Writing JSON based REST APIs in Pure Django without using DRF or tastypie.

Gaurav Jain — Tue, 16 Jun 2020 06:33:02 +0000

I was seeing a lot of posts on Facebook, Reddit, LinkedIn, etc about how people are struggling with writing APIs in Django. Moreover, introducing DRF on top of the Django to write APIs, was, kind of, overwhelming for beginners. So I decided to write a post on the same for absolute beginners keeping in mind that that they have ZERO experience with Django.

In this article, I'm explaining how you can write pure JSON based RESTful APIs in Django without depending on any other third party library or framework such as DRF, Tastypie, etc.

If you are a beginner and read this post, I'd appreciate if you provide me with feedback to add or explain things in more details to improve this article.

https://gauravvjn.medium.com/build-json-apis-in-django-without-drf-or-any-other-library-2c22af6105d7

Security in a Django Application

Gaurav Jain — Fri, 05 Jun 2020 05:05:54 +0000

I have seen experienced Django developers who don't have a full understanding of SECRET_KEY setting.
Similarly, there are a couple of other things that most people seem to be either unaware of or ignore it.

Security is one of the most critical aspects of any App, yet no one gives due priority to it.
Based on my experience so far I have compiled top common web vulnerabilities and techniques to prevent them in a Django App.

These vulnerabilities are -

SQL Injection
CRLF Injection
Timing Attack
Clickjacking Attack
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
HTTP Strict Transport Security (SSL)
Session Hijacking
Denial of Service (DoS)
Miscellaneous

Django provides the guard against these vulnerabilities out of the box but are not enabled by default

In the post, I describe all the steps you need to follow to make your application more secure.

You can access the post here - https://gauravvjn.medium.com/secrets-of-security-in-a-django-application-0dfb41957eb0

DEV Community: Gaurav Jain

Writing JSON based REST APIs in Pure Django without using DRF or tastypie.

Security in a Django Application