Added docs for API tokens and access

Author: korridor

docs/self-hosting/guides/docker.md

@@ -167,6 +167,35 @@ There you can enter the API URL and the client ID.
 
 <img src="/img/solidtime-desktop-instance-settings-2.png" alt="Screenshot of soldtime Desktop showing the Instance Settings interface" width="500" />
 
+### 10. Activate API access via user API tokens (optional)
+
+solidtime has a feature that allows users to create API tokens to access the API.
+This can be used to automate tasks or to create integrations with other services.
+
+To activate this feature you need to create a OAuth client via the CLI.
+
+```bash
+docker compose exec scheduler php artisan passport:client --personal --name="API"
+```
+
+This command will create the client in the database and output the client ID and the client secret.
+The client ID and the client need to be added to the `laravel.env` file.
+
+```env
+PASSPORT_PERSONAL_ACCESS_CLIENT_ID="insert-id"
+PASSPORT_PERSONAL_ACCESS_CLIENT_SECRET="insert-secret"
+```
+
+After you added the client ID and the client secret to the `laravel.env` file, you need to restart the containers.
+
+```bash
+docker compose down && docker compose up -d
+```
+
+Now users can create API tokens in the user settings.
+Read more about how you can create an API token and how to use the API [here](/user-guide/access-api).
+
+
 ## Update
 
 To update solidtime, you can pull the latest image from the Docker registry.

docs/user-guide/access-api.md

@@ -0,0 +1,36 @@
+---
+sidebar_position: 6
+---
+
+# API access
+
+The solidtime API is a RESTful API that allows you to access and manipulate data in solidtime.
+The API is designed to be easy to use and to provide all the functionality that is available in the solidtime web application.
+
+## Creating an API Token
+
+To access the API, you need an API token.
+You can create an API token in the user settings.
+
+1. Click on "Profile Settings" in the bottom left corner
+2. Scroll down to the "Create API Token" section
+3. Enter a name and click on "Create API Token"
+4. The API token will be displayed in a popup. Copy the token and store it in a safe place.
+
+:::warning
+The API token is only displayed once. If you lose the token, you need to create a new one.
+:::
+
+## Using the API
+
+The API token is a JWT token.
+You need to add the token to the Authorization header of your HTTP requests with a `Bearer ` prefix.
+
+**Example:**
+
+```
+Authorization: Bearer <api-token>
+```
+
+All API endpoints are documented in [the API reference](/api-reference).
+

docs/user-guide/billable-rates.md

@@ -1,5 +1,5 @@
 ---
-sidebar_position: 4
+sidebar_position: 3
 ---
 
 # Billable rates

docs/user-guide/export.md

@@ -1,5 +1,5 @@
 ---
-sidebar_position: 6
+sidebar_position: 5
 ---
 
 # Export

docs/user-guide/import.md

@@ -1,5 +1,5 @@
 ---
-sidebar_position: 5
+sidebar_position: 4
 ---
 
 # Import