Add more documentation

docs/api.rst

-API documentation
-=================
+CSEntry API
+===========
+
+Basic usage
+-----------
+
+The root of the API is at `/api/v1`.
+
+Example of a valid API request using curl::
+
+    curl https://csentry.esss.lu.se/api/v1/inventory/items
+
+
+Authentication
+--------------
+
+To access CSEntry API, a personal access token is required.
+
+A temporary token can be retrieved by sending a POST to `/api/v1/user/login` including the username
+and password. It will return a token valid for 12 hours.
+
+A token that never expires can be generated from the user profile page.
+See :ref:`token-generation`.
+
+The token should be passed in the header as follow::
+
+    curl --header 'Authorization: Bearer <token>' https://csentry.esss.lu.se/api/v1/inventory/items
+
 
 Summary
 -------

docs/conf.py

@@ -110,6 +110,8 @@ html_static_path = ['_static']
 # refs: http://alabaster.readthedocs.io/en/latest/installation.html#sidebars
 html_sidebars = {
     '**': [
+        'about.html',
+        'navigation.html',
         'relations.html',  # needs 'show_related': True theme option to display
         'searchbox.html',
     ]

docs/index.rst

@@ -6,17 +6,10 @@
 Welcome to CSEntry's documentation!
 ===================================
 
-.. toctree::
-   :maxdepth: 2
-   :caption: Contents:
-
-
-API
----
-
 .. toctree::
    :maxdepth: 2
 
+   usage
    api
 
 

docs/usage.rst

+.. _usage:
+
+Usage
+=====
+
+Overview
+--------
+
+Control System Entry is a web application that facilitates the tracking of physical items
+and network devices.
+
+
+.. _token-generation:
+
+Generate a personal access token
+--------------------------------
+
+1. Go to your profile page by clicking on your name in the upper right corner.
+
+   .. image:: _static/access_profile.png
+
+2. Enter a description for the token and click on **Generate token**.
+
+   .. image:: _static/profile.png
+
+3. Click on the icon on the left of the generated token to copy it to the clipboard.
+   Save it to a safe place. You won't be able to see the token again! Only the JWT id is saved to the database.
+
+   .. image:: _static/token_copied.png
+
+
+Revoke a personal access token
+-------------------------------
+
+1. Click on the trash icon on the left of the JWT id on your profile page. A confirmation window will open.
+
+   .. image:: _static/revoke_token.png
+
+2. Click **OK** to revoke the token. Or **Cancel**.
+
+   .. image:: _static/token_revoked.png