helloakn/django-crud-and-jwt

using jwt token in django. product CRUD routes will be protected with jwt.

Simple Django CRUD and JWT

Table Of contents

• (1) Story and API Flow
  • (1.1) Story
  • (1.2) API Flow
    • (1.2.1) Flow Diagram
    • (1.2.2) API Request Method and Access Function
• (2) Monolith Build Image And Create Container
  • (2.1) Build Image
  • (2.2) Create Container
• (3) MicroService Build Image and Create Containers
  • (3.1) Architecture for local
  • (3.2) Crete network
  • (3.3) Build images
  • (3.4) Create Containers
• (4) Manual Test with CURL
  • (4.1) Login and Renew Token (refresh token)
    • (4.1.1) login
    • (4.1.2) Renew Token (refresh token)
  • (4.2) Product CRUD
    • (4.2.1) Create Product
    • (4.2.2) Get Product List
    • (4.2.3) Get Product Detail
    • (4.2.4) Update Product

---

(back to top)

(1) Story and Program Flow

(1.2) Story

Our task is to create/update/delete/Get/list the product(s).
However we need JWT to protect all our product api routes,
so we will have to create two services.

• (1) login service to grant access token and refresh token
• (2) token refresh service to generate new access token

(1.2) API Flow

Program Flow is as the following diagram.

(1.2.1) Flow Diagram

(1.2.2) API Request Method and Access Function

HTTP Request Method	Django Access Function	Remark
GET	get	get record(s) function
POST	post	create function
PATCH	patch	update function
DELETE	delete	delete function

(back to top)

(2) Monolith Build Image And Create Container

(2.1) Build Image

docker build -t crudtest:monolith --no-cache  -f ./dockerize/Dockerfile .

(2.2) Create Container

docker run -i -t -d --name container001 \
-p 9000:80 \
--privileged crudtest:monolith

---

(back to top)

(3) MicroService Build Image and Create Containers

(3.1) Architecture for local

(3.2) Crete network

docker network create \
  --driver=bridge \
  --subnet=172.2.0.0/16 \
  --ip-range=172.2.0.0/24 \
  crudtestnetwork

(3.3) Build images

create database image

docker build -t crudtest:db \
  --build-arg db_host=localhost \
  --build-arg db_port=3306 \
  --build-arg  db_user=root \
  --build-arg db_password=password \
  --build-arg db_name=crudtest \
  --no-cache -f ./dockerize/db/DFdb .

create authservice image

docker build  -t crudtest:authservice \
    --build-arg db_host=172.2.0.10 \
    --build-arg  db_user=root \
    --build-arg db_password=password \
    --build-arg db_name=crudtest \
    --no-cache -f ./dockerize/DFauthservice .

create productservice image

docker build  -t crudtest:productservice \
    --build-arg db_host=172.2.0.10 \
    --build-arg  db_user=root \
    --build-arg db_password=password \
    --build-arg db_name=crudtest \
    --no-cache -f ./dockerize/DFproductservice .

create LoadBalancer Service image

docker build  -t crudtest:lb \
    --no-cache -f ./dockerize/DFlbservice .

(back to top)

(3.4) Create Containers

First we have to database container. for second, we will create service containers and link the database container from the services container. finally, we will create nginx load balancer and link the service contaienrs.

create database container

docker run -i -t -d --name databaseservice \
  --network=crudtestnetwork \
  --ip 172.2.0.10 \
  --privileged crudtest:db 

create authservice container

docker run -i -t -d --name authservice \
  --network=crudtestnetwork \
  --ip 172.2.0.20 \
  --link databaseservice:172.2.0.10 \
  --privileged crudtest:authservice

create productservice container

docker run -i -t -d --name productservice \
  --network=crudtestnetwork \
  --ip 172.2.0.30 \
  --link databaseservice:172.2.0.10 \
  --privileged crudtest:productservice

create loadbalancer service container

docker run -i -t -d --name lbservice \
  --network=crudtestnetwork \
  --ip 172.2.0.40 \
  -p 8000:80 \
  --link authservice:172.2.0.20 \
  --link productservice:172.2.0.30 \
  --privileged crudtest:lb

(back to top)

Clean the containers

docker rm $(docker stop $(docker ps -a -q))

clean the images

docker rmi $(docker images -q) -f

---

(back to top)

(4) Manual Test with CURL

login information

user name : admin  
password : 123456  

or generate with the following command

python3 manage.py createsuperuser

(4.1) Login and Renew Token (refresh token)

(4.1.1) login

curl \
  -X POST \
  -H "Content-Type: application/json" \
  -d '{"username": "admin", "password": "123456"}' \
  http://localhost:8000/api/auth/login

(4.1.2) Renew Token (refresh token)

You have to replace the refresh token with your own refresh token

curl \
  -X POST \
  -d '{"refresh":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNjUwOTQ4NzA3LCJpYXQiOjE2NTA5NDg0MDcsImp0aSI6IjY1ZDRkNjBlZDAwZTRmZGY5MzU4MmFlZmNjYzJmNGFiIiwidXNlcl9pZCI6MX0.ynhU6sWx7mgluxn5_6wZtMGlRTv15CX5J6DO-HRqlIk"}' \
  http://127.0.0.1:8000/api/auth/token/refresh

(back to top)

(4.2) Product CRUD

(4.2.1) Create Product

curl -X POST \
http://127.0.0.1:8000/api/product/  \
-H "Content-Type: application/json" \
-H "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNjUwOTUwODQzLCJpYXQiOjE2NTA5NTA1NDMsImp0aSI6IjVjNmVlNWQzMGY0YzQ1YmY4NDYxNTEyYjY1OTc0MGE0IiwidXNlcl9pZCI6MX0.4hrKHDXfaG_i-XuEF1TV64mjvlQ7HDbEfWzttMlEpww" \
-d "{\"product_name\":\"name\",\"product_price\":\"41\",\"product_quantity\":\"1\"}"

(4.2.2) Get Product List

You have to replace with your own "access token" , you can get it from login process.

curl -X GET \
-H "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNjUwOTQ5MDg3LCJpYXQiOjE2NTA5NDg3ODcsImp0aSI6ImU4NDg1MmY0N2FhYjQ0NjY5NmRkMzZiNGFiYWE2ZTc5IiwidXNlcl9pZCI6MX0.SSsOiz7gBFCuKkZFShDlewsnF_wteu9B8fW4UOnEg_8" \
http://127.0.0.1:8000/api/product/

(4.2.3) Get Product Detail

curl -X GET \
http://127.0.0.1:8000/api/product/1 \
-H "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNjUwOTUwMDEwLCJpYXQiOjE2NTA5NDk3MTAsImp0aSI6IjdjOTQxMTVkMDhlZjRiMWVhYzk2YzE5NjM2YzhlNTE5IiwidXNlcl9pZCI6MX0.BdlcdwrrWH609EPf4Bvx04oIdjG5IF7Fnw9zR-Q3M-I"

(4.2.4) Update Product

curl -X PATCH \
http://127.0.0.1:8000/api/product/1 \
-H "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNjUwOTQ4NzA3LCJpYXQiOjE2NTA5NDg0MDcsImp0aSI6IjY1ZDRkNjBlZDAwZTRmZGY5MzU4MmFlZmNjYzJmNGFiIiwidXNlcl9pZCI6MX0.ynhU6sWx7mgluxn5_6wZtMGlRTv15CX5J6DO-HRqlIk" \
-H 'Content-Type: application/json' -d '{"product_quantity":6}'

(back to top)