Initial commit: Aurora Moments self-hosted photo/video sharing platform

Django/DRF + PostgreSQL/Redis/Celery backend with accounts, library,
moments, and notifications apps; React/TypeScript/Vite frontend with
Instagram-style sidebar nav, feed, profiles, nested comment replies,
notifications, and photo/video upload with ffmpeg-generated posters.

Co-Authored-By: Claude Sonnet 5 <[email protected]>
This commit is contained in:
Kris
2026-08-10 10:28:53 -05:00
co-authored by Claude Sonnet 5
commit 4877e0a779
101 changed files with 6007 additions and 0 deletions
View File
+32
View File
@@ -0,0 +1,32 @@
from django.contrib import admin
from .models import Album, AlbumCollaborator, AlbumItem, LibraryItem, MediaRendition
class MediaRenditionInline(admin.TabularInline):
model = MediaRendition
extra = 0
@admin.register(LibraryItem)
class LibraryItemAdmin(admin.ModelAdmin):
list_display = ("original_filename", "owner", "media_type", "processing_status", "captured_at")
list_filter = ("media_type", "processing_status")
search_fields = ("original_filename", "owner__username")
inlines = [MediaRenditionInline]
class AlbumItemInline(admin.TabularInline):
model = AlbumItem
extra = 0
class AlbumCollaboratorInline(admin.TabularInline):
model = AlbumCollaborator
extra = 0
@admin.register(Album)
class AlbumAdmin(admin.ModelAdmin):
list_display = ("name", "owner", "audience", "created_at")
inlines = [AlbumItemInline, AlbumCollaboratorInline]
+7
View File
@@ -0,0 +1,7 @@
from django.apps import AppConfig
class LibraryConfig(AppConfig):
default_auto_field = "django.db.models.BigAutoField"
name = "apps.library"
label = "library"
+104
View File
@@ -0,0 +1,104 @@
# Generated by Django 5.0.9 on 2026-08-09 17:00
import apps.library.models
import django.db.models.deletion
from django.conf import settings
from django.db import migrations, models
class Migration(migrations.Migration):
initial = True
dependencies = [
migrations.swappable_dependency(settings.AUTH_USER_MODEL),
]
operations = [
migrations.CreateModel(
name='LibraryItem',
fields=[
('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
('created_at', models.DateTimeField(auto_now_add=True)),
('updated_at', models.DateTimeField(auto_now=True)),
('file', models.FileField(upload_to=apps.library.models.library_upload_path)),
('media_type', models.CharField(choices=[('photo', 'Photo'), ('video', 'Video')], max_length=10)),
('original_filename', models.CharField(max_length=255)),
('file_size', models.PositiveBigIntegerField(default=0)),
('width', models.PositiveIntegerField(blank=True, null=True)),
('height', models.PositiveIntegerField(blank=True, null=True)),
('duration_seconds', models.FloatField(blank=True, null=True)),
('captured_at', models.DateTimeField(blank=True, null=True)),
('latitude', models.DecimalField(blank=True, decimal_places=6, max_digits=9, null=True)),
('longitude', models.DecimalField(blank=True, decimal_places=6, max_digits=9, null=True)),
('camera_make', models.CharField(blank=True, max_length=100)),
('camera_model', models.CharField(blank=True, max_length=100)),
('checksum', models.CharField(db_index=True, help_text='sha256 of the original file, used for dedup', max_length=64)),
('processing_status', models.CharField(choices=[('pending', 'Pending'), ('processing', 'Processing'), ('ready', 'Ready'), ('failed', 'Failed')], default='pending', max_length=12)),
('owner', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='library_items', to=settings.AUTH_USER_MODEL)),
],
options={
'ordering': ['-captured_at', '-created_at'],
'unique_together': {('owner', 'checksum')},
},
),
migrations.CreateModel(
name='Album',
fields=[
('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
('created_at', models.DateTimeField(auto_now_add=True)),
('updated_at', models.DateTimeField(auto_now=True)),
('name', models.CharField(max_length=150)),
('description', models.TextField(blank=True)),
('audience', models.CharField(choices=[('public', 'Public'), ('followers', 'Followers'), ('friends', 'Friends'), ('family', 'Family'), ('custom', 'Custom'), ('only_me', 'Only Me')], default='only_me', max_length=10)),
('owner', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='albums', to=settings.AUTH_USER_MODEL)),
('cover_item', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='+', to='library.libraryitem')),
],
options={
'abstract': False,
},
),
migrations.CreateModel(
name='AlbumCollaborator',
fields=[
('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
('role', models.CharField(choices=[('viewer', 'Viewer'), ('contributor', 'Contributor'), ('admin', 'Admin')], default='viewer', max_length=11)),
('status', models.CharField(choices=[('pending', 'Pending'), ('accepted', 'Accepted')], default='pending', max_length=8)),
('album', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='collaborators', to='library.album')),
('invited_by', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='+', to=settings.AUTH_USER_MODEL)),
('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='album_invites', to=settings.AUTH_USER_MODEL)),
],
options={
'unique_together': {('album', 'user')},
},
),
migrations.CreateModel(
name='AlbumItem',
fields=[
('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
('added_at', models.DateTimeField(auto_now_add=True)),
('added_by', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='+', to=settings.AUTH_USER_MODEL)),
('album', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='items', to='library.album')),
('library_item', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='album_items', to='library.libraryitem')),
],
options={
'ordering': ['-added_at'],
'unique_together': {('album', 'library_item')},
},
),
migrations.CreateModel(
name='MediaRendition',
fields=[
('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
('kind', models.CharField(choices=[('thumbnail', 'Thumbnail'), ('feed', 'Feed'), ('large', 'Large / Fullscreen')], max_length=10)),
('file', models.FileField(upload_to=apps.library.models.rendition_upload_path)),
('width', models.PositiveIntegerField()),
('height', models.PositiveIntegerField()),
('created_at', models.DateTimeField(auto_now_add=True)),
('library_item', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='renditions', to='library.libraryitem')),
],
options={
'unique_together': {('library_item', 'kind')},
},
),
]
+123
View File
@@ -0,0 +1,123 @@
from django.conf import settings
from django.db import models
from apps.core.models import Audience, TimeStampedModel
def library_upload_path(instance, filename):
return f"library/{instance.owner_id}/originals/{filename}"
def rendition_upload_path(instance, filename):
return f"library/{instance.library_item.owner_id}/renditions/{instance.kind}/{filename}"
class LibraryItem(TimeStampedModel):
"""A single photo or video backed up to a user's private library.
Nothing here is visible to anyone but the owner until it is attached to
a Moment or a shared Album."""
class MediaType(models.TextChoices):
PHOTO = "photo", "Photo"
VIDEO = "video", "Video"
class ProcessingStatus(models.TextChoices):
PENDING = "pending", "Pending"
PROCESSING = "processing", "Processing"
READY = "ready", "Ready"
FAILED = "failed", "Failed"
owner = models.ForeignKey(settings.AUTH_USER_MODEL, related_name="library_items", on_delete=models.CASCADE)
file = models.FileField(upload_to=library_upload_path)
media_type = models.CharField(max_length=10, choices=MediaType.choices)
original_filename = models.CharField(max_length=255)
file_size = models.PositiveBigIntegerField(default=0)
width = models.PositiveIntegerField(null=True, blank=True)
height = models.PositiveIntegerField(null=True, blank=True)
duration_seconds = models.FloatField(null=True, blank=True)
captured_at = models.DateTimeField(null=True, blank=True)
latitude = models.DecimalField(max_digits=9, decimal_places=6, null=True, blank=True)
longitude = models.DecimalField(max_digits=9, decimal_places=6, null=True, blank=True)
camera_make = models.CharField(max_length=100, blank=True)
camera_model = models.CharField(max_length=100, blank=True)
checksum = models.CharField(max_length=64, db_index=True, help_text="sha256 of the original file, used for dedup")
processing_status = models.CharField(
max_length=12, choices=ProcessingStatus.choices, default=ProcessingStatus.PENDING
)
class Meta:
unique_together = ("owner", "checksum")
ordering = ["-captured_at", "-created_at"]
def __str__(self):
return f"{self.original_filename} ({self.owner})"
class MediaRendition(models.Model):
"""A derived, smaller version of a LibraryItem (thumbnail/feed/large),
generated asynchronously so the original never has to be served to the
browser just to render a grid."""
class Kind(models.TextChoices):
THUMBNAIL = "thumbnail", "Thumbnail"
FEED = "feed", "Feed"
LARGE = "large", "Large / Fullscreen"
library_item = models.ForeignKey(LibraryItem, related_name="renditions", on_delete=models.CASCADE)
kind = models.CharField(max_length=10, choices=Kind.choices)
file = models.FileField(upload_to=rendition_upload_path)
width = models.PositiveIntegerField()
height = models.PositiveIntegerField()
created_at = models.DateTimeField(auto_now_add=True)
class Meta:
unique_together = ("library_item", "kind")
def __str__(self):
return f"{self.library_item_id} - {self.kind}"
class Album(TimeStampedModel):
owner = models.ForeignKey(settings.AUTH_USER_MODEL, related_name="albums", on_delete=models.CASCADE)
name = models.CharField(max_length=150)
description = models.TextField(blank=True)
cover_item = models.ForeignKey(
LibraryItem, related_name="+", on_delete=models.SET_NULL, null=True, blank=True
)
audience = models.CharField(max_length=10, choices=Audience.choices, default=Audience.ONLY_ME)
def __str__(self):
return self.name
class AlbumItem(models.Model):
album = models.ForeignKey(Album, related_name="items", on_delete=models.CASCADE)
library_item = models.ForeignKey(LibraryItem, related_name="album_items", on_delete=models.CASCADE)
added_by = models.ForeignKey(settings.AUTH_USER_MODEL, related_name="+", on_delete=models.CASCADE)
added_at = models.DateTimeField(auto_now_add=True)
class Meta:
unique_together = ("album", "library_item")
ordering = ["-added_at"]
class AlbumCollaborator(models.Model):
class Role(models.TextChoices):
VIEWER = "viewer", "Viewer"
CONTRIBUTOR = "contributor", "Contributor"
ADMIN = "admin", "Admin"
class Status(models.TextChoices):
PENDING = "pending", "Pending"
ACCEPTED = "accepted", "Accepted"
album = models.ForeignKey(Album, related_name="collaborators", on_delete=models.CASCADE)
user = models.ForeignKey(settings.AUTH_USER_MODEL, related_name="album_invites", on_delete=models.CASCADE)
role = models.CharField(max_length=11, choices=Role.choices, default=Role.VIEWER)
invited_by = models.ForeignKey(settings.AUTH_USER_MODEL, related_name="+", on_delete=models.CASCADE)
status = models.CharField(max_length=8, choices=Status.choices, default=Status.PENDING)
class Meta:
unique_together = ("album", "user")
+10
View File
@@ -0,0 +1,10 @@
from rest_framework.permissions import BasePermission
class IsOwner(BasePermission):
"""Library items and albums are private by default — only the owner may
read or write them through these endpoints. Sharing happens explicitly
via Moments / AlbumCollaborators, handled by their own views."""
def has_object_permission(self, request, view, obj):
return obj.owner_id == request.user.id
+83
View File
@@ -0,0 +1,83 @@
import hashlib
from rest_framework import serializers
from apps.accounts.models import User
from apps.accounts.serializers import UserSerializer
from .models import Album, AlbumCollaborator, AlbumItem, LibraryItem, MediaRendition
class MediaRenditionSerializer(serializers.ModelSerializer):
class Meta:
model = MediaRendition
fields = ["kind", "file", "width", "height"]
class LibraryItemSerializer(serializers.ModelSerializer):
renditions = MediaRenditionSerializer(many=True, read_only=True)
class Meta:
model = LibraryItem
fields = [
"id", "file", "media_type", "original_filename", "file_size",
"width", "height", "duration_seconds", "captured_at",
"latitude", "longitude", "camera_make", "camera_model",
"processing_status", "renditions", "created_at",
]
read_only_fields = [
"id", "width", "height", "duration_seconds", "captured_at",
"camera_make", "camera_model", "processing_status", "renditions", "created_at",
]
def create(self, validated_data):
upload = validated_data["file"]
checksum = hashlib.sha256(upload.read()).hexdigest()
upload.seek(0)
validated_data["checksum"] = checksum
validated_data["file_size"] = upload.size
validated_data.setdefault("original_filename", upload.name)
validated_data["owner"] = self.context["request"].user
library_item, _created = LibraryItem.objects.get_or_create(
owner=validated_data["owner"],
checksum=checksum,
defaults=validated_data,
)
return library_item
class AlbumItemSerializer(serializers.ModelSerializer):
library_item = LibraryItemSerializer(read_only=True)
library_item_id = serializers.PrimaryKeyRelatedField(
queryset=LibraryItem.objects.all(), source="library_item", write_only=True
)
class Meta:
model = AlbumItem
fields = ["id", "album", "library_item", "library_item_id", "added_by", "added_at"]
read_only_fields = ["id", "album", "added_by", "added_at"]
class AlbumCollaboratorSerializer(serializers.ModelSerializer):
user = UserSerializer(read_only=True)
user_id = serializers.PrimaryKeyRelatedField(
queryset=User.objects.all(), source="user", write_only=True
)
class Meta:
model = AlbumCollaborator
fields = ["id", "album", "user", "user_id", "role", "status", "invited_by"]
read_only_fields = ["id", "album", "status", "invited_by"]
class AlbumSerializer(serializers.ModelSerializer):
items = AlbumItemSerializer(many=True, read_only=True)
collaborators = AlbumCollaboratorSerializer(many=True, read_only=True)
class Meta:
model = Album
fields = [
"id", "owner", "name", "description", "cover_item", "audience",
"items", "collaborators", "created_at", "updated_at",
]
read_only_fields = ["id", "owner", "items", "collaborators", "created_at", "updated_at"]
+159
View File
@@ -0,0 +1,159 @@
import io
import json
import os
import subprocess
import tempfile
from datetime import datetime
from celery import shared_task
from django.core.files.base import ContentFile
from PIL import ExifTags, Image
from .models import LibraryItem, MediaRendition
RENDITION_MAX_DIMENSIONS = {
MediaRendition.Kind.THUMBNAIL: 300,
MediaRendition.Kind.FEED: 1080,
MediaRendition.Kind.LARGE: 2048,
}
@shared_task
def process_library_item(library_item_id):
try:
item = LibraryItem.objects.get(id=library_item_id)
except LibraryItem.DoesNotExist:
return
item.processing_status = LibraryItem.ProcessingStatus.PROCESSING
item.save(update_fields=["processing_status"])
try:
if item.media_type == LibraryItem.MediaType.PHOTO:
_process_photo(item)
else:
# Full transcoding to web-friendly renditions is a V1.5 feature
# (see README); the original file is served as-is for playback.
# We do extract dimensions/duration and a poster-frame thumbnail
# so videos aren't blank tiles in the UI.
_process_video(item)
item.processing_status = LibraryItem.ProcessingStatus.READY
except Exception:
item.processing_status = LibraryItem.ProcessingStatus.FAILED
raise
finally:
item.save(update_fields=["processing_status"])
def _process_photo(item):
with item.file.open("rb") as fh:
image = Image.open(fh)
image.load()
for field, value in _extract_exif(image).items():
setattr(item, field, value)
item.width, item.height = image.size
item.save()
_write_renditions(item, image)
def _process_video(item):
suffix = os.path.splitext(item.original_filename)[1] or ".mp4"
with tempfile.NamedTemporaryFile(suffix=suffix) as src:
with item.file.open("rb") as fh:
for chunk in fh.chunks():
src.write(chunk)
src.flush()
probe = _ffprobe(src.name)
if probe:
item.width = probe.get("width") or item.width
item.height = probe.get("height") or item.height
item.duration_seconds = probe.get("duration")
item.save()
# A missing/corrupt frame just means no poster image; the video
# itself still uploaded fine, so this must not fail the whole job.
try:
frame_bytes = _extract_poster_frame(src.name, probe.get("duration") if probe else None)
if frame_bytes:
image = Image.open(io.BytesIO(frame_bytes))
image.load()
_write_renditions(item, image)
except Exception:
pass
def _write_renditions(item, image):
for kind, max_dimension in RENDITION_MAX_DIMENSIONS.items():
rendition_image = image.copy()
rendition_image.thumbnail((max_dimension, max_dimension))
rgb_image = rendition_image.convert("RGB")
buffer = io.BytesIO()
rgb_image.save(buffer, format="JPEG", quality=85)
MediaRendition.objects.update_or_create(
library_item=item,
kind=kind,
defaults={
"width": rendition_image.width,
"height": rendition_image.height,
"file": ContentFile(buffer.getvalue(), name=f"{item.id}_{kind}.jpg"),
},
)
def _ffprobe(path):
try:
result = subprocess.run(
[
"ffprobe", "-v", "error", "-select_streams", "v:0",
"-show_entries", "stream=width,height:format=duration",
"-of", "json", path,
],
capture_output=True, text=True, timeout=30, check=True,
)
except (subprocess.CalledProcessError, subprocess.TimeoutExpired, FileNotFoundError):
return None
data = json.loads(result.stdout)
streams = data.get("streams") or [{}]
duration = (data.get("format") or {}).get("duration")
return {
"width": streams[0].get("width"),
"height": streams[0].get("height"),
"duration": float(duration) if duration else None,
}
def _extract_poster_frame(path, duration_seconds):
timestamp = min(1.0, duration_seconds / 2) if duration_seconds else 0.1
with tempfile.NamedTemporaryFile(suffix=".jpg") as out:
try:
subprocess.run(
["ffmpeg", "-y", "-ss", str(timestamp), "-i", path, "-frames:v", "1", "-q:v", "3", out.name],
capture_output=True, timeout=30, check=True,
)
except (subprocess.CalledProcessError, subprocess.TimeoutExpired, FileNotFoundError):
return None
return out.read()
def _extract_exif(image):
result = {}
raw_exif = image.getexif()
if not raw_exif:
return result
tags = {ExifTags.TAGS.get(tag_id, tag_id): value for tag_id, value in raw_exif.items()}
if tags.get("Make"):
result["camera_make"] = str(tags["Make"]).strip()
if tags.get("Model"):
result["camera_model"] = str(tags["Model"]).strip()
date_str = tags.get("DateTimeOriginal") or tags.get("DateTime")
if date_str:
try:
result["captured_at"] = datetime.strptime(str(date_str), "%Y:%m:%d %H:%M:%S")
except ValueError:
pass
return result
+20
View File
@@ -0,0 +1,20 @@
from django.urls import path
from rest_framework.routers import DefaultRouter
from .views import AlbumCollaboratorViewSet, AlbumItemViewSet, AlbumViewSet, LibraryItemViewSet
router = DefaultRouter()
router.register("items", LibraryItemViewSet, basename="library-item")
router.register("albums", AlbumViewSet, basename="album")
album_items_list = AlbumItemViewSet.as_view({"get": "list", "post": "create"})
album_items_detail = AlbumItemViewSet.as_view({"get": "retrieve", "delete": "destroy"})
album_collaborators_list = AlbumCollaboratorViewSet.as_view({"get": "list", "post": "create"})
album_collaborators_detail = AlbumCollaboratorViewSet.as_view({"get": "retrieve", "delete": "destroy"})
urlpatterns = [
path("albums/<int:album_pk>/items/", album_items_list, name="album-items-list"),
path("albums/<int:album_pk>/items/<int:pk>/", album_items_detail, name="album-items-detail"),
path("albums/<int:album_pk>/collaborators/", album_collaborators_list, name="album-collaborators-list"),
path("albums/<int:album_pk>/collaborators/<int:pk>/", album_collaborators_detail, name="album-collaborators-detail"),
] + router.urls
+67
View File
@@ -0,0 +1,67 @@
from rest_framework import permissions, viewsets
from rest_framework.exceptions import PermissionDenied
from .models import Album, AlbumCollaborator, AlbumItem, LibraryItem
from .permissions import IsOwner
from .serializers import AlbumCollaboratorSerializer, AlbumItemSerializer, AlbumSerializer, LibraryItemSerializer
from .tasks import process_library_item
class LibraryItemViewSet(viewsets.ModelViewSet):
serializer_class = LibraryItemSerializer
permission_classes = [permissions.IsAuthenticated, IsOwner]
def get_queryset(self):
return LibraryItem.objects.filter(owner=self.request.user)
def perform_create(self, serializer):
item = serializer.save()
process_library_item.delay(str(item.id))
class AlbumViewSet(viewsets.ModelViewSet):
serializer_class = AlbumSerializer
permission_classes = [permissions.IsAuthenticated, IsOwner]
def get_queryset(self):
return Album.objects.filter(owner=self.request.user).prefetch_related("items", "collaborators")
def perform_create(self, serializer):
serializer.save(owner=self.request.user)
class AlbumItemViewSet(viewsets.ModelViewSet):
serializer_class = AlbumItemSerializer
permission_classes = [permissions.IsAuthenticated]
http_method_names = ["get", "post", "delete", "head", "options"]
def _get_album(self):
album = Album.objects.get(pk=self.kwargs["album_pk"])
allowed = album.owner_id == self.request.user.id or album.collaborators.filter(
user=self.request.user, role=AlbumCollaborator.Role.CONTRIBUTOR, status=AlbumCollaborator.Status.ACCEPTED
).exists()
if not allowed:
raise PermissionDenied("Not a contributor on this album.")
return album
def get_queryset(self):
return AlbumItem.objects.filter(album=self._get_album())
def perform_create(self, serializer):
serializer.save(album=self._get_album(), added_by=self.request.user)
class AlbumCollaboratorViewSet(viewsets.ModelViewSet):
serializer_class = AlbumCollaboratorSerializer
permission_classes = [permissions.IsAuthenticated]
http_method_names = ["get", "post", "delete", "head", "options"]
def _get_album(self):
album = Album.objects.get(pk=self.kwargs["album_pk"], owner=self.request.user)
return album
def get_queryset(self):
return AlbumCollaborator.objects.filter(album=self._get_album())
def perform_create(self, serializer):
serializer.save(album=self._get_album(), invited_by=self.request.user)