From 36226679c01d3dd6075939214befe2dbe858da3b Mon Sep 17 00:00:00 2001
From: Viswamedha Nalabotu <vxn217@student.bham.ac.uk>
Date: Thu, 18 Dec 2025 23:36:28 +0000
Subject: [PATCH 1/3] Added test data for reuse

---
 compose/prod/Dockerfile |  1 +
 compose/prod/start      |  1 +
 data/site/users.json    | 26 ++++++++++++++++++++++++++
 3 files changed, 28 insertions(+)
 create mode 100644 data/site/users.json

diff --git a/compose/prod/Dockerfile b/compose/prod/Dockerfile
index 74532df..2b5509f 100644
--- a/compose/prod/Dockerfile
+++ b/compose/prod/Dockerfile
@@ -37,6 +37,7 @@ RUN pip install --no-cache-dir -r prod.txt
 COPY manage.py manage.py
 COPY config config
 COPY apps apps
+COPY data data
 
 COPY --from=node /app/build ./build
 
diff --git a/compose/prod/start b/compose/prod/start
index 9ab4b83..6f2437d 100644
--- a/compose/prod/start
+++ b/compose/prod/start
@@ -6,5 +6,6 @@ set -o nounset
 
 python manage.py makemigrations
 python manage.py migrate
+python manage.py loaddata data/site/users.json
 python manage.py collectstatic --noinput
 exec /usr/local/bin/daphne -b 0.0.0.0 -p 8000 config.asgi:application
diff --git a/data/site/users.json b/data/site/users.json
new file mode 100644
index 0000000..8f744f7
--- /dev/null
+++ b/data/site/users.json
@@ -0,0 +1,26 @@
+[
+{
+    "model": "users.user",
+    "pk": 1,
+    "fields": {
+        "password": "pbkdf2_sha256$1000000$nMVGqZDLEC02Wdtbe3nPDy$78r4VTfd5TqOsQLliKOpLjtZk5U/GRm3cs7PZ/4F7pc=",
+        "last_login": "2025-12-18T17:25:21.306Z",
+        "is_superuser": false,
+        "created_at": "2025-12-07T15:21:09.891Z",
+        "updated_at": "2025-12-07T15:28:16.772Z",
+        "uuid": "b85095eb-36fe-4061-9871-f5183b536963",
+        "email_address": "admin@gmail.com",
+        "first_name": "a",
+        "last_name": "a",
+        "date_of_birth": "2003-12-14",
+        "bio": "",
+        "timezone": "UTC",
+        "avatar_url": "",
+        "is_active": true,
+        "is_staff": true,
+        "role": "manager",
+        "groups": [],
+        "user_permissions": []
+    }
+}
+]

From 3763b2a3d37c77bc805c52bffc41e99d039f1998 Mon Sep 17 00:00:00 2001
From: Viswamedha Nalabotu <vxn217@student.bham.ac.uk>
Date: Thu, 18 Dec 2025 23:58:03 +0000
Subject: [PATCH 2/3] Updated data to new pass

---
 data/site/users.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/data/site/users.json b/data/site/users.json
index 8f744f7..854def4 100644
--- a/data/site/users.json
+++ b/data/site/users.json
@@ -3,22 +3,22 @@
     "model": "users.user",
     "pk": 1,
     "fields": {
-        "password": "pbkdf2_sha256$1000000$nMVGqZDLEC02Wdtbe3nPDy$78r4VTfd5TqOsQLliKOpLjtZk5U/GRm3cs7PZ/4F7pc=",
-        "last_login": "2025-12-18T17:25:21.306Z",
+        "password": "pbkdf2_sha256$1000000$3z9wkVXkAJggKwrXvhUJJc$swijjGwX6JsYjRvuNECvPxqG8BqMydUjaz1FemMWVL8=",
+        "last_login": null,
         "is_superuser": false,
-        "created_at": "2025-12-07T15:21:09.891Z",
-        "updated_at": "2025-12-07T15:28:16.772Z",
-        "uuid": "b85095eb-36fe-4061-9871-f5183b536963",
-        "email_address": "admin@gmail.com",
+        "created_at": "2025-12-18T23:51:25.301Z",
+        "updated_at": "2025-12-18T23:51:25.301Z",
+        "uuid": "5cbef8ca-a24d-4f88-b403-0d53f6a239e6",
+        "email_address": "a@gmail.com",
         "first_name": "a",
         "last_name": "a",
-        "date_of_birth": "2003-12-14",
+        "date_of_birth": "2001-01-01",
         "bio": "",
         "timezone": "UTC",
         "avatar_url": "",
         "is_active": true,
         "is_staff": true,
-        "role": "manager",
+        "role": "employee",
         "groups": [],
         "user_permissions": []
     }

From 321ca3bf6aafba17a7969879b996292cd16a348c Mon Sep 17 00:00:00 2001
From: Viswamedha Nalabotu <vxn217@student.bham.ac.uk>
Date: Fri, 19 Dec 2025 00:28:47 +0000
Subject: [PATCH 3/3] Added csrf trusted origins setting

---
 config/__pycache__/__init__.cpython-313.pyc | Bin 222 -> 222 bytes
 config/__pycache__/settings.cpython-313.pyc | Bin 5838 -> 5838 bytes
 config/settings.py                          |   3 +++
 3 files changed, 3 insertions(+)

diff --git a/config/__pycache__/__init__.cpython-313.pyc b/config/__pycache__/__init__.cpython-313.pyc
index b7eb80b6edc23855bb7c771a43149fee73c4c699..dcdc928d85fbde3094d7a9e2bf4af9680d81eb97 100644
GIT binary patch
delta 21
bcmcb|c#o0yGcPX}0}!-aamsX=$a@h0MkWTC

delta 21
bcmcb|c#o0yGcPX}0}wb>T4p*<<h=+0L01Lv

diff --git a/config/__pycache__/settings.cpython-313.pyc b/config/__pycache__/settings.cpython-313.pyc
index cde58dd71ae7ae632a35224e0e8fa930ebb6f93b..b215aa6d149dbd45d631ab2c296a23008240bfa9 100644
GIT binary patch
delta 19
ZcmX@7drp_@GcPX}0}!-a*~oQ73;;e<1_b~B

delta 19
ZcmX@7drp_@GcPX}0}vGL*vNH63;;b`1=j!o

diff --git a/config/settings.py b/config/settings.py
index 10d31f6..1e0a0a8 100644
--- a/config/settings.py
+++ b/config/settings.py
@@ -170,5 +170,8 @@ if origins:=os.getenv('DJANGO_CORS_ALLOWED_ORIGINS'):
     CORS_ALLOWED_ORIGINS = origins.split(',')
 CORS_ALLOW_CREDENTIALS = True
 
+if trusted_origins:=os.getenv('DJANGO_CSRF_TRUSTED_ORIGINS'):
+    CSRF_TRUSTED_ORIGINS = [origin.strip() for origin in trusted_origins.split(',')]
+
 if DEBUG:
     SECURE_CROSS_ORIGIN_OPENER_POLICY = None