Auth and config system

.env.example

@@ -0,0 +1,42 @@
+# .env.example
+# Copy this file to .env and fill in the secrets for local development.
+# DO NOT COMMIT .env TO VERSION CONTROL.
+# This file overrides config.yaml
+
+# --- Core Security (REQUIRED IN PRODUCTION) ---
+# Generate a new one for production!
+SECRET_KEY=django-insecure-my-local-dev-secret-key
+
+# --- Local Overrides ---
+# Set to False in production
+# DEBUG=True
+
+# --- Infrastructure (REQUIRED) ---
+# Use a single URL for database and Redis connections.
+# Format: driver://user:password@host:port/dbname
+DATABASE__URL=postgres://admin:test@127.0.0.1:5432/coursereview
+REDIS__URL=redis://localhost:6379/0
+
+# --- External Services Secrets (REQUIRED) ---
+TURNSTILE_SECRET_KEY=dummy0
+
+# Use PARENT__CHILD format to override nested settings
+# URL and ID may be specified in config.yaml
+QUEST__SIGNUP__API_KEY=dummy1
+# QUEST__SIGNUP__URL=
+# QUEST__SIGNUP__QUESTIONID=
+
+QUEST__LOGIN__API_KEY=dummy2
+# QUEST__LOGIN__URL=
+# QUEST__LOGIN__QUESTIONID=
+
+QUEST__RESET__API_KEY=dummy3
+# QUEST__RESET__URL=
+# QUEST__RESET__QUESTIONID=
+
+# --- Other Overrides (Optional) ---
+# Example of overriding a nested value in the AUTH dictionary
+# AUTH__OTP_TIMEOUT=60
+
+# Example of overriding a list with a comma-separated string
+# ALLOWED_HOSTS=localhost,127.0.0.1,dev.my-app.com

.gitignore

@@ -1,40 +1,36 @@
-### Project ignores
-.venv/
-venv/
-staticfiles
-.env
-.pyversion
-data
+config.yaml
 
-### Python ignores (https://github.com/github/gitignore/blob/master/Python.gitignore)
 # Byte-compiled / optimized / DLL files
 __pycache__/
-*.py[cod]
+*.py[codz]
 *$py.class
 
 # C extensions
 *.so
 
 # Distribution / packaging
 .Python
-env/
 build/
 develop-eggs/
 dist/
 downloads/
 eggs/
 .eggs/
+lib/
 lib64/
 parts/
 sdist/
 var/
+wheels/
+share/python-wheels/
 *.egg-info/
 .installed.cfg
 *.egg
+MANIFEST
 
 # PyInstaller
-#  Usually these files are written by a python script from a template
-#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+#   Usually these files are written by a python script from a template
+#   before PyInstaller builds the exe, so as to inject date/other infos into it.
 *.manifest
 *.spec
 
@@ -45,44 +41,180 @@ pip-delete-this-directory.txt
 # Unit test / coverage reports
 htmlcov/
 .tox/
+.nox/
 .coverage
 .coverage.*
 .cache
 nosetests.xml
 coverage.xml
-*,cover
+*.cover
+*.py.cover
 .hypothesis/
+.pytest_cache/
+cover/
 
 # Translations
 *.mo
 *.pot
 
 # Django stuff:
 *.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+staticfiles
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
 
 # Sphinx documentation
 docs/_build/
 
 # PyBuilder
+.pybuilder/
 target/
 
-package-lock.json
-pnpm-lock.yaml
-bun.lock
+# Jupyter Notebook
+.ipynb_checkpoints
 
-node_modules
-**/node_modules
+# IPython
+profile_default/
+ipython_config.py
 
+# pyenv
+#   For a library or package, you might want to ignore these files since the code is
+#   intended to run in multiple environments; otherwise, check them in:
+# .python-version
 
-.DS_Store
-**/.DS_Store
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+# Pipfile.lock
 
-# node version compabilities
-.nvmrc
-course-activity-service-account.json
-Layup-List.code-workspace
-.vscode/
-db.sqlite3
-*.db
+# UV
+#   Similar to Pipfile.lock, it is generally recommended to include uv.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+# uv.lock
+
+# poetry
+#   Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#   https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
+# poetry.lock
+# poetry.toml
+
+# pdm
+#   Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
+#   pdm recommends including project-wide configuration in pdm.toml, but excluding .pdm-python.
+#   https://pdm-project.org/en/latest/usage/project/#working-with-version-control
+# pdm.lock
+# pdm.toml
+.pdm-python
+.pdm-build/
+
+# pixi
+#   Similar to Pipfile.lock, it is generally recommended to include pixi.lock in version control.
+# pixi.lock
+#   Pixi creates a virtual environment in the .pixi directory, just like venv module creates one
+#   in the .venv directory. It is recommended not to include this directory in version control.
+.pixi
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# Redis
 *.rdb
-.aider*
+*.aof
+*.pid
+
+# RabbitMQ
+mnesia/
+rabbitmq/
+rabbitmq-data/
+
+# ActiveMQ
+activemq-data/
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.envrc
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/
+
+# pytype static type analyzer
+.pytype/
+
+# Cython debug symbols
+cython_debug/
+
+# PyCharm
+#   JetBrains specific template is maintained in a separate JetBrains.gitignore that can
+#   be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
+#   and can be added to the global gitignore or merged into this file.  For a more nuclear
+#   option (not recommended) you can uncomment the following to ignore the entire idea folder.
+# .idea/
+
+# Abstra
+#   Abstra is an AI-powered process automation framework.
+#   Ignore directories containing user credentials, local state, and settings.
+#   Learn more at https://abstra.io/docs
+.abstra/
+
+# Visual Studio Code
+#   Visual Studio Code specific template is maintained in a separate VisualStudioCode.gitignore 
+#   that can be found at https://github.com/github/gitignore/blob/main/Global/VisualStudioCode.gitignore
+#   and can be added to the global gitignore or merged into this file. However, if you prefer, 
+#   you could uncomment the following to ignore the entire vscode folder
+# .vscode/
+
+# Ruff stuff:
+.ruff_cache/
+
+# PyPI configuration file
+.pypirc
+
+# Marimo
+marimo/_static/
+marimo/_lsp/
+__marimo__/
+
+# Streamlit
+.streamlit/secrets.toml
+

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "frontend"]
+	path = frontend
+	url = https://github.com/Tech-JI/CourseFront

Makefile

@@ -1,4 +1,4 @@
-.PHONY: run clean collect format format-backend format-frontend makemigrations migrate shell createsuperuser dev-frontend help
+.PHONY: run dev-frontend clean collect install-frontend format format-backend format-frontend lint lint-backend lint-frontend makemigrations migrate shell createsuperuser help
 
 # Default target when 'make' is run without arguments
 .DEFAULT_GOAL := help
@@ -9,9 +9,13 @@ help:
 	@echo "  dev-frontend          - Starts the frontend development server (formats frontend code first)"
 	@echo "  clean                 - Clears Django session data"
 	@echo "  collect               - Collects Django static files"
+	@echo "  install-frontend      - Installs frontend dependencies using bun"
 	@echo "  format                - Formats both backend (Python) and frontend (JS/TS/CSS) code"
 	@echo "  format-backend        - Formats Python code using isort and black"
 	@echo "  format-frontend       - Formats frontend code using prettier"
+	@echo "  lint                  - Lints both backend (Python) and frontend (JS/TS/CSS) code"
+	@echo "  lint-backend          - Lints Python code using ruff"
+	@echo "  lint-frontend         - Lints frontend code using eslint"
 	@echo "  makemigrations        - Creates new Django model migrations"
 	@echo "  migrate               - Applies Django database migrations"
 	@echo "  shell                 - Opens a Django shell"
@@ -33,6 +37,10 @@ collect:
 	@echo "Collecting Django static files (confirming 'yes')..."
 	echo 'yes' | uv run manage.py collectstatic
 
+install-frontend:
+	@echo "Installing frontend dependencies with bun..."
+	cd frontend && bun install
+
 format: format-backend format-frontend
 	@echo "All code formatted successfully!"
 
@@ -42,7 +50,18 @@ format-backend:
 
 format-frontend:
 	@echo "Formatting frontend code with prettier..."
-	cd frontend && bunx prettier . -w
+	cd frontend && bun run format | grep -v -F '(unchanged)' || true
+
+lint: lint-backend lint-frontend
+	@echo "All code linted successfully!"
+
+lint-backend: format-backend
+	@echo "Linting backend (Python) code with ruff..."
+	uvx ruff check
+
+lint-frontend: format-frontend
+	@echo "Linting frontend code with eslint..."
+	cd frontend && bun run lint
 
 makemigrations:
 	@echo "Creating Django database migrations..."

apps/auth/__init__.py

@@ -0,0 +1 @@
+default_app_config = "apps.auth.apps.OAuthConfig"

apps/auth/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

apps/auth/apps.py

@@ -0,0 +1,7 @@
+from django.apps import AppConfig
+
+
+class OAuthConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.auth"
+    label = "oauth"  # Unique label to avoid conflict with django.contrib.auth

apps/auth/models.py

@@ -0,0 +1,3 @@
+from django.db import models
+
+# Create your models here.

apps/auth/tests.py

@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.