Initial commit: Aurora Moments self-hosted photo/video sharing platform
Django/DRF + PostgreSQL/Redis/Celery backend with accounts, library, moments, and notifications apps; React/TypeScript/Vite frontend with Instagram-style sidebar nav, feed, profiles, nested comment replies, notifications, and photo/video upload with ffmpeg-generated posters. Co-Authored-By: Claude Sonnet 5 <[email protected]>
This commit is contained in:
Kris
@@ -0,0 +1,18 @@
|
||||
from django.contrib import admin
|
||||
from django.contrib.auth.admin import UserAdmin as DjangoUserAdmin
|
||||
|
||||
from .models import Follow, User
|
||||
|
||||
|
||||
@admin.register(User)
|
||||
class UserAdmin(DjangoUserAdmin):
|
||||
fieldsets = DjangoUserAdmin.fieldsets + (
|
||||
("Aurora Moments profile", {"fields": ("display_name", "bio", "avatar", "is_private")}),
|
||||
)
|
||||
list_display = ("username", "email", "display_name", "is_private", "is_staff")
|
||||
|
||||
|
||||
@admin.register(Follow)
|
||||
class FollowAdmin(admin.ModelAdmin):
|
||||
list_display = ("follower", "following", "status", "created_at")
|
||||
list_filter = ("status",)
|
||||
@@ -0,0 +1,7 @@
|
||||
from django.apps import AppConfig
|
||||
|
||||
|
||||
class AccountsConfig(AppConfig):
|
||||
default_auto_field = "django.db.models.BigAutoField"
|
||||
name = "apps.accounts"
|
||||
label = "accounts"
|
||||
@@ -0,0 +1,69 @@
|
||||
# Generated by Django 5.0.9 on 2026-08-09 17:00
|
||||
|
||||
import django.contrib.auth.models
|
||||
import django.contrib.auth.validators
|
||||
import django.db.models.deletion
|
||||
import django.utils.timezone
|
||||
from django.conf import settings
|
||||
from django.db import migrations, models
|
||||
|
||||
|
||||
class Migration(migrations.Migration):
|
||||
|
||||
initial = True
|
||||
|
||||
dependencies = [
|
||||
('auth', '0012_alter_user_first_name_max_length'),
|
||||
]
|
||||
|
||||
operations = [
|
||||
migrations.CreateModel(
|
||||
name='User',
|
||||
fields=[
|
||||
('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
|
||||
('password', models.CharField(max_length=128, verbose_name='password')),
|
||||
('last_login', models.DateTimeField(blank=True, null=True, verbose_name='last login')),
|
||||
('is_superuser', models.BooleanField(default=False, help_text='Designates that this user has all permissions without explicitly assigning them.', verbose_name='superuser status')),
|
||||
('username', models.CharField(error_messages={'unique': 'A user with that username already exists.'}, help_text='Required. 150 characters or fewer. Letters, digits and @/./+/-/_ only.', max_length=150, unique=True, validators=[django.contrib.auth.validators.UnicodeUsernameValidator()], verbose_name='username')),
|
||||
('first_name', models.CharField(blank=True, max_length=150, verbose_name='first name')),
|
||||
('last_name', models.CharField(blank=True, max_length=150, verbose_name='last name')),
|
||||
('is_staff', models.BooleanField(default=False, help_text='Designates whether the user can log into this admin site.', verbose_name='staff status')),
|
||||
('is_active', models.BooleanField(default=True, help_text='Designates whether this user should be treated as active. Unselect this instead of deleting accounts.', verbose_name='active')),
|
||||
('date_joined', models.DateTimeField(default=django.utils.timezone.now, verbose_name='date joined')),
|
||||
('email', models.EmailField(max_length=254, unique=True)),
|
||||
('display_name', models.CharField(blank=True, max_length=150)),
|
||||
('bio', models.TextField(blank=True, max_length=500)),
|
||||
('avatar', models.ImageField(blank=True, null=True, upload_to='avatars/')),
|
||||
('is_private', models.BooleanField(default=False, help_text='If true, new followers must be approved before they can see followers-only Moments.')),
|
||||
('groups', models.ManyToManyField(blank=True, help_text='The groups this user belongs to. A user will get all permissions granted to each of their groups.', related_name='user_set', related_query_name='user', to='auth.group', verbose_name='groups')),
|
||||
('user_permissions', models.ManyToManyField(blank=True, help_text='Specific permissions for this user.', related_name='user_set', related_query_name='user', to='auth.permission', verbose_name='user permissions')),
|
||||
],
|
||||
options={
|
||||
'verbose_name': 'user',
|
||||
'verbose_name_plural': 'users',
|
||||
'abstract': False,
|
||||
},
|
||||
managers=[
|
||||
('objects', django.contrib.auth.models.UserManager()),
|
||||
],
|
||||
),
|
||||
migrations.CreateModel(
|
||||
name='Follow',
|
||||
fields=[
|
||||
('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
|
||||
('created_at', models.DateTimeField(auto_now_add=True)),
|
||||
('updated_at', models.DateTimeField(auto_now=True)),
|
||||
('status', models.CharField(choices=[('pending', 'Pending'), ('accepted', 'Accepted')], default='accepted', max_length=10)),
|
||||
('follower', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='following_edges', to=settings.AUTH_USER_MODEL)),
|
||||
('following', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='follower_edges', to=settings.AUTH_USER_MODEL)),
|
||||
],
|
||||
),
|
||||
migrations.AddConstraint(
|
||||
model_name='follow',
|
||||
constraint=models.CheckConstraint(check=models.Q(('follower', models.F('following')), _negated=True), name='follow_no_self_follow'),
|
||||
),
|
||||
migrations.AlterUniqueTogether(
|
||||
name='follow',
|
||||
unique_together={('follower', 'following')},
|
||||
),
|
||||
]
|
||||
@@ -0,0 +1,46 @@
|
||||
from django.contrib.auth.models import AbstractUser
|
||||
from django.db import models
|
||||
|
||||
from apps.core.models import TimeStampedModel
|
||||
|
||||
|
||||
class User(AbstractUser):
|
||||
"""Aurora Moments account. Email is the login identifier; username is the
|
||||
public @handle shown on profiles."""
|
||||
|
||||
email = models.EmailField(unique=True)
|
||||
display_name = models.CharField(max_length=150, blank=True)
|
||||
bio = models.TextField(max_length=500, blank=True)
|
||||
avatar = models.ImageField(upload_to="avatars/", blank=True, null=True)
|
||||
is_private = models.BooleanField(
|
||||
default=False,
|
||||
help_text="If true, new followers must be approved before they can see followers-only Moments.",
|
||||
)
|
||||
|
||||
USERNAME_FIELD = "email"
|
||||
REQUIRED_FIELDS = ["username"]
|
||||
|
||||
def __str__(self):
|
||||
return self.username
|
||||
|
||||
|
||||
class Follow(TimeStampedModel):
|
||||
class Status(models.TextChoices):
|
||||
PENDING = "pending", "Pending"
|
||||
ACCEPTED = "accepted", "Accepted"
|
||||
|
||||
follower = models.ForeignKey(User, related_name="following_edges", on_delete=models.CASCADE)
|
||||
following = models.ForeignKey(User, related_name="follower_edges", on_delete=models.CASCADE)
|
||||
status = models.CharField(max_length=10, choices=Status.choices, default=Status.ACCEPTED)
|
||||
|
||||
class Meta:
|
||||
unique_together = ("follower", "following")
|
||||
constraints = [
|
||||
models.CheckConstraint(
|
||||
check=~models.Q(follower=models.F("following")),
|
||||
name="follow_no_self_follow",
|
||||
)
|
||||
]
|
||||
|
||||
def __str__(self):
|
||||
return f"{self.follower} -> {self.following} ({self.status})"
|
||||
@@ -0,0 +1,91 @@
|
||||
from django.contrib.auth import password_validation
|
||||
from rest_framework import serializers
|
||||
|
||||
from .models import Follow, User
|
||||
|
||||
|
||||
class UserSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = User
|
||||
fields = ["id", "username", "display_name", "bio", "avatar", "is_private", "date_joined"]
|
||||
read_only_fields = ["id", "date_joined"]
|
||||
|
||||
|
||||
class ProfileSerializer(UserSerializer):
|
||||
"""UserSerializer plus the counts/relationship state a profile page
|
||||
needs. Kept separate from UserSerializer (used for owner/author fields
|
||||
all over the feed) so those hot paths don't pay for two extra COUNT
|
||||
queries per embedded user."""
|
||||
|
||||
follower_count = serializers.SerializerMethodField()
|
||||
following_count = serializers.SerializerMethodField()
|
||||
viewer_follow_id = serializers.SerializerMethodField()
|
||||
viewer_follow_status = serializers.SerializerMethodField()
|
||||
|
||||
class Meta(UserSerializer.Meta):
|
||||
fields = UserSerializer.Meta.fields + [
|
||||
"follower_count", "following_count", "viewer_follow_id", "viewer_follow_status",
|
||||
]
|
||||
|
||||
def _viewer_follow(self, obj):
|
||||
request = self.context.get("request")
|
||||
if not request or not request.user.is_authenticated or request.user.id == obj.id:
|
||||
return None
|
||||
if not hasattr(obj, "_viewer_follow_cache"):
|
||||
obj._viewer_follow_cache = Follow.objects.filter(follower=request.user, following=obj).first()
|
||||
return obj._viewer_follow_cache
|
||||
|
||||
def get_follower_count(self, obj):
|
||||
return obj.follower_edges.filter(status=Follow.Status.ACCEPTED).count()
|
||||
|
||||
def get_following_count(self, obj):
|
||||
return obj.following_edges.filter(status=Follow.Status.ACCEPTED).count()
|
||||
|
||||
def get_viewer_follow_id(self, obj):
|
||||
follow = self._viewer_follow(obj)
|
||||
return follow.id if follow else None
|
||||
|
||||
def get_viewer_follow_status(self, obj):
|
||||
follow = self._viewer_follow(obj)
|
||||
return follow.status if follow else None
|
||||
|
||||
|
||||
class RegisterSerializer(serializers.ModelSerializer):
|
||||
password = serializers.CharField(write_only=True)
|
||||
|
||||
class Meta:
|
||||
model = User
|
||||
fields = ["id", "email", "username", "password", "display_name"]
|
||||
|
||||
def validate_password(self, value):
|
||||
password_validation.validate_password(value)
|
||||
return value
|
||||
|
||||
def create(self, validated_data):
|
||||
password = validated_data.pop("password")
|
||||
user = User(**validated_data)
|
||||
user.set_password(password)
|
||||
user.save()
|
||||
return user
|
||||
|
||||
|
||||
class FollowSerializer(serializers.ModelSerializer):
|
||||
follower = UserSerializer(read_only=True)
|
||||
following = UserSerializer(read_only=True)
|
||||
following_id = serializers.PrimaryKeyRelatedField(
|
||||
queryset=User.objects.all(), source="following", write_only=True
|
||||
)
|
||||
|
||||
class Meta:
|
||||
model = Follow
|
||||
fields = ["id", "follower", "following", "following_id", "status", "created_at"]
|
||||
read_only_fields = ["id", "follower", "status", "created_at"]
|
||||
|
||||
def create(self, validated_data):
|
||||
follower = self.context["request"].user
|
||||
following = validated_data["following"]
|
||||
status = Follow.Status.PENDING if following.is_private else Follow.Status.ACCEPTED
|
||||
follow, _ = Follow.objects.get_or_create(
|
||||
follower=follower, following=following, defaults={"status": status}
|
||||
)
|
||||
return follow
|
||||
@@ -0,0 +1,13 @@
|
||||
from django.urls import path
|
||||
from rest_framework.routers import DefaultRouter
|
||||
|
||||
from .views import FollowViewSet, MeView, RegisterView, UserViewSet
|
||||
|
||||
router = DefaultRouter()
|
||||
router.register("users", UserViewSet, basename="user")
|
||||
router.register("follows", FollowViewSet, basename="follow")
|
||||
|
||||
urlpatterns = [
|
||||
path("register/", RegisterView.as_view(), name="register"),
|
||||
path("me/", MeView.as_view(), name="me"),
|
||||
] + router.urls
|
||||
@@ -0,0 +1,48 @@
|
||||
from rest_framework import generics, permissions, viewsets
|
||||
from rest_framework.exceptions import PermissionDenied
|
||||
from rest_framework.response import Response
|
||||
from rest_framework.views import APIView
|
||||
|
||||
from .models import Follow, User
|
||||
from .serializers import FollowSerializer, ProfileSerializer, RegisterSerializer, UserSerializer
|
||||
|
||||
|
||||
class RegisterView(generics.CreateAPIView):
|
||||
queryset = User.objects.all()
|
||||
serializer_class = RegisterSerializer
|
||||
permission_classes = [permissions.AllowAny]
|
||||
|
||||
|
||||
class MeView(APIView):
|
||||
def get(self, request):
|
||||
return Response(ProfileSerializer(request.user, context={"request": request}).data)
|
||||
|
||||
def patch(self, request):
|
||||
serializer = UserSerializer(request.user, data=request.data, partial=True, context={"request": request})
|
||||
serializer.is_valid(raise_exception=True)
|
||||
serializer.save()
|
||||
return Response(serializer.data)
|
||||
|
||||
|
||||
class UserViewSet(viewsets.ReadOnlyModelViewSet):
|
||||
queryset = User.objects.all()
|
||||
serializer_class = ProfileSerializer
|
||||
lookup_field = "username"
|
||||
|
||||
|
||||
class FollowViewSet(viewsets.ModelViewSet):
|
||||
serializer_class = FollowSerializer
|
||||
http_method_names = ["get", "post", "delete", "head", "options"]
|
||||
|
||||
def get_queryset(self):
|
||||
user = self.request.user
|
||||
qs = Follow.objects.select_related("follower", "following")
|
||||
direction = self.request.query_params.get("direction", "following")
|
||||
if direction == "followers":
|
||||
return qs.filter(following=user)
|
||||
return qs.filter(follower=user)
|
||||
|
||||
def perform_destroy(self, instance):
|
||||
if instance.follower_id != self.request.user.id:
|
||||
raise PermissionDenied("Cannot delete another user's follow edge.")
|
||||
instance.delete()
|
||||
Reference in New Issue
Block a user