Dev challenge

DISHA SEJPAL — Tue, 29 Apr 2025 14:27:27 +0000

This is a submission for the Permit.io Authorization Challenge: Permissions Redefined

What I Built

In many applications, managing user permissions can become cumbersome when hardcoded inside the app’s logic. Permissions are usually defined in a monolithic way, leading to messy code, difficulty in updates, and sometimes security vulnerabilities.

By integrating Permit.io for authorization:
1. Centralized Permission Management: Permissions are stored and managed externally, making it easy to change or scale without modifying the app’s core logic.
2. Dynamic Role Management: Roles and permissions can be adjusted through Permit.io’s dashboard, allowing for quick changes without touching code.
3. Improved Security: Fine-grained policies ensure users can only access resources relevant to their role, helping prevent unauthorized actions.

Demo

https://github.com/Disha-Se/Task-manager-

Project Repo

My Journey

Step 1: Project Setup

I started by setting up a FastAPI project with login and task routes. The API uses mock data for users and roles and handles authentication via a simple POST login endpoint.

Step 2: Integrating Permit.io

Using the Permit.io Python SDK, I added authorization checks using

permit.check(user=role, action="create", resource="task")

The permit.check() function queries Permit.io to decide if a user role is allowed to perform an action on a resource.

Challenge: At first, I forgot to use async for permit.check(), which caused an error since the SDK uses async calls.
Solution: Made all route handlers using authorization async and added await.

Step 3: Adding Frontend

I created a simple frontend with HTML, CSS, and JavaScript:
• Login screen
• Task creation form
• Task list display

This frontend uses fetch() to call the FastAPI endpoints and includes a custom header (X-Username) for tracking user identity.

Challenge: The frontend needed CORS setup and static file serving.
Solution: Mounted StaticFiles from FastAPI and placed all HTML/CSS/JS in a frontend/ directory.

Step 4: Deployment Preparation

To make deployment smooth, I added:
• A render.yaml file for Render.com
• Instructions to connect the repo and deploy with one click

Challenge: FastAPI apps require ports and environment variables configured.
Solution: Used uvicorn with port 10000 and added an environment variable for PERMIT_API_KEY.

Using Permit.io for Authorization

Login to Permit (opens browser)

permit login

Initialize the project (run this in the project directory)

permit init --project task-manager --env dev

Create roles

permit roles:create admin
permit roles:create user

Create resource

permit resources:create task

Add actions to resource

permit actions:add task create
permit actions:add task view

Grant permissions

permit permissions:grant admin create task
permit permissions:grant admin view task
permit permissions:grant user create task
permit permissions:grant user view task

Push changes to Permit

permit push

Introducing Goal Buddy: Your Companion for Achieving Personal Goals

DISHA SEJPAL — Thu, 24 Apr 2025 11:25:32 +0000

Hello DEV Community! 👋

I'm excited to share my latest project: Goal Buddy — a web application designed to help users set, track, and achieve their personal goals while staying organized and motivated.

🎯 What is Goal Buddy?
Goal Buddy is a productivity tool that offers:

Goal Tracking: Set, update, and monitor your goals with progress check-ins.

Journal Entries: Reflect on your journey with daily journaling features.

Motivational Quotes: Receive a new inspirational quote each day to keep your spirits high.

Dark Mode: A sleek dark mode for comfortable use during late-night sessions.

🛠️ Tech Stack
Frontend: React

Backend: Firebase Firestore

Authentication: Firebase Authentication with Google Sign-In

Additional Features: Simple AI logic for daily motivational quotes

🔗 Live Demo & Source Code
Check out the live demo and explore the source code on GitHub:

👉 https://github.com/Disha-Se/GoalBuddy

🙋 About Me
I'm a passionate developer who enjoys building tools that enhance productivity and personal growth. Goal Buddy is a culmination of my interests in web development and self-improvement. I'm always eager to learn and collaborate on exciting projects.

Let's connect!

www.linkedin.com/in/disha-s-963626260

https://github.com/Disha-Se

DEV Community: DISHA SEJPAL