diff --git a/.gitignore b/.gitignore
index dc01f204..0f4123f1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -36,3 +36,5 @@ out/
 
 ### VS Code ###
 .vscode/
+
+*.yml
\ No newline at end of file
diff --git a/build.gradle b/build.gradle
index 3d7f7607..e2aa4713 100644
--- a/build.gradle
+++ b/build.gradle
@@ -1,6 +1,6 @@
 plugins {
 	id 'java'
-	id 'org.springframework.boot' version '3.3.1'
+	id 'org.springframework.boot' version '3.5.4'
 	id 'io.spring.dependency-management' version '1.1.5'
 }
 
@@ -18,12 +18,21 @@ repositories {
 }
 
 dependencies {
-	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
-	implementation 'org.springframework.boot:spring-boot-starter-web'
-	developmentOnly 'org.springframework.boot:spring-boot-devtools'
-	runtimeOnly 'org.postgresql:postgresql'
-	testImplementation 'org.springframework.boot:spring-boot-starter-test'
-	testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
+    implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
+    implementation 'org.springframework.boot:spring-boot-starter-security'
+    implementation 'org.springframework.boot:spring-boot-starter-web'
+    implementation 'io.jsonwebtoken:jjwt-api:0.12.7'
+    implementation 'io.jsonwebtoken:jjwt-impl:0.12.7'
+    runtimeOnly 'io.jsonwebtoken:jjwt-jackson:0.12.7'
+
+    compileOnly 'org.projectlombok:lombok'
+    developmentOnly 'org.springframework.boot:spring-boot-devtools'
+    runtimeOnly 'org.postgresql:postgresql'
+    annotationProcessor 'org.projectlombok:lombok'
+    testImplementation 'org.springframework.boot:spring-boot-starter-test'
+    testImplementation 'org.springframework.security:spring-security-test'
+
+    implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }
 
 tasks.named('test') {
diff --git a/docs/extensions.html b/docs/extensions.html
index 46608c92..04b4d1bf 100644
--- a/docs/extensions.html
+++ b/docs/extensions.html
@@ -421,7 +421,7 @@
 </span></button></div><div><button class="sc-gdyeKB eQaxld"><svg class="sc-cwHptR cSkZlF" version="1.1" viewBox="0 0 24 24" x="0" xmlns="http://www.w3.org/2000/svg" y="0" aria-hidden="true"><polygon points="17.3 8.3 12 13.6 6.7 8.3 5.3 9.7 12 16.4 18.7 9.7 "></polygon></svg><strong class="sc-dSIIpw bpEYcE">404<!-- --> </strong><span class="sc-fhzFiK gducij"><p>No ticket found for the customer and screening with those ids found</p>
 </span></button></div></div></div><div class="sc-iGgWBj sc-gsFSXq ibAZSi eDeKjd"><div class="sc-iEXKAA jQGZcv"><button class="sc-eZYNyq jtLmPa"><span type="get" class="sc-dlWCHZ cTwxAL http-verb get">get</span><span class="sc-EgOXT fVtHyw">/customers/{customerId}/screenings/{screeningId}</span><svg class="sc-cwHptR iVFMLx" style="margin-right:-25px" version="1.1" viewBox="0 0 24 24" x="0" xmlns="http://www.w3.org/2000/svg" y="0" aria-hidden="true"><polygon points="17.3 8.3 12 13.6 6.7 8.3 5.3 9.7 12 16.4 18.7 9.7 "></polygon></svg></button><div aria-hidden="true" class="sc-hHOBiw jKfuBO"><div class="sc-kWtpeL fTEywo"><div class="sc-eeDRCY sc-dCFHLb gTGgei dwkgVY"></div><div tabindex="0" role="button"><div class="sc-ecPEgm kxVUfn"><span>http://localhost:4000</span>/customers/{customerId}/screenings/{screeningId}</div></div></div></div></div><div><h3 class="sc-kpDqfm eBBgSB"> <!-- -->Response samples<!-- --> </h3><div class="sc-bXCLTC dHowgL" data-rttabs="true"><ul class="react-tabs__tab-list" role="tablist"><li class="tab-success react-tabs__tab--selected" role="tab" id="react-tabs-58" aria-selected="true" aria-disabled="false" aria-controls="react-tabs-59" tabindex="0" data-rttab="true">200</li><li class="tab-error" role="tab" id="react-tabs-60" aria-selected="false" aria-disabled="false" aria-controls="react-tabs-61" data-rttab="true">404</li></ul><div class="react-tabs__tab-panel react-tabs__tab-panel--selected" role="tabpanel" id="react-tabs-59" aria-labelledby="react-tabs-58"><div><div class="sc-fBWQRz hEqesG"><span class="sc-bbSZdi hzinCC">Content type</span><div class="sc-fjvvzt dMqZRk">application/json</div></div><div class="sc-hCPjZK gKuDgt"><div class="sc-fXSgeo HQFTv"><div class="sc-koXPp efufqz"><button><div class="sc-jxOSlx ebiVIa">Copy</div></button><button> Expand all </button><button> Collapse all </button></div><div class="sc-eeDRCY gTGgei sc-JrDLc hMzemk"><div class="redoc-json"><code><button class="collapser" aria-label="collapse"></button><span class="token punctuation">{</span><span class="ellipsis"></span><ul class="obj collapsible"><li><div class="hoverable "><span class="property token string">"status"</span>: <span class="token string">&quot;success&quot;</span><span class="token punctuation">,</span></div></li><li><div class="hoverable "><span class="property token string">"data"</span>: <button class="collapser" aria-label="collapse"></button><span class="token punctuation">[</span><span class="ellipsis"></span><ul class="array collapsible"><li><div class="hoverable collapsed"><button class="collapser" aria-label="expand"></button><span class="token punctuation">{</span><span class="ellipsis"></span><ul class="obj collapsible"><li><div class="hoverable collapsed"><span class="property token string">"id"</span>: <span class="token number">1</span><span class="token punctuation">,</span></div></li><li><div class="hoverable collapsed"><span class="property token string">"numSeats"</span>: <span class="token number">3</span><span class="token punctuation">,</span></div></li><li><div class="hoverable collapsed"><span class="property token string">"createdAt"</span>: <span class="token string">&quot;2023-03-14T11:01:56.633+00:00&quot;</span><span class="token punctuation">,</span></div></li><li><div class="hoverable collapsed"><span class="property token string">"updatedAt"</span>: <span class="token string">&quot;2023-03-14T11:01:56.633+00:00&quot;</span></div></li></ul><span class="token punctuation">}</span></div></li></ul><span class="token punctuation">]</span></div></li></ul><span class="token punctuation">}</span></code></div></div></div></div></div></div><div class="react-tabs__tab-panel" role="tabpanel" id="react-tabs-61" aria-labelledby="react-tabs-60"></div></div></div></div></div></div></div><div class="sc-dExYaf gZbfaQ"></div></div></div>
       <script>
-      const __redoc_state = {"menu":{"activeItemIdx":-1},"spec":{"data":{"openapi":"3.1.0","info":{"title":"Java API Cinema Challenge - Extension Criteria","description":"Extension Criteria for Java API Cinema Challenge","version":"0.2.3","contact":{"name":"Cinema Booking Challenge"}},"servers":[{"url":"http://localhost:4000"}],"tags":[{"name":"customers"},{"name":"movies"},{"name":"screenings"},{"name":"tickets"}],"paths":{"/customers":{"post":{"tags":["customers"],"summary":"Create a customer","description":"Create a new customer account.","operationId":"createCustomer","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateCustomer"}}}},"responses":{"201":{"description":"Successfully created a new customer","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleCustomer"}}}},"400":{"description":"Could not create a new customer, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}}}},"get":{"tags":["customers"],"summary":"Get all customers","description":"Get a list of every customer.","operationId":"getCustomers","responses":{"200":{"description":"Successfully returned a list of all customers","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AllCustomers"}}}}}}},"/customers/{id}":{"put":{"tags":["customers"],"summary":"Update a customer","description":"Update an existing customer. If any field is not provided, the original value should not be changed. Any combination of fields can be updated.","operationId":"updateCustomer","parameters":[{"name":"id","in":"path","description":"The ID of the customer to update","required":true,"schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateCustomer"}}}},"responses":{"201":{"description":"Successfully updated the specified customer","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleCustomer"}}}},"400":{"description":"Could not create a new customer, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}},"404":{"description":"No customer with that ID found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}},"delete":{"tags":["customers"],"summary":"Delete a customer","description":"Delete an existing customer. When deleting data, it's useful to send the deleted record back to the client so they can re-create it if deletion was a mistake.","operationId":"deleteCustomer","parameters":[{"name":"id","in":"path","description":"The ID of the customer to delete","required":true,"schema":{"type":"integer"}}],"responses":{"200":{"description":"Successfully deleted the specified customer","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleCustomer"}}}},"404":{"description":"No customer with that ID found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}}},"/movies":{"post":{"tags":["movies"],"summary":"Create a movie","description":"Create a new movie. Optionally, a screenings array can be provided to create screenings when the movie gets created. If no screenings array is provided, the movie should be created as normal.","operationId":"createMovie","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateMovie"}}}},"responses":{"201":{"description":"Successfully created a new movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleMovie"}}}},"400":{"description":"Could not create a new movie, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}}}},"get":{"tags":["movies"],"summary":"Get all movies","description":"Get a list of every movie.","operationId":"getMovies","responses":{"200":{"description":"Successfully returned a list of all movies","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AllMovies"}}}}}}},"/movies/{id}":{"put":{"tags":["movies"],"summary":"Update a movie","description":"Update an existing movie. If any field is not provided, the original value should not be changed. Any combination of fields can be updated.","operationId":"updateMovie","parameters":[{"name":"id","in":"path","description":"The ID of the movie to update","required":true,"schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateMovie"}}}},"responses":{"201":{"description":"Successfully updated the specified movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleMovie"}}}},"400":{"description":"Could not update the specified movie, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}},"404":{"description":"No movie with that id found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}},"delete":{"tags":["movies"],"summary":"Delete a movie","description":"Delete an existing movie. When deleting a movie, all of its screenings should also be deleted.","operationId":"deleteMovie","parameters":[{"name":"id","in":"path","description":"The ID of the movie to delete","required":true,"schema":{"type":"integer"}}],"responses":{"200":{"description":"Successfully deleted the specified movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleMovie"}}}},"404":{"description":"No movie with that id found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}}},"/movies/{id}/screenings":{"post":{"tags":["screenings"],"summary":"Create a screening","description":"Create a screening for an existing movie.","operationId":"createScreening","parameters":[{"name":"id","in":"path","description":"The ID of the movie to create a screening for","required":true,"schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateScreening"}}}},"responses":{"201":{"description":"Successfully created a new screening for the specified movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleScreening"}}}},"400":{"description":"Could not create a screening for the specified movie, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}},"404":{"description":"No movie with that id found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}},"get":{"tags":["screenings"],"summary":"Get all screenings","description":"Get a list of every screening for a movie.","operationId":"getScreenings","parameters":[{"name":"id","in":"path","description":"The ID of the movie to retrieve the screenings for","required":true,"schema":{"type":"integer"}}],"responses":{"200":{"description":"Successfully returned a list of all screenings for the specified movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AllScreenings"}}}},"404":{"description":"No movie with that id found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}}},"/customers/{customerId}/screenings/{screeningId}":{"post":{"tags":["tickets"],"summary":"Book a ticket","description":"Create a new ticket for a particular customer and screening.","operationId":"createTicket","parameters":[{"name":"customerId","in":"path","description":"The ID of the customer to create the ticket for","required":true,"schema":{"type":"integer"}},{"name":"screeningId","in":"path","description":"The ID of the screening to create the ticket for","required":true,"schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateTicket"}}}},"responses":{"201":{"description":"Successfully created a ticket for the movie and screening specified","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleTicket"}}}},"404":{"description":"No customer or screening with those ids found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}},"get":{"tags":["tickets"],"summary":"Get all tickets","description":"Get a list of every ticket a customer has booked for a screening.","operationId":"getTickets","parameters":[{"name":"customerId","in":"path","description":"The ID of the customer the ticket is for","required":true,"schema":{"type":"integer"}},{"name":"screeningId","in":"path","description":"The ID of the screening the ticket is for","required":true,"schema":{"type":"integer"}}],"responses":{"200":{"description":"Successfully returned a list of all tickets for a given customer and screening","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AllTickets"}}}},"404":{"description":"No ticket found for the customer and screening with those ids found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}}}},"components":{"schemas":{"CreateCustomer":{"type":"object","required":["name","email","phone"],"properties":{"name":{"type":"string","example":"Chris Wolstenholme"},"email":{"type":"string","example":"chris@muse.mu"},"phone":{"type":"string","example":"+44729388192"}}},"UpdateCustomer":{"type":"object","properties":{"name":{"type":"string","example":"Chris Wolstenholme"},"email":{"type":"string","example":"chris@muse.mu"},"phone":{"type":"string","example":"+44729388192"}}},"SingleCustomer":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"object","properties":{"id":{"type":"integer","example":1},"name":{"type":"string","example":"Chris Wolstenholme"},"email":{"type":"string","example":"chris@muse.mu"},"phone":{"type":"string","example":"+44729388192"},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}}}},"Customer":{"type":"object","properties":{"id":{"type":"integer","example":1},"name":{"type":"string","example":"Chris Wolstenholme"},"email":{"type":"string","example":"chris@muse.mu"},"phone":{"type":"string","example":"+44729388192"},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}},"AllCustomers":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"array","items":{"$ref":"#/components/schemas/Customer"}}}},"CreateMovie":{"type":"object","required":["title","rating","description","runtimeMins"],"properties":{"title":{"type":"string","example":"Dodgeball"},"rating":{"type":"string","example":"PG-13"},"description":{"type":"string","example":"The greatest movie ever made."},"runtimeMins":{"type":"integer","example":126},"screenings":{"type":"array","items":{"type":"object","required":["screenNumber","capacity","startsAt"],"properties":{"screenNumber":{"type":"integer","example":5},"capacity":{"type":"integer","example":40},"startsAt":{"type":"string","format":"DateTime","example":"2023-03-19 11:30:00+00:00"}}}}}},"UpdateMovie":{"type":"object","properties":{"title":{"type":"string","example":"Dodgeball"},"rating":{"type":"string","example":"PG-13"},"description":{"type":"string","example":"The greatest movie ever made."},"runtimeMins":{"type":"integer","example":126}}},"SingleMovie":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"object","properties":{"id":{"type":"integer","example":1},"title":{"type":"string","example":"Dodgeball"},"rating":{"type":"string","example":"PG-13"},"description":{"type":"string","example":"The greatest movie ever made."},"runtimeMins":{"type":"integer","example":126},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}}}},"Movie":{"type":"object","properties":{"id":{"type":"integer","example":1},"title":{"type":"string","example":"Dodgeball"},"rating":{"type":"string","example":"PG-13"},"description":{"type":"string","example":"The greatest movie ever made."},"runtimeMins":{"type":"integer","example":126},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}},"AllMovies":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"array","items":{"$ref":"#/components/schemas/Movie"}}}},"CreateScreening":{"type":"object","required":["screenNumber","capacity","startsAt"],"properties":{"screenNumber":{"type":"integer","example":5},"capacity":{"type":"integer","example":40},"startsAt":{"type":"string","format":"DateTime","example":"2023-03-19 11:30:00+00:00"}}},"SingleScreening":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"object","properties":{"id":{"type":"integer","example":1},"screenNumber":{"type":"integer","example":5},"capacity":{"type":"integer","example":40},"startsAt":{"type":"string","format":"DateTime","example":"2023-03-19T11:30:00.000+00:00"},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}}}},"Screening":{"type":"object","properties":{"id":{"type":"integer","example":1},"screenNumber":{"type":"integer","example":5},"capacity":{"type":"integer","example":40},"startsAt":{"type":"string","format":"DateTime","example":"2023-03-19T11:30:00.000+00:00"},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}},"AllScreenings":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"array","items":{"$ref":"#/components/schemas/Screening"}}}},"CreateTicket":{"type":"object","required":["numSeats"],"properties":{"numSeats":{"type":"integer","example":3}}},"Ticket":{"type":"object","properties":{"id":{"type":"integer","example":1},"numSeats":{"type":"integer","example":3},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}},"SingleTicket":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"object","properties":{"id":{"type":"integer","example":1},"numSeats":{"type":"integer","example":3},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}}}},"AllTickets":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"array","items":{"$ref":"#/components/schemas/Ticket"}}}},"Error400":{"type":"object","properties":{"status":{"type":"string","example":"error"},"data":{"type":"object","properties":{"message":{"type":"string","example":"bad request"}}}}},"Error404":{"type":"object","properties":{"status":{"type":"string","example":"error"},"data":{"type":"object","properties":{"message":{"type":"string","example":"not found"}}}}}}}}},"searchIndex":{"store":["tag/customers","tag/customers/operation/createCustomer","tag/customers/operation/getCustomers","tag/customers/operation/updateCustomer","tag/customers/operation/deleteCustomer","tag/movies","tag/movies/operation/createMovie","tag/movies/operation/getMovies","tag/movies/operation/updateMovie","tag/movies/operation/deleteMovie","tag/screenings","tag/screenings/operation/createScreening","tag/screenings/operation/getScreenings","tag/tickets","tag/tickets/operation/createTicket","tag/tickets/operation/getTickets"],"index":{"version":"2.3.9","fields":["title","description"],"fieldVectors":[["title/0",[0,0.453]],["description/0",[]],["title/1",[0,0.344,1,0.72]],["description/1",[0,0.569,1,0.891,2,1.721,3,2.644]],["title/2",[0,0.453]],["description/2",[0,0.63,4,1.688]],["title/3",[0,0.344,5,1.17]],["description/3",[0,0.284,5,1.452,6,0.82,7,2.094,8,1.148,9,1.393,10,1.393,11,1.393,12,1.393,13,1.393]],["title/4",[0,0.344,14,1.17]],["description/4",[0,0.239,6,0.689,13,1.17,14,1.771,15,1.482,16,1.482,17,1.482,18,1.482,19,1.482,20,1.482,21,1.482,22,1.482,23,1.482]],["title/5",[24,0.453]],["description/5",[]],["title/6",[1,0.72,24,0.344]],["description/6",[1,1.023,2,0.861,8,1.381,24,0.489,25,1.323,26,0.636,27,2.121,28,1.323,29,1.323]],["title/7",[24,0.453]],["description/7",[4,1.688,24,0.63]],["title/8",[5,1.17,24,0.344]],["description/8",[5,1.452,6,0.82,7,2.094,8,1.148,9,1.393,10,1.393,11,1.393,12,1.393,24,0.284,30,1.393]],["title/9",[14,1.17,24,0.344]],["description/9",[6,1.012,14,1.97,24,0.498,26,0.522,30,1.72]],["title/10",[26,0.674]],["description/10",[]],["title/11",[1,0.72,26,0.512]],["description/11",[1,0.891,6,1.229,24,0.426,26,0.634,31,2.088]],["title/12",[26,0.674]],["description/12",[4,1.559,24,0.458,26,0.682,31,2.248]],["title/13",[32,1.307]],["description/13",[]],["title/14",[32,0.993,33,1.687]],["description/14",[0,0.373,1,0.78,2,1.506,26,0.555,32,1.076,34,2.314,35,1.827]],["title/15",[32,1.307]],["description/15",[0,0.397,4,1.351,26,0.592,32,1.147,33,1.949,35,1.949]]],"invertedIndex":[["account",{"_index":3,"title":{},"description":{"1":{}}}],["array",{"_index":27,"title":{},"description":{"6":{}}}],["back",{"_index":20,"title":{},"description":{"4":{}}}],["book",{"_index":33,"title":{"14":{}},"description":{"15":{}}}],["chang",{"_index":11,"title":{},"description":{"3":{},"8":{}}}],["client",{"_index":21,"title":{},"description":{"4":{}}}],["combin",{"_index":12,"title":{},"description":{"3":{},"8":{}}}],["creat",{"_index":1,"title":{"1":{},"6":{},"11":{}},"description":{"1":{},"6":{},"11":{},"14":{}}}],["custom",{"_index":0,"title":{"0":{},"1":{},"2":{},"3":{},"4":{}},"description":{"1":{},"2":{},"3":{},"4":{},"14":{},"15":{}}}],["customers/{customerid}/screenings/{screeningid",{"_index":35,"title":{},"description":{"14":{},"15":{}}}],["customers/{id",{"_index":13,"title":{},"description":{"3":{},"4":{}}}],["data",{"_index":15,"title":{},"description":{"4":{}}}],["delet",{"_index":14,"title":{"4":{},"9":{}},"description":{"4":{},"9":{}}}],["exist",{"_index":6,"title":{},"description":{"3":{},"4":{},"8":{},"9":{},"11":{}}}],["field",{"_index":7,"title":{},"description":{"3":{},"8":{}}}],["get",{"_index":28,"title":{},"description":{"6":{}}}],["it'",{"_index":16,"title":{},"description":{"4":{}}}],["list",{"_index":4,"title":{},"description":{"2":{},"7":{},"12":{},"15":{}}}],["mistak",{"_index":23,"title":{},"description":{"4":{}}}],["movi",{"_index":24,"title":{"5":{},"6":{},"7":{},"8":{},"9":{}},"description":{"6":{},"7":{},"8":{},"9":{},"11":{},"12":{}}}],["movies/{id",{"_index":30,"title":{},"description":{"8":{},"9":{}}}],["movies/{id}/screen",{"_index":31,"title":{},"description":{"11":{},"12":{}}}],["new",{"_index":2,"title":{},"description":{"1":{},"6":{},"14":{}}}],["normal",{"_index":29,"title":{},"description":{"6":{}}}],["option",{"_index":25,"title":{},"description":{"6":{}}}],["origin",{"_index":9,"title":{},"description":{"3":{},"8":{}}}],["particular",{"_index":34,"title":{},"description":{"14":{}}}],["provid",{"_index":8,"title":{},"description":{"3":{},"6":{},"8":{}}}],["re-creat",{"_index":22,"title":{},"description":{"4":{}}}],["record",{"_index":19,"title":{},"description":{"4":{}}}],["screen",{"_index":26,"title":{"10":{},"11":{},"12":{}},"description":{"6":{},"9":{},"11":{},"12":{},"14":{},"15":{}}}],["send",{"_index":18,"title":{},"description":{"4":{}}}],["ticket",{"_index":32,"title":{"13":{},"14":{},"15":{}},"description":{"14":{},"15":{}}}],["updat",{"_index":5,"title":{"3":{},"8":{}},"description":{"3":{},"8":{}}}],["us",{"_index":17,"title":{},"description":{"4":{}}}],["valu",{"_index":10,"title":{},"description":{"3":{},"8":{}}}]],"pipeline":[]}},"options":{}};
+      const __redoc_state = {"menu":{"activeItemIdx":-1},"spec":{"data":{"openapi":"3.1.0","info":{"title":"Java API Cinema Challenge - Extension Criteria","description":"Extension Criteria for Java API Cinema Challenge","version":"0.2.3","contact":{"name":"Cinema Booking Challenge"}},"servers":[{"url":"http://localhost:4000"}],"tags":[{"name":"customers"},{"name":"movies"},{"name":"screenings"},{"name":"tickets"}],"paths":{"/customers":{"post":{"tags":["customers"],"summary":"Create a customer","description":"Create a new customer account.","operationId":"createCustomer","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateCustomer"}}}},"responses":{"201":{"description":"Successfully created a new customer","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleCustomer"}}}},"400":{"description":"Could not create a new customer, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}}}},"get":{"tags":["customers"],"summary":"Get all customers","description":"Get a list of every customer.","operationId":"getCustomers","responses":{"200":{"description":"Successfully returned a list of all customers","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AllCustomers"}}}}}}},"/customers/{id}":{"put":{"tags":["customers"],"summary":"Update a customer","description":"Update an existing customer. If any field is not provided, the original value should not be changed. Any combination of fields can be updated.","operationId":"updateCustomer","parameters":[{"name":"id","in":"path","description":"The ID of the customer to update","required":true,"schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateCustomer"}}}},"responses":{"201":{"description":"Successfully updated the specified customer","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleCustomer"}}}},"400":{"description":"Could not create a new customer, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}},"404":{"description":"No customer with that ID found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}},"delete":{"tags":["customers"],"summary":"Delete a customer","description":"Delete an existing customer. When deleting data, it's useful to send the deleted record back to the client so they can re-create it if deletion was a mistake.","operationId":"deleteCustomer","parameters":[{"name":"id","in":"path","description":"The ID of the customer to delete","required":true,"schema":{"type":"integer"}}],"responses":{"200":{"description":"Successfully deleted the specified customer","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleCustomer"}}}},"404":{"description":"No customer with that ID found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}}},"/movies":{"post":{"tags":["movies"],"summary":"Create a movie","description":"Create a new movie. Optionally, a screenings array can be provided to create screenings when the movie gets created. If no screenings array is provided, the movie should be created as normal.","operationId":"createMovie","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateMovie"}}}},"responses":{"201":{"description":"Successfully created a new movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleMovie"}}}},"400":{"description":"Could not create a new movie, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}}}},"get":{"tags":["movies"],"summary":"Get all movies","description":"Get a list of every movie.","operationId":"getMovies","responses":{"200":{"description":"Successfully returned a list of all movies","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AllMovies"}}}}}}},"/movies/{id}":{"put":{"tags":["movies"],"summary":"Update a movie","description":"Update an existing movie. If any field is not provided, the original value should not be changed. Any combination of fields can be updated.","operationId":"updateMovie","parameters":[{"name":"id","in":"path","description":"The ID of the movie to update","required":true,"schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateMovie"}}}},"responses":{"201":{"description":"Successfully updated the specified movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleMovie"}}}},"400":{"description":"Could not update the specified movie, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}},"404":{"description":"No movie with that id found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}},"delete":{"tags":["movies"],"summary":"Delete a movie","description":"Delete an existing movie. When deleting a movie, all of its screenings should also be deleted.","operationId":"deleteMovie","parameters":[{"name":"id","in":"path","description":"The ID of the movie to delete","required":true,"schema":{"type":"integer"}}],"responses":{"200":{"description":"Successfully deleted the specified movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleMovie"}}}},"404":{"description":"No movie with that id found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}}},"/movies/{id}/screenings":{"post":{"tags":["screenings"],"summary":"Create a screening","description":"Create a screening for an existing movie.","operationId":"createScreening","parameters":[{"name":"id","in":"path","description":"The ID of the movie to create a screening for","required":true,"schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateScreening"}}}},"responses":{"201":{"description":"Successfully created a new screening for the specified movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleScreening"}}}},"400":{"description":"Could not create a screening for the specified movie, please check all fields are correct","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error400"}}}},"404":{"description":"No movie with that id found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}},"get":{"tags":["screenings"],"summary":"Get all screenings","description":"Get a list of every screening for a movie.","operationId":"getScreenings","parameters":[{"name":"id","in":"path","description":"The ID of the movie to retrieve the screenings for","required":true,"schema":{"type":"integer"}}],"responses":{"200":{"description":"Successfully returned a list of all screenings for the specified movie","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AllScreenings"}}}},"404":{"description":"No movie with that id found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}}},"/customers/{customerId}/screenings/{screeningId}":{"post":{"tags":["tickets"],"summary":"Book a ticket","description":"Create a new ticket for a particular customer and screening.","operationId":"createTicket","parameters":[{"name":"customerId","in":"path","description":"The ID of the customer to create the ticket for","required":true,"schema":{"type":"integer"}},{"name":"screeningId","in":"path","description":"The ID of the screening to create the ticket for","required":true,"schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateTicket"}}}},"responses":{"201":{"description":"Successfully created a ticket for the movie and screening specified","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SingleTicket"}}}},"404":{"description":"No customer or screening with those ids found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}},"get":{"tags":["tickets"],"summary":"Get all tickets","description":"Get a list of every ticket a customer has booked for a screening.","operationId":"getTickets","parameters":[{"name":"customerId","in":"path","description":"The ID of the customer the ticket is for","required":true,"schema":{"type":"integer"}},{"name":"screeningId","in":"path","description":"The ID of the screening the ticket is for","required":true,"schema":{"type":"integer"}}],"responses":{"200":{"description":"Successfully returned a list of all tickets for a given customer and screening","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AllTickets"}}}},"404":{"description":"No ticket found for the customer and screening with those ids found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error404"}}}}}}}},"components":{"schemas":{"CreateCustomer":{"type":"object","required":["name","email","phone"],"properties":{"name":{"type":"string","example":"Chris Wolstenholme"},"email":{"type":"string","example":"chris@muse.mu"},"phone":{"type":"string","example":"+44729388192"}}},"UpdateCustomer":{"type":"object","properties":{"name":{"type":"string","example":"Chris Wolstenholme"},"email":{"type":"string","example":"chris@muse.mu"},"phone":{"type":"string","example":"+44729388192"}}},"SingleCustomer":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"object","properties":{"id":{"type":"integer","example":1},"name":{"type":"string","example":"Chris Wolstenholme"},"email":{"type":"string","example":"chris@muse.mu"},"phone":{"type":"string","example":"+44729388192"},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}}}},"Customer":{"type":"object","properties":{"id":{"type":"integer","example":1},"name":{"type":"string","example":"Chris Wolstenholme"},"email":{"type":"string","example":"chris@muse.mu"},"phone":{"type":"string","example":"+44729388192"},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}},"AllCustomers":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"array","items":{"$ref":"#/components/schemas/Customer"}}}},"CreateMovie":{"type":"object","required":["title","rating","description","runtimeMins"],"properties":{"title":{"type":"string","example":"Dodgeball"},"rating":{"type":"string","example":"PG-13"},"description":{"type":"string","example":"The greatest movie ever made."},"runtimeMins":{"type":"integer","example":126},"screenings":{"type":"array","items":{"type":"object","required":["screenNumber","capacity","startsAt"],"properties":{"screenNumber":{"type":"integer","example":5},"capacity":{"type":"integer","example":40},"startsAt":{"type":"string","format":"DateTime","example":"2023-03-19 11:30:00+00:00"}}}}}},"UpdateMovie":{"type":"object","properties":{"title":{"type":"string","example":"Dodgeball"},"rating":{"type":"string","example":"PG-13"},"description":{"type":"string","example":"The greatest movie ever made."},"runtimeMins":{"type":"integer","example":126}}},"SingleMovie":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"object","properties":{"id":{"type":"integer","example":1},"title":{"type":"string","example":"Dodgeball"},"rating":{"type":"string","example":"PG-13"},"description":{"type":"string","example":"The greatest movie ever made."},"runtimeMins":{"type":"integer","example":126},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}}}},"Movie":{"type":"object","properties":{"id":{"type":"integer","example":1},"title":{"type":"string","example":"Dodgeball"},"rating":{"type":"string","example":"PG-13"},"description":{"type":"string","example":"The greatest movie ever made."},"runtimeMins":{"type":"integer","example":126},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}},"AllMovies":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"array","items":{"$ref":"#/components/schemas/Movie"}}}},"CreateScreening":{"type":"object","required":["screenNumber","capacity","startsAt"],"properties":{"screenNumber":{"type":"integer","example":5},"capacity":{"type":"integer","example":40},"startsAt":{"type":"string","format":"DateTime","example":"2023-03-19 11:30:00+00:00"}}},"SingleScreening":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"object","properties":{"id":{"type":"integer","example":1},"screenNumber":{"type":"integer","example":5},"capacity":{"type":"integer","example":40},"startsAt":{"type":"string","format":"DateTime","example":"2023-03-19T11:30:00.000+00:00"},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}}}},"Screening":{"type":"object","properties":{"id":{"type":"integer","example":1},"screenNumber":{"type":"integer","example":5},"capacity":{"type":"integer","example":40},"startsAt":{"type":"string","format":"DateTime","example":"2023-03-19T11:30:00.000+00:00"},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}},"AllScreenings":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"array","items":{"$ref":"#/components/schemas/Screening"}}}},"CreateTicket":{"type":"object","required":["numSeats"],"properties":{"numSeats":{"type":"integer","example":3}}},"Ticket":{"type":"object","properties":{"id":{"type":"integer","example":1},"numSeats":{"type":"integer","example":3},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}},"SingleTicket":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"object","properties":{"id":{"type":"integer","example":1},"numSeats":{"type":"integer","example":3},"createdAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"},"updatedAt":{"type":"string","format":"DateTime","example":"2023-03-14T11:01:56.633+00:00"}}}}},"AllTickets":{"type":"object","properties":{"status":{"type":"string","example":"success"},"data":{"type":"array","items":{"$ref":"#/components/schemas/Ticket"}}}},"Error400":{"type":"object","properties":{"status":{"type":"string","example":"error"},"data":{"type":"object","properties":{"message":{"type":"string","example":"bad request"}}}}},"Error404":{"type":"object","properties":{"status":{"type":"string","example":"error"},"data":{"type":"object","properties":{"message":{"type":"string","example":"not found"}}}}}}}}},"searchIndex":{"store":["tag/customers","tag/customers/operation/createCustomer","tag/customers/operation/getCustomers","tag/customers/operation/updateCustomer","tag/customers/operation/deleteCustomer","tag/movies","tag/movies/operation/createMovie","tag/movies/operation/getMovies","tag/movies/operation/updateMovie","tag/movies/operation/deleteMovie","tag/screenings","tag/screenings/operation/createScreening","tag/screenings/operation/getScreenings","tag/tickets","tag/tickets/operation/createTicket","tag/tickets/operation/getTickets"],"index":{"version":"2.3.9","fields":["title","description"],"fieldVectors":[["title/0",[0,0.453]],["description/0",[]],["title/1",[0,0.344,1,0.72]],["description/1",[0,0.569,1,0.891,2,1.721,3,2.644]],["title/2",[0,0.453]],["description/2",[0,0.63,4,1.688]],["title/3",[0,0.344,5,1.17]],["description/3",[0,0.284,5,1.452,6,0.82,7,2.094,8,1.148,9,1.393,10,1.393,11,1.393,12,1.393,13,1.393]],["title/4",[0,0.344,14,1.17]],["description/4",[0,0.239,6,0.689,13,1.17,14,1.771,15,1.482,16,1.482,17,1.482,18,1.482,19,1.482,20,1.482,21,1.482,22,1.482,23,1.482]],["title/5",[24,0.453]],["description/5",[]],["title/6",[1,0.72,24,0.344]],["description/6",[1,1.023,2,0.861,8,1.381,24,0.489,25,1.323,26,0.636,27,2.121,28,1.323,29,1.323]],["title/7",[24,0.453]],["description/7",[4,1.688,24,0.63]],["title/8",[5,1.17,24,0.344]],["description/8",[5,1.452,6,0.82,7,2.094,8,1.148,9,1.393,10,1.393,11,1.393,12,1.393,24,0.284,30,1.393]],["title/9",[14,1.17,24,0.344]],["description/9",[6,1.012,14,1.97,24,0.498,26,0.522,30,1.72]],["title/10",[26,0.674]],["description/10",[]],["title/11",[1,0.72,26,0.512]],["description/11",[1,0.891,6,1.229,24,0.426,26,0.634,31,2.088]],["title/12",[26,0.674]],["description/12",[4,1.559,24,0.458,26,0.682,31,2.248]],["title/13",[32,1.307]],["description/13",[]],["title/14",[32,0.993,33,1.687]],["description/14",[0,0.373,1,0.78,2,1.506,26,0.555,32,1.076,34,2.314,35,1.827]],["title/15",[32,1.307]],["description/15",[0,0.397,4,1.351,26,0.592,32,1.147,33,1.949,35,1.949]]],"invertedIndex":[["account",{"_index":3,"title":{},"description":{"1":{}}}],["array",{"_index":27,"title":{},"description":{"6":{}}}],["back",{"_index":20,"title":{},"description":{"4":{}}}],["movie",{"_index":33,"title":{"14":{}},"description":{"15":{}}}],["chang",{"_index":11,"title":{},"description":{"3":{},"8":{}}}],["client",{"_index":21,"title":{},"description":{"4":{}}}],["combin",{"_index":12,"title":{},"description":{"3":{},"8":{}}}],["creat",{"_index":1,"title":{"1":{},"6":{},"11":{}},"description":{"1":{},"6":{},"11":{},"14":{}}}],["custom",{"_index":0,"title":{"0":{},"1":{},"2":{},"3":{},"4":{}},"description":{"1":{},"2":{},"3":{},"4":{},"14":{},"15":{}}}],["customers/{customerid}/screenings/{screeningid",{"_index":35,"title":{},"description":{"14":{},"15":{}}}],["customers/{id",{"_index":13,"title":{},"description":{"3":{},"4":{}}}],["data",{"_index":15,"title":{},"description":{"4":{}}}],["delet",{"_index":14,"title":{"4":{},"9":{}},"description":{"4":{},"9":{}}}],["exist",{"_index":6,"title":{},"description":{"3":{},"4":{},"8":{},"9":{},"11":{}}}],["field",{"_index":7,"title":{},"description":{"3":{},"8":{}}}],["get",{"_index":28,"title":{},"description":{"6":{}}}],["it'",{"_index":16,"title":{},"description":{"4":{}}}],["list",{"_index":4,"title":{},"description":{"2":{},"7":{},"12":{},"15":{}}}],["mistak",{"_index":23,"title":{},"description":{"4":{}}}],["movi",{"_index":24,"title":{"5":{},"6":{},"7":{},"8":{},"9":{}},"description":{"6":{},"7":{},"8":{},"9":{},"11":{},"12":{}}}],["movies/{id",{"_index":30,"title":{},"description":{"8":{},"9":{}}}],["movies/{id}/screen",{"_index":31,"title":{},"description":{"11":{},"12":{}}}],["new",{"_index":2,"title":{},"description":{"1":{},"6":{},"14":{}}}],["normal",{"_index":29,"title":{},"description":{"6":{}}}],["option",{"_index":25,"title":{},"description":{"6":{}}}],["origin",{"_index":9,"title":{},"description":{"3":{},"8":{}}}],["particular",{"_index":34,"title":{},"description":{"14":{}}}],["provid",{"_index":8,"title":{},"description":{"3":{},"6":{},"8":{}}}],["re-creat",{"_index":22,"title":{},"description":{"4":{}}}],["record",{"_index":19,"title":{},"description":{"4":{}}}],["screen",{"_index":26,"title":{"10":{},"11":{},"12":{}},"description":{"6":{},"9":{},"11":{},"12":{},"14":{},"15":{}}}],["send",{"_index":18,"title":{},"description":{"4":{}}}],["ticket",{"_index":32,"title":{"13":{},"14":{},"15":{}},"description":{"14":{},"15":{}}}],["updat",{"_index":5,"title":{"3":{},"8":{}},"description":{"3":{},"8":{}}}],["us",{"_index":17,"title":{},"description":{"4":{}}}],["valu",{"_index":10,"title":{},"description":{"3":{},"8":{}}}]],"pipeline":[]}},"options":{}};
 
       var container = document.getElementById('redoc');
       Redoc.hydrate(__redoc_state, container);
diff --git a/src/main/java/com/booleanuk/api/cinema/Main.java b/src/main/java/com/booleanuk/api/cinema/Main.java
new file mode 100644
index 00000000..98663849
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/Main.java
@@ -0,0 +1,35 @@
+package com.booleanuk.api.cinema;
+
+import com.booleanuk.api.cinema.models.ERole;
+import com.booleanuk.api.cinema.models.Role;
+import com.booleanuk.api.cinema.repository.RoleRepository;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.CommandLineRunner;
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+public class Main implements CommandLineRunner {
+    @Autowired
+    private RoleRepository roleRepository;
+
+    public static void main(String[] args) {
+        SpringApplication.run(Main.class, args);
+    }
+
+
+    @Override
+    public void run(String... args) {
+        if (!this.roleRepository.existsByName(ERole.ROLE_USER)){
+            this.roleRepository.save(new Role(ERole.ROLE_USER));
+        }
+        if (!this.roleRepository.existsByName(ERole.ROLE_ADMIN)){
+            this.roleRepository.save(new Role(ERole.ROLE_ADMIN));
+        }
+        if (!this.roleRepository.existsByName(ERole.ROLE_MODERATOR)){
+            this.roleRepository.save(new Role(ERole.ROLE_MODERATOR));
+        }
+    }
+
+}
+
diff --git a/src/main/java/com/booleanuk/api/cinema/controllers/AuthController.java b/src/main/java/com/booleanuk/api/cinema/controllers/AuthController.java
new file mode 100644
index 00000000..5460cebd
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/controllers/AuthController.java
@@ -0,0 +1,101 @@
+package com.booleanuk.api.cinema.controllers;
+
+import com.booleanuk.api.cinema.models.ERole;
+import com.booleanuk.api.cinema.models.Role;
+import com.booleanuk.api.cinema.models.User;
+import com.booleanuk.api.cinema.payload.request.LoginRequest;
+import com.booleanuk.api.cinema.payload.request.SignupRequest;
+import com.booleanuk.api.cinema.payload.response.JwtResponse;
+import com.booleanuk.api.cinema.payload.response.MessageResponse;
+import com.booleanuk.api.cinema.repository.RoleRepository;
+import com.booleanuk.api.cinema.repository.UserRepository;
+import com.booleanuk.api.cinema.security.jwt.JwtUtils;
+import com.booleanuk.api.cinema.security.services.UserDetailsImpl;
+import jakarta.validation.Valid;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.stream.Collectors;
+
+@CrossOrigin(origins = "*", maxAge = 3600)
+@RestController
+@RequestMapping("auth")
+public class AuthController {
+    @Autowired
+    AuthenticationManager authenticationManager;
+
+    @Autowired
+    UserRepository userRepository;
+
+    @Autowired
+    RoleRepository roleRepository;
+
+    @Autowired
+    PasswordEncoder encoder;
+
+    @Autowired
+    JwtUtils jwtUtils;
+
+    @PostMapping("/signin")
+    public ResponseEntity<?> authenticateUser(@Valid @RequestBody LoginRequest loginRequest) {
+        // If using a salt for password use it here
+        Authentication authentication = authenticationManager
+                .authenticate(new UsernamePasswordAuthenticationToken(loginRequest.getUsername(), loginRequest.getPassword()));
+        SecurityContextHolder.getContext().setAuthentication(authentication);
+        String jwt = jwtUtils.generateJwtToken(authentication);
+
+        UserDetailsImpl userDetails = (UserDetailsImpl) authentication.getPrincipal();
+        List<String> roles = userDetails.getAuthorities().stream().map((item) -> item.getAuthority())
+                .collect(Collectors.toList());
+        return ResponseEntity
+                .ok(new JwtResponse(jwt, userDetails.getId(), userDetails.getUsername(), userDetails.getEmail(), roles));
+    }
+
+    @PostMapping("/signup")
+    public ResponseEntity<?> registerUser(@Valid @RequestBody SignupRequest signupRequest) {
+        if (userRepository.existsByUsername(signupRequest.getUsername())) {
+            return ResponseEntity.badRequest().body(new MessageResponse("Error: Username is already taken"));
+        }
+        if (userRepository.existsByEmail(signupRequest.getEmail())) {
+            return ResponseEntity.badRequest().body(new MessageResponse("Error: Email is already in use!"));
+        }
+        // Create a new user add salt here if using one
+        User user = new User(signupRequest.getUsername(), signupRequest.getEmail(), encoder.encode(signupRequest.getPassword()));
+        Set<String> strRoles = signupRequest.getRole();
+        Set<Role> roles = new HashSet<>();
+
+        if (strRoles == null) {
+            Role userRole = roleRepository.findByName(ERole.ROLE_USER).orElseThrow(() -> new RuntimeException("Error: Role is not found"));
+            roles.add(userRole);
+        } else {
+            strRoles.forEach((role) -> {
+                switch (role) {
+                    case "admin":
+                        Role adminRole = roleRepository.findByName(ERole.ROLE_ADMIN).orElseThrow(() -> new RuntimeException("Error: Role is not found"));
+                        roles.add(adminRole);
+                        break;
+                    case "mod":
+                        Role modRole = roleRepository.findByName(ERole.ROLE_MODERATOR).orElseThrow(() -> new RuntimeException("Error: Role is not found"));
+                        roles.add(modRole);
+                        break;
+                    default:
+                        Role userRole = roleRepository.findByName(ERole.ROLE_USER).orElseThrow(() -> new RuntimeException("Error: Role is not found"));
+                        roles.add(userRole);
+                        break;
+                }
+            });
+        }
+        user.setRoles(roles);
+        userRepository.save(user);
+        return ResponseEntity.ok((new MessageResponse("User registered successfully")));
+    }
+}
\ No newline at end of file
diff --git a/src/main/java/com/booleanuk/api/cinema/controllers/CustomerController.java b/src/main/java/com/booleanuk/api/cinema/controllers/CustomerController.java
new file mode 100644
index 00000000..9973d439
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/controllers/CustomerController.java
@@ -0,0 +1,102 @@
+package com.booleanuk.api.cinema.controllers;
+
+import com.booleanuk.api.cinema.models.*;
+import com.booleanuk.api.cinema.payload.response.*;
+import com.booleanuk.api.cinema.repository.RoleRepository;
+import com.booleanuk.api.cinema.repository.ScreeningRepository;
+import com.booleanuk.api.cinema.repository.UserRepository;
+import com.booleanuk.api.cinema.repository.TicketRepository;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+import org.springframework.web.server.ResponseStatusException;
+
+import java.time.OffsetDateTime;
+import java.time.format.DateTimeFormatter;
+
+@RestController
+@RequestMapping("customers")
+public class CustomerController {
+    @Autowired
+    private UserRepository customerRepository;
+    @Autowired
+    private RoleRepository roleRepository;
+
+    @GetMapping
+    public ResponseEntity<CustomerListResponse> getAllUsers() {
+        CustomerListResponse customerListResponse = new CustomerListResponse();
+        customerListResponse.set(this.customerRepository.findAll());
+        return ResponseEntity.ok(customerListResponse);
+    }
+
+    public record PostUser(String name, String email, String phone) {}
+
+    @PostMapping
+    public ResponseEntity<Response<?>> createUser(@RequestBody PostUser request) {
+        CustomerResponse customerResponse = new CustomerResponse();
+        Role userRole = roleRepository.findByName(ERole.ROLE_USER).orElseThrow(() -> new RuntimeException("Error: Role is not found"));
+        User customer = new User(request.name(), request.email(), request.phone(), "password", userRole);
+        try {
+            customerResponse.set(this.customerRepository.save(customer));
+        } catch (Exception e) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("Bad request");
+            return new ResponseEntity<>(error, HttpStatus.BAD_REQUEST);
+        }
+        return new ResponseEntity<>(customerResponse, HttpStatus.CREATED);
+    }
+
+    @GetMapping("/{id}")
+    public ResponseEntity<Response<?>> getUserById(@PathVariable int id) {
+        User customer = this.customerRepository.findById(id).orElse(null);
+        if (customer == null) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("not found");
+            return new ResponseEntity<>(error, HttpStatus.NOT_FOUND);
+        }
+        CustomerResponse customerResponse = new CustomerResponse();
+        customerResponse.set(customer);
+        return ResponseEntity.ok(customerResponse);
+    }
+
+
+    @PutMapping("/{id}")
+    public ResponseEntity<Response<?>> updateUser(@PathVariable int id, @RequestBody PostUser customer) {
+        User customerToUpdate = this.customerRepository.findById(id).orElse(null);
+        if (customerToUpdate == null) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("not found");
+            return new ResponseEntity<>(error, HttpStatus.NOT_FOUND);
+        }
+        customerToUpdate.setUsername(customer.name());
+        customerToUpdate.setEmail(customer.email());
+        customerToUpdate.setPhone(customer.phone());
+        customerToUpdate.setUpdatedAt(OffsetDateTime.now());
+
+        try {
+            customerToUpdate = this.customerRepository.save(customerToUpdate);
+        } catch (Exception e) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("Bad request");
+            return new ResponseEntity<>(error, HttpStatus.BAD_REQUEST);
+        }
+        CustomerResponse customerResponse = new CustomerResponse();
+        customerResponse.set(customerToUpdate);
+        return new ResponseEntity<>(customerResponse, HttpStatus.CREATED);
+    }
+
+    @DeleteMapping("/{id}")
+    public ResponseEntity<Response<?>> deleteUser(@PathVariable int id) {
+        User customerToDelete = this.customerRepository.findById(id).orElse(null);
+        if (customerToDelete == null) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("not found");
+            return new ResponseEntity<>(error, HttpStatus.NOT_FOUND);
+        }
+        this.customerRepository.delete(customerToDelete);
+        CustomerResponse customerResponse = new CustomerResponse();
+        customerResponse.set(customerToDelete);
+        return ResponseEntity.ok(customerResponse);
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/controllers/MovieController.java b/src/main/java/com/booleanuk/api/cinema/controllers/MovieController.java
new file mode 100644
index 00000000..8d268865
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/controllers/MovieController.java
@@ -0,0 +1,115 @@
+package com.booleanuk.api.cinema.controllers;
+
+import com.booleanuk.api.cinema.models.Movie;
+import com.booleanuk.api.cinema.models.Screening;
+import com.booleanuk.api.cinema.payload.response.*;
+import com.booleanuk.api.cinema.repository.MovieRepository;
+import com.booleanuk.api.cinema.repository.ScreeningRepository;
+import com.booleanuk.api.cinema.repository.TicketRepository;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+import org.springframework.web.server.ResponseStatusException;
+
+import java.time.LocalDateTime;
+import java.time.OffsetDateTime;
+import java.time.format.DateTimeFormatter;
+
+@RestController
+@RequestMapping("movies")
+public class MovieController {
+    @Autowired
+    private MovieRepository movieRepository;
+    @Autowired
+    private ScreeningRepository screeningRepository;
+
+    @GetMapping
+    public ResponseEntity<MovieListResponse> getAllMovies() {
+        MovieListResponse movieListResponse = new MovieListResponse();
+        movieListResponse.set(this.movieRepository.findAll());
+        return ResponseEntity.ok(movieListResponse);
+    }
+
+    public record PostMovie(String title, String rating, String description, Integer runtimeMins, PostScreening[] screenings) {}
+
+    public record PostScreening(int screenNumber, int capacity, String startsAt) {}
+
+    @PostMapping
+    public ResponseEntity<Response<?>> createMovie(@RequestBody PostMovie request) {
+        MovieResponse movieResponse = new MovieResponse();
+        Movie movie = new Movie(request.title(), request.rating(), request.description(), request.runtimeMins(), OffsetDateTime.now());
+        try {
+            movieResponse.set(this.movieRepository.save(movie));
+        } catch (Exception e) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("Bad request");
+            return new ResponseEntity<>(error, HttpStatus.BAD_REQUEST);
+        }
+        DateTimeFormatter formatter = DateTimeFormatter.ofPattern("yyyy-MM-dd HH:mm:ssXXX");
+        for (PostScreening scr: request.screenings())
+            try {
+                this.screeningRepository.save(new Screening(movie, scr.screenNumber(), OffsetDateTime.parse(scr.startsAt(), formatter),scr.capacity()));
+            } catch (Exception e) {
+                ErrorResponse error = new ErrorResponse();
+                error.set("Bad request");
+                return new ResponseEntity<>(error, HttpStatus.BAD_REQUEST);
+            }
+        return new ResponseEntity<>(movieResponse, HttpStatus.CREATED);
+    }
+
+    @GetMapping("/{id}")
+    public ResponseEntity<Response<?>> getMovieById(@PathVariable int id) {
+        Movie movie = this.movieRepository.findById(id).orElse(null);
+        if (movie == null) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("not found");
+            return new ResponseEntity<>(error, HttpStatus.NOT_FOUND);
+        }
+        MovieResponse movieResponse = new MovieResponse();
+        movieResponse.set(movie);
+        return ResponseEntity.ok(movieResponse);
+    }
+
+    public record PutMovie(String title, String rating, String description, Integer runtimeMins) {}
+
+    @PutMapping("/{id}")
+    public ResponseEntity<Response<?>> updateMovie(@PathVariable int id, @RequestBody PutMovie movie) {
+        Movie movieToUpdate = this.movieRepository.findById(id).orElse(null);
+        if (movieToUpdate == null) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("not found");
+            return new ResponseEntity<>(error, HttpStatus.NOT_FOUND);
+        }
+        movieToUpdate.setTitle(movie.title());
+        movieToUpdate.setRating(movie.rating());
+        movieToUpdate.setDescription(movie.description());
+        movieToUpdate.setRuntimeMins(movie.runtimeMins());
+        movieToUpdate.setUpdatedAt(OffsetDateTime.now());
+
+        try {
+            movieToUpdate = this.movieRepository.save(movieToUpdate);
+        } catch (Exception e) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("Bad request");
+            return new ResponseEntity<>(error, HttpStatus.BAD_REQUEST);
+        }
+        MovieResponse movieResponse = new MovieResponse();
+        movieResponse.set(movieToUpdate);
+        return new ResponseEntity<>(movieResponse, HttpStatus.CREATED);
+    }
+
+    @DeleteMapping("/{id}")
+    public ResponseEntity<Response<?>> deleteMovie(@PathVariable int id) {
+        Movie movieToDelete = this.movieRepository.findById(id).orElse(null);
+        if (movieToDelete == null) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("not found");
+            return new ResponseEntity<>(error, HttpStatus.NOT_FOUND);
+        }
+        this.movieRepository.delete(movieToDelete);
+        MovieResponse movieResponse = new MovieResponse();
+        movieResponse.set(movieToDelete);
+        return ResponseEntity.ok(movieResponse);
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/controllers/ScreeningController.java b/src/main/java/com/booleanuk/api/cinema/controllers/ScreeningController.java
new file mode 100644
index 00000000..50908697
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/controllers/ScreeningController.java
@@ -0,0 +1,50 @@
+package com.booleanuk.api.cinema.controllers;
+
+import com.booleanuk.api.cinema.models.Movie;
+import com.booleanuk.api.cinema.models.Screening;
+import com.booleanuk.api.cinema.payload.response.ErrorResponse;
+import com.booleanuk.api.cinema.payload.response.Response;
+import com.booleanuk.api.cinema.payload.response.ScreeningListResponse;
+import com.booleanuk.api.cinema.payload.response.ScreeningResponse;
+import com.booleanuk.api.cinema.repository.MovieRepository;
+import com.booleanuk.api.cinema.repository.ScreeningRepository;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+import org.springframework.web.server.ResponseStatusException;
+
+import java.time.OffsetDateTime;
+import java.time.format.DateTimeFormatter;
+
+@RestController
+public class ScreeningController {
+    @Autowired
+    private MovieRepository movieRepository;
+    @Autowired
+    private ScreeningRepository screeningRepository;
+
+    @PostMapping("/movies/{id}/screenings")
+    public ResponseEntity<Response<?>> createScreening(@PathVariable int id, @RequestBody MovieController.PostScreening request){
+        ScreeningResponse screeningResponse = new ScreeningResponse();
+        Movie movie = movieRepository.findById(id).orElseThrow(() -> new ResponseStatusException(HttpStatus.NOT_FOUND, "Could not find movie with that id."));
+        DateTimeFormatter formatter = DateTimeFormatter.ofPattern("yyyy-MM-dd HH:mm:ssXXX");
+        Screening screening = new Screening(movie, request.screenNumber(), OffsetDateTime.parse(request.startsAt(), formatter), request.capacity());
+        try {
+            screeningResponse.set(this.screeningRepository.save(screening));
+        } catch (Exception e) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("Bad request");
+            return new ResponseEntity<>(error, HttpStatus.BAD_REQUEST);
+        }
+        return new ResponseEntity<>(screeningResponse, HttpStatus.CREATED);
+    }
+
+    @GetMapping("/movies/{id}/screenings")
+    public ResponseEntity<ScreeningListResponse> getAllScreenings(@PathVariable int id) {
+        ScreeningListResponse screeningListResponse = new ScreeningListResponse();
+        Movie movie = movieRepository.findById(id).orElseThrow(() -> new ResponseStatusException(HttpStatus.NOT_FOUND, "Could not find movie with that id."));
+        screeningListResponse.set(this.screeningRepository.findByMovie(movie));
+        return ResponseEntity.ok(screeningListResponse);
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/controllers/TicketController.java b/src/main/java/com/booleanuk/api/cinema/controllers/TicketController.java
new file mode 100644
index 00000000..fe8b2850
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/controllers/TicketController.java
@@ -0,0 +1,55 @@
+package com.booleanuk.api.cinema.controllers;
+
+import com.booleanuk.api.cinema.models.Screening;
+import com.booleanuk.api.cinema.models.Ticket;
+import com.booleanuk.api.cinema.models.User;
+import com.booleanuk.api.cinema.payload.response.ErrorResponse;
+import com.booleanuk.api.cinema.payload.response.Response;
+import com.booleanuk.api.cinema.payload.response.TicketListResponse;
+import com.booleanuk.api.cinema.payload.response.TicketResponse;
+import com.booleanuk.api.cinema.repository.ScreeningRepository;
+import com.booleanuk.api.cinema.repository.TicketRepository;
+import com.booleanuk.api.cinema.repository.UserRepository;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+import org.springframework.web.server.ResponseStatusException;
+
+@RestController
+public class TicketController {
+    @Autowired
+    private UserRepository customerRepository;
+    @Autowired
+    private TicketRepository ticketRepository;
+    @Autowired
+    private ScreeningRepository screeningRepository;
+
+    public record PostTicket(int numSeats) {}
+
+    @PostMapping("/customers/{customerId}/screenings/{screeningId}")
+    public ResponseEntity<Response<?>> createTicket(@PathVariable int customerId, @PathVariable int screeningId, @RequestBody PostTicket request){
+        TicketResponse ticketResponse = new TicketResponse();
+        User customer = customerRepository.findById(customerId).orElseThrow(() -> new ResponseStatusException(HttpStatus.NOT_FOUND, "Could not find customer with that id."));
+        Screening screening = screeningRepository.findById(screeningId).orElseThrow(() -> new ResponseStatusException(HttpStatus.NOT_FOUND, "Could not find screening with that id."));
+
+        Ticket ticket = new Ticket(customer, screening, request.numSeats());
+        try {
+            ticketResponse.set(this.ticketRepository.save(ticket));
+        } catch (Exception e) {
+            ErrorResponse error = new ErrorResponse();
+            error.set("Bad request");
+            return new ResponseEntity<>(error, HttpStatus.BAD_REQUEST);
+        }
+        return new ResponseEntity<>(ticketResponse, HttpStatus.CREATED);
+    }
+
+    @GetMapping("/customers/{customerId}/screenings/{screeningId}")
+    public ResponseEntity<TicketListResponse> getAllTickets(@PathVariable int customerId, @PathVariable int screeningId) {
+        TicketListResponse ticketListResponse = new TicketListResponse();
+        User customer = customerRepository.findById(customerId).orElseThrow(() -> new ResponseStatusException(HttpStatus.NOT_FOUND, "Could not find customer with that id."));
+        Screening screening = screeningRepository.findById(screeningId).orElseThrow(() -> new ResponseStatusException(HttpStatus.NOT_FOUND, "Could not find screening with that id."));
+        ticketListResponse.set(this.ticketRepository.findByUserAndScreening(customer, screening));
+        return ResponseEntity.ok(ticketListResponse);
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/models/ERole.java b/src/main/java/com/booleanuk/api/cinema/models/ERole.java
new file mode 100644
index 00000000..22b8d685
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/models/ERole.java
@@ -0,0 +1,7 @@
+package com.booleanuk.api.cinema.models;
+
+public enum ERole {
+    ROLE_USER,
+    ROLE_MODERATOR,
+    ROLE_ADMIN
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/models/Movie.java b/src/main/java/com/booleanuk/api/cinema/models/Movie.java
new file mode 100644
index 00000000..a60a3b8e
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/models/Movie.java
@@ -0,0 +1,56 @@
+package com.booleanuk.api.cinema.models;
+
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonIncludeProperties;
+import jakarta.persistence.*;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+import java.time.LocalDateTime;
+import java.time.OffsetDateTime;
+import java.util.List;
+
+@Data
+@NoArgsConstructor
+@Entity
+@Table(name = "movies")
+public class Movie {
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private int id;
+
+    @Column(name = "title")
+    private String title;
+
+    @Column(name = "rating")
+    private String rating;
+
+    @Column(name = "publisher")
+    private String description;
+
+    @Column(name = "runtime_mins")
+    private int runtimeMins;
+
+    @Column(name = "created_at")
+    private OffsetDateTime createdAt;
+
+    @Column(name = "updated_at")
+    private OffsetDateTime updatedAt;
+
+    @OneToMany(mappedBy = "movie", cascade = CascadeType.REMOVE)
+    @JsonIncludeProperties({"id"})
+    private List<Screening> screenings;
+
+
+    public Movie(String title, String rating, String description, int runtimeMins, OffsetDateTime createdAt) {
+        this.title = title;
+        this.rating = rating;
+        this.description = description;
+        this.runtimeMins = runtimeMins;
+        this.createdAt = createdAt;
+    }
+
+    public Movie(int id) {
+        this.id = id;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/models/Role.java b/src/main/java/com/booleanuk/api/cinema/models/Role.java
new file mode 100644
index 00000000..3b825dfb
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/models/Role.java
@@ -0,0 +1,23 @@
+package com.booleanuk.api.cinema.models;
+
+import jakarta.persistence.*;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@NoArgsConstructor
+@Data
+@Entity
+@Table(name = "roles")
+public class Role {
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private int id;
+
+    @Enumerated(EnumType.STRING)
+    @Column(length = 20)
+    private ERole name;
+
+    public Role(ERole name) {
+        this.name = name;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/models/Screening.java b/src/main/java/com/booleanuk/api/cinema/models/Screening.java
new file mode 100644
index 00000000..61ffe16c
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/models/Screening.java
@@ -0,0 +1,58 @@
+package com.booleanuk.api.cinema.models;
+
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonIncludeProperties;
+import jakarta.persistence.*;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+import java.time.LocalDateTime;
+import java.time.OffsetDateTime;
+import java.util.List;
+
+@Data
+@NoArgsConstructor
+@Entity
+@Table(name = "screenings")
+public class Screening {
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private int id;
+
+    @ManyToOne
+    @JoinColumn(name= "movie_id", nullable = false)
+    @JsonIncludeProperties({"title"})
+    private Movie movie;
+
+    @Column(name="screen_number")
+    private int screenNumber;
+
+    @Column(name = "starts_at")
+    private OffsetDateTime startsAt;
+
+    @Column
+    private int capacity;
+
+    @Column(name = "created_at")
+    private OffsetDateTime createdAt;
+
+    @Column(name = "updated_at")
+    private OffsetDateTime updatedAt;
+
+    @OneToMany(mappedBy = "screening", cascade = CascadeType.REMOVE)
+    @JsonIncludeProperties({"id"})
+    private List<Ticket> tickets;
+
+    public Screening(Movie movie, int screenNumber, OffsetDateTime startsAt, int capacity) {
+        this.movie = movie;
+        this.screenNumber = screenNumber;
+        this.startsAt = startsAt;
+        this.capacity = capacity;
+        this.createdAt = OffsetDateTime.now();
+    }
+
+    public Screening(int id) {
+        this.id = id;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/models/Ticket.java b/src/main/java/com/booleanuk/api/cinema/models/Ticket.java
new file mode 100644
index 00000000..6534d0c8
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/models/Ticket.java
@@ -0,0 +1,57 @@
+package com.booleanuk.api.cinema.models;
+
+import com.fasterxml.jackson.annotation.JsonIncludeProperties;
+import jakarta.persistence.*;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+import java.time.LocalDateTime;
+import java.time.OffsetDateTime;
+
+@Data
+@NoArgsConstructor
+@Entity
+@Table(name = "tickets")
+public class Ticket {
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private int id;
+
+    @ManyToOne
+    @JoinColumn(name= "user_id", nullable = false)
+    @JsonIncludeProperties({"username"})
+    private User user;
+
+    @ManyToOne
+    @JoinColumn(name= "screening_id", nullable = false)
+    @JsonIncludeProperties({"id"})
+    private Screening screening;
+
+    @Column(name= "num_seats")
+    private int numSeats;
+
+    @Column(name = "created_at")
+    private OffsetDateTime createdAt;
+
+    @Column(name = "updated_at")
+    private OffsetDateTime updatedAt;
+
+    public Ticket(User user, Screening screening, int numSeats, OffsetDateTime createdAt, OffsetDateTime updatedAt) {
+        this.user = user;
+        this.screening = screening;
+        this.numSeats = numSeats;
+        this.createdAt = createdAt;
+        this.updatedAt = updatedAt;
+    }
+
+    public Ticket(User user, Screening screening, int numSeats) {
+        this.user = user;
+        this.screening = screening;
+        this.numSeats = numSeats;
+        this.createdAt = OffsetDateTime.now();
+    }
+
+    public Ticket(int id) {
+        this.id = id;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/models/User.java b/src/main/java/com/booleanuk/api/cinema/models/User.java
new file mode 100644
index 00000000..a2891585
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/models/User.java
@@ -0,0 +1,77 @@
+package com.booleanuk.api.cinema.models;
+
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonIncludeProperties;
+import jakarta.persistence.*;
+import jakarta.validation.constraints.Email;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Size;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+import java.time.LocalDateTime;
+import java.time.OffsetDateTime;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+
+@NoArgsConstructor
+@Data
+@Entity
+@Table(name = "users",
+    uniqueConstraints = {
+        @UniqueConstraint(columnNames = "username"),
+        @UniqueConstraint(columnNames = "email")
+    })
+public class User {
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private int id;
+
+    @NotBlank
+    @Size(max = 20)
+    private String username;
+
+    @NotBlank
+    @Size(max = 50)
+    @Email
+    private String email;
+
+    @NotBlank
+    @Size(max = 50)
+    private String phone;
+
+    @NotBlank
+    @Size(max = 120)
+    private String password;
+
+    @ManyToMany(fetch = FetchType.LAZY)
+    @JoinTable(name = "user_roles", joinColumns = @JoinColumn(name = "user_id"), inverseJoinColumns = @JoinColumn(name = "role_id"))
+    private Set<Role> roles = new HashSet<>();
+
+    @Column(name = "created_at")
+    private OffsetDateTime createdAt;
+
+    @Column(name = "updated_at")
+    private OffsetDateTime updatedAt;
+
+    @OneToMany(mappedBy = "user", cascade = CascadeType.REMOVE)
+    @JsonIncludeProperties({"id"})
+    private List<Ticket> tickets;
+
+    public User(String username, String email, String password) {
+        this.username = username;
+        this.email = email;
+        this.password = password;
+        this.createdAt = OffsetDateTime.now();
+    }
+
+    public User(String username, String email, String phone, String password, Role role) {
+        this.username = username;
+        this.email = email;
+        this.phone = phone;
+        this.password = password;
+        this.roles.add(role);
+        this.createdAt = OffsetDateTime.now();
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/request/LoginRequest.java b/src/main/java/com/booleanuk/api/cinema/payload/request/LoginRequest.java
new file mode 100644
index 00000000..c16393fe
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/request/LoginRequest.java
@@ -0,0 +1,15 @@
+package com.booleanuk.api.cinema.payload.request;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Getter;
+import lombok.Setter;
+
+@Getter
+@Setter
+public class LoginRequest {
+    @NotBlank
+    private String username;
+
+    @NotBlank
+    private String password;
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/request/SignupRequest.java b/src/main/java/com/booleanuk/api/cinema/payload/request/SignupRequest.java
new file mode 100644
index 00000000..f9f4d5d3
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/request/SignupRequest.java
@@ -0,0 +1,29 @@
+package com.booleanuk.api.cinema.payload.request;
+
+import jakarta.validation.constraints.Email;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Size;
+import lombok.Getter;
+import lombok.Setter;
+
+import java.util.Set;
+
+@Getter
+@Setter
+public class SignupRequest {
+    @NotBlank
+    @Size(min = 3, max = 20)
+    private String username;
+
+    @NotBlank
+    @Size(max = 50)
+    @Email
+    private String email;
+
+    private Set<String> role;
+
+    @NotBlank
+    @Size(min = 6, max = 40)
+    private String password;
+
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/CustomerListResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/CustomerListResponse.java
new file mode 100644
index 00000000..a23260e0
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/CustomerListResponse.java
@@ -0,0 +1,9 @@
+package com.booleanuk.api.cinema.payload.response;
+
+
+import com.booleanuk.api.cinema.models.User;
+
+import java.util.List;
+
+public class CustomerListResponse extends Response<List<User>> {
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/CustomerResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/CustomerResponse.java
new file mode 100644
index 00000000..c0f42ee2
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/CustomerResponse.java
@@ -0,0 +1,6 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import com.booleanuk.api.cinema.models.User;
+
+public class CustomerResponse extends Response<User> {
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/ErrorResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/ErrorResponse.java
new file mode 100644
index 00000000..90029965
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/ErrorResponse.java
@@ -0,0 +1,19 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+import java.util.HashMap;
+import java.util.Map;
+
+@Getter
+@NoArgsConstructor
+public class ErrorResponse extends Response<Map<String, String>> {
+    public void set(String message) {
+        this.status = "error";
+
+        Map<String, String> reply = new HashMap<>();
+        reply.put("message", message);
+        this.data = reply;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/JwtResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/JwtResponse.java
new file mode 100644
index 00000000..f29a3819
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/JwtResponse.java
@@ -0,0 +1,25 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import lombok.Getter;
+import lombok.Setter;
+
+import java.util.List;
+
+@Getter
+@Setter
+public class JwtResponse {
+    private String token;
+    private String type = "Bearer";
+    private int id;
+    private String username;
+    private String email;
+    private List<String> roles;
+
+    public JwtResponse(String token, int id, String username, String email, List<String> roles) {
+        this.token = token;
+        this.id = id;
+        this.username = username;
+        this.email = email;
+        this.roles = roles;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/MessageResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/MessageResponse.java
new file mode 100644
index 00000000..485b570f
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/MessageResponse.java
@@ -0,0 +1,14 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import lombok.Getter;
+import lombok.Setter;
+
+@Getter
+@Setter
+public class MessageResponse {
+    private String message;
+
+    public MessageResponse(String message) {
+        this.message = message;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/MovieListResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/MovieListResponse.java
new file mode 100644
index 00000000..ed5edea5
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/MovieListResponse.java
@@ -0,0 +1,8 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import com.booleanuk.api.cinema.models.Movie;
+
+import java.util.List;
+
+public class MovieListResponse extends Response<List<Movie>> {
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/MovieResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/MovieResponse.java
new file mode 100644
index 00000000..3e0f1bbf
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/MovieResponse.java
@@ -0,0 +1,6 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import com.booleanuk.api.cinema.models.Movie;
+
+public class MovieResponse extends Response<Movie> {
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/Response.java b/src/main/java/com/booleanuk/api/cinema/payload/response/Response.java
new file mode 100644
index 00000000..f2dff66d
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/Response.java
@@ -0,0 +1,14 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import lombok.Getter;
+
+@Getter
+public class Response<T> {
+    protected String status;
+    protected T data;
+
+    public void set(T data) {
+        this.status = "success";
+        this.data = data;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/ScreeningListResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/ScreeningListResponse.java
new file mode 100644
index 00000000..c65f09b5
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/ScreeningListResponse.java
@@ -0,0 +1,8 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import com.booleanuk.api.cinema.models.Screening;
+
+import java.util.List;
+
+public class ScreeningListResponse extends Response<List<Screening>> {
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/ScreeningResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/ScreeningResponse.java
new file mode 100644
index 00000000..3a710ffe
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/ScreeningResponse.java
@@ -0,0 +1,7 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import com.booleanuk.api.cinema.models.Movie;
+import com.booleanuk.api.cinema.models.Screening;
+
+public class ScreeningResponse extends Response<Screening> {
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/TicketListResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/TicketListResponse.java
new file mode 100644
index 00000000..042883ae
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/TicketListResponse.java
@@ -0,0 +1,9 @@
+package com.booleanuk.api.cinema.payload.response;
+
+
+import com.booleanuk.api.cinema.models.Ticket;
+
+import java.util.List;
+
+public class TicketListResponse extends Response<List<Ticket>> {
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/payload/response/TicketResponse.java b/src/main/java/com/booleanuk/api/cinema/payload/response/TicketResponse.java
new file mode 100644
index 00000000..0a986fb4
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/payload/response/TicketResponse.java
@@ -0,0 +1,6 @@
+package com.booleanuk.api.cinema.payload.response;
+
+import com.booleanuk.api.cinema.models.Ticket;
+
+public class TicketResponse extends Response<Ticket> {
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/repository/MovieRepository.java b/src/main/java/com/booleanuk/api/cinema/repository/MovieRepository.java
new file mode 100644
index 00000000..3f9be14d
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/repository/MovieRepository.java
@@ -0,0 +1,7 @@
+package com.booleanuk.api.cinema.repository;
+
+import com.booleanuk.api.cinema.models.Movie;
+import org.springframework.data.jpa.repository.JpaRepository;
+
+public interface MovieRepository extends JpaRepository<Movie, Integer> {
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/repository/RoleRepository.java b/src/main/java/com/booleanuk/api/cinema/repository/RoleRepository.java
new file mode 100644
index 00000000..f89e74b1
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/repository/RoleRepository.java
@@ -0,0 +1,12 @@
+package com.booleanuk.api.cinema.repository;
+
+import com.booleanuk.api.cinema.models.ERole;
+import com.booleanuk.api.cinema.models.Role;
+import org.springframework.data.jpa.repository.JpaRepository;
+
+import java.util.Optional;
+
+public interface RoleRepository extends JpaRepository<Role, Integer> {
+    Optional<Role> findByName(ERole name);
+    Boolean existsByName(ERole name);
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/repository/ScreeningRepository.java b/src/main/java/com/booleanuk/api/cinema/repository/ScreeningRepository.java
new file mode 100644
index 00000000..3c4d5bee
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/repository/ScreeningRepository.java
@@ -0,0 +1,11 @@
+package com.booleanuk.api.cinema.repository;
+
+import com.booleanuk.api.cinema.models.Movie;
+import com.booleanuk.api.cinema.models.Screening;
+import org.springframework.data.jpa.repository.JpaRepository;
+
+import java.util.List;
+
+public interface ScreeningRepository extends JpaRepository<Screening, Integer> {
+    List<Screening> findByMovie(Movie movie);
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/repository/TicketRepository.java b/src/main/java/com/booleanuk/api/cinema/repository/TicketRepository.java
new file mode 100644
index 00000000..1a63e96b
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/repository/TicketRepository.java
@@ -0,0 +1,14 @@
+package com.booleanuk.api.cinema.repository;
+
+import com.booleanuk.api.cinema.models.Movie;
+import com.booleanuk.api.cinema.models.Screening;
+import com.booleanuk.api.cinema.models.Ticket;
+import com.booleanuk.api.cinema.models.User;
+import org.springframework.data.jpa.repository.JpaRepository;
+
+import java.util.List;
+
+public interface TicketRepository extends JpaRepository<Ticket, Integer> {
+    List<Ticket> findByUser(User user);
+    List<Ticket> findByUserAndScreening(User user, Screening screening);
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/repository/UserRepository.java b/src/main/java/com/booleanuk/api/cinema/repository/UserRepository.java
new file mode 100644
index 00000000..fc67d3c1
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/repository/UserRepository.java
@@ -0,0 +1,15 @@
+package com.booleanuk.api.cinema.repository;
+
+import com.booleanuk.api.cinema.models.User;
+import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.stereotype.Repository;
+
+import java.util.Optional;
+
+@Repository
+public interface UserRepository extends JpaRepository<User, Integer> {
+    Optional<User> findByUsername(String username);
+
+    Boolean existsByUsername(String username);
+    Boolean existsByEmail(String email);
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/security/WebSecurityConfig.java b/src/main/java/com/booleanuk/api/cinema/security/WebSecurityConfig.java
new file mode 100644
index 00000000..e81e70fd
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/security/WebSecurityConfig.java
@@ -0,0 +1,72 @@
+package com.booleanuk.api.cinema.security;
+
+import com.booleanuk.api.cinema.security.jwt.AuthEntryPointJwt;
+import com.booleanuk.api.cinema.security.jwt.AuthTokenFilter;
+import com.booleanuk.api.cinema.security.services.UserDetailsServiceImpl;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
+import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+
+@Configuration
+@EnableWebSecurity
+public class WebSecurityConfig {
+    @Autowired
+    private UserDetailsServiceImpl userDetailsService;
+
+    @Autowired
+    private AuthEntryPointJwt unauthorizedHandler;
+
+    @Bean
+    public AuthTokenFilter authenticationJwtTokenFilter() {
+        return new AuthTokenFilter();
+    }
+
+    @Bean
+    public DaoAuthenticationProvider authenticationProvider() {
+        DaoAuthenticationProvider authProvider = new DaoAuthenticationProvider();
+
+        authProvider.setUserDetailsService(userDetailsService);
+        authProvider.setPasswordEncoder(passwordEncoder());
+
+        return authProvider;
+    }
+
+    @Bean
+    public PasswordEncoder passwordEncoder() {
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
+        http
+                .csrf((csrf) -> csrf.disable())
+                .exceptionHandling((exception) -> exception.authenticationEntryPoint(unauthorizedHandler))
+                .sessionManagement((session) -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
+                .authorizeHttpRequests((requests) -> requests
+                        .requestMatchers("/auth/**").permitAll()
+                        .requestMatchers(HttpMethod.GET, "/movies", "/movies/**").authenticated()
+                        .requestMatchers("/movies", "/movies/**").hasRole("ADMIN")
+                        .requestMatchers("/customers", "/customers/**").hasRole("ADMIN")
+                        .requestMatchers("/customers/*/screenings/*").authenticated()
+                );
+        http.authenticationProvider(authenticationProvider());
+        http.addFilterBefore(authenticationJwtTokenFilter(), UsernamePasswordAuthenticationFilter.class);
+        return http.build();
+    }
+
+    @Bean
+    public AuthenticationManager authenticationManager(AuthenticationConfiguration authenticationConfiguration) throws Exception {
+        return authenticationConfiguration.getAuthenticationManager();
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/security/jwt/AuthEntryPointJwt.java b/src/main/java/com/booleanuk/api/cinema/security/jwt/AuthEntryPointJwt.java
new file mode 100644
index 00000000..1a5d63c2
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/security/jwt/AuthEntryPointJwt.java
@@ -0,0 +1,24 @@
+package com.booleanuk.api.cinema.security.jwt;
+
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.web.AuthenticationEntryPoint;
+import org.springframework.stereotype.Component;
+
+import java.io.IOException;
+
+@Component
+public class AuthEntryPointJwt implements AuthenticationEntryPoint {
+    private static final Logger logger = LoggerFactory.getLogger(AuthEntryPointJwt.class);
+
+    @Override
+    public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) throws IOException, ServletException {
+        logger.error("Unauthorized error: {}", authException.getMessage());
+        response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Error: Unauthorized");
+    }
+
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/security/jwt/AuthTokenFilter.java b/src/main/java/com/booleanuk/api/cinema/security/jwt/AuthTokenFilter.java
new file mode 100644
index 00000000..192f22c2
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/security/jwt/AuthTokenFilter.java
@@ -0,0 +1,54 @@
+package com.booleanuk.api.cinema.security.jwt;
+
+import com.booleanuk.api.cinema.security.services.UserDetailsServiceImpl;
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;
+import org.springframework.util.StringUtils;
+import org.springframework.web.filter.OncePerRequestFilter;
+
+import java.io.IOException;
+
+public class AuthTokenFilter extends OncePerRequestFilter {
+    @Autowired
+    private JwtUtils jwtUtils;
+
+    @Autowired
+    private UserDetailsServiceImpl userDetailsService;
+
+    private static final Logger logger = LoggerFactory.getLogger(AuthTokenFilter.class);
+
+    @Override
+    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
+        throws ServletException, IOException {
+        try {
+            String jwt = parseJwt(request);
+            if (jwt != null && jwtUtils.validateJwtToken(jwt)) {
+                String username = jwtUtils.getUserNameFromJwtToken(jwt);
+                UserDetails userDetails = userDetailsService.loadUserByUsername(username);
+                UsernamePasswordAuthenticationToken authentication = new UsernamePasswordAuthenticationToken(userDetails, null, userDetails.getAuthorities());
+                authentication.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));
+                SecurityContextHolder.getContext().setAuthentication(authentication);
+            }
+        } catch (Exception e) {
+            logger.error("Cannot set user authentication: {}", e.getMessage());
+        }
+        filterChain.doFilter(request, response);
+    }
+
+    private String parseJwt(HttpServletRequest request) {
+        String headerAuth = request.getHeader("Authorization");
+        if (StringUtils.hasText(headerAuth) && headerAuth.startsWith("Bearer ")) {
+            return headerAuth.substring(7);
+        }
+        return null;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/security/jwt/JwtUtils.java b/src/main/java/com/booleanuk/api/cinema/security/jwt/JwtUtils.java
new file mode 100644
index 00000000..a780c3d6
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/security/jwt/JwtUtils.java
@@ -0,0 +1,63 @@
+package com.booleanuk.api.cinema.security.jwt;
+
+import com.booleanuk.api.cinema.security.services.UserDetailsImpl;
+import io.jsonwebtoken.ExpiredJwtException;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.MalformedJwtException;
+import io.jsonwebtoken.UnsupportedJwtException;
+import io.jsonwebtoken.io.Decoders;
+import io.jsonwebtoken.security.Keys;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.security.core.Authentication;
+import org.springframework.stereotype.Component;
+
+import javax.crypto.SecretKey;
+import java.util.Date;
+
+@Component
+public class JwtUtils {
+    private static final Logger logger = LoggerFactory.getLogger(JwtUtils.class);
+
+    @Value("${booleanuk.app.jwtSecret}")
+    private String jwtSecret;
+
+    @Value("${booleanuk.app.jwtExpirationMs}")
+    private int jwtExpirationMs;
+
+    public String generateJwtToken(Authentication authentication) {
+        UserDetailsImpl userPrincipal = (UserDetailsImpl) authentication.getPrincipal();
+
+        return Jwts.builder()
+                .subject((userPrincipal.getUsername()))
+                .issuedAt(new Date())
+                .expiration(new Date((new Date()).getTime() + this.jwtExpirationMs))
+                .signWith(this.key())
+                .compact();
+    }
+
+    private SecretKey key() {
+        return Keys.hmacShaKeyFor(Decoders.BASE64.decode(this.jwtSecret));
+    }
+
+    public String getUserNameFromJwtToken(String token) {
+        return Jwts.parser().verifyWith(this.key()).build().parseSignedClaims(token).getPayload().getSubject();
+    }
+
+    public boolean validateJwtToken(String authToken) {
+        try {
+            Jwts.parser().verifyWith(this.key()).build().parse(authToken);
+            return true;
+        } catch (MalformedJwtException e) {
+            logger.error("Invalid JWT token: {}", e.getMessage());
+        } catch (ExpiredJwtException e) {
+            logger.error("JWT token has expired: {}", e.getMessage());
+        } catch (UnsupportedJwtException e) {
+            logger.error("JWT token is unsupported: {}", e.getMessage());
+        } catch (IllegalArgumentException e) {
+            logger.error("JWT claims string is empty: {}", e.getMessage());
+        }
+        return false;
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/security/services/UserDetailsImpl.java b/src/main/java/com/booleanuk/api/cinema/security/services/UserDetailsImpl.java
new file mode 100644
index 00000000..268543bf
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/security/services/UserDetailsImpl.java
@@ -0,0 +1,59 @@
+package com.booleanuk.api.cinema.security.services;
+
+import com.booleanuk.api.cinema.models.User;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import lombok.Getter;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.Collection;
+import java.util.List;
+import java.util.Objects;
+import java.util.stream.Collectors;
+
+@Getter
+public class UserDetailsImpl implements UserDetails {
+    private static final long serialVersionUID = 1L;
+
+    private int id;
+    private String username;
+    private String email;
+
+    @JsonIgnore
+    private String password;
+
+    private Collection<? extends GrantedAuthority> authorities;
+
+    public UserDetailsImpl(int id, String username, String email, String password, Collection<? extends GrantedAuthority> authorities) {
+        this.id = id;
+        this.username = username;
+        this.email = email;
+        this.password = password;
+        this.authorities = authorities;
+    }
+
+    public static UserDetailsImpl build(User user) {
+        List<GrantedAuthority> authorities = user.getRoles().stream()
+                .map(role -> new SimpleGrantedAuthority(role.getName().name()))
+                .collect(Collectors.toList());
+        return new UserDetailsImpl(
+                user.getId(),
+                user.getUsername(),
+                user.getEmail(),
+                user.getPassword(),
+                authorities);
+    }
+
+    @Override
+    public boolean equals(Object o) {
+        if (this == o) {
+            return true;
+        }
+        if (o == null || getClass() != o.getClass()) {
+            return false;
+        }
+        UserDetailsImpl user = (UserDetailsImpl) o;
+        return Objects.equals(id, user.id);
+    }
+}
diff --git a/src/main/java/com/booleanuk/api/cinema/security/services/UserDetailsServiceImpl.java b/src/main/java/com/booleanuk/api/cinema/security/services/UserDetailsServiceImpl.java
new file mode 100644
index 00000000..bfaa71a4
--- /dev/null
+++ b/src/main/java/com/booleanuk/api/cinema/security/services/UserDetailsServiceImpl.java
@@ -0,0 +1,26 @@
+package com.booleanuk.api.cinema.security.services;
+
+import com.booleanuk.api.cinema.models.User;
+import com.booleanuk.api.cinema.repository.UserRepository;
+import jakarta.transaction.Transactional;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.stereotype.Service;
+
+@Service
+public class UserDetailsServiceImpl implements UserDetailsService {
+    @Autowired
+    UserRepository userRepository;
+
+    @Override
+    @Transactional
+    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
+        User user = userRepository.findByUsername(username).orElseThrow(
+                () -> new UsernameNotFoundException("User not found with username: " + username)
+        );
+        return UserDetailsImpl.build(user);
+
+    }
+}