ncrmro / rjango

Django boilerplate with GraphQL, serving a Webpack compiled React Relay Modern frontend.

reango

The Django + GraphQL Relay Modern backend.

Check out the react-native branch as well which can also compile to the web!

Looking to help with development and more up to date issue check the Gitlab hosted version of Reango.

Features

• Relay Support
• User Registration/Sign up using JWT
• Postgres as a first class database, making use of Trigram Full Text Search Extension
• Heroku or Docker Deployment

Quick start:

You will need python 3, postgres and node installed. You will also need to have a virtualenv activated before running npm install/yarn or the post install build step will fail as django needs to be available to dump the graphql_schema

source ~/.virtualenvs/reango/bin/activate
cp .env.sample .env
pip3 install -r ./lib/deps/dev.txt
yarn

Getting started

Define a django model, register the node and query with in the ./server/reango/schema.py

To work with the client side, add a route in the ./client/routes

Reusable components go in ./client/components, If you'd like you can split of django apps into there own folders in the ./client/modules like the django apps concept

Staging Data

Factories should be used to generate the staging data during tests as well and in the development environment.

A single django managment command should be available to get everything staged initial.

This command should be composed of smaller commands defined in each django app's management folder. This way you can delete a single users object and regenerate or generate multiple for each users.

python3 manage.py stagedata

Prod

See readme in ./lib/deployment

Front-End originally based on the awesome Relay Fullstack

https://github.com/lvarayut/relay-fullstack

rjango's Issues

Authenticated Query to GraphQL endpoint

Mockup static data needed sent and received from the front end and devise a testing solution and the code.

See #11 for more details on the front end requirements for this issue.

Routes should check for auth and also be imported into the main routes file

The routes file should correctly pull in a single routes file per app. Each routes file should then correctly list each sub route as a child route and do any code splitting afterwords.

• clean up routes
• on enter

Update the setup documentation

I was getting error while setting up the project . Please , update about .env file in the readme and nodejs version in dependency file.

Test todos app GraphQL endpoint

Before diving any further into the auth I'd like to build out the bare minimum example of testing the graphql endpoints.

Ango graphql user should have strategy types.

EG google auth fb auth etc

isAuthenticated HOC component should log out user if token is expired.

Signin Form autofill doesn't auto fill on chrome iOS

facebook/react#1159

Login and Signup form errors

Should return errors for

• email exists
• incorrect email or password

Rework tests to use docker and selenium.

• django tests need to listen on environment variables for selenium docker
• use docker-compose
• run ango container
• run selenium chrome browser

Upgrading Django to 1.11

This causes issues when using selenium in remote container docker
--liveserver is deprecated

https://docs.djangoproject.com/en/1.11/releases/1.11.2/
https://docs.djangoproject.com/en/1.11/releases/1.11/#liveservertestcase-port-zero-change

Add email support

Create JWT GraphQL authentication mechanism

User Auth

Posted to GraphQL endpoint to check if user is logged out and grab the viewer object.

If someone wouldn't mind further splitting these off into separate issues/branches that would be great.

This project can provide a url for grabbing auth token.
https://github.com/jpadilla/django-jwt-auth

AuthenticatedQuery

Happens when ever auth is required on a page or to load the viewer object and data

• user ID,
• username
• token

Sign Up

• username
• email
• password
• password confirmation

Login

• username or email
• password

Log out

Viewer object

• user account
• todos

Dealing with Django's CSRF Implications and API Usage.

At the moment if you attempt to curl the graphql endpoint you will see a response indicating a missing CSRF issue.

curl -X POST -H "Content-Type: application/json" -d '{"query": "{ hello }"}' http://localhost:8000/graphql

<div id="summary">
  <h1>Forbidden <span>(403)</span></h1>
  <p>CSRF verification failed. Request aborted.</p>


  <p>You are seeing this message because this site requires a CSRF cookie when submitting forms. This cookie is required for security reasons, to ensure that your browser is not being hijacked by third parties.</p>
  <p>If you have configured your browser to disable cookies, please re-enable them, at least for this site, or for &#39;same-origin&#39; requests.</p>

</div>

This stackover flow post talks about the issue not being relevent to api usage, I'd like to use it if only for the sake of securing the admin section.

http://stackoverflow.com/questions/10741339/do-csrf-attacks-apply-to-apis

Add vote count

Add dockerfile and compose for easy testing and deployment options.

Dockerfile will be useful for those who would rather not use heroku. I personally have lots of projects using docker and it will make deploying in unison with Reango easier.

Standardized JWT Auth

Client
Should check token is valid, a method to request new tokens should be set up.

Server
A function that validates the graphql context and reads the jwt token in the headers.

It should then return the user.id in the jwt token payload if it's valid.

Get login flow tests

Check nav bar for logged in user and routes

Sign up should work and redirect
Sign out should work and redirect
Login shouldn't work with non existent account
Login should redirect

Switch routing to use a slug instead of global id in urls

Switch JWT token logic to middleware

Password Reset

Should allow users to reset password

will need to test email

Gitlab Link in README gives 404 error

Do the permissions have to be modified to make it public?

React Native Examples

Lets work on it!
@saayani