Kyle DammannandClaude Opus 5.5
ef9deaeff7
- Django 5.2 + PostgreSQL 17 via docker compose (app + db, volumes, healthcheck on /healthz, test profile running pytest against Postgres) - Custom e-mail user model with user/admin roles - Invitation-only registration with single-use, hashed, expiring links - Admin area: invitations, role changes, deactivation, password reset via one-time link or temporary password (forced change on login) - First admin created from ADMIN_EMAIL/ADMIN_PASSWORD on startup - Login rate limiting per e-mail and IP (DB-backed, worker-safe) - Proxy middleware honouring X-Forwarded-* only from TRUSTED_PROXIES, optional CLIENT_IP_HEADER (e.g. CF-Connecting-IP) - Security headers (CSP, HSTS, Permissions-Policy), secure __Host- cookies - Mobile-first German UI, CLAUDE.md, README, init-env script - 65 tests for auth, permissions, proxy handling and rate limiting Co-Authored-By: Claude Opus 5.5 <[email protected]>
31 lines
855 B
Python
31 lines
855 B
Python
from django.contrib.auth.decorators import login_not_required
|
|
from django.db import connection
|
|
from django.http import JsonResponse
|
|
from django.shortcuts import render
|
|
from django.views.decorators.cache import never_cache
|
|
from django.views.decorators.http import require_GET
|
|
|
|
|
|
def home(request):
|
|
return render(request, "core/home.html")
|
|
|
|
|
|
@login_not_required
|
|
@never_cache
|
|
@require_GET
|
|
def healthz(request):
|
|
try:
|
|
with connection.cursor() as cursor:
|
|
cursor.execute("SELECT 1")
|
|
except Exception:
|
|
return JsonResponse({"status": "error", "database": "unreachable"}, status=503)
|
|
return JsonResponse({"status": "ok"})
|
|
|
|
|
|
def error_403(request, exception=None):
|
|
return render(request, "errors/403.html", status=403)
|
|
|
|
|
|
def error_404(request, exception=None):
|
|
return render(request, "errors/404.html", status=404)
|