refer to https://codecov.io/

As titled

As titled. For a better overview on how users use this project.

Maybe opentelemetry or sentry.

As a project based on django, it'd better introduce django-environ

As titled

Some goodies that in history mode.
https://stackoverflow.com/questions/25674013/advantages-disadvantages-of-html5-mode-vs-hash-mode-angularjs

And I think it's pretty low priority

It's time to keep jwt token in httpOnly cookie for website

Take a close look at jazzband/djangorestframework-simplejwt#157

Try installing https://github.com/AtuzSolution/django-rest-framework-simplejwt/commits/jwt_cookie

• Some test procedures:

1. first visit / in browser
2. open console in the browser and

        fetch("/api/v1/guest", {
            "headers": {
                "accept": "application/json,text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9",
                "accept-language": "en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7,zh-TW;q=0.6",
                "cache-control": "no-cache",
                "pragma": "no-cache",
                "sec-fetch-dest": "document",
                "sec-fetch-mode": "navigate",
                "sec-fetch-site": "none",
                "sec-fetch-user": "?1",
                "upgrade-insecure-requests": "1"
            },
            "referrerPolicy": "no-referrer-when-downgrade",
            "body": null,
            "method": "GET",
            "mode": "cors",
            "credentials": "include"
        }).then(resp => {console.info(resp, resp.json())});

1. you will see the cookies in Tab Application of the browser debugger
2. event the devServer (change the api to dev-api) could proxy the cookie

Including pytest, pytest-django, pytest-factoryboy

Focus on fixtures first

As titled

As titled.

With Github Webhook maybe

Expired access token

• detail: Given token not valid for any token type
• code: token_not_valid
• status_code: 403

Invalid access token

the same as expired

• detail: Given token not valid for any token type
• code: token_not_valid
• status_code: 403

Unauthorized access with access

• detail: You do not have permission to perform this action.
• status_code: 403

Expired refresh token

• detail: Token is invalid or expired
• code: token_not_valid
• status_code: 401

Blacklist-ed refresh

• detail: Token is blacklisted
• code: token_not_valid
• status_code: 401

Invalid refresh token

• detail: Token is invalid or expired
• code: token_not_valid
• status_code: 401