Dev server

.env.sample

@@ -46,4 +46,8 @@ DISCORD_GUILD_ID=xxx
 DISCORD_BOT_TOKEN=xxx
 
 QSEVERSE_BASE_URL=
-QSEVERSE_API_KEY=
+QSEVERSE_API_KEY=
+
+BACKEND_API_KEY=
+
+ENABLE_SWAGGER=

.gitignore

@@ -27,4 +27,6 @@ env/
 venv/
 .vscode
 .idea
-dump.rdb
+dump.rdb
+
+static/

README.md

@@ -29,6 +29,9 @@ pip install -r requirements.txt
 ### Set environment variables
 Create a .env file in the project root directory by copying .env.sample and replace with your values.
 
+> [!NOTE]
+> Apply [this migration script](https://gist.github.com/e3ob/9e1116996e1daec8df8701548eeaa528) before running the project
+
 ### Run the Project
 ```commandline
 python manage.py runserver

alter-scripts/alter-1.61.py

@@ -0,0 +1,47 @@
+import os
+import sys
+from pathlib import Path
+from decouple import config
+import django
+
+from connection import execute
+
+BASE_DIR = Path(__file__).resolve().parent.parent
+os.chdir(BASE_DIR)
+sys.path.append(str(BASE_DIR))
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'mulearnbackend.settings')
+django.setup()
+
+DB_NAME = config('DATABASE_NAME')
+
+
+def column_exists(column_name: str) -> bool:
+    # Guard against double-running the script on environments that already have the column
+    query = f"""
+        SELECT COUNT(*)
+        FROM information_schema.COLUMNS
+        WHERE TABLE_SCHEMA = '{DB_NAME}'
+          AND TABLE_NAME = 'company_jobs'
+          AND COLUMN_NAME = '{column_name}';
+    """
+    result = execute(query)
+    return result and result[0][0] > 0
+
+
+def add_total_views_column():
+    if not column_exists('total_views'):
+        execute(
+            """
+ALTER TABLE company_jobs
+    ADD COLUMN total_views INT NOT NULL DEFAULT 0;
+            """
+        )
+        print("[alter-1.61] Added column 'total_views' to 'company_jobs' table.")
+    else:
+        print("[alter-1.61] Column 'total_views' already exists in 'company_jobs' table.")
+
+
+if __name__ == '__main__':
+    add_total_views_column()
+    execute("UPDATE system_setting SET value = '1.61', updated_at = now() WHERE `key` = 'db.version';")
+    print("[alter-1.61] Updated database version to 1.61.")

alter-scripts/alter-1.62.py

@@ -0,0 +1,68 @@
+import os
+import sys
+from pathlib import Path
+from decouple import config
+import django
+
+from connection import execute
+
+BASE_DIR = Path(__file__).resolve().parent.parent
+os.chdir(BASE_DIR)
+sys.path.append(str(BASE_DIR))
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'mulearnbackend.settings')
+django.setup()
+
+DB_NAME = config('DATABASE_NAME')
+
+
+def table_exists(table_name: str) -> bool:
+    query = f"""
+        SELECT COUNT(*)
+        FROM information_schema.TABLES
+        WHERE TABLE_SCHEMA = '{DB_NAME}'
+          AND TABLE_NAME = '{table_name}';
+    """
+    result = execute(query)
+    return result and result[0][0] > 0
+
+
+def create_comic_comment_table():
+    if not table_exists('comic_comment'):
+        execute(
+            """
+            CREATE TABLE `comic_comment` (
+              `id` varchar(36) NOT NULL,
+              `comic_id` varchar(36) NOT NULL,
+              `chapter_id` varchar(36) DEFAULT NULL,
+              `parent_id` varchar(36) DEFAULT NULL,
+              `user_id` varchar(36) NOT NULL,
+              `message` text NOT NULL,
+              `deleted_at` datetime DEFAULT NULL,
+              `deleted_by` varchar(36) DEFAULT NULL,
+              `updated_by` varchar(36) NOT NULL,
+              `updated_at` datetime NOT NULL,
+              `created_by` varchar(36) NOT NULL,
+              `created_at` datetime NOT NULL,
+              PRIMARY KEY (`id`),
+              KEY `idx_comic_comment_comic` (`comic_id`,`created_at`),
+              KEY `idx_comic_comment_chapter` (`chapter_id`,`created_at`),
+              KEY `idx_comic_comment_parent` (`parent_id`),
+              KEY `idx_comic_comment_user` (`user_id`),
+              CONSTRAINT `fk_comic_comment_ref_comic_id` FOREIGN KEY (`comic_id`) REFERENCES `comic` (`id`) ON DELETE CASCADE,
+              CONSTRAINT `fk_comic_comment_ref_parent_id` FOREIGN KEY (`parent_id`) REFERENCES `comic_comment` (`id`) ON DELETE CASCADE,
+              CONSTRAINT `fk_comic_comment_ref_user_id` FOREIGN KEY (`user_id`) REFERENCES `user` (`id`) ON DELETE CASCADE,
+              CONSTRAINT `fk_comic_comment_ref_del_by` FOREIGN KEY (`deleted_by`) REFERENCES `user` (`id`) ON DELETE SET NULL,
+              CONSTRAINT `fk_comic_comment_ref_upd_by` FOREIGN KEY (`updated_by`) REFERENCES `user` (`id`) ON DELETE CASCADE,
+              CONSTRAINT `fk_comic_comment_ref_cre_by` FOREIGN KEY (`created_by`) REFERENCES `user` (`id`) ON DELETE CASCADE
+            ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci;
+            """
+        )
+        print("[alter-1.62] Created table 'comic_comment'.")
+    else:
+        print("[alter-1.62] Table 'comic_comment' already exists.")
+
+
+if __name__ == '__main__':
+    create_comic_comment_table()
+    execute("UPDATE system_setting SET value = '1.62', updated_at = now() WHERE `key` = 'db.version';")
+    print("[alter-1.62] Updated database version to 1.62.")

api/auth/__init__.py

@@ -0,0 +1 @@
+# Auth proxy module - forwards requests to auth server

api/auth/auth_views.py

@@ -0,0 +1,231 @@
+import decouple
+import requests
+from rest_framework.views import APIView
+
+from utils.response import CustomResponse
+from drf_spectacular.utils import extend_schema, inline_serializer, OpenApiResponse
+from rest_framework import serializers as s
+
+
+AUTH_DOMAIN = decouple.config("AUTH_DOMAIN")
+
+
+class GoogleMobileAuthProxyAPI(APIView):
+    """
+    Proxy endpoint for Google mobile authentication.
+    Forwards requests to the auth server and returns the response.
+    """
+
+    @extend_schema(tags=['Auth'], description="Create Google Mobile Auth Proxy.",
+        responses={200: inline_serializer("AuthTokenResponse", fields={
+            "hasError": s.BooleanField(default=False),
+            "statusCode": s.IntegerField(default=200),
+            "message": s.DictField(default={}),
+            "response": s.DictField(
+                help_text="Upstream auth payload (access_token, refresh_token, user info, etc.)"
+            ),
+        })},
+    )
+    def post(self, request):
+        id_token = request.data.get("id_token") or request.data.get("idToken")
+
+        if not id_token:
+            return CustomResponse(
+                general_message="ID token is required"
+            ).get_failure_response()
+
+        try:
+            response = requests.post(
+                f"{AUTH_DOMAIN}/api/v1/auth/google-mobile/",
+                json={"id_token": id_token},
+                headers={"Content-Type": "application/json"},
+                timeout=30,
+            )
+
+            data = response.json()
+
+            if data.get("hasError"):
+                return CustomResponse(
+                    general_message=data.get("message", {}).get("general", ["Authentication failed"])[0]
+                ).get_failure_response()
+
+            return CustomResponse(
+                general_message="Access Granted",
+                response=data.get("response"),
+            ).get_success_response()
+
+        except requests.exceptions.Timeout:
+            return CustomResponse(
+                general_message="Authentication server timeout"
+            ).get_failure_response()
+        except requests.exceptions.RequestException as e:
+            return CustomResponse(
+                general_message=f"Authentication server error: {str(e)}"
+            ).get_failure_response()
+
+
+class AppleMobileAuthProxyAPI(APIView):
+    """
+    Proxy endpoint for Apple mobile authentication.
+    Forwards requests to the auth server and returns the response.
+    """
+
+    @extend_schema(tags=['Auth'], description="Create Apple Mobile Auth Proxy.",
+        responses={200: inline_serializer("AuthAppleTokenResponse", fields={
+            "hasError": s.BooleanField(default=False),
+            "statusCode": s.IntegerField(default=200),
+            "message": s.DictField(default={}),
+            "response": s.DictField(
+                help_text="Upstream auth payload (access_token, refresh_token, user info, etc.)"
+            ),
+        })},
+    )
+    def post(self, request):
+        identity_token = request.data.get("identity_token") or request.data.get("identityToken")
+        email = request.data.get("email")
+
+        if not identity_token:
+            return CustomResponse(
+                general_message="Identity token is required"
+            ).get_failure_response()
+
+        try:
+            payload = {"identity_token": identity_token}
+            if email:
+                payload["email"] = email
+
+            response = requests.post(
+                f"{AUTH_DOMAIN}/api/v1/auth/apple-mobile/",
+                json=payload,
+                headers={"Content-Type": "application/json"},
+                timeout=30,
+            )
+
+            data = response.json()
+
+            if data.get("hasError"):
+                return CustomResponse(
+                    general_message=data.get("message", {}).get("general", ["Authentication failed"])[0]
+                ).get_failure_response()
+
+            return CustomResponse(
+                general_message="Access Granted",
+                response=data.get("response"),
+            ).get_success_response()
+
+        except requests.exceptions.Timeout:
+            return CustomResponse(
+                general_message="Authentication server timeout"
+            ).get_failure_response()
+        except requests.exceptions.RequestException as e:
+            return CustomResponse(
+                general_message=f"Authentication server error: {str(e)}"
+            ).get_failure_response()
+
+
+class UserAuthenticationProxyAPI(APIView):
+    """
+    Proxy endpoint for email/password user authentication.
+    Forwards requests to the auth server and returns the response.
+    """
+
+    @extend_schema(tags=['Auth'], description="Create User Authentication Proxy.",
+        responses={200: inline_serializer("AuthUserAuthResponse", fields={
+            "hasError": s.BooleanField(default=False),
+            "statusCode": s.IntegerField(default=200),
+            "message": s.DictField(default={}),
+            "response": s.DictField(
+                help_text="Upstream auth payload (access_token, refresh_token, user info, etc.)"
+            ),
+        })},
+    )
+    def post(self, request):
+        email = request.data.get("emailOrMuid")
+        password = request.data.get("password")
+
+        if not email or not password:
+            return CustomResponse(
+                general_message="Email and password are required"
+            ).get_failure_response()
+
+        try:
+            response = requests.post(
+                f"{AUTH_DOMAIN}/api/v1/auth/user-authentication/",
+                json={"emailOrMuid": email, "password": password},
+                headers={"Content-Type": "application/json"},
+                timeout=30,
+            )
+
+            data = response.json()
+
+            if data.get("hasError"):
+                return CustomResponse(
+                    general_message=data.get("message", {}).get("general", ["Authentication failed"])[0]
+                ).get_failure_response()
+
+            return CustomResponse(
+                general_message="Access Granted",
+                response=data.get("response"),
+            ).get_success_response()
+
+        except requests.exceptions.Timeout:
+            return CustomResponse(
+                general_message="Authentication server timeout"
+            ).get_failure_response()
+        except requests.exceptions.RequestException as e:
+            return CustomResponse(
+                general_message=f"Authentication server error: {str(e)}"
+            ).get_failure_response()
+
+
+class RefreshTokenProxyAPI(APIView):
+    """
+    Proxy endpoint for token refresh.
+    Forwards requests to the auth server and returns fresh tokens.
+    """
+
+    @extend_schema(tags=['Auth'], description="Create Refresh Token Proxy.",
+        responses={200: inline_serializer("AuthRefreshTokenResponse", fields={
+            "hasError": s.BooleanField(default=False),
+            "statusCode": s.IntegerField(default=200),
+            "message": s.DictField(default={}),
+            "response": s.DictField(
+                help_text="Upstream token payload (new access_token, refresh_token, expiry, etc.)"
+            ),
+        })},
+    )
+    def post(self, request):
+        refresh_token = request.data.get("refreshToken") or request.data.get("refresh_token")
+
+        if not refresh_token:
+            return CustomResponse(
+                general_message="Refresh token is required"
+            ).get_failure_response()
+
+        try:
+            response = requests.post(
+                f"{AUTH_DOMAIN}/api/v1/auth/get-access-token/",
+                json={"refreshToken": refresh_token},
+                headers={"Content-Type": "application/json"},
+                timeout=30,
+            )
+
+            data = response.json()
+
+            if data.get("hasError"):
+                return CustomResponse(
+                    general_message=data.get("message", {}).get("general", ["Token refresh failed"])[0]
+                ).get_failure_response()
+
+            return CustomResponse(
+                response=data.get("response"),
+            ).get_success_response()
+
+        except requests.exceptions.Timeout:
+            return CustomResponse(
+                general_message="Authentication server timeout"
+            ).get_failure_response()
+        except requests.exceptions.RequestException as e:
+            return CustomResponse(
+                general_message=f"Authentication server error: {str(e)}"
+            ).get_failure_response()

api/auth/urls.py

@@ -0,0 +1,10 @@
+from django.urls import path
+
+from . import auth_views
+
+urlpatterns = [
+    path('user-authentication/', auth_views.UserAuthenticationProxyAPI.as_view(), name='user_auth_proxy'),
+    path('google-mobile/', auth_views.GoogleMobileAuthProxyAPI.as_view(), name='google_mobile_proxy'),
+    path('apple-mobile/', auth_views.AppleMobileAuthProxyAPI.as_view(), name='apple_mobile_proxy'),
+    path('refresh-token/', auth_views.RefreshTokenProxyAPI.as_view(), name='refresh_token_proxy'),
+]

api/calendar/__init__.py

@@ -0,0 +1 @@
+# Calendar API module