Commit Graph

11 Commits

Author SHA1 Message Date
Shayan Azadi
e8423facaa Fix admin login 500 when clients omit the trailing slash.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-17 18:50:14 +03:30
26b83dabac entry 2026-07-25 12:25:28 +00:00
Shayan Azadi
1dd0bcac90 Merge Shayan: admin login, permissions, and docs into deployed master 2026-07-22 22:54:59 +03:30
Shayan Azadi
149fb614b0 Fix permissions and prepare admin login for deploy
- Admin-only: list contacts, create/edit campaigns and compositions
- Public: submit contact, mine contacts by email/phone, read campaigns/compositions
- Add admin_response field on ContactUs
- Update Postman base_url to https://zoneco.org/api with token save

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-22 22:52:44 +03:30
4448f550f4 Allow zoneco.org hosts in Dockerfile ALLOWED_HOSTS for nginx routing. 2026-07-18 13:03:55 +03:30
Shayan Azadi
97127d5772 Keep a single README and remove extra markdown docs
EOF

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-16 17:32:04 +03:30
Shayan Azadi
50c9cf613f Add admin login API and remove hardcoded secrets
- Add token-based admin login/logout/me endpoints
- Bootstrap admin from ADMIN_USERNAME/ADMIN_PASSWORD in Docker entrypoint
- Read ALLOWED_HOSTS and CORS from env only (no hardcoded server IPs)
- Keep docs/Postman/tests free of real credentials
- Cover login and auth flows with 31 local API tests

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-16 17:29:47 +03:30
8d4307bdaa Update backend Dockerfile for panel.zoneco.org and fix package permissions. 2026-07-08 02:42:48 +03:30
Shayan Azadi
7e71d922d3 Add multi-image compositions, docker setup, tests, and docs
- Add CompositionImage model with multi-image upload and main image flag
- Add composition endpoints: add-images, set-main-image, delete image, by-created-at filter
- Make contact-us by_category public
- Add 24 API tests covering all endpoints
- Add Dockerfile, docker-compose, entrypoint and docker docs
- Add Persian API docs and update README and Postman collection

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-24 13:43:34 +03:30
Shayan Azadi
cc2e082d53 fix: contact-us 405 - ALLOWED_HOSTS and CORS for production API 2026-02-21 12:31:40 +03:30
Shayan Azadi
3e100bae99 Initial commit: Django backend with Campaign, ContactUs, and Composition APIs 2025-12-17 15:58:07 +03:30