mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-10 12:16:49 +00:00
e94d69a524
django-login-required-middleware is dropped; Django 5.1+ ships the same middleware. The login page is already marked login_not_required by Django; email_otp gets the decorator, which replaces LOGIN_REQUIRED_IGNORE_VIEW_NAMES. The datasource still requires login. Existing settings.py files still name the old middleware. A system check (accounts.E002) stops migrate and the server until MIDDLEWARE uses Django's middleware, instead of an ImportError at startup; the README has the steps. A new matrix test walks every URL anonymously: everything outside a short allowlist (login pages, the OpenAPI docs) sends the visitor to the login page, and API views deny with 401/403. It passed with the old middleware first and passes unchanged now.
26 lines
523 B
Text
26 lines
523 B
Text
Django==5.2.17
|
|
django_bootstrap5==26.2
|
|
django-bootstrap-icons==0.9.0
|
|
django-otp==1.7.3
|
|
django-qr-code==4.2.0
|
|
django-auth-ldap==5.3.0
|
|
djangorestframework==3.17.2
|
|
drf-nested-routers==0.95.3
|
|
drf-spectacular[sidecar]==0.30.0
|
|
eventlet==0.41.2
|
|
gunicorn==26.2.0
|
|
libsass==0.23.0
|
|
libvirt-python>=9.0.0
|
|
lxml>=6.1
|
|
ldap3==2.9.1
|
|
markdown==3.10
|
|
paramiko==5.0.0
|
|
#psycopg2-binary
|
|
python-engineio==4.14.0
|
|
python-socketio==5.17.0
|
|
qrcode==8.2
|
|
tzdata
|
|
websockify==0.13.0
|
|
whitenoise==6.12.0
|
|
zipp==4.1.0
|
|
crypt-r>=3.13.0; python_version >= "3.13"
|