                 $generatedUrl = $this->generateEndpointUrl(id: $useId, parentIds: [$object->getUuid()], schemaMapper: $schemaMapper);
                 $uuidToUrlMap[$useId] = $generatedUrl;
                 $useUrls[] = $generatedUrl;
             } catch (Exception $exception) {
+                $this->logger->warning('OpenConnector: Failed to generate URL for object reference', [
+                    'objectId' => $useId,
+                    'error' => $exception->getMessage()
+                ]);
                 continue;
             }
         }
diff --git a/lib/Service/OrganisationBridgeService.php b/lib/Service/OrganisationBridgeService.php
index 99b49621..3c20a987 100644
--- a/lib/Service/OrganisationBridgeService.php
+++ b/lib/Service/OrganisationBridgeService.php
@@ -20,6 +20,7 @@
 namespace OCA\OpenConnector\Service;
 
 use OCP\App\IAppManager;
+use OCP\Server;
 use Psr\Container\ContainerExceptionInterface;
 use Psr\Container\ContainerInterface;
 use Psr\Container\NotFoundExceptionInterface;
@@ -39,15 +40,41 @@ class OrganisationBridgeService
     /**
      * Constructor for the OrganisationBridgeService
      *
-     * @param IAppManager $appManager The app manager to check if OpenRegister is installed
-     * @param ContainerInterface $container The container to access OpenRegister services
-     * @param LoggerInterface $logger The logger for error tracking
+     * Uses lazy dependency resolution to avoid complex dependency injection issues.
+     * Dependencies are resolved from the Server container when needed.
      */
-    public function __construct(
-        private readonly IAppManager $appManager,
-        private readonly ContainerInterface $container,
-        private readonly LoggerInterface $logger
-    ) {
+    public function __construct()
+    {
+    }
+
+    /**
+     * Get the app manager using lazy resolution
+     *
+     * @return IAppManager The app manager instance
+     */
+    private function getAppManager(): IAppManager
+    {
+        return Server::get(IAppManager::class);
+    }
+
+    /**
+     * Get the container using lazy resolution
+     *
+     * @return ContainerInterface The container instance
+     */
+    private function getContainer(): ContainerInterface
+    {
+        return Server::get(ContainerInterface::class);
+    }
+
+    /**
+     * Get the logger using lazy resolution
+     *
+     * @return LoggerInterface The logger instance
+     */
+    private function getLogger(): LoggerInterface
+    {
+        return Server::get(LoggerInterface::class);
     }
 
     /**
@@ -64,16 +91,16 @@ public function __construct(
     public function getOrganisationService(): ?\OCA\OpenRegister\Service\OrganisationService
     {
         // Check if OpenRegister app is installed
-        if (in_array(needle: 'openregister', haystack: $this->appManager->getInstalledApps()) === false) {
+        if (in_array(needle: 'openregister', haystack: $this->getAppManager()->getInstalledApps()) === false) {
             return null;
         }
 
         try {
             // Attempt to get the OrganisationService from the container
-            return $this->container->get('OCA\OpenRegister\Service\OrganisationService');
+            return $this->getContainer()->get('OCA\OpenRegister\Service\OrganisationService');
         } catch (ContainerExceptionInterface|NotFoundExceptionInterface $e) {
             // Log the error but don't fail the application
-            $this->logger->warning('OpenRegister OrganisationService not available', [
+            $this->getLogger()->warning('OpenRegister OrganisationService not available', [
                 'exception' => $e->getMessage()
             ]);
             return null;
@@ -123,7 +150,7 @@ public function getUserOrganisationStats(): array
             $stats['available'] = true;
             return $stats;
         } catch (\Exception $e) {
-            $this->logger->error('Failed to get user organization stats', [
+            $this->getLogger()->error('Failed to get user organization stats', [
                 'exception' => $e->getMessage()
             ]);
             
@@ -171,7 +198,7 @@ public function setActiveOrganisation(string $organisationUuid): array
                 'available' => true
             ];
         } catch (\Exception $e) {
-            $this->logger->error('Failed to set active organization', [
+            $this->getLogger()->error('Failed to set active organization', [
                 'organisationUuid' => $organisationUuid,
                 'exception' => $e->getMessage()
             ]);
@@ -204,7 +231,7 @@ public function getActiveOrganisation(): ?array
             $activeOrg = $organisationService->getActiveOrganisation();
             return $activeOrg !== null ? $activeOrg->jsonSerialize() : null;
         } catch (\Exception $e) {
-            $this->logger->error('Failed to get active organization', [
+            $this->getLogger()->error('Failed to get active organization', [
                 'exception' => $e->getMessage()
             ]);
             return null;
@@ -231,7 +258,7 @@ public function getUserOrganisations(): array
             $organisations = $organisationService->getUserOrganisations();
             return array_map(fn($org) => $org->jsonSerialize(), $organisations);
         } catch (\Exception $e) {
-            $this->logger->error('Failed to get user organizations', [
+            $this->getLogger()->error('Failed to get user organizations', [
                 'exception' => $e->getMessage()
             ]);
             return [];
diff --git a/lib/Service/OrganisationService.php b/lib/Service/OrganisationService.php
new file mode 100644
index 00000000..fe4a02e6
--- /dev/null
+++ b/lib/Service/OrganisationService.php
@@ -0,0 +1,664 @@
+<?php
+/**
+ * OpenRegister Organisation Service
+ *
+ * This file contains the service class for managing organisations and multi-tenancy.
+ * Handles user-organisation relationships, session management, and organisational context.
+ *
+ * @category Service
+ * @package  OCA\OpenRegister\Service
+ *
+ * @author    Conduction Development Team <dev@conductio.nl>
+ * @copyright 2024 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git-id>
+ *
+ * @link https://OpenRegister.app
+ */
+
+namespace OCA\OpenRegister\Service;
+
+use OCA\OpenRegister\Db\Organisation;
+use OCA\OpenRegister\Db\OrganisationMapper;
+use OCP\IUserSession;
+use OCP\IUser;
+use OCP\ISession;
+use OCP\IConfig;
+use OCP\IGroupManager;
+use OCP\AppFramework\Db\DoesNotExistException;
+use Psr\Log\LoggerInterface;
+use Exception;
+use Symfony\Component\Uid\Uuid;
+
+/**
+ * OrganisationService
+ * 
+ * Manages multi-tenancy through organisations, handling user-organisation relationships,
+ * persistent user configuration for active organisation, and ensuring proper organisational context.
+ * 
+ * @package OCA\OpenRegister\Service
+ */
+class OrganisationService
+{
+    /**
+     * User config key for storing active organisation UUID
+     */
+    private const CONFIG_ACTIVE_ORGANISATION = 'active_organisation';
+
+    /**
+     * Session key for storing user's organisations array (cache only)
+     */
+    private const SESSION_USER_ORGANISATIONS = 'openregister_user_organisations';
+
+    /**
+     * Cache timeout for organisations in seconds (15 minutes)
+     */
+    private const CACHE_TIMEOUT = 900;
+
+    /**
+     * App name for user configuration storage
+     */
+    private const APP_NAME = 'openregister';
+
+    /**
+     * Organisation mapper for database operations
+     * 
+     * @var OrganisationMapper
+     */
+    private readonly OrganisationMapper $organisationMapper;
+
+    /**
+     * User session for getting current user
+     * 
+     * @var IUserSession
+     */
+    private readonly IUserSession $userSession;
+
+    /**
+     * Session interface for storing organisation data (cache only)
+     * 
+     * @var ISession
+     */
+    private readonly ISession $session;
+
+    /**
+     * Configuration interface for persistent user settings
+     * 
+     * @var IConfig
+     */
+    private readonly IConfig $config;
+
+    /**
+     * Group manager for accessing Nextcloud groups
+     * 
+     * @var IGroupManager
+     */
+    private readonly IGroupManager $groupManager;
+
+    /**
+     * Logger for debugging and error tracking
+     * 
+     * @var LoggerInterface
+     */
+    private readonly LoggerInterface $logger;
+
+    /**
+     * OrganisationService constructor
+     * 
+     * @param OrganisationMapper $organisationMapper Organisation database mapper
+     * @param IUserSession $userSession User session service
+     * @param ISession $session Session storage service (for cache only)
+     * @param IConfig $config Configuration service for persistent storage
+     * @param IGroupManager $groupManager Group manager service
+     * @param LoggerInterface $logger Logger service
+     */
+    public function __construct(
+        OrganisationMapper $organisationMapper,
+        IUserSession $userSession,
+        ISession $session,
+        IConfig $config,
+        IGroupManager $groupManager,
+        LoggerInterface $logger
+    ) {
+        $this->organisationMapper = $organisationMapper;
+        $this->userSession = $userSession;
+        $this->session = $session;
+        $this->config = $config;
+        $this->groupManager = $groupManager;
+        $this->logger = $logger;
+    }
+
+    /**
+     * Ensure default organisation exists, create if needed
+     * 
+     * @return Organisation The default organisation
+     */
+    public function ensureDefaultOrganisation(): Organisation
+    {
+        try {
+            $defaultOrg = $this->organisationMapper->findDefault();
+            
+            // Ensure admin users are added to existing default organisation
+            $adminUsers = $this->getAdminGroupUsers();
+            $updated = false;
+            
+            foreach ($adminUsers as $adminUserId) {
+                if (!$defaultOrg->hasUser($adminUserId)) {
+                    $defaultOrg->addUser($adminUserId);
+                    $updated = true;
+                }
+            }
+            
+            if ($updated) {
+                $this->organisationMapper->update($defaultOrg);
+                $this->logger->info('Added admin users to existing default organisation', [
+                    'adminUsersAdded' => $adminUsers
+                ]);
+            }
+            
+            return $defaultOrg;
+        } catch (DoesNotExistException $e) {
+            $this->logger->info('Creating default organisation');
+            $defaultOrg = $this->organisationMapper->createDefault();
+            
+            // Add all admin group users to the new default organisation
+            $defaultOrg = $this->addAdminUsersToOrganisation($defaultOrg);
+            $this->organisationMapper->update($defaultOrg);
+            
+            return $defaultOrg;
+        }
+    }
+
+    /**
+     * Get the current user
+     * 
+     * @return IUser|null The current user or null if not logged in
+     */
+    private function getCurrentUser(): ?IUser
+    {
+        return $this->userSession->getUser();
+    }
+
+    /**
+     * Get organisations for the current user
+     * 
+     * @param bool $useCache Whether to use session cache (temporarily disabled)
+     * @return array Array of Organisation objects
+     */
+    public function getUserOrganisations(bool $useCache = true): array
+    {
+        $user = $this->getCurrentUser();
+        if ($user === null) {
+            return [];
+        }
+
+        $userId = $user->getUID();
+        
+        // Temporarily disable caching to avoid serialization issues
+        // TODO: Implement proper object serialization/deserialization later
+        
+        // Get from database
+        $organisations = $this->organisationMapper->findByUserId($userId);
+        
+        // If user has no organisations, add them to default
+        if (empty($organisations)) {
+            $defaultOrg = $this->ensureDefaultOrganisation();
+            $defaultOrg->addUser($userId);
+            $this->organisationMapper->update($defaultOrg);
+            $organisations = [$defaultOrg];
+        }
+
+        return $organisations;
+    }
+
+    /**
+     * Get the active organisation for the current user
+     * 
+     * Uses persistent user configuration instead of session storage
+     * 
+     * @return Organisation|null The active organisation or null if none set
+     */
+    public function getActiveOrganisation(): ?Organisation
+    {
+        $user = $this->getCurrentUser();
+        if ($user === null) {
+            return null;
+        }
+
+        $userId = $user->getUID();
+        
+        // Get active organisation UUID from user configuration
+        $activeUuid = $this->config->getUserValue(
+            $userId, 
+            self::APP_NAME, 
+            self::CONFIG_ACTIVE_ORGANISATION, 
+            ''
+        );
+
+        if ($activeUuid !== '') {
+            try {
+                $organisation = $this->organisationMapper->findByUuid($activeUuid);
+                
+                // Verify user still has access to this organisation
+                if ($organisation->hasUser($userId)) {
+                    return $organisation;
+                } else {
+                    // User no longer has access, clear the setting
+                    $this->config->deleteUserValue($userId, self::APP_NAME, self::CONFIG_ACTIVE_ORGANISATION);
+                    $this->logger->info('Cleared invalid active organisation', [
+                        'userId' => $userId,
+                        'organisationUuid' => $activeUuid
+                    ]);
+                }
+            } catch (DoesNotExistException $e) {
+                // Active organisation no longer exists, clear from config
+                $this->config->deleteUserValue($userId, self::APP_NAME, self::CONFIG_ACTIVE_ORGANISATION);
+                $this->logger->info('Cleared non-existent active organisation', [
+                    'userId' => $userId,
+                    'organisationUuid' => $activeUuid
+                ]);
+            }
+        }
+
+        // No valid active organisation set, try to set the oldest one from user's organisations
+        $organisations = $this->getUserOrganisations();
+        if (!empty($organisations)) {
+            // Sort by created date and take the oldest
+            usort($organisations, function($a, $b) {
+                return $a->getCreated() <=> $b->getCreated();
+            });
+            
+            $oldestOrg = $organisations[0];
+            
+            // Set in user configuration
+            $this->config->setUserValue(
+                $userId, 
+                self::APP_NAME, 
+                self::CONFIG_ACTIVE_ORGANISATION, 
+                $oldestOrg->getUuid()
+            );
+            
+            $this->logger->info('Auto-set active organisation to oldest', [
+                'userId' => $userId,
+                'organisationUuid' => $oldestOrg->getUuid(),
+                'organisationName' => $oldestOrg->getName()
+            ]);
+            
+            return $oldestOrg;
+        }
+
+        return null;
+    }
+
+    /**
+     * Set the active organisation for the current user
+     * 
+     * Uses persistent user configuration instead of session storage
+     * 
+     * @param string $organisationUuid The organisation UUID to set as active
+     * 
+     * @return bool True if successfully set, false otherwise
+     * 
+     * @throws Exception If user doesn't belong to the organisation
+     */
+    public function setActiveOrganisation(string $organisationUuid): bool
+    {
+        $user = $this->getCurrentUser();
+        if ($user === null) {
+            throw new Exception('No user logged in');
+        }
+
+        $userId = $user->getUID();
+
+        // Verify user belongs to this organisation
+        try {
+            $organisation = $this->organisationMapper->findByUuid($organisationUuid);
+        } catch (DoesNotExistException $e) {
+            throw new Exception('Organisation not found');
+        }
+
+        if (!$organisation->hasUser($userId)) {
+            throw new Exception('User does not belong to this organisation');
+        }
+
+        // Set in user configuration (persistent across sessions)
+        $this->config->setUserValue(
+            $userId, 
+            self::APP_NAME, 
+            self::CONFIG_ACTIVE_ORGANISATION, 
+            $organisationUuid
+        );
+
+        // Clear cached organisations to force refresh
+        $orgCacheKey = self::SESSION_USER_ORGANISATIONS . '_' . $userId;
+        $this->session->remove($orgCacheKey);
+
+        $this->logger->info('Set active organisation in user config', [
+            'userId' => $userId,
+            'organisationUuid' => $organisationUuid,
+            'organisationName' => $organisation->getName()
+        ]);
+
+        return true;
+    }
+
+    /**
+     * Add current user to an organisation
+     * 
+     * @param string $organisationUuid The organisation UUID
+     * 
+     * @return bool True if successfully added
+     * 
+     * @throws Exception If organisation not found or user not logged in
+     */
+    public function joinOrganisation(string $organisationUuid): bool
+    {
+        $user = $this->getCurrentUser();
+        if ($user === null) {
+            throw new Exception('No user logged in');
+        }
+
+        $userId = $user->getUID();
+        
+        try {
+            $this->organisationMapper->addUserToOrganisation($organisationUuid, $userId);
+            
+            // Clear cached organisations to force refresh
+            $cacheKey = self::SESSION_USER_ORGANISATIONS . '_' . $userId;
+            $this->session->remove($cacheKey);
+            
+            return true;
+        } catch (DoesNotExistException $e) {
+            throw new Exception('Organisation not found');
+        }
+    }
+
+    /**
+     * Remove current user from an organisation
+     * 
+     * @param string $organisationUuid The organisation UUID
+     * 
+     * @return bool True if successfully removed
+     * 
+     * @throws Exception If organisation not found, user not logged in, or trying to leave last organisation
+     */
+    public function leaveOrganisation(string $organisationUuid): bool
+    {
+        $user = $this->getCurrentUser();
+        if ($user === null) {
+            throw new Exception('No user logged in');
+        }
+
+        $userId = $user->getUID();
+        $userOrgs = $this->getUserOrganisations(false); // Don't use cache
+
+        // Prevent user from leaving all organisations
+        if (count($userOrgs) <= 1) {
+            throw new Exception('Cannot leave last organisation');
+        }
+
+        try {
+            $organisation = $this->organisationMapper->removeUserFromOrganisation($organisationUuid, $userId);
+            
+            // If this was the active organisation, clear it from user config
+            $activeUuid = $this->config->getUserValue(
+                $userId, 
+                self::APP_NAME, 
+                self::CONFIG_ACTIVE_ORGANISATION, 
+                ''
+            );
+            
+            if ($activeUuid === $organisationUuid) {
+                // Clear active organisation from user configuration
+                $this->config->deleteUserValue($userId, self::APP_NAME, self::CONFIG_ACTIVE_ORGANISATION);
+                
+                $this->logger->info('Cleared active organisation after leaving', [
+                    'userId' => $userId,
+                    'organisationUuid' => $organisationUuid
+                ]);
+                
+                // Set another organisation as active (this will auto-set the oldest remaining org)
+                $this->getActiveOrganisation();
+            }
+            
+            // Clear cached organisations to force refresh
+            $cacheKey = self::SESSION_USER_ORGANISATIONS . '_' . $userId;
+            $this->session->remove($cacheKey);
+            
+            return true;
+        } catch (DoesNotExistException $e) {
+            throw new Exception('Organisation not found');
+        }
+    }
+
+    /**
+     * Create a new organisation
+     * 
+     * @param string $name Organisation name
+     * @param string $description Organisation description
+     * @param bool $addCurrentUser Whether to add current user as owner and member
+     * @param string $uuid Optional specific UUID to use
+     * 
+     * @return Organisation The created organisation
+     * 
+     * @throws Exception If user not logged in or organisation creation fails
+     */
+    public function createOrganisation(string $name, string $description = '', bool $addCurrentUser = true, string $uuid = ''): Organisation
+    {
+        $user = $this->getCurrentUser();
+        if ($user === null) {
+            throw new Exception('No user logged in');
+        }
+
+        $userId = $user->getUID();
+        
+        // Validate UUID if provided
+        if ($uuid !== '' && !Organisation::isValidUuid($uuid)) {
+            throw new Exception('Invalid UUID format. UUID must be a 32-character hexadecimal string.');
+        }
+        
+        $organisation = new Organisation();
+        $organisation->setName($name);
+        $organisation->setDescription($description);
+        $organisation->setIsDefault(false);
+        
+        // Set UUID if provided
+        if ($uuid !== '') {
+            $organisation->setUuid($uuid);
+        }
+        
+        if ($addCurrentUser) {
+            $organisation->setOwner($userId);
+            $organisation->setUsers([$userId]);
+        }
+
+        // Add all admin group users to the organisation
+        $organisation = $this->addAdminUsersToOrganisation($organisation);
+
+        $saved = $this->organisationMapper->save($organisation);
+
+        // Clear cached organisations to force refresh
+        if ($addCurrentUser) {
+            $cacheKey = self::SESSION_USER_ORGANISATIONS . '_' . $userId;
+            $this->session->remove($cacheKey);
+        }
+
+        $this->logger->info('Created new organisation', [
+            'organisationUuid' => $saved->getUuid(),
+            'name' => $name,
+            'owner' => $userId,
+            'adminUsersAdded' => $this->getAdminGroupUsers(),
+            'uuidProvided' => $uuid !== ''
+        ]);
+
+        return $saved;
+    }
+
+    /**
+     * Create a new organisation with a specific UUID
+     * 
+     * @param string $name Organisation name
+     * @param string $description Organisation description
+     * @param string $uuid Specific UUID to use
+     * @param bool $addCurrentUser Whether to add current user as owner and member
+     * 
+     * @return Organisation The created organisation
+     * 
+     * @throws Exception If user not logged in, UUID is invalid, or organisation creation fails
+     */
+    public function createOrganisationWithUuid(string $name, string $description, string $uuid, bool $addCurrentUser = true): Organisation
+    {
+        return $this->createOrganisation($name, $description, $addCurrentUser, $uuid);
+    }
+
+    /**
+     * Check if current user has access to an organisation
+     * 
+     * @param string $organisationUuid The organisation UUID to check
+     * 
+     * @return bool True if user has access
+     */
+    public function hasAccessToOrganisation(string $organisationUuid): bool
+    {
+        try {
+            $organisation = $this->organisationMapper->findByUuid($organisationUuid);
+            $user = $this->getCurrentUser();
+            
+            if ($user === null) {
+                return false;
+            }
+
+            return $organisation->hasUser($user->getUID());
+        } catch (DoesNotExistException $e) {
+            return false;
+        }
+    }
+
+    /**
+     * Get user organisation statistics
+     * 
+     * @return array Statistics about user's organisations
+     */
+    public function getUserOrganisationStats(): array
+    {
+        $user = $this->getCurrentUser();
+        if ($user === null) {
+            return ['total' => 0, 'active' => null, 'results' => []];
+        }
+
+        $organisations = $this->getUserOrganisations();
+        $activeOrg = $this->getActiveOrganisation();
+
+        return [
+            'total' => count($organisations),
+            'active' => $activeOrg ? $activeOrg->jsonSerialize() : null,
+            'results' => array_map(function($org) { return $org->jsonSerialize(); }, $organisations)
+        ];
+    }
+
+    /**
+     * Clear all organisation session cache for current user
+     * Note: Does not clear persistent user configuration
+     * 
+     * @return bool True if cache cleared
+     */
+    public function clearCache(): bool
+    {
+        $user = $this->getCurrentUser();
+        if ($user === null) {
+            return false;
+        }
+
+        $userId = $user->getUID();
+        // Only clear session cache, not persistent user configuration
+        $this->session->remove(self::SESSION_USER_ORGANISATIONS . '_' . $userId);
+
+        return true;
+    }
+
+    /**
+     * Clear active organisation from user configuration
+     * This forces re-evaluation of the active organisation
+     * 
+     * @return bool True if cleared successfully
+     */
+    public function clearActiveOrganisation(): bool
+    {
+        $user = $this->getCurrentUser();
+        if ($user === null) {
+            return false;
+        }
+
+        $userId = $user->getUID();
+        $this->config->deleteUserValue($userId, self::APP_NAME, self::CONFIG_ACTIVE_ORGANISATION);
+        
+        $this->logger->info('Cleared active organisation from user config', [
+            'userId' => $userId
+        ]);
+
+        return true;
+    }
+
+    /**
+     * Get all users in the admin group
+     * 
+     * @return array Array of user IDs in the admin group
+     */
+    private function getAdminGroupUsers(): array
+    {
+        $adminGroup = $this->groupManager->get('admin');
+        if ($adminGroup === null) {
+            $this->logger->warning('Admin group not found');
+            return [];
+        }
+
+        $adminUsers = $adminGroup->getUsers();
+        return array_map(function($user) {
+            return $user->getUID();
+        }, $adminUsers);
+    }
+
+    /**
+     * Add all admin group users to an organisation
+     * 
+     * @param Organisation $organisation The organisation to add admin users to
+     * 
+     * @return Organisation The updated organisation
+     */
+    private function addAdminUsersToOrganisation(Organisation $organisation): Organisation
+    {
+        $adminUsers = $this->getAdminGroupUsers();
+        
+        foreach ($adminUsers as $adminUserId) {
+            $organisation->addUser($adminUserId);
+        }
+
+        $this->logger->info('Added admin users to organisation', [
+            'organisationUuid' => $organisation->getUuid(),
+            'organisationName' => $organisation->getName(),
+            'adminUsersAdded' => $adminUsers
+        ]);
+
+        return $organisation;
+    }
+
+    /**
+     * Get the organisation UUID to use for creating new entities
+     * Uses the active organisation or falls back to default
+     * 
+     * @return string The organisation UUID to use
+     */
+    public function getOrganisationForNewEntity(): string
+    {
+        $activeOrg = $this->getActiveOrganisation();
+        
+        if ($activeOrg !== null) {
+            return $activeOrg->getUuid();
+        }
+
+        // Fallback to default organisation
+        $defaultOrg = $this->ensureDefaultOrganisation();
+        return $defaultOrg->getUuid();
+    }
+} 
\ No newline at end of file
diff --git a/lib/Service/SecurityService.php b/lib/Service/SecurityService.php
index 254abe10..82d42645 100644
--- a/lib/Service/SecurityService.php
+++ b/lib/Service/SecurityService.php
@@ -500,16 +500,14 @@ private function logSecurityEvent(string $event, array $context = []): void
         $context['event'] = $event;
         $context['timestamp'] = (new DateTime())->format('Y-m-d H:i:s');
         
-        // Log with appropriate level based on event type
-        $level = match ($event) {
-            'user_locked_out', 'ip_locked_out' => 'warning',
-            'login_attempt_during_lockout', 'login_attempt_from_blocked_ip' => 'warning',
-            'rate_limit_exceeded' => 'info',
-            'failed_login_attempt' => 'info',
-            'successful_login' => 'info',
-            default => 'info'
+        // Use specific PSR-3 logging methods based on event type
+        match ($event) {
+            'user_locked_out', 'ip_locked_out' => $this->logger->warning("Security event: {$event}", $context),
+            'login_attempt_during_lockout', 'login_attempt_from_blocked_ip' => $this->logger->warning("Security event: {$event}", $context),
+            'rate_limit_exceeded' => $this->logger->info("Security event: {$event}", $context),
+            'failed_login_attempt' => $this->logger->info("Security event: {$event}", $context),
+            'successful_login' => $this->logger->info("Security event: {$event}", $context),
+            default => $this->logger->info("Security event: {$event}", $context)
         };
-
-        $this->logger->log($level, "Security event: {$event}", $context);
     }
 } 
\ No newline at end of file
diff --git a/tests/Unit/Controller/UserControllerTest.php b/tests/Unit/Controller/UserControllerTest.php
index 49f59cfa..dccd451d 100644
--- a/tests/Unit/Controller/UserControllerTest.php
+++ b/tests/Unit/Controller/UserControllerTest.php
@@ -5,7 +5,7 @@
 /**
  * UserControllerTest
  * 
- * Unit tests for the UserController
+ * Unit tests for the UserController with updated dependencies and CORS support
  *
  * @category   Test
  * @package    OCA\OpenConnector\Tests\Unit\Controller
@@ -20,19 +20,24 @@
 
 use OCA\OpenConnector\Controller\UserController;
 use OCA\OpenConnector\Service\AuthorizationService;
+use OCA\OpenConnector\Service\SecurityService;
+use OCA\OpenConnector\Service\UserService;
+use OCA\OpenConnector\Service\OrganisationBridgeService;
 use OCP\AppFramework\Http\JSONResponse;
 use OCP\IRequest;
 use OCP\IUserManager;
 use OCP\IUserSession;
 use OCP\IUser;
+use OCP\ICacheFactory;
 use PHPUnit\Framework\TestCase;
 use PHPUnit\Framework\MockObject\MockObject;
+use Psr\Log\LoggerInterface;
 
 /**
  * Unit tests for the UserController
  *
  * This test class covers all functionality of the UserController
- * including authentication, user data retrieval, and user updates.
+ * including authentication, user data retrieval, user updates, and CORS handling.
  *
  * @category Test
  * @package  OCA\OpenConnector\Tests\Unit\Controller
@@ -74,6 +79,34 @@ class UserControllerTest extends TestCase
      */
     private MockObject $authorizationService;
 
+    /**
+     * Mock cache factory
+     *
+     * @var MockObject|ICacheFactory
+     */
+    private MockObject $cacheFactory;
+
+    /**
+     * Mock logger
+     *
+     * @var MockObject|LoggerInterface
+     */
+    private MockObject $logger;
+
+    /**
+     * Mock user service
+     *
+     * @var MockObject|UserService
+     */
+    private MockObject $userService;
+
+    /**
+     * Mock organisation bridge service
+     *
+     * @var MockObject|OrganisationBridgeService
+     */
+    private MockObject $organisationBridgeService;
+
     /**
      * Mock user object
      *
@@ -81,11 +114,18 @@ class UserControllerTest extends TestCase
      */
     private MockObject $user;
 
+    /**
+     * Mock admin user object
+     *
+     * @var MockObject|IUser
+     */
+    private MockObject $adminUser;
+
     /**
      * Set up test environment before each test
      *
      * This method initializes all mocks and the controller instance
-     * for testing purposes.
+     * for testing purposes with updated dependencies.
      *
      * @return void
      * 
@@ -101,7 +141,20 @@ protected function setUp(): void
         $this->userManager = $this->createMock(IUserManager::class);
         $this->userSession = $this->createMock(IUserSession::class);
         $this->authorizationService = $this->createMock(AuthorizationService::class);
+        $this->cacheFactory = $this->createMock(ICacheFactory::class);
+        $this->logger = $this->createMock(LoggerInterface::class);
+        $this->userService = $this->createMock(UserService::class);
+        $this->organisationBridgeService = $this->createMock(OrganisationBridgeService::class);
         $this->user = $this->createMock(IUser::class);
+        $this->adminUser = $this->createMock(IUser::class);
+
+        // Setup request headers for CORS testing
+        $this->request->method('getHeader')
+            ->willReturnMap([
+                ['Origin', 'https://localhost:3000']
+            ]);
+        $this->request->method('server')
+            ->willReturn(['HTTP_ORIGIN' => 'https://localhost:3000']);
 
         // Initialize the controller with mocked dependencies
         $this->controller = new UserController(
@@ -109,31 +162,208 @@ protected function setUp(): void
             $this->request,
             $this->userManager,
             $this->userSession,
-            $this->authorizationService
+            $this->authorizationService,
+            $this->cacheFactory,
+            $this->logger,
+            $this->userService,
+            $this->organisationBridgeService
         );
     }
 
     /**
-     * Test successful retrieval of current user information
+     * Test CORS preflight response
      *
-     * This test verifies that the me() method returns correct user data
-     * when a user is authenticated.
+     * This test verifies that the preflightedCors() method returns proper
+     * CORS headers for OPTIONS requests.
+     *
+     * @return void
+     * 
+     * @psalm-return void
+     * @phpstan-return void
+     */
+    public function testPreflightedCors(): void
+    {
+        // Execute the method
+        $response = $this->controller->preflightedCors();
+
+        // Assert response has correct CORS headers
+        $headers = $response->getHeaders();
+        $this->assertEquals('https://localhost:3000', $headers['Access-Control-Allow-Origin']);
+        $this->assertEquals('PUT, POST, GET, DELETE, PATCH', $headers['Access-Control-Allow-Methods']);
+        $this->assertEquals('Authorization, Content-Type, Accept', $headers['Access-Control-Allow-Headers']);
+        $this->assertEquals('1728000', $headers['Access-Control-Max-Age']);
+        $this->assertEquals('false', $headers['Access-Control-Allow-Credentials']);
+    }
+
+    /**
+     * Test successful admin login
+     *
+     * This test verifies that the login() method successfully authenticates
+     * an admin user with valid credentials and includes CORS headers.
      *
      * @return void
      * 
      * @psalm-return void
      * @phpstan-return void
      */
-    public function testMeSuccessful(): void
+    public function testAdminLoginSuccessful(): void
+    {
+        // Setup mock admin user data
+        $this->setupMockAdminUserData();
+
+        // Mock request parameters with admin login credentials
+        $loginData = [
+            'username' => 'admin',
+            'password' => 'admin123'
+        ];
+        $this->request->expects($this->once())
+            ->method('getParams')
+            ->willReturn($loginData);
+
+        // Mock security service validation (should be successful)
+        $this->mockSecurityServiceForSuccessfulLogin();
+
+        // Mock user manager to return authenticated admin user
+        $this->userManager->expects($this->once())
+            ->method('checkPassword')
+            ->with('admin', 'admin123')
+            ->willReturn($this->adminUser);
+
+        // Mock user session to set the authenticated admin user
+        $this->userSession->expects($this->once())
+            ->method('setUser')
+            ->with($this->adminUser);
+
+        // Mock user service to build admin user data
+        $this->userService->expects($this->once())
+            ->method('buildUserDataArray')
+            ->with($this->adminUser)
+            ->willReturn([
+                'uid' => 'admin',
+                'displayName' => 'Administrator',
+                'email' => 'admin@example.com',
+                'enabled' => true,
+                'isAdmin' => true,
+                'groups' => ['admin'],
+                'permissions' => ['all']
+            ]);
+
+        // Execute the method
+        $response = $this->controller->login();
+
+        // Assert response is successful
+        $this->assertInstanceOf(JSONResponse::class, $response);
+        $this->assertEquals(200, $response->getStatus());
+
+        // Assert response contains success message and admin user data
+        $data = $response->getData();
+        $this->assertEquals('Login successful', $data['message']);
+        $this->assertArrayHasKey('user', $data);
+        $this->assertEquals('admin', $data['user']['uid']);
+        $this->assertTrue($data['user']['isAdmin']);
+        $this->assertTrue($data['session_created']);
+
+        // Assert CORS headers are present
+        $headers = $response->getHeaders();
+        $this->assertEquals('https://localhost:3000', $headers['Access-Control-Allow-Origin']);
+    }
+
+    /**
+     * Test successful regular user login
+     *
+     * This test verifies that the login() method successfully authenticates
+     * a regular user with valid credentials.
+     *
+     * @return void
+     * 
+     * @psalm-return void
+     * @phpstan-return void
+     */
+    public function testUserLoginSuccessful(): void
     {
         // Setup mock user data
         $this->setupMockUserData();
 
-        // Mock user session to return the authenticated user
+        // Mock request parameters with user login credentials
+        $loginData = [
+            'username' => 'testuser',
+            'password' => 'testpassword'
+        ];
+        $this->request->expects($this->once())
+            ->method('getParams')
+            ->willReturn($loginData);
+
+        // Mock security service validation (should be successful)
+        $this->mockSecurityServiceForSuccessfulLogin();
+
+        // Mock user manager to return authenticated user
+        $this->userManager->expects($this->once())
+            ->method('checkPassword')
+            ->with('testuser', 'testpassword')
+            ->willReturn($this->user);
+
+        // Mock user session to set the authenticated user
         $this->userSession->expects($this->once())
-            ->method('getUser')
+            ->method('setUser')
+            ->with($this->user);
+
+        // Mock user service to build user data
+        $this->userService->expects($this->once())
+            ->method('buildUserDataArray')
+            ->with($this->user)
+            ->willReturn([
+                'uid' => 'testuser',
+                'displayName' => 'Test User',
+                'email' => 'test@example.com',
+                'enabled' => true
+            ]);
+
+        // Execute the method
+        $response = $this->controller->login();
+
+        // Assert response is successful
+        $this->assertInstanceOf(JSONResponse::class, $response);
+        $this->assertEquals(200, $response->getStatus());
+
+        // Assert response contains success message and user data
+        $data = $response->getData();
+        $this->assertEquals('Login successful', $data['message']);
+        $this->assertArrayHasKey('user', $data);
+        $this->assertEquals('testuser', $data['user']['uid']);
+    }
+
+    /**
+     * Test successful retrieval of current user information with CORS
+     *
+     * This test verifies that the me() method returns correct user data
+     * when a user is authenticated and includes CORS headers.
+     *
+     * @return void
+     * 
+     * @psalm-return void
+     * @phpstan-return void
+     */
+    public function testMeSuccessfulWithCors(): void
+    {
+        // Setup mock user data
+        $this->setupMockUserData();
+
+        // Mock user service to return current user
+        $this->userService->expects($this->once())
+            ->method('getCurrentUser')
             ->willReturn($this->user);
 
+        // Mock user service to build user data
+        $this->userService->expects($this->once())
+            ->method('buildUserDataArray')
+            ->with($this->user)
+            ->willReturn([
+                'uid' => 'testuser',
+                'displayName' => 'Test User',
+                'email' => 'test@example.com',
+                'enabled' => true
+            ]);
+
         // Execute the method
         $response = $this->controller->me();
 
@@ -147,13 +377,17 @@ public function testMeSuccessful(): void
         $this->assertEquals('Test User', $data['displayName']);
         $this->assertEquals('test@example.com', $data['email']);
         $this->assertTrue($data['enabled']);
+
+        // Assert CORS headers are present
+        $headers = $response->getHeaders();
+        $this->assertEquals('https://localhost:3000', $headers['Access-Control-Allow-Origin']);
     }
 
     /**
      * Test me() method when user is not authenticated
      *
      * This test verifies that the me() method returns proper error
-     * when no user is logged in.
+     * when no user is logged in and includes CORS headers.
      *
      * @return void
      * 
@@ -162,9 +396,9 @@ public function testMeSuccessful(): void
      */
     public function testMeUnauthenticated(): void
     {
-        // Mock user session to return null (no authenticated user)
-        $this->userSession->expects($this->once())
-            ->method('getUser')
+        // Mock user service to return null (no authenticated user)
+        $this->userService->expects($this->once())
+            ->method('getCurrentUser')
             ->willReturn(null);
 
         // Execute the method
@@ -174,6 +408,10 @@ public function testMeUnauthenticated(): void
         $this->assertInstanceOf(JSONResponse::class, $response);
         $this->assertEquals(401, $response->getStatus());
         $this->assertEquals(['error' => 'User not authenticated'], $response->getData());
+
+        // Assert CORS headers are present
+        $headers = $response->getHeaders();
+        $this->assertEquals('https://localhost:3000', $headers['Access-Control-Allow-Origin']);
     }
 
     /**
@@ -261,56 +499,6 @@ public function testUpdateMeUnauthenticated(): void
         $this->assertEquals(['error' => 'User not authenticated'], $response->getData());
     }
 
-    /**
-     * Test successful user login
-     *
-     * This test verifies that the login() method successfully authenticates
-     * a user with valid credentials.
-     *
-     * @return void
-     * 
-     * @psalm-return void
-     * @phpstan-return void
-     */
-    public function testLoginSuccessful(): void
-    {
-        // Setup mock user data
-        $this->setupMockUserData();
-
-        // Mock request parameters with login credentials
-        $loginData = [
-            'username' => 'testuser',
-            'password' => 'testpassword'
-        ];
-        $this->request->expects($this->once())
-            ->method('getParams')
-            ->willReturn($loginData);
-
-        // Mock user manager to return authenticated user
-        $this->userManager->expects($this->once())
-            ->method('checkPassword')
-            ->with('testuser', 'testpassword')
-            ->willReturn($this->user);
-
-        // Mock user session to set the authenticated user
-        $this->userSession->expects($this->once())
-            ->method('setUser')
-            ->with($this->user);
-
-        // Execute the method
-        $response = $this->controller->login();
-
-        // Assert response is successful
-        $this->assertInstanceOf(JSONResponse::class, $response);
-        $this->assertEquals(200, $response->getStatus());
-
-        // Assert response contains success message and user data
-        $data = $response->getData();
-        $this->assertEquals('Login successful', $data['message']);
-        $this->assertArrayHasKey('user', $data);
-        $this->assertEquals('testuser', $data['user']['uid']);
-    }
-
     /**
      * Test login with invalid credentials
      *
@@ -518,18 +706,46 @@ private function setupMockUserData(): void
         $this->user->method('getDisplayName')->willReturn('Test User');
         $this->user->method('getEMailAddress')->willReturn('test@example.com');
         $this->user->method('isEnabled')->willReturn(true);
-        $this->user->method('getQuota')->willReturn('1 GB');
-        $this->user->method('getUsedSpace')->willReturn(524288000); // 500 MB in bytes
-        $this->user->method('getAvatarScope')->willReturn('contacts');
-        $this->user->method('getLastLogin')->willReturn(1640995200); // Unix timestamp
-        $this->user->method('getBackendClassName')->willReturn('Database');
-        $this->user->method('getLanguage')->willReturn('en');
-        $this->user->method('getLocale')->willReturn('en_US');
-        
-        // Configure capability methods
-        $this->user->method('canChangeDisplayName')->willReturn(true);
-        $this->user->method('canChangeMailAddress')->willReturn(true);
-        $this->user->method('canChangePassword')->willReturn(true);
-        $this->user->method('canChangeAvatar')->willReturn(true);
+        $this->user->method('getLastLogin')->willReturn(1640995200);
+    }
+
+    /**
+     * Set up mock admin user data for testing
+     *
+     * This helper method configures the mock admin user object with
+     * administrative privileges for testing admin-specific scenarios.
+     *
+     * @return void
+     * 
+     * @psalm-return void
+     * @phpstan-return void
+     */
+    private function setupMockAdminUserData(): void
+    {
+        // Configure mock admin user with test data
+        $this->adminUser->method('getUID')->willReturn('admin');
+        $this->adminUser->method('getDisplayName')->willReturn('Administrator');
+        $this->adminUser->method('getEMailAddress')->willReturn('admin@example.com');
+        $this->adminUser->method('isEnabled')->willReturn(true);
+        $this->adminUser->method('getLastLogin')->willReturn(1640995200);
+    }
+
+    /**
+     * Mock security service for successful login scenario
+     *
+     * This helper method sets up the security service mocks for
+     * a successful login flow without rate limiting issues.
+     *
+     * @return void
+     * 
+     * @psalm-return void
+     * @phpstan-return void
+     */
+    private function mockSecurityServiceForSuccessfulLogin(): void
+    {
+        // Since SecurityService is instantiated in constructor, we need to mock
+        // the behavior indirectly through the controller's methods
+        // For now, we'll assume the security service allows the login
+        // In a real implementation, you might need dependency injection for SecurityService
     }
 } 
\ No newline at end of file

From 0af435fc81234b1e015fdf7dc414c5bcee0fa24d Mon Sep 17 00:00:00 2001
From: Ruben van der Linde <ruben@conduction.nl>
Date: Fri, 25 Jul 2025 04:51:42 +0200
Subject: [PATCH 3/8] Final backend fix for log and switch

---
 appinfo/routes.php                  |  4 +--
 lib/Controller/UserController.php   | 40 +++++++++++++++++++++++++++--
 lib/Service/OrganisationService.php |  2 +-
 3 files changed, 41 insertions(+), 5 deletions(-)

diff --git a/appinfo/routes.php b/appinfo/routes.php
index 748744c2..5193a21f 100644
--- a/appinfo/routes.php
+++ b/appinfo/routes.php
@@ -81,8 +81,8 @@
 		['name' => 'synchronizationContracts#execute', 'url' => '/api/synchronization-contracts/{id}/execute', 'verb' => 'POST'],
 
 		// User CORS endpoints
-		['name' => 'user#preflightedCors', 'url' => '/api/user/me', 'verb' => 'OPTIONS'],
-		['name' => 'user#preflightedCors', 'url' => '/api/user/login', 'verb' => 'OPTIONS'],
+		['name' => 'user#preflightedCorsMe', 'url' => '/api/user/me', 'verb' => 'OPTIONS'],
+		['name' => 'user#preflightedCorsLogin', 'url' => '/api/user/login', 'verb' => 'OPTIONS'],
 
 		// User endpoints
 		['name' => 'user#me', 'url' => '/api/user/me', 'verb' => 'GET'],
diff --git a/lib/Controller/UserController.php b/lib/Controller/UserController.php
index cde7fc28..062f5e52 100644
--- a/lib/Controller/UserController.php
+++ b/lib/Controller/UserController.php
@@ -186,7 +186,7 @@ public function __construct(
     }
 
     /**
-     * Implements a preflighted CORS response for OPTIONS requests
+     * Implements a preflighted CORS response for OPTIONS requests on /me endpoint
      *
      * This method handles CORS preflight requests by returning appropriate
      * CORS headers to allow cross-origin requests from web applications.
@@ -200,7 +200,43 @@ public function __construct(
      * @psalm-return \OCP\AppFramework\Http\Response
      * @phpstan-return \OCP\AppFramework\Http\Response
      */
-    public function preflightedCors(): \OCP\AppFramework\Http\Response
+    public function preflightedCorsMe(): \OCP\AppFramework\Http\Response
+    {
+        // Determine the origin from request headers
+        $origin = $this->request->getHeader('Origin') ?: ($this->request->server['HTTP_ORIGIN'] ?? '*');
+
+        // For credentials to work, we cannot use '*' as origin
+        if ($origin === '*' && $this->request->getHeader('Origin') === '') {
+            $origin = 'http://localhost:3000'; // Default for development
+        }
+
+        // Create and configure the CORS response
+        $response = new \OCP\AppFramework\Http\Response();
+        $response->addHeader('Access-Control-Allow-Origin', $origin);
+        $response->addHeader('Access-Control-Allow-Methods', $this->corsMethods);
+        $response->addHeader('Access-Control-Max-Age', (string) $this->corsMaxAge);
+        $response->addHeader('Access-Control-Allow-Headers', $this->corsAllowedHeaders);
+        $response->addHeader('Access-Control-Allow-Credentials', 'true'); // Enable credentials for browser auth
+
+        return $response;
+    }
+
+    /**
+     * Implements a preflighted CORS response for OPTIONS requests on /login endpoint
+     *
+     * This method handles CORS preflight requests by returning appropriate
+     * CORS headers to allow cross-origin requests from web applications.
+     *
+     * @NoAdminRequired
+     * @NoCSRFRequired
+     * @PublicPage
+     *
+     * @return \OCP\AppFramework\Http\Response The CORS response with appropriate headers
+     * 
+     * @psalm-return \OCP\AppFramework\Http\Response
+     * @phpstan-return \OCP\AppFramework\Http\Response
+     */
+    public function preflightedCorsLogin(): \OCP\AppFramework\Http\Response
     {
         // Determine the origin from request headers
         $origin = $this->request->getHeader('Origin') ?: ($this->request->server['HTTP_ORIGIN'] ?? '*');
diff --git a/lib/Service/OrganisationService.php b/lib/Service/OrganisationService.php
index fe4a02e6..4ff904b2 100644
--- a/lib/Service/OrganisationService.php
+++ b/lib/Service/OrganisationService.php
@@ -59,7 +59,7 @@ class OrganisationService
     /**
      * App name for user configuration storage
      */
-    private const APP_NAME = 'openregister';
+    private const APP_NAME = 'openconnector';
 
     /**
      * Organisation mapper for database operations

From de2cdd7994c07d834c6ee35289b2297801c78f17 Mon Sep 17 00:00:00 2001
From: Ruben van der Linde <ruben@conduction.nl>
Date: Tue, 12 Aug 2025 23:25:13 +0200
Subject: [PATCH 4/8] Lets get the busness logic for log retention in place

---
 appinfo/routes.php                           |    6 +
 lib/Controller/SettingsController.php        |  150 ++
 lib/Db/CallLog.php                           |    5 +
 lib/Db/CallLogMapper.php                     |  189 +++
 lib/Db/Job.php                               |    6 +
 lib/Db/JobLog.php                            |    3 +
 lib/Db/JobLogMapper.php                      |  193 +++
 lib/Db/JobMapper.php                         |   90 ++
 lib/Db/Mapping.php                           |    6 +
 lib/Db/MappingMapper.php                     |   90 ++
 lib/Db/Rule.php                              |    6 +
 lib/Db/RuleMapper.php                        |   90 ++
 lib/Db/Source.php                            |    6 +
 lib/Db/SourceMapper.php                      |   90 ++
 lib/Db/Synchronization.php                   |    6 +
 lib/Db/SynchronizationContract.php           |    6 +
 lib/Db/SynchronizationContractLog.php        |    3 +
 lib/Db/SynchronizationContractLogMapper.php  |  236 ++-
 lib/Db/SynchronizationContractMapper.php     |   90 ++
 lib/Db/SynchronizationLog.php                |    3 +
 lib/Db/SynchronizationLogMapper.php          |  225 +++
 lib/Db/SynchronizationMapper.php             |   90 ++
 lib/Migration/Version1Date20250122130000.php |  206 +++
 lib/Migration/Version1Date20250122140000.php |  287 ++++
 lib/Service/SettingsService.php              |  575 +++++++
 src/settings.js                              |   10 +
 src/views/settings/Settings.vue              | 1412 ++++++++++++++++++
 templates/settings.php                       |    4 -
 templates/settings/admin.php                 |    8 +-
 webpack.config.js                            |    4 +
 30 files changed, 4088 insertions(+), 7 deletions(-)
 create mode 100644 lib/Controller/SettingsController.php
 create mode 100644 lib/Migration/Version1Date20250122130000.php
 create mode 100644 lib/Migration/Version1Date20250122140000.php
 create mode 100644 lib/Service/SettingsService.php
 create mode 100644 src/settings.js
 create mode 100644 src/views/settings/Settings.vue
 delete mode 100644 templates/settings.php

diff --git a/appinfo/routes.php b/appinfo/routes.php
index 5193a21f..984eb47c 100644
--- a/appinfo/routes.php
+++ b/appinfo/routes.php
@@ -88,5 +88,11 @@
 		['name' => 'user#me', 'url' => '/api/user/me', 'verb' => 'GET'],
 		['name' => 'user#updateMe', 'url' => '/api/user/me', 'verb' => 'PUT'],
 		['name' => 'user#login', 'url' => '/api/user/login', 'verb' => 'POST'],
+
+		// Settings endpoints
+		['name' => 'settings#getSettings', 'url' => '/api/settings', 'verb' => 'GET'],
+		['name' => 'settings#updateSettings', 'url' => '/api/settings', 'verb' => 'PUT'],
+		['name' => 'settings#rebase', 'url' => '/api/settings/rebase', 'verb' => 'POST'],
+		['name' => 'settings#stats', 'url' => '/api/settings/stats', 'verb' => 'GET'],
 	],
 ];
diff --git a/lib/Controller/SettingsController.php b/lib/Controller/SettingsController.php
new file mode 100644
index 00000000..af96e47e
--- /dev/null
+++ b/lib/Controller/SettingsController.php
@@ -0,0 +1,150 @@
+<?php
+/**
+ *  OpenConnector Settings Controller
+ *
+ * This file contains the controller class for handling settings in the OpenConnector application.
+ *
+ * @category Controller
+ * @package  OCA\OpenConnector\Controller
+ *
+ * @author    Conduction Development Team <info@conduction.nl>
+ * @copyright 2024 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git_id>
+ *
+ * @link https://www.OpenConnector.nl
+ */
+
+namespace OCA\OpenConnector\Controller;
+
+use OCP\IAppConfig;
+use OCP\AppFramework\Controller;
+use OCP\AppFramework\Http\TemplateResponse;
+use OCP\AppFramework\Http\JSONResponse;
+use OCP\IRequest;
+use Psr\Container\ContainerInterface;   
+use OCP\App\IAppManager;
+use OCA\OpenConnector\Service\SettingsService;
+
+/**
+ * Controller for handling settings-related operations in the OpenConnector.
+ */
+class SettingsController extends Controller
+{
+
+    /**
+     * SettingsController constructor.
+     *
+     * @param string             $appName         The name of the app
+     * @param IRequest           $request         The request object
+     * @param IAppConfig         $config          The app configuration
+     * @param ContainerInterface $container       The container
+     * @param IAppManager        $appManager      The app manager
+     * @param SettingsService    $settingsService The settings service
+     */
+    public function __construct(
+        $appName,
+        IRequest $request,
+        private readonly IAppConfig $config,
+        private readonly ContainerInterface $container,
+        private readonly IAppManager $appManager,
+        private readonly SettingsService $settingsService,
+    ) {
+        parent::__construct($appName, $request);
+
+    }//end __construct()
+
+
+
+
+
+    /**
+     * Retrieve the current settings.
+     *
+     * @return JSONResponse JSON response containing the current settings.
+     *
+     * @NoAdminRequired
+     * @NoCSRFRequired
+     */
+    public function index(): JSONResponse
+    {
+        try {
+            $data = $this->settingsService->getSettings();
+            return new JSONResponse($data);
+        } catch (\Exception $e) {
+            return new JSONResponse(['error' => $e->getMessage()], 500);
+        }
+
+    }//end index()
+
+
+    /**
+     * Handle the PUT request to update settings.
+     *
+     * @return JSONResponse JSON response containing the updated settings.
+     *
+     * @NoAdminRequired
+     * @NoCSRFRequired
+     */
+    public function update(): JSONResponse
+    {
+        try {
+            $data = $this->request->getParams();
+            $result = $this->settingsService->updateSettings($data);
+            return new JSONResponse($result);
+        } catch (\Exception $e) {
+            return new JSONResponse(['error' => $e->getMessage()], 500);
+        }
+
+    }//end update()
+
+
+
+
+
+    /**
+     * Rebase all logs with current retention settings.
+     *
+     * This method sets expiry dates for all logs based on current retention settings,
+     * ensuring all existing logs follow the new retention policies.
+     *
+     * @return JSONResponse JSON response containing the rebase operation result.
+     *
+     * @NoAdminRequired
+     * @NoCSRFRequired
+     */
+    public function rebase(): JSONResponse
+    {
+        try {
+            $result = $this->settingsService->rebase();
+            return new JSONResponse($result);
+        } catch (\Exception $e) {
+            return new JSONResponse(['error' => $e->getMessage()], 500);
+        }
+
+    }//end rebase()
+
+
+    /**
+     * Get statistics for the settings dashboard.
+     *
+     * This method provides warning counts for logs that need attention,
+     * as well as total counts for all OpenConnector log types.
+     *
+     * @return JSONResponse JSON response containing statistics data.
+     *
+     * @NoAdminRequired
+     * @NoCSRFRequired
+     */
+    public function stats(): JSONResponse
+    {
+        try {
+            $result = $this->settingsService->getStats();
+            return new JSONResponse($result);
+        } catch (\Exception $e) {
+            return new JSONResponse(['error' => $e->getMessage()], 500);
+        }
+
+    }//end stats()
+}//end class
diff --git a/lib/Db/CallLog.php b/lib/Db/CallLog.php
index 52d825f5..b9baf986 100644
--- a/lib/Db/CallLog.php
+++ b/lib/Db/CallLog.php
@@ -38,6 +38,9 @@ class CallLog extends Entity implements JsonSerializable
     /** @var string|null $sessionId Session identifier associated with this call */
     protected ?string $sessionId = null;
 
+    /** @var int|null $size Size of the log entry in bytes for retention management */
+    protected ?int $size = null;
+
     /** @var DateTime|null $expires When this log entry should expire/be deleted */
     protected ?DateTime $expires = null;
 
@@ -75,6 +78,7 @@ public function __construct() {
         $this->addType('synchronizationId', 'integer');
         $this->addType('userId', 'string');
         $this->addType('sessionId', 'string');
+        $this->addType('size', 'integer');
         $this->addType('expires', 'datetime');
         $this->addType('created', 'datetime');
     }
@@ -123,6 +127,7 @@ public function jsonSerialize(): array
             'synchronizationId' => $this->synchronizationId,            
             'userId' => $this->userId,
             'sessionId' => $this->sessionId,
+            'size' => $this->size,
             'expires' => isset($this->expires) ? $this->expires->format('c') : null,
             'created' => isset($this->created) ? $this->created->format('c') : null,
             
diff --git a/lib/Db/CallLogMapper.php b/lib/Db/CallLogMapper.php
index f637555b..eb971d24 100644
--- a/lib/Db/CallLogMapper.php
+++ b/lib/Db/CallLogMapper.php
@@ -73,6 +73,12 @@ public function createFromArray(array $object): CallLog
 		if ($obj->getUuid() === null) {
 			$obj->setUuid(Uuid::v4());
 		}
+
+		// Calculate and set size if not provided
+		if ($obj->getSize() === null) {
+			$obj->setSize($this->calculateLogSize($obj));
+		}
+
         return $this->insert($obj);
     }
 
@@ -346,4 +352,187 @@ public function getTotalCount(array $filters = []): int
 
         return (int)$row['count'];
     }
+
+	/**
+	 * Calculate the approximate size of a call log entry.
+	 *
+	 * This method estimates the size by summing the length of all text and JSON fields.
+	 *
+	 * @param CallLog $log The log entry to calculate size for
+	 *
+	 * @return int The estimated size in bytes
+	 */
+	private function calculateLogSize(CallLog $log): int
+	{
+		$size = 0;
+		
+		// Add size of string fields
+		$size += strlen($log->getUuid() ?? '');
+		$size += strlen($log->getStatusMessage() ?? '');
+		$size += strlen($log->getUserId() ?? '');
+		$size += strlen($log->getSessionId() ?? '');
+		
+		// Add size of JSON fields (request and response arrays)
+		$request = $log->getRequest();
+		if (!empty($request)) {
+			$size += strlen(json_encode($request));
+		}
+		
+		$response = $log->getResponse();
+		if (!empty($response)) {
+			$size += strlen(json_encode($response));
+		}
+		
+		// Add approximate size of other fields (IDs, status code, dates)
+		$size += 100; // Rough estimate for integers and datetime fields
+		
+		return $size;
+	}//end calculateLogSize()
+
+	/**
+	 * Count call logs with optional filters.
+	 *
+	 * This method provides flexible filtering capabilities similar to findAll
+	 * but returns only the count of matching records.
+	 *
+	 * @param array $filters Optional filters to apply
+	 *
+	 * @return int The count of logs matching the filters
+	 *
+	 * @throws \OCP\DB\Exception Database operation exceptions
+	 */
+	public function count(array $filters = []): int
+	{
+		$qb = $this->db->getQueryBuilder();
+
+		$qb->select($qb->func()->count('*'))
+			->from('openconnector_call_logs');
+
+		// Apply filters
+		foreach ($filters as $filter => $value) {
+			if ($value === 'IS NOT NULL') {
+				$qb->andWhere($qb->expr()->isNotNull($filter));
+			} elseif ($value === 'IS NULL') {
+				$qb->andWhere($qb->expr()->isNull($filter));
+			} elseif (is_array($value)) {
+				// Handle array values like ['IS NULL', '']
+				$conditions = [];
+				foreach ($value as $val) {
+					if ($val === 'IS NULL') {
+						$conditions[] = $qb->expr()->isNull($filter);
+					} elseif ($val === 'IS NOT NULL') {
+						$conditions[] = $qb->expr()->isNotNull($filter);
+					} else {
+						$conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+					}
+				}
+				if (!empty($conditions)) {
+					$qb->andWhere($qb->expr()->orX(...$conditions));
+				}
+			} else {
+				$qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+			}
+		}
+
+		$result = $qb->executeQuery();
+		$row = $result->fetch();
+
+		return (int)($row['COUNT(*)'] ?? 0);
+	}//end count()
+
+	/**
+	 * Calculate total size of call logs with optional filters.
+	 *
+	 * This method sums the size field of logs matching the given filters,
+	 * useful for storage management and retention analysis.
+	 *
+	 * @param array $filters Optional filters to apply
+	 *
+	 * @return int The total size of logs matching the filters in bytes
+	 *
+	 * @throws \OCP\DB\Exception Database operation exceptions
+	 */
+	public function size(array $filters = []): int
+	{
+		$qb = $this->db->getQueryBuilder();
+
+		$qb->select($qb->func()->sum('size'))
+			->from('openconnector_call_logs');
+
+		// Apply filters
+		foreach ($filters as $filter => $value) {
+			if ($value === 'IS NOT NULL') {
+				$qb->andWhere($qb->expr()->isNotNull($filter));
+			} elseif ($value === 'IS NULL') {
+				$qb->andWhere($qb->expr()->isNull($filter));
+			} elseif (is_array($value)) {
+				// Handle array values like ['IS NULL', '']
+				$conditions = [];
+				foreach ($value as $val) {
+					if ($val === 'IS NULL') {
+						$conditions[] = $qb->expr()->isNull($filter);
+					} elseif ($val === 'IS NOT NULL') {
+						$conditions[] = $qb->expr()->isNotNull($filter);
+					} else {
+						$conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+					}
+				}
+				if (!empty($conditions)) {
+					$qb->andWhere($qb->expr()->orX(...$conditions));
+				}
+			} else {
+				$qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+			}
+		}
+
+		$result = $qb->executeQuery();
+		$row = $result->fetch();
+
+		return (int)($row['SUM(size)'] ?? 0);
+	}//end size()
+
+	/**
+	 * Set expiry dates for call logs based on retention period in milliseconds.
+	 *
+	 * Updates the expires column for call logs based on their creation date plus the retention period.
+	 * Only affects call logs that don't already have an expiry date set.
+	 *
+	 * @param int $retentionMs Retention period in milliseconds
+	 *
+	 * @return int Number of call logs updated
+	 *
+	 * @throws \Exception Database operation exceptions
+	 *
+	 * @psalm-return int
+	 * @phpstan-return int
+	 */
+	public function setExpiryDate(int $retentionMs): int
+	{
+		try {
+			// Convert milliseconds to seconds for DateTime calculation
+			$retentionSeconds = intval($retentionMs / 1000);
+			
+			// Get the query builder
+			$qb = $this->db->getQueryBuilder();
+			
+			// Update call logs that don't have an expiry date set
+			$qb->update('openconnector_call_logs')
+			   ->set('expires', $qb->createFunction(
+				   sprintf('DATE_ADD(created, INTERVAL %d SECOND)', $retentionSeconds)
+			   ))
+			   ->where($qb->expr()->isNull('expires'));
+			
+			// Execute the update and return number of affected rows
+			return $qb->executeStatement();
+		} catch (\Exception $e) {
+			// Log the error for debugging purposes
+			\OC::$server->getLogger()->error('Failed to set expiry dates for call logs: ' . $e->getMessage(), [
+				'app' => 'openconnector',
+				'exception' => $e
+			]);
+			
+			// Re-throw the exception so the caller knows something went wrong
+			throw $e;
+		}
+	}//end setExpiryDate()
 }
diff --git a/lib/Db/Job.php b/lib/Db/Job.php
index 44e443df..280bda8d 100644
--- a/lib/Db/Job.php
+++ b/lib/Db/Job.php
@@ -46,6 +46,8 @@ class Job extends Entity implements JsonSerializable
 	protected ?array $configurations = []; // Array of configuration IDs that this job belongs to
 	protected ?string $status = null;
 	protected ?string $slug = null;
+	protected ?DateTime $expires = null; // Expiration date for this entity
+	protected ?int $size = null; // Size of this entity in bytes
 
 	/**
 	 * Get the job arguments
@@ -83,6 +85,8 @@ public function __construct() {
 		$this->addType('configurations', 'json');
 		$this->addType('status', 'string');
 		$this->addType('slug', 'string');
+		$this->addType('expires', 'datetime');
+		$this->addType('size', 'integer');
 	}
 
 	public function getJsonFields(): array
@@ -172,6 +176,8 @@ public function jsonSerialize(): array
 			'configurations' => $this->configurations,
 			'status' => $this->status,
 			'slug' => $this->slug,
+			'expires' => isset($this->expires) ? $this->expires->format('c') : null,
+			'size' => $this->size,
 		];
 	}
 }
diff --git a/lib/Db/JobLog.php b/lib/Db/JobLog.php
index 7837e9bf..a57a402b 100644
--- a/lib/Db/JobLog.php
+++ b/lib/Db/JobLog.php
@@ -19,6 +19,7 @@ class JobLog extends Entity implements JsonSerializable
     protected ?string $userId = null;
     protected ?string $sessionId = null;
     protected ?array $stackTrace = [];
+    protected ?int $size = null;
     protected ?DateTime $expires = null;
     protected ?DateTime $lastRun = null;
     protected ?DateTime $nextRun = null;
@@ -56,6 +57,7 @@ public function __construct() {
         $this->addType('userId', 'string');
         $this->addType('sessionId', 'string');
         $this->addType('stackTrace', 'json');
+        $this->addType('size', 'integer');
         $this->addType('expires', 'datetime');
         $this->addType('lastRun', 'datetime');
         $this->addType('nextRun', 'datetime');
@@ -107,6 +109,7 @@ public function jsonSerialize(): array
             'userId' => $this->userId,
             'sessionId' => $this->sessionId,
             'stackTrace' => $this->stackTrace,
+            'size' => $this->size,
             'expires' => isset($this->expires) ? $this->expires->format('c') : null,
             'lastRun' => isset($this->lastRun) ? $this->lastRun->format('c') : null,
             'nextRun' => isset($this->nextRun) ? $this->nextRun->format('c') : null,
diff --git a/lib/Db/JobLogMapper.php b/lib/Db/JobLogMapper.php
index de850dee..e7536d14 100644
--- a/lib/Db/JobLogMapper.php
+++ b/lib/Db/JobLogMapper.php
@@ -89,6 +89,12 @@ public function createFromArray(array $object): JobLog
 		if ($obj->getUuid() === null) {
 			$obj->setUuid(Uuid::v4());
 		}
+
+		// Calculate and set size if not provided
+		if ($obj->getSize() === null) {
+			$obj->setSize($this->calculateLogSize($obj));
+		}
+
         return $this->insert($obj);
     }
 
@@ -303,4 +309,191 @@ public function getTotalCount(array $filters = []): int
         // Return the total count
         return (int)$row['count'];
     }
+
+	/**
+	 * Calculate the approximate size of a job log entry.
+	 *
+	 * This method estimates the size by summing the length of all text and JSON fields.
+	 *
+	 * @param JobLog $log The log entry to calculate size for
+	 *
+	 * @return int The estimated size in bytes
+	 */
+	private function calculateLogSize(JobLog $log): int
+	{
+		$size = 0;
+		
+		// Add size of string fields
+		$size += strlen($log->getUuid() ?? '');
+		$size += strlen($log->getLevel() ?? '');
+		$size += strlen($log->getMessage() ?? '');
+		$size += strlen($log->getJobId() ?? '');
+		$size += strlen($log->getJobListId() ?? '');
+		$size += strlen($log->getJobClass() ?? '');
+		$size += strlen($log->getUserId() ?? '');
+		$size += strlen($log->getSessionId() ?? '');
+		
+		// Add size of JSON fields (arguments and stack trace arrays)
+		$arguments = $log->getArguments();
+		if (!empty($arguments)) {
+			$size += strlen(json_encode($arguments));
+		}
+		
+		$stackTrace = $log->getStackTrace();
+		if (!empty($stackTrace)) {
+			$size += strlen(json_encode($stackTrace));
+		}
+		
+		// Add approximate size of other fields (execution time, dates)
+		$size += 100; // Rough estimate for integers and datetime fields
+		
+		return $size;
+	}//end calculateLogSize()
+
+	/**
+	 * Count job logs with optional filters.
+	 *
+	 * This method provides flexible filtering capabilities similar to findAll
+	 * but returns only the count of matching records.
+	 *
+	 * @param array $filters Optional filters to apply
+	 *
+	 * @return int The count of logs matching the filters
+	 *
+	 * @throws \OCP\DB\Exception Database operation exceptions
+	 */
+	public function count(array $filters = []): int
+	{
+		$qb = $this->db->getQueryBuilder();
+
+		$qb->select($qb->func()->count('*'))
+			->from('openconnector_job_logs');
+
+		// Apply filters
+		foreach ($filters as $filter => $value) {
+			if ($value === 'IS NOT NULL') {
+				$qb->andWhere($qb->expr()->isNotNull($filter));
+			} elseif ($value === 'IS NULL') {
+				$qb->andWhere($qb->expr()->isNull($filter));
+			} elseif (is_array($value)) {
+				// Handle array values like ['IS NULL', '']
+				$conditions = [];
+				foreach ($value as $val) {
+					if ($val === 'IS NULL') {
+						$conditions[] = $qb->expr()->isNull($filter);
+					} elseif ($val === 'IS NOT NULL') {
+						$conditions[] = $qb->expr()->isNotNull($filter);
+					} else {
+						$conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+					}
+				}
+				if (!empty($conditions)) {
+					$qb->andWhere($qb->expr()->orX(...$conditions));
+				}
+			} else {
+				$qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+			}
+		}
+
+		$result = $qb->executeQuery();
+		$row = $result->fetch();
+
+		return (int)($row['COUNT(*)'] ?? 0);
+	}//end count()
+
+	/**
+	 * Calculate total size of job logs with optional filters.
+	 *
+	 * This method sums the size field of logs matching the given filters,
+	 * useful for storage management and retention analysis.
+	 *
+	 * @param array $filters Optional filters to apply
+	 *
+	 * @return int The total size of logs matching the filters in bytes
+	 *
+	 * @throws \OCP\DB\Exception Database operation exceptions
+	 */
+	public function size(array $filters = []): int
+	{
+		$qb = $this->db->getQueryBuilder();
+
+		$qb->select($qb->func()->sum('size'))
+			->from('openconnector_job_logs');
+
+		// Apply filters
+		foreach ($filters as $filter => $value) {
+			if ($value === 'IS NOT NULL') {
+				$qb->andWhere($qb->expr()->isNotNull($filter));
+			} elseif ($value === 'IS NULL') {
+				$qb->andWhere($qb->expr()->isNull($filter));
+			} elseif (is_array($value)) {
+				// Handle array values like ['IS NULL', '']
+				$conditions = [];
+				foreach ($value as $val) {
+					if ($val === 'IS NULL') {
+						$conditions[] = $qb->expr()->isNull($filter);
+					} elseif ($val === 'IS NOT NULL') {
+						$conditions[] = $qb->expr()->isNotNull($filter);
+					} else {
+						$conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+					}
+				}
+				if (!empty($conditions)) {
+					$qb->andWhere($qb->expr()->orX(...$conditions));
+				}
+			} else {
+				$qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+			}
+		}
+
+		$result = $qb->executeQuery();
+		$row = $result->fetch();
+
+		return (int)($row['SUM(size)'] ?? 0);
+	}//end size()
+
+	/**
+	 * Set expiry dates for job logs based on retention period in milliseconds.
+	 *
+	 * Updates the expires column for job logs based on their creation date plus the retention period.
+	 * Only affects job logs that don't already have an expiry date set.
+	 *
+	 * @param int $retentionMs Retention period in milliseconds
+	 *
+	 * @return int Number of job logs updated
+	 *
+	 * @throws \Exception Database operation exceptions
+	 *
+	 * @psalm-return int
+	 * @phpstan-return int
+	 */
+	public function setExpiryDate(int $retentionMs): int
+	{
+		try {
+			// Convert milliseconds to seconds for DateTime calculation
+			$retentionSeconds = intval($retentionMs / 1000);
+			
+			// Get the query builder
+			$qb = $this->db->getQueryBuilder();
+			
+			// Update job logs that don't have an expiry date set
+			$qb->update('openconnector_job_logs')
+			   ->set('expires', $qb->createFunction(
+				   sprintf('DATE_ADD(created, INTERVAL %d SECOND)', $retentionSeconds)
+			   ))
+			   ->where($qb->expr()->isNull('expires'));
+			
+			// Execute the update and return number of affected rows
+			return $qb->executeStatement();
+		} catch (\Exception $e) {
+			// Log the error for debugging purposes
+			\OC::$server->getLogger()->error('Failed to set expiry dates for job logs: ' . $e->getMessage(), [
+				'app' => 'openconnector',
+				'exception' => $e
+			]);
+			
+			// Re-throw the exception so the caller knows something went wrong
+			throw $e;
+		}
+	}//end setExpiryDate()
 }
diff --git a/lib/Db/JobMapper.php b/lib/Db/JobMapper.php
index dc17c5cf..c97a5472 100644
--- a/lib/Db/JobMapper.php
+++ b/lib/Db/JobMapper.php
@@ -330,4 +330,94 @@ public function findRunnable(): array
             ->andWhere($qb->expr()->lte('next_run', $qb->createNamedParameter((new \DateTime())->format('Y-m-d H:i:s'))));
         return $this->findEntities(query: $qb);
     }
+
+    /**
+     * Count jobs with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the count query
+     * @return int The number of jobs matching the filters
+     * @throws \Exception If the count query fails
+     */
+    public function count(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COUNT(*)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to count jobs: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Calculate total size of jobs with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the size calculation
+     * @return int The total size in bytes of jobs matching the filters
+     * @throws \Exception If the size calculation fails
+     */
+    public function size(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to calculate jobs size: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Clear all jobs (delete all records).
+     *
+     * @return bool True if the operation was successful
+     * @throws \Exception If the clear operation fails
+     */
+    public function clearJobs(): bool
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->delete($this->getTableName());
+            $qb->executeStatement();
+            return true;
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to clear jobs: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
 }
diff --git a/lib/Db/Mapping.php b/lib/Db/Mapping.php
index f0d45143..a0b2479f 100644
--- a/lib/Db/Mapping.php
+++ b/lib/Db/Mapping.php
@@ -34,6 +34,8 @@ class Mapping extends Entity implements JsonSerializable
 	protected ?DateTime $dateModified = null;
 	protected ?array $configurations = []; // Array of configuration IDs that this mapping belongs to
 	protected ?string $slug = null;
+	protected ?DateTime $expires = null; // Expiration date for this entity
+	protected ?int $size = null; // Size of this entity in bytes
 
 	/**
 	 * Get the mapping configuration
@@ -79,6 +81,8 @@ public function __construct() {
 		$this->addType('dateModified', 'datetime');
 		$this->addType('configurations', 'json');
 		$this->addType('slug', 'string');
+		$this->addType('expires', 'datetime');
+		$this->addType('size', 'integer');
 	}
 
 	public function getJsonFields(): array
@@ -161,6 +165,8 @@ public function jsonSerialize(): array
 			'dateCreated' => isset($this->dateCreated) ? $this->dateCreated->format('c') : null,
 			'dateModified' => isset($this->dateModified) ? $this->dateModified->format('c') : null,
 			'slug' => $this->getSlug(),
+			'expires' => isset($this->expires) ? $this->expires->format('c') : null,
+			'size' => $this->size,
 		];
 	}
 }
diff --git a/lib/Db/MappingMapper.php b/lib/Db/MappingMapper.php
index 0a5f4744..edf68fd8 100644
--- a/lib/Db/MappingMapper.php
+++ b/lib/Db/MappingMapper.php
@@ -240,4 +240,94 @@ public function getSlugToIdMap(): array
         }
         return $mappings;
     }
+
+    /**
+     * Count mappings with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the count query
+     * @return int The number of mappings matching the filters
+     * @throws \Exception If the count query fails
+     */
+    public function count(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COUNT(*)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to count mappings: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Calculate total size of mappings with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the size calculation
+     * @return int The total size in bytes of mappings matching the filters
+     * @throws \Exception If the size calculation fails
+     */
+    public function size(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to calculate mappings size: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Clear all mappings (delete all records).
+     *
+     * @return bool True if the operation was successful
+     * @throws \Exception If the clear operation fails
+     */
+    public function clearMappings(): bool
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->delete($this->getTableName());
+            $qb->executeStatement();
+            return true;
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to clear mappings: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
 }
diff --git a/lib/Db/Rule.php b/lib/Db/Rule.php
index 3f28404f..206fbdb8 100644
--- a/lib/Db/Rule.php
+++ b/lib/Db/Rule.php
@@ -42,6 +42,8 @@ class Rule extends Entity implements JsonSerializable
      * @var string|null URL-friendly identifier for the rule
      */
     protected ?string $slug = null;
+    protected ?DateTime $expires = null; // Expiration date for this entity
+    protected ?int $size = null; // Size of this entity in bytes
 
     /**
      * Get the conditions array
@@ -79,6 +81,8 @@ public function __construct() {
         $this->addType('created', 'datetime');
         $this->addType('updated', 'datetime');
         $this->addType('slug', 'string');
+        $this->addType('expires', 'datetime');
+        $this->addType('size', 'integer');
     }
 
     /**
@@ -190,6 +194,8 @@ public function jsonSerialize(): array
             'created' => isset($this->created) ? $this->created->format('c') : null,
             'updated' => isset($this->updated) ? $this->updated->format('c') : null,
             'slug' => $this->getSlug(),
+            'expires' => isset($this->expires) ? $this->expires->format('c') : null,
+            'size' => $this->size,
         ];
     }
 }
diff --git a/lib/Db/RuleMapper.php b/lib/Db/RuleMapper.php
index 0ce98802..fdcecd66 100644
--- a/lib/Db/RuleMapper.php
+++ b/lib/Db/RuleMapper.php
@@ -313,4 +313,94 @@ public function getSlugToIdMap(): array
 
 		return $map;
 	}
+
+    /**
+     * Count rules with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the count query
+     * @return int The number of rules matching the filters
+     * @throws \Exception If the count query fails
+     */
+    public function count(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COUNT(*)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to count rules: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Calculate total size of rules with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the size calculation
+     * @return int The total size in bytes of rules matching the filters
+     * @throws \Exception If the size calculation fails
+     */
+    public function size(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to calculate rules size: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Clear all rules (delete all records).
+     *
+     * @return bool True if the operation was successful
+     * @throws \Exception If the clear operation fails
+     */
+    public function clearRules(): bool
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->delete($this->getTableName());
+            $qb->executeStatement();
+            return true;
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to clear rules: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
 }
diff --git a/lib/Db/Source.php b/lib/Db/Source.php
index 4b6e93f5..4b9ee7ac 100644
--- a/lib/Db/Source.php
+++ b/lib/Db/Source.php
@@ -64,6 +64,8 @@ class Source extends Entity implements JsonSerializable
 	protected ?DateTime $dateModified = null;
 	protected ?array $configurations = []; // Array of configuration IDs that this source belongs to
 	protected ?string $slug = null; // URL-friendly identifier for the source
+	protected ?DateTime $expires = null; // Expiration date for this entity
+	protected ?int $size = null; // Size of this entity in bytes
 
 	/**
 	 * Get the authentication configuration
@@ -179,6 +181,8 @@ public function __construct() {
 		$this->addType('dateModified', 'datetime');
 		$this->addType('configurations', 'json');
 		$this->addType('slug', 'string');
+		$this->addType('expires', 'datetime');
+		$this->addType('size', 'integer');
 	}
 
 	public function getJsonFields(): array
@@ -286,6 +290,8 @@ public function jsonSerialize(): array
 			'dateModified' => isset($this->dateModified) ? $this->dateModified->format('c') : null,
 			'configurations' => $this->configurations,
 			'slug' => $this->getSlug(),
+			'expires' => isset($this->expires) ? $this->expires->format('c') : null,
+			'size' => $this->size,
 		];
 	}
 }
diff --git a/lib/Db/SourceMapper.php b/lib/Db/SourceMapper.php
index 86316e6b..1e60b5b2 100644
--- a/lib/Db/SourceMapper.php
+++ b/lib/Db/SourceMapper.php
@@ -268,4 +268,94 @@ public function getSlugToIdMap(): array
         }
         return $mappings;
     }
+
+    /**
+     * Count sources with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the count query
+     * @return int The number of sources matching the filters
+     * @throws \Exception If the count query fails
+     */
+    public function count(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COUNT(*)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to count sources: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Calculate total size of sources with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the size calculation
+     * @return int The total size in bytes of sources matching the filters
+     * @throws \Exception If the size calculation fails
+     */
+    public function size(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to calculate sources size: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Clear all sources (delete all records).
+     *
+     * @return bool True if the operation was successful
+     * @throws \Exception If the clear operation fails
+     */
+    public function clearSources(): bool
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->delete($this->getTableName());
+            $qb->executeStatement();
+            return true;
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to clear sources: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
 }
diff --git a/lib/Db/Synchronization.php b/lib/Db/Synchronization.php
index 935a3912..aa12c0df 100644
--- a/lib/Db/Synchronization.php
+++ b/lib/Db/Synchronization.php
@@ -54,6 +54,8 @@ class Synchronization extends Entity implements JsonSerializable
 	protected array $followUps = [];
     protected array $actions = [];
     protected ?array $configurations = []; // Array of configuration IDs that this synchronization belongs to
+	protected ?DateTime $expires = null; // Expiration date for this entity
+	protected ?int $size = null; // Size of this entity in bytes
 
 	/**
 	 * @var string|null The status of the synchronization
@@ -147,6 +149,8 @@ public function __construct() {
         $this->addType(fieldName: 'configurations', type: 'json');
 		$this->addType('status', 'string');
 		$this->addType('slug', 'string');
+		$this->addType('expires', 'datetime');
+		$this->addType('size', 'integer');
 	}
 
     /**
@@ -257,6 +261,8 @@ public function jsonSerialize(): array
 			'configurations' => $this->configurations,
 			'status' => $this->status,
 			'slug' => $this->getSlug(),
+			'expires' => isset($this->expires) ? $this->expires->format('c') : null,
+			'size' => $this->size,
 		];
 	}
 }
diff --git a/lib/Db/SynchronizationContract.php b/lib/Db/SynchronizationContract.php
index 37485e9e..108d71c6 100644
--- a/lib/Db/SynchronizationContract.php
+++ b/lib/Db/SynchronizationContract.php
@@ -36,6 +36,8 @@ class SynchronizationContract extends Entity implements JsonSerializable
 	// General
 	protected ?DateTime $created = null; // the date and time the synchronization was created
 	protected ?DateTime $updated = null; // the date and time the synchronization was updated
+	protected ?DateTime $expires = null; // Expiration date for this entity
+	protected ?int $size = null; // Size of this entity in bytes
 
 
 	public function __construct() {
@@ -55,6 +57,8 @@ public function __construct() {
 		$this->addType('targetLastAction', 'string');
 		$this->addType('created', 'datetime');
 		$this->addType('updated', 'datetime');
+		$this->addType('expires', 'datetime');
+		$this->addType('size', 'integer');
 
 		// @todo can be removed when migrations are merged
 		$this->addType('sourceId', 'string');
@@ -111,6 +115,8 @@ public function jsonSerialize(): array
 			'targetLastAction' => $this->targetLastAction,
 			'created' => isset($this->created) ? $this->created->format('c') : null,
 			'updated' => isset($this->updated) ? $this->updated->format('c') : null,
+			'expires' => isset($this->expires) ? $this->expires->format('c') : null,
+			'size' => $this->size,
 			// @todo these 2 can be removed when migrations are merged
 			'sourceId' => $this->sourceId,
 			'sourceHash' => $this->sourceHash
diff --git a/lib/Db/SynchronizationContractLog.php b/lib/Db/SynchronizationContractLog.php
index e2a95f25..94159641 100644
--- a/lib/Db/SynchronizationContractLog.php
+++ b/lib/Db/SynchronizationContractLog.php
@@ -25,6 +25,7 @@ class SynchronizationContractLog extends Entity implements JsonSerializable
     protected ?string $sessionId = null;
     protected ?bool $test = false;
     protected ?bool $force = false;
+    protected ?int $size = null;
     protected ?DateTime $expires = null;
     protected ?DateTime $created = null;
 
@@ -61,6 +62,7 @@ public function __construct() {
         $this->addType('sessionId', 'string');
         $this->addType('test', 'boolean');
         $this->addType('force', 'boolean');
+        $this->addType('size', 'integer');
         $this->addType('expires', 'datetime');
         $this->addType('created', 'datetime');
     }
@@ -111,6 +113,7 @@ public function jsonSerialize(): array
             'sessionId' => $this->sessionId,
             'test' => $this->test,
             'force' => $this->force,
+            'size' => $this->size,
             'expires' => isset($this->expires) ? $this->expires->format('c') : null,
             'created' => isset($this->created) ? $this->created->format('c') : null,
         ];
diff --git a/lib/Db/SynchronizationContractLogMapper.php b/lib/Db/SynchronizationContractLogMapper.php
index 278ff03d..fb666503 100644
--- a/lib/Db/SynchronizationContractLogMapper.php
+++ b/lib/Db/SynchronizationContractLogMapper.php
@@ -120,6 +120,11 @@ public function createFromArray(array $object): SynchronizationContractLog
 			$obj->setSynchronizationLogId('n.a.');
 		}
 
+		// Calculate and set size if not provided
+		if ($obj->getSize() === null) {
+			$obj->setSize($this->calculateLogSize($obj));
+		}
+
 		return $this->insert($obj);
 	}
 
@@ -208,6 +213,233 @@ public function getSyncStatsByHourRange(DateTime $from, DateTime $to): array
 			$stats[$row['hour']] = (int)$row['executions'];
 		}
 
-		return $stats;
-	}
+		        return $stats;
+    }
+
+	/**
+	 * Calculate the approximate size of a synchronization contract log entry.
+	 *
+	 * This method estimates the size by summing the length of all text and JSON fields.
+	 *
+	 * @param SynchronizationContractLog $log The log entry to calculate size for
+	 *
+	 * @return int The estimated size in bytes
+	 */
+	private function calculateLogSize(SynchronizationContractLog $log): int
+	{
+		$size = 0;
+		
+		// Add size of string fields
+		$size += strlen($log->getUuid() ?? '');
+		$size += strlen($log->getMessage() ?? '');
+		$size += strlen($log->getSynchronizationId() ?? '');
+		$size += strlen($log->getSynchronizationContractId() ?? '');
+		$size += strlen($log->getSynchronizationLogId() ?? '');
+		$size += strlen($log->getTargetResult() ?? '');
+		$size += strlen($log->getUserId() ?? '');
+		$size += strlen($log->getSessionId() ?? '');
+		
+		// Add size of JSON fields (source and target arrays)
+		$source = $log->getSource();
+		if (!empty($source)) {
+			$size += strlen(json_encode($source));
+		}
+		
+		$target = $log->getTarget();
+		if (!empty($target)) {
+			$size += strlen(json_encode($target));
+		}
+		
+		// Add approximate size of other fields (booleans, dates)
+		$size += 50; // Rough estimate for booleans and datetime fields
+		
+		return $size;
+	}//end calculateLogSize()
+
+	/**
+	 * Count synchronization contract logs with optional filters.
+	 *
+	 * This method provides flexible filtering capabilities similar to findAll
+	 * but returns only the count of matching records.
+	 *
+	 * @param array $filters Optional filters to apply
+	 *
+	 * @return int The count of logs matching the filters
+	 *
+	 * @throws \OCP\DB\Exception Database operation exceptions
+	 */
+	public function count(array $filters = []): int
+	{
+		$qb = $this->db->getQueryBuilder();
+
+		$qb->select($qb->func()->count('*'))
+			->from('openconnector_synchronization_contract_logs');
+
+		// Apply filters
+		foreach ($filters as $filter => $value) {
+			if ($value === 'IS NOT NULL') {
+				$qb->andWhere($qb->expr()->isNotNull($filter));
+			} elseif ($value === 'IS NULL') {
+				$qb->andWhere($qb->expr()->isNull($filter));
+			} elseif (is_array($value)) {
+				// Handle array values like ['IS NULL', '']
+				$conditions = [];
+				foreach ($value as $val) {
+					if ($val === 'IS NULL') {
+						$conditions[] = $qb->expr()->isNull($filter);
+					} elseif ($val === 'IS NOT NULL') {
+						$conditions[] = $qb->expr()->isNotNull($filter);
+					} else {
+						$conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+					}
+				}
+				if (!empty($conditions)) {
+					$qb->andWhere($qb->expr()->orX(...$conditions));
+				}
+			} else {
+				$qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+			}
+		}
+
+		$result = $qb->executeQuery();
+		$row = $result->fetch();
+
+		return (int)($row['COUNT(*)'] ?? 0);
+	}//end count()
+
+	/**
+	 * Calculate total size of synchronization contract logs with optional filters.
+	 *
+	 * This method sums the size field of logs matching the given filters,
+	 * useful for storage management and retention analysis.
+	 *
+	 * @param array $filters Optional filters to apply
+	 *
+	 * @return int The total size of logs matching the filters in bytes
+	 *
+	 * @throws \OCP\DB\Exception Database operation exceptions
+	 */
+	public function size(array $filters = []): int
+	{
+		$qb = $this->db->getQueryBuilder();
+
+		$qb->select($qb->func()->sum('size'))
+			->from('openconnector_synchronization_contract_logs');
+
+		// Apply filters
+		foreach ($filters as $filter => $value) {
+			if ($value === 'IS NOT NULL') {
+				$qb->andWhere($qb->expr()->isNotNull($filter));
+			} elseif ($value === 'IS NULL') {
+				$qb->andWhere($qb->expr()->isNull($filter));
+			} elseif (is_array($value)) {
+				// Handle array values like ['IS NULL', '']
+				$conditions = [];
+				foreach ($value as $val) {
+					if ($val === 'IS NULL') {
+						$conditions[] = $qb->expr()->isNull($filter);
+					} elseif ($val === 'IS NOT NULL') {
+						$conditions[] = $qb->expr()->isNotNull($filter);
+					} else {
+						$conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+					}
+				}
+				if (!empty($conditions)) {
+					$qb->andWhere($qb->expr()->orX(...$conditions));
+				}
+			} else {
+				$qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+			}
+		}
+
+		$result = $qb->executeQuery();
+		$row = $result->fetch();
+
+		return (int)($row['SUM(size)'] ?? 0);
+	}//end size()
+
+	/**
+	 * Clear expired logs from the database.
+	 *
+	 * This method deletes all synchronization contract logs that have expired 
+	 * (i.e., their 'expires' date is earlier than the current date and time)
+	 * and have the 'expires' column set. This helps maintain database performance 
+	 * by removing old log entries that are no longer needed.
+	 *
+	 * @return bool True if any logs were deleted, false otherwise.
+	 *
+	 * @throws \Exception Database operation exceptions
+	 */
+	public function clearLogs(): bool
+	{
+		try {
+			// Get the query builder for database operations
+			$qb = $this->db->getQueryBuilder();
+
+			// Build the delete query to remove expired logs that have the 'expires' column set
+			$qb->delete('openconnector_synchronization_contract_logs')
+			   ->where($qb->expr()->isNotNull('expires'))
+			   ->andWhere($qb->expr()->lt('expires', $qb->createFunction('NOW()')));
+
+			// Execute the query and get the number of affected rows
+			$result = $qb->executeStatement();
+
+			// Return true if any rows were affected (i.e., any logs were deleted)
+			return $result > 0;
+		} catch (\Exception $e) {
+			// Log the error for debugging purposes
+			\OC::$server->getLogger()->error('Failed to clear expired synchronization contract logs: ' . $e->getMessage(), [
+				'app' => 'openconnector',
+				'exception' => $e
+			]);
+			
+			// Re-throw the exception so the caller knows something went wrong
+			throw $e;
+		}
+	}//end clearLogs()
+
+	/**
+	 * Set expiry dates for synchronization contract logs based on retention period in milliseconds.
+	 *
+	 * Updates the expires column for synchronization contract logs based on their creation date plus the retention period.
+	 * Only affects synchronization contract logs that don't already have an expiry date set.
+	 *
+	 * @param int $retentionMs Retention period in milliseconds
+	 *
+	 * @return int Number of synchronization contract logs updated
+	 *
+	 * @throws \Exception Database operation exceptions
+	 *
+	 * @psalm-return int
+	 * @phpstan-return int
+	 */
+	public function setExpiryDate(int $retentionMs): int
+	{
+		try {
+			// Convert milliseconds to seconds for DateTime calculation
+			$retentionSeconds = intval($retentionMs / 1000);
+			
+			// Get the query builder
+			$qb = $this->db->getQueryBuilder();
+			
+			// Update synchronization contract logs that don't have an expiry date set
+			$qb->update('openconnector_synchronization_contract_logs')
+			   ->set('expires', $qb->createFunction(
+				   sprintf('DATE_ADD(created, INTERVAL %d SECOND)', $retentionSeconds)
+			   ))
+			   ->where($qb->expr()->isNull('expires'));
+			
+			// Execute the update and return number of affected rows
+			return $qb->executeStatement();
+		} catch (\Exception $e) {
+			// Log the error for debugging purposes
+			\OC::$server->getLogger()->error('Failed to set expiry dates for synchronization contract logs: ' . $e->getMessage(), [
+				'app' => 'openconnector',
+				'exception' => $e
+			]);
+			
+			// Re-throw the exception so the caller knows something went wrong
+			throw $e;
+		}
+	}//end setExpiryDate()
 }
diff --git a/lib/Db/SynchronizationContractMapper.php b/lib/Db/SynchronizationContractMapper.php
index 76261d80..5535b0ac 100644
--- a/lib/Db/SynchronizationContractMapper.php
+++ b/lib/Db/SynchronizationContractMapper.php
@@ -497,4 +497,94 @@ public function handleObjectRemoval(string $objectIdentifier): array
             throw new Exception('Failed to handle object removal: ' . $e->getMessage());
         }
     }
+
+    /**
+     * Count synchronization contracts with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the count query
+     * @return int The number of synchronization contracts matching the filters
+     * @throws \Exception If the count query fails
+     */
+    public function count(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COUNT(*)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to count synchronization contracts: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Calculate total size of synchronization contracts with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the size calculation
+     * @return int The total size in bytes of synchronization contracts matching the filters
+     * @throws \Exception If the size calculation fails
+     */
+    public function size(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to calculate synchronization contracts size: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Clear all synchronization contracts (delete all records).
+     *
+     * @return bool True if the operation was successful
+     * @throws \Exception If the clear operation fails
+     */
+    public function clearSynchronizationContracts(): bool
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->delete($this->getTableName());
+            $qb->executeStatement();
+            return true;
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to clear synchronization contracts: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
 }
diff --git a/lib/Db/SynchronizationLog.php b/lib/Db/SynchronizationLog.php
index b1cb7151..57326b46 100644
--- a/lib/Db/SynchronizationLog.php
+++ b/lib/Db/SynchronizationLog.php
@@ -20,6 +20,7 @@ class SynchronizationLog extends Entity implements JsonSerializable
     protected bool $test = false;
     protected bool $force = false;
     protected int $executionTime = 0;
+    protected ?int $size = null;
     protected ?DateTime $created = null;
     protected ?DateTime $expires = null;
 
@@ -43,6 +44,7 @@ public function __construct() {
         $this->addType('test', 'boolean');
         $this->addType('force', 'boolean');
         $this->addType('executionTime', 'integer');
+        $this->addType('size', 'integer');
         $this->addType('created', 'datetime');
         $this->addType('expires', 'datetime');
     }
@@ -90,6 +92,7 @@ public function jsonSerialize(): array
             'test' => $this->test,
             'force' => $this->force,
             'executionTime' => $this->executionTime,
+            'size' => $this->size,
             'created' => isset($this->created) ? $this->created->format('c') : null,
             'expires' => isset($this->expires) ? $this->expires->format('c') : null,
         ];
diff --git a/lib/Db/SynchronizationLogMapper.php b/lib/Db/SynchronizationLogMapper.php
index bc88dc38..b60a25bf 100644
--- a/lib/Db/SynchronizationLogMapper.php
+++ b/lib/Db/SynchronizationLogMapper.php
@@ -134,6 +134,11 @@ public function createFromArray(array $object): SynchronizationLog
 			$obj->setUuid(Uuid::v4());
 		}
 
+		// Calculate and set size if not provided
+		if ($obj->getSize() === null) {
+			$obj->setSize($this->calculateLogSize($obj));
+		}
+
 		return $this->insert($obj);
 	}
 
@@ -194,9 +199,184 @@ public function getTotalCount(array $filters = []): int
 		return (int)$row['count'];
 	}
 
+	/**
+	 * Calculate the approximate size of a synchronization log entry.
+	 *
+	 * This method estimates the size by summing the length of all text and JSON fields.
+	 *
+	 * @param SynchronizationLog $log The log entry to calculate size for
+	 *
+	 * @return int The estimated size in bytes
+	 */
+	private function calculateLogSize(SynchronizationLog $log): int
+	{
+		$size = 0;
+		
+		// Add size of string fields
+		$size += strlen($log->getUuid() ?? '');
+		$size += strlen($log->getMessage() ?? '');
+		$size += strlen($log->getSynchronizationId() ?? '');
+		$size += strlen($log->getUserId() ?? '');
+		$size += strlen($log->getSessionId() ?? '');
+		
+		// Add size of JSON fields (result array)
+		$result = $log->getResult();
+		if (!empty($result)) {
+			$size += strlen(json_encode($result));
+		}
+		
+		// Add approximate size of other fields (execution time, booleans, dates)
+		$size += 50; // Rough estimate for integers, booleans, and datetime fields
+		
+		return $size;
+	}//end calculateLogSize()
+
+	/**
+	 * Count synchronization logs with optional filters.
+	 *
+	 * This method provides flexible filtering capabilities similar to findAll
+	 * but returns only the count of matching records.
+	 *
+	 * @param array $filters Optional filters to apply
+	 *
+	 * @return int The count of logs matching the filters
+	 *
+	 * @throws \OCP\DB\Exception Database operation exceptions
+	 */
+	public function count(array $filters = []): int
+	{
+		$qb = $this->db->getQueryBuilder();
+
+		$qb->select($qb->func()->count('*'))
+			->from('openconnector_synchronization_logs');
+
+		// Apply filters
+		foreach ($filters as $filter => $value) {
+			if ($value === 'IS NOT NULL') {
+				$qb->andWhere($qb->expr()->isNotNull($filter));
+			} elseif ($value === 'IS NULL') {
+				$qb->andWhere($qb->expr()->isNull($filter));
+			} elseif (is_array($value)) {
+				// Handle array values like ['IS NULL', '']
+				$conditions = [];
+				foreach ($value as $val) {
+					if ($val === 'IS NULL') {
+						$conditions[] = $qb->expr()->isNull($filter);
+					} elseif ($val === 'IS NOT NULL') {
+						$conditions[] = $qb->expr()->isNotNull($filter);
+					} else {
+						$conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+					}
+				}
+				if (!empty($conditions)) {
+					$qb->andWhere($qb->expr()->orX(...$conditions));
+				}
+			} else {
+				$qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+			}
+		}
+
+		$result = $qb->executeQuery();
+		$row = $result->fetch();
+
+		return (int)($row['COUNT(*)'] ?? 0);
+	}//end count()
+
+	/**
+	 * Calculate total size of synchronization logs with optional filters.
+	 *
+	 * This method sums the size field of logs matching the given filters,
+	 * useful for storage management and retention analysis.
+	 *
+	 * @param array $filters Optional filters to apply
+	 *
+	 * @return int The total size of logs matching the filters in bytes
+	 *
+	 * @throws \OCP\DB\Exception Database operation exceptions
+	 */
+	public function size(array $filters = []): int
+	{
+		$qb = $this->db->getQueryBuilder();
+
+		$qb->select($qb->func()->sum('size'))
+			->from('openconnector_synchronization_logs');
+
+		// Apply filters
+		foreach ($filters as $filter => $value) {
+			if ($value === 'IS NOT NULL') {
+				$qb->andWhere($qb->expr()->isNotNull($filter));
+			} elseif ($value === 'IS NULL') {
+				$qb->andWhere($qb->expr()->isNull($filter));
+			} elseif (is_array($value)) {
+				// Handle array values like ['IS NULL', '']
+				$conditions = [];
+				foreach ($value as $val) {
+					if ($val === 'IS NULL') {
+						$conditions[] = $qb->expr()->isNull($filter);
+					} elseif ($val === 'IS NOT NULL') {
+						$conditions[] = $qb->expr()->isNotNull($filter);
+					} else {
+						$conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+					}
+				}
+				if (!empty($conditions)) {
+					$qb->andWhere($qb->expr()->orX(...$conditions));
+				}
+			} else {
+				$qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+			}
+		}
+
+		$result = $qb->executeQuery();
+		$row = $result->fetch();
+
+		return (int)($row['SUM(size)'] ?? 0);
+	}//end size()
+
+	/**
+	 * Clear expired logs from the database.
+	 *
+	 * This method deletes all synchronization logs that have expired 
+	 * (i.e., their 'expires' date is earlier than the current date and time)
+	 * and have the 'expires' column set. This helps maintain database performance 
+	 * by removing old log entries that are no longer needed.
+	 *
+	 * @return bool True if any logs were deleted, false otherwise.
+	 *
+	 * @throws \Exception Database operation exceptions
+	 */
+	public function clearLogs(): bool
+	{
+		try {
+			// Get the query builder for database operations
+			$qb = $this->db->getQueryBuilder();
+
+			// Build the delete query to remove expired logs that have the 'expires' column set
+			$qb->delete('openconnector_synchronization_logs')
+			   ->where($qb->expr()->isNotNull('expires'))
+			   ->andWhere($qb->expr()->lt('expires', $qb->createFunction('NOW()')));
+
+			// Execute the query and get the number of affected rows
+			$result = $qb->executeStatement();
+
+			// Return true if any rows were affected (i.e., any logs were deleted)
+			return $result > 0;
+		} catch (\Exception $e) {
+			// Log the error for debugging purposes
+			\OC::$server->getLogger()->error('Failed to clear expired synchronization logs: ' . $e->getMessage(), [
+				'app' => 'openconnector',
+				'exception' => $e
+			]);
+			
+			// Re-throw the exception so the caller knows something went wrong
+			throw $e;
+		}
+	}//end clearLogs()
+
 	/**
 	 * Cleans up expired log entries
 	 *
+	 * @deprecated Use clearLogs() instead for consistency
 	 * @return int Number of deleted entries
 	 */
 	public function cleanupExpired(): int
@@ -208,4 +388,49 @@ public function cleanupExpired(): int
 
 		return $qb->executeStatement();
 	}
+
+	/**
+	 * Set expiry dates for synchronization logs based on retention period in milliseconds.
+	 *
+	 * Updates the expires column for synchronization logs based on their creation date plus the retention period.
+	 * Only affects synchronization logs that don't already have an expiry date set.
+	 *
+	 * @param int $retentionMs Retention period in milliseconds
+	 *
+	 * @return int Number of synchronization logs updated
+	 *
+	 * @throws \Exception Database operation exceptions
+	 *
+	 * @psalm-return int
+	 * @phpstan-return int
+	 */
+	public function setExpiryDate(int $retentionMs): int
+	{
+		try {
+			// Convert milliseconds to seconds for DateTime calculation
+			$retentionSeconds = intval($retentionMs / 1000);
+			
+			// Get the query builder
+			$qb = $this->db->getQueryBuilder();
+			
+			// Update synchronization logs that don't have an expiry date set
+			$qb->update('openconnector_synchronization_logs')
+			   ->set('expires', $qb->createFunction(
+				   sprintf('DATE_ADD(created, INTERVAL %d SECOND)', $retentionSeconds)
+			   ))
+			   ->where($qb->expr()->isNull('expires'));
+			
+			// Execute the update and return number of affected rows
+			return $qb->executeStatement();
+		} catch (\Exception $e) {
+			// Log the error for debugging purposes
+			\OC::$server->getLogger()->error('Failed to set expiry dates for synchronization logs: ' . $e->getMessage(), [
+				'app' => 'openconnector',
+				'exception' => $e
+			]);
+			
+			// Re-throw the exception so the caller knows something went wrong
+			throw $e;
+		}
+	}//end setExpiryDate()
 }
diff --git a/lib/Db/SynchronizationMapper.php b/lib/Db/SynchronizationMapper.php
index 554c51d8..db17ec8f 100644
--- a/lib/Db/SynchronizationMapper.php
+++ b/lib/Db/SynchronizationMapper.php
@@ -321,4 +321,94 @@ public function getSlugToIdMap(): array
         }
         return $mappings;
     }
+
+    /**
+     * Count synchronizations with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the count query
+     * @return int The number of synchronizations matching the filters
+     * @throws \Exception If the count query fails
+     */
+    public function count(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COUNT(*)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to count synchronizations: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Calculate total size of synchronizations with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the size calculation
+     * @return int The total size in bytes of synchronizations matching the filters
+     * @throws \Exception If the size calculation fails
+     */
+    public function size(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
+               ->from($this->getTableName());
+
+            // Apply filters if provided
+            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
+                $qb->where($qb->expr()->isNull('expires'));
+            }
+
+            if (!empty($filters['expired']) && $filters['expired'] === true) {
+                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
+            }
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to calculate synchronizations size: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Clear all synchronizations (delete all records).
+     *
+     * @return bool True if the operation was successful
+     * @throws \Exception If the clear operation fails
+     */
+    public function clearSynchronizations(): bool
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->delete($this->getTableName());
+            $qb->executeStatement();
+            return true;
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to clear synchronizations: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
 }
diff --git a/lib/Migration/Version1Date20250122130000.php b/lib/Migration/Version1Date20250122130000.php
new file mode 100644
index 00000000..43bbe315
--- /dev/null
+++ b/lib/Migration/Version1Date20250122130000.php
@@ -0,0 +1,206 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * OpenConnector Log Size Migration
+ *
+ * This migration adds size columns to all log tables for better log retention management.
+ *
+ * @category Migration
+ * @package  OCA\OpenConnector\Migration
+ *
+ * @author    Conduction Development Team <info@conduction.nl>
+ * @copyright 2024 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git_id>
+ *
+ * @link https://www.openconnector.nl
+ */
+
+namespace OCA\OpenConnector\Migration;
+
+use Closure;
+use OCP\DB\ISchemaWrapper;
+use OCP\DB\Types;
+use OCP\Migration\IOutput;
+use OCP\Migration\SimpleMigrationStep;
+
+/**
+ * Migration step to add size columns to all log tables.
+ *
+ * This migration adds a 'size' column to track the size of log entries,
+ * which is useful for log retention management and storage optimization.
+ *
+ * @package OCA\OpenConnector\Migration
+ * @category Migration
+ * @author OpenConnector Team
+ * @copyright 2024 OpenConnector
+ * @license EUPL-1.2
+ * @version 1.0.0
+ * @link https://github.com/ConductionNL/OpenConnector
+ */
+class Version1Date20250122130000 extends SimpleMigrationStep 
+{
+    /**
+     * Pre-schema change hook.
+     *
+     * @param IOutput $output Migration output interface
+     * @param Closure $schemaClosure Closure that returns the current schema
+     * @param array   $options Migration options
+     *
+     * @return void
+     */
+    public function preSchemaChange(IOutput $output, Closure $schemaClosure, array $options): void 
+    {
+        // No pre-schema changes needed
+    }//end preSchemaChange()
+
+    /**
+     * Schema change implementation.
+     *
+     * Adds the 'size' column to all log tables to track log entry sizes
+     * for better retention management and storage optimization.
+     *
+     * @param IOutput $output Migration output interface
+     * @param Closure $schemaClosure Closure that returns the current schema
+     * @param array   $options Migration options
+     *
+     * @return ISchemaWrapper|null The modified schema
+     */
+    public function changeSchema(IOutput $output, Closure $schemaClosure, array $options): ?ISchemaWrapper 
+    {
+        /**
+         * @var ISchemaWrapper $schema
+         */
+        $schema = $schemaClosure();
+
+        // List of log tables that need the size column
+        $logTables = [
+            'openconnector_call_logs',
+            'openconnector_job_logs',
+            'openconnector_synchronization_logs',
+            'openconnector_synchronization_contract_logs',
+        ];
+
+        // Add size column to each log table
+        foreach ($logTables as $tableName) {
+            if ($schema->hasTable($tableName)) {
+                $table = $schema->getTable($tableName);
+
+                // Add size column if it doesn't exist
+                if (!$table->hasColumn('size')) {
+                    $table->addColumn('size', Types::BIGINT, [
+                        'notnull' => false,
+                        'default' => null,
+                        'comment' => 'Size of the log entry in bytes for retention management',
+                    ]);
+
+                    $output->info("Added 'size' column to table: " . $tableName);
+                }
+            } else {
+                $output->warning("Table not found: " . $tableName);
+            }
+        }
+
+        return $schema;
+    }//end changeSchema()
+
+    /**
+     * Post-schema change hook.
+     *
+     * Calculates and sets the size for existing log entries based on
+     * their JSON content and text fields.
+     *
+     * @param IOutput $output Migration output interface
+     * @param Closure $schemaClosure Closure that returns the current schema
+     * @param array   $options Migration options
+     *
+     * @return void
+     */
+    public function postSchemaChange(IOutput $output, Closure $schemaClosure, array $options): void 
+    {
+        // Get the database connection
+        $connection = \OC::$server->get(\OCP\IDBConnection::class);
+        
+        // Calculate sizes for existing log entries
+        $this->calculateExistingSizes($connection, $output);
+    }//end postSchemaChange()
+
+    /**
+     * Calculate and update sizes for existing log entries.
+     *
+     * This method estimates the size of existing log entries by calculating
+     * the total length of their text and JSON fields.
+     *
+     * @param \OCP\IDBConnection $connection Database connection
+     * @param IOutput            $output     Migration output interface
+     *
+     * @return void
+     */
+    private function calculateExistingSizes(\OCP\IDBConnection $connection, IOutput $output): void 
+    {
+        // Define size calculation queries for each table
+        $sizeCalculations = [
+            'openconnector_call_logs' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(status_message), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(request, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(response, '$')), 0) + 
+                COALESCE(LENGTH(user_id), 0) + 
+                COALESCE(LENGTH(session_id), 0)
+            ",
+            'openconnector_job_logs' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(level), 0) + 
+                COALESCE(LENGTH(message), 0) + 
+                COALESCE(LENGTH(job_id), 0) + 
+                COALESCE(LENGTH(job_list_id), 0) + 
+                COALESCE(LENGTH(job_class), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(arguments, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(stack_trace, '$')), 0) + 
+                COALESCE(LENGTH(user_id), 0) + 
+                COALESCE(LENGTH(session_id), 0)
+            ",
+            'openconnector_synchronization_logs' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(message), 0) + 
+                COALESCE(LENGTH(synchronization_id), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(result, '$')), 0) + 
+                COALESCE(LENGTH(user_id), 0) + 
+                COALESCE(LENGTH(session_id), 0)
+            ",
+            'openconnector_synchronization_contract_logs' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(message), 0) + 
+                COALESCE(LENGTH(synchronization_id), 0) + 
+                COALESCE(LENGTH(synchronization_contract_id), 0) + 
+                COALESCE(LENGTH(synchronization_log_id), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(source, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(target, '$')), 0) + 
+                COALESCE(LENGTH(target_result), 0) + 
+                COALESCE(LENGTH(user_id), 0) + 
+                COALESCE(LENGTH(session_id), 0)
+            ",
+        ];
+
+        foreach ($sizeCalculations as $tableName => $sizeCalculation) {
+            try {
+                // Update size for existing entries where size is null
+                $query = $connection->getQueryBuilder();
+                $query->update($tableName)
+                    ->set('size', $query->createFunction('(' . $sizeCalculation . ')'))
+                    ->where($query->expr()->isNull('size'));
+
+                $affectedRows = $query->executeStatement();
+                
+                if ($affectedRows > 0) {
+                    $output->info("Updated size for {$affectedRows} existing entries in table: " . $tableName);
+                }
+            } catch (\Exception $e) {
+                $output->warning("Failed to calculate sizes for table {$tableName}: " . $e->getMessage());
+            }
+        }
+    }//end calculateExistingSizes()
+}//end class
diff --git a/lib/Migration/Version1Date20250122140000.php b/lib/Migration/Version1Date20250122140000.php
new file mode 100644
index 00000000..0e148236
--- /dev/null
+++ b/lib/Migration/Version1Date20250122140000.php
@@ -0,0 +1,287 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * OpenConnector Entity Expires and Size Migration
+ *
+ * This migration adds expires and size columns to all entity tables for better retention management.
+ *
+ * @category Migration
+ * @package  OCA\OpenConnector\Migration
+ *
+ * @author    Conduction Development Team <info@conduction.nl>
+ * @copyright 2024 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git_id>
+ *
+ * @link https://www.openconnector.nl
+ */
+
+namespace OCA\OpenConnector\Migration;
+
+use Closure;
+use OCP\DB\ISchemaWrapper;
+use OCP\DB\Types;
+use OCP\Migration\IOutput;
+use OCP\Migration\SimpleMigrationStep;
+
+/**
+ * Migration step to add expires and size columns to all entity tables.
+ *
+ * This migration adds 'expires' and 'size' columns to all main entity tables,
+ * which is useful for retention management and storage optimization.
+ *
+ * @package OCA\OpenConnector\Migration
+ * @category Migration
+ * @author OpenConnector Team
+ * @copyright 2024 OpenConnector
+ * @license EUPL-1.2
+ * @version 1.0.0
+ * @link https://github.com/ConductionNL/OpenConnector
+ */
+class Version1Date20250122140000 extends SimpleMigrationStep 
+{
+    /**
+     * Pre-schema change hook.
+     *
+     * @param IOutput $output Migration output interface
+     * @param Closure $schemaClosure Closure that returns the current schema
+     * @param array   $options Migration options
+     *
+     * @return void
+     */
+    public function preSchemaChange(IOutput $output, Closure $schemaClosure, array $options): void 
+    {
+        // No pre-schema changes needed
+    }//end preSchemaChange()
+
+    /**
+     * Schema change implementation.
+     *
+     * Adds the 'expires' and 'size' columns to all entity tables to track
+     * entity expiration and sizes for better retention management.
+     *
+     * @param IOutput $output Migration output interface
+     * @param Closure $schemaClosure Closure that returns the current schema
+     * @param array   $options Migration options
+     *
+     * @return ISchemaWrapper|null The modified schema
+     */
+    public function changeSchema(IOutput $output, Closure $schemaClosure, array $options): ?ISchemaWrapper 
+    {
+        /**
+         * @var ISchemaWrapper $schema
+         */
+        $schema = $schemaClosure();
+
+        // List of entity tables that need the expires and size columns
+        $entityTables = [
+            'openconnector_sources',
+            'openconnector_synchronizations',
+            'openconnector_mappings',
+            'openconnector_jobs',
+            'openconnector_rules',
+            'openconnector_synchronization_contracts',
+        ];
+
+        // Add expires and size columns to each entity table
+        foreach ($entityTables as $tableName) {
+            if ($schema->hasTable($tableName)) {
+                $table = $schema->getTable($tableName);
+
+                // Add expires column if it doesn't exist
+                if (!$table->hasColumn('expires')) {
+                    $table->addColumn('expires', Types::DATETIME, [
+                        'notnull' => false,
+                        'default' => null,
+                        'comment' => 'Expiration date for this entity',
+                    ]);
+
+                    $output->info("Added 'expires' column to table: " . $tableName);
+                }
+
+                // Add size column if it doesn't exist
+                if (!$table->hasColumn('size')) {
+                    $table->addColumn('size', Types::BIGINT, [
+                        'notnull' => false,
+                        'default' => null,
+                        'comment' => 'Size of the entity in bytes for retention management',
+                    ]);
+
+                    $output->info("Added 'size' column to table: " . $tableName);
+                }
+            } else {
+                $output->warning("Table not found: " . $tableName);
+            }
+        }
+
+        return $schema;
+    }//end changeSchema()
+
+    /**
+     * Post-schema change hook.
+     *
+     * Calculates and sets the size for existing entity entries based on
+     * their JSON content and text fields.
+     *
+     * @param IOutput $output Migration output interface
+     * @param Closure $schemaClosure Closure that returns the current schema
+     * @param array   $options Migration options
+     *
+     * @return void
+     */
+    public function postSchemaChange(IOutput $output, Closure $schemaClosure, array $options): void 
+    {
+        // Get the database connection
+        $connection = \OC::$server->get(\OCP\IDBConnection::class);
+        
+        // Calculate sizes for existing entity entries
+        $this->calculateExistingSizes($connection, $output);
+    }//end postSchemaChange()
+
+    /**
+     * Calculate and update sizes for existing entity entries.
+     *
+     * This method estimates the size of existing entity entries by calculating
+     * the total length of their text and JSON fields.
+     *
+     * @param \OCP\IDBConnection $connection Database connection
+     * @param IOutput            $output     Migration output interface
+     *
+     * @return void
+     */
+    private function calculateExistingSizes(\OCP\IDBConnection $connection, IOutput $output): void 
+    {
+        // Define size calculation queries for each table
+        $sizeCalculations = [
+            'openconnector_sources' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(name), 0) + 
+                COALESCE(LENGTH(description), 0) + 
+                COALESCE(LENGTH(reference), 0) + 
+                COALESCE(LENGTH(version), 0) + 
+                COALESCE(LENGTH(location), 0) + 
+                COALESCE(LENGTH(type), 0) + 
+                COALESCE(LENGTH(authorization_header), 0) + 
+                COALESCE(LENGTH(auth), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(authentication_config, '$')), 0) + 
+                COALESCE(LENGTH(authorization_passthrough_method), 0) + 
+                COALESCE(LENGTH(locale), 0) + 
+                COALESCE(LENGTH(accept), 0) + 
+                COALESCE(LENGTH(jwt), 0) + 
+                COALESCE(LENGTH(jwt_id), 0) + 
+                COALESCE(LENGTH(secret), 0) + 
+                COALESCE(LENGTH(username), 0) + 
+                COALESCE(LENGTH(password), 0) + 
+                COALESCE(LENGTH(apikey), 0) + 
+                COALESCE(LENGTH(documentation), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(logging_config, '$')), 0) + 
+                COALESCE(LENGTH(oas), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(paths, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(headers, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(translation_config, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(configuration, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(endpoints_config, '$')), 0) + 
+                COALESCE(LENGTH(status), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(configurations, '$')), 0) + 
+                COALESCE(LENGTH(slug), 0)
+            ",
+            'openconnector_synchronizations' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(name), 0) + 
+                COALESCE(LENGTH(description), 0) + 
+                COALESCE(LENGTH(reference), 0) + 
+                COALESCE(LENGTH(version), 0) + 
+                COALESCE(LENGTH(source_id), 0) + 
+                COALESCE(LENGTH(source_type), 0) + 
+                COALESCE(LENGTH(source_hash), 0) + 
+                COALESCE(LENGTH(source_hash_mapping), 0) + 
+                COALESCE(LENGTH(source_target_mapping), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(source_config, '$')), 0) + 
+                COALESCE(LENGTH(target_id), 0) + 
+                COALESCE(LENGTH(target_type), 0) + 
+                COALESCE(LENGTH(target_hash), 0) + 
+                COALESCE(LENGTH(target_source_mapping), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(target_config, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(conditions, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(follow_ups, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(actions, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(configurations, '$')), 0) + 
+                COALESCE(LENGTH(status), 0) + 
+                COALESCE(LENGTH(slug), 0)
+            ",
+            'openconnector_mappings' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(reference), 0) + 
+                COALESCE(LENGTH(version), 0) + 
+                COALESCE(LENGTH(name), 0) + 
+                COALESCE(LENGTH(description), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(mapping, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(unset, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(cast, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(configurations, '$')), 0) + 
+                COALESCE(LENGTH(slug), 0)
+            ",
+            'openconnector_jobs' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(name), 0) + 
+                COALESCE(LENGTH(description), 0) + 
+                COALESCE(LENGTH(reference), 0) + 
+                COALESCE(LENGTH(version), 0) + 
+                COALESCE(LENGTH(job_class), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(arguments, '$')), 0) + 
+                COALESCE(LENGTH(user_id), 0) + 
+                COALESCE(LENGTH(job_list_id), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(configurations, '$')), 0) + 
+                COALESCE(LENGTH(status), 0) + 
+                COALESCE(LENGTH(slug), 0)
+            ",
+            'openconnector_rules' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(name), 0) + 
+                COALESCE(LENGTH(description), 0) + 
+                COALESCE(LENGTH(reference), 0) + 
+                COALESCE(LENGTH(version), 0) + 
+                COALESCE(LENGTH(action), 0) + 
+                COALESCE(LENGTH(timing), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(conditions, '$')), 0) + 
+                COALESCE(LENGTH(type), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(configuration, '$')), 0) + 
+                COALESCE(LENGTH(JSON_EXTRACT(configurations, '$')), 0) + 
+                COALESCE(LENGTH(slug), 0)
+            ",
+            'openconnector_synchronization_contracts' => "
+                COALESCE(LENGTH(uuid), 0) + 
+                COALESCE(LENGTH(version), 0) + 
+                COALESCE(LENGTH(synchronization_id), 0) + 
+                COALESCE(LENGTH(origin_id), 0) + 
+                COALESCE(LENGTH(origin_hash), 0) + 
+                COALESCE(LENGTH(target_id), 0) + 
+                COALESCE(LENGTH(target_hash), 0) + 
+                COALESCE(LENGTH(target_last_action), 0) + 
+                COALESCE(LENGTH(source_id), 0) + 
+                COALESCE(LENGTH(source_hash), 0)
+            ",
+        ];
+
+        foreach ($sizeCalculations as $tableName => $sizeCalculation) {
+            try {
+                // Update size for existing entries where size is null
+                $query = $connection->getQueryBuilder();
+                $query->update($tableName)
+                    ->set('size', $query->createFunction('(' . $sizeCalculation . ')'))
+                    ->where($query->expr()->isNull('size'));
+
+                $affectedRows = $query->executeStatement();
+                
+                if ($affectedRows > 0) {
+                    $output->info("Updated size for {$affectedRows} existing entries in table: " . $tableName);
+                }
+            } catch (\Exception $e) {
+                $output->warning("Failed to calculate sizes for table {$tableName}: " . $e->getMessage());
+            }
+        }
+    }//end calculateExistingSizes()
+}//end class
diff --git a/lib/Service/SettingsService.php b/lib/Service/SettingsService.php
new file mode 100644
index 00000000..5202e582
--- /dev/null
+++ b/lib/Service/SettingsService.php
@@ -0,0 +1,575 @@
+<?php
+/**
+ * OpenConnector Settings Service
+ *
+ * This file contains the service class for handling settings in the OpenConnector application.
+ *
+ * @category Service
+ * @package  OCA\OpenConnector\Service
+ *
+ * @author    Conduction Development Team <info@conduction.nl>
+ * @copyright 2024 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git_id>
+ *
+ * @link https://www.OpenConnector.nl
+ */
+
+namespace OCA\OpenConnector\Service;
+
+use OCP\IAppConfig;
+use OCP\IRequest;
+use OCP\App\IAppManager;
+use Psr\Container\ContainerInterface;
+use OCP\AppFramework\Http\JSONResponse;
+use OC_App;
+use OCA\OpenConnector\AppInfo\Application;
+
+use OCA\OpenConnector\Db\CallLogMapper;
+use OCA\OpenConnector\Db\JobLogMapper;
+use OCA\OpenConnector\Db\SynchronizationLogMapper;
+use OCA\OpenConnector\Db\SynchronizationContractLogMapper;
+use OCA\OpenConnector\Db\SourceMapper;
+use OCA\OpenConnector\Db\SynchronizationMapper;
+use OCA\OpenConnector\Db\MappingMapper;
+use OCA\OpenConnector\Db\JobMapper;
+use OCA\OpenConnector\Db\RuleMapper;
+use OCA\OpenConnector\Db\SynchronizationContractMapper;
+
+/**
+ * Service for handling settings-related operations.
+ *
+ * Provides functionality for retrieving, saving, and loading settings,
+ * as well as managing configuration for different object types.
+ */
+class SettingsService
+{
+
+    /**
+     * This property holds the name of the application, which is used for identification and configuration purposes.
+     *
+     * @var string $appName The name of the app.
+     */
+    private string $appName;
+
+    /**
+     * This constant represents the unique identifier for the OpenConnector application, used to check its installation and status.
+     *
+     * @var string $openConnectorAppId The ID of the OpenConnector app.
+     */
+    private const OPENCONNECTOR_APP_ID = 'openconnector';
+
+    /**
+     * This constant defines the minimum version of the OpenConnector application that is required for compatibility and functionality.
+     *
+     * @var string $minOpenConnectorVersion The minimum required version of OpenConnector.
+     */
+    private const MIN_OPENCONNECTOR_VERSION = '1.0.0';
+
+
+    /**
+     * SettingsService constructor.
+     *
+     * @param IAppConfig                        $config                        App configuration interface.
+     * @param IRequest                          $request                       Request interface.
+     * @param ContainerInterface                $container                     Container for dependency injection.
+     * @param IAppManager                       $appManager                    App manager interface.
+     * @param CallLogMapper                     $callLogMapper                 Call log mapper for database operations.
+     * @param JobLogMapper                      $jobLogMapper                  Job log mapper for database operations.
+     * @param SynchronizationLogMapper          $synchronizationLogMapper      Synchronization log mapper for database operations.
+     * @param SynchronizationContractLogMapper  $synchronizationContractLogMapper Synchronization contract log mapper for database operations.
+     * @param SourceMapper                      $sourceMapper                  Source mapper for database operations.
+     * @param SynchronizationMapper             $synchronizationMapper         Synchronization mapper for database operations.
+     * @param MappingMapper                     $mappingMapper                 Mapping mapper for database operations.
+     * @param JobMapper                         $jobMapper                     Job mapper for database operations.
+     * @param RuleMapper                        $ruleMapper                    Rule mapper for database operations.
+     * @param SynchronizationContractMapper     $synchronizationContractMapper Synchronization contract mapper for database operations.
+     */
+    public function __construct(
+        private readonly IAppConfig $config, 
+        private readonly IRequest $request, 
+        private readonly ContainerInterface $container, 
+        private readonly IAppManager $appManager,
+        private readonly CallLogMapper $callLogMapper,
+        private readonly JobLogMapper $jobLogMapper,
+        private readonly SynchronizationLogMapper $synchronizationLogMapper,
+        private readonly SynchronizationContractLogMapper $synchronizationContractLogMapper,
+        private readonly SourceMapper $sourceMapper,
+        private readonly SynchronizationMapper $synchronizationMapper,
+        private readonly MappingMapper $mappingMapper,
+        private readonly JobMapper $jobMapper,
+        private readonly RuleMapper $ruleMapper,
+        private readonly SynchronizationContractMapper $synchronizationContractMapper
+    ) {
+        // Set the application name for identification and configuration purposes.
+        $this->appName = 'openconnector';
+
+    }//end __construct()
+
+
+    /**
+     * Checks if OpenConnector is installed and meets version requirements.
+     *
+     * @param string|null $minVersion Minimum required version (e.g. '1.0.0').
+     *
+     * @return bool True if OpenConnector is installed and meets version requirements.
+     */
+    public function isOpenConnectorInstalled(?string $minVersion=self::MIN_OPENCONNECTOR_VERSION): bool
+    {
+        if ($this->appManager->isInstalled(self::OPENCONNECTOR_APP_ID) === false) {
+            return false;
+        }
+
+        if ($minVersion === null) {
+            return true;
+        }
+
+        $currentVersion = $this->appManager->getAppVersion(self::OPENCONNECTOR_APP_ID);
+        return version_compare($currentVersion, $minVersion, '>=');
+
+    }//end isOpenConnectorInstalled()
+
+
+    /**
+     * Checks if OpenConnector is enabled.
+     *
+     * @return bool True if OpenConnector is enabled.
+     */
+    public function isOpenConnectorEnabled(): bool
+    {
+        return $this->appManager->isEnabled(self::OPENCONNECTOR_APP_ID) === true;
+
+    }//end isOpenConnectorEnabled()
+
+
+
+
+
+    /**
+     * Retrieve the current settings for OpenConnector.
+     *
+     * @return array The current settings configuration.
+     * @throws \RuntimeException If settings retrieval fails.
+     */
+    public function getSettings(): array
+    {
+        try {
+            $data = [];
+            
+            // Version information
+            $data['version'] = [
+                'appName' => 'Open Connector',
+                'appVersion' => '1.0.0',
+            ];
+
+
+
+            // Retention Settings with defaults for OpenConnector log types
+            $retentionConfig = $this->config->getValueString($this->appName, 'retention', '');
+            if (empty($retentionConfig)) {
+                $data['retention'] = [
+                    'callLogRetention' => 2592000000, // 1 month default
+                    'jobLogRetention' => 2592000000, // 1 month default
+                    'syncLogRetention' => 2592000000, // 1 month default
+                    'contractLogRetention' => 2592000000, // 1 month default
+                ];
+            } else {
+                $retentionData = json_decode($retentionConfig, true);
+                $data['retention'] = [
+                    'callLogRetention' => $retentionData['callLogRetention'] ?? 2592000000,
+                    'jobLogRetention' => $retentionData['jobLogRetention'] ?? 2592000000,
+                    'syncLogRetention' => $retentionData['syncLogRetention'] ?? 2592000000,
+                    'contractLogRetention' => $retentionData['contractLogRetention'] ?? 2592000000,
+                ];
+            }
+
+            return $data;
+        } catch (\Exception $e) {
+            throw new \RuntimeException('Failed to retrieve settings: ' . $e->getMessage());
+        }
+
+    }//end getSettings()
+
+
+
+
+
+    /**
+     * Update the settings configuration.
+     *
+     * @param array $data The settings data to update.
+     *
+     * @return array The updated settings configuration.
+     * @throws \RuntimeException If settings update fails.
+     */
+    public function updateSettings(array $data): array
+    {
+        try {
+            // Handle Retention settings for OpenConnector log types
+            if (isset($data['retention'])) {
+                $retentionData = $data['retention'];
+                $retentionConfig = [
+                    'callLogRetention' => $retentionData['callLogRetention'] ?? 2592000000,
+                    'jobLogRetention' => $retentionData['jobLogRetention'] ?? 2592000000,
+                    'syncLogRetention' => $retentionData['syncLogRetention'] ?? 2592000000,
+                    'contractLogRetention' => $retentionData['contractLogRetention'] ?? 2592000000,
+                ];
+                $this->config->setValueString($this->appName, 'retention', json_encode($retentionConfig));
+            }
+
+            // Return the updated settings
+            return $this->getSettings();
+        } catch (\Exception $e) {
+            throw new \RuntimeException('Failed to update settings: ' . $e->getMessage());
+        }
+
+    }//end updateSettings()
+
+
+    /**
+     * Get the current publishing options.
+     *
+     * @return array The current publishing options configuration.
+     * @throws \RuntimeException If publishing options retrieval fails.
+     */
+    public function getPublishingOptions(): array
+    {
+        try {
+            // Retrieve publishing options from configuration with defaults to false.
+            $publishingOptions = [
+                // Convert string 'true'/'false' to boolean for auto publish attachments setting.
+                'auto_publish_attachments'      => $this->config->getValueString($this->appName, 'auto_publish_attachments', 'false') === 'true',
+                // Convert string 'true'/'false' to boolean for auto publish objects setting.
+                'auto_publish_objects'          => $this->config->getValueString($this->appName, 'auto_publish_objects', 'false') === 'true',
+                // Convert string 'true'/'false' to boolean for old style publishing view setting.
+                'use_old_style_publishing_view' => $this->config->getValueString($this->appName, 'use_old_style_publishing_view', 'false') === 'true',
+            ];
+
+            return $publishingOptions;
+        } catch (\Exception $e) {
+            throw new \RuntimeException('Failed to retrieve publishing options: '.$e->getMessage());
+        }
+
+    }//end getPublishingOptions()
+
+
+    /**
+     * Update the publishing options configuration.
+     *
+     * @param array $options The publishing options data to update.
+     *
+     * @return array The updated publishing options configuration.
+     * @throws \RuntimeException If publishing options update fails.
+     */
+    public function updatePublishingOptions(array $options): array
+    {
+        try {
+            // Define valid publishing option keys for security.
+            $validOptions = [
+                'auto_publish_attachments',
+                'auto_publish_objects',
+                'use_old_style_publishing_view',
+            ];
+
+            $updatedOptions = [];
+
+            // Update each publishing option in the configuration.
+            foreach ($validOptions as $option) {
+                // Check if this option is provided in the input data.
+                if (isset($options[$option]) === true) {
+                    // Convert boolean or string to string format for storage.
+                    $value = $options[$option] === true || $options[$option] === 'true' ? 'true' : 'false';
+                    // Store the value in the configuration.
+                    $this->config->setValueString($this->appName, $option, $value);
+                    // Retrieve and convert back to boolean for the response.
+                    $updatedOptions[$option] = $this->config->getValueString($this->appName, $option) === 'true';
+                }
+            }
+
+            return $updatedOptions;
+        } catch (\Exception $e) {
+            throw new \RuntimeException('Failed to update publishing options: '.$e->getMessage());
+        }//end try
+
+    }//end updatePublishingOptions()
+
+
+    /**
+     * Rebase all logs with current retention settings.
+     *
+     * This method sets expiry dates for logs based on current retention settings,
+     * ensuring all existing logs follow the new retention policies.
+     *
+     * @return array Array containing the rebase operation results
+     * @throws \RuntimeException If the rebase operation fails
+     */
+    public function rebaseObjectsAndLogs(): array
+    {
+        try {
+            $startTime = new \DateTime();
+            $results = [
+                'startTime' => $startTime,
+                'retentionResults' => [],
+                'errors' => [],
+            ];
+
+            // Get current settings
+            $settings = $this->getSettings();
+            
+            // Set expiry dates based on retention settings for OpenConnector logs
+            $retention = $settings['retention'] ?? [];
+            
+            try {
+                // Set expiry dates for call logs
+                if (isset($retention['callLogRetention']) && $retention['callLogRetention'] > 0) {
+                    $callLogsUpdated = $this->callLogMapper->setExpiryDate($retention['callLogRetention']);
+                    $results['retentionResults']['callLogsUpdated'] = $callLogsUpdated;
+                }
+
+                // Set expiry dates for job logs
+                if (isset($retention['jobLogRetention']) && $retention['jobLogRetention'] > 0) {
+                    $jobLogsUpdated = $this->jobLogMapper->setExpiryDate($retention['jobLogRetention']);
+                    $results['retentionResults']['jobLogsUpdated'] = $jobLogsUpdated;
+                }
+
+                // Set expiry dates for synchronization logs
+                if (isset($retention['syncLogRetention']) && $retention['syncLogRetention'] > 0) {
+                    $syncLogsUpdated = $this->synchronizationLogMapper->setExpiryDate($retention['syncLogRetention']);
+                    $results['retentionResults']['syncLogsUpdated'] = $syncLogsUpdated;
+                }
+
+                // Set expiry dates for contract logs
+                if (isset($retention['contractLogRetention']) && $retention['contractLogRetention'] > 0) {
+                    $contractLogsUpdated = $this->synchronizationContractLogMapper->setExpiryDate($retention['contractLogRetention']);
+                    $results['retentionResults']['contractLogsUpdated'] = $contractLogsUpdated;
+                }
+                
+            } catch (\Exception $e) {
+                $error = 'Failed to set expiry dates for logs: ' . $e->getMessage();
+                error_log('[SettingsService] ' . $error);
+                $results['errors'][] = $error;
+            }
+
+            $results['endTime'] = new \DateTime();
+            $results['duration'] = $results['endTime']->diff($startTime)->format('%H:%I:%S');
+            $results['success'] = empty($results['errors']);
+
+            return $results;
+
+        } catch (\Exception $e) {
+            throw new \RuntimeException('Rebase operation failed: ' . $e->getMessage());
+        }
+    }//end rebaseObjectsAndLogs()
+
+
+    /**
+     * General rebase method that can be called from any settings section.
+     *
+     * This is an alias for rebaseObjectsAndLogs() to provide a consistent interface
+     * for all sections that have rebase buttons.
+     *
+     * @return array Array containing the rebase operation results
+     * @throws \RuntimeException If the rebase operation fails
+     */
+    public function rebase(): array
+    {
+        return $this->rebaseObjectsAndLogs();
+    }//end rebase()
+
+
+
+
+
+    /**
+     * Get statistics for the settings dashboard.
+     *
+     * This method provides warning counts for logs that need attention,
+     * as well as total counts for all OpenConnector log types.
+     *
+     * @return array Array containing warning counts and total counts
+     * @throws \RuntimeException If statistics retrieval fails
+     */
+    public function getStats(): array
+    {
+        try {
+            $stats = [
+                'warnings' => [
+                    // Log warnings
+                    'callLogsWithoutExpiry' => 0,
+                    'callLogsWithoutExpirySize' => 0,
+                    'jobLogsWithoutExpiry' => 0,
+                    'jobLogsWithoutExpirySize' => 0,
+                    'syncLogsWithoutExpiry' => 0,
+                    'syncLogsWithoutExpirySize' => 0,
+                    'contractLogsWithoutExpiry' => 0,
+                    'contractLogsWithoutExpirySize' => 0,
+                    'expiredCallLogs' => 0,
+                    'expiredCallLogsSize' => 0,
+                    'expiredJobLogs' => 0,
+                    'expiredJobLogsSize' => 0,
+                    'expiredSyncLogs' => 0,
+                    'expiredSyncLogsSize' => 0,
+                    'expiredContractLogs' => 0,
+                    'expiredContractLogsSize' => 0,
+                    // Entity warnings
+                    'sourcesWithoutExpiry' => 0,
+                    'sourcesWithoutExpirySize' => 0,
+                    'synchronizationsWithoutExpiry' => 0,
+                    'synchronizationsWithoutExpirySize' => 0,
+                    'mappingsWithoutExpiry' => 0,
+                    'mappingsWithoutExpirySize' => 0,
+                    'jobsWithoutExpiry' => 0,
+                    'jobsWithoutExpirySize' => 0,
+                    'rulesWithoutExpiry' => 0,
+                    'rulesWithoutExpirySize' => 0,
+                    'contractsWithoutExpiry' => 0,
+                    'contractsWithoutExpirySize' => 0,
+                    'expiredSources' => 0,
+                    'expiredSourcesSize' => 0,
+                    'expiredSynchronizations' => 0,
+                    'expiredSynchronizationsSize' => 0,
+                    'expiredMappings' => 0,
+                    'expiredMappingsSize' => 0,
+                    'expiredJobs' => 0,
+                    'expiredJobsSize' => 0,
+                    'expiredRules' => 0,
+                    'expiredRulesSize' => 0,
+                    'expiredContracts' => 0,
+                    'expiredContractsSize' => 0,
+                ],
+                'totals' => [
+                    // Log totals
+                    'totalCallLogs' => 0,
+                    'totalCallLogsSize' => 0,
+                    'totalJobLogs' => 0,
+                    'totalJobLogsSize' => 0,
+                    'totalSyncLogs' => 0,
+                    'totalSyncLogsSize' => 0,
+                    'totalContractLogs' => 0,
+                    'totalContractLogsSize' => 0,
+                    // Entity totals
+                    'totalSources' => 0,
+                    'totalSourcesSize' => 0,
+                    'totalSynchronizations' => 0,
+                    'totalSynchronizationsSize' => 0,
+                    'totalMappings' => 0,
+                    'totalMappingsSize' => 0,
+                    'totalJobs' => 0,
+                    'totalJobsSize' => 0,
+                    'totalRules' => 0,
+                    'totalRulesSize' => 0,
+                    'totalContracts' => 0,
+                    'totalContractsSize' => 0,
+                ],
+                'lastUpdated' => new \DateTime(),
+            ];
+
+            // Count log warnings (logs without expiry date)
+            $stats['warnings']['callLogsWithoutExpiry'] = $this->callLogMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['callLogsWithoutExpirySize'] = $this->callLogMapper->size(['withoutExpiry' => true]);
+
+            $stats['warnings']['jobLogsWithoutExpiry'] = $this->jobLogMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['jobLogsWithoutExpirySize'] = $this->jobLogMapper->size(['withoutExpiry' => true]);
+
+            $stats['warnings']['syncLogsWithoutExpiry'] = $this->synchronizationLogMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['syncLogsWithoutExpirySize'] = $this->synchronizationLogMapper->size(['withoutExpiry' => true]);
+
+            $stats['warnings']['contractLogsWithoutExpiry'] = $this->synchronizationContractLogMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['contractLogsWithoutExpirySize'] = $this->synchronizationContractLogMapper->size(['withoutExpiry' => true]);
+
+            // Count entity warnings (entities without expiry date)
+            $stats['warnings']['sourcesWithoutExpiry'] = $this->sourceMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['sourcesWithoutExpirySize'] = $this->sourceMapper->size(['withoutExpiry' => true]);
+
+            $stats['warnings']['synchronizationsWithoutExpiry'] = $this->synchronizationMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['synchronizationsWithoutExpirySize'] = $this->synchronizationMapper->size(['withoutExpiry' => true]);
+
+            $stats['warnings']['mappingsWithoutExpiry'] = $this->mappingMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['mappingsWithoutExpirySize'] = $this->mappingMapper->size(['withoutExpiry' => true]);
+
+            $stats['warnings']['jobsWithoutExpiry'] = $this->jobMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['jobsWithoutExpirySize'] = $this->jobMapper->size(['withoutExpiry' => true]);
+
+            $stats['warnings']['rulesWithoutExpiry'] = $this->ruleMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['rulesWithoutExpirySize'] = $this->ruleMapper->size(['withoutExpiry' => true]);
+
+            $stats['warnings']['contractsWithoutExpiry'] = $this->synchronizationContractMapper->count(['withoutExpiry' => true]);
+            $stats['warnings']['contractsWithoutExpirySize'] = $this->synchronizationContractMapper->size(['withoutExpiry' => true]);
+
+            // Count expired logs
+            $stats['warnings']['expiredCallLogs'] = $this->callLogMapper->count(['expired' => true]);
+            $stats['warnings']['expiredCallLogsSize'] = $this->callLogMapper->size(['expired' => true]);
+
+            $stats['warnings']['expiredJobLogs'] = $this->jobLogMapper->count(['expired' => true]);
+            $stats['warnings']['expiredJobLogsSize'] = $this->jobLogMapper->size(['expired' => true]);
+
+            $stats['warnings']['expiredSyncLogs'] = $this->synchronizationLogMapper->count(['expired' => true]);
+            $stats['warnings']['expiredSyncLogsSize'] = $this->synchronizationLogMapper->size(['expired' => true]);
+
+            $stats['warnings']['expiredContractLogs'] = $this->synchronizationContractLogMapper->count(['expired' => true]);
+            $stats['warnings']['expiredContractLogsSize'] = $this->synchronizationContractLogMapper->size(['expired' => true]);
+
+            // Count expired entities
+            $stats['warnings']['expiredSources'] = $this->sourceMapper->count(['expired' => true]);
+            $stats['warnings']['expiredSourcesSize'] = $this->sourceMapper->size(['expired' => true]);
+
+            $stats['warnings']['expiredSynchronizations'] = $this->synchronizationMapper->count(['expired' => true]);
+            $stats['warnings']['expiredSynchronizationsSize'] = $this->synchronizationMapper->size(['expired' => true]);
+
+            $stats['warnings']['expiredMappings'] = $this->mappingMapper->count(['expired' => true]);
+            $stats['warnings']['expiredMappingsSize'] = $this->mappingMapper->size(['expired' => true]);
+
+            $stats['warnings']['expiredJobs'] = $this->jobMapper->count(['expired' => true]);
+            $stats['warnings']['expiredJobsSize'] = $this->jobMapper->size(['expired' => true]);
+
+            $stats['warnings']['expiredRules'] = $this->ruleMapper->count(['expired' => true]);
+            $stats['warnings']['expiredRulesSize'] = $this->ruleMapper->size(['expired' => true]);
+
+            $stats['warnings']['expiredContracts'] = $this->synchronizationContractMapper->count(['expired' => true]);
+            $stats['warnings']['expiredContractsSize'] = $this->synchronizationContractMapper->size(['expired' => true]);
+
+            // Count total logs and their sizes
+            $stats['totals']['totalCallLogs'] = $this->callLogMapper->count();
+            $stats['totals']['totalCallLogsSize'] = $this->callLogMapper->size();
+
+            $stats['totals']['totalJobLogs'] = $this->jobLogMapper->count();
+            $stats['totals']['totalJobLogsSize'] = $this->jobLogMapper->size();
+
+            $stats['totals']['totalSyncLogs'] = $this->synchronizationLogMapper->count();
+            $stats['totals']['totalSyncLogsSize'] = $this->synchronizationLogMapper->size();
+
+            $stats['totals']['totalContractLogs'] = $this->synchronizationContractLogMapper->count();
+            $stats['totals']['totalContractLogsSize'] = $this->synchronizationContractLogMapper->size();
+
+            // Count total entities and their sizes
+            $stats['totals']['totalSources'] = $this->sourceMapper->count();
+            $stats['totals']['totalSourcesSize'] = $this->sourceMapper->size();
+
+            $stats['totals']['totalSynchronizations'] = $this->synchronizationMapper->count();
+            $stats['totals']['totalSynchronizationsSize'] = $this->synchronizationMapper->size();
+
+            $stats['totals']['totalMappings'] = $this->mappingMapper->count();
+            $stats['totals']['totalMappingsSize'] = $this->mappingMapper->size();
+
+            $stats['totals']['totalJobs'] = $this->jobMapper->count();
+            $stats['totals']['totalJobsSize'] = $this->jobMapper->size();
+
+            $stats['totals']['totalRules'] = $this->ruleMapper->count();
+            $stats['totals']['totalRulesSize'] = $this->ruleMapper->size();
+
+            $stats['totals']['totalContracts'] = $this->synchronizationContractMapper->count();
+            $stats['totals']['totalContractsSize'] = $this->synchronizationContractMapper->size();
+
+            return $stats;
+
+        } catch (\Exception $e) {
+            throw new \RuntimeException('Failed to retrieve statistics: ' . $e->getMessage());
+        }
+    }//end getStats()
+
+
+
+
+
+}//end class
diff --git a/src/settings.js b/src/settings.js
new file mode 100644
index 00000000..c6fe9e2e
--- /dev/null
+++ b/src/settings.js
@@ -0,0 +1,10 @@
+import Vue from 'vue'
+import AdminSettings from './views/settings/Settings.vue'
+
+Vue.mixin({ methods: { t, n } })
+
+new Vue(
+	{
+		render: h => h(AdminSettings),
+	},
+).$mount('#settings')
diff --git a/src/views/settings/Settings.vue b/src/views/settings/Settings.vue
new file mode 100644
index 00000000..2680f47b
--- /dev/null
+++ b/src/views/settings/Settings.vue
@@ -0,0 +1,1412 @@
+<template>
+	<div>
+		<NcSettingsSection
+			name="Open Connector"
+			description="A central place for managing your Open Connector"
+			doc-url="https://docs.openconnector.nl" />
+
+		<NcSettingsSection
+			name="Version Information"
+			description="Current application version information">
+			<div v-if="!loadingVersionInfo" class="version-info">
+				<div class="version-details">
+					<div class="version-item">
+						<strong>Application:</strong> {{ versionInfo.appName }} v{{ versionInfo.appVersion }}
+					</div>
+					<div class="version-item">
+						<strong>License:</strong> EUPL-1.2
+					</div>
+					<div class="version-item">
+						<strong>Author:</strong> Conduction B.V.
+					</div>
+					<div class="version-item">
+						<strong>Website:</strong>
+						<a href="https://github.com/ConductionNL/OpenConnector" target="_blank" rel="noopener noreferrer">
+							https://github.com/ConductionNL/OpenConnector
+						</a>
+					</div>
+				</div>
+			</div>
+
+			<!-- Loading State -->
+			<NcLoadingIcon v-else
+				class="loading-icon"
+				:size="64"
+				appearance="dark" />
+		</NcSettingsSection>
+
+		<NcSettingsSection name="System Statistics"
+			description="Overview of your Open Connector data and potential issues">
+			<div v-if="!loadingStats" class="stats-section">
+				<!-- Save and Rebase Buttons -->
+				<div class="section-header-inline">
+					<span />
+					<div class="button-group">
+						<NcButton
+							type="secondary"
+							:disabled="loading || saving || rebasing || loadingStats"
+							@click="loadStats">
+							<template #icon>
+								<NcLoadingIcon v-if="loadingStats" :size="20" />
+								<Refresh v-else :size="20" />
+							</template>
+							Refresh
+						</NcButton>
+					</div>
+				</div>
+
+				<div class="stats-content">
+					<div class="stats-grid">
+						<!-- Warning Stats -->
+						<div class="stats-card warning-stats">
+							<h4>⚠️ Items Requiring Attention</h4>
+							<div class="stats-table-container">
+								<table class="stats-table">
+									<thead>
+										<tr>
+											<th class="stats-table-header">Issue</th>
+											<th class="stats-table-header">Count</th>
+											<th class="stats-table-header">Size</th>
+										</tr>
+									</thead>
+									<tbody>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Call logs without expiry</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.callLogsWithoutExpiry || 0) > 0 }">{{ stats.warnings.callLogsWithoutExpiry || 0 }}</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.callLogsWithoutExpirySize || 0) > 0 }">{{ formatBytes(stats.warnings.callLogsWithoutExpirySize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Job logs without expiry</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.jobLogsWithoutExpiry || 0) > 0 }">{{ stats.warnings.jobLogsWithoutExpiry || 0 }}</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.jobLogsWithoutExpirySize || 0) > 0 }">{{ formatBytes(stats.warnings.jobLogsWithoutExpirySize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Sync logs without expiry</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.syncLogsWithoutExpiry || 0) > 0 }">{{ stats.warnings.syncLogsWithoutExpiry || 0 }}</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.syncLogsWithoutExpirySize || 0) > 0 }">{{ formatBytes(stats.warnings.syncLogsWithoutExpirySize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Contract logs without expiry</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.contractLogsWithoutExpiry || 0) > 0 }">{{ stats.warnings.contractLogsWithoutExpiry || 0 }}</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.contractLogsWithoutExpirySize || 0) > 0 }">{{ formatBytes(stats.warnings.contractLogsWithoutExpirySize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Expired call logs</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.expiredCallLogs || 0) > 0 }">{{ stats.warnings.expiredCallLogs || 0 }}</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.expiredCallLogsSize || 0) > 0 }">{{ formatBytes(stats.warnings.expiredCallLogsSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Expired job logs</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.expiredJobLogs || 0) > 0 }">{{ stats.warnings.expiredJobLogs || 0 }}</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.expiredJobLogsSize || 0) > 0 }">{{ formatBytes(stats.warnings.expiredJobLogsSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Expired sync logs</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.expiredSyncLogs || 0) > 0 }">{{ stats.warnings.expiredSyncLogs || 0 }}</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.expiredSyncLogsSize || 0) > 0 }">{{ formatBytes(stats.warnings.expiredSyncLogsSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Expired contract logs</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.expiredContractLogs || 0) > 0 }">{{ stats.warnings.expiredContractLogs || 0 }}</td>
+											<td class="stats-table-value" :class="{ 'danger': (stats.warnings.expiredContractLogsSize || 0) > 0 }">{{ formatBytes(stats.warnings.expiredContractLogsSize || 0) }}</td>
+										</tr>
+									</tbody>
+								</table>
+							</div>
+						</div>
+
+						<!-- Total Stats -->
+						<div class="stats-card total-stats">
+							<h4>📊 System Totals</h4>
+							<div class="stats-table-container">
+								<table class="stats-table">
+									<thead>
+										<tr>
+											<th class="stats-table-header">Category</th>
+											<th class="stats-table-header">Total</th>
+											<th class="stats-table-header">Size</th>
+										</tr>
+									</thead>
+									<tbody>
+										<!-- Log Totals -->
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Call Logs</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalCallLogs || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalCallLogsSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Job Logs</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalJobLogs || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalJobLogsSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Synchronization Logs</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalSyncLogs || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalSyncLogsSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Contract Logs</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalContractLogs || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalContractLogsSize || 0) }}</td>
+										</tr>
+										<!-- Entity Totals -->
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Sources</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalSources || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalSourcesSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Synchronizations</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalSynchronizations || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalSynchronizationsSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Mappings</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalMappings || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalMappingsSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Jobs</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalJobs || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalJobsSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Rules</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalRules || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalRulesSize || 0) }}</td>
+										</tr>
+										<tr class="stats-table-row">
+											<td class="stats-table-label">Contracts</td>
+											<td class="stats-table-value total">{{ (stats.totals.totalContracts || 0).toLocaleString() }}</td>
+											<td class="stats-table-value total">{{ formatBytes(stats.totals.totalContractsSize || 0) }}</td>
+										</tr>
+									</tbody>
+								</table>
+							</div>
+						</div>
+					</div>
+
+					<div class="stats-footer">
+						<p class="stats-updated">
+							Last updated: {{ formatDate(stats.lastUpdated) }}
+						</p>
+					</div>
+				</div>
+			</div>
+
+			<!-- Loading State -->
+			<NcLoadingIcon v-else
+				class="loading-icon"
+				:size="64"
+				appearance="dark" />
+		</NcSettingsSection>
+
+
+
+		<NcSettingsSection name="Retention">
+			<template #description>
+				Configure data and log retention policies
+			</template>
+
+			<div v-if="!loading" class="retention-options">
+				<!-- Save Button -->
+				<div class="section-header-inline">
+					<span />
+					<div class="button-group">
+						<NcButton
+							type="error"
+							:disabled="loading || saving || rebasing"
+							@click="showRebaseDialog">
+							<template #icon>
+								<NcLoadingIcon v-if="rebasing" :size="20" />
+								<Refresh v-else :size="20" />
+							</template>
+							Rebase
+						</NcButton>
+						<NcButton
+							type="primary"
+							:disabled="loading || saving || rebasing"
+							@click="saveSettings">
+							<template #icon>
+								<NcLoadingIcon v-if="saving" :size="20" />
+								<Save v-else :size="20" />
+							</template>
+							Save
+						</NcButton>
+					</div>
+				</div>
+
+				<!-- Section Description -->
+				<div class="section-description-full">
+					<p class="main-description">
+						Configure retention policies for OpenConnector logs. Log retention manages how long call logs, job logs, synchronization logs, 
+						and contract logs are kept for compliance and debugging purposes.
+						<strong>Note:</strong> Setting retention to 0 means data is kept forever (not advisable for production).
+					</p>
+					<p class="toggle-status" :class="retentionStatusClass">
+						<span :class="retentionStatusTextClass">{{ retentionStatusMessage }}</span>
+					</p>
+					<p class="impact-description warning-box">
+						<strong>⚠️ Important:</strong> Changes to retention policies only apply to logs that are created after the retention policy was changed.
+						Existing logs will retain their previous retention schedules until they expire naturally.
+					</p>
+				</div>
+
+				<!-- Consolidated Retention Settings -->
+				<div class="option-section">
+					<h4>Log Retention Policies</h4>
+					<p class="option-description">
+						Configure retention periods for different types of OpenConnector logs (in milliseconds). These settings control how long logs are kept before automatic cleanup.
+					</p>
+
+					<div class="retention-table">
+						<div class="retention-row">
+							<div class="retention-label">
+								<strong>Call Log Retention</strong>
+								<p class="retention-description">
+									Retention period for API call logs including requests, responses, and errors
+								</p>
+							</div>
+							<div class="retention-input">
+								<div class="retention-input-wrapper">
+									<input
+										v-model.number="retentionOptions.callLogRetention"
+										type="number"
+										:disabled="loading || saving"
+										placeholder="2592000000"
+										class="retention-input-field">
+									<span class="retention-unit">ms</span>
+								</div>
+							</div>
+							<div class="retention-display">
+								{{ formatRetentionPeriod(retentionOptions.callLogRetention) }}
+							</div>
+						</div>
+
+						<div class="retention-row">
+							<div class="retention-label">
+								<strong>Job Log Retention</strong>
+								<p class="retention-description">
+									Retention period for background job execution logs and results
+								</p>
+							</div>
+							<div class="retention-input">
+								<div class="retention-input-wrapper">
+									<input
+										v-model.number="retentionOptions.jobLogRetention"
+										type="number"
+										:disabled="loading || saving"
+										placeholder="2592000000"
+										class="retention-input-field">
+									<span class="retention-unit">ms</span>
+								</div>
+							</div>
+							<div class="retention-display">
+								{{ formatRetentionPeriod(retentionOptions.jobLogRetention) }}
+							</div>
+						</div>
+
+						<div class="retention-row">
+							<div class="retention-label">
+								<strong>Synchronization Log Retention</strong>
+								<p class="retention-description">
+									Retention period for data synchronization process logs
+								</p>
+							</div>
+							<div class="retention-input">
+								<div class="retention-input-wrapper">
+									<input
+										v-model.number="retentionOptions.syncLogRetention"
+										type="number"
+										:disabled="loading || saving"
+										placeholder="2592000000"
+										class="retention-input-field">
+									<span class="retention-unit">ms</span>
+								</div>
+							</div>
+							<div class="retention-display">
+								{{ formatRetentionPeriod(retentionOptions.syncLogRetention) }}
+							</div>
+						</div>
+
+						<div class="retention-row">
+							<div class="retention-label">
+								<strong>Contract Log Retention</strong>
+								<p class="retention-description">
+									Retention period for synchronization contract logs and mapping information
+								</p>
+							</div>
+							<div class="retention-input">
+								<div class="retention-input-wrapper">
+									<input
+										v-model.number="retentionOptions.contractLogRetention"
+										type="number"
+										:disabled="loading || saving"
+										placeholder="2592000000"
+										class="retention-input-field">
+									<span class="retention-unit">ms</span>
+								</div>
+							</div>
+							<div class="retention-display">
+								{{ formatRetentionPeriod(retentionOptions.contractLogRetention) }}
+							</div>
+						</div>
+					</div>
+				</div>
+			</div>
+
+			<!-- Loading State -->
+			<NcLoadingIcon v-else
+				class="loading-icon"
+				:size="64"
+				appearance="dark" />
+		</NcSettingsSection>
+
+		<!-- Rebase Confirmation Dialog -->
+		<NcDialog
+			v-if="showRebaseConfirmation"
+			name="Confirm Rebase"
+			:can-close="!rebasing"
+			@closing="hideRebaseDialog">
+			<div class="rebase-dialog">
+				<div class="rebase-warning">
+					<h3>⚠️ Rebase All Logs</h3>
+					<p class="warning-text">
+						This action will recalculate expiration times for all logs based on your current retention settings.
+						This ensures that all existing logs follow the new retention policies you have configured.
+					</p>
+					<p class="impact-text">
+						<strong>This operation:</strong><br>
+						• Will update expiration timestamps for all existing logs<br>
+						• Cannot be undone once started<br>
+						• May take some time to complete depending on data volume<br>
+						• Will apply current retention policies to all log types
+					</p>
+				</div>
+				<div class="dialog-actions">
+					<NcButton
+						:disabled="rebasing"
+						@click="hideRebaseDialog">
+						Cancel
+					</NcButton>
+					<NcButton
+						type="error"
+						:disabled="rebasing"
+						@click="performRebase">
+						<template #icon>
+							<NcLoadingIcon v-if="rebasing" :size="20" />
+							<Refresh v-else :size="20" />
+						</template>
+						{{ rebasing ? 'Rebasing...' : 'Confirm Rebase' }}
+					</NcButton>
+				</div>
+			</div>
+		</NcDialog>
+	</div>
+</template>
+
+<script>
+import { defineComponent } from 'vue'
+import {
+	NcSettingsSection,
+	NcSelect,
+	NcButton,
+	NcLoadingIcon,
+	NcCheckboxRadioSwitch,
+	NcDialog,
+} from '@nextcloud/vue'
+import Save from 'vue-material-design-icons/ContentSave.vue'
+import Refresh from 'vue-material-design-icons/Refresh.vue'
+
+/**
+ * @class Settings
+ * @module Components
+ * @package
+ * @author Claude AI
+ * @copyright 2024 Conduction
+ * @license EUPL-1.2
+ * @version 1.0.0
+ * @see https://github.com/ConductionNL/OpenConnector
+ *
+ * Settings component for the Open Connector that allows users to configure
+ * version information, RBAC, multitenancy, and log retention options.
+ */
+export default defineComponent({
+	name: 'Settings',
+	components: {
+		NcSettingsSection,
+		NcSelect,
+		NcButton,
+		NcLoadingIcon,
+		NcCheckboxRadioSwitch,
+		NcDialog,
+		Save,
+		Refresh,
+	},
+
+	/**
+	 * Component data
+	 *
+	 * @return {object} Component data
+	 */
+	data() {
+		return {
+			loading: true,
+			saving: false,
+			rebasing: false,
+			showRebaseConfirmation: false,
+			loadingVersionInfo: true,
+			loadingStats: true,
+			stats: {
+				warnings: {
+					callLogsWithoutExpiry: 0,
+					callLogsWithoutExpirySize: 0,
+					jobLogsWithoutExpiry: 0,
+					jobLogsWithoutExpirySize: 0,
+					syncLogsWithoutExpiry: 0,
+					syncLogsWithoutExpirySize: 0,
+					contractLogsWithoutExpiry: 0,
+					contractLogsWithoutExpirySize: 0,
+					expiredCallLogs: 0,
+					expiredCallLogsSize: 0,
+					expiredJobLogs: 0,
+					expiredJobLogsSize: 0,
+					expiredSyncLogs: 0,
+					expiredSyncLogsSize: 0,
+					expiredContractLogs: 0,
+					expiredContractLogsSize: 0,
+				},
+				totals: {
+					// Log totals
+					totalCallLogs: 0,
+					totalCallLogsSize: 0,
+					totalJobLogs: 0,
+					totalJobLogsSize: 0,
+					totalSyncLogs: 0,
+					totalSyncLogsSize: 0,
+					totalContractLogs: 0,
+					totalContractLogsSize: 0,
+					// Entity totals
+					totalSources: 0,
+					totalSourcesSize: 0,
+					totalSynchronizations: 0,
+					totalSynchronizationsSize: 0,
+					totalMappings: 0,
+					totalMappingsSize: 0,
+					totalJobs: 0,
+					totalJobsSize: 0,
+					totalRules: 0,
+					totalRulesSize: 0,
+					totalContracts: 0,
+					totalContractsSize: 0,
+				},
+				lastUpdated: new Date(),
+			},
+			versionInfo: {
+				appName: 'Open Connector',
+				appVersion: '1.0.0',
+			},
+
+			retentionOptions: {
+				callLogRetention: 2592000000, // 1 month default
+				jobLogRetention: 2592000000, // 1 month default
+				syncLogRetention: 2592000000, // 1 month default
+				contractLogRetention: 2592000000, // 1 month default
+			},
+
+		}
+	},
+
+	computed: {
+
+		/**
+		 * Retention status message based on zero values
+		 *
+		 * @return {string} Status message
+		 */
+		retentionStatusMessage() {
+			const zeroRetentions = []
+
+			if (this.retentionOptions.callLogRetention === 0) {
+				zeroRetentions.push('Call Logs')
+			}
+			if (this.retentionOptions.jobLogRetention === 0) {
+				zeroRetentions.push('Job Logs')
+			}
+			if (this.retentionOptions.syncLogRetention === 0) {
+				zeroRetentions.push('Sync Logs')
+			}
+			if (this.retentionOptions.contractLogRetention === 0) {
+				zeroRetentions.push('Contract Logs')
+			}
+
+			if (zeroRetentions.length === 0) {
+				return 'All retention policies configured'
+			} else if (zeroRetentions.length === 4) {
+				return '⚠️ All retention policies set to forever (not advisable)'
+			} else {
+				return `⚠️ ${zeroRetentions.join(', ')} set to forever (not advisable)`
+			}
+		},
+
+		/**
+		 * CSS class for retention status
+		 *
+		 * @return {string} CSS class
+		 */
+		retentionStatusClass() {
+			const zeroCount = [
+				this.retentionOptions.callLogRetention,
+				this.retentionOptions.jobLogRetention,
+				this.retentionOptions.syncLogRetention,
+				this.retentionOptions.contractLogRetention,
+			].filter(val => val === 0).length
+
+			return zeroCount > 0 ? 'status-warning' : 'status-success'
+		},
+
+		/**
+		 * CSS class for retention status text
+		 *
+		 * @return {string} CSS class
+		 */
+		retentionStatusTextClass() {
+			const zeroCount = [
+				this.retentionOptions.callLogRetention,
+				this.retentionOptions.jobLogRetention,
+				this.retentionOptions.syncLogRetention,
+				this.retentionOptions.contractLogRetention,
+			].filter(val => val === 0).length
+
+			return zeroCount > 0 ? 'status-warning-text' : 'status-enabled'
+		},
+	},
+
+
+
+	/**
+	 * Lifecycle hook that loads settings when component is created
+	 */
+	async created() {
+		await this.loadSettings()
+		await this.loadStats()
+	},
+
+	methods: {
+		/**
+		 * Loads all settings from the backend
+		 *
+		 * @async
+		 * @return {Promise<void>}
+		 */
+		async loadSettings() {
+			this.loading = true
+			this.loadingVersionInfo = true
+
+			try {
+				const response = await fetch('/index.php/apps/openconnector/api/settings')
+				const data = await response.json()
+
+				if (data.error) {
+					console.error('Failed to load settings:', data.error)
+					return
+				}
+
+				// Version information
+				this.versionInfo = data.version
+
+				// Retention settings
+				if (data.retention) {
+					this.retentionOptions = {
+						callLogRetention: data.retention.callLogRetention || 2592000000,
+						jobLogRetention: data.retention.jobLogRetention || 2592000000,
+						syncLogRetention: data.retention.syncLogRetention || 2592000000,
+						contractLogRetention: data.retention.contractLogRetention || 2592000000,
+					}
+				}
+
+			} catch (error) {
+				console.error('Failed to load settings:', error)
+			} finally {
+				this.loading = false
+				this.loadingVersionInfo = false
+			}
+		},
+
+
+
+		/**
+		 * Format retention period in milliseconds to human-readable format
+		 *
+		 * @param {number} ms Milliseconds
+		 * @return {string} Formatted time period
+		 */
+		formatRetentionPeriod(ms) {
+			if (!ms || ms === 0) {
+				return 'Forever (not advisable)'
+			}
+
+			const units = [
+				{ name: 'year', ms: 365 * 24 * 60 * 60 * 1000, plural: 'years' },
+				{ name: 'month', ms: 30 * 24 * 60 * 60 * 1000, plural: 'months' },
+				{ name: 'week', ms: 7 * 24 * 60 * 60 * 1000, plural: 'weeks' },
+				{ name: 'day', ms: 24 * 60 * 60 * 1000, plural: 'days' },
+				{ name: 'hour', ms: 60 * 60 * 1000, plural: 'hours' },
+				{ name: 'minute', ms: 60 * 1000, plural: 'minutes' },
+			]
+
+			const parts = []
+			let remaining = ms
+
+			for (const unit of units) {
+				const count = Math.floor(remaining / unit.ms)
+				if (count > 0) {
+					parts.push(`${count} ${count === 1 ? unit.name : unit.plural}`)
+					remaining -= count * unit.ms
+				}
+			}
+
+			if (parts.length === 0) {
+				return 'Less than 1 minute'
+			}
+
+			// Show up to 2 most significant units
+			return parts.slice(0, 2).join(', ')
+		},
+
+		/**
+		 * Saves all settings to the backend
+		 *
+		 * @async
+		 * @return {Promise<void>}
+		 */
+		async saveSettings() {
+			this.saving = true
+
+			try {
+				const settingsData = {
+					retention: {
+						callLogRetention: this.retentionOptions.callLogRetention,
+						jobLogRetention: this.retentionOptions.jobLogRetention,
+						syncLogRetention: this.retentionOptions.syncLogRetention,
+						contractLogRetention: this.retentionOptions.contractLogRetention,
+					},
+				}
+
+				const response = await fetch('/index.php/apps/openconnector/api/settings', {
+					method: 'PUT',
+					headers: {
+						'Content-Type': 'application/json',
+					},
+					body: JSON.stringify(settingsData),
+				})
+
+				const result = await response.json()
+
+				if (result.error) {
+					console.error('Failed to save settings:', result.error)
+					return
+				}
+
+				// Update Retention settings
+				if (result.retention) {
+					this.retentionOptions = {
+						callLogRetention: result.retention.callLogRetention,
+						jobLogRetention: result.retention.jobLogRetention,
+						syncLogRetention: result.retention.syncLogRetention,
+						contractLogRetention: result.retention.contractLogRetention,
+					}
+				}
+
+			} catch (error) {
+				console.error('Failed to save settings:', error)
+			} finally {
+				this.saving = false
+			}
+		},
+
+
+
+		/**
+		 * Shows the rebase confirmation dialog
+		 *
+		 * @return {void}
+		 */
+		showRebaseDialog() {
+			this.showRebaseConfirmation = true
+		},
+
+		/**
+		 * Hides the rebase confirmation dialog
+		 *
+		 * @return {void}
+		 */
+		hideRebaseDialog() {
+			this.showRebaseConfirmation = false
+		},
+
+		/**
+		 * Performs the rebase operation
+		 *
+		 * @async
+		 * @return {Promise<void>}
+		 */
+		async performRebase() {
+			this.rebasing = true
+
+			try {
+				const response = await fetch('/index.php/apps/openconnector/api/settings/rebase', {
+					method: 'POST',
+					headers: {
+						'Content-Type': 'application/json',
+					},
+				})
+
+				const result = await response.json()
+
+				if (result.error) {
+					console.error('Failed to rebase:', result.error)
+					// You could add a toast notification here
+					return
+				}
+
+				// Hide the dialog and show success
+				this.hideRebaseDialog()
+				// You could add a success toast notification here
+
+			} catch (error) {
+				console.error('Failed to rebase:', error)
+				// You could add an error toast notification here
+			} finally {
+				this.rebasing = false
+			}
+		},
+
+		/**
+		 * Load statistics from the backend
+		 *
+		 * @async
+		 * @return {Promise<void>}
+		 */
+		async loadStats() {
+			this.loadingStats = true
+
+			try {
+				const response = await fetch('/index.php/apps/openconnector/api/settings/stats')
+				const data = await response.json()
+
+				if (data.error) {
+					console.error('Failed to load stats:', data.error)
+					return
+				}
+
+				this.stats = {
+					warnings: data.warnings || {},
+					totals: data.totals || {},
+					lastUpdated: new Date(data.lastUpdated || Date.now()),
+				}
+
+			} catch (error) {
+				console.error('Failed to load stats:', error)
+			} finally {
+				this.loadingStats = false
+			}
+		},
+
+		/**
+		 * Format a date for display
+		 *
+		 * @param {Date|string} date Date to format
+		 * @return {string} Formatted date string
+		 */
+		formatDate(date) {
+			if (!date) return 'Unknown'
+
+			const dateObj = date instanceof Date ? date : new Date(date)
+			return dateObj.toLocaleString()
+		},
+
+		/**
+		 * Format bytes to human readable format
+		 *
+		 * @param {number} bytes Number of bytes
+		 * @return {string} Formatted byte string
+		 */
+		formatBytes(bytes) {
+			if (!bytes || bytes === 0) return '0 Bytes'
+
+			const k = 1024
+			const sizes = ['Bytes', 'KB', 'MB', 'GB', 'TB', 'PB']
+			const i = Math.floor(Math.log(bytes) / Math.log(k))
+
+			return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i]
+		},
+	},
+})
+</script>
+
+<style scoped>
+.version-info {
+	max-width: none;
+}
+
+.version-details {
+	margin-bottom: 2rem;
+	padding: 1rem;
+	background-color: var(--color-background-hover);
+	border-radius: var(--border-radius-large);
+}
+
+.version-item {
+	margin-bottom: 0.5rem;
+	display: flex;
+	align-items: center;
+	gap: 0.5rem;
+}
+
+.version-item:last-child {
+	margin-bottom: 0;
+}
+
+.no-version {
+	color: var(--color-text-lighter);
+	font-style: italic;
+}
+
+.status-ok {
+	color: var(--color-success);
+	font-weight: bold;
+}
+
+.status-warning {
+	color: var(--color-warning);
+	font-weight: bold;
+}
+
+.status-error {
+	color: var(--color-error);
+	font-weight: bold;
+}
+
+.rbac-options,
+.multitenancy-options,
+.retention-options {
+	max-width: none;
+}
+
+.option-section {
+	margin-bottom: 1.5rem;
+	padding: 1rem 0;
+	border-bottom: 1px solid var(--color-border);
+}
+
+.option-section:last-child {
+	border-bottom: none;
+}
+
+.option-description {
+	margin-top: 0.5rem;
+	color: var(--color-text-lighter);
+	font-size: 0.9rem;
+	line-height: 1.4;
+}
+
+.button-container {
+	margin-top: 2rem;
+}
+
+.loading-icon {
+	display: flex;
+	justify-content: center;
+	margin: 2rem 0;
+}
+
+h3 {
+	font-size: 13px;
+}
+
+h4 {
+	margin-bottom: 0.5rem;
+	font-weight: bold;
+}
+
+.section-header-inline {
+	display: flex;
+	justify-content: space-between;
+	align-items: center;
+	gap: 1rem;
+	position: relative;
+	top: -45px;
+	margin-bottom: -40px;
+	z-index: 10;
+}
+
+.section-subtitle {
+	color: var(--color-text-lighter);
+	font-size: 0.9rem;
+}
+
+.section-header {
+	display: flex;
+	justify-content: space-between;
+	align-items: flex-start;
+	gap: 2rem;
+	margin-bottom: 1rem;
+}
+
+.section-description {
+	flex: 1;
+	max-width: 70%;
+}
+
+.section-controls {
+	flex-shrink: 0;
+	align-self: flex-start;
+}
+
+.main-description {
+	margin-bottom: 1rem;
+	line-height: 1.5;
+	color: var(--color-text-light);
+}
+
+.toggle-status {
+	margin-bottom: 1rem;
+	padding: 0.75rem;
+	background-color: var(--color-background-hover);
+	border-radius: var(--border-radius);
+}
+
+.toggle-status:has(.status-enabled) {
+	border-left: 4px solid var(--color-success);
+}
+
+.toggle-status:has(.status-disabled) {
+	border-left: 4px solid var(--color-error);
+}
+
+.status-enabled {
+	color: var(--color-success);
+	font-weight: bold;
+}
+
+.status-disabled {
+	color: var(--color-error);
+	font-weight: bold;
+}
+
+.status-warning {
+	border-left: 4px solid var(--color-warning);
+}
+
+.status-warning-text {
+	color: var(--color-warning);
+	font-weight: bold;
+}
+
+.status-success {
+	border-left: 4px solid var(--color-success);
+}
+
+.warning-box {
+	background-color: var(--color-warning-light, #fff3cd);
+	border: 1px solid var(--color-warning, #ffc107);
+	border-radius: var(--border-radius);
+	padding: 0.75rem;
+	margin-bottom: 1rem;
+	color: var(--color-warning-dark, #856404);
+}
+
+.impact-description {
+	margin-bottom: 0;
+	padding: 0.75rem;
+	background-color: var(--color-background-dark);
+	border-radius: var(--border-radius);
+	line-height: 1.4;
+	font-size: 0.9rem;
+}
+
+.impact-description strong {
+	color: var(--color-text-dark);
+}
+
+@media (max-width: 768px) {
+	.section-header {
+		flex-direction: column;
+		align-items: stretch;
+		gap: 1rem;
+	}
+
+	.section-description {
+		max-width: 100%;
+	}
+
+	.section-controls {
+		align-self: stretch;
+	}
+}
+
+.groups-table {
+	margin-top: 1rem;
+	border: 1px solid var(--color-border);
+	border-radius: var(--border-radius);
+	overflow: hidden;
+}
+
+.retention-table {
+	margin-top: 1rem;
+	display: flex;
+	flex-direction: column;
+	gap: 0.5rem;
+}
+
+.groups-row {
+	display: flex;
+	align-items: flex-start;
+	padding: 1rem;
+	border-bottom: 1px solid var(--color-border);
+	background-color: var(--color-background-hover);
+}
+
+.retention-row {
+	display: grid;
+	grid-template-columns: 1fr auto 1fr;
+	gap: 1.5rem;
+	align-items: center;
+	padding: 1rem;
+	background-color: var(--color-background-hover);
+	border-radius: var(--border-radius);
+	border: 1px solid var(--color-border);
+}
+
+.groups-row:last-child {
+	border-bottom: none;
+}
+
+.groups-row:nth-child(even) {
+	background-color: var(--color-background-dark);
+}
+
+.group-label {
+	flex: 1;
+	padding-right: 1rem;
+}
+
+.group-label strong {
+	display: block;
+	margin-bottom: 0.5rem;
+	color: var(--color-text-dark);
+}
+
+.user-type-description {
+	margin: 0;
+	font-size: 0.9rem;
+	color: var(--color-text-lighter);
+	line-height: 1.4;
+}
+
+.group-select {
+	flex: 0 0 250px;
+	min-width: 250px;
+	display: flex;
+	flex-direction: column;
+	gap: 0.5rem;
+}
+
+.retention-input-wrapper {
+	display: flex;
+	align-items: center;
+	gap: 0.5rem;
+}
+
+.retention-input {
+	flex: 1;
+	padding: 0.5rem;
+	border: 1px solid var(--color-border);
+	border-radius: var(--border-radius);
+	background-color: var(--color-main-background);
+	color: var(--color-main-text);
+}
+
+.retention-input:focus {
+	outline: none;
+	border-color: var(--color-primary);
+	box-shadow: 0 0 0 2px var(--color-primary-light);
+}
+
+.retention-label {
+	display: flex;
+	flex-direction: column;
+	gap: 0.5rem;
+}
+
+.retention-label strong {
+	font-size: 1rem;
+	color: var(--color-text-dark);
+}
+
+.retention-description {
+	margin: 0;
+	color: var(--color-text-light);
+	font-size: 0.9rem;
+	line-height: 1.4;
+}
+
+.retention-input-field {
+	width: 140px;
+	padding: 0.5rem;
+	border: 1px solid var(--color-border);
+	border-radius: var(--border-radius);
+	text-align: right;
+	background-color: var(--color-main-background);
+}
+
+.retention-input-field:focus {
+	outline: none;
+	border-color: var(--color-primary);
+	box-shadow: 0 0 0 2px var(--color-primary-light);
+}
+
+.retention-unit {
+	color: var(--color-text-lighter);
+	font-size: 0.9rem;
+	font-weight: bold;
+	min-width: 20px;
+}
+
+.retention-display {
+	font-size: 0.8rem;
+	color: var(--color-text-lighter);
+	font-style: italic;
+	padding: 0.25rem 0.5rem;
+	background-color: var(--color-background-hover);
+	border-radius: var(--border-radius-small);
+	border-left: 3px solid var(--color-primary);
+}
+
+.retention-category-header {
+	background-color: var(--color-background-dark) !important;
+	border-bottom: 2px solid var(--color-border-dark) !important;
+	font-weight: bold;
+}
+
+.retention-category-header .group-label strong {
+	font-size: 1rem;
+	color: var(--color-text-dark);
+}
+
+.category-indicator {
+	padding: 0.25rem 0.75rem;
+	background-color: var(--color-primary);
+	color: white;
+	border-radius: var(--border-radius);
+	font-size: 0.8rem;
+	font-weight: bold;
+	text-transform: uppercase;
+	letter-spacing: 0.5px;
+}
+
+.button-group {
+	display: flex;
+	gap: 0.5rem;
+	align-items: center;
+}
+
+.rebase-dialog {
+	padding: 1.5rem;
+	max-width: 700px;
+	width: 100%;
+}
+
+.rebase-warning {
+	margin-bottom: 1.5rem;
+}
+
+.rebase-warning h3 {
+	color: var(--color-error);
+	margin-bottom: 1rem;
+	font-size: 1.1rem;
+}
+
+.warning-text {
+	margin-bottom: 1rem;
+	line-height: 1.5;
+	color: var(--color-text-light);
+}
+
+.impact-text {
+	padding: 1rem;
+	background-color: var(--color-warning-light, #fff3cd);
+	border: 1px solid var(--color-warning, #ffc107);
+	border-radius: var(--border-radius);
+	margin-bottom: 1rem;
+	color: var(--color-warning-dark, #856404);
+	line-height: 1.4;
+	font-size: 0.9rem;
+}
+
+.dialog-actions {
+	display: flex;
+	justify-content: flex-end;
+	gap: 0.5rem;
+	margin-top: 1rem;
+}
+
+.stats-section {
+	max-width: none;
+}
+
+.stats-content {
+	margin-top: 1rem;
+}
+
+.stats-grid {
+	display: grid;
+	grid-template-columns: 1fr 1fr;
+	gap: 1.5rem;
+	margin-bottom: 1.5rem;
+}
+
+.stats-card {
+	padding: 1.5rem;
+	border-radius: var(--border-radius-large);
+	border: 1px solid var(--color-border);
+	background-color: var(--color-background-hover);
+}
+
+.stats-card h4 {
+	margin: 0 0 1rem 0;
+	font-size: 1rem;
+	font-weight: bold;
+	color: var(--color-text-dark);
+}
+
+.stats-items {
+	display: flex;
+	flex-direction: column;
+	gap: 0.75rem;
+}
+
+.stats-item {
+	display: flex;
+	justify-content: space-between;
+	align-items: center;
+	padding: 0.5rem 0;
+	border-bottom: 1px solid var(--color-border-light);
+}
+
+.stats-item:last-child {
+	border-bottom: none;
+}
+
+.stats-label {
+	color: var(--color-text-light);
+	font-size: 0.9rem;
+}
+
+.stats-value {
+	font-weight: bold;
+	font-size: 1rem;
+}
+
+.stats-value.warning {
+	color: var(--color-warning);
+}
+
+.stats-value.total {
+	color: var(--color-primary);
+}
+
+.stats-footer {
+	text-align: center;
+	padding-top: 1rem;
+	border-top: 1px solid var(--color-border);
+}
+
+.stats-updated {
+	margin: 0;
+	color: var(--color-text-lighter);
+	font-size: 0.8rem;
+}
+
+/* Stats Table Styles */
+.stats-table-container {
+	margin-top: 1rem;
+	overflow-x: auto;
+}
+
+.stats-table {
+	width: 100%;
+	border-collapse: collapse;
+	font-size: 0.9rem;
+}
+
+.stats-table-header {
+	padding: 0.75rem 1rem;
+	text-align: left;
+	font-weight: 600;
+	color: var(--color-text-maxcontrast);
+	background-color: var(--color-background-dark);
+	border-bottom: 1px solid var(--color-border);
+}
+
+.stats-table-header:first-child {
+	border-top-left-radius: var(--border-radius);
+}
+
+.stats-table-header:last-child {
+	border-top-right-radius: var(--border-radius);
+}
+
+.stats-table-row {
+	border-bottom: 1px solid var(--color-border-dark);
+}
+
+.stats-table-row:hover {
+	background-color: var(--color-background-hover);
+}
+
+.stats-table-label {
+	padding: 0.75rem 1rem;
+	font-weight: 500;
+	color: var(--color-text-light);
+}
+
+.stats-table-value {
+	padding: 0.75rem 1rem;
+	text-align: right;
+	font-weight: 600;
+}
+
+.stats-table-value.total {
+	color: var(--color-primary-element);
+}
+
+.stats-table-value.danger {
+	color: var(--color-error);
+	font-weight: bold;
+}
+
+@media (max-width: 768px) {
+	.stats-grid {
+		grid-template-columns: 1fr;
+		gap: 1rem;
+	}
+}
+
+@media (max-width: 768px) {
+	.groups-row {
+		flex-direction: column;
+		gap: 1rem;
+	}
+
+	.group-label {
+		padding-right: 0;
+	}
+
+	.group-select {
+		flex: 1;
+		min-width: auto;
+	}
+}
+</style>
diff --git a/templates/settings.php b/templates/settings.php
deleted file mode 100644
index f4a2a41c..00000000
--- a/templates/settings.php
+++ /dev/null
@@ -1,4 +0,0 @@
-
-
-Hello world
-
diff --git a/templates/settings/admin.php b/templates/settings/admin.php
index f4a2a41c..ce1464b0 100644
--- a/templates/settings/admin.php
+++ b/templates/settings/admin.php
@@ -1,4 +1,10 @@
+<?php
+use OCP\Util;
 
+$appId = OCA\OpenConnector\AppInfo\Application::APP_ID;
+Util::addScript($appId, $appId . '-settings');
+Util::addStyle($appId, 'main');
 
-Hello world
+?>
 
+<div id="settings"></div>
\ No newline at end of file
diff --git a/webpack.config.js b/webpack.config.js
index d0b2bc2e..c5f90360 100644
--- a/webpack.config.js
+++ b/webpack.config.js
@@ -16,6 +16,10 @@ webpackConfig.entry = {
 		import: path.join(__dirname, 'src', 'main.js'),
 		filename: appId + '-main.js',
 	},
+	settings: {
+		import: path.join(__dirname, 'src', 'settings.js'),
+		filename: appId + '-settings.js',
+	},
 }
 
 module.exports = webpackConfig

From 664f76480b63503052754e4b3260b0c5f68e03c7 Mon Sep 17 00:00:00 2001
From: Ruben van der Linde <ruben@conduction.nl>
Date: Wed, 13 Aug 2025 00:11:56 +0200
Subject: [PATCH 5/8] Lets keep retatantions a continues concept

---
 lib/Db/Endpoint.php                      |   8 +-
 lib/Db/EndpointMapper.php                | 115 +++++++++++++++++++++++
 lib/Db/EventMessage.php                  |   8 +-
 lib/Db/EventMessageMapper.php            | 115 +++++++++++++++++++++++
 lib/Db/EventSubscription.php             |   8 +-
 lib/Db/EventSubscriptionMapper.php       | 115 +++++++++++++++++++++++
 lib/Db/JobMapper.php                     |  57 +++++++----
 lib/Db/MappingMapper.php                 |  57 +++++++----
 lib/Db/RuleMapper.php                    |  57 +++++++----
 lib/Db/SourceMapper.php                  |  57 +++++++----
 lib/Db/SynchronizationContractMapper.php |  57 +++++++----
 lib/Db/SynchronizationMapper.php         |  57 +++++++----
 lib/Service/SettingsService.php          |  84 ++++++++---------
 13 files changed, 654 insertions(+), 141 deletions(-)

diff --git a/lib/Db/Endpoint.php b/lib/Db/Endpoint.php
index 629c7ee2..37147654 100644
--- a/lib/Db/Endpoint.php
+++ b/lib/Db/Endpoint.php
@@ -40,6 +40,8 @@ class Endpoint extends Entity implements JsonSerializable
 	protected ?array 	$rules = []; // Array of rules to be applied
 	protected ?array    $configurations = []; // Array of configuration IDs that this endpoint belongs to
 	protected ?string   $slug = null;
+	protected ?DateTime $expires = null; // When this endpoint expires
+	protected ?int      $size = null; // Size of this endpoint in bytes
 
 	/**
 	 * Get the endpoint array representation
@@ -91,6 +93,8 @@ public function __construct() {
 		$this->addType(fieldName:'rules', type: 'json');
 		$this->addType(fieldName:'configurations', type: 'json');
 		$this->addType(fieldName:'slug', type: 'string');
+		$this->addType(fieldName:'expires', type: 'datetime');
+		$this->addType(fieldName:'size', type: 'integer');
 	}
 
 	public function getJsonFields(): array
@@ -178,7 +182,9 @@ public function jsonSerialize(): array
             'configurations' => $this->configurations,
             'slug' => $this->getSlug(),
             'created' => isset($this->created) ? $this->created->format('c') : null,
-            'updated' => isset($this->updated) ? $this->updated->format('c') : null
+            'updated' => isset($this->updated) ? $this->updated->format('c') : null,
+            'expires' => isset($this->expires) ? $this->expires->format('c') : null,
+            'size' => $this->size
         ];
     }
 }
diff --git a/lib/Db/EndpointMapper.php b/lib/Db/EndpointMapper.php
index 9fdac31e..91b1e4d5 100644
--- a/lib/Db/EndpointMapper.php
+++ b/lib/Db/EndpointMapper.php
@@ -358,4 +358,119 @@ public function getSlugToIdMap(): array
         }
         return $mappings;
     }
+
+    /**
+     * Apply filters to a query builder.
+     *
+     * @param \OCP\DB\QueryBuilder\IQueryBuilder $qb The query builder to apply filters to
+     * @param array $filters The filters to apply
+     * @return void
+     */
+    private function applyFilters(\OCP\DB\QueryBuilder\IQueryBuilder $qb, array $filters): void
+    {
+        foreach ($filters as $filter => $value) {
+            if ($value === 'IS NOT NULL') {
+                $qb->andWhere($qb->expr()->isNotNull($filter));
+            } elseif ($value === 'IS NULL') {
+                $qb->andWhere($qb->expr()->isNull($filter));
+            } elseif (is_array($value)) {
+                // Handle array values like ['IS NULL', ''] or ['<', 'NOW()']
+                $conditions = [];
+                foreach ($value as $val) {
+                    if ($val === 'IS NULL') {
+                        $conditions[] = $qb->expr()->isNull($filter);
+                    } elseif ($val === 'IS NOT NULL') {
+                        $conditions[] = $qb->expr()->isNotNull($filter);
+                    } elseif ($val === 'NOW()') {
+                        $conditions[] = $qb->expr()->lt($filter, $qb->createFunction('NOW()'));
+                    } else {
+                        $conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+                    }
+                }
+                if (!empty($conditions)) {
+                    $qb->andWhere($qb->expr()->orX(...$conditions));
+                }
+            } else {
+                $qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+            }
+        }
+    }
+
+    /**
+     * Count endpoints with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the count query
+     * @return int The number of endpoints matching the filters
+     * @throws \Exception If the count query fails
+     */
+    public function count(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COUNT(*)'))
+               ->from($this->getTableName());
+
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to count endpoints: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Calculate total size of endpoints with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the size calculation
+     * @return int The total size in bytes of endpoints matching the filters
+     * @throws \Exception If the size calculation fails
+     */
+    public function size(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
+               ->from($this->getTableName());
+
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to calculate endpoints size: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Clear all endpoints (delete all records).
+     *
+     * @return bool True if the operation was successful
+     * @throws \Exception If the clear operation fails
+     */
+    public function clearEndpoints(): bool
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->delete($this->getTableName());
+            $qb->executeStatement();
+            return true;
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to clear endpoints: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
 }
diff --git a/lib/Db/EventMessage.php b/lib/Db/EventMessage.php
index 91e4459d..e2c50fde 100644
--- a/lib/Db/EventMessage.php
+++ b/lib/Db/EventMessage.php
@@ -28,6 +28,8 @@ class EventMessage extends Entity implements JsonSerializable
     protected ?DateTime $nextAttempt = null; // Scheduled time for next attempt
     protected ?DateTime $created = null; // Creation timestamp
     protected ?DateTime $updated = null; // Last update timestamp
+    protected ?DateTime $expires = null; // When this message expires
+    protected ?int $size = null; // Size of this message in bytes
 
     /**
      * Get the message payload
@@ -65,6 +67,8 @@ public function __construct() {
         $this->addType('nextAttempt', 'datetime');
         $this->addType('created', 'datetime');
         $this->addType('updated', 'datetime');
+        $this->addType('expires', 'datetime');
+        $this->addType('size', 'integer');
     }
 
     /**
@@ -141,7 +145,9 @@ public function jsonSerialize(): array
             'lastAttempt' => isset($this->lastAttempt) ? $this->lastAttempt->format('c') : null,
             'nextAttempt' => isset($this->nextAttempt) ? $this->nextAttempt->format('c') : null,
             'created' => isset($this->created) ? $this->created->format('c') : null,
-            'updated' => isset($this->updated) ? $this->updated->format('c') : null
+            'updated' => isset($this->updated) ? $this->updated->format('c') : null,
+            'expires' => isset($this->expires) ? $this->expires->format('c') : null,
+            'size' => $this->size
         ];
     }
 } 
\ No newline at end of file
diff --git a/lib/Db/EventMessageMapper.php b/lib/Db/EventMessageMapper.php
index f674236e..ea144b03 100644
--- a/lib/Db/EventMessageMapper.php
+++ b/lib/Db/EventMessageMapper.php
@@ -178,4 +178,119 @@ public function markFailed(int $id, array $response, int $backoffMinutes = 5): E
             'nextAttempt' => $message->getNextAttempt()
         ]);
     }
+
+    /**
+     * Apply filters to a query builder.
+     *
+     * @param \OCP\DB\QueryBuilder\IQueryBuilder $qb The query builder to apply filters to
+     * @param array $filters The filters to apply
+     * @return void
+     */
+    private function applyFilters(\OCP\DB\QueryBuilder\IQueryBuilder $qb, array $filters): void
+    {
+        foreach ($filters as $filter => $value) {
+            if ($value === 'IS NOT NULL') {
+                $qb->andWhere($qb->expr()->isNotNull($filter));
+            } elseif ($value === 'IS NULL') {
+                $qb->andWhere($qb->expr()->isNull($filter));
+            } elseif (is_array($value)) {
+                // Handle array values like ['IS NULL', ''] or ['<', 'NOW()']
+                $conditions = [];
+                foreach ($value as $val) {
+                    if ($val === 'IS NULL') {
+                        $conditions[] = $qb->expr()->isNull($filter);
+                    } elseif ($val === 'IS NOT NULL') {
+                        $conditions[] = $qb->expr()->isNotNull($filter);
+                    } elseif ($val === 'NOW()') {
+                        $conditions[] = $qb->expr()->lt($filter, $qb->createFunction('NOW()'));
+                    } else {
+                        $conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+                    }
+                }
+                if (!empty($conditions)) {
+                    $qb->andWhere($qb->expr()->orX(...$conditions));
+                }
+            } else {
+                $qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+            }
+        }
+    }
+
+    /**
+     * Count event messages with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the count query
+     * @return int The number of event messages matching the filters
+     * @throws \Exception If the count query fails
+     */
+    public function count(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COUNT(*)'))
+               ->from($this->getTableName());
+
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to count event messages: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Calculate total size of event messages with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the size calculation
+     * @return int The total size in bytes of event messages matching the filters
+     * @throws \Exception If the size calculation fails
+     */
+    public function size(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
+               ->from($this->getTableName());
+
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to calculate event messages size: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Clear all event messages (delete all records).
+     *
+     * @return bool True if the operation was successful
+     * @throws \Exception If the clear operation fails
+     */
+    public function clearEventMessages(): bool
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->delete($this->getTableName());
+            $qb->executeStatement();
+            return true;
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to clear event messages: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
 } 
\ No newline at end of file
diff --git a/lib/Db/EventSubscription.php b/lib/Db/EventSubscription.php
index 684a867c..87996524 100644
--- a/lib/Db/EventSubscription.php
+++ b/lib/Db/EventSubscription.php
@@ -45,6 +45,8 @@ class EventSubscription extends Entity implements JsonSerializable
     protected ?string $userId = null;
     protected ?DateTime $created = null;
     protected ?DateTime $updated = null;
+    protected ?DateTime $expires = null;
+    protected ?int $size = null;
 
     /**
      * Get the event types to subscribe to
@@ -105,6 +107,8 @@ public function __construct() {
         $this->addType('userId', 'string');
         $this->addType('created', 'datetime');
         $this->addType('updated', 'datetime');
+        $this->addType('expires', 'datetime');
+        $this->addType('size', 'integer');
     }
 
     /**
@@ -169,7 +173,9 @@ public function jsonSerialize(): array
             'status' => $this->status,
             'userId' => $this->userId,
             'created' => isset($this->created) ? $this->created->format('c') : null,
-            'updated' => isset($this->updated) ? $this->updated->format('c') : null
+            'updated' => isset($this->updated) ? $this->updated->format('c') : null,
+            'expires' => isset($this->expires) ? $this->expires->format('c') : null,
+            'size' => $this->size
         ];
     }
 }
diff --git a/lib/Db/EventSubscriptionMapper.php b/lib/Db/EventSubscriptionMapper.php
index e2989a1c..aa8406d1 100644
--- a/lib/Db/EventSubscriptionMapper.php
+++ b/lib/Db/EventSubscriptionMapper.php
@@ -127,4 +127,119 @@ public function updateFromArray(int $id, array $data): EventSubscription
 
         return $this->update($obj);
     }
+
+    /**
+     * Apply filters to a query builder.
+     *
+     * @param \OCP\DB\QueryBuilder\IQueryBuilder $qb The query builder to apply filters to
+     * @param array $filters The filters to apply
+     * @return void
+     */
+    private function applyFilters(\OCP\DB\QueryBuilder\IQueryBuilder $qb, array $filters): void
+    {
+        foreach ($filters as $filter => $value) {
+            if ($value === 'IS NOT NULL') {
+                $qb->andWhere($qb->expr()->isNotNull($filter));
+            } elseif ($value === 'IS NULL') {
+                $qb->andWhere($qb->expr()->isNull($filter));
+            } elseif (is_array($value)) {
+                // Handle array values like ['IS NULL', ''] or ['<', 'NOW()']
+                $conditions = [];
+                foreach ($value as $val) {
+                    if ($val === 'IS NULL') {
+                        $conditions[] = $qb->expr()->isNull($filter);
+                    } elseif ($val === 'IS NOT NULL') {
+                        $conditions[] = $qb->expr()->isNotNull($filter);
+                    } elseif ($val === 'NOW()') {
+                        $conditions[] = $qb->expr()->lt($filter, $qb->createFunction('NOW()'));
+                    } else {
+                        $conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+                    }
+                }
+                if (!empty($conditions)) {
+                    $qb->andWhere($qb->expr()->orX(...$conditions));
+                }
+            } else {
+                $qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+            }
+        }
+    }
+
+    /**
+     * Count event subscriptions with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the count query
+     * @return int The number of event subscriptions matching the filters
+     * @throws \Exception If the count query fails
+     */
+    public function count(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COUNT(*)'))
+               ->from($this->getTableName());
+
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to count event subscriptions: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Calculate total size of event subscriptions with optional filters.
+     *
+     * @param array $filters Optional filters to apply to the size calculation
+     * @return int The total size in bytes of event subscriptions matching the filters
+     * @throws \Exception If the size calculation fails
+     */
+    public function size(array $filters = []): int
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
+               ->from($this->getTableName());
+
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
+
+            $result = $qb->executeQuery();
+            return (int) $result->fetchOne();
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to calculate event subscriptions size: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
+
+    /**
+     * Clear all event subscriptions (delete all records).
+     *
+     * @return bool True if the operation was successful
+     * @throws \Exception If the clear operation fails
+     */
+    public function clearEventSubscriptions(): bool
+    {
+        try {
+            $qb = $this->db->getQueryBuilder();
+            $qb->delete($this->getTableName());
+            $qb->executeStatement();
+            return true;
+        } catch (\Exception $e) {
+            \OC::$server->getLogger()->error('Failed to clear event subscriptions: ' . $e->getMessage(), [
+                'app' => 'openconnector',
+                'exception' => $e
+            ]);
+            throw $e;
+        }
+    }
 }
diff --git a/lib/Db/JobMapper.php b/lib/Db/JobMapper.php
index c97a5472..8cfb1994 100644
--- a/lib/Db/JobMapper.php
+++ b/lib/Db/JobMapper.php
@@ -331,6 +331,43 @@ public function findRunnable(): array
         return $this->findEntities(query: $qb);
     }
 
+    /**
+     * Apply filters to a query builder.
+     *
+     * @param \OCP\DB\QueryBuilder\IQueryBuilder $qb The query builder to apply filters to
+     * @param array $filters The filters to apply
+     * @return void
+     */
+    private function applyFilters(\OCP\DB\QueryBuilder\IQueryBuilder $qb, array $filters): void
+    {
+        foreach ($filters as $filter => $value) {
+            if ($value === 'IS NOT NULL') {
+                $qb->andWhere($qb->expr()->isNotNull($filter));
+            } elseif ($value === 'IS NULL') {
+                $qb->andWhere($qb->expr()->isNull($filter));
+            } elseif (is_array($value)) {
+                // Handle array values like ['IS NULL', ''] or ['<', 'NOW()']
+                $conditions = [];
+                foreach ($value as $val) {
+                    if ($val === 'IS NULL') {
+                        $conditions[] = $qb->expr()->isNull($filter);
+                    } elseif ($val === 'IS NOT NULL') {
+                        $conditions[] = $qb->expr()->isNotNull($filter);
+                    } elseif ($val === 'NOW()') {
+                        $conditions[] = $qb->expr()->lt($filter, $qb->createFunction('NOW()'));
+                    } else {
+                        $conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+                    }
+                }
+                if (!empty($conditions)) {
+                    $qb->andWhere($qb->expr()->orX(...$conditions));
+                }
+            } else {
+                $qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+            }
+        }
+    }
+
     /**
      * Count jobs with optional filters.
      *
@@ -345,14 +382,8 @@ public function count(array $filters = []): int
             $qb->select($qb->createFunction('COUNT(*)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
@@ -379,14 +410,8 @@ public function size(array $filters = []): int
             $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
diff --git a/lib/Db/MappingMapper.php b/lib/Db/MappingMapper.php
index edf68fd8..9af28ec2 100644
--- a/lib/Db/MappingMapper.php
+++ b/lib/Db/MappingMapper.php
@@ -241,6 +241,43 @@ public function getSlugToIdMap(): array
         return $mappings;
     }
 
+    /**
+     * Apply filters to a query builder.
+     *
+     * @param \OCP\DB\QueryBuilder\IQueryBuilder $qb The query builder to apply filters to
+     * @param array $filters The filters to apply
+     * @return void
+     */
+    private function applyFilters(\OCP\DB\QueryBuilder\IQueryBuilder $qb, array $filters): void
+    {
+        foreach ($filters as $filter => $value) {
+            if ($value === 'IS NOT NULL') {
+                $qb->andWhere($qb->expr()->isNotNull($filter));
+            } elseif ($value === 'IS NULL') {
+                $qb->andWhere($qb->expr()->isNull($filter));
+            } elseif (is_array($value)) {
+                // Handle array values like ['IS NULL', ''] or ['<', 'NOW()']
+                $conditions = [];
+                foreach ($value as $val) {
+                    if ($val === 'IS NULL') {
+                        $conditions[] = $qb->expr()->isNull($filter);
+                    } elseif ($val === 'IS NOT NULL') {
+                        $conditions[] = $qb->expr()->isNotNull($filter);
+                    } elseif ($val === 'NOW()') {
+                        $conditions[] = $qb->expr()->lt($filter, $qb->createFunction('NOW()'));
+                    } else {
+                        $conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+                    }
+                }
+                if (!empty($conditions)) {
+                    $qb->andWhere($qb->expr()->orX(...$conditions));
+                }
+            } else {
+                $qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+            }
+        }
+    }
+
     /**
      * Count mappings with optional filters.
      *
@@ -255,14 +292,8 @@ public function count(array $filters = []): int
             $qb->select($qb->createFunction('COUNT(*)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
@@ -289,14 +320,8 @@ public function size(array $filters = []): int
             $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
diff --git a/lib/Db/RuleMapper.php b/lib/Db/RuleMapper.php
index fdcecd66..579784b5 100644
--- a/lib/Db/RuleMapper.php
+++ b/lib/Db/RuleMapper.php
@@ -314,6 +314,43 @@ public function getSlugToIdMap(): array
 		return $map;
 	}
 
+    /**
+     * Apply filters to a query builder.
+     *
+     * @param \OCP\DB\QueryBuilder\IQueryBuilder $qb The query builder to apply filters to
+     * @param array $filters The filters to apply
+     * @return void
+     */
+    private function applyFilters(\OCP\DB\QueryBuilder\IQueryBuilder $qb, array $filters): void
+    {
+        foreach ($filters as $filter => $value) {
+            if ($value === 'IS NOT NULL') {
+                $qb->andWhere($qb->expr()->isNotNull($filter));
+            } elseif ($value === 'IS NULL') {
+                $qb->andWhere($qb->expr()->isNull($filter));
+            } elseif (is_array($value)) {
+                // Handle array values like ['IS NULL', ''] or ['<', 'NOW()']
+                $conditions = [];
+                foreach ($value as $val) {
+                    if ($val === 'IS NULL') {
+                        $conditions[] = $qb->expr()->isNull($filter);
+                    } elseif ($val === 'IS NOT NULL') {
+                        $conditions[] = $qb->expr()->isNotNull($filter);
+                    } elseif ($val === 'NOW()') {
+                        $conditions[] = $qb->expr()->lt($filter, $qb->createFunction('NOW()'));
+                    } else {
+                        $conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+                    }
+                }
+                if (!empty($conditions)) {
+                    $qb->andWhere($qb->expr()->orX(...$conditions));
+                }
+            } else {
+                $qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+            }
+        }
+    }
+
     /**
      * Count rules with optional filters.
      *
@@ -328,14 +365,8 @@ public function count(array $filters = []): int
             $qb->select($qb->createFunction('COUNT(*)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
@@ -362,14 +393,8 @@ public function size(array $filters = []): int
             $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
diff --git a/lib/Db/SourceMapper.php b/lib/Db/SourceMapper.php
index 1e60b5b2..0a997b48 100644
--- a/lib/Db/SourceMapper.php
+++ b/lib/Db/SourceMapper.php
@@ -269,6 +269,43 @@ public function getSlugToIdMap(): array
         return $mappings;
     }
 
+    /**
+     * Apply filters to a query builder.
+     *
+     * @param \OCP\DB\QueryBuilder\IQueryBuilder $qb The query builder to apply filters to
+     * @param array $filters The filters to apply
+     * @return void
+     */
+    private function applyFilters(\OCP\DB\QueryBuilder\IQueryBuilder $qb, array $filters): void
+    {
+        foreach ($filters as $filter => $value) {
+            if ($value === 'IS NOT NULL') {
+                $qb->andWhere($qb->expr()->isNotNull($filter));
+            } elseif ($value === 'IS NULL') {
+                $qb->andWhere($qb->expr()->isNull($filter));
+            } elseif (is_array($value)) {
+                // Handle array values like ['IS NULL', ''] or ['<', 'NOW()']
+                $conditions = [];
+                foreach ($value as $val) {
+                    if ($val === 'IS NULL') {
+                        $conditions[] = $qb->expr()->isNull($filter);
+                    } elseif ($val === 'IS NOT NULL') {
+                        $conditions[] = $qb->expr()->isNotNull($filter);
+                    } elseif ($val === 'NOW()') {
+                        $conditions[] = $qb->expr()->lt($filter, $qb->createFunction('NOW()'));
+                    } else {
+                        $conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+                    }
+                }
+                if (!empty($conditions)) {
+                    $qb->andWhere($qb->expr()->orX(...$conditions));
+                }
+            } else {
+                $qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+            }
+        }
+    }
+
     /**
      * Count sources with optional filters.
      *
@@ -283,14 +320,8 @@ public function count(array $filters = []): int
             $qb->select($qb->createFunction('COUNT(*)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
@@ -317,14 +348,8 @@ public function size(array $filters = []): int
             $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
diff --git a/lib/Db/SynchronizationContractMapper.php b/lib/Db/SynchronizationContractMapper.php
index 5535b0ac..cd494b85 100644
--- a/lib/Db/SynchronizationContractMapper.php
+++ b/lib/Db/SynchronizationContractMapper.php
@@ -498,6 +498,43 @@ public function handleObjectRemoval(string $objectIdentifier): array
         }
     }
 
+    /**
+     * Apply filters to a query builder.
+     *
+     * @param \OCP\DB\QueryBuilder\IQueryBuilder $qb The query builder to apply filters to
+     * @param array $filters The filters to apply
+     * @return void
+     */
+    private function applyFilters(\OCP\DB\QueryBuilder\IQueryBuilder $qb, array $filters): void
+    {
+        foreach ($filters as $filter => $value) {
+            if ($value === 'IS NOT NULL') {
+                $qb->andWhere($qb->expr()->isNotNull($filter));
+            } elseif ($value === 'IS NULL') {
+                $qb->andWhere($qb->expr()->isNull($filter));
+            } elseif (is_array($value)) {
+                // Handle array values like ['IS NULL', ''] or ['<', 'NOW()']
+                $conditions = [];
+                foreach ($value as $val) {
+                    if ($val === 'IS NULL') {
+                        $conditions[] = $qb->expr()->isNull($filter);
+                    } elseif ($val === 'IS NOT NULL') {
+                        $conditions[] = $qb->expr()->isNotNull($filter);
+                    } elseif ($val === 'NOW()') {
+                        $conditions[] = $qb->expr()->lt($filter, $qb->createFunction('NOW()'));
+                    } else {
+                        $conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+                    }
+                }
+                if (!empty($conditions)) {
+                    $qb->andWhere($qb->expr()->orX(...$conditions));
+                }
+            } else {
+                $qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+            }
+        }
+    }
+
     /**
      * Count synchronization contracts with optional filters.
      *
@@ -512,14 +549,8 @@ public function count(array $filters = []): int
             $qb->select($qb->createFunction('COUNT(*)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
@@ -546,14 +577,8 @@ public function size(array $filters = []): int
             $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
diff --git a/lib/Db/SynchronizationMapper.php b/lib/Db/SynchronizationMapper.php
index db17ec8f..2442eb8b 100644
--- a/lib/Db/SynchronizationMapper.php
+++ b/lib/Db/SynchronizationMapper.php
@@ -322,6 +322,43 @@ public function getSlugToIdMap(): array
         return $mappings;
     }
 
+    /**
+     * Apply filters to a query builder.
+     *
+     * @param \OCP\DB\QueryBuilder\IQueryBuilder $qb The query builder to apply filters to
+     * @param array $filters The filters to apply
+     * @return void
+     */
+    private function applyFilters(\OCP\DB\QueryBuilder\IQueryBuilder $qb, array $filters): void
+    {
+        foreach ($filters as $filter => $value) {
+            if ($value === 'IS NOT NULL') {
+                $qb->andWhere($qb->expr()->isNotNull($filter));
+            } elseif ($value === 'IS NULL') {
+                $qb->andWhere($qb->expr()->isNull($filter));
+            } elseif (is_array($value)) {
+                // Handle array values like ['IS NULL', ''] or ['<', 'NOW()']
+                $conditions = [];
+                foreach ($value as $val) {
+                    if ($val === 'IS NULL') {
+                        $conditions[] = $qb->expr()->isNull($filter);
+                    } elseif ($val === 'IS NOT NULL') {
+                        $conditions[] = $qb->expr()->isNotNull($filter);
+                    } elseif ($val === 'NOW()') {
+                        $conditions[] = $qb->expr()->lt($filter, $qb->createFunction('NOW()'));
+                    } else {
+                        $conditions[] = $qb->expr()->eq($filter, $qb->createNamedParameter($val));
+                    }
+                }
+                if (!empty($conditions)) {
+                    $qb->andWhere($qb->expr()->orX(...$conditions));
+                }
+            } else {
+                $qb->andWhere($qb->expr()->eq($filter, $qb->createNamedParameter($value)));
+            }
+        }
+    }
+
     /**
      * Count synchronizations with optional filters.
      *
@@ -336,14 +373,8 @@ public function count(array $filters = []): int
             $qb->select($qb->createFunction('COUNT(*)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
@@ -370,14 +401,8 @@ public function size(array $filters = []): int
             $qb->select($qb->createFunction('COALESCE(SUM(size), 0)'))
                ->from($this->getTableName());
 
-            // Apply filters if provided
-            if (!empty($filters['withoutExpiry']) && $filters['withoutExpiry'] === true) {
-                $qb->where($qb->expr()->isNull('expires'));
-            }
-
-            if (!empty($filters['expired']) && $filters['expired'] === true) {
-                $qb->where($qb->expr()->lt('expires', $qb->createNamedParameter(new \DateTime(), 'datetime')));
-            }
+            // Apply filters using the helper method
+            $this->applyFilters($qb, $filters);
 
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
diff --git a/lib/Service/SettingsService.php b/lib/Service/SettingsService.php
index 5202e582..4e0f6746 100644
--- a/lib/Service/SettingsService.php
+++ b/lib/Service/SettingsService.php
@@ -466,68 +466,68 @@ public function getStats(): array
             ];
 
             // Count log warnings (logs without expiry date)
-            $stats['warnings']['callLogsWithoutExpiry'] = $this->callLogMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['callLogsWithoutExpirySize'] = $this->callLogMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['callLogsWithoutExpiry'] = $this->callLogMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['callLogsWithoutExpirySize'] = $this->callLogMapper->size(['expires' => ['IS NULL', '']]);
 
-            $stats['warnings']['jobLogsWithoutExpiry'] = $this->jobLogMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['jobLogsWithoutExpirySize'] = $this->jobLogMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['jobLogsWithoutExpiry'] = $this->jobLogMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['jobLogsWithoutExpirySize'] = $this->jobLogMapper->size(['expires' => ['IS NULL', '']]);
 
-            $stats['warnings']['syncLogsWithoutExpiry'] = $this->synchronizationLogMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['syncLogsWithoutExpirySize'] = $this->synchronizationLogMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['syncLogsWithoutExpiry'] = $this->synchronizationLogMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['syncLogsWithoutExpirySize'] = $this->synchronizationLogMapper->size(['expires' => ['IS NULL', '']]);
 
-            $stats['warnings']['contractLogsWithoutExpiry'] = $this->synchronizationContractLogMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['contractLogsWithoutExpirySize'] = $this->synchronizationContractLogMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['contractLogsWithoutExpiry'] = $this->synchronizationContractLogMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['contractLogsWithoutExpirySize'] = $this->synchronizationContractLogMapper->size(['expires' => ['IS NULL', '']]);
 
             // Count entity warnings (entities without expiry date)
-            $stats['warnings']['sourcesWithoutExpiry'] = $this->sourceMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['sourcesWithoutExpirySize'] = $this->sourceMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['sourcesWithoutExpiry'] = $this->sourceMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['sourcesWithoutExpirySize'] = $this->sourceMapper->size(['expires' => ['IS NULL', '']]);
 
-            $stats['warnings']['synchronizationsWithoutExpiry'] = $this->synchronizationMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['synchronizationsWithoutExpirySize'] = $this->synchronizationMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['synchronizationsWithoutExpiry'] = $this->synchronizationMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['synchronizationsWithoutExpirySize'] = $this->synchronizationMapper->size(['expires' => ['IS NULL', '']]);
 
-            $stats['warnings']['mappingsWithoutExpiry'] = $this->mappingMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['mappingsWithoutExpirySize'] = $this->mappingMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['mappingsWithoutExpiry'] = $this->mappingMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['mappingsWithoutExpirySize'] = $this->mappingMapper->size(['expires' => ['IS NULL', '']]);
 
-            $stats['warnings']['jobsWithoutExpiry'] = $this->jobMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['jobsWithoutExpirySize'] = $this->jobMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['jobsWithoutExpiry'] = $this->jobMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['jobsWithoutExpirySize'] = $this->jobMapper->size(['expires' => ['IS NULL', '']]);
 
-            $stats['warnings']['rulesWithoutExpiry'] = $this->ruleMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['rulesWithoutExpirySize'] = $this->ruleMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['rulesWithoutExpiry'] = $this->ruleMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['rulesWithoutExpirySize'] = $this->ruleMapper->size(['expires' => ['IS NULL', '']]);
 
-            $stats['warnings']['contractsWithoutExpiry'] = $this->synchronizationContractMapper->count(['withoutExpiry' => true]);
-            $stats['warnings']['contractsWithoutExpirySize'] = $this->synchronizationContractMapper->size(['withoutExpiry' => true]);
+            $stats['warnings']['contractsWithoutExpiry'] = $this->synchronizationContractMapper->count(['expires' => ['IS NULL', '']]);
+            $stats['warnings']['contractsWithoutExpirySize'] = $this->synchronizationContractMapper->size(['expires' => ['IS NULL', '']]);
 
-            // Count expired logs
-            $stats['warnings']['expiredCallLogs'] = $this->callLogMapper->count(['expired' => true]);
-            $stats['warnings']['expiredCallLogsSize'] = $this->callLogMapper->size(['expired' => true]);
+            // Count expired logs using mapper methods
+            $stats['warnings']['expiredCallLogs'] = $this->callLogMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredCallLogsSize'] = $this->callLogMapper->size(['expires' => ['<', 'NOW()']]);
 
-            $stats['warnings']['expiredJobLogs'] = $this->jobLogMapper->count(['expired' => true]);
-            $stats['warnings']['expiredJobLogsSize'] = $this->jobLogMapper->size(['expired' => true]);
+            $stats['warnings']['expiredJobLogs'] = $this->jobLogMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredJobLogsSize'] = $this->jobLogMapper->size(['expires' => ['<', 'NOW()']]);
 
-            $stats['warnings']['expiredSyncLogs'] = $this->synchronizationLogMapper->count(['expired' => true]);
-            $stats['warnings']['expiredSyncLogsSize'] = $this->synchronizationLogMapper->size(['expired' => true]);
+            $stats['warnings']['expiredSyncLogs'] = $this->synchronizationLogMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredSyncLogsSize'] = $this->synchronizationLogMapper->size(['expires' => ['<', 'NOW()']]);
 
-            $stats['warnings']['expiredContractLogs'] = $this->synchronizationContractLogMapper->count(['expired' => true]);
-            $stats['warnings']['expiredContractLogsSize'] = $this->synchronizationContractLogMapper->size(['expired' => true]);
+            $stats['warnings']['expiredContractLogs'] = $this->synchronizationContractLogMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredContractLogsSize'] = $this->synchronizationContractLogMapper->size(['expires' => ['<', 'NOW()']]);
 
-            // Count expired entities
-            $stats['warnings']['expiredSources'] = $this->sourceMapper->count(['expired' => true]);
-            $stats['warnings']['expiredSourcesSize'] = $this->sourceMapper->size(['expired' => true]);
+            // Count expired entities using mapper methods
+            $stats['warnings']['expiredSources'] = $this->sourceMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredSourcesSize'] = $this->sourceMapper->size(['expires' => ['<', 'NOW()']]);
 
-            $stats['warnings']['expiredSynchronizations'] = $this->synchronizationMapper->count(['expired' => true]);
-            $stats['warnings']['expiredSynchronizationsSize'] = $this->synchronizationMapper->size(['expired' => true]);
+            $stats['warnings']['expiredSynchronizations'] = $this->synchronizationMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredSynchronizationsSize'] = $this->synchronizationMapper->size(['expires' => ['<', 'NOW()']]);
 
-            $stats['warnings']['expiredMappings'] = $this->mappingMapper->count(['expired' => true]);
-            $stats['warnings']['expiredMappingsSize'] = $this->mappingMapper->size(['expired' => true]);
+            $stats['warnings']['expiredMappings'] = $this->mappingMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredMappingsSize'] = $this->mappingMapper->size(['expires' => ['<', 'NOW()']]);
 
-            $stats['warnings']['expiredJobs'] = $this->jobMapper->count(['expired' => true]);
-            $stats['warnings']['expiredJobsSize'] = $this->jobMapper->size(['expired' => true]);
+            $stats['warnings']['expiredJobs'] = $this->jobMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredJobsSize'] = $this->jobMapper->size(['expires' => ['<', 'NOW()']]);
 
-            $stats['warnings']['expiredRules'] = $this->ruleMapper->count(['expired' => true]);
-            $stats['warnings']['expiredRulesSize'] = $this->ruleMapper->size(['expired' => true]);
+            $stats['warnings']['expiredRules'] = $this->ruleMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredRulesSize'] = $this->ruleMapper->size(['expires' => ['<', 'NOW()']]);
 
-            $stats['warnings']['expiredContracts'] = $this->synchronizationContractMapper->count(['expired' => true]);
-            $stats['warnings']['expiredContractsSize'] = $this->synchronizationContractMapper->size(['expired' => true]);
+            $stats['warnings']['expiredContracts'] = $this->synchronizationContractMapper->count(['expires' => ['<', 'NOW()']]);
+            $stats['warnings']['expiredContractsSize'] = $this->synchronizationContractMapper->size(['expires' => ['<', 'NOW()']']);
 
             // Count total logs and their sizes
             $stats['totals']['totalCallLogs'] = $this->callLogMapper->count();

From 9734dad081cf878e4c01b306d11c509d5b5664d8 Mon Sep 17 00:00:00 2001
From: Ruben van der Linde <ruben@conduction.nl>
Date: Wed, 13 Aug 2025 11:41:52 +0200
Subject: [PATCH 6/8] Refactor loging and constructors

---
 lib/Db/CallLogMapper.php                      |  16 +-
 lib/Db/EndpointMapper.php                     |  18 +-
 lib/Db/EventMessageMapper.php                 |  18 +-
 lib/Db/EventSubscriptionMapper.php            |  18 +-
 lib/Db/JobLogMapper.php                       |  16 +-
 lib/Db/JobMapper.php                          |  18 +-
 lib/Db/MappingMapper.php                      |  18 +-
 lib/Db/RuleMapper.php                         |  18 +-
 lib/Db/SourceMapper.php                       |  18 +-
 lib/Db/SynchronizationContractLogMapper.php   |  16 +-
 lib/Db/SynchronizationContractMapper.php      |  18 +-
 lib/Db/SynchronizationLogMapper.php           |  16 +-
 lib/Db/SynchronizationMapper.php              |  18 +-
 lib/Service/AuthenticationService.php         |   1 +
 lib/Service/ConfigurationService.php          |  66 +-------
 lib/Service/JobService.php                    |  56 +------
 lib/Service/OrganisationService.php           |  60 +------
 lib/Service/SecurityService.php               |  16 +-
 lib/Service/SettingsService.php               |  11 +-
 lib/Service/SynchronizationService.php        |  88 ++++++++--
 website/docs/logging-migration-nextcloud31.md | 157 ++++++++++++++++++
 21 files changed, 459 insertions(+), 222 deletions(-)
 create mode 100644 website/docs/logging-migration-nextcloud31.md

diff --git a/lib/Db/CallLogMapper.php b/lib/Db/CallLogMapper.php
index eb971d24..47cbea1f 100644
--- a/lib/Db/CallLogMapper.php
+++ b/lib/Db/CallLogMapper.php
@@ -5,11 +5,13 @@
 use DateInterval;
 use DatePeriod;
 use DateTime;
+use OC\Server;
 use OCP\AppFramework\Db\MultipleObjectsReturnedException;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\Exception;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 class CallLogMapper extends QBMapper
@@ -19,6 +21,16 @@ public function __construct(IDBConnection $db)
         parent::__construct($db, 'openconnector_call_logs');
     }
 
+    /**
+     * Get the logger using lazy resolution
+     *
+     * @return LoggerInterface The logger instance
+     */
+    private function getLogger(): LoggerInterface
+    {
+        return Server::get(LoggerInterface::class);
+    }
+
     public function find(int $id): CallLog
     {
         $qb = $this->db->getQueryBuilder();
@@ -125,7 +137,7 @@ public function clearLogs(): bool
             return $result > 0;
         } catch (\Exception $e) {
             // Log the error for debugging purposes
-            \OC::$server->getLogger()->error('Failed to clear expired call logs: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear expired call logs: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -526,7 +538,7 @@ public function setExpiryDate(int $retentionMs): int
 			return $qb->executeStatement();
 		} catch (\Exception $e) {
 			// Log the error for debugging purposes
-			\OC::$server->getLogger()->error('Failed to set expiry dates for call logs: ' . $e->getMessage(), [
+			$this->getLogger()->error('Failed to set expiry dates for call logs: ' . $e->getMessage(), [
 				'app' => 'openconnector',
 				'exception' => $e
 			]);
diff --git a/lib/Db/EndpointMapper.php b/lib/Db/EndpointMapper.php
index 91b1e4d5..d6ab0e90 100644
--- a/lib/Db/EndpointMapper.php
+++ b/lib/Db/EndpointMapper.php
@@ -3,10 +3,12 @@
 namespace OCA\OpenConnector\Db;
 
 use OCA\OpenConnector\Db\Endpoint;
+use OC\Server;
 use OCP\AppFramework\Db\Entity;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 /**
@@ -19,6 +21,16 @@ public function __construct(IDBConnection $db)
 		parent::__construct($db, 'openconnector_endpoints');
 	}
 
+	/**
+	 * Get the logger using lazy resolution
+	 *
+	 * @return LoggerInterface The logger instance
+	 */
+	private function getLogger(): LoggerInterface
+	{
+		return Server::get(LoggerInterface::class);
+	}
+
 	/**
 	 * Find an endpoint by ID, UUID, or slug
 	 *
@@ -416,7 +428,7 @@ public function count(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to count endpoints: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to count endpoints: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -444,7 +456,7 @@ public function size(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to calculate endpoints size: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to calculate endpoints size: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -466,7 +478,7 @@ public function clearEndpoints(): bool
             $qb->executeStatement();
             return true;
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to clear endpoints: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear endpoints: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
diff --git a/lib/Db/EventMessageMapper.php b/lib/Db/EventMessageMapper.php
index ea144b03..d299bade 100644
--- a/lib/Db/EventMessageMapper.php
+++ b/lib/Db/EventMessageMapper.php
@@ -3,9 +3,11 @@
 namespace OCA\OpenConnector\Db;
 
 use DateTime;
+use OC\Server;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 /**
@@ -27,6 +29,16 @@ public function __construct(IDBConnection $db)
         parent::__construct($db, 'openconnector_event_messages');
     }
 
+    /**
+     * Get the logger using lazy resolution
+     *
+     * @return LoggerInterface The logger instance
+     */
+    private function getLogger(): LoggerInterface
+    {
+        return Server::get(LoggerInterface::class);
+    }
+
     /**
      * Find a message by ID
      *
@@ -236,7 +248,7 @@ public function count(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to count event messages: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to count event messages: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -264,7 +276,7 @@ public function size(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to calculate event messages size: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to calculate event messages size: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -286,7 +298,7 @@ public function clearEventMessages(): bool
             $qb->executeStatement();
             return true;
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to clear event messages: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear event messages: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
diff --git a/lib/Db/EventSubscriptionMapper.php b/lib/Db/EventSubscriptionMapper.php
index aa8406d1..38820e2a 100644
--- a/lib/Db/EventSubscriptionMapper.php
+++ b/lib/Db/EventSubscriptionMapper.php
@@ -2,9 +2,11 @@
 
 namespace OCA\OpenConnector\Db;
 
+use OC\Server;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 /**
@@ -26,6 +28,16 @@ public function __construct(IDBConnection $db)
         parent::__construct($db, 'openconnector_event_subscriptions');
     }
 
+    /**
+     * Get the logger using lazy resolution
+     *
+     * @return LoggerInterface The logger instance
+     */
+    private function getLogger(): LoggerInterface
+    {
+        return Server::get(LoggerInterface::class);
+    }
+
     /**
      * Find a subscription by ID
      *
@@ -185,7 +197,7 @@ public function count(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to count event subscriptions: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to count event subscriptions: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -213,7 +225,7 @@ public function size(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to calculate event subscriptions size: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to calculate event subscriptions size: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -235,7 +247,7 @@ public function clearEventSubscriptions(): bool
             $qb->executeStatement();
             return true;
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to clear event subscriptions: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear event subscriptions: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
diff --git a/lib/Db/JobLogMapper.php b/lib/Db/JobLogMapper.php
index e7536d14..da1bb81c 100644
--- a/lib/Db/JobLogMapper.php
+++ b/lib/Db/JobLogMapper.php
@@ -5,11 +5,13 @@
 use DateInterval;
 use DatePeriod;
 use DateTime;
+use OC\Server;
 use OCP\AppFramework\Db\MultipleObjectsReturnedException;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\Exception;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 class JobLogMapper extends QBMapper
@@ -19,6 +21,16 @@ public function __construct(IDBConnection $db)
         parent::__construct($db, 'openconnector_job_logs');
     }
 
+    /**
+     * Get the logger using lazy resolution
+     *
+     * @return LoggerInterface The logger instance
+     */
+    private function getLogger(): LoggerInterface
+    {
+        return Server::get(LoggerInterface::class);
+    }
+
     public function find(int $id): JobLog
     {
         $qb = $this->db->getQueryBuilder();
@@ -264,7 +276,7 @@ public function clearLogs(): bool
             return $result > 0;
         } catch (\Exception $e) {
             // Log the error for debugging purposes
-            \OC::$server->getLogger()->error('Failed to clear expired job logs: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear expired job logs: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -487,7 +499,7 @@ public function setExpiryDate(int $retentionMs): int
 			return $qb->executeStatement();
 		} catch (\Exception $e) {
 			// Log the error for debugging purposes
-			\OC::$server->getLogger()->error('Failed to set expiry dates for job logs: ' . $e->getMessage(), [
+			$this->getLogger()->error('Failed to set expiry dates for job logs: ' . $e->getMessage(), [
 				'app' => 'openconnector',
 				'exception' => $e
 			]);
diff --git a/lib/Db/JobMapper.php b/lib/Db/JobMapper.php
index 8cfb1994..0cc8dd5f 100644
--- a/lib/Db/JobMapper.php
+++ b/lib/Db/JobMapper.php
@@ -3,10 +3,12 @@
 namespace OCA\OpenConnector\Db;
 
 use OCA\OpenConnector\Db\Job;
+use OC\Server;
 use OCP\AppFramework\Db\Entity;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 class JobMapper extends QBMapper
@@ -16,6 +18,16 @@ public function __construct(IDBConnection $db)
 		parent::__construct($db, 'openconnector_jobs');
 	}
 
+	/**
+	 * Get the logger using lazy resolution
+	 *
+	 * @return LoggerInterface The logger instance
+	 */
+	private function getLogger(): LoggerInterface
+	{
+		return Server::get(LoggerInterface::class);
+	}
+
 	/**
 	 * Find a job by ID, UUID, or slug
 	 *
@@ -388,7 +400,7 @@ public function count(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to count jobs: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to count jobs: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -416,7 +428,7 @@ public function size(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to calculate jobs size: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to calculate jobs size: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -438,7 +450,7 @@ public function clearJobs(): bool
             $qb->executeStatement();
             return true;
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to clear jobs: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear jobs: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
diff --git a/lib/Db/MappingMapper.php b/lib/Db/MappingMapper.php
index 9af28ec2..d5fd8e85 100644
--- a/lib/Db/MappingMapper.php
+++ b/lib/Db/MappingMapper.php
@@ -3,10 +3,12 @@
 namespace OCA\OpenConnector\Db;
 
 use OCA\OpenConnector\Db\Mapping;
+use OC\Server;
 use OCP\AppFramework\Db\Entity;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 class MappingMapper extends QBMapper
@@ -16,6 +18,16 @@ public function __construct(IDBConnection $db)
 		parent::__construct($db, 'openconnector_mappings');
 	}
 
+	/**
+	 * Get the logger using lazy resolution
+	 *
+	 * @return LoggerInterface The logger instance
+	 */
+	private function getLogger(): LoggerInterface
+	{
+		return Server::get(LoggerInterface::class);
+	}
+
 	/**
 	 * Find a mapping by ID, UUID, or slug
 	 *
@@ -298,7 +310,7 @@ public function count(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to count mappings: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to count mappings: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -326,7 +338,7 @@ public function size(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to calculate mappings size: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to calculate mappings size: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -348,7 +360,7 @@ public function clearMappings(): bool
             $qb->executeStatement();
             return true;
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to clear mappings: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear mappings: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
diff --git a/lib/Db/RuleMapper.php b/lib/Db/RuleMapper.php
index 579784b5..ffdf6ae7 100644
--- a/lib/Db/RuleMapper.php
+++ b/lib/Db/RuleMapper.php
@@ -2,10 +2,12 @@
 
 namespace OCA\OpenConnector\Db;
 
+use OC\Server;
 use OCP\AppFramework\Db\Entity;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 /**
@@ -25,6 +27,16 @@ public function __construct(IDBConnection $db)
 		parent::__construct($db, 'openconnector_rules');
 	}
 
+	/**
+	 * Get the logger using lazy resolution
+	 *
+	 * @return LoggerInterface The logger instance
+	 */
+	private function getLogger(): LoggerInterface
+	{
+		return Server::get(LoggerInterface::class);
+	}
+
 	/**
 	 * Find a rule by ID, UUID, or slug
 	 *
@@ -371,7 +383,7 @@ public function count(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to count rules: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to count rules: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -399,7 +411,7 @@ public function size(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to calculate rules size: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to calculate rules size: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -421,7 +433,7 @@ public function clearRules(): bool
             $qb->executeStatement();
             return true;
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to clear rules: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear rules: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
diff --git a/lib/Db/SourceMapper.php b/lib/Db/SourceMapper.php
index 0a997b48..56c02673 100644
--- a/lib/Db/SourceMapper.php
+++ b/lib/Db/SourceMapper.php
@@ -3,10 +3,12 @@
 namespace OCA\OpenConnector\Db;
 
 use OCA\OpenConnector\Db\Source;
+use OC\Server;
 use OCP\AppFramework\Db\Entity;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 class SourceMapper extends QBMapper
@@ -16,6 +18,16 @@ public function __construct(IDBConnection $db)
 		parent::__construct($db, 'openconnector_sources');
 	}
 
+	/**
+	 * Get the logger using lazy resolution
+	 *
+	 * @return LoggerInterface The logger instance
+	 */
+	private function getLogger(): LoggerInterface
+	{
+		return Server::get(LoggerInterface::class);
+	}
+
 	/**
 	 * Find a source by ID, UUID, or slug
 	 *
@@ -326,7 +338,7 @@ public function count(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to count sources: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to count sources: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -354,7 +366,7 @@ public function size(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to calculate sources size: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to calculate sources size: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -376,7 +388,7 @@ public function clearSources(): bool
             $qb->executeStatement();
             return true;
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to clear sources: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear sources: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
diff --git a/lib/Db/SynchronizationContractLogMapper.php b/lib/Db/SynchronizationContractLogMapper.php
index fb666503..1c21397a 100644
--- a/lib/Db/SynchronizationContractLogMapper.php
+++ b/lib/Db/SynchronizationContractLogMapper.php
@@ -6,6 +6,7 @@
 use DatePeriod;
 use DateTime;
 use OCA\OpenConnector\Db\SynchronizationContractLog;
+use OC\Server;
 use OCP\AppFramework\Db\Entity;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\Exception;
@@ -13,6 +14,7 @@
 use OCP\IDBConnection;
 use OCP\ISession;
 use OCP\IUserSession;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 use OCP\Session\Exceptions\SessionNotAvailableException;
 
@@ -31,6 +33,16 @@ public function __construct(
 		parent::__construct($db, 'openconnector_synchronization_contract_logs');
 	}
 
+	/**
+	 * Get the logger using lazy resolution
+	 *
+	 * @return LoggerInterface The logger instance
+	 */
+	private function getLogger(): LoggerInterface
+	{
+		return Server::get(LoggerInterface::class);
+	}
+
 	public function find(int $id): SynchronizationContractLog
 	{
 		$qb = $this->db->getQueryBuilder();
@@ -388,7 +400,7 @@ public function clearLogs(): bool
 			return $result > 0;
 		} catch (\Exception $e) {
 			// Log the error for debugging purposes
-			\OC::$server->getLogger()->error('Failed to clear expired synchronization contract logs: ' . $e->getMessage(), [
+			$this->getLogger()->error('Failed to clear expired synchronization contract logs: ' . $e->getMessage(), [
 				'app' => 'openconnector',
 				'exception' => $e
 			]);
@@ -433,7 +445,7 @@ public function setExpiryDate(int $retentionMs): int
 			return $qb->executeStatement();
 		} catch (\Exception $e) {
 			// Log the error for debugging purposes
-			\OC::$server->getLogger()->error('Failed to set expiry dates for synchronization contract logs: ' . $e->getMessage(), [
+			$this->getLogger()->error('Failed to set expiry dates for synchronization contract logs: ' . $e->getMessage(), [
 				'app' => 'openconnector',
 				'exception' => $e
 			]);
diff --git a/lib/Db/SynchronizationContractMapper.php b/lib/Db/SynchronizationContractMapper.php
index cd494b85..5f0c36af 100644
--- a/lib/Db/SynchronizationContractMapper.php
+++ b/lib/Db/SynchronizationContractMapper.php
@@ -3,12 +3,14 @@
 namespace OCA\OpenConnector\Db;
 
 use OCA\OpenConnector\Db\SynchronizationContract;
+use OC\Server;
 use OCP\AppFramework\Db\Entity;
 use OCP\AppFramework\Db\MultipleObjectsReturnedException;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\Exception;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 /**
  * Mapper class for SynchronizationContract entities
@@ -34,6 +36,16 @@ public function __construct(IDBConnection $db)
         parent::__construct($db, 'openconnector_synchronization_contracts');
     }
 
+    /**
+     * Get the logger using lazy resolution
+     *
+     * @return LoggerInterface The logger instance
+     */
+    private function getLogger(): LoggerInterface
+    {
+        return Server::get(LoggerInterface::class);
+    }
+
     /**
      * Find a synchronization contract by ID
      *
@@ -555,7 +567,7 @@ public function count(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to count synchronization contracts: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to count synchronization contracts: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -583,7 +595,7 @@ public function size(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to calculate synchronization contracts size: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to calculate synchronization contracts size: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -605,7 +617,7 @@ public function clearSynchronizationContracts(): bool
             $qb->executeStatement();
             return true;
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to clear synchronization contracts: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear synchronization contracts: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
diff --git a/lib/Db/SynchronizationLogMapper.php b/lib/Db/SynchronizationLogMapper.php
index b60a25bf..d728157e 100644
--- a/lib/Db/SynchronizationLogMapper.php
+++ b/lib/Db/SynchronizationLogMapper.php
@@ -3,12 +3,14 @@
 namespace OCA\OpenConnector\Db;
 
 use DateTime;
+use OC\Server;
 use OCP\AppFramework\Db\Entity;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
 use OCP\ISession;
 use OCP\IUserSession;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 use OCP\Session\Exceptions\SessionNotAvailableException;
 
@@ -22,6 +24,16 @@ public function __construct(
 		parent::__construct($db, 'openconnector_synchronization_logs');
 	}
 
+	/**
+	 * Get the logger using lazy resolution
+	 *
+	 * @return LoggerInterface The logger instance
+	 */
+	private function getLogger(): LoggerInterface
+	{
+		return Server::get(LoggerInterface::class);
+	}
+
 	public function find(int $id): SynchronizationLog
 	{
 		$qb = $this->db->getQueryBuilder();
@@ -363,7 +375,7 @@ public function clearLogs(): bool
 			return $result > 0;
 		} catch (\Exception $e) {
 			// Log the error for debugging purposes
-			\OC::$server->getLogger()->error('Failed to clear expired synchronization logs: ' . $e->getMessage(), [
+			$this->getLogger()->error('Failed to clear expired synchronization logs: ' . $e->getMessage(), [
 				'app' => 'openconnector',
 				'exception' => $e
 			]);
@@ -424,7 +436,7 @@ public function setExpiryDate(int $retentionMs): int
 			return $qb->executeStatement();
 		} catch (\Exception $e) {
 			// Log the error for debugging purposes
-			\OC::$server->getLogger()->error('Failed to set expiry dates for synchronization logs: ' . $e->getMessage(), [
+			$this->getLogger()->error('Failed to set expiry dates for synchronization logs: ' . $e->getMessage(), [
 				'app' => 'openconnector',
 				'exception' => $e
 			]);
diff --git a/lib/Db/SynchronizationMapper.php b/lib/Db/SynchronizationMapper.php
index 2442eb8b..be428244 100644
--- a/lib/Db/SynchronizationMapper.php
+++ b/lib/Db/SynchronizationMapper.php
@@ -3,10 +3,12 @@
 namespace OCA\OpenConnector\Db;
 
 use OCA\OpenConnector\Db\Synchronization;
+use OC\Server;
 use OCP\AppFramework\Db\Entity;
 use OCP\AppFramework\Db\QBMapper;
 use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCP\IDBConnection;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Uid\Uuid;
 
 class SynchronizationMapper extends QBMapper
@@ -16,6 +18,16 @@ public function __construct(IDBConnection $db)
 		parent::__construct($db, 'openconnector_synchronizations');
 	}
 
+	/**
+	 * Get the logger using lazy resolution
+	 *
+	 * @return LoggerInterface The logger instance
+	 */
+	private function getLogger(): LoggerInterface
+	{
+		return Server::get(LoggerInterface::class);
+	}
+
 	/**
 	 * Find a synchronization by ID, UUID, or slug
 	 *
@@ -379,7 +391,7 @@ public function count(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to count synchronizations: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to count synchronizations: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -407,7 +419,7 @@ public function size(array $filters = []): int
             $result = $qb->executeQuery();
             return (int) $result->fetchOne();
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to calculate synchronizations size: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to calculate synchronizations size: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
@@ -429,7 +441,7 @@ public function clearSynchronizations(): bool
             $qb->executeStatement();
             return true;
         } catch (\Exception $e) {
-            \OC::$server->getLogger()->error('Failed to clear synchronizations: ' . $e->getMessage(), [
+            $this->getLogger()->error('Failed to clear synchronizations: ' . $e->getMessage(), [
                 'app' => 'openconnector',
                 'exception' => $e
             ]);
diff --git a/lib/Service/AuthenticationService.php b/lib/Service/AuthenticationService.php
index f6048746..743ea68f 100644
--- a/lib/Service/AuthenticationService.php
+++ b/lib/Service/AuthenticationService.php
@@ -31,6 +31,7 @@
  */
 class AuthenticationService
 {
+	private Environment $twig;
 
 	public const REQUIRED_PARAMETERS_CLIENT_CREDENTIALS = [
 		'grant_type',
diff --git a/lib/Service/ConfigurationService.php b/lib/Service/ConfigurationService.php
index df9df7fe..5a469314 100644
--- a/lib/Service/ConfigurationService.php
+++ b/lib/Service/ConfigurationService.php
@@ -38,46 +38,6 @@
  */
 class ConfigurationService
 {
-    /**
-     * @var SourceMapper
-     */
-    private SourceMapper $sourceMapper;
-
-    /**
-     * @var EndpointMapper
-     */
-    private EndpointMapper $endpointMapper;
-
-    /**
-     * @var MappingMapper
-     */
-    private MappingMapper $mappingMapper;
-
-    /**
-     * @var RuleMapper
-     */
-    private RuleMapper $ruleMapper;
-
-    /**
-     * @var JobMapper
-     */
-    private JobMapper $jobMapper;
-
-    /**
-     * @var SynchronizationMapper
-     */
-    private SynchronizationMapper $synchronizationMapper;
-
-    /**
-     * @var RegisterMapper
-     */
-    private RegisterMapper $registerMapper;
-
-    /**
-     * @var SchemaMapper
-     */
-    private SchemaMapper $schemaMapper;
-
     /**
      * @var array<string,ConfigurationHandlerInterface>
      */
@@ -139,29 +99,21 @@ class ConfigurationService
      * @param RuleHandler $ruleHandler
      */
     public function __construct(
-        SourceMapper $sourceMapper,
-        EndpointMapper $endpointMapper,
-        MappingMapper $mappingMapper,
-        RuleMapper $ruleMapper,
-        JobMapper $jobMapper,
-        SynchronizationMapper $synchronizationMapper,
-        RegisterMapper $registerMapper,
-        SchemaMapper $schemaMapper,
+        private readonly SourceMapper $sourceMapper,
+        private readonly EndpointMapper $endpointMapper,
+        private readonly MappingMapper $mappingMapper,
+        private readonly RuleMapper $ruleMapper,
+        private readonly JobMapper $jobMapper,
+        private readonly SynchronizationMapper $synchronizationMapper,
+        private readonly RegisterMapper $registerMapper,
+        private readonly SchemaMapper $schemaMapper,
         EndpointHandler $endpointHandler,
         SynchronizationHandler $synchronizationHandler,
         MappingHandler $mappingHandler,
         JobHandler $jobHandler,
         SourceHandler $sourceHandler,
-        RuleHandler $ruleHandler
+        RuleHandler $ruleHandler,
     ) {
-        $this->sourceMapper = $sourceMapper;
-        $this->endpointMapper = $endpointMapper;
-        $this->mappingMapper = $mappingMapper;
-        $this->ruleMapper = $ruleMapper;
-        $this->jobMapper = $jobMapper;
-        $this->synchronizationMapper = $synchronizationMapper;
-        $this->registerMapper = $registerMapper;
-        $this->schemaMapper = $schemaMapper;
 
         // Register handlers
         $this->handlers['endpoint'] = $endpointHandler;
diff --git a/lib/Service/JobService.php b/lib/Service/JobService.php
index 54a50a47..52599929 100644
--- a/lib/Service/JobService.php
+++ b/lib/Service/JobService.php
@@ -44,41 +44,6 @@
  */
 class JobService
 {
-    /**
-     * Job list manager for background job operations
-     */
-    private readonly IJobList $jobList;
-
-    /**
-     * Job mapper for database operations
-     */
-    private readonly JobMapper $jobMapper;
-
-    /**
-     * Database connection for direct queries
-     */
-    private readonly IDBConnection $connection;
-
-    /**
-     * Job log mapper for logging operations
-     */
-    private readonly JobLogMapper $jobLogMapper;
-
-    /**
-     * Container interface for dependency injection
-     */
-    private readonly ContainerInterface $containerInterface;
-
-    /**
-     * User session manager
-     */
-    private readonly IUserSession $userSession;
-
-    /**
-     * User manager for user operations
-     */
-    private readonly IUserManager $userManager;
-
     /**
      * JobService constructor
      *
@@ -102,21 +67,14 @@ class JobService
      * @psalm-param IUserManager $userManager
      */
     public function __construct(
-        IJobList $jobList,
-        JobMapper $jobMapper,
-        IDBConnection $connection,
-        JobLogMapper $jobLogMapper,
-        ContainerInterface $containerInterface,
-        IUserSession $userSession,
-        IUserManager $userManager
+        private readonly IJobList $jobList,
+        private readonly JobMapper $jobMapper,
+        private readonly IDBConnection $connection,
+        private readonly JobLogMapper $jobLogMapper,
+        private readonly ContainerInterface $containerInterface,
+        private readonly IUserSession $userSession,
+        private readonly IUserManager $userManager,
     ) {
-        $this->jobList = $jobList;
-        $this->jobMapper = $jobMapper;
-        $this->connection = $connection;
-        $this->jobLogMapper = $jobLogMapper;
-        $this->containerInterface = $containerInterface;
-        $this->userSession = $userSession;
-        $this->userManager = $userManager;
     }
 
     /**
diff --git a/lib/Service/OrganisationService.php b/lib/Service/OrganisationService.php
index 4ff904b2..83e5bab8 100644
--- a/lib/Service/OrganisationService.php
+++ b/lib/Service/OrganisationService.php
@@ -61,48 +61,6 @@ class OrganisationService
      */
     private const APP_NAME = 'openconnector';
 
-    /**
-     * Organisation mapper for database operations
-     * 
-     * @var OrganisationMapper
-     */
-    private readonly OrganisationMapper $organisationMapper;
-
-    /**
-     * User session for getting current user
-     * 
-     * @var IUserSession
-     */
-    private readonly IUserSession $userSession;
-
-    /**
-     * Session interface for storing organisation data (cache only)
-     * 
-     * @var ISession
-     */
-    private readonly ISession $session;
-
-    /**
-     * Configuration interface for persistent user settings
-     * 
-     * @var IConfig
-     */
-    private readonly IConfig $config;
-
-    /**
-     * Group manager for accessing Nextcloud groups
-     * 
-     * @var IGroupManager
-     */
-    private readonly IGroupManager $groupManager;
-
-    /**
-     * Logger for debugging and error tracking
-     * 
-     * @var LoggerInterface
-     */
-    private readonly LoggerInterface $logger;
-
     /**
      * OrganisationService constructor
      * 
@@ -114,19 +72,13 @@ class OrganisationService
      * @param LoggerInterface $logger Logger service
      */
     public function __construct(
-        OrganisationMapper $organisationMapper,
-        IUserSession $userSession,
-        ISession $session,
-        IConfig $config,
-        IGroupManager $groupManager,
-        LoggerInterface $logger
+        private readonly OrganisationMapper $organisationMapper,
+        private readonly IUserSession $userSession,
+        private readonly ISession $session,
+        private readonly IConfig $config,
+        private readonly IGroupManager $groupManager,
+        private readonly LoggerInterface $logger,
     ) {
-        $this->organisationMapper = $organisationMapper;
-        $this->userSession = $userSession;
-        $this->session = $session;
-        $this->config = $config;
-        $this->groupManager = $groupManager;
-        $this->logger = $logger;
     }
 
     /**
diff --git a/lib/Service/SecurityService.php b/lib/Service/SecurityService.php
index 82d42645..f79608b9 100644
--- a/lib/Service/SecurityService.php
+++ b/lib/Service/SecurityService.php
@@ -40,19 +40,10 @@
 class SecurityService
 {
     /**
-     * Cache instance for storing rate limit data
-     *
-     * @var ICache
+     * Cache instance for storing rate limit data (created from factory)
      */
     private readonly ICache $cache;
 
-    /**
-     * Logger for security events
-     *
-     * @var LoggerInterface
-     */
-    private readonly LoggerInterface $logger;
-
     /**
      * Rate limiting configuration constants
      */
@@ -82,11 +73,10 @@ class SecurityService
      */
     public function __construct(
         ICacheFactory $cacheFactory,
-        LoggerInterface $logger
+        private readonly LoggerInterface $logger,
     ) {
-        // Create distributed cache for rate limiting data
+        // Create distributed cache for rate limiting data - can't be promoted due to method call
         $this->cache = $cacheFactory->createDistributed('openconnector_security');
-        $this->logger = $logger;
     }
 
     /**
diff --git a/lib/Service/SettingsService.php b/lib/Service/SettingsService.php
index 4e0f6746..421a670b 100644
--- a/lib/Service/SettingsService.php
+++ b/lib/Service/SettingsService.php
@@ -23,6 +23,7 @@
 use OCP\App\IAppManager;
 use Psr\Container\ContainerInterface;
 use OCP\AppFramework\Http\JSONResponse;
+use Psr\Log\LoggerInterface;
 use OC_App;
 use OCA\OpenConnector\AppInfo\Application;
 
@@ -85,6 +86,7 @@ class SettingsService
      * @param JobMapper                         $jobMapper                     Job mapper for database operations.
      * @param RuleMapper                        $ruleMapper                    Rule mapper for database operations.
      * @param SynchronizationContractMapper     $synchronizationContractMapper Synchronization contract mapper for database operations.
+     * @param LoggerInterface                   $logger                        PSR-3 logger instance for logging operations.
      */
     public function __construct(
         private readonly IAppConfig $config, 
@@ -100,7 +102,8 @@ public function __construct(
         private readonly MappingMapper $mappingMapper,
         private readonly JobMapper $jobMapper,
         private readonly RuleMapper $ruleMapper,
-        private readonly SynchronizationContractMapper $synchronizationContractMapper
+        private readonly SynchronizationContractMapper $synchronizationContractMapper,
+        private readonly LoggerInterface $logger
     ) {
         // Set the application name for identification and configuration purposes.
         $this->appName = 'openconnector';
@@ -347,7 +350,11 @@ public function rebaseObjectsAndLogs(): array
                 
             } catch (\Exception $e) {
                 $error = 'Failed to set expiry dates for logs: ' . $e->getMessage();
-                error_log('[SettingsService] ' . $error);
+                $this->logger->error('Failed to set expiry dates for logs: ' . $e->getMessage(), [
+                    'app' => 'openconnector',
+                    'service' => 'SettingsService',
+                    'exception' => $e
+                ]);
                 $results['errors'][] = $error;
             }
 
diff --git a/lib/Service/SynchronizationService.php b/lib/Service/SynchronizationService.php
index 41618371..db7069c8 100644
--- a/lib/Service/SynchronizationService.php
+++ b/lib/Service/SynchronizationService.php
@@ -31,6 +31,7 @@
 use OCP\Lock\LockedException;
 use Psr\Container\ContainerExceptionInterface;
 use Psr\Container\NotFoundExceptionInterface;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\HttpKernel\Exception\TooManyRequestsHttpException;
 use Symfony\Component\Uid\Uuid;
 use OCP\AppFramework\Db\DoesNotExistException;
@@ -99,6 +100,7 @@ public function __construct(
 		private readonly ObjectService   $objectService,
         private readonly StorageService  $storageService,
         private readonly RuleMapper      $ruleMapper,
+        private readonly LoggerInterface $logger,
 	)
 	{
 		$this->callService = $callService;
@@ -1055,10 +1057,20 @@ private function updateTargetOpenRegister(SynchronizationContract $synchronizati
 					try {
 						$deletedCount = $this->cleanupFilesFromAttachments($target->getUuid(), $targetObject['attachments']);
 						if ($deletedCount > 0) {
-							error_log("Cleaned up {$deletedCount} orphaned files for object {$target->getUuid()}");
+							$this->logger->info("Cleaned up {$deletedCount} orphaned files for object {$target->getUuid()}", [
+								'app' => 'openconnector',
+								'service' => 'SynchronizationService',
+								'deletedCount' => $deletedCount,
+								'objectUuid' => $target->getUuid()
+							]);
 						}
 					} catch (Exception $e) {
-						error_log("Failed to cleanup orphaned files for object {$target->getUuid()}: " . $e->getMessage());
+						$this->logger->error("Failed to cleanup orphaned files for object {$target->getUuid()}: " . $e->getMessage(), [
+							'app' => 'openconnector',
+							'service' => 'SynchronizationService',
+							'objectUuid' => $target->getUuid(),
+							'exception' => $e
+						]);
 					}
 				}
 
@@ -2500,7 +2512,13 @@ private function fetchFile(Source $source, string $endpoint, array $config, stri
 					$fileService->publishFile(object: $objectEntity, file: $filename);
 				} catch (Exception $e) {
 					// Log but don't fail the entire operation
-					error_log("Failed to publish file {$filename} for object {$objectId}: " . $e->getMessage());
+					$this->logger->warning("Failed to publish file {$filename} for object {$objectId}: " . $e->getMessage(), [
+						'app' => 'openconnector',
+						'service' => 'SynchronizationService',
+						'filename' => $filename,
+						'objectId' => $objectId,
+						'exception' => $e
+					]);
 				}
 			}
 		} catch (DoesNotExistException $exception) {
@@ -2517,7 +2535,13 @@ private function fetchFile(Source $source, string $endpoint, array $config, stri
 					$fileService->publishFile(object: $objectEntity, file: $filename);
 				} catch (Exception $e) {
 					// Log but don't fail the entire operation
-					error_log("Failed to publish file {$filename} for object {$objectId}: " . $e->getMessage());
+					$this->logger->warning("Failed to publish file {$filename} for object {$objectId}: " . $e->getMessage(), [
+						'app' => 'openconnector',
+						'service' => 'SynchronizationService',
+						'filename' => $filename,
+						'objectId' => $objectId,
+						'exception' => $e
+					]);
 				}
 			}
 		} catch (Exception $e) {
@@ -2750,7 +2774,11 @@ private function processFetchFileRule(Rule $rule, array $data, ?string $objectId
             $source = $this->sourceMapper->find($config['source']);
         } catch (Exception $e) {
             // Log error but don't block synchronization
-            error_log("Failed to find source for fetch file rule: " . $e->getMessage());
+            $this->logger->warning("Failed to find source for fetch file rule: " . $e->getMessage(), [
+                'app' => 'openconnector',
+                'service' => 'SynchronizationService',
+                'exception' => $e
+            ]);
             return $dataDot->jsonSerialize();
         }
 
@@ -2887,7 +2915,12 @@ private function executeAsyncFileFetching(Source $source, array $config, mixed $
             }
         } catch (Exception $e) {
             // Log error but don't throw - this is fire-and-forget
-            error_log("Async file fetching failed for rule {$ruleId}: " . $e->getMessage());
+            $this->logger->warning("Async file fetching failed for rule {$ruleId}: " . $e->getMessage(), [
+                'app' => 'openconnector',
+                'service' => 'SynchronizationService',
+                'ruleId' => $ruleId,
+                'exception' => $e
+            ]);
         }
 	}
 
@@ -2927,7 +2960,13 @@ private function fetchFileSafely(Source $source, string $endpoint, array $config
             );
         } catch (Exception $e) {
             // Log error with detailed information but don't throw
-            error_log("File fetch failed for endpoint {$endpoint}, objectId {$objectId}: " . $e->getMessage());
+            $this->logger->warning("File fetch failed for endpoint {$endpoint}, objectId {$objectId}: " . $e->getMessage(), [
+                'app' => 'openconnector',
+                'service' => 'SynchronizationService',
+                'endpoint' => $endpoint,
+                'objectId' => $objectId,
+                'exception' => $e
+            ]);
         }
 	}
 
@@ -3035,7 +3074,12 @@ private function processWriteFileRule(Rule $rule, array $data, string $objectId,
 
                     $result[$key] = $file->getPath();
                 } catch (Exception $exception) {
-                    error_log("Failed to save file $fileName: " . $exception->getMessage());
+                    $this->logger->warning("Failed to save file $fileName: " . $exception->getMessage(), [
+                        'app' => 'openconnector',
+                        'service' => 'SynchronizationService',
+                        'fileName' => $fileName,
+                        'exception' => $exception
+                    ]);
                     $result[$key] = null;
                 }
             }
@@ -3063,7 +3107,12 @@ private function processWriteFileRule(Rule $rule, array $data, string $objectId,
 
                 $dataDot[$config['filePath']] = $file->getPath();
             } catch (Exception $exception) {
-                error_log("Failed to save file $fileName: " . $exception->getMessage());
+                $this->logger->warning("Failed to save file $fileName: " . $exception->getMessage(), [
+                    'app' => 'openconnector',
+                    'service' => 'SynchronizationService',
+                    'fileName' => $fileName,
+                    'exception' => $exception
+                ]);
                 $dataDot[$config['filePath']] = null;
             }
         }
@@ -3557,13 +3606,23 @@ private function cleanupOrphanedFiles(string $objectId, array $newFileNames): in
 							$deletedCount++;
 						}
 					} catch (Exception $e) {
-						error_log("FAILED to delete orphaned file {$fileName}: " . $e->getMessage());
+						$this->logger->warning("FAILED to delete orphaned file {$fileName}: " . $e->getMessage(), [
+							'app' => 'openconnector',
+							'service' => 'SynchronizationService',
+							'fileName' => $fileName,
+							'exception' => $e
+						]);
 					}
 				}
 			}
 
 		} catch (Exception $e) {
-			error_log("FATAL ERROR during file cleanup for object {$objectId}: " . $e->getMessage());
+			$this->logger->error("FATAL ERROR during file cleanup for object {$objectId}: " . $e->getMessage(), [
+				'app' => 'openconnector',
+				'service' => 'SynchronizationService',
+				'objectId' => $objectId,
+				'exception' => $e
+			]);
 		}
 
 		return $deletedCount;
@@ -3632,7 +3691,12 @@ private function processMultipleFilesWithCleanup(Source $source, array $config,
                         registerId: $registerId
 					);
 				} catch (Exception $e) {
-					error_log("Failed to fetch file from endpoint {$actualEndpoint}: " . $e->getMessage());
+					$this->logger->warning("Failed to fetch file from endpoint {$actualEndpoint}: " . $e->getMessage(), [
+						'app' => 'openconnector',
+						'service' => 'SynchronizationService',
+						'endpoint' => $actualEndpoint,
+						'exception' => $e
+					]);
 					// Note: We still keep the filename in tracking array even if fetch fails
 					// This prevents cleanup from deleting files that should exist
 				}
diff --git a/website/docs/logging-migration-nextcloud31.md b/website/docs/logging-migration-nextcloud31.md
new file mode 100644
index 00000000..2b181b6b
--- /dev/null
+++ b/website/docs/logging-migration-nextcloud31.md
@@ -0,0 +1,157 @@
+# Logging Migration to PSR LoggerInterface for Nextcloud 31 Compatibility
+
+## Overview
+
+OpenConnector has been updated to use the modern PSR-3 LoggerInterface for all logging operations, ensuring full compatibility with Nextcloud 31. This migration replaces the deprecated logging patterns with the standard PSR LoggerInterface approach.
+
+## What Changed
+
+### Before (Deprecated - Nextcloud 30 and earlier)
+```php
+// Old pattern 1 - Direct server access
+\OC::$server->getLogger()->error('Error message', ['context']);
+
+// Old pattern 2 - PHP error_log function  
+error_log('Error message');
+```
+
+### After (Nextcloud 31 Compatible)
+```php
+// New pattern - PSR LoggerInterface dependency injection
+class YourService {
+    public function __construct(
+        private readonly LoggerInterface $logger
+    ) {}
+    
+    public function someMethod() {
+        $this->logger->error('Error message', [
+            'app' => 'openconnector',
+            'service' => 'YourService', 
+            'exception' => $e
+        ]);
+    }
+}
+
+// For Mapper classes - using lazy resolution
+class YourMapper extends QBMapper {
+    private function getLogger(): LoggerInterface {
+        return Server::get(LoggerInterface::class);
+    }
+    
+    public function someMethod() {
+        $this->getLogger()->error('Error message', [
+            'app' => 'openconnector',
+            'exception' => $e
+        ]);
+    }
+}
+```
+
+## Files Updated
+
+### All Mapper Classes (15 files)
+All database mapper classes have been updated to use PSR LoggerInterface:
+
+- `EventMessageMapper.php`
+- `EndpointMapper.php` 
+- `EventSubscriptionMapper.php`
+- `SynchronizationContractMapper.php`
+- `MappingMapper.php`
+- `JobMapper.php`
+- `RuleMapper.php`
+- `SynchronizationMapper.php`
+- `SourceMapper.php`
+- `CallLogMapper.php`
+- `JobLogMapper.php`
+- `SynchronizationContractLogMapper.php`
+- `SynchronizationLogMapper.php`
+- Plus 2 additional mapper classes
+
+### Service Classes (2 files)
+- `SynchronizationService.php` - Updated constructor to inject LoggerInterface
+- `SettingsService.php` - Updated constructor to inject LoggerInterface
+
+## Implementation Details
+
+### Dependency Injection Pattern
+Service classes now use proper dependency injection for the logger:
+
+```php
+public function __construct(
+    // ... other dependencies
+    private readonly LoggerInterface $logger
+) {
+    // Constructor implementation
+}
+```
+
+### Lazy Resolution Pattern (Mappers)
+Mapper classes use lazy resolution to avoid circular dependencies:
+
+```php
+private function getLogger(): LoggerInterface
+{
+    return Server::get(LoggerInterface::class);
+}
+```
+
+### Enhanced Context Information
+All logging calls now include rich context information:
+
+```php
+$this->logger->error('Operation failed', [
+    'app' => 'openconnector',
+    'service' => 'ServiceName',
+    'method' => 'methodName',
+    'objectId' => $objectId,
+    'exception' => $e
+]);
+```
+
+## Benefits
+
+1. **Nextcloud 31 Compatibility**: Full compatibility with Nextcloud 31's logging infrastructure
+2. **PSR-3 Standard**: Follows industry-standard logging interface
+3. **Better Context**: Rich contextual information in all log entries
+4. **Proper Error Levels**: Uses appropriate log levels (error, warning, info)
+5. **Performance**: Lazy loading where appropriate to avoid overhead
+6. **Maintainability**: Clean, consistent logging patterns across the codebase
+
+## Log Levels Used
+
+- **Error**: Critical issues that need immediate attention
+- **Warning**: Issues that should be monitored but don't stop operation  
+- **Info**: Informational messages about normal operations
+
+## Migration Statistics
+
+- **Total files updated**: 17 files
+- **Old logging calls replaced**: 56 instances
+  - `\OC::$server->getLogger()`: 41 instances
+  - `error_log()`: 15 instances
+- **New PSR LoggerInterface calls**: 56 instances
+
+All old logging patterns have been completely removed from the codebase.
+
+## For Developers
+
+When adding new logging to OpenConnector:
+
+1. **Service Classes**: Inject `LoggerInterface` via constructor
+2. **Mapper Classes**: Use the `getLogger()` lazy resolution method
+3. **Always include context**: Provide relevant context information
+4. **Use appropriate levels**: Choose the correct log level for the message
+5. **Include app identifier**: Always include `'app' => 'openconnector'` in context
+
+Example new logging implementation:
+```php
+$this->logger->warning('File upload failed', [
+    'app' => 'openconnector',
+    'service' => 'FileService',
+    'filename' => $filename,
+    'error' => $error,
+    'exception' => $e
+]);
+```
+
+This migration ensures OpenConnector remains fully compatible with current and future versions of Nextcloud while following modern PHP logging standards.

From d7b3298d2dddf39d7bf22077d0e37efc9a9aca64 Mon Sep 17 00:00:00 2001
From: Robert Zondervan <robert@conduction.nl>
Date: Fri, 15 Aug 2025 16:39:27 +0200
Subject: [PATCH 7/8] Fix using appropriate log levels in securityService

---
 lib/Service/SecurityService.php | 54 +++++++++++++++++----------------
 1 file changed, 28 insertions(+), 26 deletions(-)

diff --git a/lib/Service/SecurityService.php b/lib/Service/SecurityService.php
index 254abe10..c080251a 100644
--- a/lib/Service/SecurityService.php
+++ b/lib/Service/SecurityService.php
@@ -4,7 +4,7 @@
 
 /**
  * SecurityService
- * 
+ *
  * Service for handling security measures including rate limiting and XSS protection
  *
  * @category   Service
@@ -117,7 +117,7 @@ public function checkLoginRateLimit(string $username, string $ipAddress): array
                 'ip_address' => $ipAddress,
                 'lockout_until' => $userLockoutUntil
             ]);
-            
+
             return [
                 'allowed' => false,
                 'lockout_until' => $userLockoutUntil,
@@ -134,7 +134,7 @@ public function checkLoginRateLimit(string $username, string $ipAddress): array
                 'ip_address' => $ipAddress,
                 'lockout_until' => $ipLockoutUntil
             ]);
-            
+
             return [
                 'allowed' => false,
                 'lockout_until' => $ipLockoutUntil,
@@ -155,7 +155,7 @@ public function checkLoginRateLimit(string $username, string $ipAddress): array
             // Implement progressive delay for repeated attempts
             $delayKey = self::CACHE_PREFIX_PROGRESSIVE_DELAY . $username . '_' . $ipAddress;
             $currentDelay = $this->cache->get($delayKey) ?? self::PROGRESSIVE_DELAY_BASE;
-            
+
             // Calculate next delay with exponential backoff
             $nextDelay = min($currentDelay * 2, self::MAX_PROGRESSIVE_DELAY);
             $this->cache->set($delayKey, $nextDelay, self::RATE_LIMIT_WINDOW);
@@ -211,7 +211,7 @@ public function recordFailedLoginAttempt(string $username, string $ipAddress, st
             $lockoutUntil = time() + self::LOCKOUT_DURATION;
             $userLockoutKey = self::CACHE_PREFIX_USER_LOCKOUT . $username;
             $this->cache->set($userLockoutKey, $lockoutUntil, self::LOCKOUT_DURATION);
-            
+
             $this->logSecurityEvent('user_locked_out', [
                 'username' => $username,
                 'ip_address' => $ipAddress,
@@ -225,7 +225,7 @@ public function recordFailedLoginAttempt(string $username, string $ipAddress, st
             $lockoutUntil = time() + self::LOCKOUT_DURATION;
             $ipLockoutKey = self::CACHE_PREFIX_IP_LOCKOUT . $ipAddress;
             $this->cache->set($ipLockoutKey, $lockoutUntil, self::LOCKOUT_DURATION);
-            
+
             $this->logSecurityEvent('ip_locked_out', [
                 'username' => $username,
                 'ip_address' => $ipAddress,
@@ -356,7 +356,7 @@ public function validateLoginCredentials(array $credentials): array
 
         // Sanitize username (but preserve original for authentication)
         $sanitizedUsername = $this->sanitizeInput($credentials['username'], 320); // Max email length
-        
+
         // Validate username format (basic checks)
         if (strlen($sanitizedUsername) < 2) {
             return [
@@ -404,19 +404,19 @@ public function addSecurityHeaders(JSONResponse $response): JSONResponse
     {
         // Prevent clickjacking
         $response->addHeader('X-Frame-Options', 'DENY');
-        
+
         // Prevent MIME type sniffing
         $response->addHeader('X-Content-Type-Options', 'nosniff');
-        
+
         // Enable XSS protection
         $response->addHeader('X-XSS-Protection', '1; mode=block');
-        
+
         // Referrer policy
         $response->addHeader('Referrer-Policy', 'strict-origin-when-cross-origin');
-        
+
         // Content Security Policy for API responses
         $response->addHeader('Content-Security-Policy', "default-src 'none'; frame-ancestors 'none';");
-        
+
         // Prevent caching of sensitive responses
         $response->addHeader('Cache-Control', 'no-store, no-cache, must-revalidate, private');
         $response->addHeader('Pragma', 'no-cache');
@@ -455,7 +455,7 @@ public function getClientIpAddress(IRequest $request): string
                 // Handle comma-separated IPs (take the first one)
                 $ips = explode(',', $headerValue);
                 $ip = trim($ips[0]);
-                
+
                 // Validate IP address format and use if valid
                 if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
                     $ipAddress = $ip;
@@ -480,7 +480,7 @@ private function sanitizeForCacheKey(string $input): string
     {
         // Remove or replace characters that could be problematic in cache keys
         $sanitized = preg_replace('/[^a-zA-Z0-9._@-]/', '_', $input);
-        
+
         // Limit length to prevent extremely long cache keys
         return substr($sanitized, 0, 64);
     }
@@ -499,17 +499,19 @@ private function logSecurityEvent(string $event, array $context = []): void
         // Add timestamp and event type to context
         $context['event'] = $event;
         $context['timestamp'] = (new DateTime())->format('Y-m-d H:i:s');
-        
+
         // Log with appropriate level based on event type
-        $level = match ($event) {
-            'user_locked_out', 'ip_locked_out' => 'warning',
-            'login_attempt_during_lockout', 'login_attempt_from_blocked_ip' => 'warning',
-            'rate_limit_exceeded' => 'info',
-            'failed_login_attempt' => 'info',
-            'successful_login' => 'info',
-            default => 'info'
-        };
-
-        $this->logger->log($level, "Security event: {$event}", $context);
+        switch($event) {
+            case 'user_locked_out':
+            case 'login_attempt_during_lockout':
+                $this->logger->warning("Security event: {$event}", $context);
+                break;
+            case 'rate_limit_exceeded':
+            case 'failed_login_attempt':
+            case 'succesful_login':
+            default:
+                $this->logger->info("Security event: {$event}", $context);
+                break;
+        }
     }
-} 
\ No newline at end of file
+}

From c30dd49f6371b738eb6b32d6e8cbc3c9a0b1b507 Mon Sep 17 00:00:00 2001
From: Ruben van der Linde <ruben@conduction.nl>
Date: Sun, 17 Aug 2025 13:38:26 +0200
Subject: [PATCH 8/8] Removing the user object from the responce

And disabling the redundant bash protection
---
 lib/Controller/UserController.php |   6 +-
 lib/Service/SecurityService.php   | 116 ++++++++++++++++++++++++++++++
 2 files changed, 119 insertions(+), 3 deletions(-)

diff --git a/lib/Controller/UserController.php b/lib/Controller/UserController.php
index 062f5e52..8f50335e 100644
--- a/lib/Controller/UserController.php
+++ b/lib/Controller/UserController.php
@@ -551,8 +551,8 @@ public function login(): JSONResponse
                 return $this->addCorsHeaders($response);
             }
 
-            // Build user data array for response (sanitized)
-            $userData = $this->userService->buildUserDataArray($user);
+            // Build user data array for response (sanitized) - commented out for performance testing
+            // $userData = $this->userService->buildUserDataArray($user);
 
             // MEMORY MONITORING: Check memory usage after building user data
             $finalMemoryUsage = memory_get_usage(true);
@@ -576,7 +576,7 @@ public function login(): JSONResponse
             // Create successful response with security headers and session info
             $response = new JSONResponse([
                 'message' => 'Login successful',
-                'user' => $userData,
+                // 'user' => $userData, // Commented out for performance testing - full user data slows down frontend
                 'session_created' => true,
                 'session' => [
                     'id' => $sessionId,
diff --git a/lib/Service/SecurityService.php b/lib/Service/SecurityService.php
index 21bf6955..6482b7f3 100644
--- a/lib/Service/SecurityService.php
+++ b/lib/Service/SecurityService.php
@@ -91,9 +91,28 @@ public function __construct(
      * @param string $username The username attempting to login
      * @param string $ipAddress The IP address of the request
      * @return array Result with 'allowed' boolean and optional 'delay' or 'lockout_until'
+     * 
+     * @todo CRITICAL: Rate limiting system needs improvement
+     *       Problem: Custom cache-based rate limiting gets out of sync with Nextcloud's 
+     *       built-in brute force protection, causing persistent lockouts that cannot be 
+     *       cleared with standard OCC commands (php occ security:bruteforce:reset).
+     *       
+     *       Solutions needed:
+     *       1. Add OCC command for clearing custom SecurityService cache entries
+     *       2. OR integrate with Nextcloud's built-in rate limiting system instead
+     *       3. OR add admin interface to manually reset rate limits
+     *       4. Improve cache key iteration to properly clean up progressive delay entries
+     *       
+     *       Current workaround: Rate limiting temporarily disabled for testing
+     *       Security risk: All login attempts currently allowed - re-enable ASAP!
      */
     public function checkLoginRateLimit(string $username, string $ipAddress): array
     {
+        // TEMPORARILY DISABLED FOR TESTING - Rate limiting bypassed
+        // TODO: Re-enable rate limiting after implementing proper cleanup mechanism
+        return ['allowed' => true];
+
+        /*
         // Sanitize inputs to prevent cache key injection
         $username = $this->sanitizeForCacheKey($username);
         $ipAddress = $this->sanitizeForCacheKey($ipAddress);
@@ -167,6 +186,7 @@ public function checkLoginRateLimit(string $username, string $ipAddress): array
 
         // Login attempt is allowed
         return ['allowed' => true];
+        */
     }
 
     /**
@@ -267,6 +287,102 @@ public function recordSuccessfulLogin(string $username, string $ipAddress): void
         ]);
     }
 
+    /**
+     * Reset rate limiting for a specific IP address
+     *
+     * This method clears all rate limiting cache entries for the specified IP address,
+     * including lockouts, failed attempts, and progressive delays.
+     *
+     * @param string $ipAddress The IP address to reset rate limiting for
+     * @return bool True if reset was successful
+     * 
+     * @psalm-param string $ipAddress
+     * @psalm-return bool
+     * @phpstan-param string $ipAddress
+     * @phpstan-return bool
+     */
+    public function resetRateLimitForIp(string $ipAddress): bool
+    {
+        try {
+            // Sanitize the IP address
+            $ipAddress = $this->sanitizeForCacheKey($ipAddress);
+            
+            // Clear IP lockout
+            $ipLockoutKey = self::CACHE_PREFIX_IP_LOCKOUT . $ipAddress;
+            $this->cache->remove($ipLockoutKey);
+            
+            // Clear IP attempts counter
+            $ipAttemptsKey = self::CACHE_PREFIX_IP_ATTEMPTS . $ipAddress;
+            $this->cache->remove($ipAttemptsKey);
+            
+            // Clear progressive delay entries that include this IP
+            // Note: We can't iterate over cache keys easily, so this is a limitation
+            
+            // Log the reset action
+            $this->logSecurityEvent('rate_limit_reset', [
+                'ip_address' => $ipAddress,
+                'reset_type' => 'ip_reset'
+            ]);
+            
+            return true;
+        } catch (\Exception $e) {
+            // Log the error but don't throw - failing to reset rate limits shouldn't break the app
+            $this->logSecurityEvent('rate_limit_reset_failed', [
+                'ip_address' => $ipAddress,
+                'error' => $e->getMessage()
+            ]);
+            return false;
+        }
+    }
+
+    /**
+     * Reset rate limiting for a specific username
+     *
+     * This method clears all rate limiting cache entries for the specified username,
+     * including lockouts, failed attempts, and progressive delays.
+     *
+     * @param string $username The username to reset rate limiting for
+     * @return bool True if reset was successful
+     * 
+     * @psalm-param string $username
+     * @psalm-return bool
+     * @phpstan-param string $username
+     * @phpstan-return bool
+     */
+    public function resetRateLimitForUser(string $username): bool
+    {
+        try {
+            // Sanitize the username
+            $username = $this->sanitizeForCacheKey($username);
+            
+            // Clear user lockout
+            $userLockoutKey = self::CACHE_PREFIX_USER_LOCKOUT . $username;
+            $this->cache->remove($userLockoutKey);
+            
+            // Clear user attempts counter
+            $userAttemptsKey = self::CACHE_PREFIX_LOGIN_ATTEMPTS . $username;
+            $this->cache->remove($userAttemptsKey);
+            
+            // Clear progressive delay entries that include this username
+            // Note: We can't easily iterate over cache keys that contain this username
+            
+            // Log the reset action
+            $this->logSecurityEvent('rate_limit_reset', [
+                'username' => $username,
+                'reset_type' => 'user_reset'
+            ]);
+            
+            return true;
+        } catch (\Exception $e) {
+            // Log the error but don't throw - failing to reset rate limits shouldn't break the app
+            $this->logSecurityEvent('rate_limit_reset_failed', [
+                'username' => $username,
+                'error' => $e->getMessage()
+            ]);
+            return false;
+        }
+    }
+
     /**
      * Sanitize input data to prevent XSS and injection attacks
      *