Kyle DammannandClaude Opus 5.5
ef9deaeff7
- Django 5.2 + PostgreSQL 17 via docker compose (app + db, volumes, healthcheck on /healthz, test profile running pytest against Postgres) - Custom e-mail user model with user/admin roles - Invitation-only registration with single-use, hashed, expiring links - Admin area: invitations, role changes, deactivation, password reset via one-time link or temporary password (forced change on login) - First admin created from ADMIN_EMAIL/ADMIN_PASSWORD on startup - Login rate limiting per e-mail and IP (DB-backed, worker-safe) - Proxy middleware honouring X-Forwarded-* only from TRUSTED_PROXIES, optional CLIENT_IP_HEADER (e.g. CF-Connecting-IP) - Security headers (CSP, HSTS, Permissions-Policy), secure __Host- cookies - Mobile-first German UI, CLAUDE.md, README, init-env script - 65 tests for auth, permissions, proxy handling and rate limiting Co-Authored-By: Claude Opus 5.5 <[email protected]>
19 lines
899 B
Python
19 lines
899 B
Python
from django.urls import path
|
|
|
|
from . import admin_views, views
|
|
|
|
app_name = "accounts"
|
|
|
|
urlpatterns = [
|
|
path("anmelden/", views.login_view, name="login"),
|
|
path("abmelden/", views.logout_view, name="logout"),
|
|
path("einladung/<str:token>/", views.register, name="register"),
|
|
path("passwort-zuruecksetzen/<str:token>/", views.password_reset, name="password_reset"),
|
|
path("konto/", views.profile, name="profile"),
|
|
path("konto/passwort/", views.password_change, name="password_change"),
|
|
path("verwaltung/nutzer/", admin_views.user_list, name="admin_users"),
|
|
path("verwaltung/nutzer/<int:pk>/<str:action>/", admin_views.user_action, name="admin_user_action"),
|
|
path("verwaltung/einladungen/", admin_views.invitation_list, name="admin_invitations"),
|
|
path("verwaltung/einladungen/<int:pk>/widerrufen/", admin_views.invitation_revoke, name="admin_invitation_revoke"),
|
|
]
|